136 lines
4.8 KiB
PHP
136 lines
4.8 KiB
PHP
<?php
|
|
|
|
class LdapServer {
|
|
private $conn=NULL,$login,$base,$superadmin=false,$domains=array();
|
|
|
|
static public function getClassFilter() {
|
|
return '(ObjectClass='.static::$objectClass[0].')';
|
|
}
|
|
|
|
static public function getBaseDN($object, $name=NULL) {
|
|
$class = get_called_class();
|
|
if ($class == "LdapDomain") {
|
|
if (empty($name)) {
|
|
return static::$dn.'='.$object->getName().','.LdapServer::getBaseDN($object->server);
|
|
} else {
|
|
return static::$dn.'='.$name.','.LdapServer::getBaseDN($object);
|
|
}
|
|
} elseif ($class == "LdapAccount") {
|
|
if (empty($name)) {
|
|
return static::$dn.'='.$object->getUid().','.LdapDomain::getBaseDN($object->domain);
|
|
} else {
|
|
return static::$dn.'='.$name.','.LdapDomain::getBaseDN($object);
|
|
}
|
|
} elseif ($class == "LdapAlias") {
|
|
if (empty($name)) {
|
|
return static::$dn.'='.$object->getName().','.LdapDomain::getBaseDN($object->domain);
|
|
} else {
|
|
return static::$dn.'='.$name.','.LdapDomain::getBaseDN($object);
|
|
}
|
|
} else {
|
|
return $object->base;
|
|
}
|
|
}
|
|
|
|
public function __construct($login, $base, $adminDN, $adminPass, $uri='ldap://127.0.0.1') {
|
|
global $conf;
|
|
$this->login = $login;
|
|
$this->base = $base;
|
|
if (!$this->conn = ldap_connect($uri)) {
|
|
throw new Exception("Impossible de se connecter au serveur LDAP $uri");
|
|
}
|
|
if (!ldap_set_option($this->conn, LDAP_OPT_PROTOCOL_VERSION, 3)) {
|
|
throw new Exception("Impossible de modifier la version du protocole LDAP à 3");
|
|
}
|
|
if (!ldap_bind($this->conn, $adminDN, $adminPass)) {
|
|
throw new Exception("Authentification LDAP échoué !");
|
|
}
|
|
if (in_array($this->login, $conf['admin']['logins'])) {
|
|
$this->superadmin = true;
|
|
}
|
|
return $this;
|
|
}
|
|
|
|
public function login($password) {
|
|
$sr=ldap_search($this->conn, self::getBaseDN($this), "(&(uid=".$this->login.")(isAdmin=TRUE))");
|
|
$info = ldap_get_entries($this->conn, $sr);
|
|
if (!$info['count'] || !@ldap_bind($this->conn, $info[0]['dn'], $password)) {
|
|
throw new Exception("Échec de l'authentification, utilisateur ou mot de passe incorrect.");
|
|
}
|
|
}
|
|
|
|
public function getDomains() {
|
|
if (count($this->domains) == 0) {
|
|
if ($this->superadmin) {
|
|
$sr = ldap_search($this->conn, self::getBaseDN($this), LdapDomain::getClassFilter());
|
|
$objects = ldap_get_entries($this->conn, $sr);
|
|
foreach($objects as $object) {
|
|
if(!empty($object[LdapDomain::$dn][0])) {
|
|
$domain = new LdapDomain($this, $object[LdapDomain::$dn][0]);
|
|
array_push($this->domains, $domain);
|
|
}
|
|
}
|
|
sort($this->domains);
|
|
} else {
|
|
$auid = explode('@', $this->login);
|
|
$domain = new LdapDomain($this, $auid[1]);
|
|
array_push($this->domains, $domain);
|
|
}
|
|
}
|
|
return $this->domains;
|
|
}
|
|
|
|
public function addDomain($name,$active=false) {
|
|
$info[LdapDomain::$dn]=$name;
|
|
$info["objectclass"] = LdapDomain::$objectClass;
|
|
$info["isActive"] = ($active) ? 'TRUE' : 'FALSE';
|
|
$info["gidNumber"]= getfreegid();
|
|
|
|
if (!@ldap_add($this->conn, LdapDomain::getBaseDN($this, $name), $info)) {
|
|
$error = ldap_error($this->conn);
|
|
throw new Exception("Erreur dans l'ajout du domaine : $error");
|
|
}
|
|
}
|
|
|
|
public function delDomain($name) {
|
|
if ($domain = new LdapDomain($this, $name)) {
|
|
// Delete aliases
|
|
foreach($domain->getAlias() as $alias) {
|
|
$domain->delAlias($alias->getName());
|
|
}
|
|
// Delete accounts
|
|
foreach($domain->getAccounts() as $account) {
|
|
$domain->delAccount($account->getUid());
|
|
}
|
|
// Delete domain
|
|
$dn = LdapDomain::getBaseDN($this, $name);
|
|
if (!ldap_delete($this->conn, $dn)) {
|
|
$error = ldap_error($this->conn);
|
|
throw new Exception("Erreur dans la suppression du domaine $dn : $error");
|
|
}
|
|
} else {
|
|
throw new Exception("Ce domaine n'existe pas !");
|
|
}
|
|
}
|
|
|
|
public function isSuperAdmin() {
|
|
return $this->superadmin;
|
|
}
|
|
|
|
public function getLogin() {
|
|
return $this->login;
|
|
}
|
|
|
|
public function getDn() {
|
|
return $this->dn;
|
|
}
|
|
|
|
public function getConn() {
|
|
return $this->conn;
|
|
}
|
|
|
|
public function __destruct() {
|
|
ldap_unbind($this->conn);
|
|
}
|
|
}
|