202 lines
6.5 KiB
PHP
202 lines
6.5 KiB
PHP
<?php
|
|
/*
|
|
$Id$
|
|
|
|
This code is part of LDAP Account Manager (http://www.ldap-account-manager.org/)
|
|
Copyright (C) 2003 - 2013 Roland Gruber
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
*/
|
|
|
|
/**
|
|
* Creates main suffixes if they are missing.
|
|
*
|
|
* @author Roland Gruber
|
|
* @package main
|
|
*/
|
|
|
|
/** security functions */
|
|
include_once("../lib/security.inc");
|
|
/** access to configuration settings */
|
|
include_once("../lib/config.inc");
|
|
/** LDAP access */
|
|
include_once("../lib/ldap.inc");
|
|
/** status messages */
|
|
include_once("../lib/status.inc");
|
|
|
|
// start session
|
|
startSecureSession();
|
|
|
|
if (!checkIfWriteAccessIsAllowed()) {
|
|
die();
|
|
}
|
|
|
|
setlanguage();
|
|
|
|
// check if user already pressed button
|
|
if (isset($_POST['add_suff']) || isset($_POST['cancel'])) {
|
|
if (isset($_POST['add_suff'])) {
|
|
$fail = array();
|
|
$errors = array();
|
|
$new_suff = $_POST['new_suff'];
|
|
$new_suff = str_replace("\\", "", $new_suff);
|
|
$new_suff = str_replace("'", "", $new_suff);
|
|
$new_suff = explode(";", $new_suff);
|
|
// add entries
|
|
for ($i = 0; $i < sizeof($new_suff); $i++) {
|
|
// check if entry is already present
|
|
$info = @ldap_read($_SESSION['ldap']->server(), escapeDN($new_suff[$i]), "objectclass=*", array('dn'), 0, 0, 0, LDAP_DEREF_NEVER);
|
|
$res = @ldap_get_entries($_SESSION['ldap']->server(), $info);
|
|
if ($res) continue;
|
|
$suff = $new_suff[$i];
|
|
// generate DN and attributes
|
|
$tmp = explode(",", $suff);
|
|
$name = explode("=", $tmp[0]);
|
|
array_shift($tmp);
|
|
$end = implode(",", $tmp);
|
|
if ($name[0] != "ou") { // add root entry
|
|
$attr = array();
|
|
$attr[$name[0]] = $name[1];
|
|
$attr['objectClass'] = 'organization';
|
|
$dn = $suff;
|
|
if (!@ldap_add($_SESSION['ldap']->server(), $dn, $attr)) {
|
|
$fail[] = $suff;
|
|
$error[] = ldap_error($_SESSION['ldap']->server());
|
|
continue;
|
|
}
|
|
}
|
|
else { // add organizational unit
|
|
$name = $name[1];
|
|
$attr = array();
|
|
$attr['objectClass'] = "organizationalunit";
|
|
$attr['ou'] = $name;
|
|
$dn = $suff;
|
|
if (!@ldap_add($_SESSION['ldap']->server(), $dn, $attr)) {
|
|
// check if we have to add parent entries
|
|
if (ldap_errno($_SESSION['ldap']->server()) == 32) {
|
|
$temp = explode(",", $suff);
|
|
$subsuffs = array();
|
|
// make list of subsuffixes
|
|
for ($k = 0; $k < sizeof($temp); $k++) {
|
|
$part = explode("=", $temp[$k]);
|
|
if ($part[0] == "ou") $subsuffs[] = implode(",", array_slice($temp, $k));
|
|
else {
|
|
$subsuffs[] = implode(",", array_slice($temp, $k));
|
|
break;
|
|
}
|
|
}
|
|
// create missing entries
|
|
for ($k = sizeof($subsuffs) - 1; $k >= 0; $k--) {
|
|
// check if subsuffix is present
|
|
$info = @ldap_read($_SESSION['ldap']->server(), escapeDN($subsuffs[$k]), "objectclass=*", array('dn'), 0, 0, 0, LDAP_DEREF_NEVER);
|
|
$res = @ldap_get_entries($_SESSION['ldap']->server(), $info);
|
|
if (!$res) {
|
|
$suffarray = explode(",", $subsuffs[$k]);
|
|
$headarray = explode("=", $suffarray[0]);
|
|
if ($headarray[0] == "ou") { // add ou entry
|
|
$attr = array();
|
|
$attr['objectClass'] = 'organizationalunit';
|
|
$attr['ou'] = $headarray[1];
|
|
$dn = $subsuffs[$k];
|
|
if (!@ldap_add($_SESSION['ldap']->server(), $dn, $attr)) {
|
|
$fail[] = $suff;
|
|
$error[] = ldap_error($_SESSION['ldap']->server());
|
|
break;
|
|
}
|
|
}
|
|
else { // add root entry
|
|
$attr = array();
|
|
$attr['objectClass'][] = 'organization';
|
|
$attr[$headarray[0]] = $headarray[1];
|
|
if ($headarray[0] == "dc") {
|
|
$attr['o'] = $headarray[1];
|
|
$attr['objectClass'][] = 'dcObject';
|
|
}
|
|
$dn = $subsuffs[$k];
|
|
if (!@ldap_add($_SESSION['ldap']->server(), $dn, $attr)) {
|
|
$fail[] = $suff;
|
|
$error[] = ldap_error($_SESSION['ldap']->server());
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
$fail[] = $suff;
|
|
$error[] = ldap_error($_SESSION['ldap']->server());
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
include 'main_header.php';
|
|
// print error/success messages
|
|
if (isset($_POST['add_suff'])) {
|
|
if (sizeof($fail) > 0) {
|
|
// print error messages
|
|
for ($i = 0; $i < sizeof($fail); $i++) {
|
|
StatusMessage("ERROR", _("Failed to create entry!") . "<br>" . htmlspecialchars($error[$i]), htmlspecialchars($fail[$i]));
|
|
}
|
|
include 'main_footer.php';
|
|
}
|
|
else {
|
|
// print success message
|
|
StatusMessage("INFO", "", _("All changes were successful."));
|
|
include 'main_footer.php';
|
|
}
|
|
}
|
|
else {
|
|
// no suffixes were created
|
|
StatusMessage("INFO", "", _("No changes were made."));
|
|
include 'main_footer.php';
|
|
}
|
|
exit;
|
|
}
|
|
|
|
// first show of page
|
|
$new_suff = $_GET['suffs'];
|
|
$new_suff = str_replace("\\", "", $new_suff);
|
|
$new_suff = str_replace("'", "", $new_suff);
|
|
$new_suff = explode(";", $new_suff);
|
|
|
|
include 'main_header.php';
|
|
echo '<div class="user-bright smallPaddingContent">';
|
|
echo "<form action=\"initsuff.php\" method=\"post\">\n";
|
|
$container = new htmlTable();
|
|
$container->addElement(new htmlOutputText(_("The following suffixes are missing in LDAP. LAM can create them for you.")), true);
|
|
$container->addElement(new htmlOutputText(_("You can setup the LDAP suffixes for all account types in your LAM server profile on tab \"Account types\".")), true);
|
|
$container->addElement(new htmlSpacer(null, '10px'), true);
|
|
// print missing suffixes
|
|
for ($i = 0; $i < sizeof($new_suff); $i++) {
|
|
$container->addElement(new htmlOutputText($new_suff[$i]), true);
|
|
}
|
|
$container->addElement(new htmlSpacer(null, '10px'), true);
|
|
|
|
$buttonContainer = new htmlTable();
|
|
$buttonContainer->addElement(new htmlButton('add_suff', _("Create")));
|
|
$buttonContainer->addElement(new htmlButton('cancel', _("Cancel")));
|
|
$buttonContainer->addElement(new htmlHiddenInput('new_suff', implode(";", $new_suff)));
|
|
$container->addElement($buttonContainer);
|
|
|
|
$tabindex = 1;
|
|
parseHtml(null, $container, array(), false, $tabindex, 'user');
|
|
|
|
echo "</form><br>\n";
|
|
echo "</div>\n";
|
|
include 'main_footer.php';
|
|
?>
|