Changeset 1681 for trunk/phpgwapi/inc/class.auth_ldap.inc.php

Timestamp:

11/19/09 13:59:58 (14 years ago)

Author:

rafaelraymundo

Message:

Ticket #770 - função em common_functions,inc.php determina include p/templates.

File:

• trunk/phpgwapi/inc/class.auth_ldap.inc.php (modified) (1 diff)

trunk/phpgwapi/inc/class.auth_ldap.inc.php

@@ -200 +200 @@
                 }
 
+                function change_password_user ($old_passwd, $new_passwd, $dn, $referrals=false)
+                {
+                        //Use with RHDS
+                        //system('echo "CP old_passwd: '.$old_passwd.'" >>/tmp/controle');
+                        //system('echo "CP new_passwd: '.$new_passwd.'" >>/tmp/controle');
+                        //system('echo "CP dn: '.$dn.'" >>/tmp/controle');
+                        //system('echo "CP referrals: '.$referrals.'" >>/tmp/controle');
+                        $ds=ldap_connect($GLOBALS['phpgw_info']['server']['ldap_host']);
+                        if (!$ds)
+                                {
+                                //system('echo "CP Nao conectou no ldap" >>/tmp/controle');
+                                $this->auth_reason = ldap_errno($ldap);
+                                return False;
+                                }
+                        else
+                        {
+                                if ($referrals)
+                                        {
+                                        //system('echo "CP Entrou referrals" >>/tmp/controle');
+                                        $this->passwd=$old_passwd;
+                                        $this->dn=$dn;
+                                        ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3);
+                                        ldap_set_option($ds, LDAP_OPT_REFERRALS, 1);
+                                        if($GLOBALS['phpgw_info']['server']['diretorioescravo'])
+                                                {
+                                                ldap_set_rebind_proc($ds, array($this, '_rebindProc'));
+                                                }
+                                        }
+                                $modify["userpassword"]=$new_passwd;
+                                if (!@ldap_bind($ds,$dn,$old_passwd))
+                                        {
+                                        //system('echo "CP nao conseguiu dar bind" >>/tmp/controle');
+                                        //Se a politica estiver no diretorio eh necessario tentar alterar a senha mesmo que nao haja um bind, pois a negacao de bind pode ser proveniente de uma expiracao
+                                        if($GLOBALS['phpgw_info']['server']['politicasenhas']=='diretorio')
+                                                {
+                                                //system('echo "CP politica eh no diretorio" >>/tmp/controle');
+                                                if (!@ldap_mod_replace($ds,$dn,$modify))
+                                                        {
+                                                        //system('echo "CP nao conseguiu fazer replace!" >>/tmp/controle');
+                                                        $this->auth_reason = ldap_errno($ds);
+                                                        return false;
+                                                        }
+                                                        else
+                                                        {
+                                                        //system('echo "CP replace funcionou!" >>/tmp/controle');
+                                                        return $new_passwd;
+                                                        }
+                                                }
+                                        $this->auth_reason = ldap_errno($ds);
+                                        return False;
+                                        }
+                                        else
+                                        {
+                                        //system('echo "CP Conseguiu dar bind" >>/tmp/controle');
+                                        if (!ldap_mod_replace($ds,$dn,$modify))
+                                                {
+                                                $this->auth_reason = ldap_errno($ds);
+                                                return False;
+                                                }
+                                                else
+                                                {
+                                                return $new_passwd;
+                                                }
+                                        }
+                        }
+                }
+
+
                 function update_lastlogin($_account_id, $ip)
                 {