source: branches/2.2/preferences/changepassword.php @ 3296

<?php
        /**************************************************************************\
        * phpGroupWare - preferences                                               *
        * http://www.phpgroupware.org                                              *
        * Written by Joseph Engo <jengo@phpgroupware.org>                          *
        * --------------------------------------------                             *
        *  This program is free software; you can redistribute it and/or modify it *
        *  under the terms of the GNU General Public License as published by the   *
        *  Free Software Foundation; either version 2 of the License, or (at your  *
        *  option) any later version.                                              *
        \**************************************************************************/

function grava_senha_criptografada_com_certificado_no_ldap($aux_uid,$aux_senha)
   {
        require_once(PHPGW_SERVER_ROOT . '/security/classes/CertificadoB.php');

        if ( (!empty($GLOBALS['phpgw_info']['server']['ldap_master_host'])) &&
                (!empty($GLOBALS['phpgw_info']['server']['ldap_master_root_dn'])) &&
                (!empty($GLOBALS['phpgw_info']['server']['ldap_master_root_pw'])) )
            {
                $ldap_context = $GLOBALS['phpgw_info']['server']['ldap_context'];
                $ldap_servidor = $GLOBALS['phpgw_info']['server']['ldap_master_host'];
                $ldap_dn = $GLOBALS['phpgw_info']['server']['ldap_master_root_dn'];
                $ldap_passwd = $GLOBALS['phpgw_info']['server']['ldap_master_root_pw'];
            }
        else
            {
                $ldap_context = $GLOBALS['phpgw_info']['server']['ldap_context'];
                $ldap_servidor = $GLOBALS['phpgw_info']['server']['ldap_host'];
                $ldap_dn = $GLOBALS['phpgw_info']['server']['ldap_root_dn'];
                $ldap_passwd = $GLOBALS['phpgw_info']['server']['ldap_root_pw'];
            }

        $cc=ldap_connect($ldap_servidor);

        if($GLOBALS['phpgw_info']['server']['ldap_version3'])
            {
                ldap_set_option($cc, LDAP_OPT_PROTOCOL_VERSION, 3);
            }

        $sr=ldap_bind($cc,$ldap_dn,$ldap_passwd);
        $filtro = 'uidNumber='.$aux_uid;
        $sr=ldap_search($cc, $ldap_context,$filtro);
        $info = ldap_get_entries($cc, $sr);

        if($info["count"]!=1)
            {
                ldap_close($cc);
                return false;
            }

        if(!$info[0]["usercertificate"][0])
            {
                ldap_close($cc);
                return false;
            }

        $a = new certificadoB();
        $R = $a->encriptar_senha($aux_senha,$info[0]["usercertificate"][0]);

        if(!$R)
            {
                return false;
            }

        $user_info = array();
        $aux1 = $info[0]["dn"];
        $user_info['cryptpassword'] = $R;
        ldap_modify($cc,$aux1,$user_info);

        ldap_close($cc);

        return true;
   }


        $GLOBALS['phpgw_info']['flags'] = array(
                'noheader'   => True,
                'nonavbar'   => True,
                'currentapp' => 'preferences'
        );

        include('../header.inc.php');

        $a_passwd   = $_POST['a_passwd'];
        $n_passwd   = $_POST['n_passwd'];
        $n_passwd_2 = $_POST['n_passwd_2'];

        if(!$GLOBALS['phpgw']->acl->check('changepassword', 1) || $_POST['cancel'])
        {
                if(($GLOBALS['phpgw_info']['user']['lastpasswd_change'] == '0') && (!$_POST['cancel']))
                        $GLOBALS['phpgw']->redirect($GLOBALS['phpgw']->link('/login.php','cd=6'));

                if ($GLOBALS['phpgw_info']['server']['use_https'] == 1)
                        Header('Location: http://' . $_SERVER['HTTP_HOST'] . $GLOBALS['phpgw_info']['server']['webserver_url'] . '/preferences/index.php');
                else
                        $GLOBALS['phpgw']->redirect_link('/preferences/index.php');

                $GLOBALS['phpgw']->common->phpgw_exit();
        }

        $GLOBALS['phpgw']->template->set_file(array(
                'form' => 'changepassword.tpl'
        ));
        $GLOBALS['phpgw']->template->set_var('lang_enter_actual_password',lang('Enter your actual password'));
        $GLOBALS['phpgw']->template->set_var('lang_enter_password',lang('Enter your new password'));
        $GLOBALS['phpgw']->template->set_var('lang_reenter_password',lang('Re-enter your password'));
        $GLOBALS['phpgw']->template->set_var('lang_change',lang('Change'));
        $GLOBALS['phpgw']->template->set_var('lang_cancel',lang('Cancel'));
        $GLOBALS['phpgw']->template->set_var('form_action',$GLOBALS['phpgw']->link('/preferences/changepassword.php'));

        if ($_GET['cd'] == 1)
        {
                $lang1 = lang('Your password has expired');
                $lang2 = lang('You must register a new password');
                $GLOBALS['phpgw']->template->set_var('messages',"<font color=red><h1>$lang1.<br>$lang2.</h1></font>");
        }

        if ($GLOBALS['phpgw_info']['server']['auth_type'] != 'ldap')
        {
                $GLOBALS['phpgw']->template->set_var('sql_message',lang('note: This feature does *not* change your email password. This will '
                        . 'need to be done manually.'));
        }

        if ($_POST['change'])
            {
                include(personalize_include_path('preferences','changepassword'));
            }
        else
        {
                $GLOBALS['phpgw_info']['flags']['app_header'] = lang('Change your password');
                $GLOBALS['phpgw']->common->phpgw_header();
                echo parse_navbar();

                $GLOBALS['phpgw']->template->pfp('out','form');
                $GLOBALS['phpgw']->common->phpgw_footer();
        }
?>