Changeset 1042 for trunk/preferences/changepassword.php

Timestamp:

06/23/09 14:27:31 (15 years ago)

Author:

rafaelraymundo

Message:

Ticket #562 - Realizados procedimentos para utilizacao de Certificado Digital no login

File:

• trunk/preferences/changepassword.php (modified) (2 diffs)

trunk/preferences/changepassword.php

@@ -20 +20 @@
         include('../header.inc.php');
 
+function grava_senha_criptografada_com_certificado_no_ldap($aux_uid,$aux_senha)
+   {    
+        require_once('/var/www/expresso/seguranca/classes/CertificadoB.php');
+        $ldap_context = $GLOBALS['phpgw_info']['server']['ldap_context'];
+        $ldap_servidor = $GLOBALS['phpgw_info']['server']['ldap_host'];
+        $ldap_dn = $GLOBALS['phpgw_info']['server']['ldap_root_dn'];
+        $ldap_passwd = $GLOBALS['phpgw_info']['server']['ldap_root_pw'];
+
+        $cc=ldap_connect($ldap_servidor); 
+
+        //  bind ..
+        $sr=ldap_bind($cc,$ldap_dn,$ldap_passwd);  
+
+        $filtro = 'uidNumber='.$aux_uid;
+
+        // Pesquisa uidNumber no LDAP
+        $sr=ldap_search($cc, $ldap_context,$filtro);  
+
+        // Pega resultado ....
+        $info = ldap_get_entries($cc, $sr);
+          
+        // Tem de achar só uma entrada.....ao menos uma....
+        if($info["count"]!=1)
+            {
+                ldap_close($cc);
+                return false;
+            }
+
+        if(!$info[0]["usercertificate"][0])
+            {
+                //Usuario sem certificado cadastrado
+                ldap_close($cc);
+                return false;
+            }
+
+        $a = new certificadoB();
+        $R = $a->encriptar_senha($aux_senha,$info[0]["usercertificate"][0]);
+        if(!$R) 
+            {
+                return false;
+            }
+        $user_info = array();
+        $aux1 = $info[0]["dn"];
+        $user_info['cryptpassword'] = $R;
+        ldap_modify($cc,$aux1,$user_info);
+
+        ldap_close($cc);
+
+        return true;
+   }
+
         $a_passwd   = $_POST['a_passwd'];
         $n_passwd   = $_POST['n_passwd'];
@@ -129 +180 @@
                         $GLOBALS['hook_values']['new_passwd'] = $n_passwd;
                         $GLOBALS['phpgw']->hooks->process('changepassword');
+
+                        if($GLOBALS['phpgw_info']['server']['certificado'])
+                        {
+                        if(!$GLOBALS['phpgw_info']['server']['atributousuarios'] or $GLOBALS['phpgw_info']['server']['atributousuarios'] == "person")
+                                {
+                                        $RR = grava_senha_criptografada_com_certificado_no_ldap($GLOBALS['phpgw_info']['user']['account_id'],$n_passwd);
+                                }
+                        }
                         
                         if ($GLOBALS['phpgw_info']['server']['use_https'] == 1)