WMDE
/
LDAPAccountManager
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

use phpseclib for SSH connection

This commit is contained in:
Roland Gruber 2010-05-23 13:33:04 +00:00
parent 2314156648
commit c4cf288f4b
1 changed files with 51 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

51
lam/lib/lamdaemon.inc
View File

@ -40,6 +40,8 @@ $Id$
* *
*/ */
function lamdaemon($command, $server) { function lamdaemon($command, $server) {
// remove the following line to restore SSH via PHP SSH2
return lamdaemonSeclib($command, $server);
if (!function_exists('ssh2_connect')) { if (!function_exists('ssh2_connect')) {
return array('ERROR,' . _('This module requires the PHP ssh2 extension.')); return array('ERROR,' . _('This module requires the PHP ssh2 extension.'));
} }
@ -93,4 +95,53 @@ function lamdaemon($command, $server) {
} }
} }
/**
* Sends commands to lamdaemon script.
*
* @param array $command command to execute
* @param string $server remote server
* @return array Output of lamdaemon
*
*/
function lamdaemonSeclib($command, $server) {
// add phpseclib to include path
set_include_path(get_include_path() . PATH_SEPARATOR . dirname(__FILE__) . '/3rdParty/phpseclib');
include_once('Net/SSH2.php');
// get username and password of the current lam-admin
$credentials = $_SESSION['ldap']->decrypt_login();
$serverNameParts = explode(",", $server);
if (sizeof($serverNameParts) > 1) {
$handle = new Net_SSH2($serverNameParts[0], $serverNameParts[1]);
}
else {
$handle = new Net_SSH2($server);
}
if ($handle) {
$sr = @ldap_read($_SESSION['ldap']->server(), $credentials[0], "objectClass=posixAccount", array('uid'), 0, 0, 0, LDAP_DEREF_NEVER);
if (!$sr) {
$return = array("ERROR," . _("Your LAM admin user must be a valid Unix account to work with lamdaemon!") . ",");
return $return;
}
$entry = @ldap_get_entries($_SESSION['ldap']->server(), $sr);
if (!isset($entry[0]['uid'][0])) {
$return = array("ERROR," . _("Your LAM admin user must be a valid Unix account to work with lamdaemon!") . ",");
return $return;
}
$userName = $entry[0]['uid'][0];
if ($handle->login($userName, $credentials[1])) {
$output = $handle->exec("sudo " . $_SESSION['config']->get_scriptPath() . ' ' . escapeshellarg($command));
$return = array($output);
return $return;
}
else {
$return = array("ERROR," . _('Unable to connect to remote server!') . "," . $server);
return $return;
}
}
else {
$return = array("ERROR," . _('Unable to connect to remote server!') . "," . $server);
return $return;
}
}
?> ?>