From d71ac0df19b98da303605620b84f9596d2ff8f9b Mon Sep 17 00:00:00 2001
From: Arnaud Fornerot <afornerot@cadoles.com>
Date: Tue, 7 Dec 2021 14:04:59 +0100
Subject: [PATCH] websocket server by service

---
 dicos/90_nineschool.xml                        | 6 ------
 src/nineschool-1.0/config/services.yaml        | 4 +++-
 src/nineschool-1.0/scripts/websocket.sh        | 2 +-
 src/nineschool-1.0/src/Service/ldapService.php | 7 ++++++-
 tmpl/nineschool-env.local                      | 5 +++++
 5 files changed, 15 insertions(+), 9 deletions(-)

diff --git a/dicos/90_nineschool.xml b/dicos/90_nineschool.xml
index 6c4e0a3..d6a8938 100644
--- a/dicos/90_nineschool.xml
+++ b/dicos/90_nineschool.xml
@@ -87,12 +87,6 @@
             <target type='filelist'>nineschool_nginx</target>
         </condition>
 
-        <!-- AFFICHAGE EN FONCTION DE REVERSE PROXY -->
-        <condition name='disabled_if_in' source='activer_revprox'>
-            <param>oui</param>
-            <target type='filelist'>nineboard_nginx</target>
-        </condition>
-
         <!-- AFFICHAGE EN FONCTION DE NINESCHOOL -->
 		<condition name='hidden_if_in' source='activer_nineschool'>
 			<param>non</param>
diff --git a/src/nineschool-1.0/config/services.yaml b/src/nineschool-1.0/config/services.yaml
index 46e54d8..b877406 100644
--- a/src/nineschool-1.0/config/services.yaml
+++ b/src/nineschool-1.0/config/services.yaml
@@ -28,6 +28,7 @@ parameters:
   ldapModel: '%env(resolve:LDAP_MODEL)%'
   ldapHost: '%env(resolve:LDAP_HOST)%'
   ldapPort: '%env(resolve:LDAP_PORT)%'
+  ldapTls: '%env(resolve:LDAP_TLS)%'
   ldapUser: '%env(resolve:LDAP_USER)%'
   ldapPassword: '%env(resolve:LDAP_PASSWORD)%'
   ldapBasedn: '%env(resolve:LDAP_BASEDN)%'
@@ -66,6 +67,7 @@ services:
         bind:
             $ldapHost: '%ldapHost%'
             $ldapPort: '%ldapPort%'
+            $ldapTls: '%ldapTls%'
             $ldapUser: '%ldapUser%'
             $ldapPassword: '%ldapPassword%'
             $ldapBasedn: '%ldapBasedn%'
@@ -105,7 +107,7 @@ services:
     app.ldap.service:
         public: true
         class: App\Service\ldapService
-        arguments: ["%ldapHost%","%ldapPort%","%ldapUser%","%ldapPassword%","%ldapBasedn%"]
+        arguments: ["%ldapHost%","%ldapPort%","%ldapTls%","%ldapUser%","%ldapPassword%","%ldapBasedn%"]
 
     app.upload.samename:
         public: true
diff --git a/src/nineschool-1.0/scripts/websocket.sh b/src/nineschool-1.0/scripts/websocket.sh
index 2bdd9e6..d70a5ac 100755
--- a/src/nineschool-1.0/scripts/websocket.sh
+++ b/src/nineschool-1.0/scripts/websocket.sh
@@ -32,6 +32,6 @@ then
 
     if [ "$restart" == "yes" ] && [ "$1" != "stop" ] ; then
         echo WEBSOCKET = START
-        bin/console app:Websocket --name $APP_ALIAS & disown
+        systemctl restart $APP_ALIAS
     fi
 fi
\ No newline at end of file
diff --git a/src/nineschool-1.0/src/Service/ldapService.php b/src/nineschool-1.0/src/Service/ldapService.php
index fb093a8..461eddd 100644
--- a/src/nineschool-1.0/src/Service/ldapService.php
+++ b/src/nineschool-1.0/src/Service/ldapService.php
@@ -10,16 +10,18 @@ class ldapService
 
     protected $host;
     protected $port;
+    protected $tls;
     protected $user = null;
     protected $password = null;
     protected $basedn;
 
     private $connection = null;
 
-    public function __construct($ldapHost, $ldapPort, $ldapUser, $ldapPassword, $ldapBasedn)
+    public function __construct($ldapHost, $ldapPort, $ldapTls, $ldapUser, $ldapPassword, $ldapBasedn)
     {
         $this->host = $ldapHost;
         $this->port = $ldapPort;
+        $this->tls  = $ldapTls;
         $this->user = $ldapUser;
         $this->password = $ldapPassword;
         $this->basedn = $ldapBasedn;
@@ -32,6 +34,9 @@ class ldapService
             $ldapConn = ldap_connect($this->host, $this->port);
             if($ldapConn){
                 ldap_set_option($ldapConn, LDAP_OPT_PROTOCOL_VERSION, 3);
+                ldap_set_option($ldapConn, LDAP_OPT_REFERRALS, 0);
+                if($this->tls) ldap_start_tls($ldapConn);
+                
                 if(ldap_bind( $ldapConn, $this->user, $this->password)){
                     $this->connection = $ldapConn;
                     return $this->connection;
diff --git a/tmpl/nineschool-env.local b/tmpl/nineschool-env.local
index 479fa89..827bdb4 100644
--- a/tmpl/nineschool-env.local
+++ b/tmpl/nineschool-env.local
@@ -63,6 +63,11 @@ LDAP_MODEL=open
 %end if
 LDAP_HOST=%%adresse_ip_ldap
 LDAP_PORT=%%ldap_port
+%if %%getVar("ldap_tls","non") == "oui"
+LDAP_TLS=1
+%else
+LDAP_TLS=0
+%end if
 LDAP_USER=%%ldap_reader
 LDAP_PASSWORD=%%pwdreader("",%%ldap_reader_passfile)
 LDAP_BASEDN=%%ldap_base_dn