2003-12-27 11:21:00 +00:00
< ? php
2017-03-25 19:25:20 +00:00
use \LAM\TYPES\TypeManager ;
2003-12-27 11:21:00 +00:00
/*
2009-10-27 18:47:12 +00:00
This code is part of LDAP Account Manager ( http :// www . ldap - account - manager . org / )
2006-03-03 17:30:35 +00:00
Copyright ( C ) 2003 - 2006 Tilo Lutz
2019-11-01 19:39:17 +00:00
2007 - 2019 Roland Gruber
2003-12-27 11:21:00 +00:00
This program is free software ; you can redistribute it and / or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation ; either version 2 of the License , or
( at your option ) any later version .
This program is distributed in the hope that it will be useful ,
but WITHOUT ANY WARRANTY ; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
GNU General Public License for more details .
You should have received a copy of the GNU General Public License
along with this program ; if not , write to the Free Software
Foundation , Inc . , 59 Temple Place , Suite 330 , Boston , MA 02111 - 1307 USA
*/
2005-07-21 10:33:02 +00:00
/**
* Manages Samba 3 accounts for groups .
*
* @ package modules
*
* @ author Tilo Lutz
* @ author Roland Gruber
* @ author Michael Duergner
*/
/**
* Manages the object class " sambaGroupMapping " for groups.
*
* @ package modules
*/
2004-06-08 18:54:37 +00:00
class sambaGroupMapping extends baseModule {
2004-06-13 19:58:58 +00:00
2004-09-21 11:33:00 +00:00
// Variables
2004-09-27 19:14:16 +00:00
/** Array of well known RIDs */
2007-10-13 17:28:37 +00:00
private $rids ;
2004-10-09 14:15:56 +00:00
/** Array of sambaGroupTypes */
2007-10-13 17:28:37 +00:00
private $sambaGroupTypes ;
2010-11-21 19:23:12 +00:00
/** cache for domain list */
private $cachedDomainList = null ;
2013-08-25 14:21:37 +00:00
/** cache for existing Samba entries (array(dn => cn)) */
private $sidCache = null ;
2016-12-19 20:32:08 +00:00
2004-09-25 10:13:32 +00:00
/**
* Creates a new module for Samba 3 groups .
*
* @ param string $scope account type
*/
2007-12-28 16:08:56 +00:00
function __construct ( $scope ) {
2004-09-25 10:13:32 +00:00
// load error messages
2004-09-26 11:18:05 +00:00
$this -> rids = array (
2006-10-22 07:45:58 +00:00
_ ( 'Domain admins' ) => 512 ,
_ ( 'Domain users' ) => 513 ,
_ ( 'Domain guests' ) => 514 ,
_ ( 'Domain computers' ) => 515 ,
_ ( 'Domain controllers' ) => 516 ,
_ ( 'Domain certificate admins' ) => 517 ,
_ ( 'Domain schema admins' ) => 518 ,
_ ( 'Domain enterprise admins' ) => 519 ,
_ ( 'Domain policy admins' ) => 520 );
2004-09-26 11:18:05 +00:00
2004-10-09 14:15:56 +00:00
$this -> sambaGroupTypes = array (
2006-10-22 07:45:58 +00:00
_ ( 'Domain group' ) => 2 ,
_ ( 'Local group' ) => 4 ,
_ ( 'Builtin group' ) => 5 ,
2013-03-25 15:47:47 +00:00
);
2004-09-25 10:13:32 +00:00
// call parent constructor
2007-12-28 16:08:56 +00:00
parent :: __construct ( $scope );
2007-11-18 11:16:03 +00:00
$this -> autoAddObjectClasses = false ;
2004-09-25 10:13:32 +00:00
}
2004-09-21 11:33:00 +00:00
2014-04-20 13:00:42 +00:00
/**
* Returns true if this module can manage accounts of the current type , otherwise false .
2016-12-19 20:32:08 +00:00
*
2014-04-20 13:00:42 +00:00
* @ return boolean true if module fits
*/
public function can_manage () {
return in_array ( $this -> get_scope (), array ( 'group' ));
}
2013-08-25 14:21:37 +00:00
/**
* Returns meta data that is interpreted by parent class
*
* @ return array array with meta data
2016-12-19 20:32:08 +00:00
*
2013-08-25 14:21:37 +00:00
* @ see baseModule :: get_metaData ()
*/
function get_metaData () {
$return = array ();
// icon
$return [ 'icon' ] = 'samba.png' ;
// alias name
$return [ " alias " ] = _ ( 'Samba 3' );
// module dependencies
$return [ 'dependencies' ] = array ( 'depends' => array ( array ( 'posixGroup' , 'rfc2307bisPosixGroup' )), 'conflicts' => array ());
// managed object classes
$return [ 'objectClasses' ] = array ( 'sambaGroupMapping' );
// managed attributes
$return [ 'attributes' ] = array ( 'gidNumber' , 'sambaSID' , 'sambaGroupType' , 'displayName' , 'sambaSIDList' , 'description' );
// available PDF fields
$return [ 'PDF_fields' ] = array (
'gidNumber' => _ ( 'GID number' ),
'sambaSID' => _ ( 'Windows group' ),
'displayName' => _ ( 'Display name' ),
'sambaGroupType' => _ ( 'Samba group type' ),
'description' => _ ( 'Description' ),
'sambaSIDList' => _ ( 'Local members' ),
);
// upload fields
// search existing Samba 3 domains
2014-10-25 19:17:53 +00:00
if ( isLoggedIn ()) {
2013-08-25 14:21:37 +00:00
$return [ 'upload_columns' ] = array (
array (
'name' => 'sambaGroupMapping_name' ,
'description' => _ ( 'Samba display name' ),
'help' => 'displayName' ,
'example' => _ ( 'Domain administrators' )
),
array (
'name' => 'sambaGroupMapping_rid' ,
'description' => _ ( 'Samba RID number' ),
'help' => 'rid' ,
'example' => _ ( 'Domain admins' )
),
array (
'name' => 'sambaGroupMapping_groupType' ,
'description' => _ ( 'Samba group type' ),
'help' => 'type' ,
'values' => implode ( " , " , array_keys ( $this -> sambaGroupTypes ) + $this -> sambaGroupTypes ),
'example' => '2'
)
);
$return [ 'upload_preDepends' ] = array ( 'posixGroup' , 'rfc2307bisPosixGroup' );
}
// help Entries
$return [ 'help' ] = array (
'displayName' => array (
" Headline " => _ ( " Display name " ), 'attr' => 'displayName' ,
" Text " => _ ( " This is the group name which will be shown in Windows. " )
),
'sambaSID' => array (
" Headline " => _ ( " Windows group name " ), 'attr' => 'sambaSID' ,
" Text " => _ ( " If you want to use a well known RID you can select a well known group. " )
),
'rid' => array (
" Headline " => _ ( " Samba RID number " ),
" Text " => _ ( " This is the relative ID (similar to UID on Unix) for Windows accounts. If you leave this empty LAM will calculate the RID from the UID. This can be either a number or the name of a special group: " ) . ' ' . implode ( " , " , array_keys ( $this -> rids ))
),
'sambaDomainName' => array (
" Headline " => _ ( " Domain " ),
" Text " => _ ( " Windows-Domain name of group. " ) . ' ' . _ ( " Can be left empty. " )
),
'type' => array (
" Headline " => _ ( " Samba group type " ), 'attr' => 'sambaGroupType' ,
" Text " => _ ( " Windows group type. " )
),
'sambaSIDList' => array (
" Headline " => _ ( 'Local members' ), 'attr' => 'sambaSIDList' ,
" Text " => _ ( " Use this to specify other groups or accounts from other domains as group members. " )
),
'filter' => array (
" Headline " => _ ( " Filter " ),
" Text " => _ ( " Here you can enter a filter value. Only entries which contain the filter text will be shown. " )
. ' ' . _ ( 'Possible wildcards are: "*" = any character, "^" = line start, "$" = line end' )
),
);
return $return ;
}
2008-12-18 12:21:07 +00:00
/**
* Gets the GID number from the Unix group module .
*
* @ return String GID number
*/
private function getGID () {
$modules = array ( 'posixGroup' , 'rfc2307bisPosixGroup' );
for ( $i = 0 ; $i < sizeof ( $modules ); $i ++ ) {
if ( $this -> getAccountContainer () -> getAccountModule ( $modules [ $i ]) != null ) {
$attrs = $this -> getAccountContainer () -> getAccountModule ( $modules [ $i ]) -> getAttributes ();
if ( isset ( $attrs [ 'gidNumber' ][ 0 ])) {
return $attrs [ 'gidNumber' ][ 0 ];
}
}
}
return null ;
}
2016-12-19 20:32:08 +00:00
2008-12-18 12:21:07 +00:00
/**
* Gets the cn from the Unix group module .
*
* @ return String cn attribute
*/
private function getCn () {
$modules = array ( 'posixGroup' , 'groupOfNames' , 'groupOfUniqueNames' );
for ( $i = 0 ; $i < sizeof ( $modules ); $i ++ ) {
if ( $this -> getAccountContainer () -> getAccountModule ( $modules [ $i ]) != null ) {
$attrs = $this -> getAccountContainer () -> getAccountModule ( $modules [ $i ]) -> getAttributes ();
if ( isset ( $attrs [ 'cn' ][ 0 ])) {
return $attrs [ 'cn' ][ 0 ];
}
}
}
return null ;
}
2016-12-19 20:32:08 +00:00
2010-11-21 19:23:12 +00:00
/**
2017-05-20 08:55:26 +00:00
* { @ inheritDoc }
* @ see baseModule :: get_uploadColumns ()
*/
public function get_uploadColumns ( $selectedModules , & $type ) {
$return = parent :: get_uploadColumns ( $selectedModules , $type );
2010-11-21 19:23:12 +00:00
$domains = $this -> getDomains ();
$domainNames = array ();
for ( $i = 0 ; $i < sizeof ( $domains ); $i ++ ) $domainNames [] = $domains [ $i ] -> name ;
$return [] = array (
'name' => 'sambaGroupMapping_domain' ,
'description' => _ ( 'Samba domain name' ),
'help' => 'sambaDomainName' ,
'example' => $domainNames [ 0 ],
'values' => implode ( " , " , $domainNames ),
'required' => true
);
return $return ;
}
2004-09-27 19:14:16 +00:00
/**
2017-05-20 09:46:49 +00:00
* { @ inheritDoc }
* @ see baseModule :: build_uploadAccounts ()
*/
function build_uploadAccounts ( $rawAccounts , $ids , & $partialAccounts , $selectedModules , & $type ) {
2004-09-27 19:14:16 +00:00
// search existing Samba 3 domains
2010-11-21 19:23:12 +00:00
$domains = $this -> getDomains ();
2004-09-27 19:14:16 +00:00
$nameToSID = array ();
// get domain SIDs
for ( $i = 0 ; $i < sizeof ( $domains ); $i ++ ) {
$nameToSID [ $domains [ $i ] -> name ] = $domains [ $i ] -> SID ;
}
// get domain RID bases
$nameToRIDBase = array ();
for ( $i = 0 ; $i < sizeof ( $domains ); $i ++ ) {
$nameToRIDBase [ $domains [ $i ] -> name ] = $domains [ $i ] -> RIDbase ;
}
2006-05-17 18:32:10 +00:00
$errors = array ();
2004-09-27 19:14:16 +00:00
for ( $i = 0 ; $i < sizeof ( $rawAccounts ); $i ++ ) {
2004-10-10 17:59:41 +00:00
// group type
if ( $rawAccounts [ $i ][ $ids [ 'sambaGroupMapping_groupType' ]] != " " ) {
if ( in_array ( $rawAccounts [ $i ][ $ids [ 'sambaGroupMapping_groupType' ]], $this -> sambaGroupTypes )) { // number given
$partialAccounts [ $i ][ 'sambaGroupType' ] = $rawAccounts [ $i ][ $ids [ 'sambaGroupMapping_groupType' ]];
}
elseif ( in_array ( $rawAccounts [ $i ][ $ids [ 'sambaGroupMapping_groupType' ]], array_keys ( $this -> sambaGroupTypes ))) { // description given
$partialAccounts [ $i ][ 'sambaGroupType' ] = $this -> sambaGroupTypes [ $rawAccounts [ $i ][ $ids [ 'sambaGroupMapping_groupType' ]]];
}
else { // invalid type
$errMsg = $this -> messages [ 'groupType' ][ 0 ];
array_push ( $errMsg , array ( $i , implode ( " , " , array_keys ( $this -> sambaGroupTypes ) + $this -> sambaGroupTypes )));
2006-05-17 18:32:10 +00:00
$errors [] = $errMsg ;
2004-10-10 17:59:41 +00:00
}
}
else {
$partialAccounts [ $i ][ 'sambaGroupType' ] = " 2 " ; // 2 is the default (domain group)
}
2004-09-27 19:14:16 +00:00
if ( ! in_array ( " sambaGroupMapping " , $partialAccounts [ $i ][ 'objectClass' ])) $partialAccounts [ $i ][ 'objectClass' ][] = " sambaGroupMapping " ;
// SID
$domSID = $nameToSID [ $rawAccounts [ $i ][ $ids [ 'sambaGroupMapping_domain' ]]];
if ( ! isset ( $domSID )) {
2004-10-03 18:06:57 +00:00
$errMsg = $this -> messages [ 'sambaSID' ][ 1 ];
array_push ( $errMsg , $rawAccounts [ $i ][ $ids [ 'sambaGroupMapping_domain' ]]);
array_push ( $errMsg , $i );
2006-05-17 18:32:10 +00:00
$errors [] = $errMsg ;
2004-09-27 19:14:16 +00:00
}
else {
// RID
$rid = $rawAccounts [ $i ][ $ids [ 'sambaGroupMapping_rid' ]];
if ( isset ( $this -> rids [ $rid ])) $rid = $this -> rids [ $rid ];
// check if RID has to be calculated
if (( $rid == " " ) || ( ! isset ( $rid ))) {
$ridBase = $nameToRIDBase [ $rawAccounts [ $i ][ $ids [ 'sambaGroupMapping_domain' ]]];
$partialAccounts [ $i ][ 'sambaSID' ] = $domSID . " - " . (( $partialAccounts [ $i ][ 'gidNumber' ] * 2 ) + $ridBase + 1 );
}
elseif ( get_preg ( $rid , 'digit' )) {
$partialAccounts [ $i ][ 'sambaSID' ] = $domSID . " - " . $rid ;
}
}
// display name (UTF-8, no regex check needed)
if ( $rawAccounts [ $i ][ $ids [ 'sambaGroupMapping_name' ]] == " " ) {
$partialAccounts [ $i ][ 'displayName' ] = $partialAccounts [ $i ][ 'cn' ];
}
else {
$partialAccounts [ $i ][ 'displayName' ] = $rawAccounts [ $i ][ $ids [ 'sambaGroupMapping_name' ]];
}
}
2006-05-17 18:32:10 +00:00
return $errors ;
2004-09-27 19:14:16 +00:00
}
2007-11-03 14:17:19 +00:00
/**
* Returns the HTML meta data for the main account page .
2016-12-19 20:32:08 +00:00
*
2010-09-26 16:37:55 +00:00
* @ return htmlElement HTML meta data
2007-11-03 14:17:19 +00:00
*/
2006-08-14 17:24:27 +00:00
function display_html_attributes () {
2010-09-26 16:37:55 +00:00
if ( isset ( $_POST [ 'addObjectClass' ])) {
2007-11-18 11:16:03 +00:00
$this -> attributes [ 'objectClass' ][] = 'sambaGroupMapping' ;
2005-10-03 10:49:48 +00:00
}
2019-11-01 19:39:17 +00:00
$return = new htmlResponsiveRow ();
2007-11-18 11:16:03 +00:00
if ( in_array ( 'sambaGroupMapping' , $this -> attributes [ 'objectClass' ])) {
2010-11-21 19:23:12 +00:00
$sambaDomains = $this -> getDomains ();
2007-11-18 11:16:03 +00:00
if ( sizeof ( $sambaDomains ) == 0 ) {
StatusMessage ( " ERROR " , _ ( 'No Samba 3 domains found in LDAP! Please create one first.' ), '' );
return array ();
2004-09-21 11:33:00 +00:00
}
2007-11-18 11:16:03 +00:00
// Get Domain-SID from group SID
if ( isset ( $this -> attributes [ 'sambaSID' ][ 0 ])) {
$domainSID = substr ( $this -> attributes [ 'sambaSID' ][ 0 ], 0 , strrpos ( $this -> attributes [ 'sambaSID' ][ 0 ], " - " ));
2004-09-21 11:33:00 +00:00
}
2007-11-18 11:16:03 +00:00
for ( $i = 0 ; $i < count ( $sambaDomains ); $i ++ ) {
// List with all valid domains
$sambaDomainNames [] = $sambaDomains [ $i ] -> name ;
if ( isset ( $domainSID ) && ( $domainSID == $sambaDomains [ $i ] -> SID )) {
$SID = $sambaDomains [ $i ] -> SID ;
$sel_domain = $sambaDomains [ $i ] -> name ;
}
}
2010-09-26 16:37:55 +00:00
// display name
2007-11-18 11:16:03 +00:00
$displayName = '' ;
2019-11-01 19:39:17 +00:00
if ( isset ( $this -> attributes [ 'displayName' ][ 0 ])) {
$displayName = $this -> attributes [ 'displayName' ][ 0 ];
}
$displayNameInput = new htmlResponsiveInputField ( _ ( 'Display name' ), 'displayName' , $displayName , 'displayName' );
2010-09-26 16:37:55 +00:00
$displayNameInput -> setFieldMaxLength ( 50 );
2019-11-01 19:39:17 +00:00
$return -> add ( $displayNameInput , 12 );
2010-09-26 16:37:55 +00:00
// Windows group
2010-11-20 20:25:45 +00:00
$options = array ( $this -> getCn ());
$selected = array ( $this -> getCn ());
2007-11-18 11:16:03 +00:00
$names = array_keys ( $this -> rids );
for ( $i = 0 ; $i < count ( $names ); $i ++ ) {
if ( isset ( $this -> attributes [ 'sambaSID' ][ 0 ]) && ( $this -> attributes [ 'sambaSID' ][ 0 ] == $SID . " - " . $this -> rids [ $names [ $i ]])) {
2010-11-20 20:25:45 +00:00
$selected = array ( $names [ $i ]);
2007-11-18 11:16:03 +00:00
}
2010-09-26 16:37:55 +00:00
$options [] = $names [ $i ];
2007-11-18 11:16:03 +00:00
}
2019-11-01 19:39:17 +00:00
$return -> add ( new htmlResponsiveSelect ( 'sambaSID' , $options , $selected , _ ( 'Windows group' ), 'sambaSID' ), 12 );
2016-12-19 20:32:08 +00:00
// group type
2007-11-18 11:16:03 +00:00
$names = array_keys ( $this -> sambaGroupTypes );
$selected = array ( _ ( 'Domain group' ) );
for ( $i = 0 ; $i < count ( $names ); $i ++ ) {
2019-11-01 19:39:17 +00:00
if ( ! isset ( $this -> attributes [ 'sambaGroupType' ][ 0 ])) {
break ;
}
if ( $this -> attributes [ 'sambaGroupType' ][ 0 ] == $this -> sambaGroupTypes [ $names [ $i ]]) {
$selected = array ( $names [ $i ] );
}
2007-11-18 11:16:03 +00:00
}
2019-11-01 19:39:17 +00:00
$return -> add ( new htmlResponsiveSelect ( 'sambaGroupType' , $names , $selected , _ ( 'Group type' ), 'type' ), 12 );
2010-09-26 16:37:55 +00:00
// domain
2007-11-18 11:16:03 +00:00
$selectedDomain = array ();
2019-11-01 19:39:17 +00:00
if ( isset ( $sel_domain )) {
$selectedDomain = array ( $sel_domain );
}
$return -> add ( new htmlResponsiveSelect ( 'sambaDomainName' , $sambaDomainNames , $selectedDomain , _ ( 'Domain' ), 'sambaDomainName' ), 12 );
2013-08-25 14:21:37 +00:00
// local group members
$memberLabel = new htmlOutputText ( _ ( 'Local members' ));
2019-11-01 19:39:17 +00:00
$return -> addLabel ( $memberLabel );
2013-08-25 14:21:37 +00:00
$addMemberButton = new htmlAccountPageButton ( get_class ( $this ), 'members' , 'open' , 'add.png' , true );
$addMemberButton -> setTitle ( _ ( 'Add' ));
$addMemberButton -> alignment = htmlElement :: ALIGN_TOP ;
2019-11-01 19:39:17 +00:00
$memberHelp = new htmlHelpLink ( 'sambaSIDList' );
2013-08-25 14:21:37 +00:00
if ( ! empty ( $this -> attributes [ 'sambaSIDList' ][ 0 ])) {
$this -> loadSIDCache ();
$memberTable = new htmlTable ();
$memberTable -> alignment = htmlElement :: ALIGN_TOP ;
for ( $i = 0 ; $i < sizeof ( $this -> attributes [ 'sambaSIDList' ]); $i ++ ) {
$member = $this -> attributes [ 'sambaSIDList' ][ $i ];
if ( isset ( $this -> sidCache [ $member ])) {
$member = $this -> sidCache [ $member ];
}
$memberTable -> addElement ( new htmlOutputText ( $member ));
$delButton = new htmlButton ( 'sambaSIDListDel_' . $i , 'del.png' , true );
$delButton -> setTitle ( _ ( 'Delete' ));
$memberTable -> addElement ( $delButton );
if ( $i == ( sizeof ( $this -> attributes [ 'sambaSIDList' ]) - 1 )) {
$memberTable -> addElement ( $addMemberButton );
2019-11-01 19:39:17 +00:00
$memberTable -> addElement ( $memberHelp );
2013-08-25 14:21:37 +00:00
}
$memberTable -> addNewLine ();
}
2019-11-01 19:39:17 +00:00
$return -> addField ( $memberTable );
2013-08-25 14:21:37 +00:00
}
else {
2019-11-01 19:39:17 +00:00
$memberGroup = new htmlGroup ();
$memberGroup -> addElement ( $addMemberButton );
$memberGroup -> addElement ( $memberHelp );
$return -> addField ( $memberGroup );
2013-08-25 14:21:37 +00:00
}
2016-12-19 20:32:08 +00:00
2019-11-01 19:39:17 +00:00
$return -> addVerticalSpacer ( '2rem' );
2016-12-19 20:32:08 +00:00
2013-11-24 12:01:54 +00:00
$remButton = new htmlButton ( 'remObjectClass' , _ ( 'Remove Samba 3 extension' ));
2019-11-01 19:39:17 +00:00
$return -> add ( $remButton , 12 , 12 , 12 , 'text-center' );
2007-10-10 19:04:39 +00:00
}
else {
2019-11-01 19:39:17 +00:00
$return -> add ( new htmlButton ( 'addObjectClass' , _ ( 'Add Samba 3 extension' )), 12 );
2006-05-13 08:55:31 +00:00
}
2004-09-21 11:33:00 +00:00
return $return ;
2008-12-18 12:21:07 +00:00
}
2004-09-21 11:33:00 +00:00
2004-06-13 19:58:58 +00:00
/**
2013-08-25 14:21:37 +00:00
* This function will create the meta HTML code to show a page to add members .
2016-12-19 20:32:08 +00:00
*
2013-08-25 14:21:37 +00:00
* @ return htmlElement HTML meta data
2004-06-13 19:58:58 +00:00
*/
2013-08-25 14:21:37 +00:00
function display_html_members () {
2019-11-01 19:39:17 +00:00
$return = new htmlResponsiveRow ();
2017-03-25 19:25:20 +00:00
$typeManager = new TypeManager ();
2013-08-25 14:21:37 +00:00
// show list of possible new members
if (( isset ( $_POST [ 'form_subpage_' . get_class ( $this ) . '_members_select' ]) || isset ( $_POST [ 'setFilter' ])) && isset ( $_POST [ 'type' ])) {
2017-03-25 19:25:20 +00:00
$type = $typeManager -> getConfiguredType ( $_POST [ 'type' ]);
2013-08-25 14:21:37 +00:00
$this -> loadSIDCache ();
$options = array ();
2017-03-25 19:25:20 +00:00
$filter = get_ldap_filter ( $type -> getId ());
$entries = searchLDAP ( $type -> getSuffix (), $filter , array ( 'dn' , 'cn' , 'uid' , 'sambaSID' ));
2013-08-25 14:21:37 +00:00
$entryCount = sizeof ( $entries );
for ( $i = 0 ; $i < $entryCount ; $i ++ ) {
// require SID
if ( empty ( $entries [ $i ][ 'sambasid' ][ 0 ])) {
continue ;
}
$sid = $entries [ $i ][ 'sambasid' ][ 0 ];
// get label
if ( ! empty ( $this -> sidCache [ $sid ])) {
$label = $this -> sidCache [ $sid ];
}
else {
$label = $sid ;
}
if ( empty ( $this -> attributes [ 'sambaSIDList' ][ 0 ]) || ! in_array ( $sid , $this -> attributes [ 'sambaSIDList' ])) {
$options [ $label ] = $sid ;
}
}
$size = 20 ;
2019-11-01 19:39:17 +00:00
if ( sizeof ( $options ) < 20 ) {
$size = sizeof ( $options );
}
2013-08-25 14:21:37 +00:00
$membersSelect = new htmlSelect ( 'members' , $options , array (), $size );
$membersSelect -> setHasDescriptiveElements ( true );
$membersSelect -> setMultiSelect ( true );
$membersSelect -> setTransformSingleSelect ( false );
2019-11-01 19:39:17 +00:00
$return -> add ( $membersSelect , 12 );
$return -> addVerticalSpacer ( '0.5rem' );
2013-08-25 14:21:37 +00:00
$filterGroup = new htmlGroup ();
2019-11-01 19:39:17 +00:00
$filterInput = new htmlInputField ( 'newFilter' );
$filterInput -> filterSelectBox ( 'members' );
$filterGroup -> addElement ( new htmlOutputText ( _ ( 'Filter' )));
$filterGroup -> addElement ( $filterInput );
2017-03-25 19:25:20 +00:00
$filterGroup -> addElement ( new htmlHiddenInput ( 'type' , $type -> getId ()));
2019-11-01 19:39:17 +00:00
$return -> add ( $filterGroup , 12 );
$return -> addVerticalSpacer ( '2rem' );
$return -> addLabel ( new htmlAccountPageButton ( get_class ( $this ), 'attributes' , 'addMembers' , _ ( 'Add' )));
$return -> addField ( new htmlAccountPageButton ( get_class ( $this ), 'attributes' , 'cancel' , _ ( 'Cancel' )));
2013-08-25 14:21:37 +00:00
return $return ;
}
2017-03-25 19:25:20 +00:00
$types = $typeManager -> getConfiguredTypesForScopes ( array ( 'user' , 'group' , 'host' ));
2013-08-25 14:21:37 +00:00
$options = array ();
$optionsSelected = array ();
2017-03-25 19:25:20 +00:00
foreach ( $types as $type ) {
$options [ $type -> getAlias ()] = $type -> getId ();
if ( empty ( $optionsSelected ) && ( $type -> getScope () == 'group' )) {
$optionsSelected [] = $type -> getId ();
2013-08-25 14:21:37 +00:00
}
}
2019-11-01 19:39:17 +00:00
$return -> addLabel ( new htmlOutputText ( _ ( 'Add entries of this type:' )));
2013-08-25 14:21:37 +00:00
$typeSelect = new htmlSelect ( 'type' , $options , $optionsSelected );
$typeSelect -> setHasDescriptiveElements ( true );
2019-11-01 19:39:17 +00:00
$return -> addField ( $typeSelect );
$return -> addLabel ( new htmlOutputText ( ' ' , false ));
$return -> addField ( new htmlAccountPageButton ( get_class ( $this ), 'members' , 'select' , _ ( 'Ok' )));
$return -> addVerticalSpacer ( '2rem' );
$return -> add ( new htmlAccountPageButton ( get_class ( $this ), 'attributes' , 'membersBack' , _ ( 'Back' )), 12 , 12 , 12 , 'text-center' );
2013-08-25 14:21:37 +00:00
return $return ;
}
2016-12-19 20:32:08 +00:00
2013-08-25 14:21:37 +00:00
/**
* Processes user input of the members page .
* It checks if all input values are correct and updates the associated LDAP attributes .
*
* @ return array list of info / error messages
*/
function process_members () {
2004-06-13 19:58:58 +00:00
$return = array ();
2013-08-25 14:21:37 +00:00
if ( isset ( $_POST [ 'form_subpage_' . get_class ( $this ) . '_attributes_addMembers' ]) && isset ( $_POST [ 'members' ])) {
for ( $i = 0 ; $i < sizeof ( $_POST [ 'members' ]); $i ++ ) {
$this -> attributes [ 'sambaSIDList' ][] = $_POST [ 'members' ][ $i ];
}
2005-02-24 20:50:48 +00:00
}
2004-06-13 19:58:58 +00:00
return $return ;
}
2005-10-09 18:05:32 +00:00
/**
2017-02-19 08:14:11 +00:00
* { @ inheritDoc }
* @ see baseModule :: get_pdfEntries ()
2015-01-07 17:16:35 +00:00
*/
2017-04-01 07:57:03 +00:00
function get_pdfEntries ( $pdfKeys , $typeId ) {
2013-05-09 15:47:35 +00:00
$return = array ();
$this -> addSimplePDFField ( $return , 'gidNumber' , _ ( 'GID number' ));
$this -> addSimplePDFField ( $return , 'sambaSID' , _ ( 'Windows group' ));
$this -> addSimplePDFField ( $return , 'displayName' , _ ( 'Display name' ));
$this -> addSimplePDFField ( $return , 'sambaGroupType' , _ ( 'Samba group type' ));
$this -> addSimplePDFField ( $return , 'description' , _ ( 'Description' ));
2013-08-25 14:21:37 +00:00
// local members
if ( ! empty ( $this -> attributes [ 'sambaSIDList' ][ 0 ])) {
$this -> loadSIDCache ();
$members = array ();
foreach ( $this -> attributes [ 'sambaSIDList' ] as $member ) {
if ( ! empty ( $this -> sidCache [ $member ])) {
$members [] = $this -> sidCache [ $member ];
}
else {
$members [] = $member ;
}
}
2015-03-13 17:15:45 +00:00
$this -> addPDFKeyValue ( $return , 'sambaSIDList' , _ ( 'Local members' ), implode ( ', ' , $members ));
2013-08-25 14:21:37 +00:00
}
2013-05-09 15:47:35 +00:00
return $return ;
2004-09-21 11:33:00 +00:00
}
/**
2017-03-30 18:39:24 +00:00
* { @ inheritDoc }
2004-09-21 11:33:00 +00:00
*/
2017-03-30 18:39:24 +00:00
function get_profileOptions ( $typeId ) {
2018-05-19 12:00:53 +00:00
$return = new htmlResponsiveRow ();
2004-09-21 11:33:00 +00:00
// get list of domains
2010-11-21 19:23:12 +00:00
$sambaDomains = $this -> getDomains ();
2004-09-21 11:33:00 +00:00
$sambaDomainNames = array ();
for ( $i = 0 ; $i < count ( $sambaDomains ); $i ++ ) {
// extract names
$sambaDomainNames [] = $sambaDomains [ $i ] -> name ;
}
// domain
2018-05-19 12:00:53 +00:00
$return -> add ( new htmlResponsiveSelect ( 'sambaGroupMapping_sambaDomainName' , $sambaDomainNames , null , _ ( 'Domain' ), 'sambaDomainName' ), 12 );
2004-09-21 11:33:00 +00:00
return $return ;
2004-09-21 10:43:29 +00:00
}
2004-09-21 11:33:00 +00:00
2005-01-23 12:15:03 +00:00
/**
* Loads the values of an account profile into internal variables .
*
* @ param array $profile hash array with profile values ( identifier => value )
*/
function load_profile ( $profile ) {
if ( isset ( $profile [ 'sambaGroupMapping_sambaDomainName' ][ 0 ])) {
// get list of domains
2010-11-21 19:23:12 +00:00
$sambaDomains = $this -> getDomains ();
2005-01-23 12:15:03 +00:00
for ( $i = 0 ; $i < sizeof ( $sambaDomains ); $i ++ ) {
if ( $sambaDomains [ $i ] -> name == $profile [ 'sambaGroupMapping_sambaDomainName' ][ 0 ]) {
$this -> attributes [ 'sambaSID' ][ 0 ] = $sambaDomains [ $i ] -> SID . " -0 " ;
break ;
}
}
}
}
2020-02-24 19:08:28 +00:00
/** this function fills the error message array with messages
2004-09-21 11:33:00 +00:00
**/
2004-09-26 13:48:52 +00:00
function load_Messages () {
2005-03-03 20:26:54 +00:00
$this -> messages [ 'sambaSID' ][ 0 ] = array ( 'ERROR' , _ ( 'There can be only one group of this type.' )); // third parameter must be set dynamically
2004-10-23 12:11:38 +00:00
$this -> messages [ 'sambaSID' ][ 1 ] = array ( 'ERROR' , _ ( " Account %s: " ) . " (sambaGroupMapping_domain): " . _ ( " LAM was unable to find a Samba 3 domain with this name! " )); // third parameter must be set dynamically
$this -> messages [ 'groupType' ][ 0 ] = array ( 'ERROR' , _ ( " Account %s: " ) . " (sambaGroupMapping_type): " . _ ( " This is not a valid Samba 3 group type! " ), _ ( " Possible values " ) . " : %s " );
2013-11-24 12:01:54 +00:00
$this -> messages [ 'primaryGroup' ][ 0 ] = array ( 'ERROR' , _ ( 'There are still users who have this group as their primary group.' ));
2004-09-21 11:33:00 +00:00
}
2007-11-03 14:17:19 +00:00
/**
* This function is used to check if this module page can be displayed .
* It returns false if a module depends on data from other modules which was not yet entered .
*
* @ return boolean true , if page can be displayed
*/
2004-09-21 11:33:00 +00:00
function module_ready () {
2008-12-18 12:21:07 +00:00
if (( $this -> getGID () == null ) || ( $this -> getGID () == '' )) {
return false ;
}
2004-09-21 11:33:00 +00:00
return true ;
2005-09-19 18:43:10 +00:00
}
2003-12-27 11:21:00 +00:00
2010-10-22 17:52:22 +00:00
/**
* This function is used to check if all settings for this module have been made .
2016-12-19 20:32:08 +00:00
*
2010-10-22 17:52:22 +00:00
* @ see baseModule :: module_complete
*
* @ return boolean true , if settings are complete
*/
public function module_complete () {
if ( ! in_array ( 'sambaGroupMapping' , $this -> attributes [ 'objectClass' ])) {
return true ;
}
if ( ! isset ( $this -> attributes [ 'sambaSID' ]) || ( $this -> attributes [ 'sambaSID' ] == '' )) {
return false ;
}
return true ;
}
2003-12-27 11:21:00 +00:00
2005-09-07 12:58:34 +00:00
/**
* Processes user input of the primary module page .
* It checks if all input values are correct and updates the associated LDAP attributes .
*
* @ return array list of info / error messages
2003-12-27 11:21:00 +00:00
*/
2006-08-14 17:24:27 +00:00
function process_attributes () {
2013-11-24 12:01:54 +00:00
// remove extension
if ( isset ( $_POST [ 'remObjectClass' ])) {
// check for users that have this group as primary group
$result = searchLDAPByAttribute ( 'sambaPrimaryGroupSID' , $this -> attributes [ 'sambaSID' ][ 0 ], 'sambaSamAccount' , array ( 'dn' ), array ( 'user' , 'host' ));
if ( sizeof ( $result ) > 0 ) {
return array ( $this -> messages [ 'primaryGroup' ][ 0 ]);
}
// remove attributes
$this -> attributes [ 'objectClass' ] = array_delete ( array ( 'sambaGroupMapping' ), $this -> attributes [ 'objectClass' ]);
$attrKeys = array_keys ( $this -> attributes );
for ( $k = 0 ; $k < sizeof ( $attrKeys ); $k ++ ) {
if ( strpos ( $attrKeys [ $k ], 'samba' ) > - 1 ) {
unset ( $this -> attributes [ $attrKeys [ $k ]]);
}
}
if ( isset ( $this -> attributes [ 'displayName' ])) {
unset ( $this -> attributes [ 'displayName' ]);
}
return array ();
}
2007-11-18 11:16:03 +00:00
if ( ! in_array ( 'sambaGroupMapping' , $this -> attributes [ 'objectClass' ])) {
return array ();
}
2006-05-17 18:32:10 +00:00
$errors = array ();
2010-11-21 19:23:12 +00:00
$sambaDomains = $this -> getDomains ();
2005-10-03 10:49:48 +00:00
if ( sizeof ( $sambaDomains ) == 0 ) {
2010-10-22 17:52:22 +00:00
return array ();
2005-10-03 10:49:48 +00:00
}
2004-10-09 14:15:56 +00:00
// Save attributes
2006-08-14 17:24:27 +00:00
$this -> attributes [ 'displayName' ][ 0 ] = $_POST [ 'displayName' ];
$this -> attributes [ 'sambaGroupType' ][ 0 ] = $this -> sambaGroupTypes [ $_POST [ 'sambaGroupType' ]];
2003-12-30 15:36:30 +00:00
2004-10-16 19:51:36 +00:00
// Get Domain SID from name
2006-05-13 08:55:31 +00:00
for ( $i = 0 ; $i < count ( $sambaDomains ); $i ++ ) {
2006-08-14 17:24:27 +00:00
if ( ! isset ( $_POST [ 'sambaDomainName' ])) break ;
if ( $_POST [ 'sambaDomainName' ] == $sambaDomains [ $i ] -> name ) {
2004-10-16 19:51:36 +00:00
$SID = $sambaDomains [ $i ] -> SID ;
2006-05-13 08:55:31 +00:00
$RIDbase = $sambaDomains [ $i ] -> RIDbase ;
}
}
2004-10-16 19:51:36 +00:00
// Load attributes
2006-08-14 17:24:27 +00:00
$this -> attributes [ 'displayName' ][ 0 ] = $_POST [ 'displayName' ];
2004-10-16 19:51:36 +00:00
$rids = array_keys ( $this -> rids );
$wrid = false ;
for ( $i = 0 ; $i < count ( $rids ); $i ++ ) {
2006-08-14 17:24:27 +00:00
if ( $_POST [ 'sambaSID' ] == $rids [ $i ]) {
2004-10-16 19:51:36 +00:00
$wrid = true ;
// Get Domain SID
$this -> attributes [ 'sambaSID' ][ 0 ] = $SID . " - " . $this -> rids [ $rids [ $i ]];
2005-03-03 20:26:54 +00:00
// Do a check if special group is unique
2007-10-03 18:02:10 +00:00
if ( $this -> getAccountContainer () -> isNewAccount ) {
2009-11-26 12:53:37 +00:00
$result = searchLDAPByAttribute ( 'sambaSID' , $SID . " - " . $this -> rids [ $rids [ $i ]], 'sambaGroupMapping' , array ( 'sambaSID' ), array ( 'group' ));
if ( sizeof ( $result ) > 0 ) {
2005-12-17 12:11:51 +00:00
$message = $this -> messages [ 'sambaSID' ][ 0 ];
$message [] = $rids [ $i ];
2006-08-16 17:42:35 +00:00
$errors [] = $message ;
2005-12-17 12:11:51 +00:00
}
2003-12-30 15:36:30 +00:00
}
}
2005-03-03 20:26:54 +00:00
}
2007-10-10 19:04:39 +00:00
if ( ! $wrid ) {
2008-12-18 12:21:07 +00:00
$this -> attributes [ 'sambaSID' ][ 0 ] = $SID . " - " . ( $this -> getGID () * 2 + $RIDbase + 1 );
2007-10-10 19:04:39 +00:00
}
2013-08-25 14:21:37 +00:00
// delete local members
foreach ( $_POST as $key => $value ) {
if ( strpos ( $key , 'sambaSIDListDel_' ) === 0 ) {
$index = substr ( $key , strlen ( 'sambaSIDListDel_' ));
unset ( $this -> attributes [ 'sambaSIDList' ][ $index ]);
$this -> attributes [ 'sambaSIDList' ] = array_values ( $this -> attributes [ 'sambaSIDList' ]);
break ;
}
}
2003-12-30 15:36:30 +00:00
// Return error-messages
2006-05-17 18:32:10 +00:00
return $errors ;
2005-09-07 12:58:34 +00:00
}
2003-12-27 11:21:00 +00:00
2004-09-21 11:33:00 +00:00
2007-11-03 14:17:19 +00:00
/**
* Returns a list of modifications which have to be made to the LDAP account .
*
* @ return array list of modifications
* < br > This function returns an array with 3 entries :
* < br > array ( DN1 ( 'add' => array ( $attr ), 'remove' => array ( $attr ), 'modify' => array ( $attr )), DN2 .... )
* < br > DN is the DN to change . It may be possible to change several DNs ( e . g . create a new user and add him to some groups via attribute memberUid )
* < br > " add " are attributes which have to be added to LDAP entry
* < br > " remove " are attributes which have to be removed from LDAP entry
* < br > " modify " are attributes which have to been modified in LDAP entry
2011-02-26 13:14:10 +00:00
* < br > " info " are values with informational value ( e . g . to be used later by pre / postModify actions )
2003-12-27 11:21:00 +00:00
*/
2004-09-21 11:33:00 +00:00
function save_attributes () {
2013-11-24 12:01:54 +00:00
if ( ! in_array ( 'sambaGroupMapping' , $this -> attributes [ 'objectClass' ]) && ! in_array ( 'sambaGroupMapping' , $this -> orig [ 'objectClass' ])) {
2007-11-18 11:16:03 +00:00
return array ();
2003-12-27 11:21:00 +00:00
}
2007-11-18 11:16:03 +00:00
return $this -> getAccountContainer () -> save_module_attributes ( $this -> attributes , $this -> orig );
}
2016-12-19 20:32:08 +00:00
2010-11-21 19:23:12 +00:00
/**
* Returns a list of existing Samba 3 domains .
*
* @ return array list of samba3domain objects
*/
private function getDomains () {
if ( $this -> cachedDomainList != null ) {
return $this -> cachedDomainList ;
}
$this -> cachedDomainList = search_domains ();
return $this -> cachedDomainList ;
}
2003-12-27 11:21:00 +00:00
2013-08-25 14:21:37 +00:00
/**
* Loads the list of Samba accounts into the cache .
*/
private function loadSIDCache () {
if ( $this -> sidCache != null ) {
return ;
}
$results = searchLDAPByFilter ( '(|(objectClass=sambaSamAccount)(objectClass=sambaGroupMapping))' , array ( 'cn' , 'uid' , 'sambaSID' ), array ( 'user' , 'group' , 'host' ));
$this -> sidCache = array ();
foreach ( $results as $result ) {
// require SID
if ( empty ( $result [ 'sambasid' ][ 0 ])) {
continue ;
}
// get label
if ( isset ( $result [ 'cn' ][ 0 ])) {
$label = $result [ 'cn' ][ 0 ];
}
elseif ( isset ( $result [ 'uid' ][ 0 ])) {
$label = $result [ 'uid' ][ 0 ];
}
else {
$label = $result [ 'sambasid' ][ 0 ];
}
$this -> sidCache [ $result [ 'sambasid' ][ 0 ]] = $label ;
}
}
2016-12-19 20:32:08 +00:00
2004-03-09 12:03:39 +00:00
}
2003-12-27 11:21:00 +00:00
?>