2004-01-30 10:26:04 +00:00
< ? php
/*
$Id $
This code is part of LDAP Account Manager ( http :// www . sourceforge . net / projects / lam )
2004-01-31 10:35:34 +00:00
Copyright ( C ) 2003 - 2004 Roland Gruber
2004-01-30 10:26:04 +00:00
This program is free software ; you can redistribute it and / or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation ; either version 2 of the License , or
( at your option ) any later version .
This program is distributed in the hope that it will be useful ,
but WITHOUT ANY WARRANTY ; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
GNU General Public License for more details .
You should have received a copy of the GNU General Public License
along with this program ; if not , write to the Free Software
Foundation , Inc . , 59 Temple Place , Suite 330 , Boston , MA 02111 - 1307 USA
Interface between modules and other parts of LAM .
*/
2004-02-10 19:59:41 +00:00
/* We have to include all modules
* before start session
*/
// Get Lampath, needed 4 includes
$stay = 0 ;
$relative = '' ;
while ( $stay < 7 ) {
if ( is_dir ( $relative . 'lib/modules' )) {
$dir = opendir ( $relative . 'lib/modules' );
while ( $entry = readdir ( $dir ))
if ( is_file ( $relative . 'lib/modules/' . $entry )) include_once ( $relative . 'lib/modules/' . $entry );
$stay = 10 ;
}
else {
$stay ++ ;
$relative .= '../' ;
}
}
2004-01-30 10:26:04 +00:00
// returns the alias name of a module
function getModuleAlias ( $name ) {
2004-02-08 15:57:55 +00:00
$eval = '$return = ' . $name . '::get_alias();' ;
2004-02-07 18:34:26 +00:00
eval ( $eval );
return $return ;
}
2004-01-30 10:26:04 +00:00
// returns a hash array (module name => dependencies) of all user module dependencies
// dependencies contains an array with two sub arrays: depends, conflicts
2004-01-31 10:35:34 +00:00
// the elements of depends are either module names or an array of module names (OR-case)
// the elements of conflicts are module names
2004-02-08 15:57:55 +00:00
function getModulesDependencies ( $scope ) {
2004-02-07 18:34:26 +00:00
// scope = suer, group, host, ....
// get module names.
$dir = opendir ( '../../lib/modules' );
while ( $entry = readdir ( $dir ))
if ( is_file ( '../../lib/modules/' . $entry )) {
2004-02-08 15:57:55 +00:00
$entry = substr ( $entry , 0 , strpos ( $entry , '.' ));
$eval = '$module = ' . $entry . " ::get_dependencies( " . $scope . " ); " ;
2004-02-07 18:34:26 +00:00
eval ( $eval );
2004-02-08 15:57:55 +00:00
if ( $module != - 1 ) $return [ $entry ] = $module ;
2004-02-07 18:34:26 +00:00
}
return $return ;
}
2004-01-30 10:26:04 +00:00
// returns an array with all available user module names
2004-02-07 18:34:26 +00:00
function getAvailableModules ( $scope ) {
// scope = suer, group, host, ....
// get module names.
$dir = opendir ( '../../lib/modules' );
while ( $entry = readdir ( $dir ))
if ( is_file ( '../../lib/modules/' . $entry )) {
2004-02-08 15:57:55 +00:00
$entry = substr ( $entry , 0 , strpos ( $entry , '.' ));
$eval = '$module = ' . $entry . " ::get_dependencies( " . $scope . " ); " ;
2004-02-07 18:34:26 +00:00
eval ( $eval );
2004-02-08 12:06:23 +00:00
if ( $module != - 1 ) $return [] = getModuleAlias ( $entry );
2004-02-07 18:34:26 +00:00
}
return $return ;
}
2004-02-08 15:57:55 +00:00
function getProfileOptions ( $scope , $post ) {
// type = user, group, host, ...
if ( ! isset ( $_SESSION [ 'profile_account' ])) {
// create new object
$_SESSION [ 'profile_account' ] = new accountContainer ( $scope , 'profile_account' );
$_SESSION [ 'profile_account' ] -> new_account ();
}
return $_SESSION [ 'profile_account' ] -> display_profile ( $post );
}
function checkProfileOptions ( $scope , $post ) {
// type = user, group, host, ...
if ( ! isset ( $_SESSION [ 'profile_account' ])) {
// create new object
$_SESSION [ 'profile_account' ] = new accountContainer ( $scope , 'profile_account' );
$_SESSION [ 'profile_account' ] -> new_account ();
}
return $_SESSION [ 'profile_account' ] -> process_profile ( $post );
}
2004-02-07 18:34:26 +00:00
class accountContainer {
// Constructor
function accountContainer ( $type , $base ) {
/* Set the type of account . Valid
* types are : user , group , host
*/
// Check input variable
if ( ! is_string ( $type )) trigger_error ( _ ( 'Argument of accountContainer must be string.' ), E_USER_ERROR );
if ( ! is_string ( $base )) trigger_error ( _ ( 'Argument of accountContainer must be string.' ), E_USER_ERROR );
// *** fixme use global variable to determine allowed types
$allowed_types = array ( 'user' , 'group' , 'host' , 'domain' );
if ( ! in_array ( $type , $allowed_types )) trigger_error ( _ ( 'Account type not recognized.' ), E_USER_ERROR );
$this -> type = $type ;
$this -> base = $base ;
// Name of variables in session
$this -> ldap = 'ldap' ;
$this -> config = 'config' ;
$this -> cache = 'cache' ;
$this -> header2 = 'header' ;
$this -> module [ 'main' ] = new main ( $this -> base );
return 0 ;
}
/* Array of all used attributes
* Syntax is attribute => array ( objectClass => MUST or MAY , ... )
*/
var $attributes ;
/* This variale stores the type
* of account . Current unix , group , host are supported
*/
2004-02-08 15:57:55 +00:00
var $scope ;
2004-02-07 18:34:26 +00:00
var $ldap ; // This is a reference to the ldap class in session
var $config ; // This is a reference to the config class in session
// Localized part of HTML-Header
var $header2 ;
var $module ; // This is an array with all module objects
// DN of the account
var $dn ;
var $dn_orig ;
// this are stores the module order
var $order ;
// name of accountContainer so we can read other classes in accuontArray
var $base ;
/* Get the type of account . Valid
* types are : user , group , host
*/
function get_type () {
return $this -> type ;
}
/* This function asks $this -> module [ 'main' ]
* what to do next
*/
function continue_main ( $post ) {
if ( $this -> module [ 'main' ] -> subpage == '' ) $this -> module [ 'main' ] -> subpage = 'attributes' ;
if ( $post [ 'form_main_reset' ]) {
$this -> load_account ( $this -> dn_orig );
}
else {
$function = '$result = $this->module[$this->order[$this->module[\'main\']->current_page]]->proccess_' . $this -> module [ 'main' ] -> subpage . '($post);' ;
eval ( $function );
}
if ( is_string ( $result )) $this -> module [ 'main' ] -> subpage = $result ;
if ( is_int ( $result ))
for ( $i = 0 ; $i < count ( $this -> order ); $i ++ )
if ( $post [ 'form_main_' . $this -> order [ $i ]]) {
$this -> module [ 'main' ] -> current_page = $i ;
$this -> module [ 'main' ] -> subpage = 'attributes' ;
}
// Write HTML-Code
echo $_SESSION [ $this -> header2 ];
echo " <title> " ;
if ( $this -> dn_orig != '' ) echo _ ( " Modify Account " );
else echo _ ( " Create new Account " );
echo " </title> \n " ;
echo " <link rel= \" stylesheet \" type= \" text/css \" href= \" ../../style/layout.css \" > \n " ;
echo " </head><body> \n " ;
2004-02-10 20:18:00 +00:00
echo " <form action= \" edit.php \" method= \" post \" > \n " ;
2004-02-07 18:34:26 +00:00
// Display errir-messages
if ( is_array ( $result ))
foreach ( $result as $result2 )
if ( is_array ( $result2 ))
for ( $i = 0 ; $i < sizeof ( $result2 ); $i ++ ) StatusMessage ( $result2 [ $i ][ 0 ], $result2 [ $i ][ 1 ], $result2 [ $i ][ 2 ]);
// Create left module-menu
echo " <table border=0 width= \" 100% \" > \n <tr><td valign= \" top \" width= \" 15% \" > " ;
echo " <table><tr> " ;
echo " <td><fieldset class= \" " . $this -> type . " edit-dark \" ><legend class= \" " . $this -> type . " edit-bright \" ><b> " ;
echo _ ( 'Please select page:' );
echo " </b></legend> \n " ;
// Loop for module
for ( $i = 0 ; $i < count ( $this -> order ); $i ++ ) {
if ( $this -> order [ $i ] == $this -> order [ $this -> module [ 'main' ] -> current_page ] || ! $this -> module [ $this -> order [ $i ]] -> module_ready () ) {
// print disabled button
echo " <input name= \" form_main_ " . $this -> order [ $i ] . " \" type= \" submit \" value= \" " ;
echo $this -> module [ $this -> order [ $i ]] -> get_alias ();
echo " \" disabled> \n <br> " ;
}
else {
// print normal button
echo " <input name= \" form_main_ " . $this -> order [ $i ] . " \" type= \" submit \" value= \" " ;
echo $this -> module [ $this -> order [ $i ]] -> get_alias ();
echo " \" > \n <br> " ;
}
}
if ( $this -> dn_orig != '' ) echo " <input name= \" form_main_reset \" type= \" submit \" value= \" " . _ ( 'Reset changes' ) . " \" ><br> \n " ;
echo " </fieldset></td></tr> \n " ;
echo " </table></td> \n <td> " ;
echo " <td><fieldset class= \" " . $this -> type . " edit-dark \" ><legend class= \" " . $this -> type . " edit-bright \" ><b> " ;
echo $this -> module [ $this -> order [ $this -> module [ 'main' ] -> current_page ]] -> get_alias ();
echo " </b></legend> \n " ;
// display html-code from mdule
$function = '$result = $this->module[$this->order[$this->module[\'main\']->current_page]]->display_html_' . $this -> module [ 'main' ] -> subpage . '($post);' ;
eval ( $function );
$this -> parse_html ( $this -> order [ $this -> module [ 'main' ] -> current_page ], $result );
// Display rest of html-page
echo " </fieldset> \n " ;
echo " </td></tr></table> \n " ;
echo " </form> \n " ;
echo " </body> \n " ;
echo " </html> \n " ;
return 0 ;
}
function parse_html ( $module , $input ) {
if ( is_array ( $input )) {
echo " <table> \n " ;
for ( $i = 0 ; $i < count ( $input ); $i ++ ) {
// Draw column
echo " <tr> \n " ;
for ( $j = 0 ; $j < count ( $input [ $i ]); $j ++ ) {
// draw raw
switch ( $input [ $i ][ $j ][ 'kind' ]) {
case 'text' :
echo " <td " ;
if ( $input [ $i ][ $j ][ 'td' ][ 'valign' ] != '' ) echo ' valign="' . $input [ $i ][ $j ][ 'td' ][ 'valign' ] . '"' ;
echo " > \n " ;
echo $input [ $i ][ $j ][ 'text' ] . " </td> \n " ;
break ;
case 'input' :
echo " <td " ;
if ( $input [ $i ][ $j ][ 'td' ][ 'valign' ] != '' ) echo ' valign="' . $input [ $i ][ $j ][ 'td' ][ 'valign' ] . '"' ;
echo " > \n " ;
$output = " <input " ;
if ( $input [ $i ][ $j ][ 'name' ] != '' ) $output .= ' name="' . $input [ $i ][ $j ][ 'name' ] . '"' ;
if ( $input [ $i ][ $j ][ 'type' ] != '' ) $output .= ' type="' . $input [ $i ][ $j ][ 'type' ] . '"' ;
if ( $input [ $i ][ $j ][ 'size' ] != '' ) $output .= ' size="' . $input [ $i ][ $j ][ 'size' ] . '"' ;
if ( $input [ $i ][ $j ][ 'maxlength' ] != '' ) $output .= ' maxlength="' . $input [ $i ][ $j ][ 'maxlength' ] . '"' ;
if ( $input [ $i ][ $j ][ 'value' ] != '' ) $output .= ' value="' . $input [ $i ][ $j ][ 'value' ] . '"' ;
if ( $input [ $i ][ $j ][ 'disabled' ]) $output .= ' disabled' ;
if ( $input [ $i ][ $j ][ 'checked' ]) $output .= ' checked' ;
$output .= " ></td> \n " ;
echo $output ;
break ;
case 'fieldset' :
echo " <td " ;
if ( $input [ $i ][ $j ][ 'td' ][ 'valign' ] != '' ) echo ' valign="' . $input [ $i ][ $j ][ 'td' ][ 'valign' ] . '"' ;
echo " > \n " ;
echo " <fieldset> \n " ;
if ( $input [ $i ][ $j ][ 'legend' ] != '' ) echo " <legend> " . $input [ $i ][ $j ][ 'legend' ] . " </legend> \n " ;
$this -> parse_html ( $module , $input [ $i ][ $j ][ 'value' ]);
echo " </fieldset> \n " ;
break ;
case 'select' :
if ( ! is_array ( $input [ $i ][ $j ][ 'options' ])) $input [ $i ][ $j ][ 'options' ] = array ( $input [ $i ][ $j ][ 'options' ] );
if ( ! is_array ( $input [ $i ][ $j ][ 'options_selected' ])) $input [ $i ][ $j ][ 'options_selected' ] = array ( $input [ $i ][ $j ][ 'options_selected' ] );
echo " <td " ;
if ( $input [ $i ][ $j ][ 'td' ][ 'valign' ] != '' ) echo ' valign="' . $input [ $i ][ $j ][ 'td' ][ 'valign' ] . '"' ;
echo " > \n " ;
echo " <select name= \" " . $input [ $i ][ $j ][ 'name' ] . '"' ;
if ( $input [ $i ][ $j ][ 'multiple' ]) echo ' multiple' ;
if ( $input [ $i ][ $j ][ 'size' ]) echo ' size="' . $input [ $i ][ $j ][ 'size' ] . '"' ;
echo " > \n " ;
// merge both option arrays and sort them.
$options = array_merge ( $input [ $i ][ $j ][ 'options' ], $input [ $i ][ $j ][ 'options_selected' ] );
$options = array_unique ( $options );
sort ( $options , SORT_NUMERIC );
foreach ( $options as $option ) {
if ( $option != '' ) {
if ( in_array ( $option , $input [ $i ][ $j ][ 'options_selected' ])) echo " <option selected> " . $option . " </option> \n " ;
else echo " <option> " . $option . " </option> \n " ;
}
}
echo " </select></td> \n " ;
break ;
case 'table' :
echo " <td " ;
if ( $input [ $i ][ $j ][ 'td' ][ 'valign' ] != '' ) echo ' valign="' . $input [ $i ][ $j ][ 'td' ][ 'valign' ] . '"' ;
echo " > \n " ;
$this -> parse_html ( $module , $input [ $i ][ $j ][ 'value' ]);
echo " </td> \n " ;
break ;
case 'help' :
echo " <td " ;
if ( $input [ $i ][ $j ][ 'td' ][ 'valign' ] != '' ) echo ' valign="' . $input [ $i ][ $j ][ 'td' ][ 'valign' ] . '"' ;
echo " > \n " ;
echo " <a href=../help.php?module= $module &item= " . $input [ $i ][ $j ][ 'value' ] . " > " . _ ( 'Help' ) . " </a></td> \n " ;
break ;
case 'message' :
2004-02-09 18:11:01 +00:00
echo " <td " ;
if ( $input [ $i ][ $j ][ 'td' ][ 'valign' ] != '' ) echo ' valign="' . $input [ $i ][ $j ][ 'td' ][ 'valign' ] . '"' ;
echo " > \n " ;
2004-02-07 18:34:26 +00:00
StatusMessage ( $input [ $i ][ $j ][ 'type' ], $input [ $i ][ $j ][ 'headline' ], $input [ $i ][ $j ][ 'text' ]);
2004-02-09 18:11:01 +00:00
echo " </td> \n " ;
2004-02-07 18:34:26 +00:00
break ;
default :
echo " <td>Unrecognized type: " . $input [ $i ][ $j ][ 'kind' ] . " </td> \n " ;
break ;
}
}
echo " </tr> \n " ;
}
}
echo " </table> \n " ;
}
/* Add attributes to variable . Syntax is array ( attribute = array ( objectClass1 => MUST | MAX , objectClass2 => MUST | MAY ), ... )
*/
function add_attributes ( $objectClass ) {
// loop through every existing objectlass and select current objectClass
$line =- 1 ;
for ( $i = 0 ; $i < count ( $_SESSION [ $this -> ldap ] -> objectClasses ) || $i ==- 1 ; $i ++ ) {
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $i ], " NAME ' $objectClass ' " )) $line = $i ;
}
// Return error if objectClass isn't found
if ( $line ==- 1 ) trigger_error ( sprintf ( _ ( " objectClass %s required but not defined in ldap. " ), $objectClass ), E_USER_WARNING );
// create array with must-attributes
// Get startposition in string
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MUST (' )) {
$string_withtail = substr ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MUST (' ) + 6 );
// Now we have a string with all must-attributes
$string = substr ( $string_withtail , 0 , strpos ( $string_withtail , ')' ));
$string = trim ( $string );
$must = explode ( " $ " , $string );
// Ad must
foreach ( $must as $attribute ) {
if ( ! isset ( $this -> attributes [ $attribute ])) $this -> attributes [ $attribute ][ $objectClass ] = 'MUST' ;
else $this -> attributes [ $attribute ][ $objectClass ] = 'MUST' ;
}
}
// create array with may-attributes
// Get startposition in string
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MAY (' )) {
$string_withtail = substr ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MAY (' ) + 5 );
// Now we have a string with all must-attributes
$string = substr ( $string_withtail , 0 , strpos ( $string_withtail , ')' ));
$string = trim ( $string );
$may = explode ( " $ " , $string );
// Ad may
foreach ( $may as $attribute ) {
if ( ! isset ( $this -> attributes [ $attribute ])) $this -> attributes [ $attribute ][ $objectClass ] = 'MAY' ;
else $this -> attributes [ $attribute ][ $objectClass ] = 'MAY' ;
}
}
// Get attributes of subclasses
while ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], " SUP " )) {
$string_withtail = substr ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'SUP ' ) + 4 );
$subclass = substr ( $string_withtail , 0 , strpos ( $string_withtail , ' ' ));
// Add account type to object
for ( $i = 0 ; $i < count ( $_SESSION [ $this -> ldap ] -> objectClasses ) || $i ==- 1 ; $i ++ ) {
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $i ], " NAME ' $subclass ' " )) $line = $i ;
}
// Return error if objectClass isn't found
if ( $line ==- 1 ) trigger_error ( sprintf ( _ ( " objectClass %s required but not defined in ldap. " ), $objectClass ), E_USER_WARNING );
// create array with must-attributes
// Get startposition in string
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MUST (' )) {
$string_withtail = substr ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MUST (' ) + 6 );
// Now we have a string with all must-attributes
$string = substr ( $string_withtail , 0 , strpos ( $string_withtail , ')' ));
$string = trim ( $string );
$must = explode ( " $ " , $string );
// Ad must
foreach ( $must as $attribute ) {
if ( ! isset ( $this -> attributes [ $attribute ])) $this -> attributes [ $attribute ][ $objectClass ] = 'MUST' ;
else $this -> attributes [ $attribute ][ $objectClass ] = 'MUST' ;
}
}
// create array with may-attributes
// Get startposition in string
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MAY (' )) {
$string_withtail = substr ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MAY (' ) + 5 );
// Now we have a string with all must-attributes
$string = substr ( $string_withtail , 0 , strpos ( $string_withtail , ')' ));
$string = trim ( $string );
$may = explode ( " $ " , $string );
// Ad may
foreach ( $may as $attribute ) {
if ( ! isset ( $this -> attributes [ $attribute ])) $this -> attributes [ $attribute ][ $objectClass ] = 'MAY' ;
else $this -> attributes [ $attribute ][ $objectClass ] = 'MAY' ;
}
}
}
}
/* This function return ldap attributes
* Syntax is get_attributes ( $value , $scope )
* $scope = 'objectClass' , $value = objectClass return value are all attributes of objectClass
* $scope = 'attribute' , $value = attribute returns alle objectClasses which are using the attribute
*/
function get_attributes ( $value , $scope ) {
if ( $scope == 'attribute' && isset ( $this -> attributes [ $value ])) return $this -> attributes [ $value ];
if ( $scope == 'objectClass' ) {
$keys = array_keys ( $this -> attributes );
foreach ( $keys as $attribute ) {
if ( isset ( $this -> attributes [ $attribute ][ $value ])) $return [ $attribute ] = $this -> attributes [ $attribute ][ $value ];
}
return $return ;
}
return 0 ;
}
2004-02-09 18:11:01 +00:00
2004-02-07 18:34:26 +00:00
/* This function return ldap attributes which are uses by $objectClass
* Syntax is get_attributes ( $objectClass )
* Return is an array with all allowed attributes
*/
function get_module_attributes ( $objectClass ) {
// Add account type to object
$line =- 1 ;
for ( $i = 0 ; $i < count ( $_SESSION [ $this -> ldap ] -> objectClasses ) || $i ==- 1 ; $i ++ ) {
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $i ], " NAME ' $objectClass ' " )) $line = $i ;
}
// Return error if objectClass isn't found
if ( $line ==- 1 ) trigger_error ( sprintf ( _ ( " ObjectClass %s required but not defined in ldap. " ), $objectClass ), E_USER_WARNING );
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MUST (' )) {
$string_withtail = substr ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MUST (' ) + 6 );
// Now we have a string with all must-attributes
$string = substr ( $string_withtail , 0 , strpos ( $string_withtail , ')' ));
$string = trim ( $string );
// Ad must
foreach ( explode ( " $ " , $string ) as $attribute ) {
$return [ $attribute ] = '' ;
}
}
// create array with may-attributes
// Get startposition in string
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MAY (' )) {
$string_withtail = substr ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MAY (' ) + 5 );
// Now we have a string with all must-attributes
$string = substr ( $string_withtail , 0 , strpos ( $string_withtail , ')' ));
$string = trim ( $string );
// Ad may
foreach ( explode ( " $ " , $string ) as $attribute ) {
$return [ $attribute ] = '' ;
}
}
// Get attributes of subclasses
while ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], " SUP " )) {
$string_withtail = substr ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'SUP ' ) + 4 );
$subclass = substr ( $string_withtail , 0 , strpos ( $string_withtail , ' ' ));
// Add account type to object
for ( $i = 0 ; $i < count ( $_SESSION [ $this -> ldap ] -> objectClasses ) || $i ==- 1 ; $i ++ ) {
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $i ], " NAME ' $subclass ' " )) $line = $i ;
}
// Return error if objectClass isn't found
if ( $line ==- 1 ) trigger_error ( sprintf ( _ ( " ObjectClass %s required but not defined in ldap. " ), $subclass ), E_USER_WARNING );
// create array with must-attributes
// Get startposition in string
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MUST (' )) {
$string_withtail = substr ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MUST (' ) + 6 );
// Now we have a string with all must-attributes
$string = substr ( $string_withtail , 0 , strpos ( $string_withtail , ')' ));
$string = trim ( $string );
// Ad must
foreach ( explode ( " $ " , $string ) as $attribute ) {
$return [ $attribute ] = '' ;
}
}
// create array with may-attributes
// Get startposition in string
if ( strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MAY (' )) {
$string_withtail = substr ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], strpos ( $_SESSION [ $this -> ldap ] -> objectClasses [ $line ], 'MAY (' ) + 5 );
// Now we have a string with all must-attributes
$string = substr ( $string_withtail , 0 , strpos ( $string_withtail , ')' ));
$string = trim ( $string );
// Ad may
foreach ( explode ( " $ " , $string ) as $attribute ) {
$return [ $attribute ] = '' ;
}
}
}
$this -> add_attributes ( $objectClass );
return $return ;
}
/* This function return ldap attributes which are uses by $objectClass
* Syntax is get_attributes ( $attributes , $orig )
* Return is an array as needed for $this -> saveAccount ()
*/
function save_module_attributes ( $attributes , $orig ) {
// Get list of all "easy" attributes
$attr_names = array_keys ( $attributes );
// Get attributes which should be added
for ( $i = 0 ; $i < count ( $attr_names ); $i ++ ) {
for ( $j = 0 ; $j < count ( $orig [ $attr_names [ $i ]]); $j ++ ) {
if ( is_array ( $attributes [ $attr_names [ $i ]])) {
if ( ! in_array ( $orig [ $attr_names [ $i ]][ $j ], $attributes [ $attr_names [ $i ]]))
if ( $orig [ $attr_names [ $i ]][ $j ] != '' ) $torem [ $attr_names [ $i ]][] = utf8_encode ( $orig [ $attr_names [ $i ]][ $j ]);
}
else if ( $orig [ $attr_names [ $i ]][ $j ] != '' ) $torem [ $attr_names [ $i ]][] = utf8_encode ( $orig [ $attr_names [ $i ]][ $j ]);
}
for ( $j = 0 ; $j < count ( $attributes [ $attr_names [ $i ]]); $j ++ ) {
if ( is_array ( $orig [ $attr_names [ $i ]])) {
if ( ! in_array ( $attributes [ $attr_names [ $i ]][ $j ], $orig [ $attr_names [ $i ]]))
if ( $attributes [ $attr_names [ $i ]][ $j ] != '' ) $toadd [ $attr_names [ $i ]][] = utf8_encode ( $attributes [ $attr_names [ $i ]][ $j ]);
}
else if ( $attributes [ $attr_names [ $i ]][ $j ] != '' ) $toadd [ $attr_names [ $i ]][] = utf8_encode ( $attributes [ $attr_names [ $i ]][ $j ]);
}
for ( $j = 0 ; $j < count ( $attributes [ $attr_names [ $i ]]); $j ++ ) {
if ( is_array ( $orig [ $attr_names [ $i ]]) && is_array ( $attributes [ $attr_names [ $i ]])) {
if (( $attributes [ $attr_names [ $i ]][ $j ] == $orig [ $attr_names [ $i ]][ $j ]) && $attributes [ $attr_names [ $i ]][ $j ] != '' )
$notchanged [ $attr_names [ $i ]][] = utf8_encode ( $attributes [ $attr_names [ $i ]][ $j ]);
}
}
}
// create modify wuth add and remove
if ( is_array ( $toadd )) {
$attributes2 = array_keys ( $toadd );
for ( $i = 0 ; $i < count ( $attributes2 ); $i ++ ) {
if ( isset ( $torem [ $attributes2 [ $i ]])) {
// found modify entry
// Add unchanged attributes
if ( isset ( $notchanged [ $attributes2 [ $i ]])) $tomodify [ $attributes [ $i ]] = $notchanged [ $attributes [ $i ]];
$tomodify [ $attributes2 [ $i ]] = array_merge_recursive ( $tomodify [ $attributes2 [ $i ]], $toadd [ $attributes2 [ $i ]]);
// unset attributes
if ( isset ( $notchanged [ $attributes2 [ $i ]])) unset ( $notchanged [ $attributes2 [ $i ]]);
if ( isset ( $toadd [ $attributes2 [ $i ]])) unset ( $toadd [ $attributes2 [ $i ]]);
if ( isset ( $torem [ $attributes2 [ $i ]])) unset ( $torem [ $attributes2 [ $i ]]);
}
}
}
if ( count ( $toadd ) != 0 ) $return [ $this -> dn ][ 'add' ] = $toadd ;
if ( count ( $torem ) != 0 ) $return [ $this -> dn ][ 'remove' ] = $torem ;
if ( count ( $tomodify ) != 0 ) $return [ $this -> dn ][ 'modify' ] = $tomodify ;
if ( count ( $notchanged ) != 0 ) $return [ $this -> dn ][ 'notchanged' ] = $notchanged ;
return $return ;
}
/* This function checks if all MUST - attribtues are set .
* If not it will return an array with all modules
* which have to be set first
*/
function check_attributes () {
$return = array ();
if ( is_array ( $this -> attributes )) {
// get named list of attributes
$attributes = array_keys ( $this -> attributes );
for ( $i = 0 ; $i < count ( $attributes ); $i ++ ) {
$singleattribute = array_keys ( $this -> attributes [ $attributes [ $i ]]);
for ( $j = 0 ; $j < count ( $singleattribute ); $j ++ ) {
// found attribute which must be set
if ( $this -> attributes [ $attributes [ $i ]][ $singleattribute [ $j ]] == 'MUST' ) {
// Check if attribute is set
2004-02-09 18:11:01 +00:00
if ( $this -> module [ $singleattribute [ $j ]] -> attributes [ $attributes [ $i ]] == '' ) {
2004-02-07 18:34:26 +00:00
if ( ! in_array ( $singleattribute [ $j ], $return )) $return [] = $singleattribute [ $j ];
2004-02-09 18:11:01 +00:00
}
2004-02-07 18:34:26 +00:00
}
}
}
return $return ;
}
}
/* This function adds an objectClass class ( module ) to accountContainer
*/
function add_objectClass ( $objectClass ) {
$line =- 1 ;
for ( $i = 0 ; $i < count ( $_SESSION [ 'ldap' ] -> objectClasses ) || $i ==- 1 ; $i ++ ) {
if ( strpos ( $_SESSION [ 'ldap' ] -> objectClasses [ $i ], " NAME ' $objectClass ' " )) $line = $i ;
}
// Return error if objectClass isn't found
if ( $line ==- 1 ) trigger_error ( _ ( " objectClass $objectClass required but not defined in ldap. " ), E_USER_WARNING );
else {
// Add module if it exists
if ( class_exists ( $objectClass )) {
$this -> module [ $objectClass ] = new $objectClass ( $this -> base );
}
else trigger_error ( _ ( " objectClass $objectClass required but no module found. " ), E_USER_WARNING );
}
return 0 ;
}
/* This function will load an account .
* $dn is the dn of the account which should be loaded
*/
function load_account ( $dn ) {
$search = substr ( $dn , 0 , strpos ( $dn , ',' ));
$result = ldap_search ( $_SESSION [ $this -> ldap ] -> server (), $dn , $search );
$entry = ldap_first_entry ( $_SESSION [ $this -> ldap ] -> server (), $result );
$this -> dn = substr ( $dn , strpos ( $dn , ',' ) + 1 );
$this -> dn_orig = $dn ;
$attr = ldap_get_attributes ( $_SESSION [ $this -> ldap ] -> server (), $entry );
if ( isset ( $attr [ 'objectClass' ][ 'count' ])) unset ( $attr [ 'objectClass' ][ 'count' ]);
// load attributes
foreach ( $attr [ 'objectClass' ] as $objectClass ) {
$this -> add_objectClass ( $objectClass );
if ( isset ( $this -> module [ $objectClass ])) $this -> module [ $objectClass ] -> load_attributes ( $attr );
}
$this -> module [ 'quota' ] = new quota ( $this -> base );
$this -> module [ 'quota' ] -> load_attributes ( $attr );
// sortm modules and make all active because all required attributes should be set
$module = array_keys ( $this -> module );
$modulelist = array ();
// *** fixme add modules from config which should be used but not yet in loaded account
// *** fixme how to handle non ldap modules?
// loop until all modules are in order.
// We don't want to loop forever
$remain = count ( $module ) * count ( $module );
$order = array ();
while ( ( count ( $module ) != count ( $modulelist )) && ( $remain != 0 ) ) {
$remain -- ;
foreach ( $module as $moduleitem ) {
$required = $this -> module [ $moduleitem ] -> get_dependencies ( $this -> type );
$everything_found = true ;
if ( is_array ( $required [ 'require' ])) {
foreach ( $required [ 'require' ] as $requireditem )
if ( ! in_array ( $reuquireditem , $modulelist )) $everthing_found = false ;
}
if ( $everything_found && ! in_array ( $moduleitem , $order ) ) $order [] = $moduleitem ;
}
}
// Write Module-Order in variable
$this -> order = $order ;
return 0 ;
}
function display_profile ( $post ) {
$return = array ();
$post = array ();
$module = array_keys ( $this -> module );
foreach ( $module as $singlemodule ) {
// get list of display functions.
$list = $this -> module [ $singlemodule ] -> pages ();
foreach ( $list as $item ) {
$function = 'display_html_' . $item ;
$page = $this -> module [ $singlemodule ] -> $function ( $post , true );
//eval($function);
$return = array_merge ( $return , $page );
}
}
return $return ;
}
function proccess_profile ( $post ) {
$return = array ();
$module = array_keys ( $this -> module );
foreach ( $module as $singlemodule ) {
// get list of display functions.
$list = $this -> module [ $singlemodule ] -> pages ();
foreach ( $list as $item ) {
$function = 'display_html_' . $item ;
$page = $this -> module [ $singlemodule ] -> $function ( $post , true );
//eval($function);
$return = array_merge ( $return , $page );
}
}
return $return ;
}
/* This function will prepare the object
* for a new account
*/
function new_account () {
$modulelist = array ( 'posixAccount' , 'sambaAccount' );
// *** fixme add modules from config which should be used but not yet in loaded account
foreach ( $modulelist as $objectClass ) $this -> add_objectClass ( $objectClass );
$module = array_keys ( $this -> module );
// loop until all modules are in order.
// We don't want to loop forever
$remain = count ( $module ) * count ( $module );
$order = array ();
while ( ( count ( $module ) != count ( $modulelist )) && ( $remain != 0 ) ) {
$remain -- ;
foreach ( $module as $moduleitem ) {
$required = $this -> module [ $moduleitem ] -> get_dependencies ( $this -> type );
$everything_found = true ;
if ( is_array ( $required [ 'require' ])) {
foreach ( $required [ 'require' ] as $requireditem )
if ( ! in_array ( $reuquireditem , $modulelist )) $everthing_found = false ;
}
if ( $everything_found && ! in_array ( $moduleitem , $order ) ) $order [] = $moduleitem ;
}
}
// Write Module-Order in variable
$this -> order = $order ;
// *** fixme load*Profile must return array in the same way ldap_get_attributes does.
$function = '$newattributes = load' . ucfirst ( $this -> type ) . 'Profile(\'default\');' ;
//eval($function);
return 0 ;
}
/* This function will load an account .
*/
function save_account () {
$module = array_keys ( $this -> module );
$attributes = array ();
// load attributes
foreach ( $module as $singlemodule ) {
// load changes
$temp = $this -> module [ $singlemodule ] -> save_attributes ();
// merge changes
$DNs = array_keys ( $temp );
// *** fixme don't include references
$attributes = array_merge_recursive ( $temp , $attributes );
for ( $i = 0 ; $i < count ( $DNs ); $i ++ ) {
$ops = array_keys ( $temp [ $DNs [ $i ]]);
for ( $j = 0 ; $j < count ( $ops ); $j ++ ) {
$attrs = array_keys ( $temp [ $DNs [ $i ]][ $ops [ $j ]]);
for ( $k = 0 ; $k < count ( $attrs ); $k ++ )
$attributes [ $DNs [ $i ]][ $ops [ $j ]][ $attrs [ $k ]] = array_unique ( $attributes [ $DNs [ $i ]][ $ops [ $j ]][ $attrs [ $k ]]);
}
}
}
// Complete dn with uid or cn=
if ( $this -> type == 'group' ) $search = 'cn' ;
else $search = 'uid' ;
$added = false ;
print_r ( $attributes );
foreach ( $attributes as $DN ) {
if ( isset ( $DN [ 'modify' ][ $search ][ 0 ]) && ! $added ) {
$attributes [ $search . '=' . $DN [ 'modify' ][ $search ][ 0 ] . ',' . $this -> dn ] = $attributes [ $this -> dn ];
unset ( $attributes [ $this -> dn ]);
$this -> dn = $search . '=' . $DN [ 'modify' ][ $search ][ 0 ] . ',' . $this -> dn ;
$added = true ;
}
if ( isset ( $DN [ 'add' ][ $search ][ 0 ]) && ! $added ) {
$attributes [ $search . '=' . $DN [ 'add' ][ $search ][ 0 ] . ',' . $this -> dn ] = $attributes [ $this -> dn ];
unset ( $attributes [ $this -> dn ]);
$this -> dn = $search . '=' . $DN [ 'add' ][ $search ][ 0 ] . ',' . $this -> dn ;
$added = true ;
}
if ( isset ( $DN [ 'notchanged' ][ $search ][ 0 ]) && ! $added ) {
$attributes [ $search . '=' . $DN [ 'notchanged' ][ $search ][ 0 ] . ',' . $this -> dn ] = $attributes [ $this -> dn ];
unset ( $attributes [ $this -> dn ]);
$this -> dn = $search . '=' . $DN [ 'notchanged' ][ $search ][ 0 ] . ',' . $this -> dn ;
$added = true ;
}
}
// Add old dn if dn hasn't changed
if ( ! $added ) {
$attributes [ $this -> dn_orig ] = $attributes [ $this -> dn ];
unset ( $attributes [ $this -> dn ]);
$this -> dn = $this -> dn_orig ;
}
// Set to true if an real error has happened
$stopprocessing = false ;
// Add new DN
if ( isset ( $attributes [ $DNs [ $i ]][ 'errors' ])) {
foreach ( $attributes [ $DNs [ $i ]][ 'errors' ] as $singleerror ) {
$errors [] = $singleerror ;
if ( $singleerror [ 0 ] = 'ERROR' ) $stopprocessing = true ;
}
}
// fixme *** ad update_cache after every ldap-change
if ( ! $stopprocessing ) {
if ( $this -> dn != $this -> dn_orig ) {
// move existing DN
if ( $this -> dn_orig != '' ) {
// merge attributes together
$attr = array_merge_recursive ( $attributes [ $this -> dn ][ 'add' ], $attributes [ $this -> dn ][ 'notchanged' ], $attributes [ $this -> dn ][ 'modify' ]);
$success = @ ldap_add ( $_SESSION [ $this -> ldap ] -> server (), $this -> dn , $attr );
if ( $success ) {
$_SESSION [ $this -> cache ] -> update_cache ( $this -> $dn , 'add' , $attr );
$success = @ ldap_delete ( $_SESSION [ $this -> ldap ] -> server (), $this -> dn_orig );
if ( ! $success ) {
$errors [] = array ( 'ERROR' , 'LDAP' , sprintf ( _ ( 'Was unable to delete dn: %s.' ), $this -> dn_orig ));
$stopprocessing = true ;
}
if ( $success )
$_SESSION [ $this -> cache ] -> update_cache ( $this -> $dn , 'delete_dn' );
}
if ( ! $success ) {
$errors [] = array ( 'ERROR' , 'LDAP' , sprintf ( _ ( 'Was unable to create dn: %s. This is possible a bug. Please check your ldap logs and send a bug report if it is a possible bug.' ), $this -> dn ));
$stopprocessing = true ;
}
}
// create complete new dn
else {
$attr = array_merge_recursive ( $attributes [ $this -> dn ][ 'add' ], $attributes [ $this -> dn ][ 'notchanged' ], $attributes [ $this -> dn ][ 'modify' ]);
$success = @ ldap_add ( $_SESSION [ $this -> ldap ] -> server (), $this -> dn , $attributes [ $this -> dn ][ 'add' ]);
if ( ! $success ) {
$errors [] = array ( 'ERROR' , 'LDAP' , sprintf ( _ ( 'Was unable to create dn: %s. This is possible a bug. Please check your ldap logs and send a bug report if it is a possible bug.' ), $this -> dn ));
$stopprocessing = true ;
}
else
$_SESSION [ $this -> cache ] -> update_cache ( $this -> $dn , 'add' , $attributes [ $this -> dn ][ 'add' ]);
}
unset ( $attributes [ $this -> dn ]);
}
}
$DNs = array_keys ( $attributes );
for ( $i = 0 ; $i < count ( $DNs ); $i ++ ) {
if ( ! $stopprocessing ) {
// modify attributes
if ( isset ( $attributes [ $DNs [ $i ]][ 'modify' ]) && ! $stopprocessing ) {
$success = @ ldap_mod_replace ( $_SESSION [ $this -> ldap ] -> server (), $DNs [ $i ], $attributes [ $DNs [ $i ]][ 'modify' ]);
if ( ! $success ) {
$errors [] = array ( 'ERROR' , 'LDAP' , sprintf ( _ ( 'Was unable to modify attribtues from dn: %s. This is possible a bug. Please check your ldap logs and send a bug report if it is a possible bug.' ), $DNs [ $i ]));
$stopprocessing = true ;
}
else
$_SESSION [ $this -> cache ] -> update_cache ( $this -> $dn , 'modify' , $attributes [ $this -> dn ][ 'modify' ]);
}
// add attributes
if ( isset ( $attributes [ $DNs [ $i ]][ 'add' ]) && ! $stopprocessing ) {
$success = @ ldap_mod_add ( $_SESSION [ $this -> ldap ] -> server (), $DNs [ $i ], $attributes [ $DNs [ $i ]][ 'add' ]);
if ( ! $success ) {
$errors [] = array ( 'ERROR' , 'LDAP' , sprintf ( _ ( 'Was unable to add attribtues to dn: %s. This is possible a bug. Please check your ldap logs and send a bug report if it is a possible bug.' ), $DNs [ $i ]));
$stopprocessing = true ;
}
else
$_SESSION [ $this -> cache ] -> update_cache ( $this -> $dn , 'add' , $attributes [ $this -> dn ][ 'add' ]);
}
// removce attributes
if ( isset ( $attributes [ $DNs [ $i ]][ 'remove' ]) && ! $stopprocessing ) {
$success = @ ldap_mod_del ( $_SESSION [ $this -> ldap ] -> server (), $DNs [ $i ], $attributes [ $DNs [ $i ]][ 'remove' ]);
if ( ! $success ) {
$errors [] = array ( 'ERROR' , 'LDAP' , sprintf ( _ ( 'Was unable to remove attribtues from dn: %s. This is possible a bug. Please check your ldap logs and send a bug report if it is a possible bug.' ), $DNs [ $i ]));
$stopprocessing = true ;
}
else
$_SESSION [ $this -> cache ] -> update_cache ( $this -> $dn , 'remove' , $attributes [ $this -> dn ][ 'remove' ]);
}
}
}
if ( ! $stopprocessing ) {
foreach ( $attributes as $DN ) {
if ( is_array ( $DN [ 'lamdaemon' ][ 'command' ])) $result = $this -> lamdaemon ( $DN [ 'lamdaemon' ][ 'command' ]);
// Error somewhere in lamdaemon
foreach ( $result as $singleresult ) {
if ( is_array ( $singleresult )) {
if ( $singleresult [ 0 ] = 'ERROR' ) $stopprocessing = true ;
$temparray [ 0 ] = $singleresult [ 0 ];
$temparray [ 1 ] = _ ( $singleresult [ 1 ]);
$temparray [ 2 ] = _ ( $singleresult [ 2 ]);
$errors [] = $temparray ;
}
}
}
}
if ( count ( $errors ) != 0 ) return $errors ;
return 0 ;
}
function lamdaemon ( $commands ) {
// get username and password of the current lam-admin
$ldap_q = $_SESSION [ $this -> ldap ] -> decrypt_login ();
/* $towrite has the following syntax :
* admin - username , admin - password , owner of homedir , 'home' , operation = 'add'
* use escapeshellarg to make exec () shell - safe
*/
$towrite = escapeshellarg ( $_SESSION [ $this -> config ] -> scriptServer ) . " " . escapeshellarg ( $_SESSION [ $this -> config ] -> scriptPath ) . " " .
escapeshellarg ( $ldap_q [ 0 ]) . ' ' . escapeshellarg ( $ldap_q [ 1 ]);
$userstring = implode ( " \n " , $commands );
if ( function_exists ( proc_open )) {
// New Code, requires PHP 4.3
$descriptorspec = array (
0 => array ( " pipe " , " r " ), // stdin
1 => array ( " pipe " , " w " ), // stout
2 => array ( " file " , " /dev/null " , " a " ) // sterr
);
$process = proc_open ( escapeshellarg ( $_SESSION [ 'lampath' ] . " lib/lamdaemon.pl " ) . " " . $towrite ,
$descriptorspec ,
$pipes );
if ( is_resource ( $process )) {
/* perl - script is running
* $pipes [ 0 ] is writeable handle to child stdin
* $pipes [ 1 ] is readable handle to child stdout
* any error is send to / dev / null
*/
// Write to stdin
fwrite ( $pipes [ 0 ], $userstring );
}
fclose ( $pipes [ 0 ]);
while ( ! feof ( $pipes [ 1 ])) {
$output = fgets ( $pipes [ 1 ], 1024 );
if ( $output != '' ) $output_array [] = $output ;
}
fclose ( $pipes [ 1 ]);
proc_close ( $process );
}
else { // PHP 4.3>
$command = escapeshellarg ( $_SESSION [ 'lampath' ] . " lib/lamdaemon.pl " ) . " " . $towrite ;
$pipe = popen ( " echo \" $userstring\ " | $command " , 'r');
while ( ! feof ( $pipe )) {
//$output .= fread($pipe, 1024);
$output = fgets ( $pipe , 1024 );
if ( $output != '' ) $output_array [] = $output ;
}
pclose ( $pipe );
}
return $output_array ;
}
}
2004-01-30 10:26:04 +00:00
?>
