2013-01-24 16:01:43 +04:00
|
|
|
|
<?php
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* ownCloud – LDAP Helper
|
|
|
|
|
*
|
|
|
|
|
* @author Arthur Schiwon
|
|
|
|
|
* @copyright 2013 Arthur Schiwon blizzz@owncloud.com
|
|
|
|
|
*
|
|
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
|
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
|
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
|
* version 3 of the License, or any later version.
|
|
|
|
|
*
|
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
|
* GNU AFFERO GENERAL PUBLIC LICENSE for more details.
|
|
|
|
|
*
|
|
|
|
|
* You should have received a copy of the GNU Affero General Public
|
|
|
|
|
* License along with this library. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
|
*
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
namespace OCA\user_ldap\lib;
|
|
|
|
|
|
|
|
|
|
class Helper {
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2013-01-24 16:01:43 +04:00
|
|
|
|
/**
|
|
|
|
|
* @brief returns prefixes for each saved LDAP/AD server configuration.
|
2013-01-25 01:39:05 +04:00
|
|
|
|
* @param bool optional, whether only active configuration shall be
|
|
|
|
|
* retrieved, defaults to false
|
2013-01-24 16:01:43 +04:00
|
|
|
|
* @return array with a list of the available prefixes
|
2013-01-24 17:11:53 +04:00
|
|
|
|
*
|
2013-01-24 16:01:43 +04:00
|
|
|
|
* Configuration prefixes are used to set up configurations for n LDAP or
|
2013-01-24 17:11:53 +04:00
|
|
|
|
* AD servers. Since configuration is stored in the database, table
|
2013-01-24 16:01:43 +04:00
|
|
|
|
* appconfig under appid user_ldap, the common identifiers in column
|
|
|
|
|
* 'configkey' have a prefix. The prefix for the very first server
|
|
|
|
|
* configuration is empty.
|
|
|
|
|
* Configkey Examples:
|
2013-01-31 20:53:01 +04:00
|
|
|
|
* Server 1: ldap_login_filter
|
2013-01-24 16:01:43 +04:00
|
|
|
|
* Server 2: s1_ldap_login_filter
|
|
|
|
|
* Server 3: s2_ldap_login_filter
|
2013-01-24 17:11:53 +04:00
|
|
|
|
*
|
|
|
|
|
* The prefix needs to be passed to the constructor of Connection class,
|
2013-01-24 16:01:43 +04:00
|
|
|
|
* except the default (first) server shall be connected to.
|
2013-01-24 17:11:53 +04:00
|
|
|
|
*
|
2013-01-24 16:01:43 +04:00
|
|
|
|
*/
|
2013-01-25 01:39:05 +04:00
|
|
|
|
static public function getServerConfigurationPrefixes($activeConfigurations = false) {
|
|
|
|
|
$referenceConfigkey = 'ldap_configuration_active';
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2014-01-21 14:56:34 +04:00
|
|
|
|
$sql = '
|
2013-01-24 16:01:43 +04:00
|
|
|
|
SELECT DISTINCT `configkey`
|
|
|
|
|
FROM `*PREFIX*appconfig`
|
2013-03-19 16:39:52 +04:00
|
|
|
|
WHERE `appid` = \'user_ldap\'
|
|
|
|
|
AND `configkey` LIKE ?
|
2013-01-25 01:39:05 +04:00
|
|
|
|
';
|
2014-01-21 14:56:34 +04:00
|
|
|
|
|
2013-01-25 01:39:05 +04:00
|
|
|
|
if($activeConfigurations) {
|
2014-01-21 14:56:34 +04:00
|
|
|
|
if (\OC_Config::getValue( 'dbtype', 'sqlite' ) === 'oci') {
|
|
|
|
|
//FIXME oracle hack: need to explicitly cast CLOB to CHAR for comparison
|
|
|
|
|
$sql .= ' AND to_char(`configvalue`)=\'1\'';
|
|
|
|
|
} else {
|
|
|
|
|
$sql .= ' AND `configvalue` = \'1\'';
|
|
|
|
|
}
|
2013-01-25 01:39:05 +04:00
|
|
|
|
}
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2014-01-21 14:56:34 +04:00
|
|
|
|
$stmt = \OCP\DB::prepare($sql);
|
|
|
|
|
|
|
|
|
|
$serverConfigs = $stmt->execute(array('%'.$referenceConfigkey))->fetchAll();
|
2013-01-24 16:01:43 +04:00
|
|
|
|
$prefixes = array();
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2013-01-24 16:01:43 +04:00
|
|
|
|
foreach($serverConfigs as $serverConfig) {
|
|
|
|
|
$len = strlen($serverConfig['configkey']) - strlen($referenceConfigkey);
|
|
|
|
|
$prefixes[] = substr($serverConfig['configkey'], 0, $len);
|
|
|
|
|
}
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2013-01-24 16:01:43 +04:00
|
|
|
|
return $prefixes;
|
|
|
|
|
}
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2013-08-15 17:55:06 +04:00
|
|
|
|
/**
|
|
|
|
|
*
|
|
|
|
|
* @brief determines the host for every configured connection
|
|
|
|
|
* @return an array with configprefix as keys
|
|
|
|
|
*
|
|
|
|
|
*/
|
|
|
|
|
static public function getServerConfigurationHosts() {
|
|
|
|
|
$referenceConfigkey = 'ldap_host';
|
|
|
|
|
|
|
|
|
|
$query = '
|
|
|
|
|
SELECT DISTINCT `configkey`, `configvalue`
|
|
|
|
|
FROM `*PREFIX*appconfig`
|
|
|
|
|
WHERE `appid` = \'user_ldap\'
|
|
|
|
|
AND `configkey` LIKE ?
|
|
|
|
|
';
|
|
|
|
|
$query = \OCP\DB::prepare($query);
|
|
|
|
|
$configHosts = $query->execute(array('%'.$referenceConfigkey))->fetchAll();
|
|
|
|
|
$result = array();
|
|
|
|
|
|
|
|
|
|
foreach($configHosts as $configHost) {
|
|
|
|
|
$len = strlen($configHost['configkey']) - strlen($referenceConfigkey);
|
|
|
|
|
$prefix = substr($configHost['configkey'], 0, $len);
|
|
|
|
|
$result[$prefix] = $configHost['configvalue'];
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return $result;
|
|
|
|
|
}
|
|
|
|
|
|
2013-01-30 06:44:11 +04:00
|
|
|
|
/**
|
|
|
|
|
* @brief deletes a given saved LDAP/AD server configuration.
|
|
|
|
|
* @param string the configuration prefix of the config to delete
|
2013-01-31 20:53:01 +04:00
|
|
|
|
* @return bool true on success, false otherwise
|
2013-01-30 06:44:11 +04:00
|
|
|
|
*/
|
2013-01-24 17:11:53 +04:00
|
|
|
|
static public function deleteServerConfiguration($prefix) {
|
|
|
|
|
//just to be on the safe side
|
|
|
|
|
\OCP\User::checkAdminUser();
|
|
|
|
|
|
|
|
|
|
if(!in_array($prefix, self::getServerConfigurationPrefixes())) {
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
2014-02-14 18:34:22 +04:00
|
|
|
|
$saveOtherConfigurations = '';
|
|
|
|
|
if(empty($prefix)) {
|
|
|
|
|
$saveOtherConfigurations = 'AND `Configkey` NOT LIKE \'s%\'';
|
|
|
|
|
}
|
|
|
|
|
|
2013-01-24 17:11:53 +04:00
|
|
|
|
$query = \OCP\DB::prepare('
|
|
|
|
|
DELETE
|
|
|
|
|
FROM `*PREFIX*appconfig`
|
|
|
|
|
WHERE `configkey` LIKE ?
|
2014-02-14 18:34:22 +04:00
|
|
|
|
'.$saveOtherConfigurations.'
|
2013-03-02 19:26:15 +04:00
|
|
|
|
AND `appid` = \'user_ldap\'
|
|
|
|
|
AND `configkey` NOT IN (\'enabled\', \'installed_version\', \'types\', \'bgjUpdateGroupsLastRun\')
|
2013-01-24 17:11:53 +04:00
|
|
|
|
');
|
2013-06-20 16:47:12 +04:00
|
|
|
|
$delRows = $query->execute(array($prefix.'%'));
|
2013-01-24 17:11:53 +04:00
|
|
|
|
|
2013-06-20 16:47:12 +04:00
|
|
|
|
if(\OCP\DB::isError($delRows)) {
|
2013-01-24 17:11:53 +04:00
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
2013-06-20 16:47:12 +04:00
|
|
|
|
if($delRows === 0) {
|
2013-01-24 17:11:53 +04:00
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return true;
|
|
|
|
|
}
|
2013-05-08 19:47:07 +04:00
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Truncate's the given mapping table
|
|
|
|
|
*
|
|
|
|
|
* @param string $mapping either 'user' or 'group'
|
|
|
|
|
* @return boolean true on success, false otherwise
|
|
|
|
|
*/
|
|
|
|
|
static public function clearMapping($mapping) {
|
|
|
|
|
if($mapping === 'user') {
|
|
|
|
|
$table = '`*PREFIX*ldap_user_mapping`';
|
|
|
|
|
} else if ($mapping === 'group') {
|
|
|
|
|
$table = '`*PREFIX*ldap_group_mapping`';
|
|
|
|
|
} else {
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
2013-05-31 22:07:13 +04:00
|
|
|
|
if(strpos(\OCP\Config::getSystemValue('dbtype'), 'sqlite') !== false) {
|
|
|
|
|
$query = \OCP\DB::prepare('DELETE FROM '.$table);
|
|
|
|
|
} else {
|
|
|
|
|
$query = \OCP\DB::prepare('TRUNCATE '.$table);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
2013-05-08 19:47:07 +04:00
|
|
|
|
$res = $query->execute();
|
|
|
|
|
|
|
|
|
|
if(\OCP\DB::isError($res)) {
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return true;
|
|
|
|
|
}
|
2013-09-30 01:53:14 +04:00
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* @brief extractsthe domain from a given URL
|
|
|
|
|
* @param $url the URL
|
|
|
|
|
* @return mixed, domain as string on success, false otherwise
|
|
|
|
|
*/
|
|
|
|
|
static public function getDomainFromURL($url) {
|
|
|
|
|
$uinfo = parse_url($url);
|
|
|
|
|
if(!is_array($uinfo)) {
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$domain = false;
|
|
|
|
|
if(isset($uinfo['host'])) {
|
|
|
|
|
$domain = $uinfo['host'];
|
|
|
|
|
} else if(isset($uinfo['path'])) {
|
|
|
|
|
$domain = $uinfo['path'];
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return $domain;
|
|
|
|
|
}
|
2013-01-24 16:01:43 +04:00
|
|
|
|
}
|