Context Navigation

source: trunk/expressoAdmin1_2/inc/class.user.inc.php @ 72

Revision 72, 40.8 KB checked in by niltonneto, 17 years ago (diff)
* empty log message *
Property svn:eol-style set to `native` Property svn:executable set to ``*

Line
1	<?php
2	/**********************************************************************************\
3	* Expresso Administração *
4	* by Joao Alfredo Knopik Junior (joao.alfredo@gmail.com, jakjr@celepar.pr.gov.br) *
5	* --------------------------------------------------------------------------------*
6	* This program is free software; you can redistribute it and/or modify it *
7	* under the terms of the GNU General Public License as published by the *
8	* Free Software Foundation; either version 2 of the License, or (at your *
9	* option) any later version. *
10	\**********************************************************************************/
11
12	include_once('class.ldap_functions.inc.php');
13	include_once('class.db_functions.inc.php');
14	include_once('class.imap_functions.inc.php');
15	include_once('class.functions.inc.php');
16
17	class user
18	{
19	var $ldap_functions;
20	var $db_functions;
21	var $imap_functions;
22	var $functions;
23	var $current_config;
24
25
26	function user()
27	{
28	$this->ldap_functions = new ldap_functions;
29	$this->db_functions = new db_functions;
30	$this->imap_functions = new imap_functions;
31	$this->functions = new functions;
32	$this->current_config = $_SESSION['phpgw_info']['expresso']['expressoAdmin'];
33	}
34
35	function create($params)
36	{
37	$return['status'] = true;
38
39	// Verifica o acesso do gerente
40	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'add_users'))
41	{
42	// Adiciona a organização na frente do uid.
43	if ($this->current_config['expressoAdmin_prefix_org'] == 'true')
44	{
45	$context_dn = ldap_explode_dn(strtolower($GLOBALS['phpgw_info']['server']['ldap_context']), 1);
46
47	$explode_dn = ldap_explode_dn(strtolower($params['context']), 1);
48	$explode_dn = array_reverse($explode_dn);
49	//$params['uid'] = $explode_dn[3] . '-' . $params['uid'];
50	$params['uid'] = $explode_dn[$context_dn['count']] . '-' . $params['uid'];
51	}
52
53	// Leio o ID a ser usado na criação do objecto. Esta função já incrementa o ID no BD.
54	$next_id = ($this->db_functions->get_next_id('accounts'));
55	if ((!is_numeric($next_id['id'])) \|\| (!$next_id['status']))
56	{
57	$return['status'] = false;
58	$return['msg'] = "Problemas obtendo ID do usuário.\n" . $id['msg'];
59	return $return;
60	}
61	else
62	{
63	$id = $next_id['id'];
64	}
65
66	// Cria array para incluir no LDAP
67	$dn = 'uid=' . $params['uid'] . ',' . $params['context'];
68
69	$user_info = array();
70	$user_info['accountStatus'] = $params['accountstatus'] == 1 ? 'active' : 'desactive';
71	$user_info['cn'] = $params['givenname'] . ' ' . $params['sn'];
72	$user_info['gidNumber'] = $params['gidnumber'];
73	$user_info['givenName'] = $params['givenname'];
74	$user_info['homeDirectory'] = '/home/' . $params['uid'];
75	$user_info['mail'] = $params['mail'];
76	$user_info['objectClass'][] = 'posixAccount';
77	$user_info['objectClass'][] = 'inetOrgPerson';
78	$user_info['objectClass'][] = 'shadowAccount';
79	$user_info['objectClass'][] = 'qmailuser';
80	$user_info['objectClass'][] = 'phpgwAccount';
81	$user_info['objectClass'][] = 'top';
82	$user_info['objectClass'][] = 'person';
83	$user_info['objectClass'][] = 'organizationalPerson';
84	$user_info['phpgwAccountExpires'] = '-1';
85	$user_info['phpgwAccountType'] = 'u';
86	$user_info['sn'] = $params['sn'];
87	$user_info['uid'] = $params['uid'];
88	$user_info['uidnumber'] = $id;
89	$user_info['userPassword'] = '{md5}' . base64_encode(pack("H*",md5($params['password1'])));
90
91	if ($params['passwd_expired'] == '1')
92	$user_info['phpgwLastPasswdChange'] = '0';
93
94	// Gerenciar senhas RFC2617
95	if ($this->current_config['expressoAdmin_userPasswordRFC2617'] == 'true')
96	{
97	$realm = $this->current_config['expressoAdmin_realm_userPasswordRFC2617'];
98	$uid = $user_info['uid'];
99	$password = $params['password1'];
100	$user_info['userPasswordRFC2617'] = $realm . ': ' . md5("$uid:$realm:$password");
101	}
102
103	if ($params['phpgwaccountstatus'] == '1')
104	$user_info['phpgwAccountStatus'] = 'A';
105
106	if ($params['departmentnumber'] != '')
107	$user_info['departmentnumber'] = $params['departmentnumber'];
108
109	if ($params['telephonenumber'] != '')
110	$user_info['telephoneNumber'] = $params['telephonenumber'];
111
112	// Cria user_info no caso de ter alias e forwarding email.
113	if ($params['mailalternateaddress'] != '')
114	$user_info['mailAlternateAddress'] = $params['mailalternateaddress'];
115
116	if ($params['mailforwardingaddress'] != '')
117	$user_info['mailForwardingAddress'] = $params['mailforwardingaddress'];
118
119	if ($params['deliverymode'])
120	$user_info['deliveryMode'] = 'forwardOnly';
121
122	//Ocultar da pesquisa e do catálogo
123	if ($params['phpgwaccountvisible'])
124	$user_info['phpgwAccountVisible'] = '-1';
125
126	// Suporte ao SAMBA
127	if (($this->current_config['expressoAdmin_samba_support'] == 'true') && ($params['use_attrs_samba'] == 'on'))
128	{
129	// Verifica o acesso do gerente aos atributos samba
130	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_sambausers_attributes'))
131	{
132	//Verifica se o binario para criar as senhas do samba exite.
133	if (!is_file('/home/expressolivre/mkntpwd'))
134	{
135	$return['status'] = false;
136	$return['msg'] .= "O arquivo binário /home/expressolivre/mkntpwd não exite.\\nEle é necessário para a criação das senhas usadas pelo SAMBA.\\nInforme o administrador ExpressoLivre sobre isto.";
137	}
138	else
139	{
140	$user_info['objectClass'][] = 'sambaSamAccount';
141	$user_info['loginShell'] = '/bin/bash';
142
143	$user_info['sambaSID'] = $params['sambadomain'] . '-' . ((2 * $id)+1000);
144	$user_info['sambaPrimaryGroupSID'] = $params['sambadomain'] . '-' . ((2 * $user_info['gidNumber'])+1001);
145
146	$user_info['sambaAcctFlags'] = $params['sambaacctflags'];
147
148	$user_info['sambaLogonScript'] = $params['sambalogonscript'];
149	$user_info['homeDirectory'] = $params['sambahomedirectory'];
150
151	$user_info['sambaLMPassword'] = exec('/home/expressolivre/mkntpwd -L '.$params['password1']);
152	$user_info['sambaNTPassword'] = exec('/home/expressolivre/mkntpwd -N '.$params['password1']);
153	$user_info['sambaPasswordHistory'] = '0000000000000000000000000000000000000000000000000000000000000000';
154
155	$user_info['sambaPwdCanChange'] = strtotime("now");
156	$user_info['sambaPwdLastSet'] = strtotime("now");
157	$user_info['sambaPwdMustChange'] = '2147483647';
158	}
159	}
160	}
161
162	// Verifica o acesso do gerente aos atributos corporativos
163	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'manipulate_corporative_information'))
164	{
165	foreach ($params as $atribute=>$value)
166	{
167	$pos = strstr($atribute, 'corporative_information_');
168	if ($pos !== false)
169	{
170	if ($params[$atribute])
171	{
172	$ldap_atribute = str_replace("corporative_information_", "", $atribute);
173	$user_info[$ldap_atribute] = $params[$atribute];
174	}
175	}
176	}
177	}
178
179	$result = $this->ldap_functions->ldap_add_entry($dn, $user_info);
180	if (!$result['status'])
181	{
182	$return['status'] = false;
183	$return['msg'] .= $result['msg'];
184	}
185
186	// Chama funcao para salvar foto no OpenLDAP.
187	if ($_FILES['photo']['name'] != '')
188	{
189	$result = $this->ldap_functions->ldap_save_photo($dn, $_FILES['photo']['tmp_name']);
190	if (!$result['status'])
191	{
192	$return['status'] = false;
193	$return['msg'] .= $result['msg'];
194	}
195	}
196
197	//GROUPS
198	if ($params['groups'])
199	{
200	foreach ($params['groups'] as $gidnumber)
201	{
202	$result = $this->ldap_functions->add_user2group($gidnumber, $user_info['uid']);
203	if (!$result['status'])
204	{
205	$return['status'] = false;
206	$return['msg'] .= $result['msg'];
207	}
208	$result = $this->db_functions->add_user2group($gidnumber, $id);
209	if (!$result['status'])
210	{
211	$return['status'] = false;
212	$return['msg'] .= $result['msg'];
213	}
214	}
215	}
216
217	// Inclusao do Mail do usuário nas listas de email selecionadas.
218	if ($params['maillists'])
219	{
220	foreach($params['maillists'] as $uidnumber)
221	{
222	$result = $this->ldap_functions->add_user2maillist($uidnumber, $user_info['mail']);
223	if (!$result['status'])
224	{
225	$return['status'] = false;
226	$return['msg'] .= $result['msg'];
227	}
228	}
229	}
230
231	// APPS
232	if (count($params['apps']))
233	{
234	$result = $this->db_functions->add_id2apps($id, $params['apps']);
235	if (!$result['status'])
236	{
237	$return['status'] = false;
238	$return['msg'] .= $result['msg'];
239	}
240	}
241
242	// Chama funcao para incluir no pgsql as preferencia de alterar senha.
243	if ($params['changepassword'])
244	{
245	$result = $this->db_functions->add_pref_changepassword($id);
246	if (!$result['status'])
247	{
248	$return['status'] = false;
249	$return['msg'] .= $result['msg'];
250	}
251	}
252
253	// Chama funcao para criar mailbox do usuario, no imap-cyrus.
254	$result = $this->imap_functions->create($params['uid'], $params['mailquota']);
255	if (!$result['status'])
256	{
257	$return['status'] = false;
258	$return['msg'] .= $result['msg'];
259	}
260
261	$this->db_functions->write_log('criado usuario','',$dn,'','');
262	}
263
264	return $return;
265	}
266
267	function save($new_values)
268	{
269	$return['status'] = true;
270
271	$old_values = $this->get_user_info($new_values['uidnumber']);
272
273	$dn = 'uid=' . $old_values['uid'] . ',' . strtolower($old_values['context']);
274	$diff = array_diff($new_values, $old_values);
275	/*
276	echo '<pre>';
277	echo '--- OLD: ';
278	print_r($old_values['passwd_expired']);
279	echo '<br>--- NEW: ';
280	print_r($new_values['passwd_expired']);
281	echo '<br>';
282	print_r($diff);
283	return;
284	*/
285
286	$manager_account_lid = $_SESSION['phpgw_session']['session_lid'];
287	if ((!$this->functions->check_acl($manager_account_lid,'edit_users')) &&
288	(!$this->functions->check_acl($manager_account_lid,'change_users_password')) &&
289	(!$this->functions->check_acl($manager_account_lid,'edit_sambausers_attributes')) &&
290	(!$this->functions->check_acl($manager_account_lid,'manipulate_corporative_information'))
291	)
292	{
293	$return['status'] = false;
294	$return['msg'] = 'Você não tem direito de editar informações de usuários.';
295	return $return;
296	}
297
298	// Verifica o acesso do gerente
299	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users'))
300	{
301	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
302	// Change user organization
303	if ($diff['context'])
304	{
305	$newrdn = 'uid=' . $new_values['uid'];
306	$newparent = $new_values['context'];
307	$result = $this->ldap_functions->change_user_context($dn, $newrdn, $newparent);
308	if (!$result['status'])
309	{
310	$return['status'] = false;
311	$return['msg'] .= $result['msg'];
312	}
313	else
314	{
315	$dn = $newrdn . ',' . $newparent;
316	$this->db_functions->write_log('alterado contexto do usuario','',$dn,'','');
317	}
318	}
319
320	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
321	// REPLACE some attributes
322	if ($diff['givenname'])
323	{
324	$ldap_mod_replace['givenname'] = $new_values['givenname'];
325	$ldap_mod_replace['cn'] = $new_values['givenname'] . ' ' . $new_values['sn'];
326	$this->db_functions->write_log("alterado givenname do usuario",'',$dn,'','');
327	}
328	if ($diff['sn'])
329	{
330	$ldap_mod_replace['sn'] = $new_values['sn'];
331	$ldap_mod_replace['cn'] = $new_values['givenname'] . ' ' . $new_values['sn'];
332	$this->db_functions->write_log("altera$ldap_mod_do sn do usuario",'',$dn,'','');
333	}
334	if ($diff['mail'])
335	{
336	$ldap_mod_replace['mail'] = $new_values['mail'];
337	$this->ldap_functions->replace_user2maillists($new_values['mail'], $old_values['mail']);
338	$this->db_functions->write_log("alterado mail do usuario",'',$dn,'','');
339	}
340	if (($diff['mailalternateaddress']) && ($old_values['mailalternateaddress'] != ''))
341	{
342	$ldap_mod_replace['mailalternateaddress'] = $new_values['mailalternateaddress'];
343	$this->db_functions->write_log("alterado mailalternateaddress do usuario",'',$dn,'','');
344	}
345	if (($diff['mailforwardingaddress']) && ($old_values['mailforwardingaddress'] != ''))
346	{
347	$ldap_mod_replace['mailforwardingaddress'] = $new_values['mailforwardingaddress'];
348	$this->db_functions->write_log("alterado mailforwardingaddress do usuario",'',$dn,'','');
349	}
350	if (($diff['telephonenumber']) && ($old_values['telephonenumber'] != ''))
351	{
352	$ldap_mod_replace['telephonenumber'] = $new_values['telephonenumber'];
353	$this->db_functions->write_log("alterado telephonenumber do usuario",'',$dn,'','');
354	}
355	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
356	// Passwd Expired - Com atributo
357	if (($old_values['passwd_expired'] != '') && ($new_values['passwd_expired'] == '1'))
358	{
359	$ldap_mod_replace['phpgwlastpasswdchange'] = '0';
360	$this->db_functions->write_log("Expirado senha do usuário",'',$dn,'','');
361	}
362	}
363
364	if ( ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users')) \|\|
365	($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'change_users_password')) )
366	{
367	if ($diff['password1'])
368	{
369	$ldap_mod_replace['userPassword'] = '{md5}' . base64_encode(pack("H*",md5($new_values['password1'])));
370
371	// Suporte ao SAMBA
372	if (($this->current_config['expressoAdmin_samba_support'] == 'true') && ($new_values['userSamba']) && ($new_values['use_attrs_samba'] == 'on'))
373	{
374	$ldap_mod_replace['sambaLMPassword'] = exec('/home/expressolivre/mkntpwd -L '.$new_values['password1']);
375	$ldap_mod_replace['sambaNTPassword'] = exec('/home/expressolivre/mkntpwd -N '.$new_values['password1']);
376	}
377
378	// Gerenciar senhas RFC2617
379	if ($this->current_config['expressoAdmin_userPasswordRFC2617'] == 'true')
380	{
381	$realm = $this->current_config['expressoAdmin_realm_userPasswordRFC2617'];
382	$uid = $new_values['uid'];
383	$password = $new_values['password1'];
384	$passUserRFC2617 = $realm . ': ' . md5("$uid:$realm:$password");
385
386	if ($old_values['userPasswordRFC2617'] != '')
387	$ldap_mod_replace['userPasswordRFC2617'] = $passUserRFC2617;
388	else
389	$ldap_add['userPasswordRFC2617'] = $passUserRFC2617;
390	}
391
392	$this->db_functions->write_log("alterado password do usuario",'',$dn,'','');
393	}
394	}
395
396	// REPLACE, ADD & REMOVE COPORATIVEs ATRIBUTES
397	// Verifica o acesso do gerente aos atributos corporativos
398
399	if ( ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users')) \|\|
400	($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'manipulate_corporative_information')) )
401	{
402	foreach ($new_values as $atribute=>$value)
403	{
404	$pos = strstr($atribute, 'corporative_information_');
405	if ($pos !== false)
406	{
407	$ldap_atribute = str_replace("corporative_information_", "", $atribute);
408	// REPLACE ATTRS OF CORPORATIVE
409	if (($diff[$atribute]) && ($old_values[$atribute] != ''))
410	{
411	$ldap_atribute = str_replace("corporative_information_", "", $atribute);
412	$ldap_mod_replace[$ldap_atribute] = $new_values[$atribute];
413	$this->db_functions->write_log("alterado $ldap_atribute do usuario",'',$dn,'','');
414	}
415	//ADD ATTRS OF CORPORATIVE
416	elseif (($old_values[$atribute] == '') && ($new_values[$atribute] != ''))
417	{
418	$ldap_add[$ldap_atribute] = $new_values[$atribute];
419	$this->db_functions->write_log("adicionado $ldap_atribute ao usuario",'',$dn,'','');
420	}
421	//REMOVE ATTRS OF CORPORATIVE
422	elseif (($old_values[$atribute] != '') && ($new_values[$atribute] == ''))
423	{
424	$ldap_remove[$ldap_atribute] = array();
425	$this->db_functions->write_log("removido $ldap_atribute do usuario",'',$dn,'','');
426	}
427	}
428	}
429	}
430
431	//Suporte ao SAMBA
432	if ( ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users')) \|\|
433	($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_sambausers_attributes')) )
434	{
435	if (($this->current_config['expressoAdmin_samba_support'] == 'true') && ($new_values['userSamba']) && ($new_values['use_attrs_samba'] == 'on'))
436	{
437	if ($diff['sambaacctflags'])
438	{
439	$ldap_mod_replace['sambaacctflags'] = $new_values['sambaacctflags'];
440	$this->db_functions->write_log("alterado sambaacctflags do usuario",'',$dn,'','');
441	}
442	if ($diff['sambalogonscript'])
443	{
444	$ldap_mod_replace['sambalogonscript'] = $new_values['sambalogonscript'];
445	$this->db_functions->write_log("alterado sambalogonscript do usuario",'',$dn,'','');
446	}
447	if ($diff['sambahomedirectory'])
448	{
449	$ldap_mod_replace['homedirectory'] = $new_values['sambahomedirectory'];
450	$this->db_functions->write_log("alterado homedirectory do usuario",'',$dn,'','');
451	}
452	if ($diff['sambadomain'])
453	{
454	$ldap_mod_replace['sambaSID'] = $diff['sambadomain'] . '-' . ((2 * $old_values['uidnumber'])+1000);
455	$ldap_mod_replace['sambaPrimaryGroupSID'] = $diff['sambadomain'] . '-' . ((2 * $old_values['gidnumber'])+1001);
456	$this->db_functions->write_log("alterado dominio samba do usuario $dn para " . $params['sambadomain'],'',$dn,'','');
457	}
458	}
459	}
460
461	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
462	// ADD ou REMOVE some attributes
463	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
464
465	// Verifica o acesso ára adicionar ou remover tais atributos
466	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users'))
467	{
468	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
469	// TELEPHONE
470	if (($old_values['telephonenumber'] == '') && ($new_values['telephonenumber'] != ''))
471	{
472	$ldap_add['telephonenumber'] = $new_values['telephonenumber'];
473	$this->db_functions->write_log("adicionado telephonenumber ao usuario",'',$dn,'','');
474	}
475	if (($old_values['telephonenumber'] != '') && ($new_values['telephonenumber'] == ''))
476	{
477	$ldap_remove['telephonenumber'] = array();
478	$this->db_functions->write_log("removido telephonenumber do usuario",'',$dn,'','');
479	}
480	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
481	// Passwd Expired - Sem atributo
482	if (($old_values['passwd_expired'] == '') && ($new_values['passwd_expired'] == '1'))
483	{
484	$ldap_add['phpgwlastpasswdchange'] = '0';
485	$this->db_functions->write_log("Expirado senha do usuário",'',$dn,'','');
486	}
487	if (($old_values['passwd_expired'] == '0') && ($new_values['passwd_expired'] == ''))
488	{
489	$ldap_remove['phpgwlastpasswdchange'] = array();
490	$this->db_functions->write_log("Removido expiração da senha do usuário",'',$dn,'','');
491	}
492	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
493	// PREF_CHANGEPASSWORD
494	if (($old_values['changepassword'] == '') && ($new_values['changepassword'] != ''))
495	{
496	$this->db_functions->add_pref_changepassword($new_values['uidnumber']);
497	$this->db_functions->write_log("adicionado changepassword ao usuario",'',$dn,'','');
498	}
499	if (($old_values['changepassword'] != '') && ($new_values['changepassword'] == ''))
500	{
501	$this->db_functions->remove_pref_changepassword($new_values['uidnumber']);
502	$this->db_functions->write_log("removido changepassword do usuario",'',$dn,'','');
503	}
504	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
505	// ACCOUNT STATUS
506	if (($old_values['phpgwaccountstatus'] == '') && ($new_values['phpgwaccountstatus'] != ''))
507	{
508	$ldap_add['phpgwaccountstatus'] = 'A';
509	$this->db_functions->write_log("ativado conta do usuario",'',$dn,'','');
510	}
511	if (($old_values['phpgwaccountstatus'] != '') && ($new_values['phpgwaccountstatus'] == ''))
512	{
513	$ldap_remove['phpgwaccountstatus'] = array();
514	$this->db_functions->write_log("desativado conta do usuario",'',$dn,'','');
515	}
516	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
517	// ACCOUNT VISIBLE
518	if (($old_values['phpgwaccountvisible'] == '') && ($new_values['phpgwaccountvisible'] != ''))
519	{
520	$ldap_add['phpgwaccountvisible'] = '-1';
521	$this->db_functions->write_log("adicionado phpgwaccountvisible ao usuario",'',$dn,'','');
522	}
523	if (($old_values['phpgwaccountvisible'] != '') && ($new_values['phpgwaccountvisible'] == ''))
524	{
525	$ldap_remove['phpgwaccountvisible'] = array();
526	$this->db_functions->write_log("removido phpgwaccountvisible ao usuario",'',$dn,'','');
527	}
528	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
529	// PHOTO
530	if ($new_values['delete_photo'])
531	{
532	$this->ldap_functions->ldap_remove_photo($dn);
533	$this->db_functions->write_log("removido jpegphoto ao usuario",'',$dn,'','');
534	}
535	if ($_FILES['photo']['name'] != '')
536	{
537	if ($new_values['photo_exist'])
538	$photo_exist = true;
539	else
540	$photo_exist = false;
541	$this->ldap_functions->ldap_save_photo($dn, $_FILES['photo']['tmp_name'], $new_values['photo_exist'], $photo_exist);
542	$this->db_functions->write_log("adicionado jpegphoto ao usuario",'',$dn,'','');
543	}
544	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
545	// Mail Account STATUS
546	if (($old_values['accountstatus'] == '') && ($new_values['accountstatus'] != ''))
547	{
548	echo '<pre>';
549	print_r($old_values);
550	$ldap_add['accountstatus'] = 'active';
551	$this->db_functions->write_log("ativado conta de email do usuario",'',$dn,'','');
552	}
553	if (($old_values['accountstatus'] != '') && ($new_values['accountstatus'] == ''))
554	{
555	$ldap_remove['accountstatus'] = array();
556	$this->db_functions->write_log("desativado conta de email do usuario",'',$dn,'','');
557	}
558	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
559	// MAILALTERNATEADDRESS
560	if (($old_values['mailalternateaddress'] == '') && ($new_values['mailalternateaddress'] != ''))
561	{
562	$ldap_add['mailalternateaddress'] = $new_values['mailalternateaddress'];
563	$this->db_functions->write_log("adicionado mailalternateaddress ao usuario",'',$dn,'','');
564	}
565	if (($old_values['mailalternateaddress'] != '') && ($new_values['mailalternateaddress'] == ''))
566	{
567	$ldap_remove['mailalternateaddress'] = array();
568	$this->db_functions->write_log("removido mailalternateaddress ao usuario",'',$dn,'','');
569	}
570	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
571	// MAILFORWARDINGADDRESS
572	if (($old_values['mailforwardingaddress'] == '') && ($new_values['mailforwardingaddress'] != ''))
573	{
574	$ldap_add['mailforwardingaddress'] = $new_values['mailforwardingaddress'];
575	$this->db_functions->write_log("adicionado mailforwardingaddress ao usuario",'',$dn,'','');
576	}
577	if (($old_values['mailforwardingaddress'] != '') && ($new_values['mailforwardingaddress'] == ''))
578	{
579	$ldap_remove['mailforwardingaddress'] = array();
580	$this->db_functions->write_log("removido mailforwardingaddress ao usuario",'',$dn,'','');
581	}
582	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
583	// Delivery Mode
584	if (($old_values['deliverymode'] == '') && ($new_values['deliverymode'] != ''))
585	{
586	$ldap_add['deliverymode'] = 'forwardOnly';
587	$this->db_functions->write_log("adicionado forwardOnly ao usuario",'',$dn,'','');
588	}
589	if (($old_values['deliverymode'] != '') && ($new_values['deliverymode'] == ''))
590	{
591	$ldap_remove['deliverymode'] = array();
592	$this->db_functions->write_log("removido forwardOnly ao usuario",'',$dn,'','');
593	}
594	}
595
596	if ( ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users')) \|\|
597	($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'change_users_quote')) )
598	{
599	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
600	// MAILQUOTA
601	if ($diff['mailquota'])
602	{
603	$this->imap_functions->change_user_quota($new_values['uid'], $new_values['mailquota']);
604	$this->db_functions->write_log("alterado cota do usuario",'',$dn,'','');
605	}
606	}
607
608	if ( ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users')) \|\|
609	($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_sambausers_attributes')) )
610	{
611	//////////////////////////////////////////////////////////////////////////////////////////////////////////////////
612	// REMOVE ATTRS OF SAMBA
613	if (($this->current_config['expressoAdmin_samba_support'] == 'true') && ($new_values['userSamba']) && ($new_values['use_attrs_samba'] != 'on'))
614	{
615	$ldap_remove['objectclass'] = 'sambaSamAccount';
616	$ldap_remove['loginShell'] = array();
617	$ldap_remove['sambaSID'] = array();
618	$ldap_remove['sambaPrimaryGroupSID'] = array();
619	$ldap_remove['sambaAcctFlags'] = array();
620	$ldap_remove['sambaLogonScript'] = array();
621	$ldap_remove['sambaLMPassword'] = array();
622	$ldap_remove['sambaNTPassword'] = array();
623	$ldap_remove['sambaPasswordHistory'] = array();
624	$ldap_remove['sambaPwdCanChange'] = array();
625	$ldap_remove['sambaPwdLastSet'] = array();
626	$ldap_remove['sambaPwdMustChange'] = array();
627	$this->db_functions->write_log("removido atributos samba do usuario.",'',$dn,'','');
628	}
629	//////////////////////////////////////////////////////////////////////////////////////////////////////////////////
630	// ADD ATTRS OF SAMBA
631	if (($this->current_config['expressoAdmin_samba_support'] == 'true') && (!$new_values['userSamba']) && ($new_values['use_attrs_samba'] == 'on'))
632	{
633	//Verifica se o binario para criar as senhas do samba exite.
634	if (!is_file('/home/expressolivre/mkntpwd'))
635	{
636	$return['status'] = false;
637	$return['msg'] .= "O arquivo binário /home/expressolivre/mkntpwd não exite.\\nEle é necessário para a criação das senhas usadas pelo SAMBA.\\nInforme o administrador ExpressoLivre sobre isto.\\n";
638	}
639	else
640	{
641	$ldap_add['objectClass'][] = 'sambaSamAccount';
642	$ldap_mod_replace['loginShell'] = '/bin/bash';
643	$ldap_add['sambaSID'] = $new_values['sambadomain'] . '-' . ((2 * $new_values['uidnumber'])+1000);
644	$ldap_add['sambaPrimaryGroupSID'] = $new_values['sambadomain'] . '-' . ((2 * $new_values['gidnumber'])+1001);
645	$ldap_add['sambaAcctFlags'] = $new_values['sambaacctflags'];
646	$ldap_add['sambaLogonScript'] = $new_values['sambalogonscript'];
647	$ldap_mod_replace['homeDirectory'] = $new_values['sambahomedirectory'];
648	$ldap_add['sambaLMPassword'] = exec('/home/expressolivre/mkntpwd -L '.'senha');
649	$ldap_add['sambaNTPassword'] = exec('/home/expressolivre/mkntpwd -N '.'senha');
650	$ldap_add['sambaPasswordHistory'] = '0000000000000000000000000000000000000000000000000000000000000000';
651	$ldap_add['sambaPwdCanChange'] = strtotime("now");
652	$ldap_add['sambaPwdLastSet'] = strtotime("now");
653	$ldap_add['sambaPwdMustChange'] = '2147483647';
654	$this->db_functions->write_log("adicionado atributos samba do usuario.",'',$dn,'','');
655	}
656	}
657	}
658
659	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
660	// GROUPS
661	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users'))
662	{
663	if (!$new_values['groups'])
664	$new_values['groups'] = array();
665	if (!$old_values['groups'])
666	$old_values['groups'] = array();
667
668	$add_groups = array_diff($new_values['groups'], $old_values['groups']);
669	$remove_groups = array_diff($old_values['groups'], $new_values['groups']);
670
671	if (count($add_groups)>0)
672	{
673	foreach($add_groups as $gidnumber)
674	{
675	$this->db_functions->add_user2group($gidnumber, $new_values['uidnumber']);
676	$this->ldap_functions->add_user2group($gidnumber, $new_values['uid']);
677	$this->db_functions->write_log("adicionado usuario ao grupo $gidnumber.",'',$dn,'','');
678	}
679	}
680
681	if (count($remove_groups)>0)
682	{
683	foreach($remove_groups as $gidnumber)
684	{
685	echo $gidnumber;
686
687	foreach($old_values['groups_info'] as $group)
688	{
689	if (($group['gidnumber'] == $gidnumber) && ($group['group_disabled'] == 'false'))
690	{
691	$this->db_functions->remove_user2group($gidnumber, $new_values['uidnumber']);
692	$this->ldap_functions->remove_user2group($gidnumber, $new_values['uid']);
693	$this->db_functions->write_log("removido usuario do grupo $gidnumber.",'',$dn,'','');
694	}
695	}
696	}
697	}
698
699	if ($diff['gidnumber'])
700	{
701	$ldap_mod_replace['gidnumber'] = $new_values['gidnumber'];
702	if (($this->current_config['expressoAdmin_samba_support'] == 'true') && ($new_values['userSamba']) && ($new_values['use_attrs_samba'] == 'on'))
703	{
704	$ldap_mod_replace['sambaPrimaryGroupSID'] = $this->current_config['expressoAdmin_sambaSID'] . '-' . ((2 * $new_values['gidnumber'])+1001);
705	}
706	$this->db_functions->write_log("alterado gidnumber do usuario.",'',$dn,'','');
707	}
708	}
709	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
710	// LDAP_MOD_REPLACE
711	if (count($ldap_mod_replace))
712	{
713	$result = $this->ldap_functions->replace_user_attributes($dn, $ldap_mod_replace);
714	if (!$result['status'])
715	{
716	$return['status'] = false;
717	$return['msg'] .= $result['msg'];
718	}
719	}
720
721	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
722	// LDAP_MOD_ADD
723	if (count($ldap_add))
724	{
725	print_r($ldap_add);
726	$result = $this->ldap_functions->add_user_attributes($dn, $ldap_add);
727	if (!$result['status'])
728	{
729	$return['status'] = false;
730	$return['msg'] .= $result['msg'];
731	}
732	}
733
734	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
735	// LDAP_MOD_REMOVE
736	if (count($ldap_remove))
737	{
738	$result = $this->ldap_functions->remove_user_attributes($dn, $ldap_remove);
739	if (!$result['status'])
740	{
741	$return['status'] = false;
742	$return['msg'] .= $result['msg'];
743	}
744	}
745	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
746
747
748	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'edit_users'))
749	{
750	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
751	// MAILLISTS
752	if (!$new_values['maillists'])
753	$new_values['maillists'] = array();
754	if (!$old_values['maillists'])
755	$old_values['maillists'] = array();
756
757	$add_maillists = array_diff($new_values['maillists'], $old_values['maillists']);
758	$remove_maillists = array_diff($old_values['maillists'], $new_values['maillists']);
759
760	if (count($add_maillists)>0)
761	{
762	foreach($add_maillists as $uidnumber)
763	{
764	$this->ldap_functions->add_user2maillist($uidnumber, $new_values['mail']);
765	$this->db_functions->write_log("adicionado usuario a maillist $uidnumber.",'',$dn,'','');
766	}
767	}
768
769	if (count($remove_maillists)>0)
770	{
771	foreach($remove_maillists as $uidnumber)
772	{
773	$this->ldap_functions->remove_user2maillist($uidnumber, $new_values['mail']);
774	$this->db_functions->write_log("removido usuario da maillist $uidnumber.",'',$dn,'','');
775	}
776	}
777
778	//////////////////////////////////////////////////////////////////////////////////////////////////////////////////
779	// APPS
780	$new_values2 = array();
781	$old_values2 = array();
782	if (count($new_values['apps'])>0)
783	{
784	foreach ($new_values['apps'] as $app=>$tmp)
785	{
786	$new_values2[] = $app;
787	}
788	}
789	if (count($old_values['apps'])>0)
790	{
791	foreach ($old_values['apps'] as $app=>$tmp)
792	{
793	$old_values2[] = $app;
794	}
795	}
796	$add_apps = array_flip(array_diff($new_values2, $old_values2));
797	$remove_apps = array_flip(array_diff($old_values2, $new_values2));
798
799	if (count($add_apps)>0)
800	{
801	$this->db_functions->add_id2apps($new_values['uidnumber'], $add_apps);
802
803	foreach ($add_apps as $app => $index)
804	$this->db_functions->write_log("Adicionado aplicativo $app ao usuário $dn",'',$dn,'','');
805	}
806	if (count($remove_apps)>0)
807	{
808	//Verifica se o gerente tem acesso a aplicação antes de remove-la do usuario.
809	$manager_apps = $this->db_functions->get_apps($_SESSION['phpgw_session']['session_lid']);
810
811	foreach ($remove_apps as $app => $app_index)
812	{
813	if ($manager_apps[$app] == 'run')
814	$remove_apps2[$app] = $app_index;
815	}
816	$this->db_functions->remove_id2apps($new_values['uidnumber'], $remove_apps2);
817
818	foreach ($remove_apps2 as $app => $access)
819	$this->db_functions->write_log("Removido aplicativo $app do usuário $dn",'',$dn,'','');
820	}
821	//////////////////////////////////////////////////////////////////////////////////////////////////////////////////
822	}
823	return $return;
824	}
825
826	function get_user_info($uidnumber)
827	{
828	$user_info_ldap = $this->ldap_functions->get_user_info($uidnumber);
829	$user_info_db1 = $this->db_functions->get_user_info($uidnumber);
830	$user_info_db2 = $this->ldap_functions->gidnumbers2cn($user_info_db1['groups']);
831	$user_info_imap = $this->imap_functions->get_user_info($user_info_ldap['uid']);
832	$user_info = array_merge($user_info_ldap, $user_info_db1, $user_info_db2, $user_info_imap);
833	return $user_info;
834	}
835
836	function set_user_default_password($params)
837	{
838	$return['status'] = true;
839	$uid = $params['uid'];
840	$defaultUserPassword = '{md5}'.base64_encode(pack("H*",md5($this->current_config['expressoAdmin_defaultUserPassword'])));
841
842	if (!$this->db_functions->default_user_password_is_set($uid))
843	{
844	$userPassword = $this->ldap_functions->set_user_password($uid, $defaultUserPassword);
845	$this->db_functions->set_user_password($uid, $userPassword);
846	}
847	else
848	{
849	$return['status'] = false;
850	$return['msg'] = 'Senha default já cadastrada!';
851	}
852
853	$this->db_functions->write_log('Setado senha default','',$uid,'','');
854
855	return $return;
856	}
857
858	function return_user_password($params)
859	{
860	$return['status'] = true;
861	$uid = $params['uid'];
862
863	if ($this->db_functions->default_user_password_is_set($uid))
864	{
865	$userPassword = $this->db_functions->get_user_password($uid);
866	$this->ldap_functions->set_user_password($uid, $userPassword);
867	}
868	else
869	{
870	$return['status'] = false;
871	$return['msg'] = 'Senha default NÃO cadastrada!';
872	}
873
874	$this->db_functions->write_log('Retornado senha default','',$uid,'','');
875
876	return $return;
877	}
878
879	function delete($params)
880	{
881	$return['status'] = true;
882
883	// Verifica o acesso do gerente
884	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'delete_users'))
885	{
886	$uidnumber = $params['uidnumber'];
887	$user_info = $this->get_user_info($uidnumber);
888
889	//LDAP
890	$result_ldap = $this->ldap_functions->delete_user($user_info);
891	if (!$result_ldap['status'])
892	{
893	$return['status'] = false;
894	$return['msg'] .= $result_ldap['msg'];
895	}
896	else
897	{
898	//DB
899	$result_db = $this->db_functions->delete_user($user_info);
900	if (!$result_db['status'])
901	{
902	$return['status'] = false;
903	$return['msg'] .= $result_ldap['msg'];
904	}
905
906	//IMAP
907	$result_imap = $this->imap_functions->delete_user($user_info['uid']);
908	if (!$result_imap['status'])
909	{
910	$return['status'] = false;
911	$return['msg'] .= $result_ldap['msg'];
912	}
913	$this->db_functions->write_log('deletado usuario','',$user_info['uid'],'','');
914	}
915	}
916
917	return $return;
918	}
919
920
921	function rename($params)
922	{
923	$return['status'] = true;
924
925	// Verifica acesso do gerente (OU) ao tentar renomear um usuário.
926	if ( ! $this->ldap_functions->check_access_to_renamed($params['uid']) )
927	{
928	$return['status'] = false;
929	$return['msg'] .= 'Você não tem acesso para deletar este usuário.';
930	return $return;
931	}
932
933	// Verifica o acesso do gerente
934	if ($this->functions->check_acl($_SESSION['phpgw_session']['session_lid'], 'rename_users'))
935	{
936	$uid = $params['uid'];
937	$new_uid = $params['new_uid'];
938	$defaultUserPassword = '{md5}'.base64_encode(pack("H*",md5($this->current_config['expressoAdmin_defaultUserPassword'])));
939	$defaultUserPassword_plain = $this->current_config['expressoAdmin_defaultUserPassword'];
940
941	$emailadmin_profiles = $this->db_functions->get_sieve_info();
942	$sieve_enable = $emailadmin_profiles[0]['imapenablesieve'];
943	$sieve_server = $emailadmin_profiles[0]['imapsieveserver'];
944	$sieve_port = $emailadmin_profiles[0]['imapsieveport'];
945
946	$imap_admin = $_SESSION['phpgw_info']['expresso']['email_server']['imapAdminUsername'];
947	$imap_passwd = $_SESSION['phpgw_info']['expresso']['email_server']['imapAdminPW'];
948	$imap_server = $_SESSION['phpgw_info']['expresso']['email_server']['imapServer'];
949	$imap_port = $_SESSION['phpgw_info']['expresso']['email_server']['imapPort'];
950	$imapDelimiter = $_SESSION['phpgw_info']['expresso']['email_server']['imapDelimiter'];
951
952	//Verifica se está sendo usuado cyrus 2.2 ou superior
953	$sk = fsockopen ($imap_server,$imap_port);
954	$server_resp = fread($sk, 100);
955	$tmp = split('v2.', $server_resp);
956	$cyrus_version = '2' . $tmp[1][0];
957	//$is_cyrus22 = strpos($server_resp, "v2.2");
958
959	if ($cyrus_version > '21')
960	{
961	// Seta senha default
962	$user_password = $this->ldap_functions->set_user_password($uid, $defaultUserPassword);
963
964	// Renomeia UID no openldap
965	$result = $this->ldap_functions->rename_uid($uid, $new_uid);
966	$new_dn = $result['new_dn'];
967	if (!$result['status'])
968	{
969	$return['status'] = false;
970	$return['msg'] .= "\n" . $result['msg'];
971	$return['msg'] .= "\nErro ao renomear usuário no LDAP. Processo abortado.";
972	return $return;
973	}
974
975	// Remove old UID do ldap
976	$user_info_mod_remove['uid'] = $uid;
977	$this->ldap_functions->remove_user_attributes($new_dn, $user_info_mod_remove);
978
979	//Renomeia mailbox
980	$result = $this->imap_functions->rename_mailbox($uid, $new_uid);
981	if (!$result['status'])
982	{
983	$return['status'] = false;
984	$return['msg'] .= "\n" . $result['msg'];
985	$return['msg'] .= "\nErro ao renomear usuário no Cyrus. Processo abortado.";
986	}
987
988	// Renomeia sieve script
989	include_once('sieve-php.lib.php');
990	$sieve=new sieve($sieve_server, $sieve_port, $new_uid, $defaultUserPassword_plain);
991
992	if ($sieve->sieve_login())
993	{
994	$sieve->sieve_listscripts();
995	$myactivescript=$sieve->response["ACTIVE"];
996	$sieve->sieve_getscript($myactivescript);
997
998	$script = '';
999	foreach($sieve->response as $result)
1000	{
1001	$script .= $result;
1002	}
1003
1004	$scriptname = $new_uid;
1005	if($sieve->sieve_sendscript($new_uid,$script))
1006	{
1007	if ($sieve->sieve_setactivescript($new_uid))
1008	{
1009	$sieve->sieve_deletescript($myactivescript);
1010	}
1011	}
1012	else
1013	{
1014	$return['status'] = false;
1015	$return['msg'] .= $result['msg'] . "\nErro ao renomear script sieve, falha no envio do novo script.";
1016	}
1017	$sieve->sieve_logout();
1018	}
1019	else
1020	{
1021	$return['status'] = false;
1022	$return['msg'] .= $result['msg'] . "\nErro ao renomear script sieve, falha no Login.";
1023	}
1024
1025	// Retorna senha do usuário
1026	$this->ldap_functions->set_user_password($new_uid, $user_password);
1027
1028	$this->db_functions->write_log('renomeado usuario',$new_uid,$uid,'','');
1029
1030	$return['exec_return'] = "";
1031	}
1032	else
1033	{
1034	$return['status'] = false;
1035	$return['msg'] .= "A renomeação de usuários só permitida com o cyrus versão 2.2 ou superior,";
1036	$return['msg'] .= "\ne com a opção 'allowusermoves: yes' configurado no imapd.conf.";
1037	}
1038	return $return;
1039	}
1040	}
1041
1042	function write_log_from_ajax($params)
1043	{
1044	$this->db_functions->write_log($params['_action'],'',$params['userinfo'],'','');
1045	return true;
1046	}
1047	}
1048	?>

Note: See TracBrowser for help on using the repository browser.

Download in other formats: