2013-01-24 16:01:43 +04:00
|
|
|
|
<?php
|
|
|
|
|
/**
|
2016-07-21 17:49:16 +03:00
|
|
|
|
* @copyright Copyright (c) 2016, ownCloud, Inc.
|
|
|
|
|
*
|
2016-05-26 20:56:05 +03:00
|
|
|
|
* @author Arthur Schiwon <blizzz@arthur-schiwon.de>
|
2015-03-26 13:44:34 +03:00
|
|
|
|
* @author Brice Maron <brice@bmaron.net>
|
2016-07-21 17:49:16 +03:00
|
|
|
|
* @author Joas Schilling <coding@schilljs.com>
|
2015-03-26 13:44:34 +03:00
|
|
|
|
* @author Jörn Friedrich Dreyer <jfd@butonic.de>
|
2016-05-26 20:56:05 +03:00
|
|
|
|
* @author Lukas Reschke <lukas@statuscode.ch>
|
2015-03-26 13:44:34 +03:00
|
|
|
|
* @author Morris Jobke <hey@morrisjobke.de>
|
2017-11-06 17:56:42 +03:00
|
|
|
|
* @author Roeland Jago Douma <roeland@famdouma.nl>
|
|
|
|
|
* @author Roger Szabo <roger.szabo@web.de>
|
|
|
|
|
* @author root <root@localhost.localdomain>
|
2015-03-26 13:44:34 +03:00
|
|
|
|
* @author Thomas Müller <thomas.mueller@tmit.eu>
|
|
|
|
|
* @author Vincent Petry <pvince81@owncloud.com>
|
2017-11-06 17:56:42 +03:00
|
|
|
|
* @author Vinicius Cubas Brand <vinicius@eita.org.br>
|
2013-01-24 16:01:43 +04:00
|
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
|
* @license AGPL-3.0
|
2013-01-24 16:01:43 +04:00
|
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
|
* This code is free software: you can redistribute it and/or modify
|
|
|
|
|
* it under the terms of the GNU Affero General Public License, version 3,
|
|
|
|
|
* as published by the Free Software Foundation.
|
2013-01-24 16:01:43 +04:00
|
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
2013-01-24 16:01:43 +04:00
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
2015-03-26 13:44:34 +03:00
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
|
* GNU Affero General Public License for more details.
|
2013-01-24 16:01:43 +04:00
|
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
|
* You should have received a copy of the GNU Affero General Public License, version 3,
|
|
|
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>
|
2013-01-24 16:01:43 +04:00
|
|
|
|
*
|
|
|
|
|
*/
|
2015-02-26 13:37:37 +03:00
|
|
|
|
|
2016-05-12 17:28:21 +03:00
|
|
|
|
namespace OCA\User_LDAP;
|
2015-02-20 15:09:33 +03:00
|
|
|
|
|
2016-10-10 11:18:18 +03:00
|
|
|
|
use OCP\IConfig;
|
|
|
|
|
|
2013-01-24 16:01:43 +04:00
|
|
|
|
class Helper {
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2016-10-10 11:18:18 +03:00
|
|
|
|
/** @var IConfig */
|
|
|
|
|
private $config;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Helper constructor.
|
|
|
|
|
*
|
|
|
|
|
* @param IConfig $config
|
|
|
|
|
*/
|
|
|
|
|
public function __construct(IConfig $config) {
|
|
|
|
|
$this->config = $config;
|
|
|
|
|
}
|
|
|
|
|
|
2013-01-24 16:01:43 +04:00
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
|
* returns prefixes for each saved LDAP/AD server configuration.
|
2014-05-11 17:17:27 +04:00
|
|
|
|
* @param bool $activeConfigurations optional, whether only active configuration shall be
|
2013-01-25 01:39:05 +04:00
|
|
|
|
* retrieved, defaults to false
|
2013-01-24 16:01:43 +04:00
|
|
|
|
* @return array with a list of the available prefixes
|
2013-01-24 17:11:53 +04:00
|
|
|
|
*
|
2013-01-24 16:01:43 +04:00
|
|
|
|
* Configuration prefixes are used to set up configurations for n LDAP or
|
2013-01-24 17:11:53 +04:00
|
|
|
|
* AD servers. Since configuration is stored in the database, table
|
2013-01-24 16:01:43 +04:00
|
|
|
|
* appconfig under appid user_ldap, the common identifiers in column
|
|
|
|
|
* 'configkey' have a prefix. The prefix for the very first server
|
|
|
|
|
* configuration is empty.
|
|
|
|
|
* Configkey Examples:
|
2013-01-31 20:53:01 +04:00
|
|
|
|
* Server 1: ldap_login_filter
|
2013-01-24 16:01:43 +04:00
|
|
|
|
* Server 2: s1_ldap_login_filter
|
|
|
|
|
* Server 3: s2_ldap_login_filter
|
2013-01-24 17:11:53 +04:00
|
|
|
|
*
|
|
|
|
|
* The prefix needs to be passed to the constructor of Connection class,
|
2013-01-24 16:01:43 +04:00
|
|
|
|
* except the default (first) server shall be connected to.
|
2013-01-24 17:11:53 +04:00
|
|
|
|
*
|
2013-01-24 16:01:43 +04:00
|
|
|
|
*/
|
2014-08-21 19:59:13 +04:00
|
|
|
|
public function getServerConfigurationPrefixes($activeConfigurations = false) {
|
2013-01-25 01:39:05 +04:00
|
|
|
|
$referenceConfigkey = 'ldap_configuration_active';
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2016-10-10 11:51:13 +03:00
|
|
|
|
$keys = $this->getServersConfig($referenceConfigkey);
|
2014-01-21 14:56:34 +04:00
|
|
|
|
|
2016-10-08 15:46:00 +03:00
|
|
|
|
$prefixes = [];
|
|
|
|
|
foreach ($keys as $key) {
|
2016-10-10 11:51:13 +03:00
|
|
|
|
if ($activeConfigurations && $this->config->getAppValue('user_ldap', $key, '0') !== '1') {
|
|
|
|
|
continue;
|
2016-10-08 15:46:00 +03:00
|
|
|
|
}
|
2016-10-10 11:51:13 +03:00
|
|
|
|
|
|
|
|
|
$len = strlen($key) - strlen($referenceConfigkey);
|
|
|
|
|
$prefixes[] = substr($key, 0, $len);
|
2013-01-24 16:01:43 +04:00
|
|
|
|
}
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2013-01-24 16:01:43 +04:00
|
|
|
|
return $prefixes;
|
|
|
|
|
}
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2013-08-15 17:55:06 +04:00
|
|
|
|
/**
|
|
|
|
|
*
|
2014-05-19 19:50:53 +04:00
|
|
|
|
* determines the host for every configured connection
|
2014-05-11 17:17:27 +04:00
|
|
|
|
* @return array an array with configprefix as keys
|
2013-08-15 17:55:06 +04:00
|
|
|
|
*
|
|
|
|
|
*/
|
2014-08-21 19:59:13 +04:00
|
|
|
|
public function getServerConfigurationHosts() {
|
2013-08-15 17:55:06 +04:00
|
|
|
|
$referenceConfigkey = 'ldap_host';
|
|
|
|
|
|
2016-10-10 11:51:13 +03:00
|
|
|
|
$keys = $this->getServersConfig($referenceConfigkey);
|
|
|
|
|
|
2013-08-15 17:55:06 +04:00
|
|
|
|
$result = array();
|
2016-10-10 11:51:13 +03:00
|
|
|
|
foreach($keys as $key) {
|
|
|
|
|
$len = strlen($key) - strlen($referenceConfigkey);
|
|
|
|
|
$prefix = substr($key, 0, $len);
|
|
|
|
|
$result[$prefix] = $this->config->getAppValue('user_ldap', $key);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return $result;
|
|
|
|
|
}
|
|
|
|
|
|
2017-01-18 23:13:23 +03:00
|
|
|
|
/**
|
|
|
|
|
* return the next available configuration prefix
|
|
|
|
|
*
|
|
|
|
|
* @return string
|
|
|
|
|
*/
|
|
|
|
|
public function getNextServerConfigurationPrefix() {
|
|
|
|
|
$serverConnections = $this->getServerConfigurationPrefixes();
|
|
|
|
|
|
|
|
|
|
if(count($serverConnections) === 0) {
|
|
|
|
|
return 's01';
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
sort($serverConnections);
|
|
|
|
|
$lastKey = array_pop($serverConnections);
|
|
|
|
|
$lastNumber = intval(str_replace('s', '', $lastKey));
|
|
|
|
|
$nextPrefix = 's' . str_pad($lastNumber + 1, 2, '0', STR_PAD_LEFT);
|
|
|
|
|
return $nextPrefix;
|
|
|
|
|
}
|
|
|
|
|
|
2016-10-10 11:51:13 +03:00
|
|
|
|
private function getServersConfig($value) {
|
|
|
|
|
$regex = '/' . $value . '$/S';
|
2013-08-15 17:55:06 +04:00
|
|
|
|
|
2016-10-10 11:51:13 +03:00
|
|
|
|
$keys = $this->config->getAppKeys('user_ldap');
|
|
|
|
|
$result = [];
|
|
|
|
|
foreach ($keys as $key) {
|
|
|
|
|
if (preg_match($regex, $key) === 1) {
|
|
|
|
|
$result[] = $key;
|
|
|
|
|
}
|
2013-08-15 17:55:06 +04:00
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return $result;
|
|
|
|
|
}
|
|
|
|
|
|
2013-01-30 06:44:11 +04:00
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
|
* deletes a given saved LDAP/AD server configuration.
|
2014-05-11 17:17:27 +04:00
|
|
|
|
* @param string $prefix the configuration prefix of the config to delete
|
2013-01-31 20:53:01 +04:00
|
|
|
|
* @return bool true on success, false otherwise
|
2013-01-30 06:44:11 +04:00
|
|
|
|
*/
|
2014-08-21 19:59:13 +04:00
|
|
|
|
public function deleteServerConfiguration($prefix) {
|
2013-01-24 17:11:53 +04:00
|
|
|
|
if(!in_array($prefix, self::getServerConfigurationPrefixes())) {
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
2014-02-14 18:34:22 +04:00
|
|
|
|
$saveOtherConfigurations = '';
|
|
|
|
|
if(empty($prefix)) {
|
2014-03-03 19:15:23 +04:00
|
|
|
|
$saveOtherConfigurations = 'AND `configkey` NOT LIKE \'s%\'';
|
2014-02-14 18:34:22 +04:00
|
|
|
|
}
|
|
|
|
|
|
2013-01-24 17:11:53 +04:00
|
|
|
|
$query = \OCP\DB::prepare('
|
|
|
|
|
DELETE
|
|
|
|
|
FROM `*PREFIX*appconfig`
|
|
|
|
|
WHERE `configkey` LIKE ?
|
2014-02-14 18:34:22 +04:00
|
|
|
|
'.$saveOtherConfigurations.'
|
2013-03-02 19:26:15 +04:00
|
|
|
|
AND `appid` = \'user_ldap\'
|
|
|
|
|
AND `configkey` NOT IN (\'enabled\', \'installed_version\', \'types\', \'bgjUpdateGroupsLastRun\')
|
2013-01-24 17:11:53 +04:00
|
|
|
|
');
|
2013-06-20 16:47:12 +04:00
|
|
|
|
$delRows = $query->execute(array($prefix.'%'));
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2013-06-20 16:47:12 +04:00
|
|
|
|
if(\OCP\DB::isError($delRows)) {
|
2013-01-24 17:11:53 +04:00
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
2013-06-20 16:47:12 +04:00
|
|
|
|
if($delRows === 0) {
|
2013-01-24 17:11:53 +04:00
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return true;
|
|
|
|
|
}
|
2013-05-08 19:47:07 +04:00
|
|
|
|
|
2014-08-21 19:59:13 +04:00
|
|
|
|
/**
|
|
|
|
|
* checks whether there is one or more disabled LDAP configurations
|
|
|
|
|
* @throws \Exception
|
|
|
|
|
* @return bool
|
|
|
|
|
*/
|
|
|
|
|
public function haveDisabledConfigurations() {
|
|
|
|
|
$all = $this->getServerConfigurationPrefixes(false);
|
|
|
|
|
$active = $this->getServerConfigurationPrefixes(true);
|
|
|
|
|
|
|
|
|
|
if(!is_array($all) || !is_array($active)) {
|
|
|
|
|
throw new \Exception('Unexpected Return Value');
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return count($all) !== count($active) || count($all) === 0;
|
|
|
|
|
}
|
|
|
|
|
|
2013-09-30 01:53:14 +04:00
|
|
|
|
/**
|
2014-09-16 18:17:25 +04:00
|
|
|
|
* extracts the domain from a given URL
|
2014-05-11 17:17:27 +04:00
|
|
|
|
* @param string $url the URL
|
|
|
|
|
* @return string|false domain as string on success, false otherwise
|
2013-09-30 01:53:14 +04:00
|
|
|
|
*/
|
2014-08-21 19:59:13 +04:00
|
|
|
|
public function getDomainFromURL($url) {
|
2013-09-30 01:53:14 +04:00
|
|
|
|
$uinfo = parse_url($url);
|
|
|
|
|
if(!is_array($uinfo)) {
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$domain = false;
|
|
|
|
|
if(isset($uinfo['host'])) {
|
|
|
|
|
$domain = $uinfo['host'];
|
|
|
|
|
} else if(isset($uinfo['path'])) {
|
|
|
|
|
$domain = $uinfo['path'];
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return $domain;
|
|
|
|
|
}
|
2016-07-22 11:46:29 +03:00
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
*
|
|
|
|
|
* Set the LDAPProvider in the config
|
|
|
|
|
*
|
|
|
|
|
*/
|
|
|
|
|
public function setLDAPProvider() {
|
|
|
|
|
$current = \OC::$server->getConfig()->getSystemValue('ldapProviderFactory', null);
|
|
|
|
|
if(is_null($current)) {
|
|
|
|
|
\OC::$server->getConfig()->setSystemValue('ldapProviderFactory', '\\OCA\\User_LDAP\\LDAPProviderFactory');
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* sanitizes a DN received from the LDAP server
|
|
|
|
|
* @param array $dn the DN in question
|
|
|
|
|
* @return array the sanitized DN
|
|
|
|
|
*/
|
|
|
|
|
public function sanitizeDN($dn) {
|
|
|
|
|
//treating multiple base DNs
|
|
|
|
|
if(is_array($dn)) {
|
|
|
|
|
$result = array();
|
|
|
|
|
foreach($dn as $singleDN) {
|
|
|
|
|
$result[] = $this->sanitizeDN($singleDN);
|
|
|
|
|
}
|
|
|
|
|
return $result;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
//OID sometimes gives back DNs with whitespace after the comma
|
|
|
|
|
// a la "uid=foo, cn=bar, dn=..." We need to tackle this!
|
|
|
|
|
$dn = preg_replace('/([^\\\]),(\s+)/u', '\1,', $dn);
|
|
|
|
|
|
|
|
|
|
//make comparisons and everything work
|
|
|
|
|
$dn = mb_strtolower($dn, 'UTF-8');
|
|
|
|
|
|
|
|
|
|
//escape DN values according to RFC 2253 – this is already done by ldap_explode_dn
|
|
|
|
|
//to use the DN in search filters, \ needs to be escaped to \5c additionally
|
|
|
|
|
//to use them in bases, we convert them back to simple backslashes in readAttribute()
|
|
|
|
|
$replacements = array(
|
|
|
|
|
'\,' => '\5c2C',
|
|
|
|
|
'\=' => '\5c3D',
|
|
|
|
|
'\+' => '\5c2B',
|
|
|
|
|
'\<' => '\5c3C',
|
|
|
|
|
'\>' => '\5c3E',
|
|
|
|
|
'\;' => '\5c3B',
|
|
|
|
|
'\"' => '\5c22',
|
|
|
|
|
'\#' => '\5c23',
|
|
|
|
|
'(' => '\28',
|
|
|
|
|
')' => '\29',
|
|
|
|
|
'*' => '\2A',
|
|
|
|
|
);
|
|
|
|
|
$dn = str_replace(array_keys($replacements), array_values($replacements), $dn);
|
|
|
|
|
|
|
|
|
|
return $dn;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* converts a stored DN so it can be used as base parameter for LDAP queries, internally we store them for usage in LDAP filters
|
|
|
|
|
* @param string $dn the DN
|
|
|
|
|
* @return string
|
|
|
|
|
*/
|
|
|
|
|
public function DNasBaseParameter($dn) {
|
|
|
|
|
return str_ireplace('\\5c', '\\', $dn);
|
|
|
|
|
}
|
2015-02-20 15:09:33 +03:00
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* listens to a hook thrown by server2server sharing and replaces the given
|
|
|
|
|
* login name by a username, if it matches an LDAP user.
|
|
|
|
|
*
|
|
|
|
|
* @param array $param
|
|
|
|
|
* @throws \Exception
|
|
|
|
|
*/
|
|
|
|
|
public static function loginName2UserName($param) {
|
|
|
|
|
if(!isset($param['uid'])) {
|
|
|
|
|
throw new \Exception('key uid is expected to be set in $param');
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
//ain't it ironic?
|
2016-10-10 11:18:18 +03:00
|
|
|
|
$helper = new Helper(\OC::$server->getConfig());
|
2015-02-20 15:09:33 +03:00
|
|
|
|
|
|
|
|
|
$configPrefixes = $helper->getServerConfigurationPrefixes(true);
|
|
|
|
|
$ldapWrapper = new LDAP();
|
|
|
|
|
$ocConfig = \OC::$server->getConfig();
|
2017-03-31 10:16:22 +03:00
|
|
|
|
$notificationManager = \OC::$server->getNotificationManager();
|
2017-11-02 15:40:38 +03:00
|
|
|
|
|
2017-09-15 17:01:54 +03:00
|
|
|
|
$userSession = \OC::$server->getUserSession();
|
2017-11-02 15:40:38 +03:00
|
|
|
|
$userPluginManager = \OC::$server->query('LDAPUserPluginManager');
|
2015-02-20 15:09:33 +03:00
|
|
|
|
|
|
|
|
|
$userBackend = new User_Proxy(
|
2017-11-02 15:40:38 +03:00
|
|
|
|
$configPrefixes, $ldapWrapper, $ocConfig, $notificationManager, $userSession, $userPluginManager
|
2015-02-20 15:09:33 +03:00
|
|
|
|
);
|
|
|
|
|
$uid = $userBackend->loginName2UserName($param['uid'] );
|
|
|
|
|
if($uid !== false) {
|
|
|
|
|
$param['uid'] = $uid;
|
|
|
|
|
}
|
|
|
|
|
}
|
2013-01-24 16:01:43 +04:00
|
|
|
|
}
|