plugins/personal/password/class_password.inc

   1 <?php
   2 /*
   3    This code is part of GOsa (https://gosa.gonicus.de)
   4    Copyright (C) 2007 Fabian Hickert
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 2 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program; if not, write to the Free Software
  18    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  19  */
  20
  21 class password extends plugin
  22 {
  23   /* Definitions */
  24   var $plHeadline     = "Password";
  25   var $plDescription  = "This does something";
  26
  27   function password(&$config, $dn= NULL, $parent= NULL)
  28   {
  29     plugin::plugin($config, $dn, $parent);
  30   }
  31
  32
  33   function execute()
  34   {
  35     plugin::execute();
  36     $smarty = get_smarty();
  37     $ui = get_userinfo();
  38
  39     /* Get acls */
  40     $password_ACLS = $ui->get_permissions($ui->dn,"users/password");
  41     $smarty->assign("ChangeACL" ,  $password_ACLS);
  42     $smarty->assign("NotAllowed" , !preg_match("/w/i",$password_ACLS));
  43
  44     /* Display expiration template */
  45     if((isset($this->config->data['MAIN']['ACCOUNT_EXPIRATION'])) &&
  46         preg_match('/true/i', $this->config->data['MAIN']['ACCOUNT_EXPIRATION'])){
  47       $expired= ldap_expired_account($this->config, $ui->dn, $ui->username);
  48       if($expired == 4){
  49         return($smarty->fetch(get_template_path("nochange.tpl", TRUE)));
  50       }
  51     }
  52
  53     /* Pwd change requested */
  54     if (isset($_POST['password_finish'])){
  55
  56       /* Should we check different characters in new password */
  57       $check_differ = isset($this->config->data['MAIN']['PWDIFFER']);
  58       $differ       = @$this->config->data['MAIN']['PWDIFFER'];
  59
  60       /* Enable length check ? */
  61       $check_length = isset($this->config->data['MAIN']['PWMINLEN']);
  62       $length       = @$this->config->data['MAIN']['PWMINLEN'];
  63
  64       /* Call external password quality hook ?*/
  65       $check_hook   = isset($this->config->data['MAIN']['EXTERNALPWDHOOK']);
  66       $hook         = @$this->config->data['MAIN']['EXTERNALPWDHOOK']." ".$ui->username." ".$_POST['current_password']." ".$_POST['new_password'];
  67       if($check_hook){
  68         exec($hook,$resarr);
  69         $check_hook_output = "";
  70         if(count($resarr) > 0) {
  71           $check_hook_output= join('\n', $resarr);
  72         }
  73       }
  74
  75       /* Check given values */
  76       if(!isset($_POST['current_password']) || empty($_POST['current_password'])){
  77         msg_dialog::display(_("User password"),
  78                             _("You need to specify your current password in order to proceed."),WARNING_DIALOG);
  79       }elseif ($_POST['new_password'] != $_POST['repeated_password']){
  80         msg_dialog::display(_("User password"),
  81                             _("The passwords you've entered as 'New password' and 'Repeated new password' do not match."),WARNING_DIALOG);
  82       } elseif ($_POST['new_password'] == ""){
  83         msg_dialog::display(_("User password"),
  84                             _("The password you've entered as 'New password' is empty."),WARNING_DIALOG);
  85       }elseif($check_differ && (substr($_POST['current_password'], 0, $differ) == substr($_POST['new_password'], 0, $differ))){
  86         msg_dialog::display(_("User password"),
  87                             _("The password used as new and current are too similar."),WARNING_DIALOG);
  88       }elseif($check_length && (strlen($_POST['new_password']) < $length)){
  89         msg_dialog::display(_("User password"),
  90                             _("The password used as new is to short."),WARNING_DIALOG);
  91       }elseif($check_hook && $check_hook_output != ""){
  92         msg_dialog::display(_("User password"),
  93                     sprintf(_("External password changer reported a problem: %s."),$check_hook_output),WARNING_DIALOG);
  94       }else{
  95
  96         /* Try to connect via current password */
  97         $tldap = new LDAP(
  98             $ui->dn,
  99             $_POST['current_password'],
 100             $this->config->current['SERVER'],
 101             isset($this->config->current['RECURSIVE'])  && preg_match("/true/i",$this->config->current['RECURSIVE']),
 102             isset($this->config->current['TLS'])        && preg_match("/true/i",$this->config->current['TLS']));
 103
 104         /* connection Successfull ? */
 105         if ($tldap->error != "Success"){
 106           msg_dialog::display(_("User password"),
 107                               _("The password you've entered as your current password doesn't match the real one."),WARNING_DIALOG);
 108         }else{
 109
 110           /* Check GOsa permissions */
 111           if (!preg_match("/w/i",$password_ACLS)){
 112             msg_dialog::display(_("User password"),
 113                                 _("You have no permissions to change your password."),WARNING_DIALOG);
 114           }else{
 115             change_password ($ui->dn, $_POST['new_password']);
 116             gosa_log ("User/password has been changed");
 117             $ui->password= $_POST['new_password'];
 118             $_SESSION['ui']= $ui;
 119 #$this->handle_post_events("modify",array("userPassword" => $_POST['new_password']));
 120             return($smarty->fetch(get_template_path("changed.tpl", TRUE)));
 121           }
 122         }
 123       }
 124     }
 125     return($smarty->fetch(get_template_path("password.tpl", TRUE)));
 126   }
 127
 128   function remove_from_parent()
 129   {
 130     $this->handle_post_events("remove");
 131   }
 132
 133   function save()
 134   {
 135   }
 136
 137   function plInfo()
 138   {
 139     return (array(
 140           "plDescription"     => _("User password"),
 141           "plSelfModify"      => TRUE,
 142           "plDepends"         => array("user"),
 143           "plPriority"        => 10,
 144           "plSection"     => array("personal" => _("My account")),
 145           "plCategory"    => array("users"),
 146           "plOptions"         => array(),
 147
 148           "plProvidedAcls"  => array())
 149         );
 150   }
 151
 152 }
 153 // vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler:
 154 ?>