$v2){
return 1;
}
if ($v1 < $v2){
return -1;
}
return 0;
}
class ogroup extends plugin
{
/* Variables */
var $cn= "";
var $description= "";
var $base= "";
var $gosaGroupObjects= "";
var $objects= array();
var $objcache= array();
var $memberList= array();
var $member= array();
var $orig_dn= "";
var $orig_cn= "";
var $orig_base= "";
var $objectSelect= FALSE;
var $view_logged = FALSE;
var $accessTo= array();
var $trustModel= "";
var $trustSelect = FALSE;
var $was_trust_account= FALSE;
var $baseSelector;
/* Already assigned Workstations. Will be hidden in selection.
*/
var $used_workstations = array();
/* attribute list for save action */
var $attributes= array("cn", "description", "gosaGroupObjects","member","accessTo","trustModel");
var $objectclasses= array("top", "gosaGroupOfNames");
function ogroup (&$config, $dn= NULL)
{
plugin::plugin ($config, $dn);
$this->orig_dn= $dn;
$this->member = array();
/* Load member objects */
if (isset($this->attrs['member'])){
foreach ($this->attrs['member'] as $key => $value){
if ("$key" != "count"){
$value= @LDAP::convert($value);
$this->member["$value"]= "$value";
}
}
}
$this->is_account= TRUE;
/* Get global filter config */
if (!session::is_set("ogfilter")){
$ui= get_userinfo();
$base= get_base_from_people($ui->dn);
$ogfilter= array( "dselect" => $base,
"regex" => "*");
session::set("ogfilter", $ogfilter);
}
$ogfilter= session::get('ogfilter');
/* Adjust flags */
foreach( array( "U" => "accounts",
"G" => "groups",
"A" => "applications",
"D" => "departments",
"S" => "servers",
"W" => "workstations",
"O" => "winstations",
"T" => "terminals",
"F" => "phones",
"_" => "subtrees",
"P" => "printers") as $key => $val){
if (preg_match("/$key/", $this->gosaGroupObjects)){
$ogfilter[$val]= "checked";
} else {
$ogfilter[$val]= "";
}
}
session::set("ogfilter", $ogfilter);
/* Set base */
if ($this->dn == "new"){
$ui = get_userinfo();
$this->base= dn2base(session::global_is_set("CurrentMainBase")?session::global_get("CurrentMainBase"):$ui->dn);
} else {
$this->base= preg_replace("/^[^,]+,".preg_quote(get_ou("ogroupRDN"), '/')."/i","",$this->dn);
/* Is this account a trustAccount? */
if ($this->is_account && isset($this->attrs['trustModel'])){
$this->trustModel= $this->attrs['trustModel'][0];
$this->was_trust_account= TRUE;
} else {
$this->was_trust_account= FALSE;
$this->trustModel= "";
}
$this->accessTo = array();
if ($this->is_account && isset($this->attrs['accessTo'])){
for ($i= 0; $i<$this->attrs['accessTo']['count']; $i++){
$tmp= $this->attrs['accessTo'][$i];
$this->accessTo[$tmp]= $tmp;
}
}
}
/* Detect all workstations, which are already assigned to an object group
- Those objects will be hidden in the add object dialog.
- Check() will complain if such a system is assigned to this object group.
*/
$base = $this->config->current['BASE'];
$res = get_list("(|(objectClass=gotoWorkstation)(objectClass=gotoTerminal))","none" ,
$base, array("dn"),GL_NO_ACL_CHECK|GL_SUBSEARCH);
$ws_dns = array();
foreach($res as $data){
$ws_dns[] = $data['dn'];
}
$res=get_list("(&(member=*)(objectClass=gosaGroupOfNames))","none",
$base, array("dn","member", "gosaGroupObjects"),GL_NO_ACL_CHECK|GL_SUBSEARCH);
$this->used_workstations = array();
foreach($res as $og){
if($og['dn'] == $this->dn) continue;
$test = array_intersect($ws_dns,$og['member']);
if(($og['gosaGroupObjects'] == "[W]" || $og['gosaGroupObjects'] == "[T]") && count($test)){
$this->used_workstations = array_merge($this->used_workstations,$test);
}
}
$this->orig_cn = $this->cn;
$this->orig_base = $this->base;
/* Get global filter config */
if (!session::is_set("sysfilter")){
$ui= get_userinfo();
$base= get_base_from_people($ui->dn);
$sysfilter= array( "depselect" => $base,
"regex" => "*");
session::set("sysfilter", $sysfilter);
}
/* Instanciate base selector */
$this->baseSelector= new baseSelector($this->get_allowed_bases(), $this->base);
$this->baseSelector->setSubmitButton(false);
$this->baseSelector->setHeight(300);
$this->baseSelector->update(true);
$this->reload();
}
function AddDelMembership($NewMember = false){
if($NewMember){
/* Add member and force reload */
$this->member[$NewMember]= $NewMember;
$this->reload();
$this->memberList[$NewMember]= $this->objcache[$NewMember];
unset ($this->objects[$NewMember]);
uasort ($this->memberList, 'sort_list');
reset ($this->memberList);
}else{
/* Delete objects from group */
if (isset($_POST['delete_membership']) && isset($_POST['members'])){
foreach ($_POST['members'] as $value){
$this->objects["$value"]= $this->memberList[$value];
unset ($this->memberList["$value"]);
unset ($this->member["$value"]);
uasort ($this->objects, 'sort_list');
reset ($this->objects);
}
$this->reload();
}
/* Add objects to group */
if (isset($_POST['objectSelect_save']) && $this->objectSelect instanceOf objectSelect){
$objects = $this->objectSelect->save();
$skipped = FALSE;
foreach($objects as $object){
$tmp = "";
foreach($this->memberList as $obj){
$tmp .= $obj['type'];
}
$type = $this->getObjectType($object);
$name= $this->getObjectName($object);
$dn = $object['dn'];
/* Fill array */
if (isset($object["description"][0])){
$object= array("text" => "$name [".$object["description"][0]."]", "type" => "$type");
} elseif (isset($object["uid"][0])) {
$object= array("text" => "$name [".$object["uid"][0]."]", "type" => "$type");
} else {
$object= array("text" => "$name", "type" => "$type");
}
if(preg_match("/T/",$tmp) && $type == "W"){
$skipped =TRUE;
}elseif(preg_match("/W/",$tmp) && $type == "T"){
$skipped =TRUE;
}else{
$this->memberList["$dn"]= $object;
$this->member["$dn"]= $dn;
uasort ($this->memberList, 'sort_list');
reset ($this->memberList);
}
}
if($skipped){
msg_dialog::display(_("Information"), _("You cannot combine terminals and workstations in one object group!"), INFO_DIALOG);
}
$this->objectSelect= FALSE;
$this->dialog= FALSE;
}
}
}
function execute()
{
/* Call parent execute */
plugin::execute();
if(!$this->view_logged){
$this->view_logged = TRUE;
new log("view","ogroups/".get_class($this),$this->dn);
}
/* Do we represent a valid group? */
if (!$this->is_account){
$display= " ".
msgPool::noValidExtension("object group")."";
return ($display);
}
/* Load templating engine */
$smarty= get_smarty();
$smarty->assign("usePrototype", "true");
$tmp = $this->plInfo();
foreach($tmp['plProvidedAcls'] as $name => $translation){
$smarty->assign($name."ACL",$this->getacl($name));
}
/***********
* Trusts
***********/
/* Add user workstation? */
if (isset($_POST["add_ws"])){
$this->trustSelect= new trustSelect($this->config,get_userinfo());
$this->dialog= TRUE;
}
// Add selected machines to trusted ones.
if (isset($_POST["add_ws_finish"]) && $this->trustSelect){
$trusts = $this->trustSelect->detectPostActions();
if(isset($trusts['targets'])){
$headpage = $this->trustSelect->getHeadpage();
foreach($trusts['targets'] as $id){
$attrs = $headpage->getEntry($id);
$this->accessTo[$attrs['cn'][0]]= $attrs['cn'][0];
}
ksort($this->accessTo);
$this->is_modified= TRUE;
}
$this->trustSelect= NULL;
$this->dialog= FALSE;
}
/* Remove user workstations? */
if (isset($_POST["delete_ws"]) && isset($_POST['workstation_list'])){
foreach($_POST['workstation_list'] as $name){
unset ($this->accessTo[$name]);
}
$this->is_modified= TRUE;
}
/* Add user workstation finished? */
if (isset($_POST["add_ws_cancel"])){
$this->trustSelect= NULL;
$this->dialog= FALSE;
}
/* Show ws dialog */
if ($this->trustSelect){
// Build up blocklist
session::set('filterBlacklist', array('cn' => array_values($this->accessTo)));
return($this->trustSelect->execute());
}
/***********
* Ende - Trusts
***********/
/* Dialog handling */
if(is_object($this->dialog) && $this->acl_is_moveable()){
/* Must be called before save_object */
$this->dialog->save_object();
if($this->dialog->isClosed()){
$this->dialog = false;
}elseif($this->dialog->isSelected()){
/* A new base was selected, check if it is a valid one */
$tmp = $this->get_allowed_bases();
if(isset($tmp[$this->dialog->isSelected()])){
$this->base = $this->dialog->isSelected();
}
$this->dialog= false;
}else{
return($this->dialog->execute());
}
}
/* Add objects? */
if (isset($_POST["edit_membership"])){
$this->objectSelect= new objectSelect($this->config, get_userinfo());
$this->dialog= TRUE;
}
/* Add objects finished? */
if (isset($_POST["objectSelect_cancel"])){
$this->objectSelect= FALSE;
$this->dialog= FALSE;
}
/* Manage object add dialog */
if ($this->objectSelect){
session::set('filterBlacklist', array('dn'=> $this->member));
return($this->objectSelect->execute());
}
/* Bases / Departments */
if ((isset($_POST['base'])) && ($this->acl_is_moveable())){
$this->base= $_POST['base'];
}
/* Assemble combine string */
if ($this->gosaGroupObjects == "[]"){
$smarty->assign("combinedObjects", _("none"));
} elseif (strlen($this->gosaGroupObjects) > 4){
$smarty->assign("combinedObjects", ""._("too many different objects!")."");
} else {
$conv= array( "U" => _("users"),
"G" => _("groups"),
"A" => _("applications"),
"D" => _("departments"),
"S" => _("servers"),
"W" => _("workstations"),
"O" => _("winstations"),
"T" => _("terminals"),
"F" => _("phones"),
"P" => _("printers"));
$type= preg_replace('/[\[\]]/', '', $this->gosaGroupObjects);
$p1= $conv[$type[0]];
error_reporting(0);
if (isset($type[1]) && preg_match('/[UGADSFOWTP]/', $type[1])){
$p2= $conv[$type[1]];
$smarty->assign("combinedObjects", sprintf("'%s' and '%s'", $p1, $p2));
} else {
$smarty->assign("combinedObjects", "$p1");
}
error_reporting(E_ALL | E_STRICT);
}
/* Assign variables */
$smarty->assign("base", $this->baseSelector->render());
$smarty->assign("members", $this->convert_list($this->memberList));
/* Objects have to be tuned... */
$smarty->assign("objects", $this->convert_list($this->objects));
/* Fields */
foreach ($this->attributes as $val){
$smarty->assign("$val", $this->$val);
}
/******
Trust account
******/
$smarty->assign("trusthide", " disabled ");
$smarty->assign("trustmodeACL", $this->getacl("trustModel"));
if ($this->trustModel == "fullaccess"){
$trustmode= 1;
// pervent double disable tag in html code, this will disturb our clean w3c html
$smarty->assign("trustmode", $this->getacl("trustModel"));
} elseif ($this->trustModel == "byhost"){
$trustmode= 2;
$smarty->assign("trusthide", "");
} else {
// pervent double disable tag in html code, this will disturb our clean w3c html
$smarty->assign("trustmode", $this->getacl("trustModel"));
$trustmode= 0;
}
$smarty->assign("trustmode", $trustmode);
$smarty->assign("trustmodes", array( 0 => _("disabled"), 1 => _("full access"),
2 => _("allow access to these hosts")));
$smarty->assign("workstations", $this->accessTo);
if((count($this->accessTo))==0){
$smarty->assign("emptyArrAccess",true);
}else{
$smarty->assign("emptyArrAccess",false);
}
/******
Ende - Trust account
******/
return ($smarty->fetch (get_template_path('generic.tpl', TRUE)));
}
/* Save data to object */
function save_object()
{
/* Save additional values for possible next step */
if (isset($_POST['ogroupedit'])){
/******
Trust account
******/
if($this->acl_is_writeable("trustModel")){
if (isset($_POST['trustmode'])){
$saved= $this->trustModel;
if ($_POST['trustmode'] == "1"){
$this->trustModel= "fullaccess";
} elseif ($_POST['trustmode'] == "2"){
$this->trustModel= "byhost";
} else {
$this->trustModel= "";
}
if ($this->trustModel != $saved){
$this->is_modified= TRUE;
}
}
}
/******
Ende Trust account
******/
/* Create a base backup and reset the
base directly after calling plugin::save_object();
Base will be set seperatly a few lines below */
$base_tmp = $this->base;
plugin::save_object();
$this->base = $base_tmp;
/* Refresh base */
if ($this->acl_is_moveable($this->base)){
if (!$this->baseSelector->update()) {
msg_dialog::display(_("Error"), msgPool::permMove(), ERROR_DIALOG);
}
if ($this->base != $this->baseSelector->getBase()) {
$this->base= $this->baseSelector->getBase();
$this->is_modified= TRUE;
}
}
}
}
/* (Re-)Load objects */
function reload()
{
/*###########
Variable initialisation
###########*/
$this->objects = array();
$this->ui = get_userinfo();
$filter = "";
$objectClasses = array();
$ogfilter = session::get("ogfilter");
$regex = $ogfilter['regex'];
$ldap= $this->config->get_ldap_link();
$ldap->cd ($ogfilter['dselect']);
/*###########
Generate Filter
###########*/
$p_f= array("accounts"=> array("OBJ"=>"user", "CLASS"=>"gosaAccount" ,
"DN"=> get_people_ou() ,"ACL" => "users"),
"groups" => array("OBJ"=>"group", "CLASS"=>"posixGroup" ,
"DN"=> get_groups_ou('ogroupRDN') ,"ACL" => "groups"),
"departments" => array("OBJ"=>"department", "CLASS"=>"gosaDepartment" ,
"DN"=> "" ,"ACL" => "department"),
"servers" => array("OBJ"=>"servgeneric", "CLASS"=>"goServer" ,
"DN"=> get_ou('serverRDN') ,"ACL" => "server"),
"workstations" => array("OBJ"=>"workgeneric", "CLASS"=>"gotoWorkstation",
"DN"=> get_ou('workstationRDN') ,"ACL" => "workstation"),
"winstations" => array("OBJ"=>"wingeneric", "CLASS"=>"opsiClient",
"DN"=> get_ou('SAMBAMACHINEACCOUNTRDN') ,"ACL" => "winstation"),
"terminals" => array("OBJ"=>"termgeneric", "CLASS"=>"gotoTerminal" ,
"DN"=> get_ou('terminalRDN') ,"ACL" => "terminal"),
"printers" => array("OBJ"=>"printgeneric", "CLASS"=>"gotoPrinter" ,
"DN"=> get_ou('printerRDN') ,"ACL" => "printer"),
"phones" => array("OBJ"=>"phoneGeneric", "CLASS"=>"goFonHardware" ,
"DN"=> get_ou('phoneRDN') ,"ACL" => "phone"));
/* Allow searching for applications, if we are not using release managed applications
*/
if(!$this->IsReleaseManagementActivated()){
$p_f[ "applications"] = array("OBJ"=>"application", "CLASS"=>"gosaApplication",
"DN"=> get_ou('applicationRDN') ,"ACL" => "application");
}
/*###########
Perform search for selected objectClasses & regex to fill list with objects
###########*/
$Get_list_flags = 0;
if($ogfilter['subtrees'] == "checked"){
$Get_list_flags |= GL_SUBSEARCH;
}
foreach($p_f as $post_name => $data){
if($ogfilter[$post_name] == "checked" && class_available($data['OBJ'])){
if($ogfilter['subtrees']){
$base = $ogfilter['dselect'];
}else{
$base = $data['DN'].$ogfilter['dselect'];
}
$filter = "(&(objectClass=".$data['CLASS'].")(|(uid=$regex)(cn=$regex)(ou=$regex)))";
$res = get_list($filter, $data['ACL'] , $base,
array("description", "objectClass", "sn", "givenName", "uid","ou","cn"),$Get_list_flags);
/* fetch results and append them to the list */
foreach($res as $attrs){
/* Skip workstations which are already assigned to an object group.
*/
if ($this->gosaGroupObjects == "[W]" || $this->gosaGroupObjects == "[T]"){
if(in_array($attrs['dn'],$this->used_workstations)){
continue;
}
}
$type= $this->getObjectType($attrs);
$name= $this->getObjectName($attrs);
/* Fill array */
if (isset($attrs["description"][0])){
$this->objects[$attrs["dn"]]= array("text" => "$name [".$attrs["description"][0]."]", "type" => "$type");
} elseif (isset($attrs["uid"][0])) {
$this->objects[$attrs["dn"]]= array("text" => "$name [".$attrs["uid"][0]."]", "type" => "$type");
} else {
$this->objects[$attrs["dn"]]= array("text" => "$name", "type" => "$type");
}
}
}
}
uasort ($this->objects, 'sort_list');
reset ($this->objects);
/*###########
Build member list and try to detect obsolete entries
###########*/
$this->memberList = array();
/* Walk through all single member entry */
foreach($this->member as $dn){
/* The dn for the current member can't be resolved
it seams that this entry was removed
*/
/* Try to resolv the entry again, if it still fails, display error msg */
$ldap->cat($dn, array("cn", "sn", "givenName", "ou", "description", "objectClass", "macAddress"));
/* It has failed, add entry with type flag I (Invalid)*/
if (!$ldap->success()){
$this->memberList[$dn]= array('text' => _("Non existing dn:")." ".LDAP::fix($dn),"type" => "I");
} else {
/* Append this entry to our all object list */
/* Fetch object */
$attrs= $ldap->fetch();
$type= $this->getObjectType($attrs);
$name= $this->getObjectName($attrs);
if (isset($attrs["description"][0])){
$this->objcache[$attrs["dn"]]= array("text" => "$name [".$attrs["description"][0]."]", "type" => "$type");
} elseif (isset($attrs["uid"][0])) {
$this->objcache[$attrs["dn"]]= array("text" => "$name [".$attrs["uid"][0]."]", "type" => "$type");
} else {
$this->objcache[$attrs["dn"]]= array("text" => "$name", "type" => "$type");
}
$this->objcache[$attrs["dn"]]['objectClass'] = $attrs['objectClass'];
if(isset($attrs['macAddress'][0])){
$this->objcache[$attrs["dn"]]['macAddress'] = $attrs['macAddress'][0];
}else{
$this->objcache[$attrs["dn"]]['macAddress'] = "";
}
if(isset($attrs['uid'])){
$this->objcache[$attrs["dn"]]['uid'] = $attrs['uid'];
}
/* Fill array */
if (isset($attrs["description"][0])){
$this->objects[$attrs["dn"]]= array("text" => "$name [".$attrs["description"][0]."]", "type" => "$type");
} else {
$this->objects[$attrs["dn"]]= array("text" => "$name", "type" => "$type");
}
$this->memberList[$dn]= $this->objects[$attrs["dn"]];
}
}
uasort ($this->memberList, 'sort_list');
reset ($this->memberList);
/* Assemble types of currently combined objects */
$objectTypes= "";
foreach ($this->memberList as $dn => $desc){
/* Invalid object? */
if ($desc['type'] == 'I'){
continue;
}
/* Fine. Add to list. */
if (!preg_match('/'.$desc['type'].'/', $objectTypes)){
$objectTypes.= $desc['type'];
}
}
$this->gosaGroupObjects= "[$objectTypes]";
}
function convert_list($input)
{
$temp= "";
$conv= array(
"Y" => "plugins/users/images/select_template.png",
"U" => "plugins/generic/images/head.png",
"G" => "plugins/groups/images/groups.png",
"A" => "plugins/ogroups/images/application.png",
"D" => "plugins/departments/images/department.png",
"S" => "plugins/ogroups/images/server.png",
"W" => "plugins/ogroups/images/workstation.png",
"O" => "plugins/ogroups/images/winstation.png",
"T" => "plugins/ogroups/images/terminal.png",
"F" => "plugins/ogroups/images/phone.png",
"P" => "plugins/ogroups/images/printer.png",
"I" => "images/false.png");
foreach ($input as $key => $value){
/* Generate output */
$temp.= "\n";
}
return ($temp);
}
function getObjectType($attrs)
{
$type= "I";
foreach(array(
"Y" => "gosaUserTemplate",
"U" => "gosaAccount",
"G" => "posixGroup",
"A" => "gosaApplication",
"D" => "gosaDepartment",
"S" => "goServer",
"W" => "gotoWorkstation",
"O" => "opsiClient",
"T" => "gotoTerminal",
"F" => "goFonHardware",
"P" => "gotoPrinter") as $index => $class){
if (in_array($class, $attrs['objectClass'])){
$type= $index;
break;
}
}
return ($type);
}
function getObjectName($attrs)
{
/* Person? */
$name ="";
if (in_array('gosaAccount', $attrs['objectClass'])){
if(isset($attrs['sn']) && isset($attrs['givenName'])){
$name= $attrs['sn'][0].", ".$attrs['givenName'][0];
} else {
$name= $attrs['uid'][0];
}
} else {
if(isset($attrs["cn"][0])) {
$name= $attrs['cn'][0];
} else {
$name= $attrs['ou'][0];
}
}
return ($name);
}
function check()
{
/* Call common method to give check the hook */
$message= plugin::check();
/* Permissions for that base? */
if ($this->base != ""){
$new_dn= 'cn='.$this->cn.','.get_ou('ogroupRDN').$this->base;
} else {
$new_dn= $this->dn;
}
/* Check if we have workstations assigned, that are already assigned to
another object group. */
if ($this->gosaGroupObjects == "[W]" || $this->gosaGroupObjects == "[T]" ) {
$test =array_intersect($this->used_workstations,$this->member);
if(count($test)){
$str = "";
foreach($test as $dn){
$str .= "