array( 'noheader' => True, 'nonavbar' => True, 'currentapp' => 'home', 'noapi' => True )); include('./inc/functions.inc.php'); /* Authorize the user to use setup app and load the database */ if(!$GLOBALS['egw_setup']->auth('Config')) { Header('Location: index.php'); exit; } /* Does not return unless user is authorized */ class egw { var $common; var $accounts; var $applications; var $db; } $GLOBALS['egw'] = new egw; $GLOBALS['egw']->common = CreateObject('phpgwapi.common'); $common = $GLOBALS['egw']->common; $GLOBALS['egw_setup']->loaddb(); $GLOBALS['egw']->db = clone($GLOBALS['egw_setup']->db); $tpl_root = $GLOBALS['egw_setup']->html->setup_tpl_dir('setup'); $setup_tpl = CreateObject('setup.Template',$tpl_root); $setup_tpl->set_file(array( 'ldap' => 'ldap.tpl', 'T_head' => 'head.tpl', 'T_footer' => 'footer.tpl', 'T_alert_msg' => 'msg_alert_msg.tpl' )); $GLOBALS['egw_setup']->db->query("SELECT config_name,config_value FROM phpgw_config WHERE config_name LIKE 'ldap%' OR config_name='account_repository'",__LINE__,__FILE__); while($GLOBALS['egw_setup']->db->next_record()) { $config[$GLOBALS['egw_setup']->db->f('config_name')] = $GLOBALS['egw_setup']->db->f('config_value'); } $phpgw_info['server']['ldap_host'] = $config['ldap_host']; $phpgw_info['server']['ldap_context'] = $config['ldap_context']; $phpgw_info['server']['ldap_group_context'] = $config['ldap_group_context']; $phpgw_info['server']['ldap_root_dn'] = $config['ldap_root_dn']; $phpgw_info['server']['ldap_root_pw'] = $config['ldap_root_pw']; $phpgw_info['server']['account_repository'] = $config['account_repository']; $phpgw_info['server']['ldap_version3'] = $config['ldap_version3']; $GLOBALS['egw']->accounts = CreateObject('phpgwapi.accounts'); $acct = $GLOBALS['egw']->accounts; /* connect to ldap server */ if(!$ldap = $common->ldapConnect()) { $noldapconnection = True; } if($noldapconnection) { Header('Location: config.php?error=badldapconnection'); exit; } $sr = ldap_search($ldap,$config['ldap_context'],'(|(uid=*))',array('cn','givenname','uid','uidnumber')); $info = ldap_get_entries($ldap, $sr); $tmp = ''; for($i=0; $i<$info['count']; $i++) { if(!$phpgw_info['server']['global_denied_users'][$info[$i]['uid'][0]]) { $account_info[$info[$i]['uidnumber'][0]] = $info[$i]; } } if($phpgw_info['server']['ldap_group_context']) { $srg = ldap_search($ldap,$config['ldap_group_context'],'(|(cn=*))',array('gidnumber','cn','memberuid')); $info = ldap_get_entries($ldap, $srg); $tmp = ''; for($i=0; $i<$info['count']; $i++) { if(!$phpgw_info['server']['global_denied_groups'][$info[$i]['cn'][0]] && !$account_info[$i][$info[$i]['cn'][0]]) { $group_info[$info[$i]['gidnumber'][0]] = $info[$i]; } } } else { $group_info = array(); } $GLOBALS['egw_setup']->db->query("SELECT app_name FROM phpgw_applications WHERE app_enabled!='0' AND app_enabled!='3' ORDER BY app_name",__LINE__,__FILE__); while($GLOBALS['egw_setup']->db->next_record()) { $apps[$GLOBALS['egw_setup']->db->f('app_name')] = lang($GLOBALS['egw_setup']->db->f('app_name')); } if($cancel) { Header("Location: ldap.php"); exit; } $GLOBALS['egw_setup']->html->show_header(lang('LDAP Modify'),False,'config',$GLOBALS['egw_setup']->ConfigDomain . '(' . $GLOBALS['egw_domain'][$GLOBALS['egw_setup']->ConfigDomain]['db_type'] . ')'); $setup_complete = False; if(isset($_POST['submit'])) { $acl = CreateObject('phpgwapi.acl'); copyobj($GLOBALS['egw_setup']->db,$acl->db); if(isset($_POST['ldapgroups'])) { $groups = CreateObject('phpgwapi.accounts'); copyobj($GLOBALS['egw_setup']->db,$groups->db); while(list($key,$groupid) = each($_POST['ldapgroups'])) { $id_exist = 0; $entry = array(); $thisacctid = $group_info[$groupid]['gidnumber'][0]; $thisacctlid = $group_info[$groupid]['cn'][0]; /* echo "Updating GROUPID : ".$thisacctlid."
\n"; */ $thisfirstname = $group_info[$groupid]['cn'][0]; $thismembers = $group_info[$groupid]['memberuid']; $thisdn = $group_info[$groupid]['dn']; /* Do some checks before we try to import the data. */ if(!empty($thisacctid) && !empty($thisacctlid)) { $groups->account_id = (int)$thisacctid; $sr = ldap_search($ldap,$config['ldap_group_context'],'cn='.$thisacctlid); $entry = ldap_get_entries($ldap, $sr); reset($entry[0]['objectclass']); $addclass = True; while(list($key,$value) = each($entry[0]['objectclass'])) { if(strtolower($value) == 'phpgwaccount') { $addclass = False; } } if($addclass) { reset($entry[0]['objectclass']); $replace['objectclass'] = $entry[0]['objectclass']; unset($replace['objectclass']['count']); $replace['objectclass'][] = 'phpgwAccount'; sort($replace['objectclass']); ldap_mod_replace($ldap,$thisdn,$replace); unset($replace); unset($addclass); } unset($add); if(!@isset($entry[0]['phpgwaccountstatus'])) { $add['phpgwaccountstatus'][] = 'A'; } if(!@isset($entry[0]['phpgwaccounttype'])) { $add['phpgwaccounttype'][] = 'g'; } if(!@isset($entry[0]['phpgwaccountexpires'])) { $add['phpgwaccountexpires'][] = -1; } if(@isset($add)) { ldap_mod_add($ldap,$thisdn,$add); } /* Now make the members a member of this group in phpgw. */ if(is_array($thismembers)) { foreach($thismembers as $key => $members) { if($key == 'count') { continue; } /* echo '
members: ' . $members; */ $tmpid = 0; @reset($account_info); while(list($x,$y) = each($account_info)) { /* echo '
checking: '.$y['account_lid']; */ if($members == $y['account_lid']) { $tmpid = $y['account_id']; } } // Insert acls for this group based on memberuid field. // Since the group has app rights, we don't need to give users // these rights. Instead, we maintain group membership here. if($tmpid) { $acl->account_id = (int)$tmpid; $acl->read_repository(); $acl->delete('phpgw_group',$thisacctid,1); $acl->add('phpgw_group',$thisacctid,1); // Now add the acl to let them change their password $acl->delete('preferences','changepassword',1); $acl->add('preferences','changepassword',1); $acl->save_repository(); } } } /* Now give this group some rights */ $phpgw_info['user']['account_id'] = $thisacctid; $acl->account_id = (int)$thisacctid; $acl->read_repository(); @reset($_POST['s_apps']); while(list($key,$app) = @each($_POST['s_apps'])) { $acl->delete($app,'run',1); $acl->add($app,'run',1); } $acl->save_repository(); $defaultgroupid = $thisacctid; } } } if(isset($_POST['users'])) { $accounts = CreateObject('phpgwapi.accounts'); copyobj($GLOBALS['egw_setup']->db,$accounts->db); while(list($key,$id) = each($_POST['users'])) { $id_exist = 0; $thisacctid = $account_info[$id]['uidnumber'][0]; $thisacctlid = $account_info[$id]['uid'][0]; /* echo "Updating USERID : ".$thisacctlid."
\n"; */ $thisdn = $account_info[$id]['dn']; /* Do some checks before we try to import the data. */ if(!empty($thisacctid) && !empty($thisacctlid)) { $accounts->account_id = (int)$thisacctid; $sr = ldap_search($ldap,$config['ldap_context'],'uid='.$thisacctlid); $entry = ldap_get_entries($ldap, $sr); reset($entry[0]['objectclass']); $addclass = True; while(list($key,$value) = each($entry[0]['objectclass'])) { if(strtolower($value) == 'phpgwaccount') { $addclass = False; } } if($addclass) { reset($entry[0]['objectclass']); $replace['objectclass'] = $entry[0]['objectclass']; unset($replace['objectclass']['count']); $replace['objectclass'][] = 'phpgwAccount'; sort($replace['objectclass']); ldap_mod_replace($ldap,$thisdn,$replace); unset($replace); unset($addclass); } unset($add); if(!@isset($entry[0]['phpgwaccountstatus'])) { $add['phpgwaccountstatus'][] = 'A'; } if(!@isset($entry[0]['phpgwaccounttype'])) { $add['phpgwaccounttype'][] = 'u'; } if(!@isset($entry[0]['phpgwaccountexpires'])) { $add['phpgwaccountexpires'][] = -1; } if(@isset($add)) { ldap_mod_add($ldap,$thisdn,$add); } /* Insert default acls for this user. Since the group has app rights, we don't need to give users these rights. */ $acl->account_id = (int)$thisacctid; $acl->read_repository(); /* However, if no groups were imported, we do need to give each user apps access */ if(empty($_POST['ldapgroups'])) { @reset($_POST['s_apps']); while(list($key,$app) = @each($_POST['s_apps'])) { $acl->delete($app,'run',1); $acl->add($app,'run',1); } } // Now add the acl to let them change their password $acl->delete('preferences','changepassword',1); $acl->add('preferences','changepassword',1); /* Only give them admin if we asked for them to have it. This is typically an exception to apps for run rights as a group member. */ for($a=0;$a<=count($_POST['admins']);$a++) { if($_POST['admins'][$a] == $thisacctid) { $acl->delete('admin','run',1); $acl->add('admin','run',1); } } /* Save these new acls. */ $acl->save_repository(); } } } $setup_complete = True; } if(isset($_GET['error'])) { /* echo '
Error: '.$error.'
'; */ $GLOBALS['egw_setup']->html->show_alert_msg('Error',$_GET['error']); } if($setup_complete) { echo '
'.lang('Modifications have been completed!').' '.lang('Click here to return to setup.').'
'; $GLOBALS['egw_setup']->html->show_footer(); exit; } $setup_tpl->set_block('ldap','header','header'); $setup_tpl->set_block('ldap','user_list','user_list'); $setup_tpl->set_block('ldap','admin_list','admin_list'); $setup_tpl->set_block('ldap','group_list','group_list'); $setup_tpl->set_block('ldap','app_list','app_list'); $setup_tpl->set_block('ldap','submit','submit'); $setup_tpl->set_block('ldap','footer','footer'); $user_list = ''; while(list($key,$account) = @each($account_info)) { $user_list .= ''; } $admin_list = ''; @reset($account_info); while (list($key,$account) = @each($account_info)) { $admin_list .= ''; } $group_list = ''; while(list($key,$group) = @each($group_info)) { $group_list .= ''; } $app_list = ''; while(list($appname,$apptitle) = each($apps)) { if($appname == 'admin' || $appname == 'skel' || $appname == 'backup' || $appname == 'netsaint' || $appname == 'developer_tools' || $appname == 'phpsysinfo' || $appname == 'eldaptir' || $appname == 'qmailldap') { $app_list .= ''; } else { $app_list .= ''; } } $setup_tpl->set_var('action_url','ldapmodify.php'); $setup_tpl->set_var('users',$user_list); $setup_tpl->set_var('admins',$admin_list); $setup_tpl->set_var('ldapgroups',$group_list); $setup_tpl->set_var('s_apps',$app_list); $setup_tpl->set_var('ldap_import',lang('LDAP Modify')); $setup_tpl->set_var('description',lang("This section will help you setup your LDAP accounts for use with eGroupWare").'.'); $setup_tpl->set_var('select_users',lang('Select which user(s) will be modified')); $setup_tpl->set_var('select_admins',lang('Select which user(s) will also have admin privileges')); $setup_tpl->set_var('select_groups',lang('Select which group(s) will be modified (group membership will be maintained)')); $setup_tpl->set_var('select_apps',lang('Select the default applications to which your users will have access').'.'); $setup_tpl->set_var('form_submit',lang('Modify')); $setup_tpl->set_var('cancel',lang('Cancel')); $setup_tpl->pfp('out','header'); $setup_tpl->pfp('out','user_list'); $setup_tpl->pfp('out','admin_list'); $setup_tpl->pfp('out','group_list'); $setup_tpl->pfp('out','app_list'); $setup_tpl->pfp('out','submit'); $setup_tpl->pfp('out','footer'); $GLOBALS['egw_setup']->html->show_footer(); ?>