'0000', '1' => '0001', '2' => '0010', '3' => '0011', '4' => '0100', '5' => '0101', '6' => '0110', '7' => '0111', '8' => '1000', '9' => '1001', 'A' => '1010', 'B' => '1011', 'C' => '1100', 'D' => '1101', 'E' => '1110', 'F' => '1111'); /** * Creates a new sambaSamAccount object. * * @param string $scope account type (user, group, host) */ function __construct($scope) { // List of well known rids $this->rids = array( _('Domain admins') => 512, _('Domain users') => 513, _('Domain guests') => 514, _('Domain computers') => 515, _('Domain controllers') => 516, _('Domain certificate admins') => 517, _('Domain schema admins') => 518, _('Domain enterprise admins') => 519, _('Domain policy admins') => 520); // call parent constructor parent::__construct($scope); $this->autoAddObjectClasses = false; } /** this functin fills the error message array with messages **/ function load_Messages() { // error messages for input checks $this->messages['homePath'][0] = array('ERROR', _('Home path'), _('Home path is invalid.')); $this->messages['homePath'][1] = array('INFO', _('Home path'), _('Inserted user or group name in home path.')); $this->messages['homePath'][2] = array('ERROR', _('Account %s:') . ' sambaSamAccount_homePath', _('Home path is invalid.')); $this->messages['profilePath'][0] = array('ERROR', _('Profile path'), _('Profile path is invalid!')); $this->messages['profilePath'][1] = array('INFO', _('Profile path'), _('Inserted user or group name in profile path.')); $this->messages['profilePath'][2] = array('ERROR', _('Account %s:') . ' sambaSamAccount_profilePath', _('Profile path is invalid!')); $this->messages['logonScript'][0] = array('ERROR', _('Logon script'), _('Logon script is invalid!')); $this->messages['logonScript'][1] = array('INFO', _('Logon script'), _('Inserted user or group name in logon script.')); $this->messages['logonScript'][2] = array('ERROR', _('Account %s:') . ' sambaSamAccount_logonScript', _('Logon script is invalid!')); $this->messages['workstations'][0] = array('ERROR', _('Samba workstations'), _('Please enter a comma separated list of host names!')); $this->messages['workstations'][1] = array('ERROR', _('Account %s:') . ' sambaSamAccount_workstations', _('Please enter a comma separated list of host names!')); $this->messages['sambaLMPassword'][0] = array('ERROR', _('Password'), _('Please enter the same password in both password-fields.')); $this->messages['sambaLMPassword'][1] = array('ERROR', _('Password'), _('Password contains invalid characters. Valid characters are: a-z, A-Z, 0-9 and #*,.;:_-+!%&/|?{[()]}=@$ !')); $this->messages['sambaLMPassword'][2] = array('ERROR', _('Account %s:') . ' sambaSamAccount_password', _('Password contains invalid characters. Valid characters are: a-z, A-Z, 0-9 and #*,.;:_-+!%&/|?{[()]}=@$ !')); $this->messages['rid'][2] = array('ERROR', _('Account %s:') . ' sambaSamAccount_rid', _('Please enter a RID number or the name of a special account!')); $this->messages['rid'][3] = array('ERROR', _('Account %s:') . ' sambaSamAccount_rid', _('This is not a valid RID number!')); $this->messages['displayName'][0] = array('ERROR', _('Account %s:') . ' sambaSamAccount_displayName', _('Please enter a valid display name!')); $this->messages['displayName'][1] = array('ERROR', _('Display name'), _('Please enter a valid display name!')); $this->messages['pwdUnix'][0] = array('ERROR', _('Account %s:') . ' sambaSamAccount_pwdUnix', _('This value can only be \"true\" or \"false\"!')); $this->messages['noPassword'][0] = array('ERROR', _('Account %s:') . ' sambaSamAccount_noPassword', _('This value can only be \"true\" or \"false\"!')); $this->messages['noExpire'][0] = array('ERROR', _('Account %s:') . ' sambaSamAccount_noExpire', _('This value can only be \"true\" or \"false\"!')); $this->messages['deactivated'][0] = array('ERROR', _('Account %s:') . ' sambaSamAccount_deactivated', _('This value can only be \"true\" or \"false\"!')); $this->messages['pwdCanChange'][0] = array('ERROR', _('Account %s:') . ' sambaSamAccount_pwdCanChange', _('Please enter a valid date in format DD-MM-YYYY.')); $this->messages['pwdMustChange'][0] = array('ERROR', _('Account %s:') . ' sambaSamAccount_pwdMustChange', _('Please enter a valid date in format DD-MM-YYYY.')); $this->messages['expireDate'][0] = array('ERROR', _('Account %s:') . ' sambaSamAccount_expireDate', _('Please enter a valid date in format DD-MM-YYYY.')); $this->messages['homeDrive'][0] = array('ERROR', _('Account %s:') . ' sambaSamAccount_homeDrive', _('Please enter a valid drive letter.')); $this->messages['domain'][0] = array('ERROR', _('Account %s:') . ' sambaSamAccount_domain', _('LAM was unable to find a domain with this name!')); $this->messages['logonHours'][0] = array('ERROR', _('Logon hours'), _('The format of the logon hours field is invalid!')); $this->messages['logonHours'][1] = array('ERROR', _('Account %s:') . ' sambaSamAccount_logonHours', _('The format of the logon hours field is invalid!')); $this->messages['group'][0] = array('ERROR', _('Account %s:') . ' sambaSamAccount_group', _('Please enter a valid group name!')); } /** * Returns meta data that is interpreted by parent class * * @return array array with meta data * * @see baseModule::get_metaData() */ function get_metaData() { $return = array(); // icon $return['icon'] = 'samba.png'; // manages user and host accounts $return["account_types"] = array("user", "host"); if ($this->get_scope() == "host") { // LDAP filter $return["ldap_filter"] = array('and' => '(uid=*$)', 'or' => "(objectClass=posixAccount)"); } // alias name $return["alias"] = _('Samba 3'); // RDN attribute $return["RDN"] = array("sambaSID" => "low"); // module dependencies $return['dependencies'] = array('depends' => array('posixAccount'), 'conflicts' => array()); // managed object classes $return['objectClasses'] = array('sambaSamAccount'); // managed attributes $return['attributes'] = array('uid', 'sambaSID', 'sambaLMPassword', 'sambaNTPassword', 'sambaPwdLastSet', 'sambaLogonTime', 'sambaLogoffTime', 'sambaKickoffTime', 'sambaPwdCanChange', 'sambaPwdMustChange', 'sambaAcctFlags', 'displayName', 'sambaHomePath', 'sambaHomeDrive', 'sambaLogonScript', 'sambaProfilePath', 'sambaUserWorkstations', 'sambaPrimaryGroupSID', 'sambaDomainName', 'sambaLogonHours', 'sambaMungedDial'); // PHP extensions $return['extensions'] = array('hash', 'iconv'); // profile checks $return['profile_checks']['sambaSamAccount_smbhome'] = array( 'type' => 'ext_preg', 'regex' => 'UNC', 'error_message' => $this->messages['homePath'][0]); $return['profile_checks']['sambaSamAccount_profilePath'] = array( 'type' => 'ext_preg', 'regex' => 'UNC', 'error_message' => $this->messages['profilePath'][0]); $return['profile_checks']['sambaSamAccount_logonScript'] = array( 'type' => 'ext_preg', 'regex' => 'logonscript', 'error_message' => $this->messages['logonScript'][0]); $return['profile_checks']['sambaSamAccount_userWorkstations'] = array( 'type' => 'ext_preg', 'regex' => 'unixhost', 'error_message' => $this->messages['workstations'][0]); $return['profile_checks']['sambaSamAccount_logonHours'] = array( 'type' => 'ext_preg', 'regex' => 'sambaLogonHours', 'error_message' => $this->messages['logonHours'][0]); // profile mappings $return['profile_mappings'] = array( 'sambaSamAccount_smbhome' => 'sambaHomePath', 'sambaSamAccount_profilePath' => 'sambaProfilePath', 'sambaSamAccount_logonScript' => 'sambaLogonScript', 'sambaSamAccount_userWorkstations' => 'sambaUserWorkstations', 'sambaSamAccount_sambaDomainName' => 'sambaDomainName', 'sambaSamAccount_logonHours' => 'sambaLogonHours' ); // available PDF fields $return['PDF_fields'] = array( 'displayName', 'sambaHomePath', 'sambaHomeDrive', 'sambaLogonScript', 'sambaProfilePath', 'sambaUserWorkstations', 'sambaDomainName', 'sambaPrimaryGroupSID', 'tsAllowLogin', 'tsHomeDir', 'tsHomeDrive', 'tsProfilePath', 'tsInherit', 'tsInitialProgram', 'tsWorkDirectory', 'tsConnectionLimit', 'tsDisconnectionLimit', 'tsIdleLimit', 'tsConnectDrives', 'tsConnectPrinters', 'tsClientPrinterDefault', 'tsShadowing', 'tsBrokenConn', 'tsReconnect' ); $return['selfServiceFieldSettings'] = array( 'syncNTPassword' => _('Sync Samba NT password with Unix password'), 'syncLMPassword' => _('Sync Samba LM password with Unix password') ); // help Entries $return['help'] = array ( "displayName" => array( "Headline" => _("Display name"), "Text" => _("This is the account's full name on Windows systems.")), "password" => array( "Headline" => _("Samba password"), "Text" => _("This is the account's Windows password.")), "resetPassword" => array( "Headline" => _("Reset password"), "Text" => _("This will reset the host's password to a default value.")), "pwdUnix" => array( "Headline" => _("Use Unix password"), "Text" => _("If checked Unix password will also be used as Samba password.")), "pwdUnixUpload" => array( "Headline" => _("Use Unix password"), "Text" => _("If set to \"true\" Unix password will also be used as Samba password.")), "noPassword" => array( "Headline" => _("Use no password"), "Text" => _("If checked no password will be used.")), "noPasswordUpload" => array( "Headline" => _("Use no password"), "Text" => _("If set to \"true\" no password will be used.")), "noExpire" => array( "Headline" => _("Password does not expire"), "Text" => _("If checked password does not expire. (Setting X-Flag)")), "noExpireUpload" => array( "Headline" => _("Password does not expire"), "Text" => _("If set to \"true\" password does not expire. (Setting X-Flag)")), "deactivated" => array( "Headline" => _("Account is deactivated"), "Text" => _("If checked then the account will be deactivated. (Setting D-Flag)")), "locked" => array( "Headline" => _("Account is locked"), "Text" => _("If checked then the account will be locked (setting L-Flag). You usually want to use this setting to unlock user accounts which were locked because of failed login attempts.")), "deactivatedUpload" => array( "Headline" => _("Account is deactivated"), "Text" => _("If set to \"true\" account will be deactivated. (Setting D-Flag)")), "pwdCanChange" => array( "Headline" => _("User can change password"), "Text" => _("Date after the user is able to change his password. Format: DD-MM-YYYY")), "pwdMustChange" => array ("Headline" => _("User must change password"), "Text" => _("Date after the user must change his password. Format: DD-MM-YYYY")), "homeDrive" => array( "Headline" => _("Home drive"), "Text" => _("The home directory will be connected under this drive letter.")), "homePath" => array( "Headline" => _("Home path"), "Text" => _('UNC-path (\\\\server\\share) of homedirectory. $user and $group are replaced with user and group name.'). ' '. _("Can be left empty.")), "profilePath" => array( "Headline" => _("Profile path"), "Text" => _('Path of the user profile. Can be a local absolute path or a UNC-path (\\\\server\\share). $user and $group are replaced with user and group name.'). ' '. _("Can be left empty.")), "scriptPath" => array( "Headline" => _("Logon script"), "Text" => _('File name and path relative to netlogon-share which should be executed on logon. $user and $group are replaced with user and group name.'). ' '. _("Can be left empty.")), "userWorkstations" => array( "Headline" => _("Samba workstations"), "Text" => _("List of Samba workstations the user is allowed to login. Empty means every workstation.")), "workstations" => array( "Headline" => _("Samba workstations"), "Text" => _("Comma separated list of Samba workstations the user is allowed to login. Empty means every workstation."). ' '. _("Can be left empty.")), "group" => array( "Headline" => _("Windows primary group"), "Text" => _("This is the user's primary Windows group.")), "groupUpload" => array( "Headline" => _("Windows primary group SID"), "Text" => _("This is the SID of the user's primary Windows group.")), "specialUser" => array( "Headline" => _("Special user"), "Text" => _("This allows you to define this account as a special user like administrator or guest.")), "ridUpload" => array( "Headline" => _("Samba RID"), "Text" => _("This is the relative ID number for your Windows account. You can either enter a number or one of these special accounts: ") . implode(", ", array_keys($this->rids)) . "

" . _("If you leave this empty LAM will use: uidNumber*2 + sambaAlgorithmicRidBase.")), "ridUploadHost" => array( "Headline" => _("Samba RID"), "Text" => _("This is the relative ID number for your host account. If you leave this empty LAM will use: uidNumber*2 + sambaAlgorithmicRidBase.")), "domain" => array( "Headline" => _("Domain"), "Text" => _("Windows domain name of account.")), "logonHours" => array( "Headline" => _("Logon hours"), "Text" => _("This option defines the allowed logon hours for this account.")), "logonHoursUpload" => array( "Headline" => _("Logon hours"), "Text" => _("This option defines the allowed logon hours for this account. The format is the same as for the LDAP attribute. The 24*7 hours are represented as 168 bit which are saved as 21 hex (21*8 = 168) values. The first bit represents Sunday 0:00 - 0:59 in GMT.")), 'expireDate' => array ( "Headline" => _("Account expiration date"), "Text" => _("This is the date when the account will expire. Format: DD-MM-YYYY")), 'timeZone' => array ( "Headline" => _("Time zone"), "Text" => _("This is the time zone of your Samba server. LAM needs this information to display the logon hours correctly.")), 'tsAllowLogin' => array ( "Headline" => _("Allow terminal server login"), "Text" => _("Activate this checkbox to allow this user to use the terminal service.")), 'tsHomeDir' => array ( "Headline" => _("Home directory"), "Text" => _("This is the path to the user's home directory.")), 'tsProfilePath' => array ( "Headline" => _("Profile path"), "Text" => _("Path of the user profile.")), 'tsInherit' => array ( "Headline" => _("Inherit client startup configuration"), "Text" => _("Activate this checkbox to inherit the initial program and working directory from the client machine.")), 'tsInitialProgram' => array ( "Headline" => _("Initial program"), "Text" => _("This program is run after the login.")), 'tsWorkDirectory' => array ( "Headline" => _("Working directory"), "Text" => _("Working directory of initial program.")), 'tsTimeLimit' => array ( "Headline" => _("Time limit"), "Text" => _("Please enter the time limit in minutes. 0 means unlimited.")), 'tsConnectDrives' => array ( "Headline" => _("Connect client drives"), "Text" => _("Activate this checkbox to connect drives from the client machine.")), 'tsConnectPrinters' => array ( "Headline" => _("Connect client printers"), "Text" => _("Activate this checkbox to connect printers from the client machine.")), 'tsClientPrinterDefault' => array ( "Headline" => _("Client printer is default"), "Text" => _("Activate this checkbox to set the client's printer as default printer.")), 'tsShadowing' => array ( "Headline" => _("Shadowing"), "Text" => _("Here you can specify the shadowing mode.")), 'tsBrokenConn' => array ( "Headline" => _("On broken or timed out connection"), "Text" => _("This specifies what to do when the client connection is broken.")), 'tsReconnect' => array ( "Headline" => _("Reconnect if disconnected"), "Text" => _("This specifies the reconnect policy.")), 'terminalServer' => array ( "Headline" => _("Terminal server options"), "Text" => _("Here you can change the settings for the terminal server access.")) ); // upload dependencies $return['upload_preDepends'] = array('posixAccount', 'inetOrgPerson'); // upload options if ($this->get_scope() == "user") { $return['upload_columns'] = array( array( 'name' => 'sambaSamAccount_domain', 'description' => _('Domain'), 'required' => true, 'help' => 'domain', 'example' => _('mydomain') ), array( 'name' => 'sambaSamAccount_displayName', 'description' => _('Display name'), 'help' => 'displayName', 'example' => _('Steve Miller') ), array( 'name' => 'sambaSamAccount_password', 'description' => _('Password'), 'help' => 'password', 'example' => _('secret') ), array( 'name' => 'sambaSamAccount_pwdUnix', 'description' => _('Use Unix password'), 'help' => 'pwdUnixUpload', 'default' => 'true', 'values' => 'true, false', 'example' => 'true' ), array( 'name' => 'sambaSamAccount_noPassword', 'description' => _('Use no password'), 'help' => 'noPasswordUpload', 'default' => 'false', 'values' => 'true, false', 'example' => 'false' ), array( 'name' => 'sambaSamAccount_noExpire', 'description' => _('Password does not expire'), 'help' => 'noExpireUpload', 'default' => 'true', 'values' => 'true, false', 'example' => 'true' ), array( 'name' => 'sambaSamAccount_deactivated', 'description' => _('Account is deactivated'), 'help' => 'deactivatedUpload', 'default' => 'false', 'values' => 'true, false', 'example' => 'false' ), array( 'name' => 'sambaSamAccount_pwdCanChange', 'description' => _('User can change password'), 'help' => 'pwdCanChange', 'default' => '31-12-2030', 'example' => '15-11-2006' ), array( 'name' => 'sambaSamAccount_pwdMustChange', 'description' => _('User must change password'), 'help' => 'pwdMustChange', 'default' => '31-12-2030', 'example' => '15-10-2006' ), array( 'name' => 'sambaSamAccount_expireDate', 'description' => _('Account expiration date'), 'help' => 'expireDate', 'default' => '31-12-2030', 'example' => '15-10-2006' ), array( 'name' => 'sambaSamAccount_homeDrive', 'description' => _('Home drive'), 'help' => 'homeDrive', 'example' => 'k:' ), array( 'name' => 'sambaSamAccount_homePath', 'description' => _('Home path'), 'help' => 'homePath', 'example' => _('\\\\server\\homes\\smiller') ), array( 'name' => 'sambaSamAccount_profilePath', 'description' => _('Profile path'), 'help' => 'profilePath', 'example' => _('\\\\server\\profiles\\smiller') ), array( 'name' => 'sambaSamAccount_logonScript', 'description' => _('Logon script'), 'help' => 'scriptPath', 'example' => 'logon.bat' ), array( 'name' => 'sambaSamAccount_workstations', 'description' => _('Samba workstations'), 'help' => 'workstations', 'example' => 'PC01,PC02,PC03' ), array( 'name' => 'sambaSamAccount_group', 'description' => _('Windows group'), 'help' => 'groupUpload', 'example' => _('mygroup'), 'default' => 'Domain Users' ), array( 'name' => 'sambaSamAccount_rid', 'description' => _('Samba RID'), 'help' => 'ridUpload', 'example' => '1235', 'default' => '<uidNumber>*2 + <sambaAlgorithmicRidBase>' ), array( 'name' => 'sambaSamAccount_logonHours', 'description' => _('Logon hours'), 'help' => 'logonHoursUpload', 'example' => 'FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF' ) ); } elseif ($this->get_scope() == "host") { $return['upload_columns'] = array( array( 'name' => 'sambaSamAccount_domain', 'description' => _('Domain'), 'required' => true, 'help' => 'domain', 'example' => _('mydomain') ), array( 'name' => 'sambaSamAccount_rid', 'description' => _('Samba RID'), 'help' => 'ridUploadHost', 'example' => '1235', 'default' => '<uidNumber>*2 + <sambaAlgorithmicRidBase>' ) ); } // configuration options $return['config_options']['user'] = array( array( 0 => array('kind' => 'text', 'text' => '' . _("Time zone") . ':  '), 1 => array('kind' => 'select', 'name' => 'sambaSamAccount_timeZone', 'size' => '1', 'options' => array( array('-12', "GMT-12: " . _("Eniwetok, Kwajalein")), array('-11', "GMT-11: " . _("Midway Island, Samoa")), array('-10', "GMT-10: " . _("Hawaii")), array('-9', "GMT-09: " . _("Alaska")), array('-8', "GMT-08: " . _("Pacific Time (US & Canada)")), array('-7', "GMT-07: " . _("Mountain Time (US & Canada)")), array('-6', "GMT-06: " . _("Central Time (US & Canada), Mexico City")), array('-5', "GMT-05: " . _("Eastern Time (US & Canada), Bogota")), array('-4', "GMT-04: " . _("Atlantic time (Canada), Caracas")), array('-3', "GMT-03: " . _("Brazil, Buenos Aires")), array('-2', "GMT-02: " . _("Mid-Atlantic")), array('-1', "GMT-01: " . _("Azores, Cape Verde Islands")), array('0', 'GMT: ' . _("Western Europe Time, London, Lisbon")), array('1', "GMT+01: " . _("Central Europe Time, Paris, Berlin")), array('2', "GMT+02: " . _("Eastern Europe Time, South Africa")), array('3', "GMT+03: " . _("Baghdad, Riyadh, Moscow")), array('4', "GMT+04: " . _("Abu Dhabi, Muscat, Baku")), array('5', "GMT+05: " . _("Islamabad, Karachi")), array('6', "GMT+06: " . _("Almaty, Dhaka, Colombo")), array('7', "GMT+07: " . _("Bangkok, Hanoi, Jakarta")), array('8', "GMT+08: " . _("Beijing, Perth, Singapore")), array('9', "GMT+09: " . _("Tokyo, Seoul, Osaka, Yakutsk")), array('10', "GMT+10: " . _("East Australian Standard, Guam")), array('11', "GMT+11: " . _("Magadan, Solomon Islands")), array('12', "GMT+12: " . _("Auckland, Fiji, Kamchatka")), ), 'options_selected' => array('0'), 'descriptiveOptions' => true), 2 => array('kind' => 'help', 'value' => 'timeZone')) ); return $return; } /** * Initializes the module after it became part of an accountContainer * * @param string $base the name of the accountContainer object ($_SESSION[$base]) */ function init($base) { // call parent init parent::init($base); $this->useunixpwd = true; $this->noexpire = true; $this->nopwd = false; $this->deactivated = false; $sambaDomains = search_domains(); if (sizeof($sambaDomains) == 0) { StatusMessage("ERROR", _('No Samba 3 domains found in LDAP! Please create one first.'), ''); return; } } /** * This function is used to check if this module page can be displayed. * It returns false if a module depends on data from other modules which was not yet entered. * * @return boolean true, if page can be displayed */ function module_ready() { $attrs = $this->getAccountContainer()->getAccountModule('posixAccount')->getAttributes(); if ($attrs['gidNumber'][0]=='') return false; if ($attrs['uidNumber'][0]=='') return false; if ($attrs['uid'][0]=='') return false; return true; } /** * This function loads the LDAP attributes for this module. * * @param array $attributes attribute list */ function load_attributes($attr) { parent::load_attributes($attr); if (isset($this->attributes['sambaAcctFlags'][0])) { if (strpos($this->attributes['sambaAcctFlags'][0], "D")) $this->deactivated = true; else $this->deactivated = false; if (strpos($this->attributes['sambaAcctFlags'][0], "N")) $this->nopwd = true; else $this->nopwd = false; if (strpos($this->attributes['sambaAcctFlags'][0], "X")) $this->noexpire = true; else $this->noexpire = false; } } /** * Returns a list of modifications which have to be made to the LDAP account. * * @return array list of modifications *
This function returns an array with 3 entries: *
array( DN1 ('add' => array($attr), 'remove' => array($attr), 'modify' => array($attr)), DN2 .... ) *
DN is the DN to change. It may be possible to change several DNs (e.g. create a new user and add him to some groups via attribute memberUid) *
"add" are attributes which have to be added to LDAP entry *
"remove" are attributes which have to be removed from LDAP entry *
"modify" are attributes which have to been modified in LDAP entry */ function save_attributes() { if (!in_array('sambaSamAccount', $this->attributes['objectClass'])) { return array(); } $return = $this->getAccountContainer()->save_module_attributes($this->attributes, $this->orig); return $return; } /** * Processes user input of the primary module page. * It checks if all input values are correct and updates the associated LDAP attributes. * * @return array list of info/error messages */ function process_attributes() { if (!in_array('sambaSamAccount', $this->attributes['objectClass'])) { return array(); } $errors = array(); $sambaDomains = search_domains(); if (sizeof($sambaDomains) == 0) { return array(array(array("ERROR", _('No Samba 3 domains found in LDAP! Please create one first.')))); } // Save attributes $this->attributes['sambaDomainName'][0] = $_POST['sambaDomainName']; // Get Domain SID from name for ($i=0; $iattributes['sambaDomainName'][0] == $sambaDomains[$i]->name) { $SID = $sambaDomains[$i]->SID; $RIDbase = $sambaDomains[$i]->RIDbase; break; } } $flag = "["; if (isset($_POST['sambaAcctFlagsD'])) { $flag .= "D"; $this->deactivated = true; } else { $this->deactivated = false; } if (isset($_POST['sambaAcctFlagsX'])) { $flag .= "X"; $this->noexpire = true; } else { $this->noexpire = false; } if (isset($_POST['sambaAcctFlagsN'])) { $flag .= "N"; $this->nopwd = true; } else { $this->nopwd = false; } if (isset($_POST['sambaAcctFlagsS'])) $flag .= "S"; if (isset($_POST['sambaAcctFlagsH'])) $flag .= "H"; if (isset($_POST['sambaAcctFlagsW'])) $flag .= "W"; if (isset($_POST['sambaAcctFlagsU'])) $flag .= "U"; if (isset($_POST['sambaAcctFlagsL'])) $flag .= "L"; // Expand string to fixed length $flag = str_pad($flag, 12); // End character $flag = $flag. "]"; $this->attributes['sambaAcctFlags'][0] = $flag; // display name $this->attributes['displayName'][0] = $_POST['displayName']; if (!($this->attributes['displayName'][0] == '') && !(get_preg($this->attributes['displayName'][0], 'realname'))) { $errors[] = $this->messages['displayName'][1]; } // host attributes if ($this->get_scope()=='host') { $this->attributes['sambaPrimaryGroupSID'][0] = $SID."-".$this->rids[_('Domain computers')]; if ($_POST['ResetSambaPassword'] || !$this->attributes['sambaLMPassword'][0]) { $attrs = $this->getAccountContainer()->getAccountModule('posixAccount')->getAttributes(); $hostname = $attrs['uid'][0]; $hostname = substr($hostname, 0, strlen($hostname) - 1); $this->attributes['sambaLMPassword'][0] = lmPassword($hostname); $this->attributes['sambaNTPassword'][0] = ntPassword($hostname); $this->attributes['sambaPwdLastSet'][0] = time(); } } // user attributes if ($this->get_scope()=='user') { $this->attributes['sambaHomePath'][0] = $_POST['sambaHomePath']; if ($_POST['sambaHomeDrive'] == "-") $this->attributes['sambaHomeDrive'][0] = ''; else $this->attributes['sambaHomeDrive'][0] = $_POST['sambaHomeDrive']; $this->attributes['sambaLogonScript'][0] = $_POST['sambaLogonScript']; $this->attributes['sambaProfilePath'][0] = $_POST['sambaProfilePath']; $rids = array_keys($this->rids); $wrid = false; for ($i=0; $iattributes['sambaPrimaryGroupSID'][0] = $SID."-".$this->rids[$rids[$i]]; } } if (!$wrid) { $attrs = $this->getAccountContainer()->getAccountModule('posixAccount')->getAttributes(); $gidnumber = $attrs['gidNumber'][0]; $groups = $_SESSION['cache']->get_cache(array('gidNumber', 'sambaSID'), 'sambaGroupMapping', 'group'); $groupKeys = array_keys($groups); for ($i = 0; $i < sizeof($groupKeys); $i++) { if ($groups[$groupKeys[$i]]['gidNumber'][0] == $gidnumber) { if (isset($groups[$groupKeys[$i]]['sambaSID'][0])) { $this->attributes['sambaPrimaryGroupSID'][0] = $groups[$groupKeys[$i]]['sambaSID'][0]; } break; } } } if (isset($_POST['useunixpwd'])) { $this->useunixpwd = true; $this->attributes['sambaLMPassword'][0] = lmPassword($this->getAccountContainer()->getAccountModule('posixAccount')->getClearTextPassword()); $this->attributes['sambaNTPassword'][0] = ntPassword($this->getAccountContainer()->getAccountModule('posixAccount')->getClearTextPassword()); $this->attributes['sambaPwdLastSet'][0] = time(); } else $this->useunixpwd = false; if (!$this->useunixpwd && isset($_POST['sambaLMPassword']) && ($_POST['sambaLMPassword'] != '')) { if ($_POST['sambaLMPassword'] != $_POST['sambaLMPassword2']) { $errors[] = $this->messages['sambaLMPassword'][0]; unset ($_POST['sambaLMPassword2']); } else { if (!get_preg($_POST['sambaLMPassword'], 'password')) $errors[] = $this->messages['sambaLMPassword'][1]; else { $this->attributes['sambaLMPassword'][0] = lmPassword($_POST['sambaLMPassword']); $this->attributes['sambaNTPassword'][0] = ntPassword($_POST['sambaLMPassword']); $this->attributes['sambaPwdLastSet'][0] = time(); } } } $specialRids = array_flip($this->rids); // set special RID if selected if (in_array($_POST['sambaSID'], $specialRids)) { $this->attributes['sambaSID'][0] = $SID . '-' . $this->rids[$_POST['sambaSID']]; } // standard RID else if ($_POST['sambaSID'] == "-") { $rid = substr($this->attributes['sambaSID'][0], strrpos($this->attributes['sambaSID'][0], '-') + 1, strlen($this->attributes['sambaSID'][0])); // change only if not yet set, previously set to special SID or domain changed if (!isset($this->attributes['sambaSID'][0]) || in_array($rid, $this->rids) || (strpos($this->attributes['sambaSID'][0], $SID) === false)) { $attrs = $this->getAccountContainer()->getAccountModule('posixAccount')->getAttributes(); $this->attributes['sambaSID'][0] = $SID."-". (($attrs['uidNumber'][0]*2)+$RIDbase); } } // Check values $attrs = $this->getAccountContainer()->getAccountModule('posixAccount')->getAttributes(); $this->attributes['sambaHomePath'][0] = str_replace('$user', $attrs['uid'][0], $this->attributes['sambaHomePath'][0]); $this->attributes['sambaHomePath'][0] = str_replace('$group', $_SESSION['cache']->getgrnam($attrs['gidNumber'][0]), $this->attributes['sambaHomePath'][0]); if ($this->attributes['sambaHomePath'][0] != $_POST['sambaHomePath']) $errors[] = $this->messages['homePath'][1]; $this->attributes['sambaLogonScript'][0] = str_replace('$user', $attrs['uid'][0], $this->attributes['sambaLogonScript'][0]); $this->attributes['sambaLogonScript'][0] = str_replace('$group', $_SESSION['cache']->getgrnam($attrs['gidNumber'][0]), $this->attributes['sambaLogonScript'][0]); if ($this->attributes['sambaLogonScript'][0] != $_POST['sambaLogonScript']) $errors[] = $this->messages['logonScript'][1]; $this->attributes['sambaProfilePath'][0] = str_replace('$user', $attrs['uid'][0], $this->attributes['sambaProfilePath'][0]); $this->attributes['sambaProfilePath'][0] = str_replace('$group', $_SESSION['cache']->getgrnam($attrs['gidNumber'][0]), $this->attributes['sambaProfilePath'][0]); if ($this->attributes['sambaProfilePath'][0] != $_POST['sambaProfilePath']) $errors[] = $this->messages['profilePath'][1]; if ( (!$this->attributes['sambaHomePath'][0]=='') && (!get_preg($this->attributes['sambaHomePath'][0], 'UNC'))) $errors[] = $this->messages['homePath'][0]; if ( (!$this->attributes['sambaLogonScript'][0]=='') && (!get_preg($this->attributes['sambaLogonScript'][0], 'logonscript'))) $errors[] = $this->messages['logonScript'][0]; if (!($this->attributes['sambaProfilePath'][0] == '') && !(get_preg($this->attributes['sambaProfilePath'][0], 'UNC') xor get_preg($this->attributes['sambaProfilePath'][0], 'homeDirectory'))) $errors[] = $this->messages['profilePath'][0]; } else { // host if (!$this->attributes['sambaSID'][0]) { $attrs = $this->getAccountContainer()->getAccountModule('posixAccount')->getAttributes(); $this->attributes['sambaSID'][0] = $SID."-". (($attrs['uidNumber'][0]*2)+$RIDbase); } } return $errors; } /** * Processes user input of the primary module page. * It checks if all input values are correct and updates the associated LDAP attributes. * * @return array list of info/error messages */ function process_sambaUserWorkstations() { // Load attributes if ($this->get_scope()=='user') { if (isset($_POST['availableSambaUserWorkstations']) && isset($_POST['sambaUserWorkstations_add'])) { // Add workstations to list $temp = str_replace(' ', '', $this->attributes['sambaUserWorkstations'][0]); $workstations = explode (',', $temp); for ($i=0; $iattributes['sambaUserWorkstations'][0] = $workstations[0]; for ($i=1; $iattributes['sambaUserWorkstations'][0] = $this->attributes['sambaUserWorkstations'][0] . "," . $workstations[$i]; } } elseif (isset($_POST['sambaUserWorkstations']) && isset($_POST['sambaUserWorkstations_remove'])) { // remove // Add workstations from list // Put all workstations in array $temp = str_replace(' ', '', $this->attributes['sambaUserWorkstations'][0]); $workstations = explode (',', $temp); for ($i=0; $iattributes['sambaUserWorkstations'][0] = $workstations[0]; for ($i=1; $iattributes['sambaUserWorkstations'][0] = $this->attributes['sambaUserWorkstations'][0] . "," . $workstations[$i]; } } } return array(); } /** * Processes user input of the logon hours page. * It checks if all input values are correct and updates the associated LDAP attributes. * * @return array list of info/error messages */ function process_logonHours() { if (isset($_POST['form_subpage_sambaSamAccount_attributes_abort'])) return array(); // set new logon hours $logonHours = ''; for ($i = 0; $i < 24*7; $i++) { $logonHours .= isset($_POST['lh_' . $i]) ? '1' : '0'; } // reconstruct HEX string $bitstring2hex = array_flip($this->hex2bitstring); $logonHoursNew = ''; for ($i = 0; $i < 21; $i++) { $part = strrev(substr($logonHours, $i * 8, 8)); $byte[hi] = substr($part,0,4); $byte[low] = substr($part,4,4); $hex = $bitstring2hex[$byte[hi]].$bitstring2hex[$byte[low]]; $logonHoursNew = $logonHoursNew . $hex; } $this->attributes['sambaLogonHours'][0] = $logonHoursNew; return array(); } /** * Processes user input of the time selection page. * * @return array list of info/error messages */ function process_time() { $return = array(); // find button name $buttonName = ''; $postKeys = array_keys($_POST); for ($i = 0; $i < sizeof($postKeys); $i++) { if (strpos($postKeys[$i], 'form_subpage_sambaSamAccount_attributes_') !== false) { $buttonName = $postKeys[$i]; } } if (($buttonName == '') || (strpos($buttonName, '_back') !== false)) return array(); // get attribute name $attr = ''; if (strpos($buttonName, 'sambaPwdCanChange') !== false) { $attr = 'sambaPwdCanChange'; } elseif (strpos($buttonName, 'sambaPwdMustChange') !== false) { $attr = 'sambaPwdMustChange'; } elseif (strpos($buttonName, 'sambaKickoffTime') !== false) { $attr = 'sambaKickoffTime'; } if ($attr == '') return array(); // determine action if (strpos($buttonName, '_change') !== false) { // set new time $this->attributes[$attr][0] = gmmktime(0, 0, 0, intval($_POST['expire_mon']), intval($_POST['expire_day']), intval($_POST['expire_yea'])); } elseif (strpos($buttonName, '_del') !== false) { // remove attribute value unset($this->attributes[$attr]); } return $return; } /** * Processes user input of the terminal server page. * It checks if all input values are correct and updates the associated LDAP attributes. * * @return array list of info/error messages */ function process_terminalServer() { if (isset($_POST['form_subpage_sambaSamAccount_attributes_abort'])) return array(); $mDial = new sambaMungedDial(); if (isset($this->attributes['sambaMungedDial'][0])) { $mDial->load($this->attributes['sambaMungedDial'][0]); } $mDial->setTsLogin(!isset($_POST['tsAllowLogin'])); $mDial->ctx['CtxWFHomeDir'] = $_POST['tsHomeDir']; $mDial->ctx['CtxWFHomeDirDrive'] = $_POST['tsHomeDrive']; $mDial->ctx['CtxWFProfilePath'] = $_POST['tsProfilePath']; $mDial->setInheritMode(isset($_POST['tsInherit'])); $mDial->ctx['CtxInitialProgram'] = $_POST['tsInitialProgram']; $mDial->ctx['CtxWorkDirectory'] = $_POST['tsWorkDirectory']; $mDial->ctx['CtxMaxConnectionTime'] = $_POST['tsConnectionLimit']; $mDial->ctx['CtxMaxDisconnectionTime'] = $_POST['tsDisconnectionLimit']; $mDial->ctx['CtxMaxIdleTime'] = $_POST['tsIdleLimit']; $mDial->setConnectClientDrives(isset($_POST['tsConnectDrives'])); $mDial->setConnectClientPrinters(isset($_POST['tsConnectPrinters'])); $mDial->setDefaultPrinter(isset($_POST['tsClientPrinterDefault'])); $mDial->setShadow(true, $_POST['tsShadowing']); $mDial->setBrokenConn($_POST['tsBrokenConn']); $mDial->setReConn($_POST['tsReconnect']); $this->attributes['sambaMungedDial'][0] = $mDial->getMunged(); return array(); } /** * Returns the HTML meta data for the main account page. * * @return array HTML meta data */ function display_html_attributes() { if (isset($_POST['form_subpage_sambaSamAccount_attributes_addObjectClass'])) { $this->attributes['objectClass'][] = 'sambaSamAccount'; } $return = array(); if (in_array('sambaSamAccount', $this->attributes['objectClass'])) { // Get Domain SID from user SID $sambaDomains = search_domains(); if (sizeof($sambaDomains) == 0) { StatusMessage("ERROR", _('No Samba 3 domains found in LDAP! Please create one first.'), ''); return array(); } if (isset($this->attributes['sambaSID'][0]) && $this->attributes['sambaSID'][0] != '') { $domainSID = substr($this->attributes['sambaSID'][0], 0, strrpos($this->attributes['sambaSID'][0], "-")); } $sel_domain = array(); for ($i=0; $iname; if (isset($domainSID)) { if ($domainSID == $sambaDomains[$i]->SID) { $SID = $domainSID; $sel_domain = array($sambaDomains[$i]->name); } } elseif (isset($this->attributes['sambaDomainName'][0]) && ($this->attributes['sambaDomainName'][0]!='')) { if ($this->attributes['sambaDomainName'][0] == $sambaDomains[$i]->name) { $SID = $sambaDomains[$i]->SID; $sel_domain = array($sambaDomains[$i]->name); } } } $displayName = ''; if (isset($this->attributes['displayName'][0])) $displayName = $this->attributes['displayName'][0]; $return[] = array( array('kind' => 'text', 'text' => _('Display name')), array('kind' => 'input', 'type' => 'text', 'name' => 'displayName', 'size' => '20', 'value' => $displayName), array('kind' => 'help', 'value' => 'displayName')); if ($this->get_scope()=='user') { $return[] = array( array('kind' => 'input', 'name' => 'sambaAcctFlagsU', 'type' => 'hidden', 'value' => 'true')); $return[] = array( array('kind' => 'text', 'text' => _('Samba password')), array('kind' => 'input', 'name' => 'sambaLMPassword', 'type' => 'password', 'size' => '20', 'maxlength' => '255'), array('kind' => 'help', 'value' => 'password')); $return[] = array( array('kind' => 'text', 'text' => _('Repeat password')), array('kind' => 'input', 'name' => 'sambaLMPassword2', 'type' => 'password', 'size' => '20', 'maxlength' => '255')); if ($this->getAccountContainer()->getAccountModule('posixAccount')->getClearTextPassword() != null) { $return[] = array( array('kind' => 'text', 'text' => _('Use Unix password') ), array('kind' => 'input', 'name' => 'useunixpwd', 'type' => 'checkbox', 'checked' => $this->useunixpwd), array('kind' => 'help', 'value' => 'useunixpwd')); } $return[] = array( array('kind' => 'text', 'text' => _('Use no password') ), array('kind' => 'input', 'name' => 'sambaAcctFlagsN', 'type' => 'checkbox', 'checked' => $this->nopwd), array('kind' => 'help', 'value' => 'noPassword')); $return[] = array( array('kind' => 'text', 'text' => _('Password does not expire') ), array('kind' => 'input', 'name' => 'sambaAcctFlagsX', 'type' => 'checkbox', 'checked' => $this->noexpire), array('kind' => 'help', 'value' => 'noExpire')); $return[] = array( array('kind' => 'text', 'text' => _('Account is deactivated') ), array('kind' => 'input', 'name' => 'sambaAcctFlagsD', 'type' => 'checkbox', 'checked' => $this->deactivated), array('kind' => 'help', 'value' => 'deactivated')); $locked = false; if (isset($this->attributes['sambaAcctFlags'][0]) && (strpos($this->attributes['sambaAcctFlags'][0], "L") !== false)) { $locked = true; } $return[] = array( array('kind' => 'text', 'text' => _('Account is locked') ), array('kind' => 'input', 'name' => 'sambaAcctFlagsL', 'type' => 'checkbox', 'checked' => $locked), array('kind' => 'help', 'value' => 'locked')); $dateValue = "     -      "; if (isset($this->attributes['sambaPwdCanChange'][0])) { if ($this->attributes['sambaPwdCanChange'][0] > 2147483648) { $dateValue = "     ∞      "; } else { $date = getdate($this->attributes['sambaPwdCanChange'][0]); $dateValue = $date['mday'] . "." . $date['mon'] . "." . $date['year']; } } $return[] = array( array('kind' => 'text', 'text' => _('User can change password')), array('kind' => 'table', 'value' => array(array( array('kind' => 'text', 'text' => $dateValue), array('kind' => 'input', 'name' => 'form_subpage_sambaSamAccount_time_sambaPwdCanChange', 'type' => 'submit', 'value' => _('Change')) ))), array('kind' => 'help', 'value' => 'pwdCanChange' )); $dateValue = "     -      "; if (isset($this->attributes['sambaPwdMustChange'][0])) { if ($this->attributes['sambaPwdMustChange'][0] > 2147483648) { $dateValue = "     ∞      "; } else { $date = getdate($this->attributes['sambaPwdMustChange'][0]); $dateValue = $date['mday'] . "." . $date['mon'] . "." . $date['year']; } } $return[] = array( array('kind' => 'text', 'text' => _('User must change password')), array('kind' => 'table', 'value' => array(array( array('kind' => 'text', 'text' => $dateValue), array('kind' => 'input', 'name' => 'form_subpage_sambaSamAccount_time_sambaPwdMustChange', 'type' => 'submit', 'value' => _('Change')) ))), array('kind' => 'help', 'value' => 'pwdMustChange' )); $dateValue = "     -      "; if (isset($this->attributes['sambaKickoffTime'][0])) { if ($this->attributes['sambaKickoffTime'][0] > 2147483648) { $dateValue = "     ∞      "; } else { $date = getdate($this->attributes['sambaKickoffTime'][0]); $dateValue = $date['mday'] . "." . $date['mon'] . "." . $date['year']; } } $return[] = array( array('kind' => 'text', 'text' => _('Account expiration date')), array('kind' => 'table', 'value' => array(array( array('kind' => 'text', 'text' => $dateValue), array('kind' => 'input', 'name' => 'form_subpage_sambaSamAccount_time_sambaKickoffTime', 'type' => 'submit', 'value' => _('Change')) ))), array('kind' => 'help', 'value' => 'expireDate' )); $drives = array('-'); for ($i=90; $i>67; $i--) $drives[] = chr($i).':'; if (isset($this->attributes['sambaHomeDrive'][0])) { $selected = array ($this->attributes['sambaHomeDrive'][0]); } else $selected = array('-'); $return[] = array( array('kind' => 'text', 'text' => _('Home drive') ), array('kind' => 'select', 'name' => 'sambaHomeDrive', 'options' => $drives, 'options_selected' => $selected), array('kind' => 'help', 'value' => 'homeDrive' )); $sambaHomePath = ''; if (isset($this->attributes['sambaHomePath'][0])) { $sambaHomePath = $this->attributes['sambaHomePath'][0]; } $return[] = array( array('kind' => 'text', 'text' => _('Home path') ), array('kind' => 'input', 'type' => 'text', 'name' => 'sambaHomePath', 'size' => '20', 'maxlength' => '255', 'value' => $sambaHomePath), array('kind' => 'help', 'value' => 'homePath' )); $sambaProfilePath = ''; if (isset($this->attributes['sambaProfilePath'][0])) { $sambaProfilePath = $this->attributes['sambaProfilePath'][0]; } $return[] = array( array('kind' => 'text', 'text' => _('Profile path') ), array('kind' => 'input', 'type' => 'text', 'name' => 'sambaProfilePath', 'size' => '20', 'maxlength' => '255', 'value' => $sambaProfilePath), array('kind' => 'help', 'value' => 'profilePath' )); $sambaLogonScript = ''; if (isset($this->attributes['sambaLogonScript'][0])) { $sambaLogonScript = $this->attributes['sambaLogonScript'][0]; } $return[] = array( array('kind' => 'text', 'text' => _('Logon script') ), array('kind' => 'input', 'type' => 'text', 'name' => 'sambaLogonScript', 'size' => '20', 'maxlength' => '255', 'value' => $sambaLogonScript), array('kind' => 'help', 'value' => 'scriptPath' )); $return[] = array( array('kind' => 'text', 'text' => _('Samba workstations') ), array('kind' => 'input', 'type' => 'submit', 'name' => 'form_subpage_sambaSamAccount_sambaUserWorkstations_open', 'value' => _('Edit workstations')), array('kind' => 'help', 'value' => 'userWorkstations' )); $names = array_keys($this->rids); $wrid=false; $options = array(); $selected = array(); for ($i=0; $iattributes['sambaPrimaryGroupSID'][0]) && ($this->attributes['sambaPrimaryGroupSID'][0] == $SID . "-" . $this->rids[$names[$i]])) { $selected[] = $names[$i]; $wrid=true; } else $options[] = $names[$i]; } $attrs = $this->getAccountContainer()->getAccountModule('posixAccount')->getAttributes(); if ($wrid) $options[] = $_SESSION['cache']->getgrnam($attrs['gidNumber'][0]); else $selected[] = $_SESSION['cache']->getgrnam($attrs['gidNumber'][0]); $return[] = array ( 0 => array ( 'kind' => 'text', 'text' => _('Windows group') ), 1 => array ( 'kind' => 'select', 'name' => 'sambaPrimaryGroupSID', 'options' => $options, 'options_selected' => $selected), 2 => array ( 'kind' => 'help', 'value' => 'group' )); // display if group SID should be mapped to a well known SID $options = array_keys($this->rids); $options[] = '-'; $selected = array(); if (isset($this->attributes['sambaSID'][0]) && ($this->attributes['sambaSID'][0] != '')) { $rid = substr($this->attributes['sambaSID'][0], strrpos($this->attributes['sambaSID'][0], '-') + 1, strlen($this->attributes['sambaSID'][0])); $specialRids = array_flip($this->rids); if (in_array($rid, $this->rids)) { $selected = array($specialRids[$rid]); } else { $selected = array('-'); } } else $selected[] = "-"; $return[] = array( array('kind' => 'text', 'text' => _('Special user') ), array('kind' => 'select', 'name' => 'sambaSID', 'options' => $options, 'options_selected' => $selected), array('kind' => 'help', 'value' => 'specialUser' )); } $return[] = array( array('kind' => 'text', 'text' => _('Domain') . "*" ), array('kind' => 'select', 'name' => 'sambaDomainName', 'options' => $sambaDomainNames, 'options_selected' => $sel_domain), array('kind' => 'help', 'value' => 'domain' )); // logon hours and terminal server options if ($this->get_scope()=='user') { $return[] = array( array('kind' => 'text', 'text' => _('Logon hours')), array('kind' => 'input', 'type' => 'submit', 'name' => 'form_subpage_sambaSamAccount_logonHours_open', 'value' => _('Edit')), array('kind' => 'help', 'value' => 'logonHours')); $return[] = array( array('kind' => 'text', 'text' => _('Terminal server options') ), array('kind' => 'input', 'type' => 'submit', 'name' => 'form_subpage_sambaSamAccount_terminalServer_open', 'value' => _('Edit')), array('kind' => 'help', 'value' => 'terminalServer')); } // reset host password if ($this->get_scope()=='host') { $return[] = array(array ( 'kind' => 'input', 'name' => 'sambaAcctFlagsW', 'type' => 'hidden', 'value' => 'true' )); $return[] = array( array('kind' => 'text', 'text' => _('Reset password') ), array('kind' => 'input', 'type' => 'submit', 'name' => 'ResetSambaPassword', 'value' => _('Reset')), array('kind' => 'help', 'value' => 'resetPassword' )); } } else { $return[] = array( array('kind' => 'text', 'text' => ' '), array('kind' => 'input', 'type' => 'submit', 'name' => 'form_subpage_sambaSamAccount_attributes_addObjectClass', 'value' => _('Add Samba 3 account')) ); } return $return; } /** * This function will create the HTML page to edit the allowed workstations. * * @return array meta HTML code */ function display_html_sambaUserWorkstations() { if ($this->get_scope()=='user') { // Get list of all hosts. $result = $_SESSION['cache']->get_cache('uid', 'sambaSamAccount', 'host'); if (is_array($result)) { foreach ($result as $host) $availableUserWorkstations[] = str_replace("$", '', $host[0]); sort($availableUserWorkstations, SORT_STRING); $result = str_replace(' ', '', $this->attributes['sambaUserWorkstations'][0]); $userWorkstations = explode (',', $result); $availableUserWorkstations = array_delete($userWorkstations, $availableUserWorkstations); } $return[] = array( 0 => array ( 'kind' => 'fieldset', 'legend' => _("Allowed workstations"), 'value' => array ( 0 => array ( 0 => array ('kind' => 'fieldset', 'td' => array ('valign' => 'top'), 'legend' => _("Allowed workstations"), 'value' => array ( 0 => array ( 0 => array ( 'kind' => 'select', 'name' => 'sambaUserWorkstations', 'size' => '15', 'multiple' => true, 'options' => $userWorkstations)))), 1 => array ( 'kind' => 'table', 'value' => array ( 0 => array ( 0 => array ( 'kind' => 'input', 'type' => 'submit', 'name' => 'sambaUserWorkstations_add', 'value' => '<=')), 1 => array ( 0 => array ( 'kind' => 'input', 'type' => 'submit', 'name' => 'sambaUserWorkstations_remove', 'value' => '=>' )), 2 => array ( 0 => array ( 'kind' => 'help', 'value' => 'sambaUserWorkstations' )))), 2 => array ('kind' => 'fieldset', 'td' => array ('valign' => 'top'), 'legend' => _("Available workstations"), 'value' => array ( 0 => array ( 0 => array ( 'kind' => 'select', 'name' => 'availableSambaUserWorkstations', 'size' => '15', 'multiple' => true, 'options' => $availableUserWorkstations)))) )))); $return[] = array ( 0 => array ( 'kind' => 'input', 'name' => 'form_subpage_sambaSamAccount_attributes_back', 'type' => 'submit', 'value' => _('Back') ), 1 => array ( 'kind' => 'text'), 2 => array ('kind' => 'text')); } return $return; } /** * This function will create the HTML page to edit logon hours. * * @return array meta HTML code */ function display_html_logonHours() { $timeZone = 0; if (isset($this->moduleSettings['sambaSamAccount_timeZone']) && is_array($this->moduleSettings['sambaSamAccount_timeZone'])) { $timeZone = $this->moduleSettings['sambaSamAccount_timeZone'][0]; } $days = array(1 => _('Monday'), 2 => _('Tuesday'), 3 => _('Wednesday'), 4 => _('Thursday'), 5 => _('Friday'), 6 => _('Saturday'), 0 => _('Sunday')); if (!$this->attributes['sambaLogonHours'][0]) { $this->attributes['sambaLogonHours'][0] = 'FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF'; } // convert existing logonHours string to bit array $logonHours = $this->attributes['sambaLogonHours'][0]; $temp = array(); for ($i = 0; $i < strlen($logonHours); $i++) { $temp[] = $this->hex2bitstring[$logonHours[$i]]; } $logonHoursRev = implode('', $temp); // reverse bits low to high (1 is 0:00 sunday, 2 is 1:00 sunday, etc) $logonHours = ""; for ($i = 0; $i < 21; $i++) { $logonHours .= strrev(substr($logonHoursRev, $i*8, 8)); } $hour = array(); for ($i = 0; $i < 24*7; $i++) { $hour[$i] = substr($logonHours, $i, 1); } // display input for ($i = 0; $i < 24*7; $i++) { $hr = $i + $timeZone; if ($hr < 0) { $hr = $hr + 24*7; } elseif ($hr >= 24*7) { $hr = $hr - 24*7; } if ($i % 7 == 0) { $return[0][floor($i / 24)+1] = array('kind' => 'text', 'text' => '' . $days[floor($i / 24)] . '', 'td' => array('width' => "11%", 'align' => 'center')); } $return[$i % 24 + 1][floor($i/24) + 1] = array('kind' => 'input', 'name' => 'lh_' . $hr, 'type' => 'checkbox', 'checked' => $hour[$hr] ? true : false, 'td' => array('align' => 'center')); } $return[0][0] = array('kind' => 'text', 'text' => '' . _('Time') . '', 'td' => array('width' => "12.5%")); for ($h = 0; $h < 24; $h++) { $return[1 + $h][0] = array('kind' => 'text', 'text' => "$h:00 - $h:59"); } $return[] = array(0 => array('kind' => 'text', 'text' => ' ', 'td' => array('colspan' => 8))); $return[] = array( 0 => array('kind' => 'input', 'name' => 'form_subpage_sambaSamAccount_attributes_submit', 'type' => 'submit', 'value' => _('Ok'), 'td' => array('align' => 'right')), 1 => array('kind' => 'input', 'name' => 'form_subpage_sambaSamAccount_attributes_abort', 'type' => 'submit', 'value' => _('Cancel'), 'td' => array('align' => 'left')) ); return $return; } /** * This function will create the meta HTML code to show a page to change time values. * * @return array meta HTML code */ function display_html_time() { $return = array(); // determine attribute if (isset($_POST['form_subpage_sambaSamAccount_time_sambaPwdCanChange'])) { $attr = 'sambaPwdCanChange'; $text = _('User can change password'); $help = "pwdCanChange"; } elseif (isset($_POST['form_subpage_sambaSamAccount_time_sambaPwdMustChange'])) { $attr = 'sambaPwdMustChange'; $text = _('User must change password'); $help = "pwdMustChange"; } if (isset($_POST['form_subpage_sambaSamAccount_time_sambaKickoffTime'])) { $attr = 'sambaKickoffTime'; $text = _('Account expiration date'); $help = "expireDate"; } $time = 0; if (isset($this->attributes[$attr][0])) { $time = $this->attributes[$attr][0]; } $date = getdate($time); for ( $i=1; $i<=31; $i++ ) $mday[] = $i; for ( $i=1; $i<=12; $i++ ) $mon[] = $i; for ( $i=2003; $i<=2030; $i++ ) $year[] = $i; $return[] = array( array('kind' => 'text', 'text' => $text), array('kind' => 'table', 'value' => array(array( array('kind' => 'select', 'name' => 'expire_day', 'options' => $mday, 'options_selected' => $date['mday']), array('kind' => 'select', 'name' => 'expire_mon', 'options' => $mon, 'options_selected' => $date['mon']), array('kind' => 'select', 'name' => 'expire_yea', 'options' => $year, 'options_selected' => $date['year'])))), array('kind' => 'help', 'value' => $help)); $buttons = array(); $buttons[] = array('kind' => 'input', 'name' => 'form_subpage_sambaSamAccount_attributes_change' . $attr, 'type' => 'submit', 'value' => _('Change')); if (isset($this->attributes[$attr][0])) { $buttons[] = array('kind' => 'input', 'name' => 'form_subpage_sambaSamAccount_attributes_del' . $attr, 'type' => 'submit', 'value' => _('Remove')); } $buttons[] = array('kind' => 'input', 'name' => 'form_subpage_sambaSamAccount_attributes_back' . $attr, 'type' => 'submit', 'value' => _('Cancel')); $return[] = array( array('kind' => 'table', 'td' => array('colspan' => 3), 'value' => array($buttons)) ); return $return; } /** * This function will create the HTML page to edit the terminal server options. * * @return array meta HTML code */ function display_html_terminalServer() { $return = array(); $mDial = new sambaMungedDial(); if (isset($this->attributes['sambaMungedDial'][0])) { $mDial->load($this->attributes['sambaMungedDial'][0]); } // terminal server login $return[] = array( array('kind' => 'text', 'text' => _('Allow terminal server login')), array('kind' => 'input', 'name' => 'tsAllowLogin', 'type' => 'checkbox', 'checked' => $mDial->getTsLogin()), array('kind' => 'help', 'value' => 'tsAllowLogin')); // home directory $return[] = array( array('kind' => 'text', 'text' => _('Home directory')), array('kind' => 'input', 'name' => 'tsHomeDir', 'type' => 'text', 'value' => $mDial->ctx['CtxWFHomeDir']), array('kind' => 'help', 'value' => 'tsHomeDir')); // home drive $drives = array(); for ($i=90; $i>67; $i--) $drives[] = chr($i).':'; $selTsDrive = array(); if (isset($mDial->ctx['CtxWFHomeDirDrive'])) { $selTsDrive = array($mDial->ctx['CtxWFHomeDirDrive']); } $return[] = array( array('kind' => 'text', 'text' => _('Home drive')), array('kind' => 'select', 'size' => 1, 'name' => 'tsHomeDrive', 'options' => $drives, 'options_selected' => $selTsDrive), array('kind' => 'help', 'value' => 'homeDrive')); // profile path $return[] = array( array('kind' => 'text', 'text' => _('Profile path')), array('kind' => 'input', 'name' => 'tsProfilePath', 'type' => 'text', 'value' => $mDial->ctx['CtxWFProfilePath']), array('kind' => 'help', 'value' => 'tsProfilePath')); // use startup program and working dir from client $return[] = array( array('kind' => 'text', 'text' => _('Inherit client startup configuration')), array('kind' => 'input', 'name' => 'tsInherit', 'type' => 'checkbox', 'checked' => $mDial->getInheritMode()), array('kind' => 'help', 'value' => 'tsInherit')); // startup program $return[] = array( array('kind' => 'text', 'text' => _('Initial program')), array('kind' => 'input', 'name' => 'tsInitialProgram', 'type' => 'text', 'value' => $mDial->ctx['CtxInitialProgram']), array('kind' => 'help', 'value' => 'tsInitialProgram')); // working dir $return[] = array( array('kind' => 'text', 'text' => _('Working directory')), array('kind' => 'input', 'name' => 'tsWorkDirectory', 'type' => 'text', 'value' => $mDial->ctx['CtxWorkDirectory']), array('kind' => 'help', 'value' => 'tsWorkDirectory')); // connection time limit $return[] = array( array('kind' => 'text', 'text' => _('Connection time limit')), array('kind' => 'input', 'name' => 'tsConnectionLimit', 'type' => 'text', 'value' => $mDial->ctx['CtxMaxConnectionTime']), array('kind' => 'help', 'value' => 'tsTimeLimit')); // disconnection time limit $return[] = array( array('kind' => 'text', 'text' => _('Disconnection time limit')), array('kind' => 'input', 'name' => 'tsDisconnectionLimit', 'type' => 'text', 'value' => $mDial->ctx['CtxMaxDisconnectionTime']), array('kind' => 'help', 'value' => 'tsTimeLimit')); // idle time limit $return[] = array( array('kind' => 'text', 'text' => _('Idle time limit')), array('kind' => 'input', 'name' => 'tsIdleLimit', 'type' => 'text', 'value' => $mDial->ctx['CtxMaxIdleTime']), array('kind' => 'help', 'value' => 'tsTimeLimit')); // connect client drives $return[] = array( array('kind' => 'text', 'text' => _('Connect client drives')), array('kind' => 'input', 'name' => 'tsConnectDrives', 'type' => 'checkbox', 'checked' => $mDial->getConnectClientDrives()), array('kind' => 'help', 'value' => 'tsConnectDrives')); // connect client printers $return[] = array( array('kind' => 'text', 'text' => _('Connect client printers')), array('kind' => 'input', 'name' => 'tsConnectPrinters', 'type' => 'checkbox', 'checked' => $mDial->getConnectClientPrinters()), array('kind' => 'help', 'value' => 'tsConnectPrinters')); // client printer is default $return[] = array( array('kind' => 'text', 'text' => _('Client printer is default')), array('kind' => 'input', 'name' => 'tsClientPrinterDefault', 'type' => 'checkbox', 'checked' => $mDial->getDefaultPrinter()), array('kind' => 'help', 'value' => 'tsClientPrinterDefault')); // shadowing $shadowOptions = array( array("0", _("disabled")), array("1", _("input on, notify on")), array("2", _("input on, notify off")), array("3", _("input off, notify on")), array("4", _("input off, notify off"))); $selShadow = array($mDial->getShadow()); $return[] = array( array('kind' => 'text', 'text' => _('Shadowing')), array('kind' => 'select', 'size' => 1, 'name' => 'tsShadowing', 'descriptiveOptions' => true, 'options' => $shadowOptions, 'options_selected' => $selShadow), array('kind' => 'help', 'value' => 'tsShadowing')); // broken connection $brokenConnOptions = array( array("0", _("disconnect")), array("1", _("reset"))); $selbrokenConn = array($mDial->getBrokenConn()); $return[] = array( array('kind' => 'text', 'text' => _('On broken or timed out connection')), array('kind' => 'select', 'size' => 1, 'name' => 'tsBrokenConn', 'descriptiveOptions' => true, 'options' => $brokenConnOptions, 'options_selected' => $selbrokenConn), array('kind' => 'help', 'value' => 'tsBrokenConn')); // reconnect $reconnectOptions = array( array("0", _("from any client")), array("1", _("from previous client only"))); $selReconnect = array($mDial->getReConn()); $return[] = array( array('kind' => 'text', 'text' => _('Reconnect if disconnected')), array('kind' => 'select', 'size' => 1, 'name' => 'tsReconnect', 'descriptiveOptions' => true, 'options' => $reconnectOptions, 'options_selected' => $selReconnect), array('kind' => 'help', 'value' => 'tsReconnect')); // buttons $return[] = array(array('kind' => 'text', 'text' => ' ')); $return[] = array( array('kind' => 'input', 'name' => 'form_subpage_sambaSamAccount_attributes_submit', 'type' => 'submit', 'value' => _('Ok'), 'td' => array('align' => 'right')), array('kind' => 'input', 'name' => 'form_subpage_sambaSamAccount_attributes_abort', 'type' => 'submit', 'value' => _('Cancel'), 'td' => array('align' => 'left')) ); return $return; } /** * Returns a list of elements for the account profiles. * * @return profile elements */ function get_profileOptions() { $return = array(); if ($this->get_scope() == 'user') { // lists for expiration date $day = array(); $mon = array(); $year = array(); for ( $i=1; $i<=31; $i++ ) $day[] = $i; for ( $i=1; $i<=12; $i++ ) $mon[] = $i; for ( $i=2003; $i<=2030; $i++ ) $year[] = $i; // use Unix password as Samba password $return[] = array( 0 => array('kind' => 'text', 'text' => _('Use Unix password') . ': '), 1 => array('kind' => 'input', 'name' => 'sambaSamAccount_useunixpwd', 'type' => 'checkbox', 'checked' => true), 2 => array('kind' => 'help', 'value' => 'pwdunix') ); // use no password at all $return[] = array( 0 => array('kind' => 'text', 'text' => _('Use no password') . ': '), 1 => array('kind' => 'input', 'name' => 'sambaSamAccount_sambaAcctFlagsN', 'type' => 'checkbox', 'checked' => false), 2 => array('kind' => 'help', 'value' => 'noPassword') ); // account deactivation $return[] = array( 0 => array('kind' => 'text', 'text' => _('Account is deactivated') . ': '), 1 => array('kind' => 'input', 'name' => 'sambaSamAccount_sambaAcctFlagsD', 'type' => 'checkbox', 'checked' => false), 2 => array('kind' => 'help', 'value' => 'deactivated') ); // password never expires $return[] = array( 0 => array('kind' => 'text', 'text' => _('Password does not expire') . ': '), 1 => array('kind' => 'input', 'name' => 'sambaSamAccount_sambaAcctFlagsX', 'type' => 'checkbox', 'checked' => true), 2 => array('kind' => 'help', 'value' => 'noExpire') ); // expiration date $return[] = array( 0 => array('kind' => 'text', 'text' => _('Account expiration date')), 1 => array('kind' => 'table', 'value' => array( 0 => array ( 0 => array('kind' => 'select', 'name' => 'sambaSamAccount_expire_day', 'options' => $day, 'options_selected' => array('1')), 1 => array('kind' => 'select', 'name' => 'sambaSamAccount_expire_mon', 'options' => $mon, 'options_selected' => array('1')), 2 => array('kind' => 'select', 'name' => 'sambaSamAccount_expire_yea', 'options' => $year, 'options_selected' => array('2030')) ) )), 2 => array('kind' => 'help', 'value' => 'expireDate')); // letter of home drive $drives = array('-'); for ($i = 90; $i > 67; $i--) $drives[] = chr($i) . ':'; $return[] = array( 0 => array('kind' => 'text', 'text' => _('Home drive') . ': '), 1 => array('kind' => 'select', 'name' => 'sambaSamAccount_sambaHomeDrive', 'options' => $drives, 'options_selected' => array('-')), 2 => array('kind' => 'help', 'value' => 'homeDrive') ); // path to home directory $return[] = array( 0 => array('kind' => 'text', 'text' => _('Home path') . ': '), 1 => array('kind' => 'input', 'type' => 'text', 'name' => 'sambaSamAccount_smbhome', 'size' => '20', 'maxlength' => '255', 'value' => ''), 2 => array('kind' => 'help', 'value' => 'homePath') ); // profile path $return[] = array( 0 => array('kind' => 'text', 'text' => _('Profile path') . ': '), 1 => array('kind' => 'input', 'type' => 'text', 'name' => 'sambaSamAccount_profilePath', 'size' => '20', 'maxlength' => '255', 'value' => ''), 2 => array('kind' => 'help', 'value' => 'profilePath') ); // logon script $return[] = array( 0 => array('kind' => 'text', 'text' => _('Logon script') . ': '), 1 => array('kind' => 'input', 'type' => 'text', 'name' => 'sambaSamAccount_logonScript', 'size' => '20', 'maxlength' => '255', 'value' => ''), 2 => array('kind' => 'help', 'value' => 'scriptPath') ); // allowed workstations $return[] = array( 0 => array('kind' => 'text', 'text' => _('Samba workstations') . ': '), 1 => array('kind' => 'input', 'type' => 'text', 'name' => 'sambaSamAccount_userWorkstations', 'value' => ''), 2 => array('kind' => 'help', 'value' => 'workstations') ); // domains $sambaDomains = search_domains(); $sambaDomainNames = array(); for ($i = 0; $i < count($sambaDomains); $i++) { $sambaDomainNames[] = $sambaDomains[$i]->name; } $return[] = array( 0 => array('kind' => 'text', 'text' => _('Domain') . ': '), 1 => array('kind' => 'select', 'name' => 'sambaSamAccount_sambaDomainName', 'options' => $sambaDomainNames, 'options_selected' => array()), 2 => array('kind' => 'help', 'value' => 'domain') ); // Windows group $groups = array(); foreach ($this->rids as $key => $value) { $groups[] = array($value, $key); } $groups[] = array("-", "-"); $return[] = array( 0 => array('kind' => 'text', 'text' => _('Windows group') . ': '), 1 => array('kind' => 'select', 'name' => 'sambaSamAccount_group', 'options' => $groups, 'options_selected' => array('513'), 'descriptiveOptions' => true), 2 => array('kind' => 'help', 'value' => 'group') ); // logon hours $return[] = array( 0 => array('kind' => 'text', 'text' => _('Logon hours') . ': '), 1 => array('kind' => 'input', 'type' => 'text', 'name' => 'sambaSamAccount_logonHours', 'value' => ''), 2 => array('kind' => 'help', 'value' => 'logonHoursUpload') ); } elseif ($this->get_scope() == 'host') { // domains $sambaDomains = search_domains(); $sambaDomainNames = array(); for ($i = 0; $i < count($sambaDomains); $i++) { $sambaDomainNames[] = $sambaDomains[$i]->name; } $return[] = array( 0 => array('kind' => 'text', 'text' => _('Domain') . ': '), 1 => array('kind' => 'select', 'name' => 'sambaSamAccount_sambaDomainName', 'options' => $sambaDomainNames, 'options_selected' => array()), 2 => array('kind' => 'help', 'value' => 'domain') ); } return $return; } /** * Loads the values of an account profile into internal variables. * * @param array $profile hash array with profile values (identifier => value) */ function load_profile($profile) { // profile mappings in meta data parent::load_profile($profile); // special profile options // use Unix password if ($profile['sambaSamAccount_useunixpwd'][0] == "true") { $this->useunixpwd = true; } elseif ($profile['sambaSamAccount_useunixpwd'][0] == "false") { $this->useunixpwd = false; } // use no password if ($profile['sambaSamAccount_sambaAcctFlagsN'][0] == "true") { $this->nopwd = true; } elseif ($profile['sambaSamAccount_sambaAcctFlagsN'][0] == "false") { $this->nopwd = false; } // password expiration if ($profile['sambaSamAccount_sambaAcctFlagsX'][0] == "true") { $this->noexpire = true; } elseif ($profile['sambaSamAccount_sambaAcctFlagsX'][0] == "false") { $this->noexpire = false; } // use no password if ($profile['sambaSamAccount_sambaAcctFlagsD'][0] == "true") { $this->deactivated = true; } elseif ($profile['sambaSamAccount_sambaAcctFlagsD'][0] == "false") { $this->deactivated = false; } // home drive if ($profile['sambaSamAccount_sambaHomeDrive'][0] == "-") { $this->attributes['sambaHomeDrive'][0] = ''; } elseif ($profile['sambaSamAccount_sambaHomeDrive'][0]) { $this->attributes['sambaHomeDrive'][0] = $profile['sambaSamAccount_sambaHomeDrive'][0]; } // expiration date if (isset($profile['sambaSamAccount_expire_day'][0]) && ($profile['sambaSamAccount_expire_day'][0] != "")) { $date = mktime(0, 0, 0, intval($profile['sambaSamAccount_expire_mon'][0]), intval($profile['sambaSamAccount_expire_day'][0]), intval($profile['sambaSamAccount_expire_yea'][0])); $this->attributes['sambaKickoffTime'][0] = $date; } // domain -> change SID if (isset($this->attributes['sambaSID'][0])) { if (isset($profile['sambaSamAccount_sambaDomainName'][0]) && ($profile['sambaSamAccount_sambaDomainName'][0] != "")) { $domains = search_domains(); $domSID = ''; // find domain SID for ($i = 0; $i < sizeof($domains); $i++) { if ($domains[$i]->name == $profile['sambaSamAccount_sambaDomainName'][0]) { $domSID = $domains[$i]->SID; break; } } // replace domain part of SID if ($domSID != '') { $SID = $this->attributes['sambaSID'][0]; $rid = substr($SID, strrpos($SID, '-') + 1); $SID = $domSID . '-' . $rid; $this->attributes['sambaSID'][0] = $SID; } } } // primary group if (isset($profile['sambaSamAccount_sambaDomainName'][0])) { $domains = search_domains(); $domSID = ''; // find domain SID for ($i = 0; $i < sizeof($domains); $i++) { if ($domains[$i]->name == $profile['sambaSamAccount_sambaDomainName'][0]) { $domSID = $domains[$i]->SID; break; } } if ($domSID != '') { // set primary group if selected if (isset($profile['sambaSamAccount_group'][0]) && ($profile['sambaSamAccount_group'][0] != "-")) { $this->attributes['sambaPrimaryGroupSID'][0] = $domSID . "-" . $profile['sambaSamAccount_group'][0]; } } } } /** * Returns the PDF entries for this module. * * @return array list of possible PDF entries */ function get_pdfEntries() { $return = array(); if (isset($this->attributes['displayName'][0])) { $return['sambaSamAccount_displayName'] = array('' . _('Display name') . '' . $this->attributes['displayName'][0] . ''); } if (isset($this->attributes['sambaHomeDrive'][0])) { $return['sambaSamAccount_sambaHomePath'] = array('' . _('Home path') . '' . $this->attributes['sambaHomeDrive'][0] . ''); } if (isset($this->attributes['sambaHomePath'][0])) { $return['sambaSamAccount_sambaHomeDrive'] = array('' . _('Home drive') . '' . $this->attributes['sambaHomePath'][0] . ''); } if (isset($this->attributes['sambaLogonScript'][0])) { $return['sambaSamAccount_sambaLogonScript'] = array('' . _('Logon script') . '' . $this->attributes['sambaLogonScript'][0] . ''); } if (isset($this->attributes['sambaProfilePath'][0])) { $return['sambaSamAccount_sambaProfilePath'] = array('' . _('Profile path') . '' . $this->attributes['sambaProfilePath'][0] . ''); } if (isset($this->attributes['sambaUserWorkstations'][0])) { $return['sambaSamAccount_sambaUserWorkstations'] = array('' . _('Samba workstations') . '' . $this->attributes['sambaUserWorkstations'][0] . ''); } if (isset($this->attributes['sambaDomainName'][0])) { $return['sambaSamAccount_sambaDomainName'] = array('' . _('Domain') . '' . $this->attributes['sambaDomainName'][0] . ''); } if (isset($this->attributes['sambaPrimaryGroupSID'][0])) { $return['sambaSamAccount_sambaPrimaryGroupSID'] = array('' . _('Windows group') . '' . $this->attributes['sambaPrimaryGroupSID'][0] . ''); } // terminal server options if (isset($this->attributes['sambaMungedDial'][0])) { $mDial = new sambaMungedDial(); $mDial->load($this->attributes['sambaMungedDial'][0]); $tsAllowLogin = _('yes'); if (!$mDial->getTsLogin()) { $tsAllowLogin = _('no'); } $return['sambaSamAccount_tsAllowLogin'] = array('' . _('Allow terminal server login') . '' . $tsAllowLogin . ''); $return['sambaSamAccount_tsHomeDir'] = array('' . _('Home directory') . '' . $mDial->ctx['CtxWFHomeDir'] . ''); $return['sambaSamAccount_tsHomeDrive'] = array('' . _('Home drive') . '' . $mDial->ctx['CtxWFHomeDirDrive'] . ''); $return['sambaSamAccount_tsProfilePath'] = array('' . _('Profile path') . '' . $mDial->ctx['CtxWFProfilePath'] . ''); $tsInherit = _('yes'); if (!$mDial->getInheritMode()) { $tsInherit = _('no'); } $return['sambaSamAccount_tsInherit'] = array('' . _('Inherit client startup configuration') . '' . $tsInherit . ''); $return['sambaSamAccount_tsInitialProgram'] = array('' . _('Initial program') . '' . $mDial->ctx['CtxInitialProgram'] . ''); $return['sambaSamAccount_tsWorkDirectory'] = array('' . _('Working directory') . '' . $mDial->ctx['CtxWorkDirectory'] . ''); $return['sambaSamAccount_tsConnectionLimit'] = array('' . _('Connection time limit') . '' . $mDial->ctx['CtxMaxConnectionTime'] . ''); $return['sambaSamAccount_tsDisconnectionLimit'] = array('' . _('Disconnection time limit') . '' . $mDial->ctx['CtxMaxDisconnectionTime'] . ''); $return['sambaSamAccount_tsIdleLimit'] = array('' . _('Idle time limit') . '' . $mDial->ctx['CtxMaxIdleTime'] . ''); $tsConnectDrives = _('yes'); if (!$mDial->getConnectClientDrives()) { $tsConnectDrives = _('no'); } $return['sambaSamAccount_tsConnectDrives'] = array('' . _('Connect client drives') . '' . $tsConnectDrives . ''); $tsConnectPrinters = _('yes'); if (!$mDial->getConnectClientPrinters()) { $tsConnectPrinters = _('no'); } $return['sambaSamAccount_tsConnectPrinters'] = array('' . _('Connect client printers') . '' . $tsConnectPrinters . ''); $tsClientPrinterDefault = _('yes'); if (!$mDial->getDefaultPrinter()) { $tsClientPrinterDefault = _('no'); } $return['sambaSamAccount_tsClientPrinterDefault'] = array('' . _('Client printer is default') . '' . $tsClientPrinterDefault . ''); $shadowOptions = array( '0' => _("disabled"), '1' => _("input on, notify on"), '2' => _("input on, notify off"), '3' => _("input off, notify on"), '4' => _("input off, notify off")); $tsShadowing = ''; if (($mDial->getShadow() != null) && is_numeric($mDial->getShadow())) { $tsShadowing = $shadowOptions[$mDial->getShadow()]; } $return['sambaSamAccount_tsShadowing'] = array('' . _('Shadowing') . '' . $tsShadowing . ''); $brokenConnOptions = array( '0' => _("disconnect"), '1' => _("reset")); $tsBrokenConn = ''; if (($mDial->getBrokenConn() != null) && is_numeric($mDial->getBrokenConn())) { $tsBrokenConn = $brokenConnOptions[$mDial->getBrokenConn()]; } $return['sambaSamAccount_tsBrokenConn'] = array('' . _('On broken or timed out connection') . '' . $tsBrokenConn . ''); $reconnectOptions = array( '0' => _("from any client"), '1' => _("from previous client only")); $tsReconnect = ''; if (($mDial->getReConn() != null) && is_numeric($mDial->getReConn())) { $tsReconnect = $reconnectOptions[$mDial->getReConn()]; } $return['sambaSamAccount_tsReconnect'] = array('' . _('Reconnect if disconnected') . '' . $tsReconnect . ''); } return $return; } /** * In this function the LDAP account is built up. * * @param array $rawAccounts list of hash arrays (name => value) from user input * @param array $partialAccounts list of hash arrays (name => value) which are later added to LDAP * @param array $ids list of IDs for column position (e.g. "posixAccount_uid" => 5) * @return array list of error messages if any */ function build_uploadAccounts($rawAccounts, $ids, &$partialAccounts) { $errors = array(); // get list of Samba 3 domains $domains = search_domains(); // get list of Unix groups and their sambaSID + gidNumber $groups = $_SESSION['cache']->get_cache(array('cn', 'sambaSID', 'gidNumber'), 'posixGroup', 'group'); $groups_k = array_keys($groups); $groups_cn = array(); for ($i = 0; $i < sizeof($groups_k); $i++) { if (isset($groups[$groups_k[$i]]['sambaSID'][0])) { $groups_cn[$groups[$groups_k[$i]]['cn'][0]]['SID'] = $groups[$groups_k[$i]]['sambaSID'][0]; } if (isset($groups[$groups_k[$i]]['gidNumber'][0])) { $groups_cn[$groups[$groups_k[$i]]['cn'][0]]['gid'] = $groups[$groups_k[$i]]['gidNumber'][0]; } } if ($this->get_scope() == 'user') { for ($i = 0; $i < sizeof($rawAccounts); $i++) { if (!in_array("sambaSamAccount", $partialAccounts[$i]['objectClass'])) $partialAccounts[$i]['objectClass'][] = "sambaSamAccount"; // displayName if ($rawAccounts[$i][$ids['sambaSamAccount_displayName']] != "") { if (get_preg($rawAccounts[$i][$ids['sambaSamAccount_displayName']], 'realname')) { $partialAccounts[$i]['displayName'] = $rawAccounts[$i][$ids['sambaSamAccount_displayName']]; } else { $errMsg = $this->messages['displayName'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // password $partialAccounts[$i]['sambaPwdLastSet'] = time(); if (!get_preg($rawAccounts[$i][$ids['sambaSamAccount_password']], 'password')) { $errMsg = $this->messages['sambaLMPassword'][2]; array_push($errMsg, array($i)); $errors[] = $errMsg; } // use Unix password if ($rawAccounts[$i][$ids['sambaSamAccount_pwdUnix']] == "") { // default: use Unix $partialAccounts[$i]['sambaLMPassword'] = lmPassword($rawAccounts[$i][$ids['posixAccount_password']]); $partialAccounts[$i]['sambaNTPassword'] = ntPassword($rawAccounts[$i][$ids['posixAccount_password']]); } elseif (in_array($rawAccounts[$i][$ids['sambaSamAccount_pwdUnix']], array('true', 'false'))) { if ($rawAccounts[$i][$ids['sambaSamAccount_pwdUnix']] == 'true') { // use Unix $partialAccounts[$i]['sambaLMPassword'] = lmPassword($rawAccounts[$i][$ids['posixAccount_password']]); $partialAccounts[$i]['sambaNTPassword'] = ntPassword($rawAccounts[$i][$ids['posixAccount_password']]); } else { // use given password $partialAccounts[$i]['sambaLMPassword'] = lmPassword($rawAccounts[$i][$ids['sambaSamAccount_password']]); $partialAccounts[$i]['sambaNTPassword'] = ntPassword($rawAccounts[$i][$ids['sambaSamAccount_password']]); } } else { $errMsg = $this->messages['pwdUnix'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } // use no password if ($rawAccounts[$i][$ids['sambaSamAccount_noPassword']] != "") { if (in_array($rawAccounts[$i][$ids['sambaSamAccount_noPassword']], array('true', 'false'))) { if ($rawAccounts[$i][$ids['sambaSamAccount_noPassword']] == 'true') { $partialAccounts[$i]['sambaLMPassword'] = 'NO PASSWORD*****'; $partialAccounts[$i]['sambaNTPassword'] = 'NO PASSWORD*****'; } } else { $errMsg = $this->messages['noPassword'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // account flags $flag_expire = false; $flag_deactivated = false; // password does not expire if ($rawAccounts[$i][$ids['sambaSamAccount_noExpire']] != "") { if (in_array($rawAccounts[$i][$ids['sambaSamAccount_noExpire']], array('true', 'false'))) { if ($rawAccounts[$i][$ids['sambaSamAccount_noExpire']] == 'false') { $flag_expire = true; } } else { $errMsg = $this->messages['noExpire'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // account is deactivated if ($rawAccounts[$i][$ids['sambaSamAccount_deactivated']] != "") { if (in_array($rawAccounts[$i][$ids['sambaSamAccount_deactivated']], array('true', 'false'))) { if ($rawAccounts[$i][$ids['sambaSamAccount_deactivated']] == 'true') { $flag_deactivated = true; } } else { $errMsg = $this->messages['deactivated'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // set flags $flags = "["; if ($flag_deactivated) $flags = $flags . "D"; if (!$flag_expire) $flags = $flags . "X"; $flags = $flags . "U"; // Expand string to fixed length $flags = str_pad($flags, 12); // End character $flags = $flags . "]"; $partialAccounts[$i]['sambaAcctFlags'] = $flags; // passsword can be changed if ($rawAccounts[$i][$ids['sambaSamAccount_pwdCanChange']] != "") { if (get_preg($rawAccounts[$i][$ids['sambaSamAccount_pwdCanChange']], 'date')) { $parts = explode("-", $rawAccounts[$i][$ids['sambaSamAccount_pwdCanChange']]); $time = mktime(0, 0, 0, intval($parts[1]), intval($parts[0]), intval($parts[2])); $partialAccounts[$i]['sambaPwdCanChange'] = $time; } else { $errMsg = $this->messages['pwdCanChange'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // passsword must be changed if ($rawAccounts[$i][$ids['sambaSamAccount_pwdMustChange']] != "") { if (get_preg($rawAccounts[$i][$ids['sambaSamAccount_pwdMustChange']], 'date')) { $parts = explode("-", $rawAccounts[$i][$ids['sambaSamAccount_pwdMustChange']]); $time = mktime(0, 0, 0, intval($parts[1]), intval($parts[0]), intval($parts[2])); $partialAccounts[$i]['sambaPwdMustChange'] = $time; } else { $errMsg = $this->messages['pwdMustChange'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // expiration date if ($rawAccounts[$i][$ids['sambaSamAccount_expireDate']] != "") { if (get_preg($rawAccounts[$i][$ids['sambaSamAccount_expireDate']], 'date')) { $parts = explode("-", $rawAccounts[$i][$ids['sambaSamAccount_expireDate']]); $time = mktime(0, 0, 0, intval($parts[1]), intval($parts[0]), intval($parts[2])); $partialAccounts[$i]['sambaKickoffTime'] = $time; } else { $errMsg = $this->messages['expireDate'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // home drive if ($rawAccounts[$i][$ids['sambaSamAccount_homeDrive']] != "") { if (eregi("[d-z]:", $rawAccounts[$i][$ids['sambaSamAccount_homeDrive']])) { $partialAccounts[$i]['sambaHomeDrive'] = $rawAccounts[$i][$ids['sambaSamAccount_homeDrive']]; } else { $errMsg = $this->messages['homeDrive'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // home path if ($rawAccounts[$i][$ids['sambaSamAccount_homePath']] != "") { if (get_preg($rawAccounts[$i][$ids['sambaSamAccount_homePath']], 'UNC')) { $partialAccounts[$i]['sambaHomePath'] = $rawAccounts[$i][$ids['sambaSamAccount_homePath']]; } else { $errMsg = $this->messages['homePath'][2]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // profile path if ($rawAccounts[$i][$ids['sambaSamAccount_profilePath']] != "") { if (get_preg($rawAccounts[$i][$ids['sambaSamAccount_profilePath']], 'UNC')) { $partialAccounts[$i]['sambaProfilePath'] = $rawAccounts[$i][$ids['sambaSamAccount_profilePath']]; } else { $errMsg = $this->messages['profilePath'][2]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // logon script if ($rawAccounts[$i][$ids['sambaSamAccount_logonScript']] != "") { if (get_preg($rawAccounts[$i][$ids['sambaSamAccount_logonScript']], 'logonscript')) { $partialAccounts[$i]['sambaLogonScript'] = $rawAccounts[$i][$ids['sambaSamAccount_logonScript']]; } else { $errMsg = $this->messages['logonScript'][2]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // workstations if ($rawAccounts[$i][$ids['sambaSamAccount_workstations']] != "") { if (get_preg($rawAccounts[$i][$ids['sambaSamAccount_workstations']], 'workstations')) { $partialAccounts[$i]['sambaUserWorkstations'] = $rawAccounts[$i][$ids['sambaSamAccount_workstations']]; } else { $errMsg = $this->messages['workstations'][1]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } // domain $domIndex = -1; for ($d = 0; $d < sizeof($domains); $d++) { if ($domains[$d]->name == $rawAccounts[$i][$ids['sambaSamAccount_domain']]) { $domIndex = $d; break; } } if ($domIndex > -1) { $partialAccounts[$i]['sambaDomainName'] = $domains[$domIndex]->name; $partialAccounts[$i]['sambaSID'] = $domains[$domIndex]->SID; } else { $errMsg = $this->messages['domain'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } // group if ($rawAccounts[$i][$ids['sambaSamAccount_group']] != "") { if (get_preg($rawAccounts[$i][$ids['sambaSamAccount_group']], 'groupname') && (isset($groups_cn[$rawAccounts[$i][$ids['sambaSamAccount_group']]]))) { if (isset($groups_cn[$rawAccounts[$i][$ids['sambaSamAccount_group']]]['SID'])) { $partialAccounts[$i]['sambaPrimaryGroupSID'] = $groups_cn[$rawAccounts[$i][$ids['sambaSamAccount_group']]]['SID']; } else { $partialAccounts[$i]['sambaPrimaryGroupSID'] = $domains[$domIndex]->SID . '-' . ($groups_cn[$rawAccounts[$i][$ids['sambaSamAccount_group']]]['gid'] * 2 + $domains[$domIndex]->RIDbase + 1); } } elseif (in_array($rawAccounts[$i][$ids['sambaSamAccount_group']], array_keys($this->rids))) { $partialAccounts[$i]['sambaPrimaryGroupSID'] = $domains[$domIndex]->SID . '-' . $this->rids[$rawAccounts[$i][$ids['sambaSamAccount_group']]]; } else { $errMsg = $this->messages['group'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } else { // default domain users $partialAccounts[$i]['sambaPrimaryGroupSID'] = $domains[$domIndex]->SID . '-' . $this->rids[_('Domain users')]; } // special user if ($rawAccounts[$i][$ids['sambaSamAccount_rid']] != "") { if (in_array($rawAccounts[$i][$ids['sambaSamAccount_rid']], array_keys($this->rids))) { $partialAccounts[$i]['sambaSID'] .= '-' . $this->rids[$rawAccounts[$i][$ids['sambaSamAccount_rid']]]; } elseif (get_preg($rawAccounts[$i][$ids['sambaSamAccount_rid']], 'digit')) { $partialAccounts[$i]['sambaSID'] .= '-' . $rawAccounts[$i][$ids['sambaSamAccount_rid']]; } else { $errMsg = $this->messages['rid'][2]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } else { // default RID uid*2 + RIDBase $partialAccounts[$i]['sambaSID'] .= '-' . ($partialAccounts[$i]['uidNumber']*2 + $domains[$domIndex]->RIDbase); } // logon hours if ($rawAccounts[$i][$ids['sambaSamAccount_logonHours']] != "") { if (get_preg($rawAccounts[$i][$ids['sambaSamAccount_logonHours']], 'sambaLogonHours')) { $partialAccounts[$i]['sambaLogonHours'] = $rawAccounts[$i][$ids['sambaSamAccount_logonHours']]; } else { $errMsg = $this->messages['logonHours'][1]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } else { $partialAccounts[$i]['sambaLogonHours'] = "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF"; } } } else { // hosts for ($i = 0; $i < sizeof($rawAccounts); $i++) { if (!in_array("sambaSamAccount", $partialAccounts[$i]['objectClass'])) $partialAccounts[$i]['objectClass'][] = "sambaSamAccount"; // domain $domIndex = -1; for ($d = 0; $d < sizeof($domains); $d++) { if ($domains[$d]->name == $rawAccounts[$i][$ids['sambaSamAccount_domain']]) { $domIndex = $d; break; } } if ($domIndex > -1) { $partialAccounts[$i]['sambaDomainName'] = $domains[$domIndex]->name; $partialAccounts[$i]['sambaSID'] = $domains[$domIndex]->SID; $partialAccounts[$i]['sambaPrimaryGroupSID'] = $domains[$domIndex]->SID . " - 515"; } else { $errMsg = $this->messages['domain'][0]; array_push($errMsg, array($i)); $errors[] = $errMsg; } // RID if ($rawAccounts[$i][$ids['sambaSamAccount_rid']] != "") { if (get_preg($rawAccounts[$i][$ids['sambaSamAccount_rid']], 'digit')) { $partialAccounts[$i]['sambaSID'] .= '-' . $rawAccounts[$i][$ids['sambaSamAccount_rid']]; } else { $errMsg = $this->messages['rid'][3]; array_push($errMsg, array($i)); $errors[] = $errMsg; } } else { // default RID uid*2 + RIDBase $partialAccounts[$i]['sambaSID'] .= '-' . ($partialAccounts[$i]['uidNumber']*2 + $domains[$domIndex]->RIDbase); } // passwords ( = host name) $partialAccounts[$i]['sambaLMPassword'] = lmPassword(substr($partialAccounts[$i]['uid'], 0, sizeof($partialAccounts[$i]['uid']) - 1)); $partialAccounts[$i]['sambaNTPassword'] = ntPassword(substr($partialAccounts[$i]['uid'], 0, sizeof($partialAccounts[$i]['uid']) - 1)); // flags $partialAccounts[$i]['sambaAcctFlags'] = "[W ]"; } } return $errors; } /** * Checks if all input values are correct and returns the LDAP commands which should be executed. * * @param string $fields input fields * @param array $attributes LDAP attributes * @return array messages and LDAP commands (array('messages' => array(), 'add' => array(), 'del' => array(), 'mod' => array())) */ function checkSelfServiceOptions($fields, $attributes) { $return = array('messages' => array(), 'add' => array(), 'del' => array(), 'mod' => array()); if (isset($_POST['posixAccount_password']) && ($_POST['posixAccount_password'] != '')) { if ($_POST['posixAccount_password'] != $_POST['posixAccount_password2']) { return array(); } else { if (!get_preg($_POST['posixAccount_password'], 'password')) { return array(); } else { // sync password if (in_array('syncNTPassword', $fields)) { $return['mod']['sambaNTPassword'][0] = ntPassword($_POST['posixAccount_password']); } if (in_array('syncLMPassword', $fields)) { $return['mod']['sambaLMPassword'][0] = lmPassword($_POST['posixAccount_password']); } } } } return $return; } } ?>