289 lines
8.2 KiB
PHP
289 lines
8.2 KiB
PHP
<?php
|
|
/*
|
|
$Id$
|
|
|
|
This code is part of LDAP Account Manager (http://www.ldap-account-manager.org/)
|
|
Copyright (C) 2005 - 2009 Roland Gruber
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
*/
|
|
|
|
/**
|
|
* The account type for group accounts (e.g. Unix and Samba).
|
|
*
|
|
* @package types
|
|
* @author Roland Gruber
|
|
* @author Ludek Finstrle
|
|
*/
|
|
|
|
/**
|
|
* The account type for group accounts (e.g. Unix and Samba).
|
|
*
|
|
* @package types
|
|
*/
|
|
class group extends baseType {
|
|
|
|
/**
|
|
* Constructs a new group type object.
|
|
*/
|
|
public function __construct() {
|
|
parent::__construct();
|
|
$this->LABEL_CREATE_ANOTHER_ACCOUNT = _('Create another group');
|
|
$this->LABEL_BACK_TO_ACCOUNT_LIST = _('Back to group list');
|
|
}
|
|
|
|
/**
|
|
* Returns the alias name of this account type.
|
|
*
|
|
* @return string alias name
|
|
*/
|
|
function getAlias() {
|
|
return _("Groups");
|
|
}
|
|
|
|
/**
|
|
* Returns the description of this account type.
|
|
*
|
|
* @return string description
|
|
*/
|
|
function getDescription() {
|
|
return _("Group accounts (e.g. Unix and Samba)");
|
|
}
|
|
|
|
/**
|
|
* Returns the class name for the list object.
|
|
*
|
|
* @return string class name
|
|
*/
|
|
function getListClassName() {
|
|
return "lamGroupList";
|
|
}
|
|
|
|
/**
|
|
* Returns the default attribute list for this account type.
|
|
*
|
|
* @return string attribute list
|
|
*/
|
|
function getDefaultListAttributes() {
|
|
return "#cn;#gidNumber;#memberUID;#description";
|
|
}
|
|
|
|
/**
|
|
* Returns a list of attributes which have a translated description.
|
|
* This is used for the head row in the list view.
|
|
*
|
|
* @return array list of descriptions
|
|
*/
|
|
function getListAttributeDescriptions() {
|
|
return array (
|
|
"cn" => _("Group name"),
|
|
"gidnumber" => _("GID number"),
|
|
"memberuid" => _("Group members"),
|
|
"member" => _("Group member DNs"),
|
|
"description" => _("Group description")
|
|
);
|
|
}
|
|
|
|
}
|
|
|
|
/**
|
|
* Generates the list view.
|
|
*
|
|
* @package lists
|
|
* @author Roland Gruber
|
|
*
|
|
*/
|
|
class lamGroupList extends lamList {
|
|
|
|
/** Controls if include primary group members into group memebers */
|
|
private $use_primary = false;
|
|
/** Primary group members hash */
|
|
private $primary_hash = array();
|
|
/** Controls if primary group members needs refresh */
|
|
private $refresh_primary = false;
|
|
/** ID for config option */
|
|
const TRANS_PRIMARY_OPTION_NAME = "LG_TP";
|
|
/** specifies if primary group members are visible */
|
|
private $include_primary = false;
|
|
|
|
/**
|
|
* Constructor
|
|
*
|
|
* @param string $type account type
|
|
* @return lamList list object
|
|
*/
|
|
function __construct($type) {
|
|
parent::__construct($type);
|
|
$this->labels = array(
|
|
'nav' => _("%s group(s) found"),
|
|
'error_noneFound' => _("No groups found!"),
|
|
'newEntry' => _("New group"),
|
|
'deleteEntry' => _("Delete group(s)"));
|
|
}
|
|
|
|
/**
|
|
* Sets some internal parameters.
|
|
*/
|
|
function listGetParams() {
|
|
parent::listGetParams();
|
|
// generate list primary group memebers
|
|
// after parent::listGetParams is $this->refresh set to correct value
|
|
if ($this->include_primary && !$this->refresh && ($this->refresh_primary || (sizeof($this->primary_hash) == 0)))
|
|
$this->groupRefreshPrimary();
|
|
}
|
|
|
|
/**
|
|
* Prints the content of a cell in the account list for a given LDAP entry and attribute.
|
|
*
|
|
* @param array $entry LDAP attributes
|
|
* @param string $attribute attribute name
|
|
*/
|
|
function listPrintTableCellContent(&$entry, &$attribute) {
|
|
if ($attribute == "memberuid") {
|
|
// $gid is used for linking primary group memebers
|
|
$gid = -1;
|
|
$use_primary = false;
|
|
if ($this->include_primary == "on") {
|
|
// Get the gid number
|
|
if (isset($entry['gidnumber']) && is_array($entry['gidnumber'])) {
|
|
$gid = $entry['gidnumber'][0];
|
|
}
|
|
$use_primary = (($gid >= 0) && (sizeof($this->primary_hash) > 0) &&
|
|
isset($this->primary_hash[$gid]) && is_array($this->primary_hash[$gid]) &&
|
|
(sizeof($this->primary_hash[$gid]) > 0));
|
|
}
|
|
if ($use_primary) {
|
|
if (isset($entry[$attribute]) && isset($entry[$attribute]['count'])) unset($entry[$attribute]['count']);
|
|
} else {
|
|
if (!isset($entry[$attribute]) || !is_array($entry[$attribute]) || (sizeof($entry[$attribute]) < 1)) return;
|
|
if (isset($entry[$attribute]['count'])) unset($entry[$attribute]['count']);
|
|
// sort array
|
|
sort($entry[$attribute]);
|
|
}
|
|
// make a link for each member of the group
|
|
$linklist = array();
|
|
if ($use_primary) {
|
|
$primary_hash = $this->primary_hash[$gid];
|
|
// merge primary members into secondary ones
|
|
$primaryvals = array_flip(array_values($primary_hash));
|
|
// test if group has some secondary members
|
|
if (isset($entry[$attribute])) {
|
|
$attr = array_merge($primary_hash,$entry[$attribute]);
|
|
}
|
|
else {
|
|
$attr = $primary_hash;
|
|
}
|
|
// sort array
|
|
sort($attr);
|
|
|
|
// make a link for each member of the group
|
|
for ($d = 0; $d < sizeof($attr); $d++) {
|
|
$user = $attr[$d]; // user name
|
|
if (isset($primaryvals[$user])) {
|
|
$linklist[$d] = "<b><a href=\"userlink.php?user='" . $user . "' \">" . $user . "</a></b>";
|
|
}
|
|
else {
|
|
$linklist[$d] = "<a href=\"userlink.php?user='" . $user . "' \">" . $user . "</a>";
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
// make a link for each member of the group
|
|
for ($d = 0; $d < sizeof($entry[$attribute]); $d++) {
|
|
$user = $entry[$attribute][$d]; // user name
|
|
$linklist[$d] = "<a href=\"userlink.php?user='" . $user . "' \">" . $user . "</a>";
|
|
}
|
|
}
|
|
echo implode("; ", $linklist);
|
|
}
|
|
// print all other attributes
|
|
else {
|
|
parent::listPrintTableCellContent($entry, $attribute);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Rereads the entries from LDAP.
|
|
*/
|
|
function listRefreshData() {
|
|
parent::listRefreshData();
|
|
if ($this->include_primary) {
|
|
$this->groupRefreshPrimary();
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Refreshes the primary group members list.
|
|
*/
|
|
function groupRefreshPrimary() {
|
|
$this->refresh_primary = false;
|
|
// return unless some entries
|
|
if (sizeof($this->entries) <= 0) return;
|
|
|
|
$scope = "user";
|
|
// get search suffix
|
|
$module_suffix = $_SESSION["config"]->get_Suffix($scope);
|
|
// configure search filter
|
|
$module_filter = get_ldap_filter($scope); // basic filter is provided by modules
|
|
$attrs = array( "uid" );
|
|
for ($i = 0; $i < sizeof($this->entries); $i++) {
|
|
$gid = $this->entries[$i]['gidnumber'][0];
|
|
$filter = "(&(&" . $module_filter . ")(gidNumber=" . $gid . "))";
|
|
$sr = @ldap_search($_SESSION["ldap"]->server(), escapeDN($module_suffix), $filter, $attrs, 0, 0, 0, LDAP_DEREF_ALWAYS);
|
|
if (ldap_errno($_SESSION["ldap"]->server()) == 4) {
|
|
StatusMessage("WARN", _("LDAP sizelimit exceeded, not all entries are shown."), _("See README.openldap.txt to solve this problem."));
|
|
$this->refresh_primary = true;
|
|
}
|
|
if ($sr) {
|
|
$members = ldap_get_entries($_SESSION["ldap"]->server(), $sr);
|
|
ldap_free_result($sr);
|
|
// delete first array entry which is "count"
|
|
unset($members['count']);
|
|
for ($j = 0; $j < sizeof($members); $j++) {
|
|
$this->primary_hash[$gid][$j] = $members[$j]['uid'][0];
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Returns a list of possible configuration options.
|
|
*
|
|
* @return array list of lamListOption objects
|
|
*/
|
|
protected function listGetAllConfigOptions() {
|
|
$options = parent::listGetAllConfigOptions();
|
|
$options[] = new lamBooleanListOption(_('Show primary group members as normal group members'), self::TRANS_PRIMARY_OPTION_NAME);
|
|
return $options;
|
|
}
|
|
|
|
/**
|
|
* Called when the configuration options changed.
|
|
*/
|
|
protected function listConfigurationChanged() {
|
|
parent::listConfigurationChanged();
|
|
$tpOption = $this->listGetConfigOptionByID(self::TRANS_PRIMARY_OPTION_NAME);
|
|
$use_primary = $this->include_primary;
|
|
$this->include_primary = $tpOption->isSelected();
|
|
if (!$use_primary && $this->include_primary) {
|
|
$this->refresh_primary = true;
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
|
|
?>
|