212 lines
7.3 KiB
PHP
212 lines
7.3 KiB
PHP
<?php
|
|
/*
|
|
$Id$
|
|
|
|
This code is part of LDAP Account Manager (http://www.sourceforge.net/projects/lam)
|
|
Copyright (C) 2005 Roland Gruber
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
*/
|
|
|
|
/**
|
|
* Manages SSH public keys.
|
|
*
|
|
* @package modules
|
|
* @author Roland Gruber
|
|
* @author Andrew Dibble <adibble@mobitv.com>
|
|
*/
|
|
|
|
/**
|
|
* Manages SSH public keys.
|
|
*
|
|
* @package modules
|
|
*/
|
|
class ldapPublicKey extends baseModule {
|
|
|
|
/**
|
|
* Returns meta data that is interpreted by parent class
|
|
*
|
|
* @return array array with meta data
|
|
*/
|
|
function get_metaData() {
|
|
$return = array();
|
|
// manages host accounts
|
|
$return["account_types"] = array("user");
|
|
// alias name
|
|
$return["alias"] = _("SSH public key");
|
|
// module dependencies
|
|
$return['dependencies'] = array('depends' => array(), 'conflicts' => array());
|
|
// help Entries
|
|
$return['help'] = array(
|
|
'key' => array(
|
|
"Headline" => _("SSH public key"),
|
|
"Text" => _("Please enter your public SSH key.")
|
|
),
|
|
'keyList' => array(
|
|
"Headline" => _("SSH public key"),
|
|
"Text" => _("Please a comma separated list of your public SSH keys.")
|
|
)
|
|
);
|
|
// upload fields
|
|
$return['upload_columns'] = array(
|
|
array(
|
|
'name' => 'ldapPublicKey_sshPublicKey',
|
|
'description' => _('SSH public key'),
|
|
'help' => 'keyList',
|
|
'example' => 'ssh-dss 234234 user@host'
|
|
)
|
|
);
|
|
// available PDF fields
|
|
$return['PDF_fields'] = array(
|
|
'sshPublicKey'
|
|
);
|
|
return $return;
|
|
}
|
|
|
|
/**
|
|
* This function loads all needed attributes into the object.
|
|
*
|
|
* @param array $attr an array as it is retured from ldap_get_attributes
|
|
*/
|
|
function load_attributes($attr) {
|
|
$this->attributes['objectClass'] = array();
|
|
$this->attributes['sshPublicKey'] = array();
|
|
$this->orig['objectClass'] = array();
|
|
$this->orig['sshPublicKey'] = array();
|
|
if (isset($attr['objectClass'])) {
|
|
$this->attributes['objectClass'] = $attr['objectClass'];
|
|
$this->orig['objectClass'] = $attr['objectClass'];
|
|
}
|
|
if (isset($attr['sshPublicKey'])) {
|
|
$this->attributes['sshPublicKey'] = $attr['sshPublicKey'];
|
|
$this->orig['sshPublicKey'] = $attr['sshPublicKey'];
|
|
}
|
|
// add object class if needed
|
|
if (! in_array('ldapPublicKey', $this->orig['objectClass'])) {
|
|
$this->attributes['objectClass'][] = 'ldapPublicKey';
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
/**
|
|
* Returns a list of modifications which have to be made to the LDAP account.
|
|
*
|
|
* @return array list of modifications
|
|
* <br>This function returns an array with 3 entries:
|
|
* <br>array( DN1 ('add' => array($attr), 'remove' => array($attr), 'modify' => array($attr)), DN2 .... )
|
|
* <br>DN is the DN to change. It may be possible to change several DNs (e.g. create a new user and add him to some groups via attribute memberUid)
|
|
* <br>"add" are attributes which have to be added to LDAP entry
|
|
* <br>"remove" are attributes which have to be removed from LDAP entry
|
|
* <br>"modify" are attributes which have to been modified in LDAP entry
|
|
*/
|
|
function save_attributes() {
|
|
return $_SESSION[$this->base]->save_module_attributes($this->attributes, $this->orig);
|
|
}
|
|
|
|
/**
|
|
* This function will create the meta HTML code to show a page with all attributes.
|
|
*
|
|
* @param array $post HTTP-POST values
|
|
*/
|
|
function display_html_attributes(&$post) {
|
|
$return = array();
|
|
// list current keys
|
|
for ($i = 0; $i < sizeof($this->attributes['sshPublicKey']); $i++) {
|
|
$return[] = array(
|
|
0 => array('kind' => 'text', 'text' => _('SSH public key')),
|
|
1 => array('kind' => 'input', 'name' => 'sshPublicKey' . $i, 'type' => 'text', 'size' => '50', 'maxlength' => '2048', 'value' => $this->attributes['sshPublicKey'][$i]),
|
|
2 => array('kind' => 'input', 'type' => 'submit', 'name' => 'delKey' . $i, 'value' => _("Remove")),
|
|
3 => array('kind' => 'help', 'value' => 'key'));
|
|
}
|
|
// input box for new key
|
|
$return[] = array(
|
|
0 => array('kind' => 'text', 'text' => _('New SSH public key')),
|
|
1 => array('kind' => 'input', 'name' => 'sshPublicKey', 'type' => 'text', 'size' => '50', 'maxlength' => '2048', 'value' => ''),
|
|
2 => array('kind' => 'input', 'type' => 'submit', 'name' => 'addKey', 'value' => _("Add")),
|
|
3 => array('kind' => 'help', 'value' => 'key'),
|
|
4 => array('kind' => 'input', 'type' => 'hidden', 'value' => sizeof($this->attributes['sshPublicKey']), 'name' => 'key_number'));
|
|
return $return;
|
|
}
|
|
|
|
/**
|
|
* Processes user input of the primary module page.
|
|
* It checks if all input values are correct and updates the associated LDAP attributes.
|
|
*
|
|
* @param array $post HTTP-POST values
|
|
* @return array list of info/error messages
|
|
*/
|
|
function process_attributes(&$post) {
|
|
$this->triggered_messages = array();
|
|
$this->attributes['sshPublicKey'] = array();
|
|
// check old keys
|
|
if (isset($post['key_number'])) {
|
|
for ($i = 0; $i < $post['key_number']; $i++) {
|
|
if (isset($post['delKey' . $i])) continue;
|
|
if (isset($post['sshPublicKey' . $i]) && ($post['sshPublicKey' . $i] != "")) {
|
|
$this->attributes['sshPublicKey'][] = $post['sshPublicKey' . $i];
|
|
}
|
|
}
|
|
}
|
|
// check new key
|
|
if (isset($post['sshPublicKey']) && ($post['sshPublicKey'] != "")) {
|
|
$this->attributes['sshPublicKey'][] = $post['sshPublicKey'];
|
|
}
|
|
$this->attributes['sshPublicKey'] = array_unique($this->attributes['sshPublicKey']);
|
|
}
|
|
|
|
/**
|
|
* In this function the LDAP account is built up.
|
|
*
|
|
* @param array $rawAccounts list of hash arrays (name => value) from user input
|
|
* @param array $partialAccounts list of hash arrays (name => value) which are later added to LDAP
|
|
* @param array $ids list of IDs for column position (e.g. "posixAccount_uid" => 5)
|
|
* @return array list of error messages if any
|
|
*/
|
|
function build_uploadAccounts($rawAccounts, $ids, &$partialAccounts) {
|
|
$messages = array();
|
|
for ($i = 0; $i < sizeof($rawAccounts); $i++) {
|
|
// add object class
|
|
if (!in_array("ldapPublicKey", $partialAccounts[$i]['objectClass'])) $partialAccounts[$i]['objectClass'][] = "ldapPublicKey";
|
|
// add keys
|
|
if ($rawAccounts[$i][$ids['ldapPublicKey_sshPublicKey']] != "") {
|
|
$keys = explode(',', $rawAccounts[$i][$ids['ldapPublicKey_sshPublicKey']]);
|
|
// check format
|
|
for ($m = 0; $m < sizeof($keys); $m++) {
|
|
$partialAccounts[$i]['sshPublicKey'][] = $keys[$m];
|
|
}
|
|
}
|
|
}
|
|
return $messages;
|
|
}
|
|
|
|
/**
|
|
* Returns a list of PDF entries
|
|
*/
|
|
function get_pdfEntries() {
|
|
$return = array();
|
|
if (sizeof($this->attributes['sshPublicKey']) > 0) {
|
|
$return['ldapPublicKey_sshPublicKey'][0] = '<block><key>' . _('SSH public key(s)') . '</key><tr><td align=\"L\">' . $this->attributes['sshPublicKey'][0] . '</td></tr></block>';
|
|
for ($i = 1; $i < sizeof($this->attributes['sshPublicKey']); $i++) {
|
|
$return['ldapPublicKey_sshPublicKey'][] = '<block><tr><td align=\"L\">' . $this->attributes['sshPublicKey'][$i] . '</td></tr></block>';
|
|
}
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
}
|
|
|
|
|
|
?>
|