Viewing file:  runnerldap.php (5.71 KB) -rw-r--r--
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
<?php
/**
* Class for display admin_rights_list
*
*/
class RunnerLdap
{
var $ldap_domainName = '';
var $ldap_serverIP = null;
var $ldapconn = null;
var $ldapbind = null;
var $ldap_useCustom = false;
var $baseDN = null;
var $followRefs = null;
function __construct($aDomainName, $aServerIP, $useCustom, $baseDN, $followRefs )
{
$this->ldap_domainName = $aDomainName;
$this->ldap_serverIP = $aServerIP;
$this->ldap_useCustom = $useCustom;
$this->baseDN = $baseDN;
$this->followRefs = $followRefs;
}
/**
*
*/
function runner_ldap_connect($aUsername, $aPassword)
{
// connect to ldap server
$this->ldapconn = ldap_connect( ldap_getUrl( ldap_getUrl( $this->ldap_serverIP ) ) );
if ( !$this->ldapconn || ldap_errno($this->ldapconn) != 0 )
return false;
@ldap_set_option($this->ldapconn, LDAP_OPT_DEBUG_LEVEL, 7);
@ldap_set_option($this->ldapconn, LDAP_OPT_PROTOCOL_VERSION, 3);
@ldap_set_option($this->ldapconn, LDAP_OPT_REFERRALS, $this->followRefs ? 1 : 0 );
// binding to ldap server
$usernames = $this->getUserNames( $aUsername );
foreach($usernames as $u)
{
$this->ldapbind = @ldap_bind($this->ldapconn, $u , $aPassword);
if( $this->ldapbind )
break;
}
if( !$this->ldapbind )
return false;
return true;
}
/**
* @param String aUsername
* @return Array
*/
protected function getUserNames( $aUsername )
{
global $customLDAPSettings;
$usernames = array();
$usernames[] = $aUsername."@". $this->ldap_domainName; // Active Directory string
$usernames[] = $this->ldap_domainName . "\\" . $aUsername; // old format Active Directory string
$usernames[] = $aUsername;
$usernames[] = "uid=".$aUsername.",".$this->baseDN; // OpenLDAP string
$usernames[] = "cname=".$aUsername.",cname=Users,".$this->baseDN; // AD string
$usernames[] = "cn=".$aUsername.",cn=Users,".$this->baseDN; // AD string
if( $this->ldap_useCustom && $customLDAPSettings["usernames"])
{
foreach( $customLDAPSettings["usernames"] as $usernamePattern )
{
$usernames[] = $this->getProcessedPattern( $usernamePattern, $aUsername );
}
}
return $usernames;
}
/**
* @param String
*/
public function getProcessedPattern( $pattern, $userName )
{
return str_replace( array("%u", "%d", "%e"), array( $userName, $this->ldap_domainName, $this->baseDN ), $pattern );
}
/**
* @param Mixed attValue
* @return String
*/
public function processAttrValue($attValue)
{
if( !is_array($attValue) )
return $attValue;
foreach( $attValue as $value )
{
return $value;
}
}
/**
* Search LDAP tree
* @ An LDAP link identifier, returned by ldap_connect()
* @ string The search filter
* @ array An array of the required attributes
*/
function runner_ldap_getData($filter, $attributes = array())
{
$ldap_dn = $this->baseDN;
if( !count($attributes) )
$query = ldap_search($this->ldapconn, $ldap_dn, $filter);
else
$query = ldap_search($this->ldapconn, $ldap_dn, $filter, $attributes);
if( $query === FALSE )
return FALSE;
// Read all results from search
$entries = ldap_get_entries($this->ldapconn, $query);
return $this->runner_convert_entries($entries);
}
function runner_convert_entries($aData)
{
$resultArr = array();
if (!sizeof($aData))
return null;
for ($j = 0; $j < $aData['count']; $j++)
{
$result = array();
foreach ($aData[$j] as $key=>$val)
{
if (is_numeric($key))
continue;
if(!is_array($val))
$result[$key] = $val;
else if ($val["count"] > 1 || $key == 'memberof')
{
//set array
$tmpResult = array();
for ($i=0;$i<$val['count'];$i++)
{
$tmpResult[] = $val[$i];
}
$result[$key] = $tmpResult;
}
else if ($key == 'dn')
$result[$key] = $val;
else
$result[$key] = $val[0];
}
$resultArr[] = $result;
}
return $resultArr;
}
/**
* Convert OU=users,DC=test,DC=xlinesoft,DC=com
* to test.xlinesoft.com
*/
function runner_ldap_unbind()
{
ldap_unbind($this->ldapconn);
}
function ldap_error()
{
return ldap_err2str(ldap_errno($this->ldapconn));
}
//function for Active Directory
/**
* This function retrieves and returns CN from given DN
* $dn = CN=Users,CN=Builtin,DC=test,DC=xlinesoft,DC=com
* return Users
*/
function ldap_getCN($dn)
{
preg_match('/[^,]*/', $dn, $matchs, PREG_OFFSET_CAPTURE, 3);
return $matchs[0][0];
}
/**
* This function searchs in LDAP tree ($ad -LDAP link identifier)
* entry specified by samaccountname and returns its DN or epmty
* string on failure.
* $samaccountname = Users
* $basedn = DC=test,DC=xlinesoft,DC=com
* return CN=Users,CN=Builtin,DC=test,DC=xlinesoft,DC=com
*/
function ldap_getDN($ad, $samaccountname, $basedn)
{
$attributes = array('dn');
$result = ldap_search($ad, $basedn, "(samaccountname={$samaccountname})", $attributes);
if ($result === FALSE)
return '';
$entries = ldap_get_entries($ad, $result);
if ($entries['count'] > 0)
return $entries[0]['dn'];
return '';
}
function getGroupSid($userSid, $primaryGroupId)
{
$tgroup = bin2hex(substr($userSid,0, strlen($userSid)-4));
$group = "";
for($i = 0; $i<strlen($tgroup); $i += 2)
{
$group .= '\\'.substr($tgroup,$i,2);
}
$group .= sprintf("\\%02x",$primaryGroupId & 255);
$group .= sprintf("\\%02x",($primaryGroupId >>8) & 255);
$group .= sprintf("\\%02x",($primaryGroupId >>16) & 255);
$group .= sprintf("\\%02x",($primaryGroupId >>24) & 255);
return $group;
}
}
?>
|