2014-03-27 21:01:14 +04:00
|
|
|
<?php
|
|
|
|
/**
|
2015-03-26 13:44:34 +03:00
|
|
|
* @author Arthur Schiwon <blizzz@owncloud.com>
|
2015-10-26 15:54:55 +03:00
|
|
|
* @author Joas Schilling <nickvergessen@owncloud.com>
|
2015-06-25 12:43:55 +03:00
|
|
|
* @author Jörn Friedrich Dreyer <jfd@butonic.de>
|
2015-03-26 13:44:34 +03:00
|
|
|
* @author Morris Jobke <hey@morrisjobke.de>
|
2014-03-27 21:01:14 +04:00
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
* @copyright Copyright (c) 2015, ownCloud, Inc.
|
|
|
|
* @license AGPL-3.0
|
2014-03-27 21:01:14 +04:00
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
* This code is free software: you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU Affero General Public License, version 3,
|
|
|
|
* as published by the Free Software Foundation.
|
2014-03-27 21:01:14 +04:00
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
* This program is distributed in the hope that it will be useful,
|
2014-03-27 21:01:14 +04:00
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
2015-03-26 13:44:34 +03:00
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU Affero General Public License for more details.
|
2014-03-27 21:01:14 +04:00
|
|
|
*
|
2015-03-26 13:44:34 +03:00
|
|
|
* You should have received a copy of the GNU Affero General Public License, version 3,
|
|
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>
|
2014-03-27 21:01:14 +04:00
|
|
|
*
|
|
|
|
*/
|
2015-02-26 13:37:37 +03:00
|
|
|
|
2014-03-27 21:01:14 +04:00
|
|
|
namespace OCA\user_ldap\lib\user;
|
|
|
|
|
|
|
|
use OCA\user_ldap\lib\user\IUserTools;
|
|
|
|
use OCA\user_ldap\lib\user\User;
|
|
|
|
use OCA\user_ldap\lib\LogWrapper;
|
|
|
|
use OCA\user_ldap\lib\FilesystemHelper;
|
2014-08-21 19:59:13 +04:00
|
|
|
use OCA\user_ldap\lib\user\OfflineUser;
|
2014-03-27 21:01:14 +04:00
|
|
|
|
2014-04-24 15:44:25 +04:00
|
|
|
/**
|
|
|
|
* Manager
|
|
|
|
*
|
|
|
|
* upon request, returns an LDAP user object either by creating or from run-time
|
|
|
|
* cache
|
|
|
|
*/
|
2014-03-27 21:01:14 +04:00
|
|
|
class Manager {
|
2015-01-07 02:52:18 +03:00
|
|
|
/** @var IUserTools */
|
2014-03-27 21:01:14 +04:00
|
|
|
protected $access;
|
2015-01-07 02:52:18 +03:00
|
|
|
|
|
|
|
/** @var \OCP\IConfig */
|
2014-03-27 21:01:14 +04:00
|
|
|
protected $ocConfig;
|
2015-01-07 02:52:18 +03:00
|
|
|
|
|
|
|
/** @var \OCP\IDBConnection */
|
|
|
|
protected $db;
|
|
|
|
|
|
|
|
/** @var FilesystemHelper */
|
2014-03-27 21:01:14 +04:00
|
|
|
protected $ocFilesystem;
|
2015-01-07 02:52:18 +03:00
|
|
|
|
|
|
|
/** @var LogWrapper */
|
2014-03-27 21:01:14 +04:00
|
|
|
protected $ocLog;
|
2015-01-07 02:52:18 +03:00
|
|
|
|
|
|
|
/** @var \OCP\Image */
|
2014-03-27 21:01:14 +04:00
|
|
|
protected $image;
|
2015-01-07 02:52:18 +03:00
|
|
|
|
|
|
|
/** @param \OCP\IAvatarManager */
|
2014-03-27 21:01:14 +04:00
|
|
|
protected $avatarManager;
|
2015-01-07 02:52:18 +03:00
|
|
|
|
2014-03-27 21:01:14 +04:00
|
|
|
/**
|
2014-08-21 19:59:13 +04:00
|
|
|
* array['byDN'] \OCA\user_ldap\lib\User[]
|
|
|
|
* ['byUid'] \OCA\user_ldap\lib\User[]
|
|
|
|
* @var array $users
|
2014-03-27 21:01:14 +04:00
|
|
|
*/
|
|
|
|
protected $users = array(
|
|
|
|
'byDN' => array(),
|
|
|
|
'byUid' => array(),
|
|
|
|
);
|
|
|
|
|
|
|
|
/**
|
2015-01-07 02:52:18 +03:00
|
|
|
* @param \OCP\IConfig $ocConfig
|
|
|
|
* @param \OCA\user_ldap\lib\FilesystemHelper $ocFilesystem object that
|
|
|
|
* gives access to necessary functions from the OC filesystem
|
|
|
|
* @param \OCA\user_ldap\lib\LogWrapper $ocLog
|
|
|
|
* @param \OCP\IAvatarManager $avatarManager
|
|
|
|
* @param \OCP\Image $image an empty image instance
|
|
|
|
* @param \OCP\IDBConnection $db
|
2015-10-15 09:27:24 +03:00
|
|
|
* @throws \Exception when the methods mentioned above do not exist
|
2014-03-27 21:01:14 +04:00
|
|
|
*/
|
|
|
|
public function __construct(\OCP\IConfig $ocConfig,
|
|
|
|
FilesystemHelper $ocFilesystem, LogWrapper $ocLog,
|
2015-01-07 02:52:18 +03:00
|
|
|
\OCP\IAvatarManager $avatarManager, \OCP\Image $image, \OCP\IDBConnection $db) {
|
2014-03-27 21:01:14 +04:00
|
|
|
|
|
|
|
$this->ocConfig = $ocConfig;
|
|
|
|
$this->ocFilesystem = $ocFilesystem;
|
|
|
|
$this->ocLog = $ocLog;
|
|
|
|
$this->avatarManager = $avatarManager;
|
|
|
|
$this->image = $image;
|
2015-01-07 02:52:18 +03:00
|
|
|
$this->db = $db;
|
2014-03-27 21:01:14 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @brief binds manager to an instance of IUserTools (implemented by
|
|
|
|
* Access). It needs to be assigned first before the manager can be used.
|
|
|
|
* @param IUserTools
|
|
|
|
*/
|
|
|
|
public function setLdapAccess(IUserTools $access) {
|
|
|
|
$this->access = $access;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @brief creates an instance of User and caches (just runtime) it in the
|
|
|
|
* property array
|
2015-10-15 09:27:24 +03:00
|
|
|
* @param string $dn the DN of the user
|
|
|
|
* @param string $uid the internal (owncloud) username
|
|
|
|
* @return \OCA\user_ldap\lib\User\User
|
2014-03-27 21:01:14 +04:00
|
|
|
*/
|
|
|
|
private function createAndCache($dn, $uid) {
|
|
|
|
$this->checkAccess();
|
|
|
|
$user = new User($uid, $dn, $this->access, $this->ocConfig,
|
|
|
|
$this->ocFilesystem, clone $this->image, $this->ocLog,
|
|
|
|
$this->avatarManager);
|
2015-07-17 19:57:56 +03:00
|
|
|
$this->users['byDN'][$dn] = $user;
|
|
|
|
$this->users['byUid'][$uid] = $user;
|
2014-03-27 21:01:14 +04:00
|
|
|
return $user;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @brief checks whether the Access instance has been set
|
2015-10-15 09:27:24 +03:00
|
|
|
* @throws \Exception if Access has not been set
|
2014-03-27 21:01:14 +04:00
|
|
|
* @return null
|
|
|
|
*/
|
|
|
|
private function checkAccess() {
|
|
|
|
if(is_null($this->access)) {
|
|
|
|
throw new \Exception('LDAP Access instance must be set first');
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-08-21 01:55:42 +03:00
|
|
|
/**
|
|
|
|
* returns a list of attributes that will be processed further, e.g. quota,
|
|
|
|
* email, displayname, or others.
|
|
|
|
* @param bool $minimal - optional, set to true to skip attributes with big
|
|
|
|
* payload
|
|
|
|
* @return string[]
|
|
|
|
*/
|
|
|
|
public function getAttributes($minimal = false) {
|
|
|
|
$attributes = array('dn', 'uid', 'samaccountname', 'memberof');
|
|
|
|
$possible = array(
|
|
|
|
$this->access->getConnection()->ldapQuotaAttribute,
|
|
|
|
$this->access->getConnection()->ldapEmailAttribute,
|
|
|
|
$this->access->getConnection()->ldapUserDisplayName,
|
|
|
|
);
|
|
|
|
foreach($possible as $attr) {
|
|
|
|
if(!is_null($attr)) {
|
|
|
|
$attributes[] = $attr;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
$homeRule = $this->access->getConnection()->homeFolderNamingRule;
|
|
|
|
if(strpos($homeRule, 'attr:') === 0) {
|
|
|
|
$attributes[] = substr($homeRule, strlen('attr:'));
|
|
|
|
}
|
|
|
|
|
|
|
|
if(!$minimal) {
|
|
|
|
// attributes that are not really important but may come with big
|
|
|
|
// payload.
|
|
|
|
$attributes = array_merge($attributes, array(
|
|
|
|
'jpegphoto',
|
|
|
|
'thumbnailphoto'
|
|
|
|
));
|
|
|
|
}
|
|
|
|
|
|
|
|
return $attributes;
|
|
|
|
}
|
|
|
|
|
2014-08-21 19:59:13 +04:00
|
|
|
/**
|
|
|
|
* Checks whether the specified user is marked as deleted
|
|
|
|
* @param string $id the ownCloud user name
|
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
public function isDeletedUser($id) {
|
|
|
|
$isDeleted = $this->ocConfig->getUserValue(
|
|
|
|
$id, 'user_ldap', 'isDeleted', 0);
|
|
|
|
return intval($isDeleted) === 1;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* creates and returns an instance of OfflineUser for the specified user
|
|
|
|
* @param string $id
|
|
|
|
* @return \OCA\user_ldap\lib\user\OfflineUser
|
|
|
|
*/
|
|
|
|
public function getDeletedUser($id) {
|
|
|
|
return new OfflineUser(
|
|
|
|
$id,
|
2014-12-20 18:33:37 +03:00
|
|
|
$this->ocConfig,
|
2015-01-07 02:52:18 +03:00
|
|
|
$this->db,
|
2014-12-20 18:09:04 +03:00
|
|
|
$this->access->getUserMapper());
|
2014-08-21 19:59:13 +04:00
|
|
|
}
|
|
|
|
|
2015-03-31 16:33:44 +03:00
|
|
|
/**
|
|
|
|
* @brief returns a User object by it's ownCloud username
|
2015-10-15 09:27:24 +03:00
|
|
|
* @param string $id the DN or username of the user
|
2015-03-31 16:33:44 +03:00
|
|
|
* @return \OCA\user_ldap\lib\user\User|\OCA\user_ldap\lib\user\OfflineUser|null
|
|
|
|
*/
|
2014-08-21 19:59:13 +04:00
|
|
|
protected function createInstancyByUserName($id) {
|
|
|
|
//most likely a uid. Check whether it is a deleted user
|
|
|
|
if($this->isDeletedUser($id)) {
|
|
|
|
return $this->getDeletedUser($id);
|
|
|
|
}
|
|
|
|
$dn = $this->access->username2dn($id);
|
|
|
|
if($dn !== false) {
|
|
|
|
return $this->createAndCache($dn, $id);
|
|
|
|
}
|
2015-03-31 16:33:44 +03:00
|
|
|
return null;
|
2014-08-21 19:59:13 +04:00
|
|
|
}
|
|
|
|
|
2014-03-27 21:01:14 +04:00
|
|
|
/**
|
|
|
|
* @brief returns a User object by it's DN or ownCloud username
|
2015-10-15 09:27:24 +03:00
|
|
|
* @param string $id the DN or username of the user
|
2014-08-21 19:59:13 +04:00
|
|
|
* @return \OCA\user_ldap\lib\user\User|\OCA\user_ldap\lib\user\OfflineUser|null
|
2015-03-31 14:42:23 +03:00
|
|
|
* @throws \Exception when connection could not be established
|
2014-03-27 21:01:14 +04:00
|
|
|
*/
|
|
|
|
public function get($id) {
|
|
|
|
$this->checkAccess();
|
|
|
|
if(isset($this->users['byDN'][$id])) {
|
|
|
|
return $this->users['byDN'][$id];
|
|
|
|
} else if(isset($this->users['byUid'][$id])) {
|
|
|
|
return $this->users['byUid'][$id];
|
|
|
|
}
|
|
|
|
|
2014-08-21 19:59:13 +04:00
|
|
|
if($this->access->stringResemblesDN($id) ) {
|
2014-03-27 21:01:14 +04:00
|
|
|
$uid = $this->access->dn2username($id);
|
|
|
|
if($uid !== false) {
|
|
|
|
return $this->createAndCache($id, $uid);
|
|
|
|
}
|
|
|
|
}
|
2014-08-21 19:59:13 +04:00
|
|
|
|
2015-03-31 14:42:23 +03:00
|
|
|
return $this->createInstancyByUserName($id);
|
2014-03-27 21:01:14 +04:00
|
|
|
}
|
|
|
|
|
2014-04-24 15:32:50 +04:00
|
|
|
}
|