2013-08-20 16:23:49 +04:00
|
|
|
<?php
|
|
|
|
/**
|
2016-07-21 17:49:16 +03:00
|
|
|
* @copyright Copyright (c) 2016, ownCloud, Inc.
|
|
|
|
*
|
2016-05-26 20:56:05 +03:00
|
|
|
* @author Arthur Schiwon <blizzz@arthur-schiwon.de>
|
2016-07-21 17:49:16 +03:00
|
|
|
* @author Joas Schilling <coding@schilljs.com>
|
2015-03-26 13:44:34 +03:00
|
|
|
* @author Jörn Friedrich Dreyer <jfd@butonic.de>
|
2016-05-26 20:56:05 +03:00
|
|
|
* @author Lukas Reschke <lukas@statuscode.ch>
|
2015-03-26 13:44:34 +03:00
|
|
|
* @author Morris Jobke <hey@morrisjobke.de>
|
2016-01-12 17:02:16 +03:00
|
|
|
* @author Robin McCorkell <robin@mccorkell.me.uk>
|
2013-08-20 16:23:49 +04:00
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
* @license AGPL-3.0
|
2013-08-20 16:23:49 +04:00
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
* This code is free software: you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU Affero General Public License, version 3,
|
|
|
|
* as published by the Free Software Foundation.
|
2013-08-20 16:23:49 +04:00
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
* This program is distributed in the hope that it will be useful,
|
2013-08-20 16:23:49 +04:00
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
2015-03-26 13:44:34 +03:00
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU Affero General Public License for more details.
|
2013-08-20 16:23:49 +04:00
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
* You should have received a copy of the GNU Affero General Public License, version 3,
|
|
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>
|
2013-08-20 16:23:49 +04:00
|
|
|
*
|
|
|
|
*/
|
2015-02-26 13:37:37 +03:00
|
|
|
|
2016-05-12 17:25:14 +03:00
|
|
|
namespace OCA\User_LDAP;
|
2013-08-20 16:23:49 +04:00
|
|
|
|
|
|
|
interface ILDAPWrapper {
|
|
|
|
|
|
|
|
//LDAP functions in use
|
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Bind to LDAP directory
|
2014-02-06 19:30:58 +04:00
|
|
|
* @param resource $link LDAP link resource
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param string $dn an RDN to log in with
|
|
|
|
* @param string $password the password
|
|
|
|
* @return bool true on success, false otherwise
|
2013-08-20 16:23:49 +04:00
|
|
|
*
|
|
|
|
* with $dn and $password as null a anonymous bind is attempted.
|
|
|
|
*/
|
|
|
|
public function bind($link, $dn, $password);
|
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* connect to an LDAP server
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param string $host The host to connect to
|
|
|
|
* @param string $port The port to connect to
|
|
|
|
* @return mixed a link resource on success, otherwise false
|
2013-08-20 16:23:49 +04:00
|
|
|
*/
|
|
|
|
public function connect($host, $port);
|
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Send LDAP pagination control
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @param int $pageSize number of results per page
|
|
|
|
* @param bool $isCritical Indicates whether the pagination is critical of not.
|
2014-10-01 13:55:53 +04:00
|
|
|
* @param string $cookie structure sent by LDAP server
|
2014-05-13 15:29:25 +04:00
|
|
|
* @return bool true on success, false otherwise
|
2013-08-20 16:23:49 +04:00
|
|
|
*/
|
2014-05-11 17:17:27 +04:00
|
|
|
public function controlPagedResult($link, $pageSize, $isCritical, $cookie);
|
2013-08-20 16:23:49 +04:00
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Retrieve the LDAP pagination cookie
|
2014-05-13 15:29:25 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @param resource $result LDAP result resource
|
|
|
|
* @param string $cookie structure sent by LDAP server
|
2014-05-11 17:17:27 +04:00
|
|
|
* @return bool true on success, false otherwise
|
2013-08-20 16:23:49 +04:00
|
|
|
*
|
|
|
|
* Corresponds to ldap_control_paged_result_response
|
|
|
|
*/
|
|
|
|
public function controlPagedResultResponse($link, $result, &$cookie);
|
|
|
|
|
2013-09-30 01:53:14 +04:00
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Count the number of entries in a search
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @param resource $result LDAP result resource
|
|
|
|
* @return int|false number of results on success, false otherwise
|
2013-09-30 01:53:14 +04:00
|
|
|
*/
|
|
|
|
public function countEntries($link, $result);
|
|
|
|
|
2013-08-20 16:23:49 +04:00
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Return the LDAP error number of the last LDAP command
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @return string error message as string
|
2013-08-20 16:23:49 +04:00
|
|
|
*/
|
|
|
|
public function errno($link);
|
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Return the LDAP error message of the last LDAP command
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @return int error code as integer
|
2013-08-20 16:23:49 +04:00
|
|
|
*/
|
|
|
|
public function error($link);
|
|
|
|
|
2014-07-02 00:02:41 +04:00
|
|
|
/**
|
|
|
|
* Splits DN into its component parts
|
|
|
|
* @param string $dn
|
|
|
|
* @param int @withAttrib
|
|
|
|
* @return array|false
|
|
|
|
* @link http://www.php.net/manual/en/function.ldap-explode-dn.php
|
|
|
|
*/
|
|
|
|
public function explodeDN($dn, $withAttrib);
|
|
|
|
|
2013-08-20 16:23:49 +04:00
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Return first result id
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @param resource $result LDAP result resource
|
|
|
|
* @return Resource an LDAP search result resource
|
2013-08-20 16:23:49 +04:00
|
|
|
* */
|
|
|
|
public function firstEntry($link, $result);
|
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Get attributes from a search result entry
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @param resource $result LDAP result resource
|
2013-08-20 16:23:49 +04:00
|
|
|
* @return array containing the results, false on error
|
|
|
|
* */
|
|
|
|
public function getAttributes($link, $result);
|
|
|
|
|
2013-10-04 18:33:37 +04:00
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Get the DN of a result entry
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @param resource $result LDAP result resource
|
2013-10-04 18:33:37 +04:00
|
|
|
* @return string containing the DN, false on error
|
|
|
|
*/
|
|
|
|
public function getDN($link, $result);
|
|
|
|
|
2013-08-20 16:23:49 +04:00
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Get all result entries
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @param resource $result LDAP result resource
|
2013-08-20 16:23:49 +04:00
|
|
|
* @return array containing the results, false on error
|
|
|
|
*/
|
|
|
|
public function getEntries($link, $result);
|
|
|
|
|
2013-10-04 18:33:37 +04:00
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Return next result id
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
2014-02-06 19:30:58 +04:00
|
|
|
* @param resource $result LDAP entry result resource
|
2014-05-11 17:17:27 +04:00
|
|
|
* @return resource an LDAP search result resource
|
2013-10-04 18:33:37 +04:00
|
|
|
* */
|
|
|
|
public function nextEntry($link, $result);
|
|
|
|
|
2013-08-20 16:23:49 +04:00
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Read an entry
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @param array $baseDN The DN of the entry to read from
|
|
|
|
* @param string $filter An LDAP filter
|
|
|
|
* @param array $attr array of the attributes to read
|
|
|
|
* @return resource an LDAP search result resource
|
2013-08-20 16:23:49 +04:00
|
|
|
*/
|
|
|
|
public function read($link, $baseDN, $filter, $attr);
|
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Search LDAP tree
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @param string $baseDN The DN of the entry to read from
|
|
|
|
* @param string $filter An LDAP filter
|
|
|
|
* @param array $attr array of the attributes to read
|
|
|
|
* @param int $attrsOnly optional, 1 if only attribute types shall be returned
|
|
|
|
* @param int $limit optional, limits the result entries
|
|
|
|
* @return resource|false an LDAP search result resource, false on error
|
2013-08-20 16:23:49 +04:00
|
|
|
*/
|
2014-05-11 17:17:27 +04:00
|
|
|
public function search($link, $baseDN, $filter, $attr, $attrsOnly = 0, $limit = 0);
|
2016-08-30 12:43:29 +03:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Replace the value of a userPassword by $password
|
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @param string $userDN the DN of the user whose password is to be replaced
|
|
|
|
* @param string $password the new value for the userPassword
|
|
|
|
* @return bool true on success, false otherwise
|
|
|
|
*/
|
|
|
|
public function modReplace($link, $userDN, $password);
|
2013-08-20 16:23:49 +04:00
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Sets the value of the specified option to be $value
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $link LDAP link resource
|
|
|
|
* @param string $option a defined LDAP Server option
|
|
|
|
* @param int $value the new value for the option
|
|
|
|
* @return bool true on success, false otherwise
|
2013-08-20 16:23:49 +04:00
|
|
|
*/
|
|
|
|
public function setOption($link, $option, $value);
|
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* establish Start TLS
|
2014-05-15 16:12:17 +04:00
|
|
|
* @param resource $link LDAP link resource
|
2014-05-11 17:17:27 +04:00
|
|
|
* @return bool true on success, false otherwise
|
2013-08-20 16:23:49 +04:00
|
|
|
*/
|
|
|
|
public function startTls($link);
|
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Unbind from LDAP directory
|
2014-02-06 19:30:58 +04:00
|
|
|
* @param resource $link LDAP link resource
|
2014-05-11 17:17:27 +04:00
|
|
|
* @return bool true on success, false otherwise
|
2013-08-20 16:23:49 +04:00
|
|
|
*/
|
|
|
|
public function unbind($link);
|
|
|
|
|
2017-04-12 07:16:27 +03:00
|
|
|
//additional required methods in Nextcloud
|
2013-08-20 16:23:49 +04:00
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Checks whether the server supports LDAP
|
2014-05-11 17:17:27 +04:00
|
|
|
* @return bool true if it the case, false otherwise
|
2013-08-20 16:23:49 +04:00
|
|
|
* */
|
|
|
|
public function areLDAPFunctionsAvailable();
|
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Checks whether PHP supports LDAP Paged Results
|
2014-05-11 17:17:27 +04:00
|
|
|
* @return bool true if it the case, false otherwise
|
2013-08-20 16:23:49 +04:00
|
|
|
* */
|
|
|
|
public function hasPagedResultSupport();
|
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Checks whether the submitted parameter is a resource
|
2014-05-11 17:17:27 +04:00
|
|
|
* @param resource $resource the resource variable to check
|
|
|
|
* @return bool true if it is a resource, false otherwise
|
2013-08-20 16:23:49 +04:00
|
|
|
*/
|
|
|
|
public function isResource($resource);
|
|
|
|
|
2013-09-11 21:42:08 +04:00
|
|
|
}
|