1383 lines
45 KiB
PHP
Executable File
1383 lines
45 KiB
PHP
Executable File
<?php
|
|
|
|
namespace App\Service;
|
|
|
|
use App\Entity\Group;
|
|
use App\Entity\Niveau01;
|
|
use App\Entity\Niveau02;
|
|
use App\Entity\Niveau03;
|
|
use App\Entity\Niveau04;
|
|
use App\Entity\User;
|
|
use App\Entity\UserGroup;
|
|
use Symfony\Component\DependencyInjection\ContainerInterface;
|
|
|
|
class LdapService
|
|
{
|
|
private $appMasteridentity;
|
|
private $synchro;
|
|
private $host;
|
|
private $port;
|
|
private $usetls;
|
|
private $userwriter;
|
|
private $user;
|
|
private $password;
|
|
private $basedn;
|
|
private $baseorganisation;
|
|
private $baseniveau01;
|
|
private $baseniveau02;
|
|
private $baseniveau03;
|
|
private $baseniveau04;
|
|
private $basegroup;
|
|
private $baseuser;
|
|
private $username;
|
|
private $firstname;
|
|
private $lastname;
|
|
private $email;
|
|
private $avatar;
|
|
private $memberof;
|
|
private $groupgid;
|
|
private $groupname;
|
|
private $groupmember;
|
|
private $groupmemberisdn;
|
|
private $filtergroup;
|
|
private $filteruser;
|
|
private $userattributes;
|
|
|
|
private $connection;
|
|
|
|
public function __construct(ContainerInterface $container)
|
|
{
|
|
$this->appMasteridentity = $container->getParameter('appMasteridentity');
|
|
$this->synchro = $container->getParameter('appSynchro');
|
|
$this->host = $container->getParameter('ldapHost');
|
|
$this->port = $container->getParameter('ldapPort');
|
|
$this->usetls = $container->getParameter('ldapUsetls');
|
|
$this->userwriter = $container->getParameter('ldapUserwriter');
|
|
$this->user = $container->getParameter('ldapUser');
|
|
$this->password = $container->getParameter('ldapPassword');
|
|
$this->basedn = $container->getParameter('ldapBasedn');
|
|
$this->baseorganisation = $container->getParameter('ldapBaseorganisation');
|
|
$this->baseniveau01 = $container->getParameter('ldapBaseniveau01');
|
|
$this->baseniveau02 = $container->getParameter('ldapBaseniveau02');
|
|
$this->baseniveau03 = $container->getParameter('ldapBaseniveau03');
|
|
$this->baseniveau04 = $container->getParameter('ldapBaseniveau04');
|
|
$this->basegroup = $container->getParameter('ldapBasegroup');
|
|
$this->baseuser = $container->getParameter('ldapBaseuser');
|
|
$this->username = $container->getParameter('ldapUsername');
|
|
$this->firstname = $container->getParameter('ldapFirstname');
|
|
$this->lastname = $container->getParameter('ldapLastname');
|
|
$this->email = $container->getParameter('ldapEmail');
|
|
$this->avatar = $container->getParameter('ldapAvatar');
|
|
$this->memberof = $container->getParameter('ldapMemberof');
|
|
$this->groupgid = $container->getParameter('ldapGroupgid');
|
|
$this->groupname = $container->getParameter('ldapGroupname');
|
|
$this->groupmember = $container->getParameter('ldapGroupmember');
|
|
$this->groupmemberisdn = $container->getParameter('ldapGroupmemberisdn');
|
|
$this->filtergroup = $container->getParameter('ldapFiltergroup');
|
|
$this->filteruser = $container->getParameter('ldapFilteruser');
|
|
|
|
$this->userattributes = [$this->username, $this->firstname, $this->lastname, $this->email, $this->avatar, $this->memberof];
|
|
}
|
|
|
|
public function isNine2Ldap()
|
|
{
|
|
return ('SQL' == $this->appMasteridentity) && 'NINE2LDAP' == $this->synchro && $this->userwriter && $this->baseorganisation && $this->baseniveau01 && $this->baseniveau02 && $this->baseniveau03 && $this->baseniveau04 && $this->basegroup && $this->baseuser && $this->connect();
|
|
}
|
|
|
|
public function connect()
|
|
{
|
|
// Si on est déjà co = on rebind pour gérer le cas d'un timeout de connection
|
|
if ($this->connection) {
|
|
if (!@ldap_bind($this->connection, $this->user, $this->password)) {
|
|
$this->disconnect();
|
|
}
|
|
}
|
|
|
|
if ($this->connection) {
|
|
return $this->connection;
|
|
} else {
|
|
$ldapConn = ldap_connect($this->host, $this->port);
|
|
if ($ldapConn) {
|
|
ldap_set_option($ldapConn, LDAP_OPT_PROTOCOL_VERSION, 3);
|
|
ldap_set_option($ldapConn, LDAP_OPT_REFERRALS, 0);
|
|
if ($this->usetls) {
|
|
ldap_start_tls($ldapConn);
|
|
}
|
|
|
|
if (@ldap_bind($ldapConn, $this->user, $this->password)) {
|
|
$this->connection = $ldapConn;
|
|
|
|
return $this->connection;
|
|
}
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
public function userconnect($username, $userpassword)
|
|
{
|
|
$ldapConn = ldap_connect($this->host, $this->port);
|
|
$this->connection = $ldapConn;
|
|
if ($this->connection) {
|
|
ldap_set_option($ldapConn, LDAP_OPT_PROTOCOL_VERSION, 3);
|
|
ldap_set_option($ldapConn, LDAP_OPT_REFERRALS, 0);
|
|
if ($this->usetls) {
|
|
ldap_start_tls($ldapConn);
|
|
}
|
|
|
|
$dn = $this->getUserDN($username);
|
|
if (@ldap_bind($ldapConn, $dn, $userpassword)) {
|
|
$res = $this->search(str_replace('*', $username, $this->filteruser), $this->userattributes, $this->baseuser);
|
|
$this->disconnect();
|
|
|
|
return $res;
|
|
}
|
|
}
|
|
$this->disconnect();
|
|
|
|
return false;
|
|
}
|
|
|
|
public function getParameter($key)
|
|
{
|
|
switch ($key) {
|
|
case 'baseuser': return $this->baseuser;
|
|
break;
|
|
case 'basegroup': return $this->basegroup;
|
|
break;
|
|
case 'baseniveau01': return $this->baseniveau01;
|
|
break;
|
|
case 'baseniveau02': return $this->baseniveau02;
|
|
break;
|
|
case 'baseniveau03': return $this->baseniveau03;
|
|
break;
|
|
case 'baseniveau04': return $this->baseniveau04;
|
|
break;
|
|
case 'basedn': return $this->basedn;
|
|
break;
|
|
case 'baseorganisation': return $this->baseorganisation;
|
|
break;
|
|
case 'filteruser': return $this->filteruser;
|
|
break;
|
|
}
|
|
}
|
|
|
|
public function search($filter, $attributes = [], $subBranch = '')
|
|
{
|
|
$connection = $this->connect();
|
|
$branch = ($subBranch ? $subBranch : $this->basedn);
|
|
$result = ldap_search($connection, $branch, $filter, $attributes, 0, 0, 0);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
|
|
return $this->resultToArray($result);
|
|
}
|
|
|
|
public function searchdn($dn, $subBranch = '')
|
|
{
|
|
$connection = $this->connect();
|
|
$tbdn = ldap_explode_dn($dn, 0);
|
|
$branch = ($subBranch ? $subBranch : $this->basedn);
|
|
$result = ldap_search($connection, $branch, '('.$tbdn[0].')', [], 0, 0, 0);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
|
|
return $this->resultToArray($result);
|
|
}
|
|
|
|
public function deleteByDN($dn, $recursive = false)
|
|
{
|
|
$connection = $this->connect();
|
|
if (false == $recursive) {
|
|
$ldapentrys = $this->searchdn($dn);
|
|
if (!empty($ldapentrys)) {
|
|
$removed = ldap_delete($connection, $dn);
|
|
if (!$removed) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
} else {
|
|
$ldapentrys = $this->searchdn($dn);
|
|
if (!empty($ldapentrys)) {
|
|
// searching for sub entries
|
|
$sr = ldap_list($connection, $dn, 'ObjectClass=*', ['']);
|
|
$info = ldap_get_entries($connection, $sr);
|
|
for ($i = 0; $i < $info['count']; ++$i) {
|
|
$result = $this->deleteByDN($info[$i]['dn'], $recursive);
|
|
if (!$result) {
|
|
return $result;
|
|
}
|
|
}
|
|
|
|
return ldap_delete($connection, $dn);
|
|
}
|
|
}
|
|
}
|
|
|
|
public function rename($oldDN, $newDN, $parentDN = '', $deleteOldDN = true)
|
|
{
|
|
$connection = $this->connect();
|
|
$result = ldap_rename($connection, $oldDN, $newDN, $parentDN, $deleteOldDN);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
private function resultToArray($result)
|
|
{
|
|
$connection = $this->connect();
|
|
$resultArray = [];
|
|
|
|
if ($result) {
|
|
$entry = ldap_first_entry($connection, $result);
|
|
while ($entry) {
|
|
$row = [];
|
|
$attr = ldap_first_attribute($connection, $entry);
|
|
while ($attr) {
|
|
$val = ldap_get_values_len($connection, $entry, $attr);
|
|
if (array_key_exists('count', $val) and 1 == $val['count']) {
|
|
$row[strtolower($attr)] = $val[0];
|
|
} else {
|
|
$row[strtolower($attr)] = $val;
|
|
}
|
|
|
|
if (is_array($row[strtolower($attr)])) {
|
|
unset($row[strtolower($attr)]['count']);
|
|
}
|
|
|
|
$attr = ldap_next_attribute($connection, $entry);
|
|
}
|
|
$resultArray[] = $row;
|
|
$entry = ldap_next_entry($connection, $entry);
|
|
}
|
|
}
|
|
|
|
return $resultArray;
|
|
}
|
|
|
|
public function in_array_r($item, $array)
|
|
{
|
|
return preg_match('/"'.$item.'"/i', json_encode($array));
|
|
}
|
|
|
|
public function disconnect()
|
|
{
|
|
if ($this->connection) {
|
|
ldap_unbind($this->connection);
|
|
$this->connection = null;
|
|
}
|
|
}
|
|
|
|
public function ldapError()
|
|
{
|
|
$connection = $this->connect();
|
|
throw new \Exception('Error: ('.ldap_errno($connection).') '.ldap_error($connection));
|
|
}
|
|
|
|
public function ldapModify($dn, $attrs)
|
|
{
|
|
$connection = $this->connect();
|
|
$result = ldap_modify($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
|
|
// ==================================================================================================================================================================
|
|
// == Function Organisation==========================================================================================================================================
|
|
// ==================================================================================================================================================================
|
|
|
|
public function addOrganisations()
|
|
{
|
|
$ldapentrys = $this->searchdn($this->baseorganisation);
|
|
if (empty($ldapentrys)) {
|
|
$this->addOrganisation($this->baseorganisation);
|
|
}
|
|
|
|
$ldapentrys = $this->searchdn($this->baseniveau01, $this->baseorganisation);
|
|
if (empty($ldapentrys)) {
|
|
$this->addOrganisation($this->baseniveau01);
|
|
}
|
|
|
|
$ldapentrys = $this->searchdn($this->baseniveau02, $this->baseorganisation);
|
|
if (empty($ldapentrys)) {
|
|
$this->addOrganisation($this->baseniveau02);
|
|
}
|
|
|
|
$ldapentrys = $this->searchdn($this->baseniveau03, $this->baseorganisation);
|
|
if (empty($ldapentrys)) {
|
|
$this->addOrganisation($this->baseniveau03);
|
|
}
|
|
|
|
$ldapentrys = $this->searchdn($this->baseniveau04, $this->baseorganisation);
|
|
if (empty($ldapentrys)) {
|
|
$this->addOrganisation($this->baseniveau04);
|
|
}
|
|
|
|
$ldapentrys = $this->searchdn($this->basegroup, $this->baseorganisation);
|
|
if (empty($ldapentrys)) {
|
|
$this->addOrganisation($this->basegroup);
|
|
}
|
|
|
|
$ldapentrys = $this->searchdn($this->baseuser, $this->baseorganisation);
|
|
if (empty($ldapentrys)) {
|
|
$this->addOrganisation($this->baseuser);
|
|
}
|
|
}
|
|
|
|
public function addOrganisation($dn)
|
|
{
|
|
$connection = $this->connect();
|
|
$attrs = [];
|
|
$attrs['objectclass'] = ['top', 'organizationalUnit'];
|
|
$result = ldap_add($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
// ==================================================================================================================================================================
|
|
// == Function User==================================================================================================================================================
|
|
// ==================================================================================================================================================================
|
|
|
|
public function addUser(User $user)
|
|
{
|
|
$connection = $this->connect();
|
|
$dn = $this->getUserDN($user->getUsername());
|
|
|
|
$attrs = [];
|
|
$attrs['objectclass'] = $this->getObjectClassesUser();
|
|
$this->fillAttributesUser($user, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
$result = ldap_add($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
public function ismodifyUser(User $user, $entry)
|
|
{
|
|
$attrs = [];
|
|
$this->fillAttributesUser($user, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (!array_key_exists($key, $entry) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $entry) && $value != $entry[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
foreach ($entry as $key => $value) {
|
|
if (!array_key_exists($key, $attrs) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $attrs) && $value != $attrs[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
public function modifyUser(User $user)
|
|
{
|
|
$dn = $this->basedn;
|
|
$connection = $this->connect();
|
|
|
|
$attrs = [];
|
|
$this->fillAttributesUser($user, $attrs);
|
|
|
|
// Rechercher le DN du user
|
|
$dn = $this->getUserDN($user->getUsername());
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
// Bien mettre un @ car si l'attribut est déjà vide cela crache une erreur car l'attribut n'existe déjà plus
|
|
@ldap_mod_del($connection, $dn, [$key => []]);
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
$result = ldap_modify($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
|
|
public function modifyUserpwd(User $user)
|
|
{
|
|
$dn = $this->basedn;
|
|
$connection = $this->connect();
|
|
|
|
$attrs = [];
|
|
|
|
// Attributs associés au password
|
|
$attrs['userpassword'] = $user->getPassword();
|
|
|
|
// Rechercher le DN du user
|
|
$dn = $this->getUserDN($user->getUsername());
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
// Bien mettre un @ car si l'attribut est déjà vide cela crache une erreur car l'attribut n'existe déjà plus
|
|
@ldap_mod_del($connection, $dn, [$key => []]);
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
$result = ldap_modify($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
|
|
public function updateNiveauUser(User $user, $todel = false)
|
|
{
|
|
$dn = $this->basedn;
|
|
$connection = $this->connect();
|
|
$result = null;
|
|
|
|
if (!$user->isIsactive()) {
|
|
$todel = true;
|
|
}
|
|
|
|
// NIVEAU01
|
|
// On recherche le Niveau01 actuellement asscocié à l'utilisateur
|
|
$criteria = '(&(cn=*)(memberUid='.$user->getUsername().'))';
|
|
$subbranch = $this->baseniveau01;
|
|
$results = $this->search($criteria, ['cn'], $subbranch);
|
|
foreach ($results as $result) {
|
|
// Si Niveau01 différent de celui en cours on le détache de ce Niveau01
|
|
if ($result['cn'] != $user->getNiveau01()->getLabel() || $todel) {
|
|
$dn = $this->getNiveau01DN($result['cn']);
|
|
$entry['memberuid'] = $user->getUsername();
|
|
$result = ldap_mod_del($connection, $dn, $entry);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
}
|
|
|
|
// On recherche le Niveau01 en cours
|
|
if (!$todel) {
|
|
$criteria = '(cn='.$user->getNiveau01()->getLabel().')';
|
|
$subbranch = $this->baseniveau01;
|
|
$result = $this->search($criteria, ['memberuid'], $subbranch);
|
|
|
|
// S'il n'est pas membre du Niveau01 on le rattache
|
|
if (!$this->in_array_r($user->getUsername(), $result[0])) {
|
|
$dn = $this->getNiveau01DN($user->getNiveau01()->getLabel());
|
|
$entry['memberuid'] = $user->getUsername();
|
|
$result = ldap_mod_add($connection, $dn, $entry);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
}
|
|
|
|
// NIVEAU02
|
|
// On recherche le Niveau02 actuellement asscocié à l'utilisateur
|
|
$criteria = '(&(cn=*)(memberUid='.$user->getUsername().'))';
|
|
$subbranch = $this->baseniveau02;
|
|
$results = $this->search($criteria, ['cn'], $subbranch);
|
|
foreach ($results as $result) {
|
|
// Si Niveau02 différent de celui en cours on le détache de ce Niveau02
|
|
if (null === $user->getNiveau02() || $result['cn'] != $user->getNiveau02()->getLabel() || $todel) {
|
|
$dn = $this->getNiveau02DN($result['cn']);
|
|
$entry['memberuid'] = $user->getUsername();
|
|
$result = ldap_mod_del($connection, $dn, $entry);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
}
|
|
|
|
// On recherche le Niveau02 en cours
|
|
if (!$todel) {
|
|
if (null !== $user->getNiveau02()) {
|
|
$criteria = '(cn='.$user->getNiveau02()->getLabel().')';
|
|
$subbranch = $this->baseniveau02;
|
|
$result = $this->search($criteria, ['memberuid'], $subbranch);
|
|
|
|
// S'il n'est pas membre du Niveau02 on le rattache
|
|
if (empty($result) || !$this->in_array_r($user->getUsername(), $result[0])) {
|
|
$dn = $this->getNiveau02DN($user->getNiveau02()->getLabel());
|
|
$entry['memberuid'] = $user->getUsername();
|
|
$result = ldap_mod_add($connection, $dn, $entry);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// NIVEAU03
|
|
// On recherche le Niveau03 actuellement asscocié à l'utilisateur
|
|
$criteria = '(&(cn=*)(memberUid='.$user->getUsername().'))';
|
|
$subbranch = $this->baseniveau03;
|
|
$results = $this->search($criteria, ['cn'], $subbranch);
|
|
foreach ($results as $result) {
|
|
// Si Niveau03 différent de celui en cours on le détache de ce Niveau03
|
|
if (null === $user->getNiveau03() || $result['cn'] != $user->getNiveau03()->getLabel() || $todel) {
|
|
$dn = $this->getNiveau03DN($result['cn']);
|
|
$entry['memberuid'] = $user->getUsername();
|
|
$result = ldap_mod_del($connection, $dn, $entry);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
}
|
|
|
|
// On recherche le Niveau03 en cours
|
|
if (!$todel) {
|
|
if (null !== $user->getNiveau03()) {
|
|
$criteria = '(cn='.$user->getNiveau03()->getLabel().')';
|
|
$subbranch = $this->baseniveau03;
|
|
$result = $this->search($criteria, ['memberuid'], $subbranch);
|
|
|
|
// S'il n'est pas membre du Niveau03 on le rattache
|
|
if (empty($result) || !$this->in_array_r($user->getUsername(), $result[0])) {
|
|
$dn = $this->getNiveau03DN($user->getNiveau03()->getLabel());
|
|
$entry['memberuid'] = $user->getUsername();
|
|
$result = ldap_mod_add($connection, $dn, $entry);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// NIVEAU04
|
|
// On recherche le Niveau04 actuellement asscocié à l'utilisateur
|
|
$criteria = '(&(cn=*)(memberUid='.$user->getUsername().'))';
|
|
$subbranch = $this->baseniveau04;
|
|
$results = $this->search($criteria, ['cn'], $subbranch);
|
|
foreach ($results as $result) {
|
|
// Si Niveau04 différent de celui en cours on le détache de ce Niveau04
|
|
if (null === $user->getNiveau04() || $result['cn'] != $user->getNiveau04()->getLabel() || $todel) {
|
|
$dn = $this->getNiveau04DN($result['cn']);
|
|
$entry['memberuid'] = $user->getUsername();
|
|
$result = ldap_mod_del($connection, $dn, $entry);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
}
|
|
|
|
// On recherche le Niveau04 en cours
|
|
if (!$todel) {
|
|
if (null !== $user->getNiveau04()) {
|
|
$criteria = '(cn='.$user->getNiveau04()->getLabel().')';
|
|
$subbranch = $this->baseniveau04;
|
|
$result = $this->search($criteria, ['memberuid'], $subbranch);
|
|
|
|
// S'il n'est pas membre du Niveau04 on le rattache
|
|
if (empty($result) || !$this->in_array_r($user->getUsername(), $result[0])) {
|
|
$dn = $this->getNiveau04DN($user->getNiveau04()->getLabel());
|
|
$entry['memberuid'] = $user->getUsername();
|
|
$result = ldap_mod_add($connection, $dn, $entry);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
public function deleteUser(User $user)
|
|
{
|
|
$dn = $this->getUserDN($user->getUsername());
|
|
|
|
return $this->deleteByDN($dn);
|
|
}
|
|
|
|
public function getObjectClassesUser()
|
|
{
|
|
$oc = [
|
|
'top',
|
|
'person',
|
|
'organizationalPerson',
|
|
'inetOrgPerson',
|
|
];
|
|
|
|
return $oc;
|
|
}
|
|
|
|
public function listAttributesUser()
|
|
{
|
|
return [
|
|
'uid',
|
|
'cn',
|
|
'givenname',
|
|
'sn',
|
|
'mail',
|
|
'displayname',
|
|
'telephonenumber',
|
|
'postaladdress',
|
|
'userpassword',
|
|
];
|
|
}
|
|
|
|
public function fillAttributesUser(User $user, array &$attrs)
|
|
{
|
|
$attrs['uid'] = $user->getUsername();
|
|
$attrs['cn'] = $user->getFirstname().' '.$user->getLastname();
|
|
$attrs['givenname'] = $user->getFirstname();
|
|
$attrs['sn'] = $user->getLastname();
|
|
$attrs['mail'] = $user->getEmail();
|
|
$attrs['displayname'] = $user->getFirstname().' '.$user->getLastname();
|
|
$attrs['telephonenumber'] = $user->getTelephonenumber();
|
|
$attrs['postaladdress'] = $user->getPostaladress();
|
|
$attrs['userpassword'] = $user->getPassword();
|
|
}
|
|
|
|
public function getUserDN($username)
|
|
{
|
|
$connection = $this->connect();
|
|
$res = ldap_search($connection, $this->basedn, str_replace('*', $username, $this->filteruser));
|
|
$first = ldap_first_entry($this->connection, $res);
|
|
$dn = ldap_get_dn($this->connection, $first);
|
|
return $dn;
|
|
}
|
|
|
|
// ==================================================================================================================================================================
|
|
// == Function Niveau01==============================================================================================================================================
|
|
// ==================================================================================================================================================================
|
|
|
|
public function findNiveau01($ldapfilter)
|
|
{
|
|
$ldapentrys = $this->search($ldapfilter, [$this->groupgid, $this->groupname, $this->groupmember], $this->baseniveau01);
|
|
|
|
return $ldapentrys;
|
|
}
|
|
|
|
public function findNiveau01ismember($ldapfilter, $username)
|
|
{
|
|
$ldapentrys = $this->findNiveau01($ldapfilter);
|
|
foreach ($ldapentrys as $ldapentry) {
|
|
if (is_array($ldapentry[$this->groupmember])) {
|
|
if (in_array($username, $ldapentry[$this->groupmember])) {
|
|
return true;
|
|
}
|
|
} elseif ($username == $ldapentry[$this->groupmember]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
public function addNiveau01(Niveau01 $niveau01)
|
|
{
|
|
$connection = $this->connect();
|
|
$dn = $this->getNiveau01DN($niveau01->getLabel());
|
|
|
|
$attrs = [];
|
|
$attrs['objectclass'] = $this->getObjectClassesNiveau01();
|
|
$this->fillAttributesNiveau01($niveau01, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
$result = ldap_add($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
public function ismodifyNiveau01(Niveau01 $niveau01, $entry)
|
|
{
|
|
$attrs = [];
|
|
$this->fillAttributesNiveau01($niveau01, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (!array_key_exists($key, $entry) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $entry) && $value != $entry[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
foreach ($entry as $key => $value) {
|
|
if (!array_key_exists($key, $attrs) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $attrs) && $value != $attrs[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
public function modifyNiveau01(Niveau01 $niveau01, $oldid)
|
|
{
|
|
$dn = $this->basedn;
|
|
$connection = $this->connect();
|
|
|
|
$attrs = [];
|
|
$this->fillAttributesNiveau01($niveau01, $attrs);
|
|
unset($attrs['cn']);
|
|
|
|
$dn = $this->getNiveau01DN($niveau01->getLabel());
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
// Bien mettre un @ car si l'attribut est déjà vide cela crache une erreur car l'attribut n'existe déjà plus
|
|
@ldap_mod_del($connection, $dn, [$key => []]);
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
if (isset($oldid) && $oldid != $niveau01->getLabel()) {
|
|
$olddn = $this->getNiveau01DN($oldid);
|
|
$this->rename($olddn, 'cn='.$niveau01->getLabel(), $this->baseniveau01);
|
|
}
|
|
|
|
$result = ldap_modify($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
|
|
public function deleteNiveau01(Niveau01 $niveau01)
|
|
{
|
|
$dn = $this->getNiveau01DN($niveau01->getLabel());
|
|
|
|
return $this->deleteByDN($dn);
|
|
}
|
|
|
|
private function getObjectClassesNiveau01()
|
|
{
|
|
$oc = [
|
|
'top',
|
|
'posixGroup',
|
|
];
|
|
|
|
return $oc;
|
|
}
|
|
|
|
public function listAttributesNiveau01()
|
|
{
|
|
return [
|
|
'cn',
|
|
'gidnumber',
|
|
'memberuid',
|
|
];
|
|
}
|
|
|
|
public function fillAttributesNiveau01(Niveau01 $niveau01, array &$attrs)
|
|
{
|
|
$attrs['cn'] = $niveau01->getLabel();
|
|
$attrs['gidnumber'] = $niveau01->getId();
|
|
|
|
$attrs['memberuid'] = [];
|
|
foreach ($niveau01->getUsers() as $user) {
|
|
if ($user->isIsactive()) {
|
|
array_push($attrs['memberuid'], $user->getUsername());
|
|
}
|
|
}
|
|
|
|
sort($attrs['memberuid']);
|
|
if (1 == count($attrs['memberuid'])) {
|
|
$attrs['memberuid'] = $attrs['memberuid'][0];
|
|
}
|
|
}
|
|
|
|
public function getNiveau01DN($id)
|
|
{
|
|
return 'cn='.$id.','.$this->baseniveau01;
|
|
}
|
|
|
|
// ==================================================================================================================================================================
|
|
// == Function Niveau02==============================================================================================================================================
|
|
// ==================================================================================================================================================================
|
|
|
|
public function addNiveau02(Niveau02 $niveau02)
|
|
{
|
|
$connection = $this->connect();
|
|
$dn = $this->getNiveau02DN($niveau02->getLabel());
|
|
|
|
$attrs = [];
|
|
$attrs['objectclass'] = $this->getObjectClassesNiveau02();
|
|
$this->fillAttributesNiveau02($niveau02, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
$result = ldap_add($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
public function ismodifyNiveau02(Niveau02 $niveau02, $entry)
|
|
{
|
|
$attrs = [];
|
|
$this->fillAttributesNiveau02($niveau02, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (!array_key_exists($key, $entry) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $entry) && $value != $entry[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
foreach ($entry as $key => $value) {
|
|
if (!array_key_exists($key, $attrs) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $attrs) && $value != $attrs[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
public function modifyNiveau02(Niveau02 $niveau02, $oldid)
|
|
{
|
|
$dn = $this->basedn;
|
|
$connection = $this->connect();
|
|
|
|
$attrs = [];
|
|
$this->fillAttributesNiveau02($niveau02, $attrs);
|
|
unset($attrs['cn']);
|
|
|
|
$dn = $this->getNiveau02DN($niveau02->getLabel());
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
// Bien mettre un @ car si l'attribut est déjà vide cela crache une erreur car l'attribut n'existe déjà plus
|
|
@ldap_mod_del($connection, $dn, [$key => []]);
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
if (isset($oldid) && $oldid != $niveau02->getLabel()) {
|
|
$olddn = $this->getNiveau02DN($oldid);
|
|
$this->rename($olddn, 'cn='.$niveau02->getLabel(), $this->baseniveau02);
|
|
}
|
|
|
|
$result = ldap_modify($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
|
|
public function deleteNiveau02(Niveau02 $niveau02)
|
|
{
|
|
$dn = $this->getNiveau02DN($niveau02->getLabel());
|
|
|
|
return $this->deleteByDN($dn);
|
|
}
|
|
|
|
private function getObjectClassesNiveau02()
|
|
{
|
|
$oc = [
|
|
'top',
|
|
'posixGroup',
|
|
];
|
|
|
|
return $oc;
|
|
}
|
|
|
|
public function listAttributesNiveau02()
|
|
{
|
|
return [
|
|
'cn',
|
|
'gidnumber',
|
|
'memberuid',
|
|
];
|
|
}
|
|
|
|
public function fillAttributesNiveau02(Niveau02 $niveau02, array &$attrs)
|
|
{
|
|
$attrs['cn'] = $niveau02->getLabel();
|
|
$attrs['gidnumber'] = $niveau02->getId();
|
|
|
|
$attrs['memberuid'] = [];
|
|
foreach ($niveau02->getUsers() as $user) {
|
|
if ($user->isIsactive()) {
|
|
array_push($attrs['memberuid'], $user->getUsername());
|
|
}
|
|
}
|
|
|
|
sort($attrs['memberuid']);
|
|
if (1 == count($attrs['memberuid'])) {
|
|
$attrs['memberuid'] = $attrs['memberuid'][0];
|
|
}
|
|
}
|
|
|
|
public function getNiveau02DN($id)
|
|
{
|
|
return 'cn='.$id.','.$this->baseniveau02;
|
|
}
|
|
|
|
// ==================================================================================================================================================================
|
|
// == Function Niveau03==============================================================================================================================================
|
|
// ==================================================================================================================================================================
|
|
|
|
public function addNiveau03(Niveau03 $niveau03)
|
|
{
|
|
$connection = $this->connect();
|
|
$dn = $this->getNiveau03DN($niveau03->getLabel());
|
|
|
|
$attrs = [];
|
|
$attrs['objectclass'] = $this->getObjectClassesNiveau03();
|
|
$this->fillAttributesNiveau03($niveau03, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
$result = ldap_add($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
public function ismodifyNiveau03(Niveau03 $niveau03, $entry)
|
|
{
|
|
$attrs = [];
|
|
$this->fillAttributesNiveau03($niveau03, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (!array_key_exists($key, $entry) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $entry) && $value != $entry[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
foreach ($entry as $key => $value) {
|
|
if (!array_key_exists($key, $attrs) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $attrs) && $value != $attrs[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
public function modifyNiveau03(Niveau03 $niveau03, $oldid)
|
|
{
|
|
$dn = $this->basedn;
|
|
$connection = $this->connect();
|
|
|
|
$attrs = [];
|
|
$this->fillAttributesNiveau03($niveau03, $attrs);
|
|
unset($attrs['cn']);
|
|
|
|
$dn = $this->getNiveau03DN($niveau03->getLabel());
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
// Bien mettre un @ car si l'attribut est déjà vide cela crache une erreur car l'attribut n'existe déjà plus
|
|
@ldap_mod_del($connection, $dn, [$key => []]);
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
if (isset($oldid) && $oldid != $niveau03->getLabel()) {
|
|
$olddn = $this->getNiveau03DN($oldid);
|
|
$this->rename($olddn, 'cn='.$niveau03->getLabel(), $this->baseniveau03);
|
|
}
|
|
|
|
$result = ldap_modify($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
|
|
public function deleteNiveau03(Niveau03 $niveau03)
|
|
{
|
|
$dn = $this->getNiveau03DN($niveau03->getLabel());
|
|
|
|
return $this->deleteByDN($dn);
|
|
}
|
|
|
|
private function getObjectClassesNiveau03()
|
|
{
|
|
$oc = [
|
|
'top',
|
|
'posixGroup',
|
|
];
|
|
|
|
return $oc;
|
|
}
|
|
|
|
public function listAttributesNiveau03()
|
|
{
|
|
return [
|
|
'cn',
|
|
'gidnumber',
|
|
'memberuid',
|
|
];
|
|
}
|
|
|
|
public function fillAttributesNiveau03(Niveau03 $niveau03, array &$attrs)
|
|
{
|
|
$attrs['cn'] = $niveau03->getLabel();
|
|
$attrs['gidnumber'] = $niveau03->getId();
|
|
|
|
$attrs['memberuid'] = [];
|
|
foreach ($niveau03->getUsers() as $user) {
|
|
if ($user->isIsactive()) {
|
|
array_push($attrs['memberuid'], $user->getUsername());
|
|
}
|
|
}
|
|
|
|
sort($attrs['memberuid']);
|
|
if (1 == count($attrs['memberuid'])) {
|
|
$attrs['memberuid'] = $attrs['memberuid'][0];
|
|
}
|
|
}
|
|
|
|
public function getNiveau03DN($id)
|
|
{
|
|
return 'cn='.$id.','.$this->baseniveau03;
|
|
}
|
|
|
|
// ==================================================================================================================================================================
|
|
// == Function Niveau04==============================================================================================================================================
|
|
// ==================================================================================================================================================================
|
|
|
|
public function addNiveau04(Niveau04 $niveau04)
|
|
{
|
|
$connection = $this->connect();
|
|
$dn = $this->getNiveau04DN($niveau04->getLabel());
|
|
|
|
$attrs = [];
|
|
$attrs['objectclass'] = $this->getObjectClassesNiveau04();
|
|
$this->fillAttributesNiveau04($niveau04, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
$result = ldap_add($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
public function ismodifyNiveau04(Niveau04 $niveau04, $entry)
|
|
{
|
|
$attrs = [];
|
|
$this->fillAttributesNiveau04($niveau04, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (!array_key_exists($key, $entry) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $entry) && $value != $entry[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
foreach ($entry as $key => $value) {
|
|
if (!array_key_exists($key, $attrs) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $attrs) && $value != $attrs[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
public function modifyNiveau04(Niveau04 $niveau04, $oldid)
|
|
{
|
|
$dn = $this->basedn;
|
|
$connection = $this->connect();
|
|
|
|
$attrs = [];
|
|
$this->fillAttributesNiveau04($niveau04, $attrs);
|
|
unset($attrs['cn']);
|
|
|
|
$dn = $this->getNiveau04DN($niveau04->getLabel());
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
// Bien mettre un @ car si l'attribut est déjà vide cela crache une erreur car l'attribut n'existe déjà plus
|
|
@ldap_mod_del($connection, $dn, [$key => []]);
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
if (isset($oldid) && $oldid != $niveau04->getLabel()) {
|
|
$olddn = $this->getNiveau04DN($oldid);
|
|
$this->rename($olddn, 'cn='.$niveau04->getLabel(), $this->baseniveau04);
|
|
}
|
|
|
|
$result = ldap_modify($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
|
|
public function deleteNiveau04(Niveau04 $niveau04)
|
|
{
|
|
$dn = $this->getNiveau04DN($niveau04->getLabel());
|
|
|
|
return $this->deleteByDN($dn);
|
|
}
|
|
|
|
private function getObjectClassesNiveau04()
|
|
{
|
|
$oc = [
|
|
'top',
|
|
'posixGroup',
|
|
];
|
|
|
|
return $oc;
|
|
}
|
|
|
|
public function listAttributesNiveau04()
|
|
{
|
|
return [
|
|
'cn',
|
|
'gidnumber',
|
|
'memberuid',
|
|
];
|
|
}
|
|
|
|
public function fillAttributesNiveau04(Niveau04 $niveau04, array &$attrs)
|
|
{
|
|
$attrs['cn'] = $niveau04->getLabel();
|
|
$attrs['gidnumber'] = $niveau04->getId();
|
|
|
|
$attrs['memberuid'] = [];
|
|
foreach ($niveau04->getUsers() as $user) {
|
|
if ($user->isIsactive()) {
|
|
array_push($attrs['memberuid'], $user->getUsername());
|
|
}
|
|
}
|
|
|
|
sort($attrs['memberuid']);
|
|
if (1 == count($attrs['memberuid'])) {
|
|
$attrs['memberuid'] = $attrs['memberuid'][0];
|
|
}
|
|
}
|
|
|
|
public function getNiveau04DN($id)
|
|
{
|
|
return 'cn='.$id.','.$this->baseniveau04;
|
|
}
|
|
|
|
// ==================================================================================================================================================================
|
|
// == Function Group=================================================================================================================================================
|
|
// ==================================================================================================================================================================
|
|
|
|
public function addGroup(Group $group)
|
|
{
|
|
$connection = $this->connect();
|
|
$dn = $this->getGroupDN($group->getLabel());
|
|
|
|
$attrs = [];
|
|
$attrs['objectclass'] = $this->getObjectClassesGroup();
|
|
$this->fillAttributesGroup($group, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
$result = ldap_add($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
public function ismodifyGroup(Group $group, $entry)
|
|
{
|
|
$attrs = [];
|
|
$this->fillAttributesGroup($group, $attrs);
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (!array_key_exists($key, $entry) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $entry) && $value != $entry[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
foreach ($entry as $key => $value) {
|
|
if (!array_key_exists($key, $attrs) && !empty($value)) {
|
|
return true;
|
|
} elseif (array_key_exists($key, $attrs) && $value != $attrs[$key]) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
public function modifyGroup(Group $group, $oldid)
|
|
{
|
|
$dn = $this->basedn;
|
|
$connection = $this->connect();
|
|
|
|
$attrs = [];
|
|
$this->fillAttributesGroup($group, $attrs);
|
|
unset($attrs['cn']);
|
|
|
|
$dn = $this->getGroupDN($group->getLabel());
|
|
|
|
foreach ($attrs as $key => $value) {
|
|
if (empty($value)) {
|
|
// Bien mettre un @ car si l'attribut est déjà vide cela crache une erreur car l'attribut n'existe déjà plus
|
|
@ldap_mod_del($connection, $dn, [$key => []]);
|
|
unset($attrs[$key]);
|
|
}
|
|
}
|
|
|
|
if (isset($oldid) && $oldid != $group->getLabel()) {
|
|
$olddn = $this->getGroupDN($oldid);
|
|
$this->rename($olddn, 'cn='.$group->getLabel(), $this->basegroup);
|
|
}
|
|
|
|
$result = ldap_modify($connection, $dn, $attrs);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
|
|
public function deleteGroup(Group $group)
|
|
{
|
|
$dn = $this->getGroupDN($group->getLabel());
|
|
|
|
return $this->deleteByDN($dn);
|
|
}
|
|
|
|
private function getObjectClassesGroup()
|
|
{
|
|
$oc = [
|
|
'top',
|
|
'posixGroup',
|
|
];
|
|
|
|
return $oc;
|
|
}
|
|
|
|
public function listAttributesGroup()
|
|
{
|
|
return [
|
|
'cn',
|
|
'gidnumber',
|
|
'memberuid',
|
|
];
|
|
}
|
|
|
|
public function fillAttributesGroup(Group $group, array &$attrs)
|
|
{
|
|
$attrs['cn'] = $group->getLabel();
|
|
$attrs['gidnumber'] = $group->getId();
|
|
|
|
$attrs['memberuid'] = [];
|
|
foreach ($group->getUsers() as $usergroup) {
|
|
if ($usergroup->getUser()->isIsactive()) {
|
|
array_push($attrs['memberuid'], $usergroup->getUser()->getUsername());
|
|
}
|
|
}
|
|
|
|
sort($attrs['memberuid']);
|
|
if (1 == count($attrs['memberuid'])) {
|
|
$attrs['memberuid'] = $attrs['memberuid'][0];
|
|
}
|
|
}
|
|
|
|
public function getGroupDN($id)
|
|
{
|
|
return 'cn='.$id.','.$this->basegroup;
|
|
}
|
|
|
|
// ==================================================================================================================================================================
|
|
// == Function UserGroup=============================================================================================================================================
|
|
// ==================================================================================================================================================================
|
|
|
|
public function addUserGroup(UserGroup $usergroup)
|
|
{
|
|
$dn = $this->basedn;
|
|
$connection = $this->connect();
|
|
|
|
// On recherche le group en cours
|
|
$criteria = '(cn='.$usergroup->getGroup()->getLabel().')';
|
|
$subbranch = $this->basegroup;
|
|
$result = $this->search($criteria, ['memberuid'], $subbranch);
|
|
|
|
if (!$this->in_array_r($usergroup->getUser()->getUsername(), $result[0])) {
|
|
if ($usergroup->getUser()->isIsactive()) {
|
|
$dn = $this->getGroupDN($usergroup->getGroup()->getLabel());
|
|
$entry['memberuid'] = $usergroup->getUser()->getUsername();
|
|
$result = ldap_mod_add($connection, $dn, $entry);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
public function delUserGroup(UserGroup $usergroup)
|
|
{
|
|
$dn = $this->basedn;
|
|
$connection = $this->connect();
|
|
|
|
// On recherche le group en cours
|
|
$criteria = '(cn='.$usergroup->getGroup()->getLabel().')';
|
|
$subbranch = $this->basegroup;
|
|
$result = $this->search($criteria, ['memberuid'], $subbranch);
|
|
|
|
if ($this->in_array_r($usergroup->getUser()->getUsername(), $result[0])) {
|
|
$dn = $this->getGroupDN($usergroup->getGroup()->getLabel());
|
|
$entry['memberuid'] = $usergroup->getUser()->getUsername();
|
|
$result = ldap_mod_del($connection, $dn, $entry);
|
|
if (!$result) {
|
|
$this->ldapError();
|
|
}
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
}
|