* Copyright (C) 2004 Sebastien Di Cintio * Copyright (C) 2004 Benoit Mortier * Copyright (C) 2005 Regis Houssin * Copyright (C) 2006-2011 Laurent Destailleur * Copyright (C) 2011-2013 Juanjo Menent * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see . */ /** * \file htdocs/admin/ldap_groups.php * \ingroup ldap * \brief Page to setup LDAP synchronization for groups */ // Load Dolibarr environment require '../main.inc.php'; require_once DOL_DOCUMENT_ROOT.'/core/lib/admin.lib.php'; require_once DOL_DOCUMENT_ROOT.'/user/class/user.class.php'; require_once DOL_DOCUMENT_ROOT.'/user/class/usergroup.class.php'; require_once DOL_DOCUMENT_ROOT.'/core/class/ldap.class.php'; require_once DOL_DOCUMENT_ROOT.'/core/lib/ldap.lib.php'; // Load translation files required by the page $langs->loadLangs(array("admin", "errors")); if (!$user->admin) { accessforbidden(); } $action = GETPOST('action', 'aZ09'); /* * Actions */ if ($action == 'setvalue' && $user->admin) { $error = 0; $db->begin(); if (!dolibarr_set_const($db, 'LDAP_GROUP_DN', GETPOST("group", 'alphanohtml'), 'chaine', 0, '', $conf->entity)) { $error++; } if (!dolibarr_set_const($db, 'LDAP_GROUP_OBJECT_CLASS', GETPOST("objectclass", 'alphanohtml'), 'chaine', 0, '', $conf->entity)) { $error++; } if (!dolibarr_set_const($db, 'LDAP_GROUP_FILTER', GETPOST("filter"), 'chaine', 0, '', $conf->entity)) { $error++; } if (!dolibarr_set_const($db, 'LDAP_GROUP_FIELD_FULLNAME', GETPOST("fieldfullname", 'alphanohtml'), 'chaine', 0, '', $conf->entity)) { $error++; } //if (! dolibarr_set_const($db, 'LDAP_GROUP_FIELD_NAME',GETPOST("fieldname", 'alphanohtml'),'chaine',0,'',$conf->entity)) $error++; if (!dolibarr_set_const($db, 'LDAP_GROUP_FIELD_DESCRIPTION', GETPOST("fielddescription", 'alphanohtml'), 'chaine', 0, '', $conf->entity)) { $error++; } if (!dolibarr_set_const($db, 'LDAP_GROUP_FIELD_GROUPMEMBERS', GETPOST("fieldgroupmembers", 'alphanohtml'), 'chaine', 0, '', $conf->entity)) { $error++; } if (!dolibarr_set_const($db, 'LDAP_GROUP_FIELD_GROUPID', GETPOST("fieldgroupid", 'alphanohtml'), 'chaine', 0, '', $conf->entity)) { $error++; } // This one must be after the others $valkey = ''; $key = GETPOST("key"); if ($key) { $valkey = getDolGlobalString($key); } if (!dolibarr_set_const($db, 'LDAP_KEY_GROUPS', $valkey, 'chaine', 0, '', $conf->entity)) { $error++; } if (!$error) { $db->commit(); setEventMessages($langs->trans("SetupSaved"), null, 'mesgs'); } else { $db->rollback(); dol_print_error($db); } } /* * View */ $form = new Form($db); llxHeader('', $langs->trans("LDAPSetup"), 'EN:Module_LDAP_En|FR:Module_LDAP|ES:Módulo_LDAP', '', 0, 0, '', '', '', 'mod-admin page-ldap_groups'); $linkback = ''.$langs->trans("BackToModuleList").''; print load_fiche_titre($langs->trans("LDAPSetup"), $linkback, 'title_setup'); $head = ldap_prepare_head(); // Test if the LDAP functionality is available if (!function_exists("ldap_connect")) { setEventMessages($langs->trans("LDAPFunctionsNotAvailableOnPHP"), null, 'errors'); } print dol_get_fiche_head($head, 'groups', '', -1); print ''.$langs->trans("LDAPDescGroups").'
'; print '
'; print '

'; print ''; print ''; print ''; print ''; print "\n"; // DN (Domain Name) for the groups print ''; print ''; print ''; print ''; // List of object class used to define attributes in structure print ''; print ''; print ''; print ''; // Filter, used to filter search print ''; print ''; print ''; print ''; print '

'.$langs->trans("LDAPSynchronizeGroups").'
'.$langs->trans("LDAPGroupDn").'	'; print ''; print '	'.$langs->trans("LDAPGroupDnExample").'
'.$langs->trans("LDAPGroupObjectClassList").'	'; print ''; print '	'.$langs->trans("LDAPGroupObjectClassListExample").'
'.$langs->trans("LDAPFilterConnection").'	'; print ''; print '	'.$langs->trans("LDAPGroupFilterExample").'

'; print '
'; print ''; print ''; print ''; print ''; print ''; print "\n"; // Filtre // Common name print ''; print '"; print ''; // Name /* print ''; print '"; print ''; */ // Description print ''; print '"; print ''; // User group print ''; print '"; print ''; // Group id print ''; print ''; print ''; print '

'.$langs->trans("LDAPDolibarrMapping").'	'.$langs->trans("LDAPLdapMapping").'		'.$langs->trans("LDAPNamingAttribute").'
'.$langs->trans("LDAPFieldName").'	'; print ''; print '	'.$langs->trans("LDAPFieldCommonNameExample").'
'.$langs->trans("LDAPFieldName").'	'; print ''; print '	'.$langs->trans("LDAPFieldNameExample").'	global->LDAP_KEY_GROUPS==$conf->global->LDAP_GROUP_FIELD_NAME?' checked':'').">
'.$langs->trans("LDAPFieldDescription").'	'; print ''; print '	'.$langs->trans("LDAPFieldDescriptionExample").'
'.$langs->trans("LDAPFieldGroupMembers").'	'; print ''; print '	'.$langs->trans("LDAPFieldGroupMembersExample").'
'.$langs->trans("LDAPFieldGroupid").'	'; print ''; print '	'.$langs->trans("LDAPFieldGroupidExample").'

'; print info_admin($langs->trans("LDAPDescValues")); print dol_get_fiche_end(); print $form->buttonsSaveCancel("Modify", ''); print '

'; /* * Test the connection */ if (getDolGlobalInt('LDAP_SYNCHRO_ACTIVE') === Ldap::SYNCHRO_DOLIBARR_TO_LDAP) { $butlabel = $langs->trans("LDAPTestSynchroGroup"); $testlabel = 'testgroup'; $key = getDolGlobalString('LDAP_KEY_GROUPS'); $dn = getDolGlobalString('LDAP_GROUP_DN'); $objectclass = getDolGlobalString('LDAP_GROUP_OBJECT_CLASS'); show_ldap_test_button($butlabel, $testlabel, $key, $dn, $objectclass); } elseif (getDolGlobalInt('LDAP_SYNCHRO_ACTIVE') === Ldap::SYNCHRO_LDAP_TO_DOLIBARR) { $butlabel = $langs->trans("LDAPTestSearch"); $testlabel = 'testsearchgroup'; $key = getDolGlobalString('LDAP_KEY_GROUPS'); $dn = getDolGlobalString('LDAP_GROUP_DN'); $objectclass = getDolGlobalString('LDAP_GROUP_OBJECT_CLASS'); show_ldap_test_button($butlabel, $testlabel, $key, $dn, $objectclass); } if (function_exists("ldap_connect")) { if ($action == 'testgroup') { // Create object $object = new UserGroup($db); $object->initAsSpecimen(); // Test synchro $ldap = new Ldap(); $result = $ldap->connectBind(); if ($result > 0) { $info = $object->_load_ldap_info(); $dn = $object->_load_ldap_dn($info); // Get a gid number for objectclass PosixGroup if (in_array('posixGroup', $info['objectclass'])) { $info['gidNumber'] = $ldap->getNextGroupGid('LDAP_KEY_GROUPS'); } $result1 = $ldap->delete($dn); // To be sure to delete existing records $result2 = $ldap->add($dn, $info, $user); // Now the test $result3 = $ldap->delete($dn); // Clean what we did if ($result2 > 0) { print img_picto('', 'info').' '; print ''.$langs->trans("LDAPSynchroOK").'
'; } else { print img_picto('', 'error').' '; print ''.$langs->trans("LDAPSynchroKOMayBePermissions"); print ': '.$ldap->error; print '
'; print $langs->trans("ErrorLDAPMakeManualTest", $conf->ldap->dir_temp).'
'; } print "
\n"; print "LDAP input file used for test:

\n"; print nl2br($ldap->dumpContent($dn, $info)); print "\n
"; } else { print img_picto('', 'error').' '; print ''.$langs->trans("LDAPSynchroKO"); print ': '.$ldap->error; print '
'; print $langs->trans("ErrorLDAPMakeManualTest", $conf->ldap->dir_temp).'
'; } } if ($action == 'testsearchgroup') { // TODO Mutualize code below with other ldap_xxxx.php pages // Test synchro $ldap = new Ldap(); $result = $ldap->connectBind(); if ($result > 0) { $required_fields = array( getDolGlobalString('LDAP_KEY_GROUPS'), // getDolGlobalString('LDAP_GROUP_FIELD_NAME'), getDolGlobalString('LDAP_GROUP_FIELD_DESCRIPTION'), getDolGlobalString('LDAP_GROUP_FIELD_GROUPMEMBERS'), getDolGlobalString('LDAP_GROUP_FIELD_GROUPID') ); // Remove from required_fields all entries not configured in LDAP (empty) and duplicated $required_fields = array_unique(array_values(array_filter($required_fields, "dol_validElement"))); // Get from LDAP database an array of results $ldapgroups = $ldap->getRecords('*', getDolGlobalString('LDAP_GROUP_DN'), getDolGlobalString('LDAP_KEY_GROUPS'), $required_fields, 'group'); //$ldapgroups = $ldap->getRecords('*', $conf->global->LDAP_GROUP_DN, $conf->global->LDAP_KEY_GROUPS, '', 'group'); if (is_array($ldapgroups)) { $liste = array(); foreach ($ldapgroups as $key => $ldapgroup) { // Define the label string for this group $label = ''; foreach ($required_fields as $value) { if ($value) { $label .= $value."=".$ldapgroup[$value]." "; } } $liste[$key] = $label; } } else { setEventMessages($ldap->error, $ldap->errors, 'errors'); } print "
\n"; print "LDAP search for group:
\n"; print "search: *
\n"; print "userDN: ".getDolGlobalString('LDAP_GROUP_DN')."
\n"; print "useridentifier: ".getDolGlobalString('LDAP_KEY_GROUPS')."
\n"; print "required_fields: ".implode(',', $required_fields)."
\n"; print "=> ".count($liste)." records
\n"; print "\n
"; } else { print img_picto('', 'error').' '; print ''.$langs->trans("LDAPSynchroKO"); print ': '.$ldap->error; print '
'; print $langs->trans("ErrorLDAPMakeManualTest", $conf->ldap->dir_temp).'
'; } } } // End of page llxFooter(); $db->close();