gosa-core/plugins/admin/groups/class_group.inc

   1 <?php
   2 /*
   3  * This code is part of GOsa (http://www.gosa-project.org)
   4  * Copyright (C) 2003-2008 GONICUS GmbH
   5  *
   6  * ID: $$Id$$
   7  *
   8  * This program is free software; you can redistribute it and/or modify
   9  * it under the terms of the GNU General Public License as published by
  10  * the Free Software Foundation; either version 2 of the License, or
  11  * (at your option) any later version.
  12  *
  13  * This program is distributed in the hope that it will be useful,
  14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16  * GNU General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU General Public License
  19  * along with this program; if not, write to the Free Software
  20  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  21  */
  22
  23 class group extends plugin
  24 {
  25     /* Group attributes */
  26     var $cn= "";
  27     var $description= "";
  28     var $gidNumber= "";
  29     var $memberUid= array();
  30     var $memberUid_used_by_some= array();
  31
  32     /* Helpers */
  33     var $base= "";
  34     var $force_gid= FALSE;
  35     var $fon_group= FALSE;
  36     var $smbgroup= FALSE;
  37     var $groupType= FALSE;
  38     var $sambaSID= "";
  39     var $sambaDomainName= "DEFAULT";
  40     var $SID= "";
  41     var $ridBase= 0;
  42     var $members= array();
  43     var $users= array();
  44     var $member= array();
  45     var $allusers= array();
  46     var $saved_gidNumber= "";
  47     var $oldgroupType= "";
  48     var $orig_dn= "";
  49     var $orig_cn= "";
  50     var $orig_base= "";
  51     var $has_mailAccount= FALSE;
  52     var $userSelect= FALSE;
  53     var $nagios_group =FALSE;
  54     var $sambaGroupType;
  55     var $dialog;
  56     var $rfc2307bis= FALSE;
  57     var $OnlyShowFirstEntries =200;
  58     var $dnMapping= array();
  59     var $view_logged = FALSE;
  60     var $allowGroupsWithSameNameInOtherSubtrees = true;
  61     var $baseSelector;
  62
  63     /* attribute list for save action */
  64     var $attributes= array("cn", "description", "gidNumber","memberUid","sambaGroupType","sambaSID");
  65     var $objectclasses= array("top", "posixGroup");
  66
  67     var $CopyPasteVars  = array("force_gid","fon_group","smbgroup","groupType","sambaSID","sambaDomainName","SID","nagios_group","sambaGroupType");
  68
  69     var $multiple_support = TRUE;
  70
  71
  72     // Lists
  73     private $memberList;    // Single group editing
  74     private $commonList;    // (Multiple support active)
  75     private $partialList;   // (Multiple support active)
  76
  77
  78     function group (&$config, $dn= NULL)
  79     {
  80         /* Set rfc2307bis flag */
  81         if ($config->get_cfg_value("core","rfc2307bis") == "true"){
  82             $this->rfc2307bis= TRUE;
  83             $this->attributes[]= "member";
  84             $this->objectclasses[]= "groupOfNames";
  85         }
  86
  87         plugin::plugin ($config, $dn);
  88
  89         $this->trustModeDialog = new trustModeDialog($this->config, $this->dn,NULL);
  90         $this->trustModeDialog->setAcl('groups/group');
  91
  92         /* Load attributes depending on the samba version */
  93         $this->orig_dn= $dn;
  94         $this->orig_cn= $this->cn;
  95
  96         /* Get member list */
  97         if (isset($this->attrs['memberUid'][0])){
  98             $tmp= array();
  99             for ($i= 0; $i<$this->attrs['memberUid']['count']; $i++){
 100                 $tmp[$this->attrs['memberUid'][$i]]= $this->attrs['memberUid'][$i];
 101             }
 102             $this->memberUid= $tmp;
 103             ksort ($this->memberUid);
 104         }
 105
 106         /* Save gidNumber for later use */
 107         if (isset($this->attrs['gidNumber'])){
 108             $this->saved_gidNumber= $this->attrs['gidNumber'][0];
 109         }
 110
 111         /* Is a samba group? */
 112         if (isset($this->attrs['objectClass'])){
 113             if (array_search ('sambaGroupMapping', $this->attrs['objectClass']) == FALSE ){
 114                 $this->smbgroup= FALSE;
 115             } else {
 116                 $this->smbgroup= TRUE;
 117                 if (isset($this->attrs['sambaSID'])){
 118                     $this->sambaSID= $this->attrs['sambaSID'][0];
 119                 }
 120             }
 121             if (array_search ('goFonPickupGroup', $this->attrs['objectClass']) == FALSE ){
 122                 $this->fon_group= FALSE;
 123             } else {
 124                 $this->fon_group= TRUE;
 125             }
 126             if (array_search ('nagiosContactGroup', $this->attrs['objectClass']) == FALSE ){
 127                 $this->nagios_group= FALSE;
 128             } else {
 129                 $this->nagios_group= TRUE;
 130             }
 131         }
 132
 133         /* Set mail flag */
 134         if (isset($this->attrs['objectClass']) && in_array('gosaMailAccount', $this->attrs['objectClass'])){
 135             $this->has_mailAccount= TRUE;
 136         }
 137
 138         /* Get samba Domain in case of samba 3 */
 139         if ($this->sambaSID != ""){
 140             $this->SID= preg_replace ("/-[^-]+$/", "", $this->sambaSID);
 141             $ldap= $this->config->get_ldap_link();
 142             $ldap->cd($this->config->current['BASE']);
 143             $ldap->search ("(&(objectClass=sambaDomain)(sambaSID=$this->SID))",array("sambaAlgorithmicRidBase"));
 144             if ($ldap->count() != 0){
 145                 $attrs= $ldap->fetch();
 146                 if(isset($attrs['sambaAlgorithmicRidBase'])){
 147                     $this->ridBase= $attrs['sambaAlgorithmicRidBase'][0];
 148                 } else {
 149                     $this->ridBase= $this->config->get_cfg_value("core","sambaRidBase");
 150                 }
 151
 152                 /* Get domain name for SID */
 153                 $this->sambaDomainName= "DEFAULT";
 154                 foreach ($this->config->data['SERVERS']['SAMBA'] as $key => $val){
 155                     if ($val['SID'] == $this->SID){
 156                         $this->sambaDomainName= $key;
 157                         break;
 158                     }
 159                 }
 160             } else {
 161                 if ($this->config->get_cfg_value("core","sambaRidBase") != ""){
 162                     $this->sambaDomainName= "DEFAULT";
 163                     $this->ridBase= $this->config->get_cfg_value("core","sambaRidBase");
 164                     $this->SID= $this->config->get_cfg_value("core","sambaSID");
 165                 } else {
 166                     msg_dialog::display(_("Configuration error"), _("Cannot find group SID in your configuration!"), ERROR_DIALOG);
 167                 }
 168             }
 169
 170             /* Get group type */
 171             $this->groupType= (int)substr(strrchr($this->sambaSID, "-"), 1);
 172             if ($this->groupType < 500 || $this->groupType > 553){
 173                 $this->groupType= 0;
 174             }
 175             $this->oldgroupType= $this->groupType;
 176         }
 177
 178         if ($this->dn == "new"){
 179             if(session::is_set('CurrentMainBase')){
 180                 $this->base = session::get('CurrentMainBase');
 181             }else{
 182                 $ui= get_userinfo();
 183                 $this->base= dn2base($ui->dn);
 184             }
 185         } else {
 186
 187             /* Get object base */
 188             $this->base =preg_replace ("/^[^,]+,".preg_quote(get_groups_ou(), '/')."/i","",$this->dn);
 189         }
 190         $this->orig_base = $this->base;
 191
 192         /* This is always an account */
 193         $this->is_account= TRUE;
 194
 195         /* Instanciate base selector */
 196         $this->baseSelector= new baseSelector($this->get_allowed_bases(), $this->base);
 197         $this->baseSelector->setSubmitButton(false);
 198         $this->baseSelector->setHeight(300);
 199         $this->baseSelector->update(true);
 200
 201
 202
 203         // Prepare lists
 204         $this->memberList = new sortableListing();
 205         $this->memberList->setDeleteable(true);
 206         $this->memberList->setInstantDelete(true);
 207         $this->memberList->setEditable(false);
 208         $this->memberList->setWidth("100%");
 209         $this->memberList->setHeight("300px");
 210         $this->memberList->setHeader(array('~',_("Given name"),_("Surename"),_("Uid")));
 211         $this->memberList->setColspecs(array('20px','*','*','*','20px'));
 212         $this->memberList->setDefaultSortColumn(1);
 213
 214         $this->reload(TRUE);
 215     }
 216
 217     function execute()
 218     {
 219         /* Call parent execute */
 220         plugin::execute();
 221
 222         /* Log view */
 223         if($this->is_account && !$this->view_logged){
 224             $this->view_logged = TRUE;
 225             new log("view","groups/".get_class($this),$this->dn);
 226         }
 227
 228         /* Do we represent a valid group? */
 229         if (!$this->is_account && $this->parent === NULL){
 230             $display= "<img alt=\"\" src=\"images/small-error.png\" align=\"middle\">&nbsp;<b>".msgPool::noValidExtension()."</b>";
 231             return ($display);
 232         }
 233
 234         // Act on list events
 235         foreach(array('memberList','commonList','partialList') as $list){
 236
 237             // Check if list is available, depends on multi- or sinlge- group editing.
 238             if($this->$list){
 239                 $this->$list->save_object();
 240                 $action = $this->$list->getAction();
 241                 if($action['action'] == 'delete' && preg_match("/w/",$this->getacl("memberUid"))){
 242                     foreach ($action['targets'] as $id){
 243                         $value = $this->$list->getKey($id);
 244                         unset ($this->members["$value"]);
 245                         $this->removeUser($value);
 246                     }
 247                     $this->reload();
 248                 }
 249             }
 250         }
 251
 252         /* Add objects? */
 253         if (isset($_POST["edit_membership"]) && preg_match("/w/",$this->getacl("memberUid"))){
 254             $this->userSelect= new userSelect($this->config, get_userinfo());
 255         }
 256
 257         /* Add objects finished? */
 258         if (isset($_POST["add_users_cancel"])){
 259             $this->userSelect= NULL;
 260         }
 261
 262         /* Add user to group */
 263         if (isset($_POST['add_users_finish']) && $this->userSelect){
 264
 265             $users = $this->userSelect->detectPostActions();
 266             if(isset($users['targets'])){
 267                 $headpage = $this->userSelect->getHeadpage();
 268                 foreach($users['targets'] as $dn){
 269                     $attrs = $headpage->getEntry($dn);
 270                     $value = $attrs['uid'][0];
 271                     $this->addUser($value);
 272                     $this->members["$value"]= $this->allusers[$value];
 273                     $this->reload();
 274                 }
 275             }
 276             $this->userSelect= NULL;
 277         }
 278
 279         $smarty= get_smarty();
 280
 281         // Handle trust mode dialog
 282         $this->dialog = FALSE;
 283         $trustModeDialog = $this->trustModeDialog->execute();
 284         if($this->trustModeDialog->trustSelect){
 285             $this->dialog = TRUE;
 286             return($trustModeDialog);
 287         }
 288         $smarty->assign("trustModeDialog" , $trustModeDialog);
 289
 290
 291
 292         $smarty->assign("nagios", $this->config->pluginEnabled("nagiosAccount"));
 293         $smarty->assign("pickupGroup", $this->config->pluginEnabled("phoneAccount"));
 294
 295         /* Manage object add dialog */
 296         if ($this->userSelect){
 297             $this->dialog = TRUE;
 298             return($this->userSelect->execute());
 299         }
 300
 301         /* Create base acls */
 302         $smarty->assign("base", $this->baseSelector->render());
 303
 304         $domains= array();
 305         foreach($this->config->data['SERVERS']['SAMBA'] as $name => $content){
 306             $domains[$name]= $name;
 307         }
 308         $smarty->assign("sambaDomains",     set_post($domains));
 309         $smarty->assign("sambaDomainName",  set_post($this->sambaDomainName));
 310         $groupTypes= array(0 => _("Samba group"), 512 => _("Domain admins"), 513 => _("Domain users"),
 311                 514 => _("Domain guests"));
 312
 313         /* Don't loose special groups! If not key'ed above, add it to
 314            the combo box... */
 315         if ($this->groupType >= 500 && $this->groupType <= 553 && !isset($groupTypes[$this->groupType])){
 316             $groupTypes[$this->groupType]= sprintf(_("Special group (%d)"), $this->groupType);
 317         }
 318
 319         $smarty->assign("groupTypes", set_post($groupTypes));
 320         $smarty->assign("groupType",  set_post($this->groupType));
 321
 322
 323         /* Members and users */
 324         if(!$this->multiple_support_active){
 325             $this->memberList->setAcl($this->getacl("memberUid"));
 326             $data = $lData = array();
 327             foreach($this->members as $uid => $member){
 328                 $data[$uid] = $member;
 329                 $givenName = $sn = _("Unknown");
 330                 if(isset($member['sn'][0])) $sn = $member['sn'][0];
 331                 if(isset($member['givenName'][0])) $givenName = $member['givenName'][0];
 332                 $image = image('images/false.png');
 333                 if(isset($member['sn'])){
 334                     $image = image('plugins/users/images/select_user.png');
 335                 }
 336                 $lData[$uid] = array('data' => array($image,$sn, $givenName, $uid));
 337             }
 338             $this->memberList->setListData($data,$lData);
 339             $this->memberList->update();
 340             $smarty->assign("memberList", $this->memberList->render());
 341         }else{
 342
 343             $this->commonList->setAcl($this->getacl("memberUid"));
 344             $this->partialList->setAcl($this->getacl("memberUid"));
 345
 346             $data = $lData = array();
 347             foreach($this->memberUid as $uid => $member){
 348                 $member = $this->members[$member];
 349                 $data[$uid] = $member;
 350                 $givenName = $sn = _("Unknown");
 351                 if(isset($member['sn'][0])) $sn = $member['sn'][0];
 352                 if(isset($member['givenName'][0])) $givenName = $member['givenName'][0];
 353                 $image = image('images/false.png');
 354                 if(isset($member['sn'])){
 355                     $image = image('plugins/users/images/select_user.png');
 356                 }
 357                 $lData[$uid] = array('data' => array($image,$sn, $givenName, $uid));
 358             }
 359             $this->commonList->setListData($data,$lData);
 360             $this->commonList->update();
 361             $smarty->assign("commonList", $this->commonList->render());
 362
 363             $data = $lData = array();
 364             foreach($this->memberUid_used_by_some as $uid => $member){
 365                 $member = $this->members[$member];
 366                 $data[$uid] = $member;
 367                 $givenName = $sn = _("Unknown");
 368                 if(isset($member['sn'][0])) $sn = $member['sn'][0];
 369                 if(isset($member['givenName'][0])) $givenName = $member['givenName'][0];
 370                 $image = image('images/false.png');
 371                 if(isset($member['sn'])){
 372                     $image = image('plugins/users/images/select_user.png');
 373                 }
 374                 $lData[$uid] = array('data' => array($image,$sn, $givenName, $uid));
 375             }
 376             $this->partialList->setListData($data,$lData);
 377             $this->partialList->update();
 378             $smarty->assign("partialList", $this->partialList->render());
 379         }
 380
 381         /* Checkboxes */
 382         foreach (array("force_gid", "smbgroup") as $val){
 383             if ($this->$val == "1"){
 384                 $smarty->assign("$val", "checked");
 385             } else {
 386                 $smarty->assign("$val", "");
 387             }
 388         }
 389         if ($this->force_gid != "1"){
 390             $smarty->assign("forceMode", "disabled");
 391         }else{
 392             $smarty->assign("forceMode", "");
 393         }
 394         if ($this->fon_group){
 395             $smarty->assign("fon_group", "checked");
 396         } else {
 397             $smarty->assign("fon_group", "");
 398         }
 399
 400         if ($this->nagios_group){
 401             $smarty->assign("nagios_group", "checked");
 402         } else {
 403             $smarty->assign("nagios_group", "");
 404         }
 405
 406         /* Fields */
 407         foreach (array("cn", "description", "gidNumber") as $val){
 408             $smarty->assign("$val", set_post($this->$val));
 409         }
 410
 411         $tmp = $this->plInfo();
 412         foreach($tmp['plProvidedAcls'] as $name => $translation){
 413             $smarty->assign($name."ACL",$this->getacl($name));
 414         }
 415
 416         if($this->acl_is_writeable("base")){
 417             $smarty->assign("baseSelect",true);
 418         }else{
 419             $smarty->assign("baseSelect",false);
 420         }
 421
 422         /* Multiple edit handling */
 423         $smarty->assign("multiple_support",$this->multiple_support_active);
 424
 425         foreach($this->attributes as $val){
 426             if(in_array($val,$this->multi_boxes)){
 427                 $smarty->assign("use_".$val,TRUE);
 428             }else{
 429                 $smarty->assign("use_".$val,FALSE);
 430             }
 431         }
 432         foreach(array("base","smbgroup","groupType","sambaDomainName","fon_group","nagios_group") as $val){
 433             if(in_array($val,$this->multi_boxes)){
 434                 $smarty->assign("use_".$val,TRUE);
 435             }else{
 436                 $smarty->assign("use_".$val,FALSE);
 437             }
 438         }
 439
 440         return($smarty->fetch (get_template_path('generic.tpl', TRUE)));
 441     }
 442
 443     function addUser($uid)
 444     {
 445         /* In mutliple edit we have to handle two arrays.
 446          *  memberUid               : Containing users used in all groups
 447          *  memberUid_used_by_some  : Those which are not used in all groups
 448          * So we have to remove the given $uid from the ..used_by_some array first.
 449          */
 450         if($this->multiple_support_active){
 451             if(isset($this->memberUid_used_by_some[$uid])){
 452                 unset($this->memberUid_used_by_some[$uid]);
 453             }
 454         }
 455
 456         /* Ensure that the requested object is known to the group class
 457          */
 458         if(!isset($this->dnMapping[$uid])){
 459             $ldap = $this->config->get_ldap_link();
 460             $ldap->cd($this->config->current['BASE']);
 461             $ldap->search("(&(objectClass=gosaAccount)(uid=".$uid."))",array("dn", "uid","sn","givenName"));
 462             if($ldap->count() == 0 ){
 463                 msg_dialog::display(_("Error"),
 464                         sprintf(_("Adding UID '%s' to group '%s' failed: cannot find user object!"),
 465                             $uid,$this->cn),
 466                         ERROR_DIALOG);
 467                 return;
 468             }elseif($ldap->count() >= 2){
 469                 msg_dialog::display(_("Error"),
 470                         sprintf(_("Add UID '%s' to group '%s' failed: UID is used more than once!"),
 471                             $uid,$this->cn),
 472                         ERROR_DIALOG);
 473                 return;
 474             }else{
 475                 while($attrs = $ldap->fetch()){
 476                     $this->dnMapping[$attrs['uid'][0]] = $attrs['dn'];
 477                     $this->members[$attrs['uid'][0]] = $attrs;
 478                     $this->allusers[$attrs['uid'][0]]= $attrs;
 479                 }
 480             }
 481         }
 482
 483         $this->memberUid[$uid]= $uid;
 484     }
 485
 486
 487     function removeUser($uid)
 488     {
 489         $temp= array();
 490         if(isset($this->memberUid[$uid])){
 491             unset($this->memberUid[$uid]);
 492         }
 493
 494         /* We have two array contianing group members in multiple edit.
 495          *  this->memberUid             : Groups used by all currently edited groups
 496          *  this->memberUid_used_by_some: Used by some
 497          * So we have to remove the specified uid from both arrays.
 498          */
 499         if($this->multiple_support_active){
 500             if(isset($this->memberUid_used_by_some[$uid])){
 501                 unset($this->memberUid_used_by_some[$uid]);
 502             }
 503         }
 504     }
 505
 506     /* Reload data */
 507     function reload($silent = FALSE)
 508     {
 509         /* Prepare ldap link */
 510         $ldap= $this->config->get_ldap_link();
 511         $ldap->cd($this->config->current['BASE']);
 512
 513
 514         /* Resolve still unresolved memberuids to fill the list with sn/giveName attributes
 515            (Store gathered sn/givenName informations in $this->allusers too,
 516            to be prepared when adding/deleting users)
 517          */
 518         $filter = "";
 519
 520         // Merge in partial uids in multiple edit
 521         $uids = array_keys($this->memberUid);
 522         if($this->multiple_support_active) {
 523             $uids = array_merge($uids,  array_keys($this->memberUid_used_by_some));
 524         }
 525
 526         if ($this->config->get_cfg_value("core","ldapFilterNestingLimit") == "" ||
 527                 count($uids) < $this->config->get_cfg_value("core","ldapFilterNestingLimit")){
 528             foreach ($uids as $value){
 529                 if(!isset($this->members[$value])){
 530                     $filter .= "(uid=".normalizeLdap($value).")";
 531                 }
 532             }
 533         }
 534
 535         if(!empty($filter)){
 536             $ldap->cd($this->config->current['BASE']);
 537             $ldap->search("(&(objectClass=gosaAccount)(|".$filter."))",array("dn", "uid","sn","givenName"));
 538             while($attrs = $ldap->fetch()){
 539                 $this->dnMapping[$attrs['uid'][0]] = $attrs['dn'];
 540                 $this->members[$attrs['uid'][0]] = $attrs;
 541                 $this->allusers[$attrs['uid'][0]]= $attrs;
 542             }
 543         }
 544
 545         /* check if all uids are resolved */
 546         if ($this->config->get_cfg_value("core","ldapFilterNestingLimit") == "" ||
 547                 count($this->memberUid) < $this->config->get_cfg_value("core","ldapFilterNestingLimit")){
 548             foreach ($this->memberUid as $value){
 549                 if(!isset($this->members[$value])){
 550                     $this->members[$value] = "";
 551                 }
 552             }
 553         }else{
 554             foreach ($this->memberUid as $value){
 555                 $this->members[$value] = "";
 556             }
 557         }
 558     }
 559
 560
 561     /* Create display name, this was used so often that it is excluded into a seperate function */
 562     function createResultName($attrs)
 563     {
 564         if (isset($attrs["givenName"][0]) && isset($attrs["sn"][0])){
 565             $ret =  $attrs["sn"][0].", ".$attrs["givenName"][0]." [".$attrs["uid"][0]."]";
 566         } else {
 567             $ret= $attrs['uid'][0];
 568         }
 569         return($ret);
 570     }
 571
 572
 573     function remove_from_parent()
 574     {
 575         plugin::remove_from_parent();
 576
 577         $ldap= $this->config->get_ldap_link();
 578         $ldap->rmdir($this->dn);
 579         if (!$ldap->success()){
 580             msg_dialog::display(_("LDAP error"), msgPool::ldaperror($ldap->get_error(), $this->dn, LDAP_DEL, get_class()));
 581         }
 582
 583         new log("remove","groups/".get_class($this),$this->dn,array_keys($this->attrs),$ldap->get_error());
 584
 585         /* Delete references to object groups */
 586         $ldap->cd ($this->config->current['BASE']);
 587         $ldap->search ("(&(objectClass=gosaGroupOfNames)(member=".LDAP::prepare4filter($this->dn)."))", array("cn"));
 588         while ($ldap->fetch()){
 589             $og= new ogroup($this->config, $ldap->getDN());
 590             unset($og->member[$this->dn]);
 591             $og->save ();
 592         }
 593
 594         /* Remove ACL dependencies too,
 595          */
 596         $ldap = $this->config->get_ldap_link();
 597         $ldap->cd($this->config->current['BASE']);
 598         $ldap->search("(&(objectClass=gosaAcl)(gosaAclEntry=*".base64_encode($this->dn)."*))",array("gosaAclEntry","dn"));
 599         while($attrs = $ldap->fetch()){
 600             $acl = new acl($this->config,$this->parent,$attrs['dn']);
 601             foreach($acl->gosaAclEntry as $id => $entry){
 602                 foreach($entry['members'] as $m_id => $member){
 603                     if($m_id == "G:".$this->dn || $m_id == "U:".$this->dn){
 604                         unset($acl->gosaAclEntry[$id]['members'][$m_id]);
 605                         gosa_log("modify","groups/acl",$attrs['dn'],array(),sprintf("Removed acl for %s on object %s.",$this->dn,$attrs['dn']));
 606                     }
 607                 }
 608             }
 609             $acl->save();
 610         }
 611
 612         /* Remove ACL dependencies, too */
 613         acl::remove_acl_for($this->dn);
 614
 615         /* Send signal to the world that we've done */
 616         $this->handle_post_events("remove");
 617     }
 618
 619
 620     /* Save data to object */
 621     function save_object()
 622     {
 623         /* Save additional values for possible next step */
 624         if (isset($_POST['groupedit'])){
 625
 626             /* Create a base backup and reset the
 627                base directly after calling plugin::save_object();
 628                Base will be set seperatly a few lines below */
 629             $base_tmp = $this->base;
 630             plugin::save_object();
 631             $this->trustModeDialog->save_object();
 632             $this->base = $base_tmp;
 633
 634             /* Refresh base */
 635             if ($this->acl_is_moveable($this->base)){
 636                 if (!$this->baseSelector->update()) {
 637                     msg_dialog::display(_("Error"), msgPool::permMove(), ERROR_DIALOG);
 638                 }
 639                 if ($this->base != $this->baseSelector->getBase()) {
 640                     $this->base= $this->baseSelector->getBase();
 641                     $this->is_modified= TRUE;
 642                 }
 643             }
 644
 645             $this->force_gid= 0;
 646
 647             /* Only reset sambagroup flag if we are able to write this flag */
 648             if($this->acl_is_writeable("sambaGroupType")){
 649                 $this->smbgroup = 0;
 650             }
 651
 652             foreach (array(
 653                         "force_gid"  => "gidNumber",
 654                         "smbgroup"   => "sambaGroupType") as $val => $aclname) {
 655                 if ($this->acl_is_writeable($aclname)  && isset($_POST["$val"])){
 656                     $this->$val= get_post($val);
 657                 }
 658             }
 659
 660             /* Save sambaDomain attribute */
 661             if ($this->acl_is_writeable("sambaDomainName") && isset ($_POST['sambaDomainName'])){
 662                 $this->sambaDomainName= get_post('sambaDomainName');
 663                 $this->groupType= get_post('groupType');
 664             }
 665
 666             /* Save fon attribute */
 667             if ($this->acl_is_writeable("fonGroup")){
 668                 if (isset ($_POST['fon_group'])){
 669                     $this->fon_group= TRUE;
 670                 } else {
 671                     $this->fon_group= FALSE;
 672                 }
 673             }
 674             if ($this->acl_is_writeable("nagiosGroup")){
 675                 if (isset ($_POST['nagios_group'])){
 676                     $this->nagios_group= TRUE;
 677                 } else {
 678                     $this->nagios_group= FALSE;
 679                 }
 680             }
 681         }
 682     }
 683
 684
 685     /* Save to LDAP */
 686     function save()
 687     {
 688
 689         /* ID handling */
 690         if ($this->force_gid == 0){
 691             if ($this->saved_gidNumber != ""){
 692                 $this->gidNumber= $this->saved_gidNumber;
 693             } else {
 694                 /* Calculate new, lock uids */
 695                 $wait= 10;
 696                 while (get_lock("gidnumber") != ""){
 697                     sleep (1);
 698
 699                     /* timed out? */
 700                     if ($wait-- == 0){
 701                         break;
 702                     }
 703                 }
 704                 add_lock ("gidnumber", "gosa");
 705                 $this->gidNumber= get_next_id("gidNumber", $this->dn);
 706             }
 707         }
 708
 709         plugin::save();
 710
 711         /* Remove objectClass for samba/phone support */
 712         $tmp= array();
 713         for ($i= 0; $i<count($this->attrs["objectClass"]); $i++){
 714             if ($this->attrs['objectClass'][$i] != 'sambaGroupMapping' &&
 715                     $this->attrs['objectClass'][$i] != 'sambaIdmapEntry' &&
 716                     $this->attrs['objectClass'][$i] != 'goFonPickupGroup' &&
 717                     $this->attrs['objectClass'][$i] != 'nagiosContactGroup'){
 718                 $tmp[]= $this->attrs['objectClass'][$i];
 719             }
 720         }
 721         $this->attrs['objectClass']= $tmp;
 722         $ldap= $this->config->get_ldap_link();
 723
 724         /* Add samba group functionality */
 725         if ($this->smbgroup){
 726
 727             /* Fixed undefined index ...
 728              */
 729             $this->SID = $this->ridBase = "";
 730             if(isset($this->config->data['SERVERS']['SAMBA'][$this->sambaDomainName]['SID'])){
 731                 $this->SID    = $this->config->data['SERVERS']['SAMBA'][$this->sambaDomainName]['SID'];
 732             }else{
 733                 msg_dialog::display(_("Error"), sprintf(_("Cannot find any SID for '%s'!"), $this->sambaDomainName), ERROR_DIALOG);
 734             }
 735             if(isset($this->config->data['SERVERS']['SAMBA'][$this->sambaDomainName]['RIDBASE'])){
 736                 $this->ridBase= $this->config->data['SERVERS']['SAMBA'][$this->sambaDomainName]['RIDBASE'];
 737             }else{
 738                 msg_dialog::display(_("Error"), sprintf(_("Cannot find any RIDBASE for '%s'!"), $this->sambaDomainName), ERROR_DIALOG);
 739             }
 740
 741             $this->attrs['objectClass'][]= 'sambaGroupMapping';
 742             $this->attrs['sambaGroupType']= "2";
 743
 744             /* Check if we need to create a special entry */
 745             if ($this->groupType == 0){
 746
 747                 if ($this->sambaSID == "" || $this->oldgroupType != $this->groupType){
 748                     $sid = $this->getSambaSID();
 749                     $this->attrs['sambaSID']= $sid;
 750                     $this->sambaSID= $sid;
 751                 }
 752
 753             } else {
 754                 $this->attrs['sambaSID']=$this->SID."-".$this->groupType;
 755             }
 756
 757             /* User wants me to fake the idMappings? This is useful for
 758                making winbind resolve the group names in a reasonable amount
 759                of time in combination with larger databases. */
 760             if ($this->config->boolValueIsTrue("core","sambaIdMapping")){
 761                 $this->attrs['objectClass'][]= "sambaIdmapEntry";
 762             }
 763
 764         }
 765
 766         /* Add phone functionality */
 767         if ($this->fon_group){
 768             $this->attrs['objectClass'][]= "goFonPickupGroup";
 769         }
 770
 771         /* Add nagios functionality */
 772         if ($this->nagios_group){
 773             $this->attrs['objectClass'][]= "nagiosContactGroup";
 774         }
 775
 776         /* Take members array */
 777         if (count ($this->memberUid)){
 778             $this->attrs['memberUid']= array_values(array_unique($this->memberUid));
 779         }
 780
 781         /* New accounts need proper 'dn', propagate it to remaining objects */
 782         if ($this->dn == 'new'){
 783             $this->dn= 'cn='.$this->cn.','.get_groups_ou().$this->base;
 784         }
 785
 786         /* Add member dn's for RFC2307bis Support */
 787         if ($this->rfc2307bis){
 788             $this->attrs['member'] = array();
 789             if (count($this->memberUid)){
 790                 foreach($this->attrs['memberUid'] as $uid) {
 791
 792                     if(isset($this->dnMapping[$uid])){
 793                         $this->attrs['member'][]= $this->dnMapping[$uid];
 794                     }
 795                 }
 796             } else {
 797                 $this->attrs['member'][]= $this->dn;
 798             }
 799         }
 800
 801         /* Save data. Using 'modify' implies that the entry is already present, use 'add' for
 802            new entries. So do a check first... */
 803         $ldap->cat ($this->dn, array('dn'));
 804         if ($ldap->fetch()){
 805             /* Modify needs array() to remove values :-( */
 806             if (!count ($this->memberUid)){
 807                 $this->attrs['memberUid']= array();
 808             }
 809             if (!$this->smbgroup){
 810                 $this->attrs['sambaGroupType']= array();
 811                 $this->attrs['sambaSID']= array();
 812             }
 813
 814             $mode= "modify";
 815         } else {
 816             $mode= "add";
 817             $ldap->cd($this->config->current['BASE']);
 818             $ldap->create_missing_trees(preg_replace('/^[^,]+,/', '', $this->dn));
 819         }
 820
 821         /* Check generated gidNumber, it may be used by another group.
 822          */
 823         if($this->gidNumber != ""){
 824             $ldap->cd($this->config->current['BASE']);
 825             $ldap->search("(&(!(cn=".$this->orig_cn."))(objectClass=posixGroup)(gidNumber=".$this->gidNumber."))",array("cn"));
 826             if($ldap->count()){
 827                 $cns = "";
 828                 while($attrs = $ldap->fetch()){
 829                     $cns .= $attrs['cn'][0].", ";
 830                 }
 831                 $cns = rtrim($cns,", ");
 832                 msg_dialog::display(_("Warning"),sprintf(_("The gidNumber '%s' is already in use by %s!"),$this->gidNumber,$cns) , WARNING_DIALOG );
 833             }
 834         }
 835
 836         /* Write back to ldap */
 837         $ldap->cd($this->dn);
 838         $this->cleanup();
 839         $ldap->$mode($this->attrs);
 840
 841         /* Remove ACL dependencies too,
 842          */
 843         if($this->dn != $this->orig_dn && $this->orig_dn != "new"){
 844             $tmp = new acl($this->config,$this->parent,$this->dn);
 845             $tmp->update_acl_membership($this->orig_dn,$this->dn);
 846         }
 847
 848         if($this->initially_was_account){
 849             new log("modify","groups/".get_class($this),$this->dn,array_keys($this->attrs),$ldap->get_error());
 850         }else{
 851             new log("create","groups/".get_class($this),$this->dn,array_keys($this->attrs),$ldap->get_error());
 852         }
 853
 854         $ret= 0;
 855         if (!$ldap->success()){
 856             msg_dialog::display(_("LDAP error"), msgPool::ldaperror($ldap->get_error(), $this->dn, 0, get_class()));
 857             $ret= 1;
 858         }
 859
 860         $this->trustModeDialog->dn = $this->dn;
 861         $this->trustModeDialog->save();
 862
 863         /* Remove uid lock */
 864         del_lock ("gidnumber");
 865
 866         /* Post that we've done*/
 867         $this->handle_post_events($mode);
 868
 869         return ($ret);
 870     }
 871
 872     function check()
 873     {
 874         /* Call common method to give check the hook */
 875         $message= plugin::check();
 876
 877         /* Permissions for that base? */
 878         if ($this->base != ""){
 879             $new_dn= 'cn='.$this->cn.','.get_groups_ou().$this->base;
 880         } else {
 881             $new_dn= $this->dn;
 882         }
 883
 884         /* must: cn */
 885         if ($this->cn == "" && $this->acl_is_writeable("cn")){
 886             $message[]= msgPool::required(_("Name"));
 887         }
 888
 889         // Check if a wrong base was supplied
 890         if(!$this->baseSelector->checkLastBaseUpdate()){
 891             $message[]= msgPool::check_base();;
 892         }
 893
 894         /* Check for valid input */
 895         if (!tests::is_uid($this->cn)){
 896             if (strict_uid_mode()){
 897                 $message[]= msgPool::invalid(_("Name"), $this->cn, "/[a-z0-9_-]/");
 898             } else {
 899                 $message[]= msgPool::invalid(_("Name"), $this->cn, "/[a-z0-9_-]/i");
 900             }
 901         }
 902
 903         // Check if a wrong base was supplied
 904         if(!$this->baseSelector->checkLastBaseUpdate()){
 905             $message[]= msgPool::check_base();;
 906         }
 907
 908         if($this->allowGroupsWithSameNameInOtherSubtrees == true){
 909
 910             /* Check for used 'cn' */
 911             $ldap= $this->config->get_ldap_link();
 912             if(($this->cn  != $this->orig_cn) || ($this->orig_dn == "new")){
 913                 $ldap->cd(get_groups_ou().$this->base);
 914                 $ldap->ls("(&(|(objectClass=gosaGroupOfNames)(objectClass=posixGroup))(cn=$this->cn))",get_groups_ou().$this->base,array("cn"));
 915                 if ($ldap->count() != 0){
 916                     $message[]= msgPool::duplicated(_("Name"));
 917                 }
 918             }
 919
 920         }else{
 921
 922             /* Check for used 'cn' */
 923             $ldap= $this->config->get_ldap_link();
 924             $ldap->cd($this->config->current['BASE']);
 925             $ldap->search("(&(|(objectClass=gosaGroupOfNames)(objectClass=posixGroup))(cn=$this->cn))",array("cn"));
 926             if ($ldap->count() != 0){
 927
 928                 /* New entry? */
 929                 if ($this->dn == 'new'){
 930                     $message[]= msgPool::duplicated(_("Name"));
 931                 }
 932
 933                 /* Moved? */
 934                 elseif ($new_dn != $this->orig_dn){
 935                     $ldap->fetch();
 936                     if ($ldap->getDN() != $this->orig_dn){
 937                         $message[]= msgPool::duplicated(_("Name"));
 938                     }
 939                 }
 940             }
 941         }
 942
 943         /* Check ID */
 944         if ($this->force_gid == "1"){
 945             if (!tests::is_id($this->gidNumber)){
 946                 $message[]= msgPool::invalid(_("GID"), $this->gidNumber, "/[0-9]/");
 947             } else {
 948                 if ($this->gidNumber < $this->config->get_cfg_value("core","minId")){
 949                     $message[]= msgPool::toosmall(_("GID"), $this->config->get_cfg_value("core","minId"));
 950                 }
 951
 952             }
 953         }
 954
 955         /* Check if we are allowed to create or move this object
 956          */
 957         if(!$this->orig_dn == "new" ||
 958                 $this->orig_base != $this->base ||
 959                 $this->cn != $this->orig_cn){
 960
 961             if($this->orig_dn == "new" && !$this->acl_is_createable($this->base)){
 962                 $message[] = msgPool::permCreate();
 963             }elseif($this->orig_dn != "new" && !$this->acl_is_moveable($this->base)){
 964                 $message[] = msgPool::permMove();
 965             }
 966         }
 967
 968         return ($message);
 969     }
 970
 971
 972     function getCopyDialog()
 973     {
 974         $vars = array("cn");
 975
 976         if($this ->force_gid){
 977             $used = " checked ";
 978             $dis  = "";
 979         }else{
 980             $used = "";
 981             $dis  = " disabled ";
 982         }
 983
 984         $smarty = get_smarty();
 985         $smarty->assign("used",     set_post($used));
 986         $smarty->assign("dis" ,     set_post($dis));
 987         $smarty->assign("cn" ,      set_post($this->cn));
 988         $smarty->assign("gidNumber",set_post($this->gidNumber));
 989         $str = $smarty->fetch(get_template_path("paste_generic.tpl",TRUE));
 990         $ret = array();
 991         $ret['string'] = $str;
 992         $ret['status'] = "";
 993         return($ret);
 994     }
 995
 996     function saveCopyDialog()
 997     {
 998         if(isset($_POST['cn'])){
 999             $this->cn = get_post('cn');
1000         }
1001         if(isset($_POST['force_gid'])){
1002             $this->force_gid  = 1;
1003             $this->gidNumber= get_post('gidNumber');
1004         }else{
1005             $this->force_gid  = 0;
1006             $this->gidNumber  = false;
1007         }
1008     }
1009
1010
1011     /* Return plugin informations for acl handling  */
1012     static function plInfo()
1013     {
1014         return (array(
1015                     "plShortName" => _("Generic"),
1016                     "plDescription" => _("Generic group settings"),
1017                     "plSelfModify"  => FALSE,
1018                     "plDepends"     => array(),
1019                     "plPriority"    => 0,
1020                     "plSection"     => array("administration"),
1021                     "plCategory"    => array("groups" => array("objectClass" => "posixGroup", "description" => _("Groups"))),
1022
1023                     "plProperties" =>
1024                     array(
1025                         array(
1026                             "name"          => "ogroupRDN",
1027                             "type"          => "rdn",
1028                             "default"       => "ou=groups,",
1029                             "description"   => _("The 'ogroupRDN' statement defines the location where new object groups will be created. The default is 'ou=groups,'."),
1030                             "check"         => "gosaProperty::isRdn",
1031                             "migrate"       => "migrate_ogroupRDN",
1032                             "group"         => "plugin",
1033                             "mandatory"     => FALSE)),
1034
1035
1036             "plProvidedAcls"    => array(
1037                     "cn"                => _("Name"),
1038                     "description"       => _("Description"),
1039                     "base"              => _("Base"),
1040
1041                     "gidNumber"         => _("GID"),
1042
1043                     "sambaGroupType"    => _("Samba group type"),
1044                     "sambaDomainName"   => _("Samba domain name"),
1045                     "accessTo"        => _("System trust"),
1046                     "fonGroup"          => _("Phone pickup group"),
1047                     "nagiosGroup"       => _("Nagios group"),
1048
1049                     "memberUid"         => _("Group member"))
1050                 ));
1051     }
1052
1053
1054     function multiple_save_object()
1055     {
1056         if(isset($_POST['group_mulitple_edit'])){
1057
1058             /* Create a base backup and reset the
1059                base directly after calling plugin::save_object();
1060                Base will be set seperatly a few lines below */
1061             $base_tmp = $this->base;
1062             plugin::multiple_save_object();
1063             plugin::save_object();
1064             $this->trustModeDialog->multiple_save_object();
1065             $this->base = $base_tmp;
1066
1067             foreach(array("base","smbgroup","groupType","sambaDomainName","fon_group","nagios_group") as $attr){
1068                 if(isset($_POST['use_'.$attr])){
1069                     $this->multi_boxes[] = $attr;
1070                 }
1071             }
1072
1073             /* Refresh base */
1074             if ($this->acl_is_moveable($this->base)){
1075                 if (!$this->baseSelector->update()) {
1076                     msg_dialog::display(_("Error"), msgPool::permMove(), ERROR_DIALOG);
1077                 }
1078                 if ($this->base != $this->baseSelector->getBase()) {
1079                     $this->base= $this->baseSelector->getBase();
1080                     $this->is_modified= TRUE;
1081                 }
1082             }
1083
1084             foreach (array( "smbgroup"   => "sambaGroupType" ,"nagios_group" => "nagiosGroup") as $val => $aclname) {
1085                 if ($this->acl_is_writeable($aclname)){
1086                     if(isset($_POST["$val"])){
1087                         $this->$val=  TRUE;
1088                     }else{
1089                         $this->$val=  FALSE;
1090                     }
1091                 }
1092             }
1093
1094             /* Save sambaDomain attribute */
1095             if ($this->acl_is_writeable("sambaDomainName") && isset ($_POST['sambaDomainName'])){
1096                 $this->sambaDomainName= get_post('sambaDomainName');
1097                 $this->groupType= get_post('groupType');
1098             }
1099
1100             /* Save fon attribute */
1101             if ($this->acl_is_writeable("fonGroup")){
1102                 if (isset ($_POST['fon_group'])){
1103                     $this->fon_group= TRUE;
1104                 } else {
1105                     $this->fon_group= FALSE;
1106                 }
1107             }
1108         }
1109     }
1110
1111
1112     function get_multi_edit_values()
1113     {
1114         $ret = plugin::get_multi_edit_values();
1115         $ret = array_merge($ret,$this->trustModeDialog->get_multi_edit_values());
1116
1117         foreach(array("base","smbgroup","groupType","sambaDomainName","fon_group","nagios_group") as $attr){
1118             if(in_array($attr,$this->multi_boxes)){
1119                 $ret[$attr] = $this->$attr;
1120             }
1121         }
1122
1123         $ret['memberUid'] = $this->memberUid;
1124         $ret['memberUid_used_by_some'] = $this->memberUid_used_by_some;
1125         return($ret);
1126     }
1127
1128     function multiple_execute()
1129     {
1130         return($this->execute());
1131     }
1132
1133
1134     /* Initialize plugin with given atribute arrays
1135      */
1136     function init_multiple_support($attrs,$all)
1137     {
1138         plugin::init_multiple_support($attrs,$all);
1139         $this->trustModeDialog->init_multiple_support($attrs,$all);
1140
1141         $this->memberUid = array();
1142         $this->memberUid_used_by_some = array();
1143         if (isset($attrs['memberUid'])){
1144             for ($i= 0; $i<$attrs['memberUid']['count']; $i++){
1145                 $this->memberUid[$attrs['memberUid'][$i]]= $attrs['memberUid'][$i];
1146             }
1147             ksort($this->memberUid);
1148         }
1149
1150         if (isset($all['memberUid'])){
1151             for ($i= 0; $i<$all['memberUid']['count']; $i++){
1152                 if(!in_array($all['memberUid'][$i],$this->memberUid)){
1153                     $this->memberUid_used_by_some[$all['memberUid'][$i]]= $all['memberUid'][$i];
1154                 }
1155             }
1156             ksort($this->memberUid_used_by_some);
1157         }
1158
1159         $this->reload(TRUE);
1160
1161         // We've two lists in mutliple support
1162         //  - one which represents those users which are part of ALL groups.
1163         //  - ond one which represents those users which are only part of SOME groups.
1164         $this->commonList = new sortableListing();
1165         $this->commonList->setDeleteable(true);
1166         $this->commonList->setInstantDelete(true);
1167         $this->commonList->setEditable(false);
1168         $this->commonList->setWidth("100%");
1169         $this->commonList->setHeight("120px");
1170         $this->commonList->setHeader(array('~',_("Given name"),_("Surename"),_("Uid")));
1171         $this->commonList->setColspecs(array('20px','*','*','*','20px'));
1172         $this->commonList->setDefaultSortColumn(1);
1173
1174         $this->partialList = new sortableListing();
1175         $this->partialList->setDeleteable(true);
1176         $this->partialList->setInstantDelete(true);
1177         $this->partialList->setEditable(false);
1178         $this->partialList->setWidth("100%");
1179         $this->partialList->setHeight("120px");
1180         $this->partialList->setHeader(array('~',_("Given name"),_("Surename"),_("Uid")));
1181         $this->partialList->setColspecs(array('20px','*','*','*','20px'));
1182         $this->partialList->setDefaultSortColumn(1);
1183     }
1184
1185
1186     function PrepareForCopyPaste($source)
1187     {
1188         plugin::PrepareForCopyPaste($source);
1189
1190         $this->trustModeDialog->PrepareForCopyPaste($source);
1191
1192         /* Get samba Domain in case of samba 3 */
1193         if ($this->sambaSID != ""){
1194             $this->SID= preg_replace ("/-[^-]+$/", "", $this->sambaSID);
1195             $ldap= $this->config->get_ldap_link();
1196             $ldap->cd($this->config->current['BASE']);
1197             $ldap->search ("(&(objectClass=sambaDomain)(sambaSID=$this->SID))",array("sambaAlgorithmicRidBase"));
1198             if ($ldap->count() != 0){
1199                 $attrs= $ldap->fetch();
1200                 if(isset($attrs['sambaAlgorithmicRidBase'])){
1201                     $this->ridBase= $attrs['sambaAlgorithmicRidBase'][0];
1202                 } else {
1203                     $this->ridBase= $this->config->get_cfg_value("core","sambaRidBase");
1204                 }
1205
1206                 /* Get domain name for SID */
1207                 $this->sambaDomainName= "DEFAULT";
1208                 foreach ($this->config->data['SERVERS']['SAMBA'] as $key => $val){
1209                     if ($val['SID'] == $this->SID){
1210                         $this->sambaDomainName= $key;
1211                         break;
1212                     }
1213                 }
1214             } else {
1215                 if ($this->config->get_cfg_value("core","sambaRidBase") != ""){
1216                     $this->sambaDomainName= "DEFAULT";
1217                     $this->ridBase= $this->config->get_cfg_value("core","sambaRidBase");
1218                     $this->SID= $this->config->get_cfg_value("core","sambaSID");
1219                 } else {
1220                     msg_dialog::display(_("Configuration error"), _("Cannot find group SID in your configuration!"), ERROR_DIALOG);
1221                 }
1222             }
1223
1224             /* Get group type */
1225             $this->groupType= (int)substr(strrchr($this->sambaSID, "-"), 1);
1226             if ($this->groupType < 500 || $this->groupType > 553){
1227                 $this->groupType= 0;
1228             }
1229             $this->oldgroupType= $this->groupType;
1230         }
1231
1232         // Detect samba groups and adapt its values.
1233         $this->smbgroup = in_array('sambaGroupMapping', $source['objectClass']);
1234         if ($this->smbgroup) {
1235             $this->sambaSID = $this->getSambaSID();
1236         }
1237
1238         $this->memberUid = array();
1239         if(isset($source['memberUid'])){
1240             for($i = 0 ; $i < $source['memberUid']['count']; $i ++){
1241                 $this->memberUid[] = $source['memberUid'][$i];
1242             }
1243         }
1244     }
1245
1246
1247     function set_acl_base($base)
1248     {
1249         plugin::set_acl_base($base);
1250         $this->trustModeDialog->set_acl_base($base);
1251     }
1252
1253
1254     /*! \brief  Enables multiple support for this plugin
1255      */
1256     function enable_multiple_support()
1257     {
1258         plugin::enable_multiple_support();
1259         $this->trustModeDialog->enable_multiple_support();
1260     }
1261
1262
1263     function set_multi_edit_values($attrs)
1264     {
1265         $users = array();
1266
1267         /* Update groupMembership, keep optinal group */
1268         foreach($attrs['memberUid_used_by_some'] as $uid){
1269             if(in_array($uid,$this->memberUid)){
1270                 $users[$uid] = $uid;
1271             }
1272         }
1273
1274         /* Update groupMembership, add forced groups */
1275         foreach($attrs['memberUid'] as $uid){
1276             $users[$uid] = $uid;
1277         }
1278         plugin::set_multi_edit_values($attrs);
1279         $this->trustModeDialog->set_multi_edit_values($attrs);
1280         $this->memberUid = $users;
1281     }
1282
1283
1284     /*! \brief Get a new SambaSID for a group */
1285     function getSambaSID()
1286     {
1287         $ldap = $this->config->get_ldap_link();
1288         $gidNumber= $this->gidNumber;
1289         while(TRUE){
1290             $sid= $this->SID."-".($gidNumber*2 + $this->ridBase+1);
1291             $ldap->cd($this->config->current['BASE']);
1292             $ldap->search("(sambaSID=$sid)",array("sambaSID"));
1293             if ($ldap->count() == 0){
1294                 break;
1295             }
1296             $gidNumber++;
1297         }
1298
1299         return $sid;
1300     }
1301
1302 }
1303 // vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler:
1304 ?>