index 4d8b18c8c325eb34c66232ecfd0012cff7400b34..ad109f53492a91a49ca0473ac76dd89612c6d9b6 100644 (file)
'MAIN' => array(),
'MENU' => array(), 'SERVICE' => array());
var $basedir= "";
+ var $config_version ="";
/* Keep a copy of the current deparment list */
var $departments= array();
function check_and_reload()
{
+ global $ui;
+
+ /* Check if class_location.inc has changed, this is the case
+ if we have installed or removed plugins.
+ */
+ if(session::is_set("class_location.inc:timestamp")){
+ $tmp = stat("../include/class_location.inc");
+ if($tmp['mtime'] != session::get("class_location.inc:timestamp")){
+ session::un_set("plist");
+ }
+ }
+ $tmp = stat("../include/class_location.inc");
+ session::set("class_location.inc:timestamp",$tmp['mtime']);
+
+
+
if($this->filename != "" && filemtime($this->filename) != $this->last_modified){
$this->config_found= FALSE;
xml_set_object($this->parser, $this);
xml_set_element_handler($this->parser, "tag_open", "tag_close");
$this->parse($this->filename);
- if(session::is_set('plist')){
- session::un_set('plist');
- }
- if(session::is_set('plug')){
- session::un_set('plug');
- }
- if(isset($_GET['plug'])){
- unset($_GET['plug']);
- }
+# if(session::is_set('plist')){
+# session::un_set('plist');
+# }
+# if(session::is_set('plug')){
+# session::un_set('plug');
+# }
+# if(isset($_GET['plug'])){
+# unset($_GET['plug']);
+# }
}
}
}
function tag_open($parser, $tag, $attrs)
- {
+ {
/* Save last and current tag for reference */
$this->tags[$this->level]= $tag;
$this->level++;
/* Trigger on CONF section */
if ($tag == 'CONF'){
$this->config_found= TRUE;
+ if(isset($attrs['CONFIG_VERSION'])){
+ $this->config_version = $attrs['CONFIG_VERSION'];
+ }
}
/* Return if we're not in config section */
case 'LOCATION':
if ($this->tags[$this->level-2] == 'MAIN'){
$name= $attrs['NAME'];
+ $name = preg_replace("/[<>\"']/","",$name);
+ $attrs['NAME'] = $name;
$this->currentLocation= $name;
/* Add location elements */
- $this->data['LOCATIONS'][$name]= $attrs;
- }
+ $this->data['LOCATIONS'][$name]= $attrs;
+ }
break;
/* Handle referral tags */
$this->level--;
}
+
+ function get_credentials($creds)
+ {
+ if (isset($_SERVER['HTTP_GOSA_KEY'])){
+ return (cred_decrypt($creds, $_SERVER['HTTP_GOSA_KEY']));
+ }
+ return ($creds);
+ }
+
+
function get_ldap_link($sizelimit= FALSE)
{
if($this->ldap === NULL || !is_resource($this->ldap->cid)){
/* Build new connection */
$this->ldap= ldap_init ($this->current['SERVER'], $this->current['BASE'],
- $this->get_admin_dn(), $this->get_admin_password());
+ $this->current['ADMIN'], $this->get_credentials($this->current['PASSWORD']));
/* Check for connection */
if (is_null($this->ldap) || (is_int($this->ldap) && $this->ldap == 0)){
function set_current($name)
{
$this->current= $this->data['LOCATIONS'][$name];
+
+ if (!isset($this->current['SAMBAVERSION'])){
+ $this->current['SAMBAVERSION']= 3;
+ }
if (!isset($this->current['PEOPLE'])){
$this->current['PEOPLE']= "ou=people";
}
/* Convert BASE to have escaped special characters */
$this->current['BASE']= @LDAP::convert($this->current['BASE']);
- /* Load server informations */
- $this->load_servers();
- }
-
-
- function update_credentials_from_config()
- {
/* Parse LDAP referral informations */
if (!isset($this->current['ADMIN']) || !isset($this->current['PASSWORD'])){
$url= $this->current['SERVER'];
$this->current['PASSWORD']= $referral['PASSWORD'];
}
- /* Bail out if problematic */
- if (!isset($this->current['ADMIN']) || !isset($this->current['PASSWORD'])){
- msg_dialog::display(_("Configuration error"), _("Cannot find any administrative LDAP credentials!"), FATAL_ERROR_DIALOG);
- exit;
- }
- }
-
-
- function encode_server_url($url, $base, $val)
- {
- return (preg_replace("/_+/", "_", "HTTP_".strtr(strtoupper($url."_".md5($base)."_$val"), ".-:/", "____")));
- }
-
-
- function get_admin_dn()
- {
- $enc= $this->encode_server_url($this->current['SERVER'], $this->current['BASE'], "ADMIN");
- /* Answer from http request */
- if (isset($_SERVER[$enc])){
- return $_SERVER[$enc];
- }
-
- /* Answer in old style for compatibility */
- $this->update_credentials_from_config();
- return $this->current['ADMIN'];
- }
-
-
- function get_admin_password()
- {
- $enc= $this->encode_server_url($this->current['SERVER'], $this->current['BASE'], "PASSWORD");
-
- /* Answer from http request */
- if (isset($_SERVER[$enc])){
- return $_SERVER[$enc];
- }
-
- /* Answer in old style for compatibility */
- $this->update_credentials_from_config();
- return $this->current['PASSWORD'];
+ /* Load server informations */
+ $this->load_servers();
}
-
function load_servers ()
{
/* Only perform actions if current is set */
if ($this->current['MAILMETHOD'] == ""){
$ldap->search ("(objectClass=goMailServer)", array('cn'));
$this->data['SERVERS']['IMAP']= array();
- error_reporting(0);
while ($attrs= $ldap->fetch()){
$name= $attrs['cn'][0];
- $this->data['SERVERS']['IMAP'][$name]= $name;
+ $this->data['SERVERS']['IMAP'][$name]=
+ array(
+ "server_dn" => $attrs['dn'],
+ "connect" => "",
+ "admin" => "",
+ "password" => "",
+ "sieve_server"=> "",
+ "sieve_option"=> "",
+ "sieve_port" => "");
}
- error_reporting(E_ALL);
} else {
- $ldap->search ("(objectClass=goImapServer)", array('goImapName', 'goImapConnect', 'goImapAdmin', 'goImapPassword',
+ $ldap->search ("(&(objectClass=goImapServer)(goImapSieveServer=*))",
+ array('goImapName', 'goImapConnect', 'goImapAdmin', 'goImapPassword',
'goImapSieveServer', 'goImapSievePort'));
$this->data['SERVERS']['IMAP']= array();
- error_reporting(0);
+
while ($attrs= $ldap->fetch()){
- $name= $attrs['goImapName'][0];
- $this->data['SERVERS']['IMAP'][$name]= array( "connect" => $attrs['goImapConnect'][0],
- "admin" => $attrs['goImapAdmin'][0],
- "password" => $attrs['goImapPassword'][0],
- "sieve_server" => $attrs['goImapSieveServer'][0],
- "sieve_port" => $attrs['goImapSievePort'][0]);
+
+ /* Check if the given goImapSieveServer is in the new style "{cn:port/option}"
+ or the old style just "cn".
+ */
+ if(preg_match("/\{/",$attrs['goImapSieveServer'][0])){
+ $sieve_server = preg_replace("/^\{([^:]*).*$/","\\1",$attrs['goImapSieveServer'][0]);
+ $sieve_option = preg_replace("/^[^:]*[^\/]*+\/(.*)\}$/","\\1",$attrs['goImapSieveServer'][0]);
+ }else{
+ $sieve_server = $attrs['goImapSieveServer'][0];
+ $sieve_option = "";
+ }
+
+ $pwd = $attrs['goImapPassword'][0];
+ $imap_admin = $attrs['goImapAdmin'][0];
+ $imap_connect = $attrs['goImapConnect'][0];
+ $imap_server = $attrs['goImapName'][0];
+ $sieve_port = $attrs['goImapSievePort'][0];
+
+ $this->data['SERVERS']['IMAP'][$imap_server]=
+ array(
+ "server_dn" => $attrs['dn'],
+ "connect" => $imap_connect,
+ "admin" => $imap_admin,
+ "password" => $pwd,
+ "sieve_server"=> $sieve_server,
+ "sieve_option"=> $sieve_option,
+ "sieve_port" => $sieve_port);
}
- error_reporting(E_ALL);
}
/* Get kerberos server. FIXME: only one is supported currently */
$ldap->cd ($this->current['BASE']);
- $ldap->search ("(objectClass=goKrbServer)");
+ $ldap->search ("(&(goKrbRealm=*)(goKrbAdmin=*)(objectClass=goKrbServer))");
if ($ldap->count()){
$attrs= $ldap->fetch();
$this->data['SERVERS']['KERBEROS']= array( 'SERVER' => $attrs['cn'][0],
- 'REALM' => $attrs['goKrbRealm'][0]);
+ 'REALM' => $attrs['goKrbRealm'][0],
+ 'ADMIN' => $attrs['goKrbAdmin'][0]);
}
/* Get cups server. FIXME: only one is supported currently */
$result['/']= $this->current['BASE'];
$this->tdepartments= array();
+ /* Get all department types from department Management, to be able detect the department type.
+ -It is possible that differnty department types have the same name,
+ in this case we have to mark the department name to be able to differentiate.
+ (e.g l=Name or o=Name)
+ */
+ $types = departmentManagement::get_support_departments();
+
+ /* Create a list of attributes to fetch */
+ $ldap_values = array("objectClass","gosaUnitTag");
+ $filter = "";
+ foreach($types as $type){
+ $ldap_values[] = $type['ATTR'];
+ $filter .= "(objectClass=".$type['OC'].")";
+ }
+ $filter = "(&(objectClass=gosaDepartment)(|".$filter."))";
+
/* Get list of department objects */
$ldap= $this->get_ldap_link();
$ldap->cd ($this->current['BASE']);
- $ldap->search ("(objectClass=gosaDepartment)", array("ou", "objectClass", "gosaUnitTag"));
+ $ldap->search ($filter, $ldap_values);
while ($attrs= $ldap->fetch()){
+
+ /* Detect department type */
+ $type_data = array();
+ foreach($types as $t => $data){
+ if(in_array($data['OC'],$attrs['objectClass'])){
+ $type_data = $data;
+ break;
+ }
+ }
+
+ /* Unknown department type -> skip
+ */
+ if(!count($type_data)) continue;
+
$dn= $ldap->getDN();
$this->tdepartments[$dn]= "";
continue;
}
+ $c_dn = convert_department_dn($dn)." (".$type_data['ATTR'].")";
+
/* Only assign non-root departments */
if ($dn != $result['/']){
- $result[convert_department_dn($dn)]= $dn;
+ $result[$c_dn]= $dn;
}
}
}
}
- /* remove base from dn */
- $val2 = str_replace($base,"",$val);
-
- /* Get every single ou */
- $str = preg_replace("/ou=/","|ou=",$val2);
- $elements = array_reverse(split("\|",$str));
-
- /* Save last array position */
- $last = &$arr;
-
- /* Get array depth */
- $cnt = count($elements);
+ /* Split dn into single department pieces.
+ */
+ $elements = array_reverse(split(",",preg_replace("/".normalizePreg($base)."$/","",$val)));
/* Add last ou element of current dn to our array */
+ $last = &$arr;
foreach($elements as $key => $ele){
- /* skip enpty */
+ /* skip empty */
if(empty($ele)) continue;
/* Extract department name */
- $elestr = preg_replace("/^ou=/","", $ele);
- $elestr = preg_replace("/,$/","",$elestr);
+ $elestr = trim(preg_replace("/^[^=]*+=/","", $ele),",");
+ $nameA = trim(preg_replace("/=.*$/","", $ele),",");
+ if($nameA != "ou"){
+ $nameA = " (".$nameA.")";
+ }else{
+ $nameA = "";
+ }
+
/* Add to array */
- if($key == ($cnt-2)){
- $last[$elestr]['ENTRY'] = $val;
+ if($key == (count($elements)-1)){
+ $last[$elestr.$nameA]['ENTRY'] = $val;
}
/* Set next array appending position */
- $last = &$last[$elestr]['SUB'];
+ $last = &$last[$elestr.$nameA]['SUB'];
}
}
+
/* Add base entry */
$ret["/"]["ENTRY"] = $base;
$ret["/"]["SUB"] = $arr;
-
$this->idepartments= $this->generateDepartmentArray($ret,-1,$max_size);
}
/* Creates display friendly output from make_idepartments */
- function generateDepartmentArray($arr,$depth = -1,$max_size){
+ function generateDepartmentArray($arr,$depth = -1,$max_size)
+ {
$ret = array();
$depth ++;
}
/* Fix name, if it contains a replace tag */
- $name= @LDAP::fix($name);
+ $name= preg_replace('/\\\\,/', ',', @LDAP::fix($name));
/* Check if current name is too long, then cut it */
if(mb_strlen($name, 'UTF-8')> $max_size){
{
global $config;
$return = array();
+ $ui = get_userinfo();
$base = $config->current['BASE'];
$res= get_sub_list("(&(objectClass=goShareServer)(goExportEntry=*))", "server",
- get_ou("serverou"), $base,array("goExportEntry","cn"),GL_NONE);
+ get_ou("serverou"), $base,array("goExportEntry","cn"),GL_NONE | GL_NO_ACL_CHECK);
foreach($res as $entry){
+
+ $acl = $ui->get_permissions($entry['dn'],"server","");
if(isset($entry['goExportEntry']['count'])){
unset($entry['goExportEntry']['count']);
}
foreach($entry['goExportEntry'] as $share){
$a_share = split("\|",$share);
$sharename = $a_share[0];
- $return[$entry['cn'][0]."|".$sharename] = $entry['cn'][0]." [".$sharename."]";
+ $data= array();
+ $data['NAME'] = $sharename;
+ $data['ACL'] = $acl;
+ $data['SERVER'] = $entry['cn']['0'];
+ $data['SHARE'] = $sharename;
+ $data['DISPLAY']= $entry['cn'][0]." [".$sharename."]";
+ $return[$entry['cn'][0]."|".$sharename] = $data;
}
}
return($return);
}
+ function get_cfg_value($name, $default= "") {
+ $name= strtoupper($name);
+
+ /* Check if we have a current value for $name */
+ if (isset($this->current[$name])){
+ return ($this->current[$name]);
+ }
+
+ /* Check if we have a global value for $name */
+ if (isset($this->data["MAIN"][$name])){
+ return ($this->data["MAIN"][$name]);
+ }
+
+ return ($default);
+ }
+
+
+ function check_config_version()
+ {
+ /* Skip check, if we've already mentioned the mismatch
+ */
+ if(session::is_set("LastChecked") && session::get("LastChecked") == $this->config_version) return;
+
+ /* Remember last checked version
+ */
+ session::set("LastChecked",$this->config_version);
+
+ $current = md5(file_get_contents(CONFIG_TEMPLATE_DIR."/gosa.conf"));
+
+ /* Check contributed config version and current config version.
+ */
+ if($this->config_version != $current && !empty($this->config_version)){
+ msg_dialog::display(_("Configuration"),_("The configuration file you are using seems to be outdated. Please move the GOsa configuration file away to run the GOsa setup again."));
+ }
+ }
+
+
/* On debian systems the session files are deleted with
* a cronjob, which detects all files older than specified
* in php.ini:'session.gc_maxlifetime' and removes them.