Add authz proxy authorization support

Add useAuthzProxyControl parameter to combine with useUserCredentials to 
also using authz proxy authorization.
This commit is contained in:
Benjamin Renard 2021-08-26 20:16:22 +02:00
parent 9907e08f18
commit 59ecc0d7fa
6 changed files with 190 additions and 103 deletions

View file

@ -17,6 +17,7 @@ serveur LDAP.</para>
// Définition des paramètres de connexion à l'annuaire // Définition des paramètres de connexion à l'annuaire
), ),
'useUserCredentials' => [boolean], 'useUserCredentials' => [boolean],
'useAuthzProxyControl' => [boolean],
'LSauth' => array ( 'LSauth' => array (
'method' => [LSauth method], 'method' => [LSauth method],
'api_method' => [LSauth method], 'api_method' => [LSauth method],
@ -95,6 +96,19 @@ serveur LDAP.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
<varlistentry>
<term>useAuthzProxyControl</term>
<listitem>
<simpara>Booléen définissant si, lorsqu'on utilise les identifiants de l'utilisateur pour
se connecter à l'annuaire, il faut utiliser une authentification via <emphasis>proxy
authorization</emphasis>. Dans ce cas, les identifiants de l'utilisateur ne seront pas, à
proprement parlé, utilisés pour se connecter à l'annuaire, mais une demande de <emphasis>
proxy authorization</emphasis> en tant que l'utilisateur connecté sera faites à l'aide des
identifiants de l'application. Ce mode nécessite une configuration particulière au niveau
de l'annuaire pour autoriser le compte de l'application à faire des demandes de <emphasis>
proxy authorization</emphasis> en tant que les autres utilisateurs de l'annuaire.</simpara>
</listitem>
</varlistentry>
<varlistentry> <varlistentry>
<term>LSprofiles</term> <term>LSprofiles</term>

View file

@ -104,6 +104,38 @@ class LSldap extends LSlog_staticLoggerClass {
return true; return true;
} }
/**
* Set authz proxy control
*
* @author Benjamin Renard <brenard@easter-eggs.com>
*
* @param[in] $dn string Bind DN
*
* @retval boolean true if authz proxy controle is set, false otherwise
*/
public static function setAuthzProxyControl($dn) {
if (!self :: $cnx) {
self :: connect();
}
$result = self :: $cnx -> setOption(
'LDAP_OPT_SERVER_CONTROLS',
array (
array(
'oid' => '2.16.840.1.113730.3.4.18',
'value' => "dn:$dn",
'iscritical' => true
)
)
);
// Also check user exists to validate the connection with
// authz proxy control.
if ($result !== True || !self :: exists($dn)) {
LSerror :: addErrorCode('LSldap_09');
return False;
}
return True;
}
/** /**
* Déconnection * Déconnection
* *
@ -602,3 +634,6 @@ LSerror :: defineError('LSldap_07',
LSerror :: defineError('LSldap_08', LSerror :: defineError('LSldap_08',
___("LSldap: LDAP server base DN not configured.") ___("LSldap: LDAP server base DN not configured.")
); );
LSerror :: defineError('LSldap_09',
___("LSldap: Fail to set authz proxy option on LDAP server connection.")
);

View file

@ -817,20 +817,33 @@ class LSsession {
self :: $LSuserObjectType = $LSuserObject -> getType(); self :: $LSuserObjectType = $LSuserObject -> getType();
self :: $dn = $LSuserObject->getValue('dn'); self :: $dn = $LSuserObject->getValue('dn');
self :: $rdn = $LSuserObject->getValue('rdn'); self :: $rdn = $LSuserObject->getValue('rdn');
if (isset(self :: $ldapServer['useUserCredentials']) && self :: $ldapServer['useUserCredentials']) { if (
self :: $userLDAPcreds = LSauth :: getLDAPcredentials($LSuserObject); isset(self :: $ldapServer['useUserCredentials']) &&
if (!is_array(self :: $userLDAPcreds)) { self :: $ldapServer['useUserCredentials']
LSerror :: addErrorCode('LSsession_14'); ) {
self :: $userLDAPcreds = false; if (
return; isset(self :: $ldapServer['useAuthzProxyControl']) &&
self :: $ldapServer['useAuthzProxyControl']
) {
if (!LSldap :: setAuthzProxyControl(self :: $dn)) {
return;
}
} }
if (!LSldap :: reconnectAs( else {
self :: $userLDAPcreds['dn'], self :: $userLDAPcreds = LSauth :: getLDAPcredentials($LSuserObject);
self :: $userLDAPcreds['pwd'], if (!is_array(self :: $userLDAPcreds)) {
self :: $ldapServer['ldap_config'] LSerror :: addErrorCode('LSsession_14');
)) { self :: $userLDAPcreds = false;
LSerror :: addErrorCode('LSsession_15'); return;
return; }
if (!LSldap :: reconnectAs(
self :: $userLDAPcreds['dn'],
self :: $userLDAPcreds['pwd'],
self :: $ldapServer['ldap_config']
)) {
LSerror :: addErrorCode('LSsession_15');
return;
}
} }
} }
self :: loadLSprofiles(); self :: loadLSprofiles();
@ -1295,11 +1308,26 @@ class LSsession {
self :: $dn && isset(self :: $ldapServer['useUserCredentials']) && self :: $dn && isset(self :: $ldapServer['useUserCredentials']) &&
self :: $ldapServer['useUserCredentials'] self :: $ldapServer['useUserCredentials']
) { ) {
LSldap :: reconnectAs( if (
self :: $userLDAPcreds['dn'], isset(self :: $ldapServer['useAuthzProxyControl']) &&
self :: $userLDAPcreds['pwd'], self :: $ldapServer['useAuthzProxyControl']
self :: $ldapServer['ldap_config'] ) {
); // Firstly connect using main config and after, set authz proxy control
if (
!LSldap :: connect(self :: $ldapServer['ldap_config']) ||
!LSldap :: setAuthzProxyControl(self :: $dn)
) {
LSerror :: addErrorCode('LSsession_15');
return;
}
}
else {
LSldap :: reconnectAs(
self :: $userLDAPcreds['dn'],
self :: $userLDAPcreds['pwd'],
self :: $ldapServer['ldap_config']
);
}
} }
else { else {
LSldap :: connect(self :: $ldapServer['ldap_config']); LSldap :: connect(self :: $ldapServer['ldap_config']);

View file

@ -8,7 +8,7 @@ msgstr ""
"Project-Id-Version: LdapSaisie\n" "Project-Id-Version: LdapSaisie\n"
"Report-Msgid-Bugs-To: \n" "Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: \n" "POT-Creation-Date: \n"
"PO-Revision-Date: 2021-08-25 18:02+0200\n" "PO-Revision-Date: 2021-08-26 19:59+0200\n"
"Last-Translator: Benjamin Renard <brenard@zionetrix.net>\n" "Last-Translator: Benjamin Renard <brenard@zionetrix.net>\n"
"Language-Team: LdapSaisie <ldapsaisie-users@lists.labs.libre-entreprise." "Language-Team: LdapSaisie <ldapsaisie-users@lists.labs.libre-entreprise."
"org>\n" "org>\n"
@ -1099,48 +1099,48 @@ msgstr "Copier dans le presse-papier"
msgid "Copied!" msgid "Copied!"
msgstr "Copié !" msgstr "Copié !"
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1504 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1532
msgid "Connection" msgid "Connection"
msgstr "Connexion" msgstr "Connexion"
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1524 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1552
msgid "Recovery of your credentials" msgid "Recovery of your credentials"
msgstr "Récupération de votre mot de passe" msgstr "Récupération de votre mot de passe"
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1533 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1561
msgid "Please fill the identifier field to proceed recovery procedure" msgid "Please fill the identifier field to proceed recovery procedure"
msgstr "" msgstr ""
"Merci d'entrer votre identifiant pour poursuivre la procédure de récupération" "Merci d'entrer votre identifiant pour poursuivre la procédure de récupération"
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1538 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1566
msgid "" msgid ""
"An email has been sent to %{mail}. Please follow the instructions on it." "An email has been sent to %{mail}. Please follow the instructions on it."
msgstr "" msgstr ""
"Un e-mail vient de vous être envoyé à l'adresse %{mail}. Merci de suivre les " "Un e-mail vient de vous être envoyé à l'adresse %{mail}. Merci de suivre les "
"indications qu'il contient." "indications qu'il contient."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1547 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1575
msgid "Your new password has been sent to %{mail}." msgid "Your new password has been sent to %{mail}."
msgstr "Votre nouveau mot de passe vous a été envoyé à l'adresse %{mail}." msgstr "Votre nouveau mot de passe vous a été envoyé à l'adresse %{mail}."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1717 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1745
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/routes.php:156 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/routes.php:156
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/routes.php:467 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/routes.php:467
#: templates/default/select.tpl:29 #: templates/default/select.tpl:29
msgid "Refresh" msgid "Refresh"
msgstr "Rafraîchir" msgstr "Rafraîchir"
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2811 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2839
#: templates/default/select.tpl:20 templates/default/recoverpassword.tpl:17 #: templates/default/select.tpl:20 templates/default/recoverpassword.tpl:17
#: templates/default/login.tpl:16 #: templates/default/login.tpl:16
msgid "Level" msgid "Level"
msgstr "Niveau" msgstr "Niveau"
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2979 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3007
msgid "LSsession : The constant '%{const}' is not defined." msgid "LSsession : The constant '%{const}' is not defined."
msgstr "LSsession : La constante '%{const}' n'est pas définie." msgstr "LSsession : La constante '%{const}' n'est pas définie."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2982 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3010
msgid "" msgid ""
"LSsession : The addon '%{addon}' support is uncertain. Verify system " "LSsession : The addon '%{addon}' support is uncertain. Verify system "
"compatibility and the add-on configuration." "compatibility and the add-on configuration."
@ -1148,53 +1148,53 @@ msgstr ""
"LSsession : Le support de l'addon '%{addon}' est incertain. Vérifiez la " "LSsession : Le support de l'addon '%{addon}' est incertain. Vérifiez la "
"compatibilité du système et la configuration de l'add-on." "compatibilité du système et la configuration de l'add-on."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2985 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3013
msgid "" msgid ""
"LSsession : LDAP server's configuration data are invalid. Can't connect." "LSsession : LDAP server's configuration data are invalid. Can't connect."
msgstr "" msgstr ""
"LSsession : Les données de configuration du serveur LDAP sont invalide. " "LSsession : Les données de configuration du serveur LDAP sont invalide. "
"Impossible de s'y connecter." "Impossible de s'y connecter."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2988 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3016
msgid "LSsession : Failed to load LSobject type '%{type}' : unknon type." msgid "LSsession : Failed to load LSobject type '%{type}' : unknon type."
msgstr "" msgstr ""
"LSsession : Impossible de charger le type d'LSobject '%{type}' : type " "LSsession : Impossible de charger le type d'LSobject '%{type}' : type "
"inconnu." "inconnu."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2991 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3019
msgid "LSsession : Failed to load LSclass '%{class}'." msgid "LSsession : Failed to load LSclass '%{class}'."
msgstr "LSsession : Impossible de charger la LSclass '%{class}'." msgstr "LSsession : Impossible de charger la LSclass '%{class}'."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2994 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3022
msgid "LSsession : Login or password incorrect." msgid "LSsession : Login or password incorrect."
msgstr "LSsession : Identifiant ou mot de passe incorrects." msgstr "LSsession : Identifiant ou mot de passe incorrects."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2997 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3025
msgid "LSsession : Impossible to identify you : Duplication of identities." msgid "LSsession : Impossible to identify you : Duplication of identities."
msgstr "LSsession : Impossible de vous identifier : Duplication d'identité." msgstr "LSsession : Impossible de vous identifier : Duplication d'identité."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3000 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3028
msgid "LSsession : Can't load class of authentification (%{class})." msgid "LSsession : Can't load class of authentification (%{class})."
msgstr "" msgstr ""
"LSsession : Impossible de charger la classe d'authentification (%{class})." "LSsession : Impossible de charger la classe d'authentification (%{class})."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3003 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3031
msgid "LSsession : Can't connect to LDAP server." msgid "LSsession : Can't connect to LDAP server."
msgstr "LSsession : Impossible de se connecter au serveur LDAP." msgstr "LSsession : Impossible de se connecter au serveur LDAP."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3006 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3034
msgid "LSsession : Impossible to authenticate you." msgid "LSsession : Impossible to authenticate you."
msgstr "LSsession : Impossible de vous identifier." msgstr "LSsession : Impossible de vous identifier."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3009 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3037
msgid "LSsession : Your are not authorized to do this action." msgid "LSsession : Your are not authorized to do this action."
msgstr "LSsession : Vous n'êtes pas autorisé à faire cette action." msgstr "LSsession : Vous n'êtes pas autorisé à faire cette action."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3012 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3040
msgid "LSsession : Some informations are missing to display this page." msgid "LSsession : Some informations are missing to display this page."
msgstr "LSsession : Des informations sont manquant pour afficher cette page." msgstr "LSsession : Des informations sont manquant pour afficher cette page."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3015 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3043
msgid "" msgid ""
"LSsession : The function '%{function}' of the custom action " "LSsession : The function '%{function}' of the custom action "
"'%{customAction}' does not exists or is not configured." "'%{customAction}' does not exists or is not configured."
@ -1202,24 +1202,24 @@ msgstr ""
"LSsession : La fonction '%{function}' de l'action personnalisée " "LSsession : La fonction '%{function}' de l'action personnalisée "
"'%{customAction}' n'existe pas ou n'est pas configurée." "'%{customAction}' n'existe pas ou n'est pas configurée."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3018 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3046
msgid "LSsession : Fail to retrieve user's LDAP credentials from LSauth." msgid "LSsession : Fail to retrieve user's LDAP credentials from LSauth."
msgstr "" msgstr ""
"LSsession : Erreur en récupérant les identifiants LDAP de l'utilisateur " "LSsession : Erreur en récupérant les identifiants LDAP de l'utilisateur "
"depuis LSauth." "depuis LSauth."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3021 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3049
msgid "" msgid ""
"LSsession : Fail to reconnect to LDAP server with user's LDAP credentials." "LSsession : Fail to reconnect to LDAP server with user's LDAP credentials."
msgstr "" msgstr ""
"LSsession : Impossible de se reconnecter au serveur LDAP avec les " "LSsession : Impossible de se reconnecter au serveur LDAP avec les "
"identifiants de l'utilisateur." "identifiants de l'utilisateur."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3024 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3052
msgid "LSsession : No import/export format define for this object type." msgid "LSsession : No import/export format define for this object type."
msgstr "LSsession : Aucun format d'entrée/sortie définie pour ce type d'objet." msgstr "LSsession : Aucun format d'entrée/sortie définie pour ce type d'objet."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3027 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3055
msgid "" msgid ""
"LSsession : Error during creation of list of levels. Contact administrators. " "LSsession : Error during creation of list of levels. Contact administrators. "
"(Code : %{code})" "(Code : %{code})"
@ -1227,13 +1227,13 @@ msgstr ""
"LSsession : Erreur durant la création de la liste des niveaux. Contacter les " "LSsession : Erreur durant la création de la liste des niveaux. Contacter les "
"administrateurs. (Code : %{type})" "administrateurs. (Code : %{type})"
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3030 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3058
msgid "LSsession : The password recovery is disabled for this LDAP server." msgid "LSsession : The password recovery is disabled for this LDAP server."
msgstr "" msgstr ""
"LSsession : La récupération de mot de passe est désactivée pour ce serveur " "LSsession : La récupération de mot de passe est désactivée pour ce serveur "
"LDAP." "LDAP."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3033 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3061
msgid "" msgid ""
"LSsession : Some informations are missing to recover your password. Contact " "LSsession : Some informations are missing to recover your password. Contact "
"administrators." "administrators."
@ -1241,7 +1241,7 @@ msgstr ""
"LSsession : Des informations sont manques pour pouvoir récupérer votre mot " "LSsession : Des informations sont manques pour pouvoir récupérer votre mot "
"de passe. Contacter les administrateurs." "de passe. Contacter les administrateurs."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3036 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3064
msgid "" msgid ""
"LSsession : Error during password recovery. Contact administrators.(Step : " "LSsession : Error during password recovery. Contact administrators.(Step : "
"%{step})" "%{step})"
@ -1249,7 +1249,7 @@ msgstr ""
"LSsession : Erreur durant la récupération de votre mot de passe. Contacter " "LSsession : Erreur durant la récupération de votre mot de passe. Contacter "
"les administrateurs. (Etape : %{step})" "les administrateurs. (Etape : %{step})"
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3039 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3067
msgid "" msgid ""
"LSsession : The function '%{func}' configured for the view '%{view}' of the " "LSsession : The function '%{func}' configured for the view '%{view}' of the "
"LSaddon '%{addon}' is not declared in the LSaddon file." "LSaddon '%{addon}' is not declared in the LSaddon file."
@ -1257,11 +1257,11 @@ msgstr ""
"LSsession : la fonction '%{func}' configurée pour la vue '%{view}' du " "LSsession : la fonction '%{func}' configurée pour la vue '%{view}' du "
"LSaddon '%{addon}' n'est pas déclaré dans le fichier du LSaddon." "LSaddon '%{addon}' n'est pas déclaré dans le fichier du LSaddon."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3042 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3070
msgid "LSsession : Failed to load resource file '%{file}'." msgid "LSsession : Failed to load resource file '%{file}'."
msgstr "LSsession : Impossible de charger le fichier de ressource '%{file}'." msgstr "LSsession : Impossible de charger le fichier de ressource '%{file}'."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3045 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3073
msgid "" msgid ""
"LSsession : The function '%{func}' configured for the view '%{view}' of the " "LSsession : The function '%{func}' configured for the view '%{view}' of the "
"LSaddon '%{addon}' doesn't exist." "LSaddon '%{addon}' doesn't exist."
@ -1269,11 +1269,11 @@ msgstr ""
"LSsession : la fonction '%{func}' configurée pour la vue '%{view}' du " "LSsession : la fonction '%{func}' configurée pour la vue '%{view}' du "
"LSaddon '%{addon}' n'existe pas." "LSaddon '%{addon}' n'existe pas."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3048 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3076
msgid "LSsession : invalid related object's DN pass in parameter." msgid "LSsession : invalid related object's DN pass in parameter."
msgstr "LSsession : DN d'objet en relation incorrect dans les paramètres." msgstr "LSsession : DN d'objet en relation incorrect dans les paramètres."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3051 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3079
msgid "" msgid ""
"LSsession : the LSaddon %{addon} keep using old-style addon view URL. Please " "LSsession : the LSaddon %{addon} keep using old-style addon view URL. Please "
"upgrade it." "upgrade it."
@ -1281,7 +1281,7 @@ msgstr ""
"LSsession : le LSaddon %{addon} utilise toujours l'ancien type d'URL de " "LSsession : le LSaddon %{addon} utilise toujours l'ancien type d'URL de "
"vues. Merci de le mettre à jour." "vues. Merci de le mettre à jour."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3054 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3082
msgid "" msgid ""
"LSsession : You have been redirect from an old-style URL %{url}. Please " "LSsession : You have been redirect from an old-style URL %{url}. Please "
"upgrade this link." "upgrade this link."
@ -1289,7 +1289,7 @@ msgstr ""
"LSsession : Vous avez été redirigé depuis une ancienne URL %{url}. Merci de " "LSsession : Vous avez été redirigé depuis une ancienne URL %{url}. Merci de "
"le mettre à jour ce lien." "le mettre à jour ce lien."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3057 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3085
msgid "" msgid ""
"LSsession : You always seem to use %{old} in your custom code: Please " "LSsession : You always seem to use %{old} in your custom code: Please "
"upgrade it and use %{new}.<pre>\n" "upgrade it and use %{new}.<pre>\n"
@ -1592,38 +1592,44 @@ msgstr ""
"LSformRule_password : Regex invalide configurée : %{regex}. Vous devez " "LSformRule_password : Regex invalide configurée : %{regex}. Vous devez "
"utiliser des regex de type PCRE (commencant par le caractère '/')." "utiliser des regex de type PCRE (commencant par le caractère '/')."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:582 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:612
msgid "LSldap: Error during the LDAP server connection (%{msg})." msgid "LSldap: Error during the LDAP server connection (%{msg})."
msgstr "LSldap : Erreur durant la connexion au serveur LDAP (%{msg})." msgstr "LSldap : Erreur durant la connexion au serveur LDAP (%{msg})."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:585 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:615
msgid "LSldap: Error during the LDAP search (%{msg})." msgid "LSldap: Error during the LDAP search (%{msg})."
msgstr "LSldap : Erreur pendant la recherche LDAP (%{msg})." msgstr "LSldap : Erreur pendant la recherche LDAP (%{msg})."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:588 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:618
msgid "LSldap: Object type unknown." msgid "LSldap: Object type unknown."
msgstr "LSldap : Type d'objet inconnu." msgstr "LSldap : Type d'objet inconnu."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:591 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:621
msgid "LSldap: Error while fetching the LDAP entry." msgid "LSldap: Error while fetching the LDAP entry."
msgstr "LSldap : Erreur durant la récupération de l'entrée LDAP." msgstr "LSldap : Erreur durant la récupération de l'entrée LDAP."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:594 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:624
msgid "LSldap: Error while changing the LDAP entry (DN : %{dn})." msgid "LSldap: Error while changing the LDAP entry (DN : %{dn})."
msgstr "LSldap : Erreur durant la modification de l'entrée LDAP (DN : %{dn})." msgstr "LSldap : Erreur durant la modification de l'entrée LDAP (DN : %{dn})."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:597 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:627
msgid "LSldap: Error while deleting empty attributes." msgid "LSldap: Error while deleting empty attributes."
msgstr "LSldap : Erreur durant la suppression des attributs vides." msgstr "LSldap : Erreur durant la suppression des attributs vides."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:600 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:630
msgid "LSldap: Error while changing the DN of the object." msgid "LSldap: Error while changing the DN of the object."
msgstr "LSldap : Erreur pendant la modification du DN de l'objet." msgstr "LSldap : Erreur pendant la modification du DN de l'objet."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:603 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:633
msgid "LSldap: LDAP server base DN not configured." msgid "LSldap: LDAP server base DN not configured."
msgstr "LSldap : Le base DN du serveur LDAP n'est pas configuré." msgstr "LSldap : Le base DN du serveur LDAP n'est pas configuré."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:636
msgid "LSldap: Fail to set authz proxy option on LDAP server connection."
msgstr ""
"LSldap : Une erreur est survenue en appliquant l'option d'authz proxy sur la "
"connexion au serveur LDAP."
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSformRule_ldapSearchURI.php:59 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSformRule_ldapSearchURI.php:59
msgid "Invalid LDAP server URI (%{uri})" msgid "Invalid LDAP server URI (%{uri})"
msgstr "URI de serveur LDAP invalide (%{uri})" msgstr "URI de serveur LDAP invalide (%{uri})"

View file

@ -934,165 +934,165 @@ msgstr ""
msgid "Copied!" msgid "Copied!"
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1504 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1532
msgid "Connection" msgid "Connection"
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1524 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1552
msgid "Recovery of your credentials" msgid "Recovery of your credentials"
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1533 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1561
msgid "Please fill the identifier field to proceed recovery procedure" msgid "Please fill the identifier field to proceed recovery procedure"
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1538 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1566
msgid "" msgid ""
"An email has been sent to %{mail}. Please follow the instructions on it." "An email has been sent to %{mail}. Please follow the instructions on it."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1547 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1575
msgid "Your new password has been sent to %{mail}." msgid "Your new password has been sent to %{mail}."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1717 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:1745
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/routes.php:156 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/routes.php:156
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/routes.php:467 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/routes.php:467
#: templates/default/select.tpl:29 #: templates/default/select.tpl:29
msgid "Refresh" msgid "Refresh"
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2811 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2839
#: templates/default/select.tpl:20 templates/default/recoverpassword.tpl:17 #: templates/default/select.tpl:20 templates/default/recoverpassword.tpl:17
#: templates/default/login.tpl:16 #: templates/default/login.tpl:16
msgid "Level" msgid "Level"
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2979 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3007
msgid "LSsession : The constant '%{const}' is not defined." msgid "LSsession : The constant '%{const}' is not defined."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2982 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3010
msgid "" msgid ""
"LSsession : The addon '%{addon}' support is uncertain. Verify system " "LSsession : The addon '%{addon}' support is uncertain. Verify system "
"compatibility and the add-on configuration." "compatibility and the add-on configuration."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2985 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3013
msgid "" msgid ""
"LSsession : LDAP server's configuration data are invalid. Can't connect." "LSsession : LDAP server's configuration data are invalid. Can't connect."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2988 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3016
msgid "LSsession : Failed to load LSobject type '%{type}' : unknon type." msgid "LSsession : Failed to load LSobject type '%{type}' : unknon type."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2991 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3019
msgid "LSsession : Failed to load LSclass '%{class}'." msgid "LSsession : Failed to load LSclass '%{class}'."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2994 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3022
msgid "LSsession : Login or password incorrect." msgid "LSsession : Login or password incorrect."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:2997 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3025
msgid "LSsession : Impossible to identify you : Duplication of identities." msgid "LSsession : Impossible to identify you : Duplication of identities."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3000 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3028
msgid "LSsession : Can't load class of authentification (%{class})." msgid "LSsession : Can't load class of authentification (%{class})."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3003 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3031
msgid "LSsession : Can't connect to LDAP server." msgid "LSsession : Can't connect to LDAP server."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3006 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3034
msgid "LSsession : Impossible to authenticate you." msgid "LSsession : Impossible to authenticate you."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3009 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3037
msgid "LSsession : Your are not authorized to do this action." msgid "LSsession : Your are not authorized to do this action."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3012 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3040
msgid "LSsession : Some informations are missing to display this page." msgid "LSsession : Some informations are missing to display this page."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3015 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3043
msgid "" msgid ""
"LSsession : The function '%{function}' of the custom action " "LSsession : The function '%{function}' of the custom action "
"'%{customAction}' does not exists or is not configured." "'%{customAction}' does not exists or is not configured."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3018 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3046
msgid "LSsession : Fail to retrieve user's LDAP credentials from LSauth." msgid "LSsession : Fail to retrieve user's LDAP credentials from LSauth."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3021 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3049
msgid "" msgid ""
"LSsession : Fail to reconnect to LDAP server with user's LDAP credentials." "LSsession : Fail to reconnect to LDAP server with user's LDAP credentials."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3024 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3052
msgid "LSsession : No import/export format define for this object type." msgid "LSsession : No import/export format define for this object type."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3027 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3055
msgid "" msgid ""
"LSsession : Error during creation of list of levels. Contact administrators. " "LSsession : Error during creation of list of levels. Contact administrators. "
"(Code : %{code})" "(Code : %{code})"
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3030 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3058
msgid "LSsession : The password recovery is disabled for this LDAP server." msgid "LSsession : The password recovery is disabled for this LDAP server."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3033 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3061
msgid "" msgid ""
"LSsession : Some informations are missing to recover your password. Contact " "LSsession : Some informations are missing to recover your password. Contact "
"administrators." "administrators."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3036 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3064
msgid "" msgid ""
"LSsession : Error during password recovery. Contact administrators.(Step : " "LSsession : Error during password recovery. Contact administrators.(Step : "
"%{step})" "%{step})"
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3039 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3067
msgid "" msgid ""
"LSsession : The function '%{func}' configured for the view '%{view}' of the " "LSsession : The function '%{func}' configured for the view '%{view}' of the "
"LSaddon '%{addon}' is not declared in the LSaddon file." "LSaddon '%{addon}' is not declared in the LSaddon file."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3042 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3070
msgid "LSsession : Failed to load resource file '%{file}'." msgid "LSsession : Failed to load resource file '%{file}'."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3045 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3073
msgid "" msgid ""
"LSsession : The function '%{func}' configured for the view '%{view}' of the " "LSsession : The function '%{func}' configured for the view '%{view}' of the "
"LSaddon '%{addon}' doesn't exist." "LSaddon '%{addon}' doesn't exist."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3048 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3076
msgid "LSsession : invalid related object's DN pass in parameter." msgid "LSsession : invalid related object's DN pass in parameter."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3051 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3079
msgid "" msgid ""
"LSsession : the LSaddon %{addon} keep using old-style addon view URL. Please " "LSsession : the LSaddon %{addon} keep using old-style addon view URL. Please "
"upgrade it." "upgrade it."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3054 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3082
msgid "" msgid ""
"LSsession : You have been redirect from an old-style URL %{url}. Please " "LSsession : You have been redirect from an old-style URL %{url}. Please "
"upgrade this link." "upgrade this link."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3057 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSsession.php:3085
msgid "" msgid ""
"LSsession : You always seem to use %{old} in your custom code: Please " "LSsession : You always seem to use %{old} in your custom code: Please "
"upgrade it and use %{new}.<pre>\n" "upgrade it and use %{new}.<pre>\n"
@ -1327,38 +1327,42 @@ msgid ""
"(begining by '/' caracter)." "(begining by '/' caracter)."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:582 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:612
msgid "LSldap: Error during the LDAP server connection (%{msg})." msgid "LSldap: Error during the LDAP server connection (%{msg})."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:585 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:615
msgid "LSldap: Error during the LDAP search (%{msg})." msgid "LSldap: Error during the LDAP search (%{msg})."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:588 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:618
msgid "LSldap: Object type unknown." msgid "LSldap: Object type unknown."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:591 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:621
msgid "LSldap: Error while fetching the LDAP entry." msgid "LSldap: Error while fetching the LDAP entry."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:594 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:624
msgid "LSldap: Error while changing the LDAP entry (DN : %{dn})." msgid "LSldap: Error while changing the LDAP entry (DN : %{dn})."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:597 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:627
msgid "LSldap: Error while deleting empty attributes." msgid "LSldap: Error while deleting empty attributes."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:600 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:630
msgid "LSldap: Error while changing the DN of the object." msgid "LSldap: Error while changing the DN of the object."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:603 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:633
msgid "LSldap: LDAP server base DN not configured." msgid "LSldap: LDAP server base DN not configured."
msgstr "" msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSldap.php:636
msgid "LSldap: Fail to set authz proxy option on LDAP server connection."
msgstr ""
#: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSformRule_ldapSearchURI.php:59 #: /home/brenard/dev/ldapsaisie_clean3/src/includes/class/class.LSformRule_ldapSearchURI.php:59
msgid "Invalid LDAP server URI (%{uri})" msgid "Invalid LDAP server URI (%{uri})"
msgstr "" msgstr ""