WMDE
/
LDAPAccountManager
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

checked all hostedit.php and removed serveral errors 

and improved code a little bit.
converting sambaAccount <--> sambaSamAccount
should work now but it's not tested
This commit is contained in:
katagia 2003-09-17 16:57:01 +00:00
parent 6b9aa444de
commit 42d3041ae7
4 changed files with 269 additions and 144 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lam/help/help.inc
View File

@ -170,6 +170,8 @@ $helpArray = array (
"Text" => _("Users wich are also members of group.")), "Text" => _("Users wich are also members of group.")),
"420" => array ("ext" => "FALSE", "Headline" => _("Display name"), "420" => array ("ext" => "FALSE", "Headline" => _("Display name"),
"Text" => _("Groupname Windows clients will show.")), "Text" => _("Groupname Windows clients will show.")),
"421" => array ("ext" => "FALSE", "Headline" => _("Load profile"),
"Text" => _("You can select a previous defined profile here. All values which make senso to store in profile are overwritten with the stored values.")),
"424" => array ("ext" => "FALSE", "Headline" => _("Surname"), "424" => array ("ext" => "FALSE", "Headline" => _("Surname"),
"Text" => _("Surname of user. Only letters, - and spaces are allowed.")), "Text" => _("Surname of user. Only letters, - and spaces are allowed.")),
"425" => array ("ext" => "FALSE", "Headline" => _("Given name"), "425" => array ("ext" => "FALSE", "Headline" => _("Given name"),

243
lam/lib/account.inc
View File

@ -860,6 +860,7 @@ function loaduser($dn) { // Will load all needed values from an existing account
function loadhost($dn) { // Will load all needed values from an existing account function loadhost($dn) { // Will load all needed values from an existing account
$return = new account(); $return = new account();
$return->type='host';
$result = ldap_search($_SESSION['ldap']->server(), $dn, "objectclass=PosixAccount"); $result = ldap_search($_SESSION['ldap']->server(), $dn, "objectclass=PosixAccount");
$entry = ldap_first_entry($_SESSION['ldap']->server(), $result); $entry = ldap_first_entry($_SESSION['ldap']->server(), $result);
$return->general_dn = (ldap_get_dn($_SESSION['ldap']->server(), $entry)); $return->general_dn = (ldap_get_dn($_SESSION['ldap']->server(), $entry));
@ -871,9 +872,11 @@ function loadhost($dn) { // Will load all needed values from an existing account
} }
if (isset($attr['uid'][0])) $return->general_username = $attr['uid'][0]; if (isset($attr['uid'][0])) $return->general_username = $attr['uid'][0];
if (isset($attr['uidNumber'][0])) $return->general_uidNumber = $attr['uidNumber'][0]; if (isset($attr['uidNumber'][0])) $return->general_uidNumber = $attr['uidNumber'][0];
if (isset($attr['shadowLastChange'][0])) $return->unix_shadowLastChange = $attr['shadowLastChange'][0];
if (isset($attr['gecos'][0])) $return->general_gecos = utf8_decode($attr['gecos'][0]); if (isset($attr['gecos'][0])) $return->general_gecos = utf8_decode($attr['gecos'][0]);
if (isset($attr['description'][0])) $return->general_gecos = $attr['description'][0]; if (isset($attr['displayName'][0])) $return->smb_displayName = utf8_decode($attr['displayName'][0]);
if (isset($attr['userPassword'][0])) $return->unix_password = $attr['userPassword'][0];
// Get Groupname
if (isset($attr['gidNumber'][0])) { if (isset($attr['gidNumber'][0])) {
$result = ldap_search($_SESSION['ldap']->server(), $_SESSION['config']->get_GroupSuffix(), "objectclass=PosixGroup", array('gidNumber', 'cn')); $result = ldap_search($_SESSION['ldap']->server(), $_SESSION['config']->get_GroupSuffix(), "objectclass=PosixGroup", array('gidNumber', 'cn'));
$entry = ldap_first_entry($_SESSION['ldap']->server(), $result); $entry = ldap_first_entry($_SESSION['ldap']->server(), $result);
@ -883,29 +886,9 @@ function loadhost($dn) { // Will load all needed values from an existing account
$entry = ldap_next_entry($_SESSION['ldap']->server(), $entry); $entry = ldap_next_entry($_SESSION['ldap']->server(), $entry);
} }
} }
$result = ldap_search($_SESSION['ldap']->server(), $_SESSION['config']->get_GroupSuffix(), "objectclass=PosixGroup", array('memberUid', 'cn'));
$entry = ldap_first_entry($_SESSION['ldap']->server(), $result);
while ($entry) {
$attr2 = ldap_get_attributes($_SESSION['ldap']->server(), $entry);
if ($attr2['memberUid']) foreach ($attr2['memberUid'] as $id)
if (($id==$return->general_username) && ($attr2['cn'][0]!=$return->general_group)) $return->general_groupadd[]=$attr2['cn'][0];
$entry = ldap_next_entry($_SESSION['ldap']->server(), $entry);
}
if (isset($attr['shadowMin'][0])) $return->unix_pwdminage = $attr['shadowMin'][0];
if (isset($attr['shadowMax'][0])) $return->unix_pwdmaxage = $attr['shadowMax'][0];
if (isset($attr['shadowWarning'][0])) $return->unix_pwdwarn = $attr['shadowWarning'][0];
if (isset($attr['shadowInactive'][0])) $return->unix_pwdallowlogin = $attr['shadowInactive'][0];
if (isset($attr['shadowExpire'][0])) $return->unix_pwdexpire = $attr['shadowExpire'][0]*86400;
if ($_SESSION['config']->samba3 == 'yes') { // load samba3 attributes
if (in_array('sambaSamAccount', $attr['objectClass'])) $load=3; if (in_array('sambaSamAccount', $attr['objectClass'])) {
else $load=2;
}
else {
if (in_array('sambaSamAccount', $attr['objectClass'])) $load=3;
else $load=2;
}
if ($load==3) {
if (isset($attr['sambaAcctFlags'][0])) { if (isset($attr['sambaAcctFlags'][0])) {
if (strrpos($attr['sambaAcctFlags'][0], 'W')) $return->smb_flagsW=true; if (strrpos($attr['sambaAcctFlags'][0], 'W')) $return->smb_flagsW=true;
if (strrpos($attr['sambaAcctFlags'][0], 'D')) $return->smb_flagsD=true; if (strrpos($attr['sambaAcctFlags'][0], 'D')) $return->smb_flagsD=true;
@ -913,9 +896,21 @@ function loadhost($dn) { // Will load all needed values from an existing account
} }
if (isset($attr['sambaPwdCanChange'][0])) $return->smb_pwdcanchange = $attr['sambaPwdCanChange'][0]; if (isset($attr['sambaPwdCanChange'][0])) $return->smb_pwdcanchange = $attr['sambaPwdCanChange'][0];
if (isset($attr['sambaPwdMustChange'][0])) $return->smb_pwdmustchange = $attr['sambaPwdMustChange'][0]; if (isset($attr['sambaPwdMustChange'][0])) $return->smb_pwdmustchange = $attr['sambaPwdMustChange'][0];
if (isset($attr['sambaDomainName'][0])) $return->smb_domain = $attr['sambaDomainName'][0]; if (isset($attr['sambaSID'][0])) { // Samba3 Samba 2.0 don't have any objects 4 groups
$return->smb_mapgroup = $attr['sambaSID'][0];
if (isset($attr['displayName'][0])) $return->smb_displayName = utf8_decode($attr['displayName'][0]);
// extract SID from sambaSID to find domain
$temp = explode('-', $attr['sambaSID'][0]);
$SID = $temp[0].'-'.$temp[1].'-'.$temp[2].'-'.$temp[3].'-'.$temp[4].'-'.$temp[5].'-'.$temp[6];
$samba3domains = $_SESSION['ldap']->search_domains($_SESSION[config]->get_domainSuffix());
for ($i=0; $i<sizeof($samba3domains); $i++)
if ($SID == $samba3domains[$i]->SID) $return->smb_domain = $samba3domains[$i];
} }
else { // return value to prevent loaded values to be overwritten from old samba 2.2 attributes
if ($_SESSION['config']->samba3 == 'yes') return $return;
}
// load samba 2.2 attributes
if (in_array('sambaAccount', $attr['objectClass'])) {
if (isset($attr['acctFlags'][0])) { if (isset($attr['acctFlags'][0])) {
if (strrpos($attr['acctFlags'][0], 'W')) $return->smb_flagsW=true; if (strrpos($attr['acctFlags'][0], 'W')) $return->smb_flagsW=true;
if (strrpos($attr['acctFlags'][0], 'D')) $return->smb_flagsD=true; if (strrpos($attr['acctFlags'][0], 'D')) $return->smb_flagsD=true;
@ -925,8 +920,6 @@ function loadhost($dn) { // Will load all needed values from an existing account
if (isset($attr['pwdCanChange'][0])) $return->smb_pwdcanchange = $attr['pwdCanChange'][0]; if (isset($attr['pwdCanChange'][0])) $return->smb_pwdcanchange = $attr['pwdCanChange'][0];
if (isset($attr['pwdMustChange'][0])) $return->smb_pwdmustchange = $attr['pwdMustChange'][0]; if (isset($attr['pwdMustChange'][0])) $return->smb_pwdmustchange = $attr['pwdMustChange'][0];
} }
if (substr(str_replace('{CRYPT}', '',$attr['userPassword'][0]),0,1) == '!' ) $return->unix_deactivated=true;
$return->type='host';
return $return; return $return;
} }
@ -1428,17 +1421,14 @@ function createhost($values) { // Will create the LDAP-Account
// 4 == Error while creating Account // 4 == Error while creating Account
// 5 == Error while modifying Account // 5 == Error while modifying Account
// Value stored in shadowExpire, days since 1.1.1970 // Value stored in shadowExpire, days since 1.1.1970
if ($values->unix_pwdexpire) {
$date = $values->unix_pwdexpire / 86400 ;
settype($date, 'integer');
}
$values->general_dn = 'uid=' . $values->general_username . ',' . $values->general_dn; $values->general_dn = 'uid=' . $values->general_username . ',' . $values->general_dn;
// All Values need for an host-account // All Values need for an host-account
// General Objectclasses // General Objectclasses
$attr['objectClass'][0] = 'posixAccount'; $attr['objectClass'][0] = 'posixAccount';
$attr['objectClass'][1] = 'shadowAccount'; $attr['objectClass'][1] = 'shadowAccount';
$values->smb_flagsX = 1;
if ($_SESSION['config']->samba3 == 'yes') { if ($_SESSION['config']->samba3 == 'yes') {
$attr['objectClass'][2] = 'sambaSamAccount'; $attr['objectClass'][2] = 'sambaSamAccount';
$attr['sambaNTPassword'] = 'NO PASSWORD*****'; $attr['sambaNTPassword'] = 'NO PASSWORD*****';
@ -1447,7 +1437,7 @@ function createhost($values) { // Will create the LDAP-Account
$attr['sambaSID'] = $values->smb_domain->SID . "-" . (2 * $values->general_uidNumber + $values->smb_domain->RIDbase); // sambaAccount_may $attr['sambaSID'] = $values->smb_domain->SID . "-" . (2 * $values->general_uidNumber + $values->smb_domain->RIDbase); // sambaAccount_may
$attr['sambaPrimaryGroupSID'] = $values->smb_domain->SID . "-" . (2 * getgid($values->general_group) + $values->smb_domain->RIDbase +1); // sambaAccount_req $attr['sambaPrimaryGroupSID'] = $values->smb_domain->SID . "-" . (2 * getgid($values->general_group) + $values->smb_domain->RIDbase +1); // sambaAccount_req
$attr['sambaPwdCanChange'] = time(); // sambaAccount_may $attr['sambaPwdCanChange'] = time(); // sambaAccount_may
$attr['sambaPwdMustChange'] = "1893452400"; // sambaAccount_may $attr['sambaPwdMustChange'] = "1893452400"; // sambaAccount_may // anywhere in year 2030
$attr['sambaAcctFlags'] = smbflag($values); // sambaAccount_may $attr['sambaAcctFlags'] = smbflag($values); // sambaAccount_may
$attr['displayName'] = $values->general_gecos; // sambaAccount_may $attr['displayName'] = $values->general_gecos; // sambaAccount_may
if ($values->smb_domain!='') $attr['sambaDomainName'] = $values->smb_domain->name; // sambaAccount_may if ($values->smb_domain!='') $attr['sambaDomainName'] = $values->smb_domain->name; // sambaAccount_may
@ -1460,7 +1450,7 @@ function createhost($values) { // Will create the LDAP-Account
$attr['rid'] = (2 * $values->general_uidNumber + 1000); // sambaAccount_may $attr['rid'] = (2 * $values->general_uidNumber + 1000); // sambaAccount_may
$attr['primaryGroupID'] = (2 * getgid($values->general_group) + 1001); // sambaAccount_req $attr['primaryGroupID'] = (2 * getgid($values->general_group) + 1001); // sambaAccount_req
$attr['pwdCanChange'] = time(); // sambaAccount_may $attr['pwdCanChange'] = time(); // sambaAccount_may
$attr['pwdMustChange'] = "1893452400"; // sambaAccount_may $attr['pwdMustChange'] = "1893452400"; // sambaAccount_may // anywhere in 2030
$attr['acctFlags'] = smbflag($values); // sambaAccount_may $attr['acctFlags'] = smbflag($values); // sambaAccount_may
$attr['displayName'] = $values->general_gecos; // sambaAccount_may $attr['displayName'] = $values->general_gecos; // sambaAccount_may
if ($values->smb_domain!='') $attr['domain'] = $values->smb_domain; // sambaAccount_may if ($values->smb_domain!='') $attr['domain'] = $values->smb_domain; // sambaAccount_may
@ -1472,18 +1462,9 @@ function createhost($values) { // Will create the LDAP-Account
$attr['gidNumber'] = getgid($values->general_group); // posixAccount_req $attr['gidNumber'] = getgid($values->general_group); // posixAccount_req
$attr['homeDirectory'] = $values->general_homedir; // posixAccount_req $attr['homeDirectory'] = $values->general_homedir; // posixAccount_req
//$values->unix_memberUid = str_replace(' ', '', $values->unix_memberUid); if ($values->smb_flagsD) $attr['userPassword'] = '{CRYPT}!' . crypt('');
//$memberUid = explode (',', $values->unix_memberUid); else $attr['userPassword'] = '{CRYPT}' . crypt('');
//$i=0;
//while(isset($memberUid[$i])) {
// if ($memberUid[$i]!='') $attr['memberUid'][$i] = $memberUid[$i];
// $i++;
// }
// posixAccount_may shadowAccount_may
//if ($values->unix_password_no) $values->unix_password = '';
$values->unix_password = '';
if ($values->smb_flagsD) $attr['userPassword'] = '{CRYPT}!' . crypt($values->unix_password);
else $attr['userPassword'] = '{CRYPT}' . crypt($values->unix_password);
$attr['shadowLastChange'] = getdays(); // shadowAccount_may $attr['shadowLastChange'] = getdays(); // shadowAccount_may
$attr['loginShell'] = $values->general_shell; // posixAccount_may $attr['loginShell'] = $values->general_shell; // posixAccount_may
$attr['gecos'] = $values->general_gecos; // posixAccount_may $attr['gecos'] = $values->general_gecos; // posixAccount_may
@ -1518,7 +1499,8 @@ function modifyhost($values,$values_old) { // Will modify the LDAP-Account
if ($_SESSION['config']->samba3 == 'yes') $attr['sambaPrimaryGroupSID'] = $values->smb_domain->SID . "-" . (2 * getgid($values->general_group) + $values->smb_domain->RIDbase +1); // sambaAccount_req if ($_SESSION['config']->samba3 == 'yes') $attr['sambaPrimaryGroupSID'] = $values->smb_domain->SID . "-" . (2 * getgid($values->general_group) + $values->smb_domain->RIDbase +1); // sambaAccount_req
else $attr['primaryGroupID'] = (2 * getgid($values->general_group) + 1001); // sambaAccount_req else $attr['primaryGroupID'] = (2 * getgid($values->general_group) + 1001); // sambaAccount_req
} }
// posixAccount_may shadowAccount_may
// Lock unix password if Account should be disbaled
$password_old = str_replace('{CRYPT}', '',$values_old->unix_password); $password_old = str_replace('{CRYPT}', '',$values_old->unix_password);
if (substr($password_old,0,1) == '!' ) $password_old = substr($password_old,1,strlen($password_old)); if (substr($password_old,0,1) == '!' ) $password_old = substr($password_old,1,strlen($password_old));
if ($values->smb_password_no) { if ($values->smb_password_no) {
@ -1528,24 +1510,147 @@ function modifyhost($values,$values_old) { // Will modify the LDAP-Account
if ($values->smb_flagsD) $attr['userPassword'] = '{CRYPT}!' . $password_old; if ($values->smb_flagsD) $attr['userPassword'] = '{CRYPT}!' . $password_old;
else $attr['userPassword'] = '{CRYPT}' . $password_old; else $attr['userPassword'] = '{CRYPT}' . $password_old;
// Add missing objectclasses to group
if (!in_array('posixAccount', $values->general_objectClass)) {
$attr['objectClass'] = $values->general_objectClass;
$attr['objectClass'][] = 'posixAccount';
}
if (!in_array('posixAccount', $values->general_objectClass)) {
if (!isset($attr['objectClass'])) $attr['objectClass'] = $values->general_objectClass;
$attr['objectClass'][] = 'shadowAccount';
}
if (isset($attr_old['sambaSID'][0])) $attr_rem['sambaSID'] = $attr_old['sambaSID'][0];
// Add or convert samba attributes & object to samba 3
if (($_SESSION['config']->samba3 == 'yes') && (!in_array('sambaSamAccount', $values->general_objectClass))) {
if (!isset($attr['objectClass'])) $attr['objectClass'] = $values->general_objectClass;
$attr['objectClass'][] = 'sambaSamAccount';
// unset old sambaAccount objectClass
for ($i=0; $i<count($attr['objectClass']); $i++)
if ($attr['objectClass'][$i]=='sambaAccount') unset($attr['objectClass'][$i]);
$attr['objectClass'] = array_values($attr['objectClass']);
// Set correct values for new objectclass
// Load old samba-values not stored in account object
$result = ldap_search($_SESSION['ldap']->server(), $dn, "objectclass=PosixAccount");
$entry = ldap_first_entry($_SESSION['ldap']->server(), $result);
$return->general_dn = (ldap_get_dn($_SESSION['ldap']->server(), $entry));
$attr_old = ldap_get_attributes($_SESSION['ldap']->server(), $entry);
if (isset($attr_old['lmPassword'][0])) $attr['sambaLMPassword'] = $attr_old['lmPassword'][0];
if (isset($attr_old['ntPassword'][0])) $attr['sambaNTPassword'] = $attr_old['ntPassword'][0];
if (isset($attr_old['pwdLastSet'][0])) $attr['sambaPwdLastSet'] = $attr_old['pwdLastSet'][0];
if (isset($attr_old['logonTime'][0])) $attr['sambaLogonTime'] = $attr_old['logonTime'][0];
if (isset($attr_old['logoffTime'][0])) $attr['sambaLogoffTime'] = $attr_old['logoffTime'][0];
if (isset($attr_old['kickoffTime'][0])) $attr['sambaKickoffTime'] = $attr_old['kickoffTime'][0];
if (isset($attr_old['pwdCanChange'][0])) $attr['sambaPwdCanChange'] = $attr_old['pwdCanChange'][0];
if (isset($attr_old['pwdMustChange'][0])) $attr['sambaPwdMustChange'] = $attr_old['pwdMustChange'][0];
if (isset($attr_old['smbHome'][0])) $attr['sambaHomePath'] = $attr_old['smbHome'][0];
if (isset($attr_old['homeDrive'][0])) $attr['sambaHomeDrive'] = $attr_old['homeDrive'][0];
if (isset($attr_old['scriptPath'][0])) $attr['sambaLogonScript'] = $attr_old['scriptPath'][0];
if (isset($attr_old['profilePath'][0])) $attr['sambaProfilePath'] = $attr_old['profilePath'][0];
if (isset($attr_old['userWorkstations'][0])) $attr['sambaUserWorkstations'] = $attr_old['userWorkstations'][0];
// Values used from account object
$attr['displayName'] = $values->smb_displayName; // sambaAccount_may
$attr['sambaAcctFlags'] = smbflag($values); // sambaAccount_may
$attr['sambaDomainName'] = $values->smb_domain->name; // sambaAccount_may
$attr['sambaSid'] = $values->smb_domain->SID . "-" . (2 * $values->general_uidNumber + $values->smb_domain->RIDbase); // sambaAccount_may
$attr['sambaPrimaryGroupSID'] = $values->smb_domain->SID . "-" . (2 * getgid($values->general_group) + $values->smb_domain->RIDbase +1); // sambaAccount_req
// remove old attributes
if (in_array('sambaAccount', $attr_old['objectClass'])) $attr_rem['objectClass'] = 'sambaAccount';
if (isset($attr_old['lmPassword'][0])) $attr_rem['lmPassword'] = $attr_old['lmPassword'][0];
if (isset($attr_old['ntPassword'][0])) $attr_rem['ntPassword'] = $attr_old['ntPassword'][0];
if (isset($attr_old['pwdLastSet'][0])) $attr_rem['pwdLastSet'] = $attr_old['pwdLastSet'][0];
if (isset($attr_old['logonTime'][0])) $attr_rem['logonTime'] = $attr_old['logonTime'][0];
if (isset($attr_old['kickoffTime'][0])) $attr_rem['kickoffTime'] = $attr_old['kickoffTime'][0];
if (isset($attr_old['pwdCanChange'][0])) $attr_rem['pwdCanChange'] = $attr_old['pwdCanChange'][0];
if (isset($attr_old['pwdMustChange'][0])) $attr_rem['pwdMustChange'] = $attr_old['pwdMustChange'][0];
if (isset($attr_old['smbHome'][0])) $attr_rem['smbHome'] = $attr_old['smbHome'][0];
if (isset($attr_old['acctFlags'][0])) $attr_rem['acctFlags'] = $attr_old['acctFlags'][0];
if (isset($attr_old['homeDrive'][0])) $attr_rem['homeDrive'] = $attr_old['homeDrive'][0];
if (isset($attr_old['scriptPath'][0])) $attr_rem['scriptPath'] = $attr_old['scriptPath'][0];
if (isset($attr_old['profilePath'][0])) $attr_rem['profilePath'] = $attr_old['profilePath'][0];
if (isset($attr_old['userWorkstations'][0])) $attr_rem['userWorkstations'] = $attr_old['userWorkstations'][0];
if (isset($attr_old['primaryGroupID'][0])) $attr_rem['primaryGroupID'] = $attr_old['primaryGroupID'][0];
if (isset($attr_old['domain'][0])) $attr_rem['domain'] = $attr_old['domain'][0];
if (isset($attr_old['rid'][0])) $attr_rem['rid'] = $attr_old['rid'][0];
}
// Add or convert samba attributes & object to samba 2.2
if (($_SESSION['config']->samba3 == 'no') && (!in_array('sambaAccount', $values->general_objectClass))) {
if (!isset($attr['objectClass'])) $attr['objectClass'] = $values->general_objectClass;
$attr['objectClass'][] = 'sambaAccount';
// unset old sambaAccount objectClass
for ($i=0; $i<count($attr['objectClass']); $i++)
if ($attr['objectClass'][$i]=='sambaSamAccount') unset($attr['objectClass'][$i]);
$attr['objectClass'] = array_values($attr['objectClass']);
// Set correct values for new objectclass
// Load old samba-values not stored in account object
$result = ldap_search($_SESSION['ldap']->server(), $dn, "objectclass=PosixAccount");
$entry = ldap_first_entry($_SESSION['ldap']->server(), $result);
$return->general_dn = (ldap_get_dn($_SESSION['ldap']->server(), $entry));
$attr_old = ldap_get_attributes($_SESSION['ldap']->server(), $entry);
if (isset($attr_old['sambaLMPassword'][0])) $attr['lmPassword'] = $attr_old['sambaLMPassword'][0];
if (isset($attr_old['sambaNTPassword'][0])) $attr['ntPassword'] = $attr_old['sambaNTPassword'][0];
if (isset($attr_old['sambaPwdLastSet'][0])) $attr['pwdLastSet'] = $attr_old['sambaPwdLastSet'][0];
if (isset($attr_old['sambaLogonTime'][0])) $attr['logonTime'] = $attr_old['sambaLogonTime'][0];
if (isset($attr_old['sambaLogoffTime'][0])) $attr['logoffTime'] = $attr_old['sambaLogoffTime'][0];
if (isset($attr_old['sambaKickoffTime'][0])) $attr['kickoffTime'] = $attr_old['sambaKickoffTime'][0];
if (isset($attr_old['sambaPwdCanChange'][0])) $attr['pwdCanChange'] = $attr_old['sambaPwdCanChange'][0];
if (isset($attr_old['sambaPwdMustChange'][0])) $attr['pwdMustChange'] = $attr_old['sambaPwdMustChange'][0];
if (isset($attr_old['sambaHomePath'][0])) $attr['smbHome'] = $attr_old['sambaHomePath'][0];
if (isset($attr_old['sambaHomeDrive'][0])) $attr['homeDrive'] = $attr_old['sambaHomeDrive'][0];
if (isset($attr_old['sambaLogonScript'][0])) $attr['scriptPath'] = $attr_old['sambaLogonScript'][0];
if (isset($attr_old['sambaProfilePath'][0])) $attr['profilePath'] = $attr_old['sambaProfilePath'][0];
if (isset($attr_old['sambaUserWorkstations'][0])) $attr['userWorkstations'] = $attr_old['sambaUserWorkstations'][0];
// Values used from account object
$attr['displayName'] = $values->smb_displayName; // sambaAccount_may
$attr['acctFlags'] = smbflag($values); // sambaAccount_may
if ($values->smb_domain!='') $attr['domain'] = $values->smb_domain; // sambaAccount_may
$attr['primaryGroupID'] = (2 * getgid($values->general_group) + 1001); // sambaAccount_req
$attr['rid'] = (2 * $values->general_uidNumber + 1000); // sambaAccount_may
// remove old attributes
if (in_array('sambaSamAccount', $attr_old['objectClass'])) $attr_rem['objectClass'] = 'sambaSamAccount';
if (isset($attr_old['sambaLMPassword'][0])) $attr_rem['sambaLMPassword'] = $attr_old['sambaLMPassword'][0];
if (isset($attr_old['sambaNTPassword'][0])) $attr_rem['sambaNTPassword'] = $attr_old['sambaNTPassword'][0];
if (isset($attr_old['sambaPwdLastSet'][0])) $attr_rem['sambaPwdLastSet'] = $attr_old['sambaPwdLastSet'][0];
if (isset($attr_old['sambaLogonTime'][0])) $attr_rem['sambaLogonTime'] = $attr_old['sambaLogonTime'][0];
if (isset($attr_old['sambaKickoffTime'][0])) $attr_rem['sambaKickoffTime'] = $attr_old['sambaKickoffTime'][0];
if (isset($attr_old['sambaPwdCanChange'][0])) $attr_rem['sambaPwdCanChange'] = $attr_old['sambaPwdCanChange'][0];
if (isset($attr_old['sambaPwdMustChange'][0])) $attr_rem['sambaPwdMustChange'] = $attr_old['sambaPwdMustChange'][0];
if (isset($attr_old['sambaHomePath'][0])) $attr_rem['sambaHomePath'] = $attr_old['sambaHomePAth'][0];
if (isset($attr_old['sambaAcctFlags'][0])) $attr_rem['sambaAcctFlags'] = $attr_old['sambaAcctFlags'][0];
if (isset($attr_old['sambaHomeDrive'][0])) $attr_rem['sambaHomeDrive'] = $attr_old['sambaHomeDrive'][0];
if (isset($attr_old['sambaLogonScript'][0])) $attr_rem['sambaLogonScript'] = $attr_old['sambaLogonScript'][0];
if (isset($attr_old['sambaProfilePath'][0])) $attr_rem['sambaProfilePath'] = $attr_old['sambaProfilePath'][0];
if (isset($attr_old['sambaUserWorkstations'][0])) $attr_rem['sambaUserWorkstations'] = $attr_old['sambaUserWorkstations'][0];
if (isset($attr_old['sambaPrimaryGroupID'][0])) $attr_rem['sambaPrimaryGroupID'] = $attr_old['sambaPrimaryGroupID'][0];
if (isset($attr_old['sambaDomainName'][0])) $attr_rem['sambaDomainName'] = $attr_old['sambaDomainName'][0];
if (isset($attr_old['sambaSID'][0])) $attr_rem['sambaSID'] = $attr_old['sambaSID'][0];
}
if ($_SESSION['config']->samba3 == 'yes') { if ($_SESSION['config']->samba3 == 'yes') {
// Reset password
if ($values->smb_password_no) { if ($values->smb_password_no) {
$attr['sambaNTPassword'] = 'NO PASSWORD*****'; $attr['sambaNTPassword'] = 'NO PASSWORD*****';
$attr['sambaLMPassword'] = 'NO PASSWORD*****'; $attr['sambaLMPassword'] = 'NO PASSWORD*****';
$attr['sambaPwdLastSet'] = time(); // sambaAccount_may $attr['sambaPwdLastSet'] = time(); // sambaAccount_may
$attr['userPassword'] = '';
$attr['shadowLastChange'] = getdays();
} }
if ($values->general_gecos != $values_old->general_gecos) $attr['displayName'] = $values->general_gecos; // sambaAccount_may
$attr['sambaAcctFlags'] = smbflag($values); // sambaAccount_may $attr['sambaAcctFlags'] = smbflag($values); // sambaAccount_may
if (($values->smb_domain->name!='') && ($values->smb_domain->name!=$values_old->smb_domain->name)) $attr['sambaDomainName'] = $values->smb_domain->name; // sambaAccount_may if ($values->smb_domain->name!=$values_old->smb_domain->name) $attr['sambaDomainName'] = $values->smb_domain->name; // sambaAccount_may
if (($values->smb_domain->name=='') && ($values->smb_domain->name!=$values_old->smb_domain->name)) $attr_rem['sambaDomainName'] = $values_old->smb_domain->name; // sambaAccount_may
} }
// samba 2.2
else { else {
if ($values->smb_password_no) { if ($values->smb_password_no) {
$attr['ntPassword'] = 'NO PASSWORD*****'; $attr['ntPassword'] = 'NO PASSWORD*****';
$attr['lmPassword'] = 'NO PASSWORD*****'; $attr['lmPassword'] = 'NO PASSWORD*****';
$attr['pwdLastSet'] = time(); // sambaAccount_may $attr['pwdLastSet'] = time(); // sambaAccount_may
$attr['userPassword'] = '';
$attr['shadowLastChange'] = getdays();
} }
if ($values->general_gecos != $values_old->general_gecos) $attr['displayName'] = $values->general_gecos; // sambaAccount_may if (isset($attr_old['sambaSID'][0])) $attr_rem['sambaSID'] = $attr_old['sambaSID'][0];
$attr['acctFlags'] = smbflag($values); // sambaAccount_may $attr['acctFlags'] = smbflag($values); // sambaAccount_may
if (($values->smb_domain!='') && ($values->smb_domain!=$values_old->smb_domain)) $attr['domain'] = $values->smb_domain; // sambaAccount_may if (($values->smb_domain!='') && ($values->smb_domain!=$values_old->smb_domain)) $attr['domain'] = $values->smb_domain; // sambaAccount_may
if (($values->smb_domain=='') && ($values->smb_domain!=$values_old->smb_domain)) $attr_rem['domain'] = $values_old->smb_domain; // sambaAccount_may if (($values->smb_domain=='') && ($values->smb_domain!=$values_old->smb_domain)) $attr_rem['domain'] = $values_old->smb_domain; // sambaAccount_may
@ -1554,34 +1659,8 @@ function modifyhost($values,$values_old) { // Will modify the LDAP-Account
if ($values->general_gecos != $values_old->general_gecos) { if ($values->general_gecos != $values_old->general_gecos) {
$attr['gecos'] = $values->general_gecos; // posixAccount_may $attr['gecos'] = $values->general_gecos; // posixAccount_may
$attr['description'] = $values->general_gecos; // posixAccount_may sambaAccount_may $attr['description'] = $values->general_gecos; // posixAccount_may sambaAccount_may
$attr['displayName'] = $values->general_gecos; // sambaAccount_may
} }
if ( (!in_array('posixAccount', $_SESSION['account_old']->general_objectClass)) ||
(!in_array('shadowAccount', $_SESSION['account_old']->general_objectClass)) ||
(!in_array('account', $_SESSION['account_old']->general_objectClass)) ||
(($_SESSION['config']->samba3 =='yes') && (!in_array('sambaSamAccount', $_SESSION['account_old']->general_objectClass))) ||
(($_SESSION['config']->samba3 !='yes') && (!in_array('sambaAccount', $_SESSION['account_old']->general_objectClass)))) {
$result = ldap_search($_SESSION['ldap']->server(), $values_old->general_dn, "objectclass=PosixAccount");
$entry = ldap_first_entry($_SESSION['ldap']->server(), $result);
$attr_old = ldap_get_attributes($_SESSION['ldap']->server(), $entry);
// remove "count" from array
unset($attr_old['count']);
for ($i=0; $i < sizeof($attr_old); $i++) unset($attr_old[$i]);
$keys = array_keys($attr_old);
for ($i=0; $i < sizeof($keys); $i++)
unset($attr_old[$keys[$i]]['count']);
unset ($attr_old['objectClass']);
$attr_old['objectClass'][0] = 'posixAccount';
$attr_old['objectClass'][1] = 'shadowAccount';
$attr_old['objectClass'][2] = 'account';
if ($_SESSION['config']->samba3 !='yes') $attr_old['objectClass'][3] = 'sambaSamAccount';
else $attr_old['objectClass'][3] = 'sambaAccount';
$success = ldap_delete($_SESSION['ldap']->server(),$values_old->general_dn);
if ($success) $success = ldap_add($_SESSION['ldap']->server(),$values->general_dn, $attr_old);
else return 5;
}
if ($attr_rem) { if ($attr_rem) {
$success = ldap_mod_del($_SESSION['ldap']->server(),$values_old->general_dn, $attr_rem); $success = ldap_mod_del($_SESSION['ldap']->server(),$values_old->general_dn, $attr_rem);
@ -1654,7 +1733,13 @@ function modifygroup($values,$values_old) { // Will modify the LDAP-Group
$values->general_dn = 'cn=' . $values->general_username . ',' . $values->general_dn; $values->general_dn = 'cn=' . $values->general_username . ',' . $values->general_dn;
if ($values->general_username != $values_old->general_username) $attr['cn'] = $values->general_username; if ($values->general_username != $values_old->general_username) $attr['cn'] = $values->general_username;
if ($values->general_uidNumber != $values_old->general_uidNumber) $attr['gidNumber'] = $values->general_uidNumber; // Set correct SID if UID was changed
if ($values->general_uidNumber != $values_old->general_uidNumber) {
$attr['uidNumber'] = $values->general_uidNumber; // posixAccount_req
if ($_SESSION['config']->samba3 == 'yes') $attr['sambaSid'] = $values->smb_domain->SID . "-" . (2 * $values->general_uidNumber + $values->smb_domain->RIDbase +1); // sambaAccount_may
else $attr['rid'] = (2 * $values->general_uidNumber + 1001); // sambaAccount_may
}
if ($values->general_gecos != $values_old->general_gecos) $attr['description'] = utf8_encode($values->general_gecos); if ($values->general_gecos != $values_old->general_gecos) $attr['description'] = utf8_encode($values->general_gecos);
if (($values->smb_displayName != $values_old->smb_displayName) && ($values->smb_displayName != '')) if (($values->smb_displayName != $values_old->smb_displayName) && ($values->smb_displayName != ''))

16
lam/templates/account/groupedit.php
View File

@ -95,17 +95,6 @@ switch ($_POST['select']) { // Select which part of page should be loaded and ch
case 'general': case 'general':
// Write all general values into $_SESSION['account'] if no profile should be loaded // Write all general values into $_SESSION['account'] if no profile should be loaded
if (!$_POST['load']) { if (!$_POST['load']) {
// Set correct SID if GIS has changed
if ($_SESSION['config']->samba3 == 'yes')
if (isset($_SESSION['account_old']->general_uidNumber)) {
if ($_SESSION['account']->general_uidNumber != $_POST['f_general_uidNumber']) {
$temp = explode('-', $_SESSION['account']->smb_mapgroup);
$SID = $temp[0].'-'.$temp[1].'-'.$temp[2].'-'.$temp[3].'-'.$temp[4].'-'.$temp[5].'-'.$temp[6];
if ( $temp[7]!='512' && $temp[7]!='513' && $temp[7]!='514' )
$_SESSION['account']->smb_mapgroup = $_SESSION['account']->smb_domain->SID . "-".
(2 * $_POST['f_general_uidNumber'] + $_SESSION['account']->smb_domain->RIDbase +1);
}
}
$_SESSION['account']->general_dn = $_POST['f_general_suffix']; $_SESSION['account']->general_dn = $_POST['f_general_suffix'];
$_SESSION['account']->general_username = $_POST['f_general_username']; $_SESSION['account']->general_username = $_POST['f_general_username'];
$_SESSION['account']->general_uidNumber = $_POST['f_general_uidNumber']; $_SESSION['account']->general_uidNumber = $_POST['f_general_uidNumber'];
@ -120,7 +109,7 @@ switch ($_POST['select']) { // Select which part of page should be loaded and ch
$_SESSION['account']->general_gecos = $_SESSION['account']->general_username ; $_SESSION['account']->general_gecos = $_SESSION['account']->general_username ;
$errors[] = array('INFO', _('Gecos'), _('Inserted groupname in gecos-field.')); $errors[] = array('INFO', _('Gecos'), _('Inserted groupname in gecos-field.'));
} }
// Create automatic groupaccount with number if original user already exists // Create automatic groupaccount with number if original group already exists
// Reset name to original name if new name is in use // Reset name to original name if new name is in use
if (ldapexists($_SESSION['account'], 'group', $_SESSION['account_old']) && is_object($_SESSION['account_old'])) if (ldapexists($_SESSION['account'], 'group', $_SESSION['account_old']) && is_object($_SESSION['account_old']))
$_SESSION['account']->general_username = $_SESSION['account_old']->general_username; $_SESSION['account']->general_username = $_SESSION['account_old']->general_username;
@ -421,7 +410,8 @@ switch ($select_local) { // Select which part of page will be loaded
foreach ($profilelist as $profile) echo " <option>$profile</option>\n"; foreach ($profilelist as $profile) echo " <option>$profile</option>\n";
echo "</select>\n". echo "</select>\n".
"<input name=\"load\" type=\"submit\" value=\""; echo _('Load Profile'); "<input name=\"load\" type=\"submit\" value=\""; echo _('Load Profile');
echo "\"></td>\n</tr>\n</table>\n</fieldset>\n"; echo "\"></td><td><a href=\"../help.php?HelpNumber=421\" target=\"lamhelp\">";
echo _('Help')."</a></td>\n</tr>\n</table>\n</fieldset>\n";
} }
echo "</td></tr>\n</table>\n</td></tr></table>\n"; echo "</td></tr>\n</table>\n</td></tr></table>\n";
break; break;

122
lam/templates/account/hostedit.php
View File

@ -38,11 +38,10 @@ if (isset($_GET['DN'])) {
if (isset($_SESSION['account_old'])) unset($_SESSION['account_old']); if (isset($_SESSION['account_old'])) unset($_SESSION['account_old']);
$DN = str_replace("\'", '',$_GET['DN']); $DN = str_replace("\'", '',$_GET['DN']);
$_SESSION['account'] = loadhost($DN); $_SESSION['account'] = loadhost($DN);
$_SESSION['account'] ->type = 'host';
$_SESSION['account']->smb_flagsW = 1; $_SESSION['account']->smb_flagsW = 1;
$_SESSION['account']->smb_flagsX = 1;
$_SESSION['account_old'] = $_SESSION['account']; $_SESSION['account_old'] = $_SESSION['account'];
$_SESSION['account']->unix_password=''; // Store only DN without uid=$name
$_SESSION['account']->smb_password='';
$_SESSION['account']->general_dn = substr($_SESSION['account']->general_dn, strpos($_SESSION['account']->general_dn, ',')+1); $_SESSION['account']->general_dn = substr($_SESSION['account']->general_dn, strpos($_SESSION['account']->general_dn, ',')+1);
$_SESSION['final_changegids'] = ''; $_SESSION['final_changegids'] = '';
} }
@ -50,14 +49,22 @@ if (isset($_GET['DN'])) {
$_SESSION['account'] = loadHostProfile('default'); $_SESSION['account'] = loadHostProfile('default');
$_SESSION['account'] ->type = 'host'; $_SESSION['account'] ->type = 'host';
$_SESSION['account']->smb_flagsW = 1; $_SESSION['account']->smb_flagsW = 1;
$_SESSION['account']->smb_flagsX = 1;
$_SESSION['account']->general_homedir = '/dev/null';
$_SESSION['account']->general_shell = '/bin/false';
if (isset($_SESSION['account_old'])) unset($_SESSION['account_old']); if (isset($_SESSION['account_old'])) unset($_SESSION['account_old']);
$_SESSION['account_old'] = false;
} }
} }
else if (count($_POST)==0) { // Startcondition. groupedit.php was called from outside else if (count($_POST)==0) { // Startcondition. hostedit.php was called from outside
$_SESSION['account'] = loadHostProfile('default'); $_SESSION['account'] = loadHostProfile('default');
$_SESSION['account'] ->type = 'host'; $_SESSION['account'] ->type = 'host';
$_SESSION['account']->smb_flagsW = 1; $_SESSION['account']->smb_flagsW = 1;
$_SESSION['account']->smb_flagsX = 1;
$_SESSION['account']->general_homedir = '/dev/null';
$_SESSION['account']->general_shell = '/bin/false';
if (isset($_SESSION['account_old'])) unset($_SESSION['account_old']); if (isset($_SESSION['account_old'])) unset($_SESSION['account_old']);
$_SESSION['account_old'] = false;
} }
switch ($_POST['select']) { // Select which part of page should be loaded and check values switch ($_POST['select']) { // Select which part of page should be loaded and check values
@ -79,21 +86,68 @@ switch ($_POST['select']) { // Select which part of page should be loaded and ch
$_SESSION['account']->general_gecos = $_POST['f_general_gecos']; $_SESSION['account']->general_gecos = $_POST['f_general_gecos'];
// Check if values are OK and set automatic values. if not error-variable will be set // Check if values are OK and set automatic values. if not error-variable will be set
if (isset($_SESSION['account_old'])) list($values, $errors) = checkglobal($_SESSION['account'], $_SESSION['account']->type, $_SESSION['account_old']); // account.inc if ( substr($_SESSION['account']->general_username, strlen($_SESSION['account']->general_username)-1, strlen($_SESSION['account']->general_username)) != '$' ) {
else list($values, $errors) = checkglobal($_SESSION['account'], $_SESSION['account']->type); // account.inc $_SESSION['account']->general_username = $_SESSION['account']->general_username . '$';
if (is_object($values)) { $errors[] = array('WARN', _('Host name'), _('Added $ to hostname.'));
while (list($key, $val) = each($values)) // Set only defined values
if (isset($val)) $_SESSION['account']->$key = $val;
} }
// Check which part Site should be displayed next // Check if Hostname contains only valid characters
$select_local = 'general'; if ( !ereg('^([a-z]|[A-Z]|[0-9]|[.]|[-]|[$])*$', $_SESSION['account']->general_username))
$errors[] = array('ERROR', _('Host name'), _('Hostname contains invalid characters. Valid characters are: a-z, 0-9 and .-_ !'));
if ($_SESSION['account']->general_gecos=='') {
$_SESSION['account']->general_gecos = $_SESSION['account']->general_username;
$errors[] = array('INFO', _('Gecos'), _('Inserted hostname in gecos-field.'));
}
// Create automatic Hostname with number if original user already exists
// Reset name to original name if new name is in use
if (ldapexists($_SESSION['account'], 'group', $_SESSION['account_old']) && is_object($_SESSION['account_old']))
$_SESSION['account']->general_username = $_SESSION['account_old']->general_username;
while ($temp = ldapexists($_SESSION['account'], 'host', $_SESSION['account_old'])) {
// get last character of username
$_SESSION['account']->general_username = substr($_SESSION['account']->general_username, 0, $_SESSION['account']->general_username-1);
$lastchar = substr($_SESSION['account']->general_username, strlen($_SESSION['account']->general_username)-2, 1);
// Last character is no number
if ( !ereg('^([0-9])+$', $lastchar))
$_SESSION['account']->general_username = $_SESSION['account']->general_username . '2';
else {
$i=strlen($_SESSION['account']->general_username)-3;
$mark = false;
while (!$mark) {
if (ereg('^([0-9])+$',substr($_SESSION['account']->general_username, $i, strlen($_SESSION['account']->general_username)-1))) $i--;
else $mark=true;
}
// increase last number with one
$firstchars = substr($_SESSION['account']->general_username, 0, $i+1);
$lastchars = substr($_SESSION['account']->general_username, $i+1, strlen($_SESSION['account']->general_username)-$i);
$_SESSION['account']->general_username = $firstchars . (intval($lastchars)+1). '$';
}
$_SESSION['account']->general_username = $_SESSION['account']->general_username . "$";
}
if ($_SESSION['account']->general_username != $_POST['f_general_username'])
$errors[] = array('WARN', _('Host name'), _('Hostname already in use. Selected next free hostname.'));
// Check if UID is valid. If none value was entered, the next useable value will be inserted
$_SESSION['account']->general_uidNumber = checkid($_SESSION['account'], 'host', $_SESSION['account_old']);
if (is_string($_SESSION['account']->general_uidNumber)) { // true if checkid has returned an error
$errors[] = array('ERROR', _('ID-Number'), $_SESSION['account']->general_uidNumber);
unset($_SESSION['account']->general_uidNumber);
}
// Check if Name-length is OK. minLength=3, maxLength=20
if ( !ereg('.{3,20}', $_SESSION['account']->general_username)) $errors[] = array('ERROR', _('Name'), _('Name must contain between 3 and 20 characters.'));
// Check if Name starts with letter
if ( !ereg('^([a-z]|[A-Z]).*$', $_SESSION['account']->general_username))
$errors[] = array('ERROR', _('Name'), _('Name contains invalid characters. First character must be a letter'));
} }
break; break;
case 'samba': case 'samba':
// Write all general values into $_SESSION['account'] // Write all general values into $_SESSION['account']
$_SESSION['account']->smb_displayName = $_POST['f_smb_displayName'];
if (isset($_POST['f_smb_flagsD'])) $_SESSION['account']->smb_flagsD = true; if (isset($_POST['f_smb_flagsD'])) $_SESSION['account']->smb_flagsD = true;
else $_SESSION['account']->smb_flagsD = false; else $_SESSION['account']->smb_flagsD = false;
if ($_SESSION['config']->samba3 == 'yes') { if ($_SESSION['config']->samba3 == 'yes') {
$samba3domains = $_SESSION['ldap']->search_domains($_SESSION[config]->get_domainSuffix()); $samba3domains = $_SESSION['ldap']->search_domains($_SESSION[config]->get_domainSuffix());
for ($i=0; $i<sizeof($samba3domains); $i++) for ($i=0; $i<sizeof($samba3domains); $i++)
@ -104,19 +158,20 @@ switch ($_POST['select']) { // Select which part of page should be loaded and ch
else { else {
$_SESSION['account']->smb_domain = $_POST['f_smb_domain']; $_SESSION['account']->smb_domain = $_POST['f_smb_domain'];
} }
// Reset password if reset button was pressed. Button only vissible if account should be modified
// Check if values are OK and set automatic values. if not error-variable will be set // Check if values are OK and set automatic values. if not error-variable will be set
list($values, $errors) = checksamba($_SESSION['account'], $_SESSION['account']->type); // account.inc if (($_SESSION['account']->smb_displayName=='') && isset($_SESSION['account']->general_gecos)) {
if (is_object($values)) { $_SESSION['account']->smb_displayName = $_SESSION['account']->general_gecos;
while (list($key, $val) = each($values)) // Set only defined values $errors[] = array('INFO', _('Display name'), _('Inserted gecos-field as display name.'));
if (isset($val)) $_SESSION['account']->$key = $val;
} }
// Check which part Site should be displayed next
if ((!$_SESSION['account']->smb_domain=='') && !ereg('^([a-z]|[A-Z]|[0-9]|[-])+$', $_SESSION['account']->smb_domain))
$errors[] = array('ERROR', _('Domain name'), _('Domain name contains invalid characters. Valid characters are: a-z, A-Z, 0-9 and -.'));
// Reset password if reset button was pressed. Button only vissible if account should be modified
if ($_POST['respass']) { if ($_POST['respass']) {
$_SESSION['account']->unix_password_no=true; $_SESSION['account']->unix_password_no=true;
$_SESSION['account']->smb_password_no=true; $_SESSION['account']->smb_password_no=true;
} }
$select_local = 'samba';
break; break;
case 'final': case 'final':
$select_local = 'final'; $select_local = 'final';
@ -196,11 +251,11 @@ if (is_array($errors)) {
for ($i=0; $i<sizeof($errors); $i++) StatusMessage($errors[$i][0], $errors[$i][1], $errors[$i][2]); for ($i=0; $i<sizeof($errors); $i++) StatusMessage($errors[$i][0], $errors[$i][1], $errors[$i][2]);
echo "</table>"; echo "</table>";
} }
// print_r($_SESSION['account']); // print_r($_SESSION['account']);
switch ($select_local) { // Select which part of page will be loaded switch ($select_local) { // Select which part of page will be loaded
// general = startpage, general account paramters // general = startpage, general account paramters
// unix = page with all shadow-options and password // unix = page with all shadow-options and password
@ -277,8 +332,8 @@ switch ($select_local) { // Select which part of page will be loaded
foreach ($profilelist as $profile) echo " <option>$profile</option>\n"; foreach ($profilelist as $profile) echo " <option>$profile</option>\n";
echo "</select></td><td>\n". echo "</select></td><td>\n".
"<input name=\"load\" type=\"submit\" value=\""; echo _('Load Profile'); "<input name=\"load\" type=\"submit\" value=\""; echo _('Load Profile');
echo "\"></td><td><a href=\"../help.php?HelpNumber=XXX\" target=\"lamhelp\">"; echo "\"></td><td><a href=\"../help.php?HelpNumber=421\" target=\"lamhelp\">";
echo _('Help-XX')."</a></td>\n</tr>\n</table>\n</fieldset>\n"; echo _('Help')."</a></td>\n</tr>\n</table>\n</fieldset>\n";
} }
echo "</td></tr></table>\n</td></tr>\n</table>\n"; echo "</td></tr></table>\n</td></tr>\n</table>\n";
break; break;
@ -298,6 +353,10 @@ switch ($select_local) { // Select which part of page will be loaded
echo "\"></fieldset></td></tr></table></td>\n<td>"; echo "\"></fieldset></td></tr></table></td>\n<td>";
echo "<table border=0 width=\"100%\"><tr><td><fieldset class=\"hostedit-bright\"><legend class=\"hostedit-bright\"><b>"._('Samba properties')."</b></legend>\n"; echo "<table border=0 width=\"100%\"><tr><td><fieldset class=\"hostedit-bright\"><legend class=\"hostedit-bright\"><b>"._('Samba properties')."</b></legend>\n";
echo "<table border=0 width=\"100%\"><tr><td>"; echo "<table border=0 width=\"100%\"><tr><td>";
echo _("Display name");
echo "</td>\n<td>".
"<input name=\"f_smb_displayName\" type=\"text\" size=\"30\" maxlength=\"50\" value=\"".$_SESSION['account']->smb_displayName."\">".
"</td>\n<td><a href=\"../help.php?HelpNumber=420\" target=\"lamhelp\">"._('Help')."</a></td>\n</tr>\n<tr>\n<td>";
echo _('Password'); echo _('Password');
echo '</td><td>'; echo '</td><td>';
if (isset($_SESSION['account_old'])) { if (isset($_SESSION['account_old'])) {
@ -357,38 +416,27 @@ switch ($select_local) { // Select which part of page will be loaded
else echo _('Create'); else echo _('Create');
echo "</b></legend>\n"; echo "</b></legend>\n";
echo "<table border=0 width=\"100%\"><tr><td>"; echo "<table border=0 width=\"100%\"><tr><td>";
if (($_SESSION['account_old']) && ($_SESSION['account']->general_uidNumber != $_SESSION['account_old']->general_uidNumber)) {
echo '<tr>';
StatusMessage ('INFO', _('UID-number has changed. You have to run the following command as root in order to change existing file-permissions:'),
'find / -gid ' . $_SESSION['account_old' ]->general_uidNumber . ' -exec chown ' . $_SESSION['account']->general_uidNumber . ' {} \;');
echo '</tr>'."\n";
}
if (isset($_SESSION['account_old']->general_objectClass)) { if (isset($_SESSION['account_old']->general_objectClass)) {
if (!in_array('posixAccount', $_SESSION['account_old']->general_objectClass)) { if (!in_array('posixAccount', $_SESSION['account_old']->general_objectClass)) {
echo '<tr>'; echo '<tr>';
StatusMessage('WARN', _('ObjectClass posixAccount not found.'), _('Have to recreate entry.')); StatusMessage('WARN', _('ObjectClass posixAccount not found.'), _('Have to add objectClass posixAccount.'));
echo "</tr>\n"; echo "</tr>\n";
} }
if (!in_array('shadowAccount', $_SESSION['account_old']->general_objectClass)) { if (!in_array('shadowAccount', $_SESSION['account_old']->general_objectClass)) {
echo '<tr>'; echo '<tr>';
StatusMessage('WARN', _('ObjectClass shadowAccount not found.'), _('Have to recreate entry.')); StatusMessage('WARN', _('ObjectClass shadowAccount not found.'), _('Have to add objectClass shadowAccount.'));
echo "</tr>\n";
}
if (!in_array('account', $_SESSION['account_old']->general_objectClass)) {
echo '<tr>';
StatusMessage('WARN', _('ObjectClass account not found.'), _('Have to recreate entry.'));
echo "</tr>\n"; echo "</tr>\n";
} }
if ($_SESSION['config']->samba3 == 'yes') { if ($_SESSION['config']->samba3 == 'yes') {
if (!in_array('sambaSamAccount', $_SESSION['account_old']->general_objectClass)) { if (!in_array('sambaSamAccount', $_SESSION['account_old']->general_objectClass)) {
echo '<tr>'; echo '<tr>';
StatusMessage('WARN', _('ObjectClass sambaSamAccount not found.'), _('Have to recreate entry.')); StatusMessage('WARN', _('ObjectClass sambaSamAccount not found.'), _('Have to add objectClass sambaSamAccount. Host with sambaAccount will be updated.'));
echo "</tr>\n"; echo "</tr>\n";
}} }}
else else
if (!in_array('sambaAccount', $_SESSION['account_old']->general_objectClass)) { if (!in_array('sambaAccount', $_SESSION['account_old']->general_objectClass)) {
echo '<tr>'; echo '<tr>';
StatusMessage('WARN', _('ObjectClass sambaAccount not found.'), _('Have to recreate entry.')); StatusMessage('WARN', _('ObjectClass sambaAccount not found.'), _('Have to add objectClass sambaSamAccount. Host with sambaSamAccount will be set back to sambaAccount.'));
echo "</tr>\n"; echo "</tr>\n";
} }
} }