plugins/admin/groups/class_groupManagement.inc

   1 <?php
   2 /*
   3    This code is part of GOsa (https://gosa.gonicus.de)
   4    Copyright (C) 2003  Cajus Pollmeier
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 2 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program; if not, write to the Free Software
  18    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  19  */
  20 require "tabs_group.inc";
  21
  22 class groupManagement extends plugin
  23 {
  24   /* Definitions */
  25   var $plHeadline= "Groups";
  26   var $plDescription= "This does something";
  27   var $departments = array();
  28
  29   /* Dialog attributes */
  30   var $grouptab= NULL;
  31   var $grouplist= array();
  32   var $ui= NULL;
  33   var $acl= "";
  34
  35   function groupManagement ($config, $ui)
  36   {
  37     /* Save configuration for internal use */
  38     $this->config= $config;
  39     $this->ui= $ui;
  40
  41     /* Get global filter config */
  42     if (!is_global("groupfilter")){
  43       $base= get_base_from_people($ui->dn);
  44       $groupfilter= array("primarygroups" => "checked",
  45           "mailgroups" => "checked",
  46           "sambagroups" => "checked",
  47           "appgroups" => "checked",
  48           "functionalgroups" => "checked",
  49           "guser" => "*",
  50           "subsearch" => "",
  51           "depselect" => $base,
  52           "regex" => "*");
  53       register_global("groupfilter", $groupfilter);
  54     }
  55   }
  56
  57   function execute()
  58   {
  59     /* Save data */
  60     $groupfilter= get_global("groupfilter");
  61     $s_action   = "";
  62     $s_entry    = "";
  63
  64
  65     if (!isset($this->grouptab)){
  66       foreach( array("depselect", "guser", "regex") as $type){
  67         if (isset($_POST[$type])){
  68           $groupfilter[$type]= $_POST[$type];
  69         }
  70       }
  71       if (isset($_POST['regex'])){
  72         foreach( array("primarygroups", "sambagroups", "mailgroups", "appgroups",
  73               "functionalgroups", "subsearch") as $type){
  74
  75           if (isset($_POST[$type])) {
  76             $groupfilter[$type]= "checked";
  77           } else {
  78             $groupfilter[$type]= "";
  79           }
  80         }
  81       }
  82       if (isset($_GET['search'])){
  83         $s= mb_substr($_GET['search'], 0, 1, "UTF8")."*";
  84         if ($s == "**"){
  85           $s= "*";
  86         }
  87         $groupfilter['regex']= $s;
  88       }
  89       register_global("groupfilter", $groupfilter);
  90     }
  91
  92
  93     /* Test Posts */
  94     foreach($_POST as $key => $val){
  95       // Post for delete
  96       if(preg_match("/group_del.*/",$key)){
  97         $s_action = "del";
  98         $s_entry  = preg_replace("/group_".$s_action."_/i","",$key);
  99         // Post for edit
 100       }elseif(preg_match("/group_edit_.*/",$key)){
 101         $s_action="edit";
 102         $s_entry  = preg_replace("/group_".$s_action."_/i","",$key);
 103         // Post for new
 104       }elseif(preg_match("/dep_back.*/i",$key)){
 105         $s_action="back";
 106       }elseif(preg_match("/group_new.*/",$key)){
 107         $s_action="new";
 108       }elseif(preg_match("/dep_home.*/i",$key)){
 109         $s_action="home";
 110       }elseif(preg_match("/group_tplnew.*/i",$key)){
 111         $s_action="new_tpl";
 112       }elseif(preg_match("/group_chgpw.*/i",$key)){
 113         $s_action="change_pw";
 114         $s_entry  = preg_replace("/group_chgpw_/i","",$key);
 115       }elseif(preg_match("/dep_root.*/i",$key)){
 116         $s_action="root";
 117       }
 118     }
 119     $s_entry  = preg_replace("/_.$/","",$s_entry);
 120
 121     /* Start for New List Managment */
 122     if(isset($_GET['act'])&&($_GET['act']=="dep_open")){
 123       $s_action="open";
 124       $s_entry = base64_decode($_GET['dep_id']);
 125       $groupfilter['depselect']= "".$this->config->departments[trim($s_entry)];
 126     }
 127
 128     // Edit if
 129     if((isset($_GET['act']))&&($_GET['act']=="edit_entry")){
 130       $s_action ="edit";
 131       $s_entry  = $_GET['id'];
 132     }
 133
 134     /* Department changed? */
 135     if(isset($_POST['depselect']) && $_POST['depselect']){
 136       $groupfilter['depselect']= $_POST['depselect'];
 137     }
 138
 139     /* Homebutton is posted */
 140     if($s_action=="home"){
 141       $groupfilter['depselect']= (preg_replace("/^[^,]+,/","",$this->ui->dn));
 142       $groupfilter['depselect']= (preg_replace("/^[^,]+,/","",$groupfilter['depselect']));
 143     }
 144
 145     if($s_action=="root"){
 146       $groupfilter['depselect']=($this->config->current['BASE']);
 147     }
 148
 149     /* If Backbutton is Posted */
 150     if($s_action == "back"){
 151       $base_back= preg_replace("/^[^,]+,/","",$groupfilter['depselect']);
 152       $base_back= convert_department_dn($base_back);
 153
 154       if(isset($this->config->departments[trim($base_back)])){
 155         $groupfilter['depselect']= $this->config->departments[trim($base_back)];
 156       }else{
 157         $groupfilter['depselect']= $this->config->departments["/"];
 158       }
 159     }
 160     register_global("groupfilter", $groupfilter);
 161
 162     $smarty= get_smarty();
 163
 164     /* Prepare formular */
 165     $this->reload();
 166
 167     /* Check for exeeded sizelimit */
 168     if (($message= check_sizelimit()) != ""){
 169       return($message);
 170     }
 171
 172     /* New group? */
 173     if ($s_action=="new"){
 174
 175       /* By default we set 'dn' to 'new', all relevant plugins will
 176          react on this. */
 177       $this->dn= "new";
 178
 179       /* Create new usertab object */
 180       $this->grouptab= new grouptabs($this->config,
 181           $this->config->data['TABS']['GROUPTABS'], $this->dn);
 182       $this->grouptab->set_acl(array(':all'));
 183     }
 184
 185     /* Cancel dialogs */
 186     if (isset($_POST['edit_cancel']) || isset($_POST['password_cancel'])){
 187       del_lock ($this->grouptab->dn);
 188       unset ($this->grouptab);
 189       $this->grouptab= NULL;
 190       unset($_SESSION['objectinfo']);
 191     }
 192
 193     /* Finish group edit is triggered by the tabulator dialog, so
 194        the user wants to save edited data. Check and save at this
 195        point. */
 196     if (isset($_POST['edit_finish'])){
 197
 198       /* Check tabs, will feed message array */
 199       $message= $this->grouptab->check();
 200
 201       /* Save, or display error message? */
 202       if (count($message) == 0){
 203
 204         /* Save user data to ldap */
 205         $this->grouptab->save();
 206         gosa_log ("Group object'".$this->dn."' has been saved");
 207
 208         /* Group has been saved successfully, remove lock from
 209            LDAP. */
 210         if ($this->dn != "new"){
 211           del_lock ($this->dn);
 212         }
 213
 214         /* There's no page reload so we have to read new users at
 215            this point. */
 216         $this->reload ();
 217         unset ($this->grouptab);
 218         $this->grouptab= NULL;
 219         unset ($_SESSION['objectinfo']);
 220
 221       } else {
 222         /* Ok. There seem to be errors regarding to the tab data,
 223            show message and continue as usual. */
 224         show_errors($message);
 225       }
 226     }
 227
 228     /* User wants to edit data? */
 229     if ($s_action=="edit"){
 230
 231       /* Get 'dn' from posted 'uid', must be unique */
 232       $this->dn= $this->grouplist[trim($s_entry)]['dn'];
 233
 234       /* Check locking, save current plugin in 'back_plugin', so
 235          the dialog knows where to return. */
 236       if (($user= get_lock($this->dn)) != ""){
 237         return(gen_locked_message ($user, $this->dn));
 238       }
 239
 240       /* Lock the current entry, so everyone will get the
 241          above dialog */
 242       add_lock ($this->dn, $this->ui->dn);
 243
 244       /* Set up the users ACL's for this 'dn' */
 245       $acl= get_permissions ($this->dn, $this->ui->subtreeACL);
 246
 247       /* Register grouptab to trigger edit dialog */
 248       $this->grouptab= new grouptabs($this->config,
 249           $this->config->data['TABS']['GROUPTABS'], $this->dn);
 250       $this->grouptab->set_acl($acl);
 251       $_SESSION['objectinfo']= $this->dn;
 252     }
 253
 254     /* Remove user was requested */
 255     if ($s_action=="del"){
 256       /* Get 'dn' from posted 'uid' */
 257       $this->dn= $this->grouplist[trim($s_entry)]['dn'];
 258
 259       /* Load permissions for selected 'dn' and check if
 260          we're allowed to remove this 'dn' */
 261       $acl= get_permissions ($this->dn, $this->ui->subtreeACL);
 262       $this->acl= get_module_permission($acl, "group", $this->dn);
 263       if (chkacl($this->acl, "delete") == ""){
 264
 265         /* Check locking, save current plugin in 'back_plugin', so
 266            the dialog knows where to return. */
 267         if (($user= get_lock($this->dn)) != ""){
 268           return(gen_locked_message ($user, $this->dn));
 269         }
 270
 271         /* Lock the current entry, so nobody will edit it during deletion */
 272         add_lock ($this->dn, $this->ui->dn);
 273         $smarty->assign("info", sprintf(_("You're about to delete the group '%s'."), $this->dn));
 274         return($smarty->fetch(get_template_path('remove.tpl', TRUE)));
 275       } else {
 276
 277         /* Obviously the user isn't allowed to delete. Show message and
 278            clean session. */
 279         print_red (_("You are not allowed to delete this group!"));
 280       }
 281     }
 282
 283     /* Confirmation for deletion has been passed. Group should be deleted. */
 284     if (isset($_POST['delete_group_confirm'])){
 285
 286       /* Some nice guy may send this as POST, so we've to check
 287          for the permissions again. */
 288       if (chkacl($this->acl, "delete") == ""){
 289
 290         /* Delete request is permitted, perform LDAP action */
 291         $this->grouptab= new grouptabs($this->config,
 292             $this->config->data['TABS']['GROUPTABS'], $this->dn);
 293         $this->grouptab->set_acl(array($this->acl));
 294         $this->grouptab->delete ();
 295         gosa_log ("Group object'".$this->dn."' has been removed");
 296         unset ($this->grouptab);
 297         $this->grouptab= NULL;
 298
 299         /* Group list has changed, reload it. */
 300         $this->reload ();
 301       } else {
 302
 303         /* Normally this shouldn't be reached, send some extra
 304            logs to notify the administrator */
 305         print_red (_("You are not allowed to delete this group!"));
 306         gosa_log ("Warning: '".$this->ui->uid."' tried to trick group deletion.");
 307       }
 308
 309       /* Remove lock file after successfull deletion */
 310       del_lock ($this->dn);
 311       unset($_SESSION['objectinfo']);
 312     }
 313
 314
 315     /* Delete group canceled? */
 316     if (isset($_POST['delete_cancel'])){
 317       del_lock ($this->dn);
 318       unset($_SESSION['objectinfo']);
 319     }
 320
 321     /* Show tab dialog if object is present */
 322     if ($this->grouptab){
 323       $display= $this->grouptab->execute();
 324
 325       /* Don't show buttons if tab dialog requests this */
 326       if (!$this->grouptab->by_object[$this->grouptab->current]->dialog){
 327         $display.= "<p style=\"text-align:right\">\n";
 328         $display.= "<input type=submit name=\"edit_finish\" value=\""._("Finish")."\">\n";
 329         $display.= "&nbsp;\n";
 330         $display.= "<input type=submit name=\"edit_cancel\" value=\""._("Cancel")."\">\n";
 331         $display.= "</p>";
 332       }
 333       return ($display);
 334     }
 335
 336     /* Prepare departments */
 337     $options= "";
 338     foreach ($this->config->idepartments as $key => $value){
 339             if ($groupfilter['depselect'] == $key){
 340                     $options.= "<option selected value='$key'>$value</option>";
 341             } else {
 342                     $options.= "<option value='$key'>$value</option>";
 343             }
 344     }
 345
 346     // Managment
 347     $listhead = "<div style='background:#F0F0F9;padding:5px;'>".
 348       " <input type='image' align='middle' src='images/list_back.png' title='"._("Go up one department")."' alt='"._("Up")."' name='dep_back'>&nbsp;".
 349       " <input type='image' src='images/list_root.png' align='middle' title='"._("Go to root department")."' name='dep_root' alt='"._("Root")."'>&nbsp;".
 350       " <input type='image' align='middle' src='images/list_home.png' title='"._("Go to users department")."'
 351  alt='"._("Home")."' name='dep_home'>&nbsp;".
 352       " <img src='images/list_seperator.png' align='middle' alt='' height='16' width='1'>&nbsp;".
 353       " <input type='image' align='middle' src='images/list_new_group.png' title='"._("Create new group")."'
 354  alt='"._("New")."' name='group_new'>&nbsp;".
 355       " <img src='images/list_seperator.png' align='middle' alt='' height='16' width='1'>&nbsp;".
 356       _("Current base")."&nbsp;<select name='depselect' onChange='mainform.submit()'>$options</select>".
 357        " <input type='image' src='images/list_submit.png' align='middle' title='"._("Submit department")."'   name='submit_department' alt='"._("Submit")."'>&nbsp;".
 358       "</div>";
 359
 360
 361     $actions = "<input type='image' src='images/edit.png' alt='"._("edit")."' name='group_edit_%KEY%' title='"._("Edit this entry")."'>";
 362     $actions.= "<input type='image' src='images/edittrash.png' alt='"._("delete")."' name='group_del_%KEY%' title='"._("Delete this entry")."'>";
 363
 364     // Defining Links
 365     $linkopen = "<a href='?plug=".$_GET['plug']."&amp;act=dep_open&amp;dep_id=%s'>%s</a>";
 366
 367     // image Buttons
 368     $editlink = "<a href='?plug=".$_GET['plug']."&amp;id=%s&amp;act=edit_entry'>%s</a>";
 369     $userimg  = "<img src='images/select_groups.png' alt='User'    title='%s'>";
 370
 371     // Extension images
 372     $posiximg = "<img src='images/select_groups.png'        alt='P'  title='"._("Posix")  ."'>";
 373     $mailimg  = "<img src='images/mailto.png'             alt='M'  title='"._("Mail")   ."'>";
 374     $sambaimg = "<img src='images/select_winstation.png'  alt='S'  title='"._("Samba")  ."'>";
 375     $applimg  = "<img src='images/select_application.png' alt='A'  title='"._("Application")."'>";
 376     $phoneimg  = "<img src='images/select_phone.png'      alt='Ph' title='"._("Phone")  ."'>";
 377     // Space
 378     $empty    = "<img src='images/empty.png' style='width:16px;height:16px;' alt=''>";
 379
 380
 381     $divlist = new divlist("groupstab");
 382     $divlist->SetHeader(array(
 383           array("string" => "&nbsp;"),
 384           array("string" => _("Groupname")." / "._("Department")),
 385           array("string" => _("Properties"), "attach" => "style='width:100px;'"),
 386           array("string" => _("Actions")    ,"attach" => "style='border:none'")
 387           ));
 388
 389
 390     $divlist->SetSummary(_("This table displays all groups, in the selected tree."));
 391     $divlist->SetEntriesPerPage(20);
 392
 393     foreach($this->departments as $key=> $val){
 394
 395       if(!isset($this->config->departments[trim($key)])){
 396         $this->config->departments[trim($key)]="";
 397       }
 398
 399       $non_empty="";
 400       $keys= str_replace("/","\/",$key);
 401       foreach($this->config->departments as $keyd=>$vald ){
 402         if(preg_match("/".$keys."\/.*/",$keyd)){
 403           $non_empty="full";
 404         }
 405       }
 406
 407
 408       $field1 = array("string" => "<img src='images/".$non_empty."folder.png' alt='department'>");
 409       $field2 = array("string" => sprintf($linkopen,base64_encode($key),$val));
 410       $field3 = array("string" => "&nbsp;");
 411       $field4 = array("string" => "&nbsp;","attach"=>"style='text-align:right;border:none'");
 412
 413       $divlist->AddEntry(array($field1,$field2,$field3,$field4));
 414     }
 415
 416     foreach($this->grouplist as $key => $val){
 417
 418       if(isset($val['objectClass'])){
 419         if(in_array("posixGroup",           $val['objectClass']))   $posix = $posiximg;   else $posix   = $empty;
 420         if(in_array("gosaMailAccount",      $val['objectClass']))   $mail  = $mailimg;    else $mail    = $empty;
 421         if(in_array("sambaGroupMapping",    $val['objectClass']))   $samba = $sambaimg;   else $samba   = $empty;
 422         if(in_array("gosaApplicationGroup", $val['objectClass']))   $appl  = $applimg;    else $appl    = $empty;
 423         if(in_array("goFonPickupGroup",     $val['objectClass']))   $phone = $phoneimg;   else $phone   = $empty;
 424       }else{
 425         $posix=$mail=$samba=$appl=$phone=$empty;
 426       }
 427
 428       $title = "title='gid : ".$key." - dn : ".$val['dn']."'";
 429
 430       if(!isset($val['description'][0])){
 431         $desc = "";
 432       }else{
 433         $desc = " - [ ".$val['description'][0]." ]";
 434       }
 435       $field1 = array("string" => sprintf($userimg,$val['dn']),"attach"=>"style='width:20px;align:middle;'");
 436       $field2 = array("string" => sprintf($editlink,$key,($val['cn']['0'].$desc)),"attach"=>$title);
 437       $field3 = array("string" => $posix."&nbsp;".$mail."&nbsp;".$samba."&nbsp;".$appl."&nbsp;".$phone);
 438       $field4 = array("string" => preg_replace("/%KEY%/", $key, $actions),"attach"=>"style='text-align:right;border:none;width:32px;'");
 439
 440       $divlist->AddEntry(array($field1,$field2,$field3,$field4));
 441     }
 442
 443     /* Show main page */
 444     $smarty->assign("grouplisthead", $listhead);
 445     $smarty->assign("grouplist", $divlist->DrawList());
 446     $smarty->assign("searchg_image", get_template_path('images/search_group.png'));
 447     $smarty->assign("searchu_image", get_template_path('images/search_user.png'));
 448     $smarty->assign("tree_image", get_template_path('images/tree.png'));
 449     $smarty->assign("infoimage", get_template_path('images/info.png'));
 450     $smarty->assign("launchimage", get_template_path('images/launch.png'));
 451     $smarty->assign("deplist", $this->config->idepartments);
 452     foreach( array("depselect", "guser", "regex", "primarygroups", "mailgroups","appgroups", "sambagroups", "functionalgroups", "subsearch") as $type){
 453       $smarty->assign("$type", $groupfilter[$type]);
 454     }
 455
 456     /* Extend if we are not using javascript */
 457     $smarty->assign("apply", apply_filter());
 458     $smarty->assign("alphabet", generate_alphabet());
 459     $smarty->assign("hint", print_sizelimit_warning());
 460
 461     return($smarty->fetch(get_template_path('headpage.tpl', TRUE)));
 462   }
 463
 464
 465
 466   function reload2()
 467   {
 468     /* Get config */
 469     $groupfilter= get_global('groupfilter');
 470
 471     /* Set base for all searches */
 472     $base= $groupfilter['depselect'];
 473
 474     /* Regex filter? */
 475     if ($groupfilter['regex'] != ""){
 476       $regex= $groupfilter['regex'];
 477     } else {
 478       $regex= "*";
 479     }
 480
 481     /* User filter? */
 482     $filter= "";
 483     $error= "";
 484     $error2= "";
 485     $this->grouplist= array();
 486
 487     /* What are primary groups? */
 488     $primaries= array();
 489     $ldap= $this->config->get_ldap_link(TRUE);
 490     $ldap->cd($base);
 491     $ldap->search("(&(uid=$regex)(!(uid=*$))(objectClass=posixAccount)(gidNumber=*))", array("gidNumber", "cn"));
 492     $error= $ldap->error;
 493     while ($attrs= $ldap->fetch()){
 494       $primaries[$attrs['gidNumber'][0]]= $attrs['cn'][0];
 495     }
 496
 497     if ($groupfilter['primarygroups'] == "checked"){
 498       $filter.= "(&(objectClass=posixGroup)(|";
 499       foreach ($primaries as $gidNumber => $cn){
 500         $filter.= "(gidNumber=$gidNumber)";
 501       }
 502       $filter.= "))";
 503     } else {
 504       $filter.= "(&(objectClass=posixGroup)(!(|";
 505       foreach ($primaries as $gidNumber => $cn){
 506         $filter.= "(gidNumber=$gidNumber)";
 507       }
 508       $filter.= ")))";
 509     }
 510  /* Set filter depending on selection */
 511     $sfilter= "";
 512     if ($groupfilter['appgroups'] == "checked"){
 513       $filter.= "(objectClass=gosaApplicationGroup)";
 514     }
 515     if ($this->config->current['SAMBAVERSION'] == 3){
 516       if ($groupfilter['primarygroups'] != "checked"){
 517         $sfilter= "(objectClass=sambaGroupMapping)";
 518       } elseif ($groupfilter['sambagroups'] == "checked"){
 519         $filter.= "(objectClass=sambaGroupMapping)";
 520       }
 521     }
 522
 523     if ($groupfilter['mailgroups'] == "checked"){
 524       $filter.= "(objectClass=gosaMailAccount)";
 525     }
 526     if ($groupfilter['functionalgroups'] == "checked"){
 527       $ldap->cd($base);
 528       $ldap->set_size_limit($_SESSION['size_limit']);
 529       $ldap->search("(&(cn=$regex)(objectClass=posixGroup)(!(|(objectClass=gosaMailAccount)(objectClass=gosaApplicationGroup)$sfilter)))", array("cn",      "gidNumber", "description"));
 530       $error2= $ldap->error;
 531       while ($attrs= $ldap->fetch()){
 532         if (!isset($primaries[$attrs['gidNumber'][0]])){
 533           if (isset($attrs["description"][0])){
 534             $this->grouplist[$attrs["dn"]]= $attrs["cn"][0]." [".
 535               $attrs["description"][0]."]";
 536           } else {
 537             $this->grouplist[$attrs["dn"]]= $attrs["cn"][0];
 538           }
 539         }
 540       }
 541     }
 542
 543     /* Generate grouplist */
 544     if ($filter != ""){
 545       $filter= "(&(cn=$regex)(objectClass=posixGroup)(|$filter))";
 546       if ($groupfilter['guser'] != ""){
 547         $filter= "(&(|(memberUID=" . $groupfilter['guser'] . ")(cn=" . $groupfilter['guser'] . "))$filter)";
 548       }
 549     }
 550     if ($groupfilter['subsearch'] != "checked"){
 551       $res= get_list($this->ui->subtreeACL, "$filter", FALSE, $base, array("cn", "description", "gidNumber"), TRUE);
 552     } else {
 553       $base= get_groups_ou().$base;
 554
 555       $res= get_list($this->ui->subtreeACL, "$filter", FALSE, $base, array("cn", "description", "gidNumber"), TRUE);
 556     }
 557     if (preg_match("/size limit/i", $error) || preg_match("/size limit/i", $error2)){
 558       $_SESSION['limit_exceeded']= TRUE;
 559     }
 560
 561    foreach ($res as $value){
 562       if (isset($value["description"][0])){
 563         $this->grouplist[$value["dn"]]= $value["cn"][0]." [".
 564           $value["description"][0]."]";
 565       } else {
 566         $this->grouplist[$value["dn"]]= $value["cn"][0];
 567       }
 568     }
 569
 570     natcasesort ($this->grouplist);
 571     reset ($this->grouplist);
 572   }
 573
 574
 575
 576
 577
 578
 579
 580
 581
 582
 583
 584
 585   function reload()
 586   {
 587     /* Get config */
 588     $groupfilter= get_global('groupfilter');
 589
 590     /* Set base for all searches */
 591     $base= $groupfilter['depselect'];
 592
 593     /* Regex filter? */
 594     if ($groupfilter['regex'] != ""){
 595       $regex= $groupfilter['regex'];
 596     } else {
 597       $regex= "*";
 598     }
 599
 600     /* User filter? */
 601     $filter= "";
 602     $error= "";
 603     $error2= "";
 604     $this->grouplist= array();
 605
 606     /* What are primary groups? */
 607     $primaries= array();
 608     $ldap= $this->config->get_ldap_link(TRUE);
 609     $ldap->cd($base);
 610     $ldap->ls("(&(uid=$regex)(!(uid=*$))(objectClass=posixAccount)(gidNumber=*))", array("gidNumber", "cn"));
 611     $error= $ldap->error;
 612     while ($attrs= $ldap->fetch()){
 613       $primaries[$attrs['gidNumber'][0]]= $attrs['cn'][0];
 614     }
 615
 616     if ($groupfilter['primarygroups'] == "checked"){
 617       $filter.= "(&(objectClass=posixGroup)(|";
 618       foreach ($primaries as $gidNumber => $cn){
 619         $filter.= "(gidNumber=$gidNumber)";
 620       }
 621       $filter.= "))";
 622     } else {
 623       $filter.= "(&(objectClass=posixGroup)(!(|";
 624       foreach ($primaries as $gidNumber => $cn){
 625         $filter.= "(gidNumber=$gidNumber)";
 626       }
 627       $filter.= ")))";
 628     }
 629
 630
 631     /* Set filter depending on selection */
 632     $sfilter= "";
 633     if ($groupfilter['appgroups'] == "checked"){
 634       $filter.= "(objectClass=gosaApplicationGroup)";
 635     }
 636     if ($this->config->current['SAMBAVERSION'] == 3){
 637       if ($groupfilter['primarygroups'] != "checked"){
 638         $sfilter= "(objectClass=sambaGroupMapping)";
 639       } elseif ($groupfilter['sambagroups'] == "checked"){
 640         $filter.= "(objectClass=sambaGroupMapping)";
 641       }
 642     }
 643
 644     if ($groupfilter['mailgroups'] == "checked"){
 645       $filter.= "(objectClass=gosaMailAccount)";
 646     }
 647     if ($groupfilter['functionalgroups'] == "checked"){
 648       $ldap->cd($base);
 649       $ldap->set_size_limit($_SESSION['size_limit']);
 650       $ldap->ls("(&(cn=$regex)(objectClass=posixGroup)(!(|(objectClass=gosaMailAccount)(objectClass=gosaApplicationGroup)$sfilter)))", array("cn", "gidNumber", "description"));
 651       $error2= $ldap->error;
 652       while ($attrs= $ldap->fetch()){
 653         if (!isset($primaries[$attrs['gidNumber'][0]])){
 654           $this->grouplist[$attrs['gidNumber'][0]]= $attrs;
 655         }
 656       }
 657     }
 658
 659     /*
 660      * We also need to search for the departments
 661      * So we are able to navigate like in konquerer
 662      */
 663     $base2 = preg_replace("/ou=people,/i","",$base);
 664
 665     $res3 =  get_list2($this->ui->subtreeACL, "(&(|(ou=$regex)(description=$regex))(objectClass=gosaDepartment))",
 666                               FALSE, $base2, array("ou", "description"), TRUE);
 667
 668     $this->departments= array();
 669     $tmp = array();
 670     foreach ($res3 as $value){
 671       $tmp[strtolower($value['dn']).$value['dn']]=$value;
 672     }
 673     ksort($tmp);
 674     foreach($tmp as $value){
 675       if($value["description"][0]!=".."){
 676         $this->departments[$value['dn']]=convert_department_dn2($value['dn'])." - [".$value["description"][0]."]";
 677       }else{
 678         $this->departments[$value['dn']]=$value["description"][0];
 679       }
 680     }
 681
 682     /* Generate grouplist */
 683     if ($filter != ""){
 684       $filter= "(&(cn=$regex)(objectClass=posixGroup)(|$filter))";
 685       if ($groupfilter['guser'] != ""){
 686         $filter= "(&(|(memberUID=" . $groupfilter['guser'] . ")(cn=" . $groupfilter['guser'] . "))$filter)";
 687       }
 688     }
 689     if ($groupfilter['subsearch'] == "checked"){
 690       $res= get_list($this->ui->subtreeACL, "$filter", FALSE, $base, array("cn", "description", "gidNumber"), TRUE);
 691     } else {
 692      $base= get_groups_ou().$base;
 693       $res= get_list($this->ui->subtreeACL, "$filter", FALSE, $base, array("cn", "description", "gidNumber"), TRUE);
 694     }
 695     if (preg_match("/size limit/i", $error) || preg_match("/size limit/i", $error2)){
 696       $_SESSION['limit_exceeded']= TRUE;
 697     }
 698
 699     foreach ($res as $value){
 700       $this->grouplist[$value['gidNumber'][0]]= $value;
 701     }
 702
 703
 704
 705       $tmp=array();
 706     foreach($this->grouplist as $tkey => $val ){
 707       $tmp[strtolower($val['cn'][0]).$val['cn'][0]]=$val;
 708     }
 709     ksort($tmp);
 710     $this->grouplist=array();
 711     foreach($tmp as $val){
 712       $this->grouplist[]=$val;
 713     }
 714     reset ($this->grouplist);
 715   }
 716
 717   function remove_from_parent()
 718   {
 719     /* Optionally execute a command after we're done */
 720     $this->postremove();
 721   }
 722
 723
 724   /* Save data to object */
 725   function save_object()
 726   {
 727   }
 728
 729
 730   /* Check values */
 731   function check()
 732   {
 733   }
 734
 735
 736   /* Save to LDAP */
 737   function save()
 738   {
 739     /* Optionally execute a command after we're done */
 740     $this->postcreate();
 741   }
 742
 743   function adapt_from_template($dn)
 744   {
 745   }
 746
 747   function password_change_needed()
 748   {
 749   }
 750
 751   function show_header($button_text, $text, $disabled= FALSE)
 752   {
 753   }
 754
 755   function remove_lock()
 756   {
 757     if (isset($this->grouptab->dn)){
 758       del_lock ($this->grouptab->dn);
 759     }
 760   }
 761
 762 }
 763
 764 // vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler:
 765 ?>