forked from Wavyzz/dolibarr
367 lines
11 KiB
PHP
367 lines
11 KiB
PHP
<?php
|
||
/* Copyright (C) 2004 Rodolphe Quiedeville <rodolphe@quiedeville.org>
|
||
* Copyright (C) 2004 Sebastien Di Cintio <sdicintio@ressource-toi.org>
|
||
* Copyright (C) 2004 Benoit Mortier <benoit.mortier@opensides.be>
|
||
* Copyright (C) 2005 Regis Houssin <regis.houssin@cap-networks.com>
|
||
* Copyright (C) 2006 Laurent Destailleur <eldy@users.sourceforge.net>
|
||
*
|
||
* This program is free software; you can redistribute it and/or modify
|
||
* it under the terms of the GNU General Public License as published by
|
||
* the Free Software Foundation; either version 2 of the License, or
|
||
* (at your option) any later version.
|
||
*
|
||
* This program is distributed in the hope that it will be useful,
|
||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
* GNU General Public License for more details.
|
||
*
|
||
* You should have received a copy of the GNU General Public License
|
||
* along with this program; if not, write to the Free Software
|
||
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
||
*
|
||
* $Id$
|
||
* $Source$
|
||
*/
|
||
|
||
/**
|
||
\file htdocs/admin/ldap.php
|
||
\ingroup ldap
|
||
\brief Page d'administration/configuration du module Ldap
|
||
\version $Revision$
|
||
\remarks Exemple configuration :
|
||
LDAP_SERVER_HOST Serveur LDAP 192.168.1.50
|
||
LDAP_SERVER_PORT Port LDAP 389
|
||
LDAP_ADMIN_DN Administrateur LDAP cn=adminldap,dc=societe,dc=com
|
||
LDAP_ADMIN_PASS Mot de passe xxxxxxxx
|
||
LDAP_USER_DN DN des utilisateurs ou=users,dc=societe,dc=com
|
||
LDAP_GROUP_DN DN des groupes ou=groups,dc=societe,dc=com
|
||
LDAP_CONTACT_DN DN des contacts ou=contacts,dc=societe,dc=com
|
||
LDAP_SERVER_TYPE Type Openldap
|
||
*/
|
||
|
||
require("./pre.inc.php");
|
||
require_once(DOL_DOCUMENT_ROOT."/lib/authldap.lib.php");
|
||
|
||
$langs->load("admin");
|
||
|
||
if (!$user->admin)
|
||
accessforbidden();
|
||
|
||
|
||
/*
|
||
* Actions
|
||
*/
|
||
|
||
if ($_GET["action"] == 'setvalue' && $user->admin)
|
||
{
|
||
if (! dolibarr_set_const($db, 'LDAP_SERVER_TYPE',$_POST["type"]))
|
||
{
|
||
print $db->error();
|
||
}
|
||
if (! dolibarr_set_const($db, 'LDAP_SERVER_PROTOCOLVERSION',$_POST["version"]))
|
||
{
|
||
print $db->error();
|
||
}
|
||
if (! dolibarr_set_const($db, 'LDAP_SERVER_HOST',$_POST["host"]))
|
||
{
|
||
print $db->error();
|
||
}
|
||
if (! dolibarr_set_const($db, 'LDAP_SERVER_HOST_SLAVE',$_POST["slave"]))
|
||
{
|
||
print $db->error();
|
||
}
|
||
if (! dolibarr_set_const($db, 'LDAP_SERVER_PORT',$_POST["port"]))
|
||
{
|
||
print $db->error();
|
||
}
|
||
if (! dolibarr_set_const($db, 'LDAP_SERVER_DN',$_POST["dn"]))
|
||
{
|
||
print $db->error();
|
||
}
|
||
if (! dolibarr_set_const($db, 'LDAP_ADMIN_DN',$_POST["admin"]))
|
||
{
|
||
print $db->error();
|
||
}
|
||
if (! dolibarr_set_const($db, 'LDAP_ADMIN_PASS',$_POST["pass"]))
|
||
{
|
||
print $db->error();
|
||
}
|
||
if (! dolibarr_set_const($db, 'LDAP_SERVER_USE_TLS',$_POST["usetls"]))
|
||
{
|
||
print $db->error();
|
||
}
|
||
if (! dolibarr_set_const($db, 'LDAP_CONTACT_ACTIVE',$_POST["activecontact"]))
|
||
{
|
||
print $db->error();
|
||
}
|
||
if (! dolibarr_set_const($db, 'LDAP_SYNCHRO_ACTIVE',$_POST["activesynchro"]))
|
||
{
|
||
print $db->error();
|
||
}
|
||
}
|
||
|
||
|
||
|
||
/*
|
||
* Visu
|
||
*/
|
||
|
||
llxHeader();
|
||
|
||
print_fiche_titre($langs->trans("LDAPSetup"),'','setup');
|
||
|
||
// Test si fonction LDAP actives
|
||
if (! function_exists("ldap_connect"))
|
||
{
|
||
$mesg=$langs->trans("LDAPFunctionsNotAvailableOnPHP");
|
||
}
|
||
|
||
if ($mesg) print '<div class="error">'.$mesg.'</div>';
|
||
else print '<br>';
|
||
|
||
|
||
// Onglets
|
||
$h = 0;
|
||
|
||
$head[$h][0] = DOL_URL_ROOT."/admin/ldap.php";
|
||
$head[$h][1] = $langs->trans("LDAPGlobalParameters");
|
||
$hselected=$h;
|
||
$h++;
|
||
|
||
if ($conf->global->LDAP_SYNCHRO_ACTIVE)
|
||
{
|
||
$head[$h][0] = DOL_URL_ROOT."/admin/ldap_users.php";
|
||
$head[$h][1] = $langs->trans("LDAPUsersAndGroupsSynchro");
|
||
$h++;
|
||
}
|
||
|
||
if ($conf->global->LDAP_CONTACT_ACTIVE)
|
||
{
|
||
$head[$h][0] = DOL_URL_ROOT."/admin/ldap_contacts.php";
|
||
$head[$h][1] = $langs->trans("LDAPContactsSynchro");
|
||
$h++;
|
||
}
|
||
|
||
if ($conf->global->LDAP_MEMBERS_ACTIVE)
|
||
{
|
||
$head[$h][0] = DOL_URL_ROOT."/admin/ldap_members.php";
|
||
$head[$h][1] = $langs->trans("LDAPMembersSynchro");
|
||
$h++;
|
||
}
|
||
|
||
dolibarr_fiche_head($head, $hselected, $langs->trans("LDAP"));
|
||
|
||
$var=true;
|
||
$html=new Form($db);
|
||
|
||
|
||
print '<form method="post" action="'.$_SERVER["PHP_SELF"].'?action=setvalue">';
|
||
|
||
print '<table class="noborder" width="100%">';
|
||
|
||
// Liste de synchro actives
|
||
print '<tr class="liste_titre">';
|
||
print '<td colspan="3">'.$langs->trans("LDAPSynchronization").'</td>';
|
||
print "</tr>\n";
|
||
|
||
// Synchro utilisateurs/groupes active
|
||
$var=!$var;
|
||
print '<tr '.$bc[$var].'><td>'.$langs->trans("LDAPDnSynchroActive").'</td><td>';
|
||
$arraylist=array();
|
||
$arraylist['0']=$langs->trans("No");
|
||
$arraylist['ldap2dolibarr']=$langs->trans("LDAPToDolibarr");
|
||
$arraylist['dolibarr2ldap']=$langs->trans("DolibarrToLDAP");
|
||
$html->select_array('activesynchro',$arraylist,$conf->global->LDAP_SYNCHRO_ACTIVE);
|
||
print '</td><td>'.$langs->trans("LDAPDnSynchroActiveExample");
|
||
if ($conf->global->LDAP_SYNCHRO_ACTIVE && ! $conf->global->LDAP_USER_DN)
|
||
{
|
||
print '<br><font class="error">'.$langs->trans("LDAPSetupNotComplete").'</font>';
|
||
}
|
||
print '</td></tr>';
|
||
|
||
// Synchro contact active
|
||
$var=!$var;
|
||
print '<tr '.$bc[$var].'><td>'.$langs->trans("LDAPDnContactActive").'</td><td>';
|
||
$arraylist=array();
|
||
$arraylist['0']=$langs->trans("No");
|
||
$arraylist['1']=$langs->trans("DolibarrToLDAP");
|
||
$html->select_array('activecontact',$arraylist,$conf->global->LDAP_CONTACT_ACTIVE);
|
||
print '</td><td>'.$langs->trans("LDAPDnContactActiveExample").'</td></tr>';
|
||
|
||
|
||
print '<tr class="liste_titre">';
|
||
print '<td>'.$langs->trans("Parameter").'</td>';
|
||
print '<td>'.$langs->trans("Value").'</td>';
|
||
print '<td>'.$langs->trans("Example").'</td>';
|
||
print "</tr>\n";
|
||
|
||
// Type
|
||
$var=!$var;
|
||
print '<tr '.$bc[$var].'><td>'.$langs->trans("Type").'</td><td>';
|
||
$arraylist=array();
|
||
$arraylist['activedirectory']='Active Directory';
|
||
$arraylist['openldap']='OpenLdap';
|
||
$arraylist['egroupware']='Egroupware';
|
||
$html->select_array('type',$arraylist,$conf->global->LDAP_SERVER_TYPE);
|
||
print '</td><td> </td></tr>';
|
||
|
||
// Version
|
||
$var=!$var;
|
||
print '<tr '.$bc[$var].'><td>'.$langs->trans("Version").'</td><td>';
|
||
$arraylist=array();
|
||
$arraylist['3']='Version 3';
|
||
$arraylist['2']='Version 2';
|
||
$html->select_array('version',$arraylist,$conf->global->LDAP_SERVER_PROTOCOLVERSION);
|
||
print '</td><td>'.$langs->trans("LDAPServerProtocolVersion").'</td></tr>';
|
||
|
||
// Serveur primaire
|
||
$var=!$var;
|
||
print '<tr '.$bc[$var].'><td>';
|
||
print $langs->trans("LDAPPrimaryServer").'</td><td>';
|
||
print '<input size="25" type="text" name="host" value="'.$conf->global->LDAP_SERVER_HOST.'">';
|
||
print '</td><td>'.$langs->trans("LDAPServerExample").'</td></tr>';
|
||
|
||
// Serveur secondaire
|
||
$var=!$var;
|
||
print '<tr '.$bc[$var].'><td>';
|
||
print $langs->trans("LDAPSecondaryServer").'</td><td>';
|
||
print '<input size="25" type="text" name="slave" value="'.$conf->global->LDAP_SERVER_HOST_SLAVE.'">';
|
||
print '</td><td>'.$langs->trans("LDAPServerExample").'</td></tr>';
|
||
|
||
// Port
|
||
$var=!$var;
|
||
print '<tr '.$bc[$var].'><td>'.$langs->trans("LDAPServerPort").'</td><td>';
|
||
if ($conf->global->LDAP_SERVER_PORT)
|
||
{
|
||
print '<input size="25" type="text" name="port" value="'.$conf->global->LDAP_SERVER_PORT.'">';
|
||
}
|
||
else
|
||
{
|
||
print '<input size="25" type="text" name="port" value="389">';
|
||
}
|
||
print '</td><td>'.$langs->trans("LDAPServerPortExample").'</td></tr>';
|
||
|
||
// DNserver
|
||
$var=!$var;
|
||
print '<tr '.$bc[$var].'><td>'.$langs->trans("LDAPServerDn").'</td><td>';
|
||
print '<input size="25" type="text" name="dn" value="'.$conf->global->LDAP_SERVER_DN.'">';
|
||
print '</td><td>'.$langs->trans("LDAPServerDnExample").'</td></tr>';
|
||
|
||
// DNAdmin
|
||
$var=!$var;
|
||
print '<tr '.$bc[$var].'><td>'.$langs->trans("LDAPAdminDn").'</td><td>';
|
||
print '<input size="25" type="text" name="admin" value="'.$conf->global->LDAP_ADMIN_DN.'">';
|
||
print '</td><td>'.$langs->trans("LDAPAdminDnExample").'</td></tr>';
|
||
|
||
// Pass
|
||
$var=!$var;
|
||
print '<tr '.$bc[$var].'><td>'.$langs->trans("LDAPPassword").'</td><td>';
|
||
if ($conf->global->LDAP_ADMIN_PASS)
|
||
{
|
||
print '<input size="25" type="password" name="pass" value="'.$conf->global->LDAP_ADMIN_PASS.'">';// je le met en visible pour test
|
||
}
|
||
else
|
||
{
|
||
print '<input size="25" type="text" name="pass" value="'.$conf->global->LDAP_ADMIN_PASS.'">';
|
||
}
|
||
print '</td><td> </td></tr>';
|
||
|
||
// Utiliser TLS
|
||
$var=!$var;
|
||
print '<tr '.$bc[$var].'><td>'.$langs->trans("LDAPServerUseTLS").'</td><td>';
|
||
$arraylist=array();
|
||
$arraylist['0']=$langs->trans("No");
|
||
$arraylist['1']=$langs->trans("Yes");
|
||
$html->select_array('usetls',$arraylist,$conf->global->LDAP_SERVER_USE_TLS);
|
||
print '</td><td>'.$langs->trans("LDAPServerUseTLSExample").'</td></tr>';
|
||
|
||
|
||
|
||
|
||
print '<tr><td colspan="3" align="center"><input type="submit" class="button" value="'.$langs->trans("Modify").'"></td></tr>';
|
||
print '</table>';
|
||
|
||
print '</form>';
|
||
|
||
print '</div>';
|
||
|
||
|
||
|
||
/*
|
||
* Test de la connexion
|
||
*/
|
||
if (function_exists("ldap_connect"))
|
||
{
|
||
if ($conf->global->LDAP_SERVER_HOST && $conf->global->LDAP_ADMIN_DN && $conf->global->LDAP_ADMIN_PASS)
|
||
{
|
||
print '<a class="tabAction" href="'.$_SERVER["PHP_SELF"].'?action=test">'.$langs->trans("LDAPTestConnect").'</a><br><br>';
|
||
}
|
||
|
||
if ($_GET["action"] == 'test')
|
||
{
|
||
$ldap = new AuthLdap(); // Les parametres sont pass<73>s et r<>cup<75>r<EFBFBD>s via $conf
|
||
|
||
$ds = $ldap->connect();
|
||
if ($ds)
|
||
{
|
||
// Test ldap_bind
|
||
$bind = $ldap->bind();
|
||
if ($bind)
|
||
{
|
||
print img_picto('','info').' ';
|
||
print '<font class="ok">'.$langs->trans("LDAPTCPConnectOK",$conf->global->LDAP_SERVER_HOST,$conf->global->LDAP_SERVER_PORT).'</font><br>';
|
||
}
|
||
else
|
||
{
|
||
print img_picto('','error').' ';
|
||
print $langs->trans("LDAPTCPConnectKO",$conf->global->LDAP_SERVER_HOST,$conf->global->LDAP_SERVER_PORT).' : ';
|
||
print $ldap->ldapErrorCode." - ".$ldap->ldapErrorText;
|
||
print "<br>";
|
||
}
|
||
|
||
// Test ldap_getversion
|
||
if (($ldap->getVersion() == 3))
|
||
{
|
||
print img_picto('','info').' ';
|
||
print '<font class="ok">'.$langs->trans("LDAPSetupForVersion3").'</font><br>';
|
||
}
|
||
else
|
||
{
|
||
print img_picto('','info').' ';
|
||
print $langs->trans("LDAPSetupForVersion2").'<br>';
|
||
}
|
||
|
||
// Test ldap_unbind
|
||
$unbind = $ldap->unbind();
|
||
|
||
if ($unbind)
|
||
{
|
||
print img_picto('','info').' ';
|
||
print '<font class="ok">'.$langs->trans("LDAPUnbindSuccessfull").'</font><br>';
|
||
}
|
||
else
|
||
{
|
||
print img_picto('','error').' ';
|
||
print $langs->trans("LDAPUnbindFailed");
|
||
print "<br>";
|
||
print $ldap->ldapErrorCode." - ".$ldap->ldapErrorText;
|
||
}
|
||
|
||
}
|
||
else
|
||
{
|
||
print img_picto('','error').' ';
|
||
print $langs->trans("LDAPTCPConnectKO",$conf->global->LDAP_SERVER_HOST,$conf->global->LDAP_SERVER_PORT).'<br>';
|
||
print "<br>";
|
||
print $ldap->ldapErrorCode." - ".$ldap->ldapErrorText;
|
||
print "<br>";
|
||
}
|
||
|
||
}
|
||
}
|
||
|
||
$db->close();
|
||
|
||
llxFooter('$Date$ - $Revision$');
|
||
?>
|