Context Navigation

class.user.inc.php @ 7243

Revision 7243, 47.7 KB checked in by acoutinho, 12 years ago (diff)
Ticket #3110 - Problema com horario de um evento na sincronizacao com davical
Property svn:eol-style set to `native` Property svn:executable set to ``*

Rev	Line
[2]	1	<?php
	2	/**********************************************************************************\
	3	* Expresso Administração *
	4	* by Joao Alfredo Knopik Junior (joao.alfredo@gmail.com, jakjr@celepar.pr.gov.br) *
	5	* --------------------------------------------------------------------------------*
	6	* This program is free software; you can redistribute it and/or modify it *
	7	* under the terms of the GNU General Public License as published by the *
	8	* Free Software Foundation; either version 2 of the License, or (at your *
	9	* option) any later version. *
	10	\**********************************************************************************/
	11
	12	include_once('class.ldap_functions.inc.php');
	13	include_once('class.db_functions.inc.php');
	14	include_once('class.imap_functions.inc.php');
	15	include_once('class.functions.inc.php');
	16
	17	class user
	18	{
	19	var $ldap_functions;
	20	var $db_functions;
	21	var $imap_functions;
	22	var $functions;
	23	var $current_config;
	24
	25	function user()
	26	{
	27	$this->ldap_functions = new ldap_functions;
	28	$this->db_functions = new db_functions;
	29	$this->imap_functions = new imap_functions;
	30	$this->functions = new functions;
	31	$this->current_config = $_SESSION['phpgw_info']['expresso']['expressoAdmin'];
	32	}
	33
	34	function create($params)
	35	{
	36	$return['status'] = true;
	37
[6553]	38	if($this->db_functions->use_cota_control()) {
	39	//Verifica quota de usuários e disco
	40	$setor = $this->functions->get_info($params['context']);
	41	if (!$this->functions->existe_quota_usuario($setor[0])) {
	42	$return['status'] = false;
	43	$return['msg'] = $this->functions->lang("user cota exceeded");//TODO colocar valor de acordo com tabela de traduções.
	44	return $return;
	45	}
	46	if (!$this->functions->existe_quota_disco($setor[0],$params['mailquota'])) {
	47	$return['status'] = false;
	48	$return['msg'] = $this->functions->lang("disk cota exceeded");//TODO colocar valor de acordo com tabela de traduções.
	49	return $return;
	50	}
	51	}
	52
[2]	53	// Verifica o acesso do gerente
	54	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'add_users'))
	55	{
	56	// Adiciona a organização na frente do uid.
	57	if ($this->current_config['expressoAdmin_prefix_org'] == 'true')
	58	{
	59	$context_dn = ldap_explode_dn(strtolower($GLOBALS['phpgw_info']['server']['ldap_context']), 1);
	60
	61	$explode_dn = ldap_explode_dn(strtolower($params['context']), 1);
	62	$explode_dn = array_reverse($explode_dn);
	63	//$params['uid'] = $explode_dn[3] . '-' . $params['uid'];
	64	$params['uid'] = $explode_dn[$context_dn['count']] . '-' . $params['uid'];
	65	}
	66
[69]	67	// Leio o ID a ser usado na criação do objecto. Esta função já incrementa o ID no BD.
[64]	68	$next_id = ($this->db_functions->get_next_id('accounts'));
	69	if ((!is_numeric($next_id['id'])) \|\| (!$next_id['status']))
	70	{
	71	$return['status'] = false;
[507]	72	$return['msg'] = $this->functions->lang('problems getting user id') . ".\n" . $id['msg'];
[64]	73	return $return;
	74	}
	75	else
	76	{
	77	$id = $next_id['id'];
	78	}
[2]	79
	80	// Cria array para incluir no LDAP
[7223]	81	$dn = 'uid=' . $params['uid'] . ',' . $params['context'];
	82	$user_info = array();
[2]	83	$user_info['accountStatus'] = $params['accountstatus'] == 1 ? 'active' : 'desactive';
	84	$user_info['cn'] = $params['givenname'] . ' ' . $params['sn'];
	85	$user_info['gidNumber'] = $params['gidnumber'];
	86	$user_info['givenName'] = $params['givenname'];
	87	$user_info['homeDirectory'] = '/home/' . $params['uid'];
	88	$user_info['mail'] = $params['mail'];
	89	$user_info['objectClass'][] = 'posixAccount';
	90	$user_info['objectClass'][] = 'inetOrgPerson';
	91	$user_info['objectClass'][] = 'shadowAccount';
	92	$user_info['objectClass'][] = 'qmailuser';
	93	$user_info['objectClass'][] = 'phpgwAccount';
	94	$user_info['objectClass'][] = 'top';
	95	$user_info['objectClass'][] = 'person';
	96	$user_info['objectClass'][] = 'organizationalPerson';
	97	$user_info['phpgwAccountExpires'] = '-1';
	98	$user_info['phpgwAccountType'] = 'u';
	99	$user_info['sn'] = $params['sn'];
	100	$user_info['uid'] = $params['uid'];
	101	$user_info['uidnumber'] = $id;
	102	$user_info['userPassword'] = '{md5}' . base64_encode(pack("H*",md5($params['password1'])));
[46]	103
[72]	104	if ($params['passwd_expired'] == '1')
	105	$user_info['phpgwLastPasswdChange'] = '0';
	106
[46]	107	// Gerenciar senhas RFC2617
	108	if ($this->current_config['expressoAdmin_userPasswordRFC2617'] == 'true')
	109	{
	110	$realm = $this->current_config['expressoAdmin_realm_userPasswordRFC2617'];
	111	$uid = $user_info['uid'];
	112	$password = $params['password1'];
	113	$user_info['userPasswordRFC2617'] = $realm . ': ' . md5("$uid:$realm:$password");
	114	}
	115
[2]	116	if ($params['phpgwaccountstatus'] == '1')
	117	$user_info['phpgwAccountStatus'] = 'A';
	118
	119	if ($params['departmentnumber'] != '')
	120	$user_info['departmentnumber'] = $params['departmentnumber'];
	121
	122	if ($params['telephonenumber'] != '')
	123	$user_info['telephoneNumber'] = $params['telephonenumber'];
	124
	125	// Cria user_info no caso de ter alias e forwarding email.
[81]	126	foreach ($params['mailalternateaddress'] as $index=>$mailalternateaddress)
	127	{
	128	if ($mailalternateaddress != '')
	129	$user_info['mailAlternateAddress'][] = $mailalternateaddress;
	130	}
[2]	131
[81]	132	foreach ($params['mailforwardingaddress'] as $index=>$mailforwardingaddress)
	133	{
	134	if ($mailforwardingaddress != '')
	135	$user_info['mailForwardingAddress'][] = $mailforwardingaddress;
	136	}
[2]	137
	138	if ($params['deliverymode'])
	139	$user_info['deliveryMode'] = 'forwardOnly';
	140
	141	//Ocultar da pesquisa e do catálogo
	142	if ($params['phpgwaccountvisible'])
	143	$user_info['phpgwAccountVisible'] = '-1';
	144
	145	// Suporte ao SAMBA
	146	if (($this->current_config['expressoAdmin_samba_support'] == 'true') && ($params['use_attrs_samba'] == 'on'))
	147	{
[317]	148
	149	// Qualquer um que crie um usuário, deve ter permissão para adicionar a senha samba.
[63]	150	// Verifica o acesso do gerente aos atributos samba
[317]	151	//if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_sambausers_attributes'))
	152	//{
[63]	153	//Verifica se o binario para criar as senhas do samba exite.
	154	if (!is_file('/home/expressolivre/mkntpwd'))
	155	{
	156	$return['status'] = false;
[493]	157	$return['msg'] .=
[507]	158	$this->functions->lang("the binary file /home/expressolivre/mkntpwd does not exist") . ".\\n" .
	159	$this->functions->lang("it is needed to create samba passwords") . ".\\n" .
	160	$this->functions->lang("alert your administrator about this") . ".";
[63]	161	}
	162	else
	163	{
	164	$user_info['objectClass'][] = 'sambaSamAccount';
	165	$user_info['loginShell'] = '/bin/bash';
	166
	167	$user_info['sambaSID'] = $params['sambadomain'] . '-' . ((2 * $id)+1000);
	168	$user_info['sambaPrimaryGroupSID'] = $params['sambadomain'] . '-' . ((2 * $user_info['gidNumber'])+1001);
[27]	169
[63]	170	$user_info['sambaAcctFlags'] = $params['sambaacctflags'];
[2]	171
[63]	172	$user_info['sambaLogonScript'] = $params['sambalogonscript'];
	173	$user_info['homeDirectory'] = $params['sambahomedirectory'];
[2]	174
[528]	175	$user_info['sambaLMPassword'] = exec('/home/expressolivre/mkntpwd -L "'.$params['password1'] . '"');
	176	$user_info['sambaNTPassword'] = exec('/home/expressolivre/mkntpwd -N "'.$params['password1'] . '"');
	177
[63]	178	$user_info['sambaPasswordHistory'] = '0000000000000000000000000000000000000000000000000000000000000000';
[2]	179
[63]	180	$user_info['sambaPwdCanChange'] = strtotime("now");
	181	$user_info['sambaPwdLastSet'] = strtotime("now");
	182	$user_info['sambaPwdMustChange'] = '2147483647';
	183	}
[317]	184	//}
[2]	185	}
[63]	186
	187	// Verifica o acesso do gerente aos atributos corporativos
	188	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'manipulate_corporative_information'))
	189	{
[379]	190	//retira caracteres que não são números.
[5773]	191	$params['corporative_information_cpf'] = preg_replace('/[^0-9]/', '', $params['corporative_information_cpf']);
[438]	192	//description
[520]	193	$params['corporative_information_description'] = utf8_encode($params['corporative_information_description']);
[63]	194	foreach ($params as $atribute=>$value)
	195	{
[64]	196	$pos = strstr($atribute, 'corporative_information_');
[63]	197	if ($pos !== false)
	198	{
	199	if ($params[$atribute])
	200	{
	201	$ldap_atribute = str_replace("corporative_information_", "", $atribute);
	202	$user_info[$ldap_atribute] = $params[$atribute];
	203	}
	204	}
	205	}
	206	}
	207
[2]	208	$result = $this->ldap_functions->ldap_add_entry($dn, $user_info);
	209	if (!$result['status'])
	210	{
	211	$return['status'] = false;
	212	$return['msg'] .= $result['msg'];
	213	}
	214
	215	// Chama funcao para salvar foto no OpenLDAP.
[107]	216	if ( ($_FILES['photo']['name'] != '') && ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users_picture')) )
[2]	217	{
	218	$result = $this->ldap_functions->ldap_save_photo($dn, $_FILES['photo']['tmp_name']);
	219	if (!$result['status'])
	220	{
	221	$return['status'] = false;
	222	$return['msg'] .= $result['msg'];
	223	}
	224	}
	225
	226	//GROUPS
	227	if ($params['groups'])
	228	{
	229	foreach ($params['groups'] as $gidnumber)
	230	{
	231	$result = $this->ldap_functions->add_user2group($gidnumber, $user_info['uid']);
	232	if (!$result['status'])
	233	{
	234	$return['status'] = false;
	235	$return['msg'] .= $result['msg'];
	236	}
	237	$result = $this->db_functions->add_user2group($gidnumber, $id);
	238	if (!$result['status'])
	239	{
	240	$return['status'] = false;
	241	$return['msg'] .= $result['msg'];
	242	}
	243	}
	244	}
	245
	246	// Inclusao do Mail do usuário nas listas de email selecionadas.
	247	if ($params['maillists'])
	248	{
[208]	249	foreach($params['maillists'] as $uid)
[2]	250	{
[208]	251	$result = $this->ldap_functions->add_user2maillist($uid, $user_info['mail']);
[2]	252	if (!$result['status'])
	253	{
	254	$return['status'] = false;
	255	$return['msg'] .= $result['msg'];
	256	}
	257	}
	258	}
	259
	260	// APPS
	261	if (count($params['apps']))
	262	{
	263	$result = $this->db_functions->add_id2apps($id, $params['apps']);
	264	if (!$result['status'])
	265	{
	266	$return['status'] = false;
	267	$return['msg'] .= $result['msg'];
	268	}
	269	}
	270
	271	// Chama funcao para incluir no pgsql as preferencia de alterar senha.
	272	if ($params['changepassword'])
	273	{
	274	$result = $this->db_functions->add_pref_changepassword($id);
	275	if (!$result['status'])
	276	{
	277	$return['status'] = false;
	278	$return['msg'] .= $result['msg'];
	279	}
	280	}
	281
	282	// Chama funcao para criar mailbox do usuario, no imap-cyrus.
	283	$result = $this->imap_functions->create($params['uid'], $params['mailquota']);
	284	if (!$result['status'])
	285	{
	286	$return['status'] = false;
	287	$return['msg'] .= $result['msg'];
	288	}
	289
[414]	290	$this->db_functions->write_log("created user",$dn);
[2]	291	}
	292
	293	return $return;
	294	}
	295
	296	function save($new_values)
	297	{
	298	$return['status'] = true;
	299
[64]	300	$old_values = $this->get_user_info($new_values['uidnumber']);
	301
[2]	302	$dn = 'uid=' . $old_values['uid'] . ',' . strtolower($old_values['context']);
[379]	303
	304	//retira caracteres que não são números.
[5773]	305	$new_values['corporative_information_cpf'] = preg_replace('/[^0-9]/', '', $new_values['corporative_information_cpf']);
[379]	306
[2]	307	$diff = array_diff($new_values, $old_values);
[81]	308
[72]	309	/*
	310	echo '<pre>';
	311	echo '--- OLD: ';
[81]	312	print_r($old_values);
[72]	313	echo '<br>--- NEW: ';
[81]	314	print_r($new_values);
[72]	315	echo '<br>';
[438]	316	exit;
	317	*/
[81]	318
[6553]	319	//Verifica quota de disco, como estou alterando, não preciso checar quota de usuários.
	320	if($this->db_functions->use_cota_control()) {
	321	$setor = $this->functions->get_info($new_values['context']);
	322	if (!$this->functions->existe_quota_disco($setor[0],$new_values['mailquota'])) {
	323	$return['status'] = false;
	324	$return['msg'] = "Quota em disco excedida...";//TODO colocar valor de acordo com tabela de traduções.
	325	return $return;
	326	}
	327	}
	328
[32]	329	$manager_account_lid = $_SESSION['phpgw_session']['session_lid'];
	330	if ((!$this->functions->check_acl($manager_account_lid,'edit_users')) &&
	331	(!$this->functions->check_acl($manager_account_lid,'change_users_password')) &&
[64]	332	(!$this->functions->check_acl($manager_account_lid,'edit_sambausers_attributes')) &&
[317]	333	(!$this->functions->check_acl($manager_account_lid,'manipulate_corporative_information')) &&
	334	(!$this->functions->check_acl($manager_account_lid,'edit_users_phonenumber'))
[32]	335	)
	336	{
	337	$return['status'] = false;
[507]	338	$return['msg'] = $this->functions->lang('You do not have access to edit user informations') . '.';
[32]	339	return $return;
	340	}
	341
[438]	342	// Check manager access
[2]	343	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users'))
	344	{
	345	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	346	// Change user organization
	347	if ($diff['context'])
	348	{
[355]	349	if (strcasecmp($old_values['context'], $new_values['context']) != 0)
[2]	350	{
[355]	351	$newrdn = 'uid=' . $new_values['uid'];
	352	$newparent = $new_values['context'];
	353	$result = $this->ldap_functions->change_user_context($dn, $newrdn, $newparent);
	354	if (!$result['status'])
	355	{
	356	$return['status'] = false;
	357	$return['msg'] .= $result['msg'];
	358	}
	359	else
	360	{
	361	$dn = $newrdn . ',' . $newparent;
[414]	362	$this->db_functions->write_log('modified user context', $dn . ': ' . $old_values['uid'] . '->' . $new_values['context']);
[355]	363	}
[2]	364	}
	365	}
	366
	367	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	368	// REPLACE some attributes
	369	if ($diff['givenname'])
	370	{
	371	$ldap_mod_replace['givenname'] = $new_values['givenname'];
	372	$ldap_mod_replace['cn'] = $new_values['givenname'] . ' ' . $new_values['sn'];
[414]	373	$this->db_functions->write_log("modified first name", "$dn: " . $old_values['givenname'] . "->" . $new_values['givenname']);
[2]	374	}
	375	if ($diff['sn'])
	376	{
	377	$ldap_mod_replace['sn'] = $new_values['sn'];
	378	$ldap_mod_replace['cn'] = $new_values['givenname'] . ' ' . $new_values['sn'];
[414]	379	$this->db_functions->write_log("modified last name", "$dn: " . $old_values['sn'] . "->" . $new_values['sn']);
[2]	380	}
	381	if ($diff['mail'])
	382	{
	383	$ldap_mod_replace['mail'] = $new_values['mail'];
	384	$this->ldap_functions->replace_user2maillists($new_values['mail'], $old_values['mail']);
[317]	385	$this->ldap_functions->replace_mail_from_institutional_account($new_values['mail'], $old_values['mail']);
[414]	386	$this->db_functions->write_log("modified user email", "$dn: " . $old_values['mail'] . "->" . $new_values['mail']);
[2]	387	}
[72]	388	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	389	// Passwd Expired - Com atributo
[414]	390	if (($old_values['passwd_expired'] != 0) && ($new_values['passwd_expired'] == '1'))
[72]	391	{
	392	$ldap_mod_replace['phpgwlastpasswdchange'] = '0';
[414]	393	$this->db_functions->write_log("Expired user password","$dn");
[72]	394	}
[2]	395	}
	396
	397	if ( ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users')) \|\|
	398	($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'change_users_password')) )
	399	{
	400	if ($diff['password1'])
	401	{
	402	$ldap_mod_replace['userPassword'] = '{md5}' . base64_encode(pack("H*",md5($new_values['password1'])));
[46]	403
[2]	404	// Suporte ao SAMBA
	405	if (($this->current_config['expressoAdmin_samba_support'] == 'true') && ($new_values['userSamba']) && ($new_values['use_attrs_samba'] == 'on'))
	406	{
[528]	407	$ldap_mod_replace['sambaLMPassword'] = exec('/home/expressolivre/mkntpwd -L "'.$new_values['password1'] . '"');
	408	$ldap_mod_replace['sambaNTPassword'] = exec('/home/expressolivre/mkntpwd -N "'.$new_values['password1'] . '"');
[2]	409	}
[46]	410
	411	// Gerenciar senhas RFC2617
	412	if ($this->current_config['expressoAdmin_userPasswordRFC2617'] == 'true')
	413	{
	414	$realm = $this->current_config['expressoAdmin_realm_userPasswordRFC2617'];
	415	$uid = $new_values['uid'];
	416	$password = $new_values['password1'];
	417	$passUserRFC2617 = $realm . ': ' . md5("$uid:$realm:$password");
	418
	419	if ($old_values['userPasswordRFC2617'] != '')
	420	$ldap_mod_replace['userPasswordRFC2617'] = $passUserRFC2617;
	421	else
	422	$ldap_add['userPasswordRFC2617'] = $passUserRFC2617;
	423	}
	424
[414]	425	$this->db_functions->write_log("modified user password",$dn);
[2]	426	}
	427	}
[317]	428
	429	if ( ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users')) \|\|
	430	($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users_phonenumber')) )
	431	{
	432	if (($diff['telephonenumber']) && ($old_values['telephonenumber'] != ''))
	433	{
[3161]	434	$ldap_mod_replace['telephonenumber'] = $new_values['telephonenumber'];
	435	$this->db_functions->write_log('modified user telephonenumber', $dn . ': ' . $old_values['telephonenumber'] . '->' . $new_values['telephonenumber']);
[5133]	436	$ldap_mod_replace['telephonenumber'] = $new_values['telephonenumber'];
	437	$this->db_functions->write_log('modified user telephonenumber', $dn . ': ' . $old_values['telephonenumber'] . '->' . $new_values['telephonenumber']);
[317]	438	}
[3161]	439	else if (($old_values['telephonenumber'] != '') && ($new_values['telephonenumber'] == ''))
	440	{
	441	$ldap_remove['telephonenumber'] = array();
	442	$this->db_functions->write_log("removed user phone",$dn);
	443	}
	444	else if (($old_values['telephonenumber'] == '') && ($new_values['telephonenumber'] != ''))
	445	{
	446	$ldap_add['telephonenumber'] = $new_values['telephonenumber'];
	447	$this->db_functions->write_log("added user phone",$dn);
	448	}
[317]	449	}
[63]	450
	451	// REPLACE, ADD & REMOVE COPORATIVEs ATRIBUTES
	452	// Verifica o acesso do gerente aos atributos corporativos
[64]	453
	454	if ( ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users')) \|\|
	455	($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'manipulate_corporative_information')) )
[63]	456	{
	457	foreach ($new_values as $atribute=>$value)
	458	{
[64]	459	$pos = strstr($atribute, 'corporative_information_');
[63]	460	if ($pos !== false)
	461	{
	462	$ldap_atribute = str_replace("corporative_information_", "", $atribute);
[414]	463	// REPLACE CORPORATIVE ATTRIBUTES
[63]	464	if (($diff[$atribute]) && ($old_values[$atribute] != ''))
	465	{
	466	$ldap_atribute = str_replace("corporative_information_", "", $atribute);
[414]	467	$ldap_mod_replace[$ldap_atribute] = utf8_encode($new_values[$atribute]);
	468	$this->db_functions->write_log('modified user attribute', $dn . ': ' . $ldap_atribute . ': ' . $old_values[$atribute] . '->' . $new_values[$atribute]);
[63]	469	}
[414]	470	//ADD CORPORATIVE ATTRIBUTES
[63]	471	elseif (($old_values[$atribute] == '') && ($new_values[$atribute] != ''))
	472	{
[414]	473	$ldap_add[$ldap_atribute] = utf8_encode($new_values[$atribute]);
	474	$this->db_functions->write_log('added user attribute', $dn . ': ' . $ldap_atribute . ': ' . $old_values[$atribute] . '->' . $new_values[$atribute]);
[63]	475	}
[414]	476	//REMOVE CORPORATIVE ATTRIBUTES
[63]	477	elseif (($old_values[$atribute] != '') && ($new_values[$atribute] == ''))
	478	{
	479	$ldap_remove[$ldap_atribute] = array();
[414]	480	$this->db_functions->write_log('removed user attribute', $dn . ': ' . $ldap_atribute . ': ' . $old_values[$atribute] . '->' . $new_values[$atribute]);
[63]	481	}
	482	}
	483	}
	484	}
	485
[2]	486	//Suporte ao SAMBA
	487	if ( ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users')) \|\|
	488	($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_sambausers_attributes')) )
	489	{
[355]	490
	491	if ($diff['gidnumber'])
	492	{
	493	$ldap_mod_replace['gidnumber'] = $new_values['gidnumber'];
[414]	494	$this->db_functions->write_log('modified user primary group', $dn . ': ' . $old_values['gidnumber'] . '->' . $new_values['gidnumber']);
[355]	495	}
	496
[2]	497	if (($this->current_config['expressoAdmin_samba_support'] == 'true') && ($new_values['userSamba']) && ($new_values['use_attrs_samba'] == 'on'))
	498	{
[355]	499	if ($diff['gidnumber'])
	500	{
	501	$ldap_mod_replace['sambaPrimaryGroupSID'] = $this->current_config['expressoAdmin_sambaSID'] . '-' . ((2 * $new_values['gidnumber'])+1001);
[414]	502	$this->db_functions->write_log('modified user sambaPrimaryGroupSID', $dn);
[355]	503	}
	504
[2]	505	if ($diff['sambaacctflags'])
	506	{
	507	$ldap_mod_replace['sambaacctflags'] = $new_values['sambaacctflags'];
[414]	508	$this->db_functions->write_log("modified user sambaacctflags",$dn);
[2]	509	}
	510	if ($diff['sambalogonscript'])
	511	{
	512	$ldap_mod_replace['sambalogonscript'] = $new_values['sambalogonscript'];
[414]	513	$this->db_functions->write_log("modified user sambalogonscript",$dn);
[2]	514	}
	515	if ($diff['sambahomedirectory'])
	516	{
	517	$ldap_mod_replace['homedirectory'] = $new_values['sambahomedirectory'];
[414]	518	$this->db_functions->write_log("modified user homedirectory",$dn);
[2]	519	}
[27]	520	if ($diff['sambadomain'])
	521	{
	522	$ldap_mod_replace['sambaSID'] = $diff['sambadomain'] . '-' . ((2 * $old_values['uidnumber'])+1000);
	523	$ldap_mod_replace['sambaPrimaryGroupSID'] = $diff['sambadomain'] . '-' . ((2 * $old_values['gidnumber'])+1001);
[414]	524	$this->db_functions->write_log('modified user samba domain', $dn . ': ' . $old_values['sambadomain'] . '->' . $new_values['sambadomain']);
[27]	525	}
[2]	526	}
	527	}
	528
	529	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[81]	530	// ADD or REMOVE some attributes
[2]	531	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[180]	532
	533	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	534	// PHOTO
	535	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users_picture'))
	536	{
	537	if ($new_values['delete_photo'])
	538	{
	539	$this->ldap_functions->ldap_remove_photo($dn);
[414]	540	$this->db_functions->write_log("removed user photo",$dn);
[180]	541	}
	542	elseif ($_FILES['photo']['name'] != '')
	543	{
[283]	544
[5133]	545	if ($_FILES['photo']['size'] > 10000)
[283]	546	{
	547	$return['status'] = false;
[5133]	548	$return['msg'] .= $this->functions->lang('User photo could not be save because is bigger the 10 kb') . '.';
[283]	549	}
	550	else
	551	{
[309]	552	if ($new_values['photo_exist'])
	553	{
	554	$photo_exist = true;
[414]	555	$this->db_functions->write_log("mofified user photo",$dn);
[309]	556	}
	557	else
	558	{
	559	$photo_exist = false;
[414]	560	$this->db_functions->write_log("added user photo",$dn);
[309]	561	}
	562	$this->ldap_functions->ldap_save_photo($dn, $_FILES['photo']['tmp_name'], $new_values['photo_exist'], $photo_exist);
[180]	563	}
	564	}
	565	}
[2]	566
	567	// Verifica o acesso ára adicionar ou remover tais atributos
	568	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users'))
	569	{
[72]	570	// Passwd Expired - Sem atributo
	571	if (($old_values['passwd_expired'] == '') && ($new_values['passwd_expired'] == '1'))
	572	{
	573	$ldap_add['phpgwlastpasswdchange'] = '0';
[414]	574	$this->db_functions->write_log("expired user password",$dn);
[72]	575	}
	576	if (($old_values['passwd_expired'] == '0') && ($new_values['passwd_expired'] == ''))
	577	{
	578	$ldap_remove['phpgwlastpasswdchange'] = array();
[414]	579	$this->db_functions->write_log("removed expiry from user password",$dn);
[72]	580	}
	581	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[2]	582	// PREF_CHANGEPASSWORD
	583	if (($old_values['changepassword'] == '') && ($new_values['changepassword'] != ''))
	584	{
	585	$this->db_functions->add_pref_changepassword($new_values['uidnumber']);
[414]	586	$this->db_functions->write_log("turn on changepassword",$dn);
[2]	587	}
	588	if (($old_values['changepassword'] != '') && ($new_values['changepassword'] == ''))
	589	{
	590	$this->db_functions->remove_pref_changepassword($new_values['uidnumber']);
[414]	591	$this->db_functions->write_log("turn of changepassword",$dn);
[2]	592	}
	593	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	594	// ACCOUNT STATUS
	595	if (($old_values['phpgwaccountstatus'] == '') && ($new_values['phpgwaccountstatus'] != ''))
	596	{
	597	$ldap_add['phpgwaccountstatus'] = 'A';
[414]	598	$this->db_functions->write_log("turn on user account",$dn);
[2]	599	}
	600	if (($old_values['phpgwaccountstatus'] != '') && ($new_values['phpgwaccountstatus'] == ''))
	601	{
	602	$ldap_remove['phpgwaccountstatus'] = array();
[414]	603	$this->db_functions->write_log("turn off user account",$dn);
[2]	604	}
[548]	605
	606	if ($new_values['phpgwaccountexpired'] == '1') /////////////////////////
	607	{
[621]	608	$this->db_functions->write_log("Reactivated blocked user by downtime",'',$dn,'','');
[597]	609	$this->db_functions->reactivate_inactive_user($old_values['uidnumber']);
[548]	610	}
[2]	611	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	612	// ACCOUNT VISIBLE
	613	if (($old_values['phpgwaccountvisible'] == '') && ($new_values['phpgwaccountvisible'] != ''))
	614	{
	615	$ldap_add['phpgwaccountvisible'] = '-1';
[414]	616	$this->db_functions->write_log("turn on phpgwaccountvisible",$dn);
[2]	617	}
	618	if (($old_values['phpgwaccountvisible'] != '') && ($new_values['phpgwaccountvisible'] == ''))
	619	{
	620	$ldap_remove['phpgwaccountvisible'] = array();
[414]	621	$this->db_functions->write_log("turn off phpgwaccountvisible",$dn);
[2]	622	}
	623	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	624	// Mail Account STATUS
	625	if (($old_values['accountstatus'] == '') && ($new_values['accountstatus'] != ''))
	626	{
	627	$ldap_add['accountstatus'] = 'active';
[414]	628	$this->db_functions->write_log("turn on user account email",$dn);
[2]	629	}
	630	if (($old_values['accountstatus'] != '') && ($new_values['accountstatus'] == ''))
	631	{
	632	$ldap_remove['accountstatus'] = array();
[414]	633	$this->db_functions->write_log("turn off user account email",$dn);
[2]	634	}
	635	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	636	// MAILALTERNATEADDRESS
[81]	637	if (!$new_values['mailalternateaddress'])
	638	$new_values['mailalternateaddress'] = array();
	639	if (!$old_values['mailalternateaddress'])
	640	$old_values['mailalternateaddress'] = array();
	641	$add_mailalternateaddress = array_diff($new_values['mailalternateaddress'], $old_values['mailalternateaddress']);
	642	$remove_mailalternateaddress = array_diff($old_values['mailalternateaddress'], $new_values['mailalternateaddress']);
	643	foreach ($add_mailalternateaddress as $index=>$mailalternateaddress)
	644	{
	645	if ($mailalternateaddress != '')
	646	{
	647	$ldap_add['mailalternateaddress'][] = $mailalternateaddress;
[414]	648	$this->db_functions->write_log("added mailalternateaddress","$dn: $mailalternateaddress");
[81]	649	}
	650	}
	651	foreach ($remove_mailalternateaddress as $index=>$mailalternateaddress)
	652	{
	653	if ($mailalternateaddress != '')
	654	{
	655	if ($index !== 'count')
	656	{
	657	$ldap_remove['mailalternateaddress'][] = $mailalternateaddress;
[414]	658	$this->db_functions->write_log("removed mailalternateaddress","$dn: $mailalternateaddress");
[81]	659	}
	660	}
	661	}
	662
	663	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	664	// MAILFORWARDINGADDRESS
	665	if (!$new_values['mailforwardingaddress'])
	666	$new_values['mailforwardingaddress'] = array();
	667	if (!$old_values['mailforwardingaddress'])
	668	$old_values['mailforwardingaddress'] = array();
	669	$add_mailforwardingaddress = array_diff($new_values['mailforwardingaddress'], $old_values['mailforwardingaddress']);
	670	$remove_mailforwardingaddress = array_diff($old_values['mailforwardingaddress'], $new_values['mailforwardingaddress']);
	671	foreach ($add_mailforwardingaddress as $index=>$mailforwardingaddress)
	672	{
	673	if ($mailforwardingaddress != '')
	674	{
	675	$ldap_add['mailforwardingaddress'][] = $mailforwardingaddress;
[414]	676	$this->db_functions->write_log("added mailforwardingaddress","$dn: $mailforwardingaddress");
[81]	677	}
	678	}
	679	foreach ($remove_mailforwardingaddress as $index=>$mailforwardingaddress)
	680	{
	681	if ($mailforwardingaddress != '')
	682	{
	683	if ($index !== 'count')
	684	{
	685	$ldap_remove['mailforwardingaddress'][] = $mailforwardingaddress;
[414]	686	$this->db_functions->write_log("removed mailforwardingaddress","$dn: $mailforwardingaddress");
[81]	687	}
	688	}
	689	}
	690
	691	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[2]	692	// Delivery Mode
	693	if (($old_values['deliverymode'] == '') && ($new_values['deliverymode'] != ''))
	694	{
	695	$ldap_add['deliverymode'] = 'forwardOnly';
[414]	696	$this->db_functions->write_log("added forwardOnly", $dn);
[2]	697	}
	698	if (($old_values['deliverymode'] != '') && ($new_values['deliverymode'] == ''))
	699	{
	700	$ldap_remove['deliverymode'] = array();
[414]	701	$this->db_functions->write_log("removed forwardOnly", $dn);
[2]	702	}
	703	}
	704
	705	if ( ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users')) \|\|
	706	($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'change_users_quote')) )
	707	{
	708	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	709	// MAILQUOTA
[520]	710	if ( ($new_values['mailquota'] != $old_values['mailquota']) && (is_numeric($new_values['mailquota'])) )
[2]	711	{
[520]	712	$result_change_user_quota = $this->imap_functions->change_user_quota($new_values['uid'], $new_values['mailquota']);
	713
	714	if ($result_change_user_quota['status'])
	715	{
	716	$this->db_functions->write_log("modified user email quota" , $dn . ':' . $old_values['mailquota'] . '->' . $new_values['mailquota']);
	717	}
	718	else
	719	{
	720	$return['status'] = false;
	721	$return['msg'] .= $result_change_user_quota['msg'];
	722	}
[2]	723	}
	724	}
[63]	725
[2]	726	if ( ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users')) \|\|
	727	($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_sambausers_attributes')) )
	728	{
	729	//////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	730	// REMOVE ATTRS OF SAMBA
	731	if (($this->current_config['expressoAdmin_samba_support'] == 'true') && ($new_values['userSamba']) && ($new_values['use_attrs_samba'] != 'on'))
	732	{
	733	$ldap_remove['objectclass'] = 'sambaSamAccount';
	734	$ldap_remove['loginShell'] = array();
	735	$ldap_remove['sambaSID'] = array();
	736	$ldap_remove['sambaPrimaryGroupSID'] = array();
	737	$ldap_remove['sambaAcctFlags'] = array();
	738	$ldap_remove['sambaLogonScript'] = array();
	739	$ldap_remove['sambaLMPassword'] = array();
	740	$ldap_remove['sambaNTPassword'] = array();
	741	$ldap_remove['sambaPasswordHistory'] = array();
	742	$ldap_remove['sambaPwdCanChange'] = array();
	743	$ldap_remove['sambaPwdLastSet'] = array();
	744	$ldap_remove['sambaPwdMustChange'] = array();
[414]	745	$this->db_functions->write_log("removed user samba attributes", $dn);
[2]	746	}
	747	//////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	748	// ADD ATTRS OF SAMBA
	749	if (($this->current_config['expressoAdmin_samba_support'] == 'true') && (!$new_values['userSamba']) && ($new_values['use_attrs_samba'] == 'on'))
	750	{
	751	if (!is_file('/home/expressolivre/mkntpwd'))
	752	{
	753	$return['status'] = false;
[507]	754	$return['msg'] .= $this->functions->lang("The file /home/expressolivre/mkntpwd does not exist") . ".\n";
	755	$return['msg'] .= $this->functions->lang("It is necessery to create samba passwords") . ".\n";
	756	$return['msg'] .= $this->functions->lang("Inform your system administrator about this") . ".\n";
[2]	757	}
	758	else
	759	{
	760	$ldap_add['objectClass'][] = 'sambaSamAccount';
	761	$ldap_mod_replace['loginShell'] = '/bin/bash';
[47]	762	$ldap_add['sambaSID'] = $new_values['sambadomain'] . '-' . ((2 * $new_values['uidnumber'])+1000);
	763	$ldap_add['sambaPrimaryGroupSID'] = $new_values['sambadomain'] . '-' . ((2 * $new_values['gidnumber'])+1001);
[2]	764	$ldap_add['sambaAcctFlags'] = $new_values['sambaacctflags'];
	765	$ldap_add['sambaLogonScript'] = $new_values['sambalogonscript'];
	766	$ldap_mod_replace['homeDirectory'] = $new_values['sambahomedirectory'];
	767	$ldap_add['sambaLMPassword'] = exec('/home/expressolivre/mkntpwd -L '.'senha');
	768	$ldap_add['sambaNTPassword'] = exec('/home/expressolivre/mkntpwd -N '.'senha');
	769	$ldap_add['sambaPasswordHistory'] = '0000000000000000000000000000000000000000000000000000000000000000';
	770	$ldap_add['sambaPwdCanChange'] = strtotime("now");
	771	$ldap_add['sambaPwdLastSet'] = strtotime("now");
	772	$ldap_add['sambaPwdMustChange'] = '2147483647';
[414]	773	$this->db_functions->write_log("added user samba attribute", $dn);
[2]	774	}
	775	}
	776	}
	777
	778	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	779	// GROUPS
[379]	780	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_groups'))
[2]	781	{
[379]	782	// If the manager does not have the suficient access, the new_values.uid is empty.
	783	if (empty($new_values['uid']))
	784	$user_uid = $old_values['uid'];
	785	else
	786	$user_uid = $new_values['uid'];
	787
[2]	788	if (!$new_values['groups'])
	789	$new_values['groups'] = array();
	790	if (!$old_values['groups'])
	791	$old_values['groups'] = array();
	792
	793	$add_groups = array_diff($new_values['groups'], $old_values['groups']);
	794	$remove_groups = array_diff($old_values['groups'], $new_values['groups']);
	795
	796	if (count($add_groups)>0)
	797	{
	798	foreach($add_groups as $gidnumber)
	799	{
	800	$this->db_functions->add_user2group($gidnumber, $new_values['uidnumber']);
[379]	801	$this->ldap_functions->add_user2group($gidnumber, $user_uid);
[438]	802	$this->db_functions->write_log("included user to group", "uid:$user_uid -> gid:$gidnumber");
[2]	803	}
	804	}
[64]	805
[2]	806	if (count($remove_groups)>0)
	807	{
	808	foreach($remove_groups as $gidnumber)
	809	{
	810	foreach($old_values['groups_info'] as $group)
	811	{
	812	if (($group['gidnumber'] == $gidnumber) && ($group['group_disabled'] == 'false'))
	813	{
	814	$this->db_functions->remove_user2group($gidnumber, $new_values['uidnumber']);
[379]	815	$this->ldap_functions->remove_user2group($gidnumber, $user_uid);
[414]	816	$this->db_functions->write_log("removed user from group", "$dn: $gidnumber");
[2]	817	}
	818	}
	819	}
	820	}
	821	}
	822	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	823	// LDAP_MOD_REPLACE
	824	if (count($ldap_mod_replace))
	825	{
	826	$result = $this->ldap_functions->replace_user_attributes($dn, $ldap_mod_replace);
	827	if (!$result['status'])
	828	{
	829	$return['status'] = false;
	830	$return['msg'] .= $result['msg'];
	831	}
	832	}
	833
	834	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	835	// LDAP_MOD_ADD
	836	if (count($ldap_add))
	837	{
	838	$result = $this->ldap_functions->add_user_attributes($dn, $ldap_add);
	839	if (!$result['status'])
	840	{
	841	$return['status'] = false;
	842	$return['msg'] .= $result['msg'];
	843	}
	844	}
	845
	846	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	847	// LDAP_MOD_REMOVE
	848	if (count($ldap_remove))
	849	{
	850	$result = $this->ldap_functions->remove_user_attributes($dn, $ldap_remove);
	851	if (!$result['status'])
	852	{
	853	$return['status'] = false;
	854	$return['msg'] .= $result['msg'];
	855	}
	856	}
	857	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	858
	859
	860	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users'))
	861	{
	862	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	863	// MAILLISTS
	864	if (!$new_values['maillists'])
	865	$new_values['maillists'] = array();
	866	if (!$old_values['maillists'])
	867	$old_values['maillists'] = array();
[64]	868
[2]	869	$add_maillists = array_diff($new_values['maillists'], $old_values['maillists']);
	870	$remove_maillists = array_diff($old_values['maillists'], $new_values['maillists']);
	871
	872	if (count($add_maillists)>0)
	873	{
[208]	874	foreach($add_maillists as $uid)
[2]	875	{
[208]	876	$this->ldap_functions->add_user2maillist($uid, $new_values['mail']);
[438]	877	$this->db_functions->write_log("included user to maillist","$uid: $dn");
[2]	878	}
	879	}
[414]	880
[2]	881	if (count($remove_maillists)>0)
	882	{
[208]	883	foreach($remove_maillists as $uid)
[2]	884	{
[208]	885	$this->ldap_functions->remove_user2maillist($uid, $new_values['mail']);
[414]	886	$this->db_functions->write_log("removed user from maillist","$dn: $uid");
[2]	887	}
	888	}
	889
	890	//////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	891	// APPS
	892	$new_values2 = array();
	893	$old_values2 = array();
	894	if (count($new_values['apps'])>0)
	895	{
	896	foreach ($new_values['apps'] as $app=>$tmp)
	897	{
	898	$new_values2[] = $app;
	899	}
	900	}
	901	if (count($old_values['apps'])>0)
	902	{
	903	foreach ($old_values['apps'] as $app=>$tmp)
	904	{
	905	$old_values2[] = $app;
	906	}
	907	}
	908	$add_apps = array_flip(array_diff($new_values2, $old_values2));
	909	$remove_apps = array_flip(array_diff($old_values2, $new_values2));
	910
	911	if (count($add_apps)>0)
	912	{
	913	$this->db_functions->add_id2apps($new_values['uidnumber'], $add_apps);
[9]	914
	915	foreach ($add_apps as $app => $index)
[414]	916	$this->db_functions->write_log("added application to user","$dn: $app");
[2]	917	}
	918	if (count($remove_apps)>0)
	919	{
[9]	920	//Verifica se o gerente tem acesso a aplicação antes de remove-la do usuario.
	921	$manager_apps = $this->db_functions->get_apps($_SESSION['phpgw_session']['session_lid']);
	922
	923	foreach ($remove_apps as $app => $app_index)
	924	{
	925	if ($manager_apps[$app] == 'run')
	926	$remove_apps2[$app] = $app_index;
	927	}
	928	$this->db_functions->remove_id2apps($new_values['uidnumber'], $remove_apps2);
	929
	930	foreach ($remove_apps2 as $app => $access)
[414]	931	$this->db_functions->write_log("removed application to user","$dn: $app");
[2]	932	}
	933	//////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	934	}
	935	return $return;
	936	}
	937
[64]	938	function get_user_info($uidnumber)
[2]	939	{
[507]	940	if (!$user_info_ldap = $this->ldap_functions->get_user_info($uidnumber))
	941	return false;
[2]	942	$user_info_db1 = $this->db_functions->get_user_info($uidnumber);
[64]	943	$user_info_db2 = $this->ldap_functions->gidnumbers2cn($user_info_db1['groups']);
[2]	944	$user_info_imap = $this->imap_functions->get_user_info($user_info_ldap['uid']);
	945	$user_info = array_merge($user_info_ldap, $user_info_db1, $user_info_db2, $user_info_imap);
	946	return $user_info;
	947	}
	948
	949	function set_user_default_password($params)
	950	{
[458]	951	$return['status'] = 1;
[2]	952	$uid = $params['uid'];
	953	$defaultUserPassword = '{md5}'.base64_encode(pack("H*",md5($this->current_config['expressoAdmin_defaultUserPassword'])));
	954
	955	if (!$this->db_functions->default_user_password_is_set($uid))
	956	{
	957	$userPassword = $this->ldap_functions->set_user_password($uid, $defaultUserPassword);
	958	$this->db_functions->set_user_password($uid, $userPassword);
[458]	959	$this->db_functions->write_log("inserted default password",$uid);
[2]	960	}
	961	else
	962	{
[458]	963	$return['status'] = 0;
	964	$return['msg'] = $this->functions->lang('default password already registered') . '!';
[2]	965	}
	966
	967	return $return;
	968	}
	969
	970	function return_user_password($params)
	971	{
[458]	972	$return['status'] = 1;
[2]	973	$uid = $params['uid'];
	974
	975	if ($this->db_functions->default_user_password_is_set($uid))
	976	{
	977	$userPassword = $this->db_functions->get_user_password($uid);
	978	$this->ldap_functions->set_user_password($uid, $userPassword);
	979	}
	980	else
	981	{
[458]	982	$return['status'] = 0;
	983	$return['msg'] = $this->functions->lang('default password not registered') . '!';
[2]	984	}
	985
[414]	986	$this->db_functions->write_log("returned user password",$uid);
[2]	987
	988	return $return;
	989	}
	990
	991	function delete($params)
	992	{
	993	$return['status'] = true;
[507]	994	$this->db_functions->write_log('delete user: start', $params['uid']);
[2]	995
	996	// Verifica o acesso do gerente
	997	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'delete_users'))
	998	{
	999	$uidnumber = $params['uidnumber'];
[507]	1000	if (!$user_info = $this->get_user_info($uidnumber))
	1001	{
	1002	$this->db_functions->write_log('delete user: error getting users info', $user_info['uid']);
	1003	$return['status'] = false;
	1004	$return['msg'] = $this->functions->lang('error getting users info');
	1005	return $return;
	1006	}
	1007
[2]	1008	//LDAP
	1009	$result_ldap = $this->ldap_functions->delete_user($user_info);
	1010	if (!$result_ldap['status'])
	1011	{
	1012	$return['status'] = false;
[507]	1013	$return['msg'] = 'user.delete(ldap): ' . $result_ldap['msg'];
	1014	return $return;
[2]	1015	}
[64]	1016	else
[2]	1017	{
[6186]	1018
[507]	1019	$this->db_functions->write_log("deleted users data from ldap", $user_info['uid']);
	1020
[64]	1021	//DB
	1022	$result_db = $this->db_functions->delete_user($user_info);
	1023	if (!$result_db['status'])
	1024	{
	1025	$return['status'] = false;
[507]	1026	$return['msg'] .= 'user.delete(db): ' . $result_db['msg'];
[64]	1027	}
[507]	1028	else
	1029	{
	1030	$this->db_functions->write_log("deleted users data from DB", $user_info['uid']);
	1031	}
	1032
[64]	1033	//IMAP
[1913]	1034	$result_imap = $this->imap_functions->delete_mailbox($user_info['uid']);
[64]	1035	if (!$result_imap['status'])
	1036	{
	1037	$return['status'] = false;
[507]	1038	$return['msg'] .= $result_imap['msg'];
[64]	1039	}
[507]	1040	else
	1041	{
	1042	$this->db_functions->write_log("deleted users data from IMAP", $user_info['uid']);
	1043	}
	1044
[6186]	1045	//GERENTE
	1046	$result_db_manager = $this->db_functions->delete_manager($user_info['uid'], $params['uidnumber']);
	1047	if (!$result_db_manager['status'])
	1048	{
	1049	$return['status'] = false;
	1050	$return['msg'] .= $result_imap['msg'];
	1051	}
	1052	else
	1053	{
	1054	$this->db_functions->write_log("deleted manager data from BD", $user_info['uid']);
	1055	}
[2]	1056	}
	1057	}
[507]	1058	else
	1059	{
	1060	$this->db_functions->write_log('delete user: manager does not have access', $params['uidnumber']);
	1061	}
[2]	1062
[507]	1063	$this->db_functions->write_log('delete user: end', $user_info['uid']);
[2]	1064	return $return;
	1065	}
	1066
	1067
	1068	function rename($params)
	1069	{
	1070	$return['status'] = true;
[64]	1071
	1072	// Verifica acesso do gerente (OU) ao tentar renomear um usuário.
	1073	if ( ! $this->ldap_functions->check_access_to_renamed($params['uid']) )
	1074	{
	1075	$return['status'] = false;
[507]	1076	$return['msg'] .= $this->functions->lang('You do not have access to delete user') . '.';
[64]	1077	return $return;
	1078	}
[2]	1079
[414]	1080	// Check if the new_uid is in use.
[396]	1081	if ( ! $this->ldap_functions->check_rename_new_uid($params['new_uid']) )
	1082	{
	1083	$return['status'] = false;
[507]	1084	$return['msg'] = $this->functions->lang('New login already in use') . '.';
[396]	1085	return $return;
	1086	}
	1087
[2]	1088	// Verifica o acesso do gerente
	1089	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'rename_users'))
	1090	{
	1091	$uid = $params['uid'];
	1092	$new_uid = $params['new_uid'];
	1093	$defaultUserPassword = '{md5}'.base64_encode(pack("H*",md5($this->current_config['expressoAdmin_defaultUserPassword'])));
	1094	$defaultUserPassword_plain = $this->current_config['expressoAdmin_defaultUserPassword'];
	1095
	1096	$emailadmin_profiles = $this->db_functions->get_sieve_info();
	1097	$sieve_enable = $emailadmin_profiles[0]['imapenablesieve'];
	1098	$sieve_server = $emailadmin_profiles[0]['imapsieveserver'];
	1099	$sieve_port = $emailadmin_profiles[0]['imapsieveport'];
	1100
	1101	$imap_admin = $_SESSION['phpgw_info']['expresso']['email_server']['imapAdminUsername'];
	1102	$imap_passwd = $_SESSION['phpgw_info']['expresso']['email_server']['imapAdminPW'];
	1103	$imap_server = $_SESSION['phpgw_info']['expresso']['email_server']['imapServer'];
	1104	$imap_port = $_SESSION['phpgw_info']['expresso']['email_server']['imapPort'];
	1105	$imapDelimiter = $_SESSION['phpgw_info']['expresso']['email_server']['imapDelimiter'];
	1106
	1107	//Verifica se está sendo usuado cyrus 2.2 ou superior
	1108	$sk = fsockopen ($imap_server,$imap_port);
	1109	$server_resp = fread($sk, 100);
[5593]	1110	$tmp = preg_split('/v2./', $server_resp);
[2]	1111	$cyrus_version = '2' . $tmp[1][0];
	1112
[5693]	1113	if ( $cyrus_version < intVal('2.2') )
[2]	1114	{
[396]	1115	$return['status'] = false;
[414]	1116	$return['msg'] = "The rename user is only permitted with cyrus 2.2 or higher,";
	1117	$return['msg'] .= "\nand with the option 'allowusermoves: yes' set in imapd.conf.";
	1118
	1119
[396]	1120	return $return;
	1121	}
	1122
	1123	// Renomeia UID no openldap
	1124	$result = $this->ldap_functions->rename_uid($uid, $new_uid);
	1125	if (!$result['status'])
	1126	{
	1127	$return['status'] = false;
[507]	1128	$return['msg'] = $this->functions->lang("Error rename user in LDAP") . '.';
[396]	1129	return $return;
	1130	}
	1131
	1132	//Renomeia mailbox
[507]	1133	$imap_rename_result = $this->imap_functions->rename_mailbox($uid, $new_uid);
	1134	if (!$imap_rename_result['status'])
[396]	1135	{
	1136	// Back user uid.
	1137	$result = $this->ldap_functions->rename_uid($new_uid, $uid);
	1138
	1139	$return['status'] = false;
[507]	1140	$return['msg'] = $this->functions->lang("Error renaming user mailboxes") . ".\n";
	1141	$return['msg'] .= $imap_rename_result['msg'];
[396]	1142	return $return;
	1143	}
[507]	1144
[396]	1145
	1146	// Renomeia sieve script
	1147	include_once('sieve-php.lib.php');
[507]	1148	//function sieve($host, $port, $user, $pass, $auth="", $auth_types)
	1149	$sieve=new sieve($sieve_server, $sieve_port, $new_uid, $imap_passwd, $imap_admin, 'PLAIN');
[30]	1150
[396]	1151	if ($sieve->sieve_login())
	1152	{
	1153	$sieve->sieve_listscripts();
	1154	$myactivescript=$sieve->response["ACTIVE"];
	1155	$sieve->sieve_getscript($myactivescript);
	1156
	1157	$script = '';
	1158	if (!empty($sieve->response))
[30]	1159	{
	1160	foreach($sieve->response as $result)
	1161	{
	1162	$script .= $result;
	1163	}
[396]	1164	}
[507]	1165
	1166	if (!empty($script))
[396]	1167	{
[507]	1168	$scriptname = $new_uid;
	1169	if($sieve->sieve_sendscript($new_uid,$script))
[30]	1170	{
[507]	1171	if ($sieve->sieve_setactivescript($new_uid))
	1172	{
	1173	if (!$sieve->sieve_deletescript($myactivescript))
	1174	{
	1175	$return['msg'] .= $result['msg'] . $this->functions->lang("Error renaming sieve script") . ".\\n";
	1176	$return['msg'] .= $result['msg'] . $this->functions->lang("Problem deleting old script") . '.';
	1177	}
	1178	}
	1179	else
	1180	{
	1181	$return['msg'] .= $result['msg'] . $this->functions->lang("Error renaming sieve script") . ".\\n";
	1182	$return['msg'] .= $result['msg'] . $this->functions->lang("Problem activating sieve script") . '.';
	1183	}
[30]	1184	}
[507]	1185	else
	1186	{
	1187	$return['msg'] .= $result['msg'] . $this->functions->lang("Error renaming sieve script") . ".\\n";
	1188	$return['msg'] .= $result['msg'] . $this->functions->lang("Problem saving sieve script") . '.';
	1189	}
[30]	1190	}
[396]	1191	$sieve->sieve_logout();
	1192	}
	1193	else
	1194	{
	1195	$return['status'] = false;
[507]	1196	$return['msg'] .= $result['msg'] . $this->functions->lang("Error renaming sieve script") . ".\\n";
	1197	$return['msg'] .= $result['msg'] . $this->functions->lang("Can not login sieve") . '.';
[396]	1198	}
[30]	1199
[414]	1200	$this->db_functions->write_log("renamed user", "$uid -> $new_uid");
[2]	1201
[396]	1202	$return['exec_return'] = "";
	1203
[64]	1204	return $return;
[2]	1205	}
	1206	}
[63]	1207
	1208	function write_log_from_ajax($params)
	1209	{
	1210	$this->db_functions->write_log($params['_action'],'',$params['userinfo'],'','');
	1211	return true;
	1212	}
[2]	1213	}
[548]	1214	?>

Note: See TracBrowser for help on using the repository browser.

Context Navigation

source: trunk/expressoAdmin1_2/inc/class.user.inc.php @ 7243

Download in other formats: