source: sandbox/2.2.0.2/services/class.ldap.php @ 4445

<?php

class LdapService
{
    var $limit = 10;

    var $allTargetTypes = array( 'i', 'g', 'l', 'u', 's' );

    var $connection;

    function LdapService()
    {
        
    }

    function connect($host='', $dn='', $passwd='', $ldapreferral=false)
    {
        if(!$host || $host == $GLOBALS['phpgw_info']['server']['ldap_host'])
        {
            $dn         = $dn ? $dn : $GLOBALS['phpgw_info']['server']['ldap_root_dn'];
            $passwd = $passwd ? $passwd : $GLOBALS['phpgw_info']['server']['ldap_root_pw'];
            $host   = $host ? $host : $GLOBALS['phpgw_info']['server']['ldap_host'];
        }

        $conection = ldap_connect($host);

        if(!ldap_set_option($conection,LDAP_OPT_PROTOCOL_VERSION,3))
            $GLOBALS['phpgw_info']['server']['ldap_version3'] = False;
        
        ldap_set_option($conection, LDAP_OPT_REFERRALS, $ldapreferral);

        if($ldapreferral)
        {
            $GLOBALS['phpgw_info']['server']['user_ldap_referral'] = $dn;
            $GLOBALS['phpgw_info']['server']['password_ldap_referral'] = $passwd;
            ldap_set_rebind_proc($conection, ldap_rebind);
        }

        if($dn && $passwd && !@ldap_bind($conection,$dn,$passwd))
            @ldap_bind($conection,$dn,$passwd);

        $this->connection = $conection;

        return( $connection );
    }

    function _or( $toWrap )
    {
        if( !is_array( $toWrap ) )
            return( $toWrap );

//      if( count( $toWrap ) <= 1 )
//          return implode( "", $toWrap );

        return $this->wrap( $toWrap, '|' );
    }

    function _and( $toWrap )
    {
        if( !is_array( $toWrap ) )
            return( $toWrap );

//      if( count( $toWrap ) <= 1 )
//          return implode( "", $toWrap );

        return $this->wrap( $toWrap, '&' );
    }

    function _not( $toWrap )
    {
        return $this->wrap( $toWrap, '!' );
    }

    function wrap( $toWrap, $conditional = "" )
    {
        if( !is_array( $toWrap ) )
            $toWrap = array( $toWrap );

        $toWrap = array_unique( $toWrap );

        return "(".$conditional.implode( "", $toWrap ).")";
    }

    function getSearchFilter( $search, $targetTypes = false, $customFilter = '', $exact = false )
    {
        $search = utf8_encode( $search );

        if( !$targetTypes )
            $targetTypes = $this->allTargetTypes;

        if( !is_array( $targetTypes ) )
            $targetTypes = array( $targetTypes );

        $searchFilter = '';

        foreach( $targetTypes as $targetType )
        {
            switch( $targetType )
            {
                case 'g':
                {
                    //no caso de grupos, a busca so precisa ser feita em cima do CN
                    $searchFilter = $this->stemFilter( $search, 'cn' );
                }
                break;

                default :
                {
                   //parametros que a busca tem que ser sintaticas
                    $searchFilter = /*array( */$this->stemFilter( $search, array(
                                                // UID e employeeNumber podem ser iguais ou muito similares, dependendo da organizacao
                                                'uid', /*'employeeNumber', */'cn',
                                                // givenName e SN sao complementares (nome e sobrenome)
                                                'givenName', 'sn', 'displayName' ) //),
                                            //parametros que a busca pode ser por aproximacao fonetica
                                           /*$this->approxFilter( $search, array( 
                                                // O CN e displayName geralmente sao a mesma coisa
                                                'cn', 'displayName' ))*/  );

                    $searchFilter = $this->stemFilter( $search, array( 'cn', 'givenName', 'uid',
                                                                       'sn', 'displayName' ) );
                }
                break;
            }
        }

        $filter = array();

        if( $customFilter )
            $filter[] = $customFilter;
        if( $search )
            $filter[] = $searchFilter;

        return $this->_and( array(
            // Somente objetos relacionados com o Expresso
            $this->accountFilter( $targetTypes ),
            // Objetos ocultados e/ou desativados pelo Administrador nao podem ser exibidos nas consultas do Expresso
            $this->securityFilter( $targetTypes ),
            //foco da busca
            ( $exact ? $this->_and( $filter ) : $this->_or( $filter ) )
            ));

        // Verificoes extras para validar o resultado
        //  (&
        //     // Somente objetos com e-mail no formato da RFC822
        //    (mail=*@*)
        //  )
    }

    function securityFilter( $targetTypes )
    {
        if( !$targetTypes )
            $targetTypes = $this->allTargetTypes;

        if( !is_array( $targetTypes ) )
            $targetTypes = array( $targetTypes );

        $typeFilter = array();

        foreach( $targetTypes as $targetType )
        {
            switch( $targetType )
            {
                case 'g': $typeFilter[] = "(objectClass=posixGroup)";
                break;
                
                default : $typeFilter[] = "(phpgwAccountStatus=A)";
                break;
            }
        }

        return $this->_and( array( '(!(phpgwAccountVisible=-1))', $this->_or( $typeFilter ) ) );
    }

    function accountFilter( $targetTypes )
    {
        if( !$targetTypes )
            $targetTypes = $this->allTargetTypes;

        if( !is_array( $targetTypes ) )
           $targetTypes = array( $targetTypes );

        $typeFilter = array();

        foreach( $targetTypes as $targetType )
            $typeFilter[] = '(phpgwAccountType='.$targetType.')';

        return $this->_and( array( '(objectClass=phpgwAccount)', $this->_or( $typeFilter ) ) );
    }

    function stemFilter( $search, $params )
    {
        $search = str_replace( ' ', '*', $search );

        if( !is_array( $params ) )
            $params = array( $params );

        foreach( $params as $i => $param )
            $params[$i] = "($param=*$search*)";
        
        return $this->_or( $params );
    }

    function phoneticFilter( $search, $params )
    {
        if( eregi( "\d", $search ) )
            return( "" );

        if( !is_array( $params ) )
            $params = array( $params );

        foreach( $params as $i => $param )
            $params[$i] = "($param~=$search)";
        
        return $this->_or( $params );
    }

    function approxFilter( $search, $params )
    {
        return $this->_or( array( $this->stemFilter( $search, $params ),
                                  $this->phoneticFilter( $search, $params ) ) );
    }

//     public function search()
//     {
//      
//     }

    public function accountSearch($search, $justthese = "*", $context = false , $accountType = false, $sort = false)
    {
         if( !$this->connection )
            $this->connect();

         $filter =  $this->getSearchFilter($search,$accountType);

         if( !$context )
             $context = $GLOBALS['phpgw_info']['server']['ldap_context'];

         $ls = ldap_search( $this->connection, utf8_encode($context), $filter, $justthese, 0, $this->limit );

         if($sort)
             ldap_sort( $this->connection, $ls, $sort );

         $entries = ldap_get_entries( $this->connection, $ls );

         if( !$entries ) return( null );

         $return = array();

         for ($i=0; $i < $entries["count"]; $i++)
         {
               $entrieTmp = array();
               foreach ($entries[$i] as $index => $value)
               {
                   if(!is_numeric($index) && $index != 'count')
                   {
                       if(is_array($value))
                       {
                           if(count($value) == 2)
                               $entrieTmp[$index] = utf8_decode($value['0']);
                           else
                           {
                               foreach ($value as $index2 =>$value2)
                               {
                                    if($index != 'count')
                                        $entrieTmp[$index][$index2] = utf8_decode($value2);
                               }
                           }
                       }
                       else
                           $entrieTmp[$index] = utf8_decode($value);
                   }
               }

               $return[] = $entrieTmp;
         }

         return( $return );
    }

}

ServiceLocator::register( 'ldap', new LdapService() );