mirror of
https://gitlab.easter-eggs.com/ee/ldapsaisie.git
synced 2024-05-05 22:05:08 +02:00
7098b3ee79
The web-root directory now contains URL rewrite stuff. All PHP & static files are in root src directory and are served via LSurl routes.
718 lines
19 KiB
PHP
718 lines
19 KiB
PHP
<?php
|
|
/*******************************************************************************
|
|
* Copyright (C) 2007 Easter-eggs
|
|
* http://ldapsaisie.labs.libre-entreprise.org
|
|
*
|
|
* Author: See AUTHORS file in top-level directory.
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License version 2
|
|
* as published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
|
|
******************************************************************************/
|
|
|
|
$GLOBALS['LSobjects']['LSpeople'] = array (
|
|
'objectclass' => array(
|
|
'top',
|
|
'lspeople',
|
|
'posixAccount',
|
|
'sambaSamAccount',
|
|
),
|
|
'rdn' => 'uid',
|
|
'container_dn' => 'ou=people',
|
|
|
|
'container_auto_create' => array(
|
|
'objectclass' => array(
|
|
'top',
|
|
'organizationalUnit'
|
|
),
|
|
'attrs' => array(
|
|
'ou' => 'people'
|
|
)
|
|
),
|
|
|
|
'LSaddons' => array (
|
|
'exportSearchResultAsCSV',
|
|
),
|
|
|
|
'ioFormat' => array (
|
|
'mycsv' => array (
|
|
'label' => 'Simple CSV',
|
|
'driver' => 'CSV',
|
|
'driver_options' => array (
|
|
'delimiter' => ';',
|
|
'escape' => '"',
|
|
'eol' => ';',
|
|
'length' => 2
|
|
),
|
|
'fields' => array (
|
|
'login' => 'uid',
|
|
'civility' => 'personalTitle',
|
|
'firstname' => 'givenName',
|
|
'name' => 'sn',
|
|
'mail' => 'mail',
|
|
'password' => 'userPassword',
|
|
'gid' => 'gidNumber',
|
|
'shell' => 'loginShell',
|
|
),
|
|
'generated_fields' => array (
|
|
'cn' => '%{personalTitle} %{givenName} %{sn}'
|
|
)
|
|
)
|
|
),
|
|
|
|
'before_modify' => 'valid',
|
|
'after_modify' => 'valid',
|
|
//'after_create' => 'createMaildirByFTP',
|
|
//'after_delete' => 'removeMaildirByFTP',
|
|
'display_name_format' => '%{cn}',
|
|
'label' => 'Users',
|
|
|
|
// LSrelation
|
|
'LSrelation' => array(
|
|
'groups' => array(
|
|
'label' => 'Belongs to groups ...',
|
|
'emptyText' => "Doesn't belong to any group.",
|
|
'LSobject' => 'LSgroup',
|
|
'list_function' => 'listUserGroups',
|
|
'getkeyvalue_function' => 'getMemberKeyValue',
|
|
'update_function' => 'updateUserGroups',
|
|
'remove_function' => 'deleteOneMember',
|
|
'rename_function' => 'renameOneMember',
|
|
'canEdit_function' => 'canEditGroupRelation',
|
|
'canEdit_attribute' => 'uniqueMember',
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'admin' => 'w',
|
|
'admingroup' => 'w'
|
|
)
|
|
),
|
|
'godfather' => array(
|
|
'label' => 'Godfather of ...',
|
|
'emptyText' => "Doesn't sponsor any user.",
|
|
'LSobject' => "LSpeople",
|
|
'linkAttribute' => "lsGodfatherDn",
|
|
'linkAttributeValue' => "dn",
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'admin' => 'w',
|
|
'admingroup' => 'w'
|
|
)
|
|
)
|
|
),
|
|
|
|
// LSform
|
|
'LSform' => array (
|
|
'ajaxSubmit' => 1,
|
|
// Layout
|
|
'layout' => array (
|
|
'Civilite' => array(
|
|
'label' => 'Civility',
|
|
'img' => 1,
|
|
'args' => array (
|
|
'uid',
|
|
'personalTitle',
|
|
'givenName',
|
|
'sn',
|
|
'cn',
|
|
'mail',
|
|
'userPassword',
|
|
'description',
|
|
'jpegPhoto',
|
|
'lsGodfatherDn'
|
|
)
|
|
),
|
|
'Posix' => array (
|
|
'label' => 'Posix',
|
|
'args' => array (
|
|
'uidNumber',
|
|
'gidNumber',
|
|
'loginShell',
|
|
'homeDirectory'
|
|
)
|
|
),
|
|
'Samba' => array (
|
|
'label' => 'Samba',
|
|
'args' => array (
|
|
'sambaSID',
|
|
'sambaLMPassword',
|
|
'sambaNTPassword'
|
|
)
|
|
)
|
|
), // fin Layout
|
|
'dataEntryForm' => array (
|
|
'simple' => array (
|
|
'label' => 'Simple',
|
|
'disabledLayout' => true,
|
|
'displayedElements' => array (
|
|
'uid',
|
|
'personalTitle',
|
|
'givenName',
|
|
'sn',
|
|
'cn',
|
|
'mail',
|
|
'userPassword'
|
|
),
|
|
'defaultValues' => array (
|
|
'description' => 'Create with the simple data entry form',
|
|
'loginShell' => 'no',
|
|
'gidNumber' => '102001'
|
|
)
|
|
)
|
|
) // fin dataEntryForm
|
|
), // fin LSform
|
|
|
|
'LSsearch' => array (
|
|
'attrs' => array (
|
|
'givenName',
|
|
'sn',
|
|
'cn',
|
|
'uid',
|
|
'mail'
|
|
),
|
|
'params' => array (
|
|
'recursive' => true,
|
|
'nbObjectsByPage' => 5,
|
|
'nbObjectsByPageChoices' => array(5, 10, 15),
|
|
),
|
|
'predefinedFilters' => array (
|
|
'(jpegPhoto=*)' => 'With photo',
|
|
'(!(jpegPhoto=*))' => 'Without photo'
|
|
),
|
|
'extraDisplayedColumns' => array (
|
|
'mail' => array (
|
|
'label' => 'Mail',
|
|
'LSformat' => '%{mail}'
|
|
),
|
|
),
|
|
'customActions' => array (
|
|
'exportSearchResultAsCSV' => array (
|
|
'label' => 'Export result as CSV',
|
|
'icon' => 'export_csv',
|
|
'function' => 'exportSearchResultAsCSV',
|
|
'noConfirmation' => true,
|
|
'disableOnSuccessMsg' => true,
|
|
'rights' => array (
|
|
'admin'
|
|
)
|
|
),
|
|
),
|
|
),
|
|
|
|
// Attributes
|
|
'attrs' => array (
|
|
|
|
/* ----------- start -----------*/
|
|
'uid' => array (
|
|
'label' => 'Identifier',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'html_options' => array(
|
|
'generate_value_format' => '%{givenName:1}.%{sn}',
|
|
'autoGenerateOnModify' => true, // default : false
|
|
'withoutAccent' => 1,
|
|
'replaceSpaces' => '.',
|
|
'lowerCase' => 1
|
|
),
|
|
'required' => 1,
|
|
'check_data' => array (
|
|
'regex' => array(
|
|
'msg' => "Identifier must contain alphanumeric values, dots (.) and dashes (-) only.",
|
|
'params' => array('regex' => '/^[a-zA-Z0-9-_\.]*$/')
|
|
),
|
|
),
|
|
'validation' => array (
|
|
array (
|
|
'filter' => 'uid=%{val}',
|
|
'result' => 0,
|
|
'msg' => 'This identifier is already used.'
|
|
)
|
|
),
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'r'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
),
|
|
'dependAttrs' => array(
|
|
'homeDirectory'
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'uidNumber' => array (
|
|
'label' => 'Numeric identifier',
|
|
'ldap_type' => 'numeric',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'generate_function' => 'generate_uidNumber_withSambaDomainObject',
|
|
'check_data' => array (
|
|
'numeric' => array(
|
|
'msg' => "The numeric identifier must be an integer."
|
|
),
|
|
),
|
|
'validation' => array (
|
|
array (
|
|
'filter' => 'uidNumber=%{val}',
|
|
'result' => 0,
|
|
'msg' => 'This uid is already used.'
|
|
)
|
|
),
|
|
'rights' => array(
|
|
'admin' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 0,
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'givenName' => array (
|
|
'label' => 'First Name',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'default_value' => 'toto',
|
|
'check_data' => array (
|
|
'alphanumeric' => array(
|
|
'params' => array('withAccents' => true),
|
|
'msg' => 'The first name must contain alphanumeric values only.'
|
|
),
|
|
),
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'users' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
),
|
|
'onDisplay' => 'return_data'
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'sn' => array (
|
|
'label' => 'Last Name',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'cn' => array (
|
|
'label' => 'Full Name',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'html_options' => array(
|
|
'generate_value_format' => '%{givenName} %{sn}',
|
|
'autoGenerateOnModify' => true, // default : false
|
|
'autoGenerateOnCreate' => true // default : false
|
|
),
|
|
'required' => 1,
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'gidNumber' => array (
|
|
'label' => 'Main group',
|
|
'ldap_type' => 'numeric',
|
|
'html_type' => 'select_list',
|
|
'html_options' => array (
|
|
'possible_values' => array(
|
|
'0' => 'No group',
|
|
array (
|
|
'label' => 'LDAP Groups',
|
|
'possible_values' => array (
|
|
'OTHER_OBJECT' => array (
|
|
'object_type' => 'LSgroup', // Nom de l'objet à lister
|
|
'display_name_format' => '%{cn} (%{gidNumber})', // Spécifie le attributs à lister pour le choix,
|
|
// si non définie => utilisation du 'display_name_format'
|
|
// de la définition de l'objet
|
|
|
|
'value_attribute' => 'gidNumber', // Spécifie le attributs dont la valeur sera retournée par
|
|
/*'filter' => // le formulaire spécifie les filtres de recherche pour
|
|
array ( // l'établissement de la liste d'objets :
|
|
array( // Premier filtre
|
|
'filter' => 'cn=*a*',
|
|
//'basedn' => 'o=company',
|
|
'scope' => 'sub',
|
|
)
|
|
)*/
|
|
)
|
|
)
|
|
)
|
|
)
|
|
),
|
|
'multiple' => false,
|
|
'required' => 1,
|
|
'validation' => array (
|
|
array (
|
|
'msg' => "This group doesn't exist.",
|
|
'object_type' => 'LSgroup', // 'object_type' : Permet definir le type d'objet recherchés
|
|
//'basedn' => 'o=company', // et d'utiliser les objectClass définis dans le fichier de configuration
|
|
'filter' => '(gidNumber=%{val})', // pour la recherche
|
|
'result' => 1
|
|
)
|
|
),
|
|
'rights' => array(
|
|
'admin' => 'w',
|
|
'godfather' => 'r'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'loginShell' => array (
|
|
'label' => 'Command shell',
|
|
'help_info' => "Allow user to connect a POSIX system.",
|
|
'ldap_type' => 'boolean',
|
|
'ldap_options' => array (
|
|
'true_value' => '/bin/bash',
|
|
'false_value' => '/bin/false'
|
|
),
|
|
'html_type' => 'boolean',
|
|
'required' => 1,
|
|
'default_value' => 'no',
|
|
'rights' => array(
|
|
'admin' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'sambaSID' => array (
|
|
'label' => 'Samba Identifier',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'generate_function' => 'generate_sambaUserSID',
|
|
'rights' => array(
|
|
'admin' => 'r'
|
|
),
|
|
'form' => array (
|
|
'modify' => 0
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'homeDirectory' => array (
|
|
'label' => 'Home Directory',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'generate_function' => 'generate_homeDirectory',
|
|
'rights' => array(
|
|
'admin' => 'r'
|
|
),
|
|
'view' => 1
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'mail' => array (
|
|
'label' => 'E-mail address',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'mail',
|
|
'html_options' => array(
|
|
'generate_value_format' => '%{givenName}.%{sn}@ls.com',
|
|
'withoutAccent' => 1,
|
|
'replaceSpaces' => '.',
|
|
'lowerCase' => 1
|
|
),
|
|
'required' => 1,
|
|
'check_data' => array (
|
|
'email' => array(
|
|
'msg' => "Given email address is invalid.",
|
|
'params' => array('checkDomain' => false)
|
|
),
|
|
),
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'personalTitle' => array (
|
|
'label' => 'Civility',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'select_list',
|
|
'html_options' => array (
|
|
'possible_values' => array(
|
|
'M.' => 'Mr',
|
|
'Mme' => 'Mrs',
|
|
'Mlle' => 'Ms'
|
|
)
|
|
),
|
|
'required' => 1,
|
|
'default_value' => 'M.',
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'description' => array (
|
|
'label' => 'Description',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'textarea',
|
|
'multiple' => 1,
|
|
'rights' => array(
|
|
'self' => 'r',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'userPassword' => array (
|
|
'label' => 'Password',
|
|
'ldap_type' => 'password',
|
|
'ldap_options' => array (
|
|
'encode' => 'md5'
|
|
),
|
|
'html_type' => 'password',
|
|
'html_options' => array(
|
|
'generationTool' => true,
|
|
'viewHash' => true,
|
|
'autoGenerate' => false,
|
|
'lenght' => 8,
|
|
'chars' => array (
|
|
array(
|
|
'nb' => 3,
|
|
'chars' => 'abcdefijklmnopqrstuvwxyz'
|
|
),
|
|
'0123456789',
|
|
'*$.:/_-[]{}=~'
|
|
),
|
|
'mail' => array(
|
|
'send' => 1,
|
|
'ask' => 1,
|
|
'subject' => "LSexample : Your new credentials.",
|
|
'msg' => "Your password has been changed.\nLogin : %{uid}\nNew password : %{password}",
|
|
'mail_attr' => 'mail'
|
|
)
|
|
),
|
|
'check_data' => array(
|
|
'password' => array(
|
|
'msg' => 'Your password must contain from 8 to 10 characters.',
|
|
'params' => array(
|
|
'minLength' => 8,
|
|
'maxLength' => 10,
|
|
'regex' => array (
|
|
'/[A-Z]/',
|
|
'/[a-z]/',
|
|
'/[0-9]/',
|
|
'/[^A-Za-z0-9]/',
|
|
),
|
|
'minValidRegex' => 3
|
|
)
|
|
)
|
|
),
|
|
'required' => 1,
|
|
'rights' => array(
|
|
'self' => 'w',
|
|
'admin' => 'w'
|
|
),
|
|
'dependAttrs' => array(
|
|
'sambaLMPassword',
|
|
'sambaNTPassword'
|
|
),
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1,
|
|
'lostPassword' => 1
|
|
),
|
|
'after_modify' => 'valid'
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'lsRecoveryHash' => array (
|
|
'label' => 'Password recovery hash',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 0,
|
|
'form' => array (
|
|
'lostPassword' => 1
|
|
),
|
|
'rights' => array(
|
|
'self' => 'w',
|
|
'admin' => 'w'
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'sambaLMPassword' => array (
|
|
'label' => 'Samba Password (LM)',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'generate_function' => 'generate_sambaLMPassword',
|
|
'form' => array (
|
|
'modify' => 0
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'sambaNTPassword' => array (
|
|
'label' => 'Samba Password (NT)',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'text',
|
|
'required' => 1,
|
|
'generate_function' => 'generate_sambaNTPassword',
|
|
'form' => array (
|
|
'modify' => 0
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'jpegPhoto' => array (
|
|
'label' => 'Picture',
|
|
'ldap_type' => 'image',
|
|
'html_type' => 'image',
|
|
'required' => 0,
|
|
'view' => 1,
|
|
'check_data' => array (
|
|
'imagesize' => array(
|
|
'msg' => "Picture size is not valid.",
|
|
'params' => array(
|
|
'maxWidth' => 2000
|
|
)
|
|
),
|
|
'filesize' => array(
|
|
'msg' => "File size is not valid.",
|
|
'params' => array(
|
|
'maxSize' => 3000000 // taille du fichier en octets
|
|
)
|
|
),
|
|
'imagefile' => array(
|
|
'msg' => "File type is not valid."
|
|
)
|
|
),
|
|
'form' => array (
|
|
'modify' => 1
|
|
),
|
|
'rights' => array(
|
|
'self' => 'w',
|
|
'user' => 'r',
|
|
'admin' => 'w',
|
|
'godfather' => 'w'
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
/* ----------- start -----------*/
|
|
'lsGodfatherDn' => array (
|
|
'label' => 'Accountable(s)',
|
|
'ldap_type' => 'ascii',
|
|
'html_type' => 'select_object',
|
|
'html_options' => array (
|
|
'selectable_object' => array(
|
|
'object_type' => 'LSpeople',
|
|
'value_attribute' => '%{dn}'
|
|
),
|
|
),
|
|
'validation' => array (
|
|
array (
|
|
'basedn' => '%{val}',
|
|
'result' => 1,
|
|
'msg' => "One or several users don't exist."
|
|
)
|
|
),
|
|
'multiple' => 1,
|
|
'rights' => array(
|
|
'admin' => 'w'
|
|
),
|
|
'view' => 1,
|
|
'form' => array (
|
|
'modify' => 1,
|
|
'create' => 1
|
|
)
|
|
),
|
|
/* ----------- end -----------*/
|
|
|
|
) // Fin args
|
|
);
|