mirror of
https://gitlab.easter-eggs.com/ee/ldapsaisie.git
synced 2024-12-24 09:23:47 +01:00
3e823a2b22
-> view/select => change to use it (php+template+js)
-> LSattr_html_select_object/LSattr_html_select_list => change to use it
-> LSldapObject :
-> change listObjectsName() / searchObject() / getSelectArray() / listObjects()
-> comment search() function
-> Add triggers to clean cache
-> LSpeople : Update search config
-> LSsession : Change function to use it :
- getSubDnLdapServer()
- loadLSprofiles()
- LSrelation : Deplace error codes declaration from LSsession in class file
- LSldapObject :
-> change getObjectFilter() / getLabel() / getSubDnValue() / getSubDnName() for can call then staticaly
-> Add afterModify() function and trigger
-> Change getObjectFilter() / listObjectsInRelation() to use Net_LDAP2_Filter
-> Add __get() function
-> Move one LSerror code for LSrelation function from LSsession class file
-> Add a global variable to save cached data ($cache)
-> Change subDn and subDnName access methods
- LSauth : Move LSsession auth procedure in a dedicated class
-> LSsession : Change startLSsession() to use it
- LSsession :
-> Add getRootDn() function
-> Fix getTopDn() to return root DN if no topDn is currently defined
-> Create dedicated functions to support recoveryPassword mecanism :
- recoverPasswd()
- recoverPasswdSendMail()
- recoverPasswdFirstStep()
- recoverPasswdSecondStep
-> Customize LSdebug return and display (php+js)
-> Clean unused error codes
-> Move LSrelation error codes
-> Comment ajax method
616 lines
16 KiB
PHP
616 lines
16 KiB
PHP
<?php
|
|
/*******************************************************************************
|
|
* Copyright (C) 2007 Easter-eggs
|
|
* http://ldapsaisie.labs.libre-entreprise.org
|
|
*
|
|
* Author: See AUTHORS file in top-level directory.
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License version 2
|
|
* as published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
|
|
******************************************************************************/
|
|
|
|
$GLOBALS['LSobjects']['LSpeople'] = array (
|
|
'objectclass' => array(
|
|
'top',
|
|
'lspeople',
|
|
'posixAccount',
|
|
'sambaSamAccount',
|
|
),
|
|
'orderby' => 'displayName', // Valeurs possibles : 'displayName' ou 'subDn'
|
|
'rdn' => 'uid',
|
|
'container_dn' => 'ou=people',
|
|
|
|
'container_auto_create' => array(
|
|
'objectclass' => array(
|
|
'top',
|
|
'organizationalUnit'
|
|
),
|
|
'attrs' => array(
|
|
'ou' => 'people'
|
|
)
|
|
),
|
|
|
|
'before_modify' => 'valid',
|
|
'after_modify' => 'valid',
|
|
//'after_create' => 'createMaildirByFTP',
|
|
//'after_delete' => 'removeMaildirByFTP',
|
|
'display_name_format' => '%{cn}',
|
|
'label' => 'Users',
|
|
|
|
// LSrelation
|
|
'LSrelation' => array(
|
|
'groups' => array(
|
|
'label' => 'Belongs to groups ...',
|
|
'emptyText' => "Doesn't belong to any group.",
|
|
'LSobject' => 'LSgroup',
|
|
'list_function' => 'listUserGroups',
|
|
'getkeyvalue_function' => 'getMemberKeyValue',
|
|
'update_function' => 'updateUserGroups',
|
|
'remove_function' => 'deleteOneMember',
|
|
'rename_function' => 'renameOneMember',
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'admin' => 'w'
|
|
)
|
|
)
|
|
),
|
|
|
|
// LSform
|
|
'LSform' => array (
|
|
'ajaxSubmit' => 1,
|
|
// Layout
|
|
'layout' => array (
|
|
'Civilite' => array(
|
|
'label' => 'Civility',
|
|
'img' => 1,
|
|
'args' => array (
|
|
'uid',
|
|
'personalTitle',
|
|
'givenName',
|
|
'sn',
|
|
'cn',
|
|
'mail',
|
|
'userPassword',
|
|
'description',
|
|
'jpegPhoto',
|
|
'lsGodfatherDn'
|
|
)
|
|
),
|
|
'Posix' => array (
|
|
'label' => 'Posix',
|
|
'args' => array (
|
|
'uidNumber',
|
|
'gidNumber',
|
|
'loginShell',
|
|
'homeDirectory'
|
|
)
|
|
),
|
|
'Samba' => array (
|
|
'label' => 'Samba',
|
|
'args' => array (
|
|
'sambaSID',
|
|
'sambaLMPassword',
|
|
'sambaNTPassword'
|
|
)
|
|
)
|
|
) // fin Layout
|
|
), // fin LSform
|
|
|
|
'LSsearch' => array (
|
|
'attrs' => array (
|
|
'givenName',
|
|
'sn',
|
|
'cn',
|
|
'uid',
|
|
'mail'
|
|
),
|
|
'params' => array (
|
|
'recursive' => true
|
|
)
|
|
),
|
|
|
|
// Attributes
|
|
'attrs' => array (
|
|
|
|
/* ----------- start -----------*/
|
|
'uid' => array (
|
|
'label' => 'Identifier',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'html_options' => array(
|
|
'generate_value_format' => '%{givenName:1}.%{sn}',
|
|
'autoGenerateOnModify' => true, // default : false
|
|
'withoutAccent' => 1,
|
|
'replaceSpaces' => '.',
|
|
'lowerCase' => 1
|
|
),
|
|
'required' => 1,
|
|
'check_data' => array (
|
|
'regex' => array(
|
|
'msg' => "Identifier must contain alphanumeric values, dots (.) and dashes (-) only.",
|
|
'params' => array('regex' => '/^[a-zA-Z0-9-_\.]*$/')
|
|
),
|
|
),
|
|
'validation' => array (
|
|
array (
|
|
'filter' => 'uid=%{val}',
|
|
'result' => 0,
|
|
'msg' => 'This identifier is already used.'
|
|
)
|
|
),
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'r'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
),
|
|
'dependAttrs' => array(
|
|
'homeDirectory'
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'uidNumber' => array (
|
|
'label' => 'Numeric identifier',
|
|
'ldap_type' => 'numeric',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'generate_function' => 'generate_uidNumber_withSambaDomainObject',
|
|
'check_data' => array (
|
|
'numeric' => array(
|
|
'msg' => "The numeric identifier must be an integer."
|
|
),
|
|
),
|
|
'validation' => array (
|
|
array (
|
|
'filter' => 'uidNumber=%{val}',
|
|
'result' => 0,
|
|
'msg' => 'This uid is already used.'
|
|
)
|
|
),
|
|
'rights' => array(
|
|
'admin' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 0,
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'givenName' => array (
|
|
'label' => 'First Name',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'default_value' => 'toto',
|
|
'check_data' => array (
|
|
'alphanumeric' => array(
|
|
'msg' => 'The first name must contain alphanumeric values only.'
|
|
),
|
|
),
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'users' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
),
|
|
'onDisplay' => 'return_data'
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'sn' => array (
|
|
'label' => 'Last Name',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'cn' => array (
|
|
'label' => 'Full Name',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'html_options' => array(
|
|
'generate_value_format' => '%{givenName} %{sn}',
|
|
'autoGenerateOnModify' => true, // default : false
|
|
'autoGenerateOnCreate' => true // default : false
|
|
),
|
|
'required' => 1,
|
|
'validation' => 'valid',
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'gidNumber' => array (
|
|
'label' => 'Main group',
|
|
'ldap_type' => 'numeric',
|
|
'html_type' => 'select_list',
|
|
'html_options' => array (
|
|
'possible_values' => array(
|
|
'OTHER_OBJECT' => array(
|
|
'object_type' => 'LSgroup', // Nom de l'objet à lister
|
|
'display_name_format' => '%{cn} (%{gidNumber})', // Spécifie le attributs à lister pour le choix,
|
|
// si non définie => utilisation du 'display_name_format'
|
|
// de la définition de l'objet
|
|
|
|
'value_attribute' => 'gidNumber', // Spécifie le attributs dont la valeur sera retournée par
|
|
/*'filter' => // le formulaire spécifie les filtres de recherche pour
|
|
array ( // l'établissement de la liste d'objets :
|
|
array( // Premier filtre
|
|
'filter' => 'cn=*a*',
|
|
//'basedn' => 'o=company',
|
|
'scope' => 'sub',
|
|
)
|
|
)*/
|
|
)
|
|
)
|
|
),
|
|
'multiple' => false,
|
|
'required' => 1,
|
|
'validation' => array (
|
|
array (
|
|
'msg' => "This group doesn't exist.",
|
|
'object_type' => 'LSgroup', // 'object_type' : Permet definir le type d'objet recherchés
|
|
//'basedn' => 'o=company', // et d'utiliser les objectClass définis dans le fichier de configuration
|
|
'filter' => '(gidNumber=%{val})', // pour la recherche
|
|
'result' => 1
|
|
)
|
|
),
|
|
'rights' => array(
|
|
'admin' => 'w',
|
|
'godfather' => 'r'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'loginShell' => array (
|
|
'label' => 'Command shell',
|
|
'help_info' => "Allow user to connect a POSIX system.",
|
|
'ldap_type' => 'boolean',
|
|
'ldap_options' => array (
|
|
'true_value' => '/bin/bash',
|
|
'false_value' => '/bin/false'
|
|
),
|
|
'html_type' => 'boolean',
|
|
'required' => 1,
|
|
'default_value' => 'no',
|
|
'rights' => array(
|
|
'admin' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'sambaSID' => array (
|
|
'label' => 'Samba Identifier',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'generate_function' => 'generate_sambaUserSID',
|
|
'rights' => array(
|
|
'admin' => 'r'
|
|
),
|
|
'form' => array (
|
|
'modify' => 0
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'homeDirectory' => array (
|
|
'label' => 'Home Directory',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'generate_function' => 'generate_homeDirectory',
|
|
'rights' => array(
|
|
'admin' => 'r'
|
|
),
|
|
'view' => 1
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'mail' => array (
|
|
'label' => 'E-mail address',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'mail',
|
|
'html_options' => array(
|
|
'generate_value_format' => '%{givenName}.%{sn}@ls.com',
|
|
'withoutAccent' => 1,
|
|
'replaceSpaces' => '.',
|
|
'lowerCase' => 1
|
|
),
|
|
'required' => 1,
|
|
'check_data' => array (
|
|
'email' => array(
|
|
'msg' => "Given email address is invalid.",
|
|
'params' => array('checkDomain' => false)
|
|
),
|
|
),
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'personalTitle' => array (
|
|
'label' => 'Civility',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'select_list',
|
|
'html_options' => array (
|
|
'possible_values' => array(
|
|
'M.' => 'M.',
|
|
'Mme' => 'Mme',
|
|
'Mlle' => 'Mlle'
|
|
)
|
|
),
|
|
'required' => 1,
|
|
'default_value' => 'M.',
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'description' => array (
|
|
'label' => 'Description',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'textarea',
|
|
'multiple' => 1,
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'userPassword' => array (
|
|
'label' => 'Password',
|
|
'ldap_type' => 'password',
|
|
'ldap_options' => array (
|
|
'encode' => 'md5'
|
|
),
|
|
'html_type' => 'password',
|
|
'html_options' => array(
|
|
'generationTool' => true,
|
|
'autoGenerate' => false,
|
|
'lenght' => 8,
|
|
'chars' => array (
|
|
array(
|
|
'nb' => 3,
|
|
'chars' => 'abcdefijklmnopqrstuvwxyz'
|
|
),
|
|
'0123456789',
|
|
'*$.:/_-[]{}=~'
|
|
),
|
|
'mail' => array(
|
|
'send' => 1,
|
|
'ask' => 1,
|
|
'subject' => "LSexample : Your new credentials.",
|
|
'msg' => "Your password has been changed.\nNew password : %{mdp}",
|
|
'mail_attr' => 'mail'
|
|
)
|
|
),
|
|
'check_data' => array(
|
|
'password' => array(
|
|
'msg' => 'Your password must contain from 8 to 10 characters.',
|
|
'params' => array(
|
|
'minLength' => 8,
|
|
'maxLength' => 10
|
|
)
|
|
)
|
|
),
|
|
'required' => 1,
|
|
'rights' => array(
|
|
'self' => 'w',
|
|
'admin' => 'w'
|
|
),
|
|
'dependAttrs' => array(
|
|
'sambaLMPassword',
|
|
'sambaNTPassword'
|
|
),
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1,
|
|
'lostPassword' => 1
|
|
),
|
|
'after_modify' => 'valid'
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'lsRecoveryHash' => array (
|
|
'label' => 'Password recovery hash',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 0,
|
|
'form' => array (
|
|
'lostPassword' => 1
|
|
),
|
|
'rights' => array(
|
|
'self' => 'w',
|
|
'admin' => 'w'
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'sambaLMPassword' => array (
|
|
'label' => 'Samba Password (LM)',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'generate_function' => 'generate_sambaLMPassword',
|
|
'form' => array (
|
|
'modify' => 0
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'sambaNTPassword' => array (
|
|
'label' => 'Samba Password (NT)',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'generate_function' => 'generate_sambaNTPassword',
|
|
'form' => array (
|
|
'modify' => 0
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'jpegPhoto' => array (
|
|
'label' => 'Picture',
|
|
'ldap_type' => 'image',
|
|
'html_type' => 'image',
|
|
'required' => 0,
|
|
'view' => 1,
|
|
'check_data' => array (
|
|
'imagesize' => array(
|
|
'msg' => "Picture size is not valid.",
|
|
'params' => array(
|
|
'maxWidth' => 2000
|
|
)
|
|
),
|
|
'filesize' => array(
|
|
'msg' => "File size is not valid.",
|
|
'params' => array(
|
|
'maxSize' => 3000000 // taille du fichier en octets
|
|
)
|
|
),
|
|
'imagefile' => array(
|
|
'msg' => "File type is not valid."
|
|
)
|
|
),
|
|
'form' => array (
|
|
'modify' => 1
|
|
),
|
|
'rights' => array(
|
|
'self' => 'w',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'lsGodfatherDn' => array (
|
|
'label' => 'Accountable(s)',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'select_object',
|
|
'html_options' => array (
|
|
'selectable_object' => array(
|
|
'object_type' => 'LSpeople',
|
|
'value_attribute' => '%{dn}'
|
|
),
|
|
),
|
|
'validation' => array (
|
|
array (
|
|
'basedn' => '%{val}',
|
|
'result' => 1,
|
|
'msg' => "One or several users don't exist."
|
|
)
|
|
),
|
|
'multiple' => 1,
|
|
'rights' => array(
|
|
'admin' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
) // Fin args
|
|
);
|
|
?>
|