nextcloud / server

apps/user_ldap/lib/Wizard.php

Indentation +1332 added lines, -1332 removed lines

@@ -16,1336 +16,1336 @@
 use Psr\Log\LoggerInterface;
 
 class Wizard extends LDAPUtility {
-	protected static ?IL10N $l = null;
-	protected ?\LDAP\Connection $cr = null;
-	protected WizardResult $result;
-	protected LoggerInterface $logger;
-
-	public const LRESULT_PROCESSED_OK = 2;
-	public const LRESULT_PROCESSED_INVALID = 3;
-	public const LRESULT_PROCESSED_SKIP = 4;
-
-	public const LFILTER_LOGIN = 2;
-	public const LFILTER_USER_LIST = 3;
-	public const LFILTER_GROUP_LIST = 4;
-
-	public const LFILTER_MODE_ASSISTED = 2;
-	public const LFILTER_MODE_RAW = 1;
-
-	public const LDAP_NW_TIMEOUT = 4;
-
-	public function __construct(
-		protected Configuration $configuration,
-		ILDAPWrapper $ldap,
-		protected Access $access,
-	) {
-		parent::__construct($ldap);
-		if (is_null(static::$l)) {
-			static::$l = Server::get(IL10NFactory::class)->get('user_ldap');
-		}
-		$this->result = new WizardResult();
-		$this->logger = Server::get(LoggerInterface::class);
-	}
-
-	public function __destruct() {
-		if ($this->result->hasChanges()) {
-			$this->configuration->saveConfiguration();
-		}
-	}
-
-	/**
-	 * counts entries in the LDAP directory
-	 *
-	 * @param string $filter the LDAP search filter
-	 * @param string $type a string being either 'users' or 'groups';
-	 * @throws \Exception
-	 */
-	public function countEntries(string $filter, string $type): int {
-		$reqs = ['ldapHost', 'ldapBase'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if ($type === 'users') {
-			$reqs[] = 'ldapUserFilter';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			throw new \Exception('Requirements not met', 400);
-		}
-
-		$attr = ['dn']; // default
-		$limit = 1001;
-		if ($type === 'groups') {
-			$result = $this->access->countGroups($filter, $attr, $limit);
-		} elseif ($type === 'users') {
-			$result = $this->access->countUsers($filter, $attr, $limit);
-		} elseif ($type === 'objects') {
-			$result = $this->access->countObjects($limit);
-		} else {
-			throw new \Exception('Internal error: Invalid object type', 500);
-		}
-
-		return (int)$result;
-	}
-
-	/**
-	 * @return WizardResult|false
-	 */
-	public function countGroups() {
-		$filter = $this->configuration->ldapGroupFilter;
-
-		if (empty($filter)) {
-			$output = self::$l->n('%n group found', '%n groups found', 0);
-			$this->result->addChange('ldap_group_count', $output);
-			return $this->result;
-		}
-
-		try {
-			$groupsTotal = $this->countEntries($filter, 'groups');
-		} catch (\Exception $e) {
-			//400 can be ignored, 500 is forwarded
-			if ($e->getCode() === 500) {
-				throw $e;
-			}
-			return false;
-		}
-
-		if ($groupsTotal > 1000) {
-			$output = self::$l->t('> 1000 groups found');
-		} else {
-			$output = self::$l->n(
-				'%n group found',
-				'%n groups found',
-				$groupsTotal
-			);
-		}
-		$this->result->addChange('ldap_group_count', $output);
-		return $this->result;
-	}
-
-	/**
-	 * @throws \Exception
-	 */
-	public function countUsers(): WizardResult {
-		$filter = $this->access->getFilterForUserCount();
-
-		$usersTotal = $this->countEntries($filter, 'users');
-		if ($usersTotal > 1000) {
-			$output = self::$l->t('> 1000 users found');
-		} else {
-			$output = self::$l->n(
-				'%n user found',
-				'%n users found',
-				$usersTotal
-			);
-		}
-		$this->result->addChange('ldap_user_count', $output);
-		return $this->result;
-	}
-
-	/**
-	 * counts any objects in the currently set base dn
-	 *
-	 * @throws \Exception
-	 */
-	public function countInBaseDN(): WizardResult {
-		// we don't need to provide a filter in this case
-		$total = $this->countEntries('', 'objects');
-		$this->result->addChange('ldap_test_base', $total);
-		return $this->result;
-	}
-
-	/**
-	 * counts users with a specified attribute
-	 * @return int|false
-	 */
-	public function countUsersWithAttribute(string $attr, bool $existsCheck = false) {
-		$reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return  false;
-		}
-
-		$filter = $this->access->combineFilterWithAnd([
-			$this->configuration->ldapUserFilter,
-			$attr . '=*'
-		]);
-
-		$limit = $existsCheck ? null : 1;
-
-		return $this->access->countUsers($filter, ['dn'], $limit);
-	}
-
-	/**
-	 * detects the display name attribute. If a setting is already present that
-	 * returns at least one hit, the detection will be canceled.
-	 * @return WizardResult|false
-	 * @throws \Exception
-	 */
-	public function detectUserDisplayNameAttribute() {
-		$reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return  false;
-		}
-
-		$attr = $this->configuration->ldapUserDisplayName;
-		if ($attr !== '' && $attr !== 'displayName') {
-			// most likely not the default value with upper case N,
-			// verify it still produces a result
-			$count = (int)$this->countUsersWithAttribute($attr, true);
-			if ($count > 0) {
-				//no change, but we sent it back to make sure the user interface
-				//is still correct, even if the call was cancelled meanwhile
-				$this->result->addChange('ldap_display_name', $attr);
-				return $this->result;
-			}
-		}
-
-		// first attribute that has at least one result wins
-		$displayNameAttrs = ['displayname', 'cn'];
-		foreach ($displayNameAttrs as $attr) {
-			$count = (int)$this->countUsersWithAttribute($attr, true);
-
-			if ($count > 0) {
-				$this->applyFind('ldap_display_name', $attr);
-				return $this->result;
-			}
-		}
-
-		throw new \Exception(self::$l->t('Could not detect user display name attribute. Please specify it yourself in advanced LDAP settings.'));
-	}
-
-	/**
-	 * detects the most often used email attribute for users applying to the
-	 * user list filter. If a setting is already present that returns at least
-	 * one hit, the detection will be canceled.
-	 * @return WizardResult|bool
-	 */
-	public function detectEmailAttribute() {
-		$reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return  false;
-		}
-
-		$attr = $this->configuration->ldapEmailAttribute;
-		if ($attr !== '') {
-			$count = (int)$this->countUsersWithAttribute($attr, true);
-			if ($count > 0) {
-				return false;
-			}
-			$writeLog = true;
-		} else {
-			$writeLog = false;
-		}
-
-		$emailAttributes = ['mail', 'mailPrimaryAddress'];
-		$winner = '';
-		$maxUsers = 0;
-		foreach ($emailAttributes as $attr) {
-			$count = $this->countUsersWithAttribute($attr);
-			if ($count > $maxUsers) {
-				$maxUsers = $count;
-				$winner = $attr;
-			}
-		}
-
-		if ($winner !== '') {
-			$this->applyFind('ldap_email_attr', $winner);
-			if ($writeLog) {
-				$this->logger->info(
-					'The mail attribute has automatically been reset, '
-					. 'because the original value did not return any results.',
-					['app' => 'user_ldap']
-				);
-			}
-		}
-
-		return $this->result;
-	}
-
-	/**
-	 * @return WizardResult|false
-	 * @throws \Exception
-	 */
-	public function determineAttributes() {
-		$reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return  false;
-		}
-
-		$attributes = $this->getUserAttributes();
-
-		if (!is_array($attributes)) {
-			throw new \Exception('Failed to determine user attributes');
-		}
-
-		natcasesort($attributes);
-		$attributes = array_values($attributes);
-
-		$this->result->addOptions('ldap_loginfilter_attributes', $attributes);
-
-		$selected = $this->configuration->ldapLoginFilterAttributes;
-		if (is_array($selected) && !empty($selected)) {
-			$this->result->addChange('ldap_loginfilter_attributes', $selected);
-		}
-
-		return $this->result;
-	}
-
-	/**
-	 * detects the available LDAP attributes
-	 * @return array|false
-	 * @throws \Exception
-	 */
-	private function getUserAttributes() {
-		$reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return  false;
-		}
-		$cr = $this->getConnection();
-		if (!$cr) {
-			throw new \Exception('Could not connect to LDAP');
-		}
-
-		$base = $this->configuration->ldapBase[0];
-		$filter = $this->configuration->ldapUserFilter;
-		$rr = $this->ldap->search($cr, $base, $filter, [], 1, 1);
-		if (!$this->ldap->isResource($rr)) {
-			return false;
-		}
-		/** @var \LDAP\Result $rr */
-		$er = $this->ldap->firstEntry($cr, $rr);
-		$attributes = $this->ldap->getAttributes($cr, $er);
-		if ($attributes === false) {
-			return false;
-		}
-		$pureAttributes = [];
-		for ($i = 0; $i < $attributes['count']; $i++) {
-			$pureAttributes[] = $attributes[$i];
-		}
-
-		return $pureAttributes;
-	}
-
-	/**
-	 * detects the available LDAP groups
-	 * @return WizardResult|false the instance's WizardResult instance
-	 */
-	public function determineGroupsForGroups() {
-		return $this->determineGroups('ldap_groupfilter_groups',
-			'ldapGroupFilterGroups',
-			false);
-	}
-
-	/**
-	 * detects the available LDAP groups
-	 * @return WizardResult|false the instance's WizardResult instance
-	 */
-	public function determineGroupsForUsers() {
-		return $this->determineGroups('ldap_userfilter_groups',
-			'ldapUserFilterGroups');
-	}
-
-	/**
-	 * detects the available LDAP groups
-	 * @return WizardResult|false the instance's WizardResult instance
-	 * @throws \Exception
-	 */
-	private function determineGroups(string $dbKey, string $confKey, bool $testMemberOf = true) {
-		$reqs = ['ldapHost', 'ldapBase'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return  false;
-		}
-		$cr = $this->getConnection();
-		if (!$cr) {
-			throw new \Exception('Could not connect to LDAP');
-		}
-
-		$this->fetchGroups($dbKey, $confKey);
-
-		if ($testMemberOf) {
-			$this->configuration->hasMemberOfFilterSupport = (string)$this->testMemberOf();
-			$this->result->markChange();
-			if (!$this->configuration->hasMemberOfFilterSupport) {
-				throw new \Exception('memberOf is not supported by the server');
-			}
-		}
-
-		return $this->result;
-	}
-
-	/**
-	 * fetches all groups from LDAP and adds them to the result object
-	 *
-	 * @throws \Exception
-	 */
-	public function fetchGroups(string $dbKey, string $confKey): array {
-		$obclasses = ['posixGroup', 'group', 'zimbraDistributionList', 'groupOfNames', 'groupOfUniqueNames'];
-
-		$filterParts = [];
-		foreach ($obclasses as $obclass) {
-			$filterParts[] = 'objectclass=' . $obclass;
-		}
-		//we filter for everything
-		//- that looks like a group and
-		//- has the group display name set
-		$filter = $this->access->combineFilterWithOr($filterParts);
-		$filter = $this->access->combineFilterWithAnd([$filter, 'cn=*']);
-
-		$groupNames = [];
-		$groupEntries = [];
-		$limit = 400;
-		$offset = 0;
-		do {
-			// we need to request dn additionally here, otherwise memberOf
-			// detection will fail later
-			$result = $this->access->searchGroups($filter, ['cn', 'dn'], $limit, $offset);
-			foreach ($result as $item) {
-				if (!isset($item['cn']) || !is_array($item['cn']) || !isset($item['cn'][0])) {
-					// just in case - no issue known
-					continue;
-				}
-				$groupNames[] = $item['cn'][0];
-				$groupEntries[] = $item;
-			}
-			$offset += $limit;
-		} while ($this->access->hasMoreResults());
-
-		if (count($groupNames) > 0) {
-			natsort($groupNames);
-			$this->result->addOptions($dbKey, array_values($groupNames));
-		} else {
-			throw new \Exception(self::$l->t('Could not find the desired feature'));
-		}
-
-		$setFeatures = $this->configuration->$confKey;
-		if (is_array($setFeatures) && !empty($setFeatures)) {
-			//something is already configured? pre-select it.
-			$this->result->addChange($dbKey, $setFeatures);
-		}
-		return $groupEntries;
-	}
-
-	/**
-	 * @return WizardResult|false
-	 */
-	public function determineGroupMemberAssoc() {
-		$reqs = ['ldapHost', 'ldapGroupFilter'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return  false;
-		}
-		$attribute = $this->detectGroupMemberAssoc();
-		if ($attribute === false) {
-			return false;
-		}
-		$this->configuration->setConfiguration(['ldapGroupMemberAssocAttr' => $attribute]);
-		$this->result->addChange('ldap_group_member_assoc_attribute', $attribute);
-
-		return $this->result;
-	}
-
-	/**
-	 * Detects the available object classes
-	 * @return WizardResult|false the instance's WizardResult instance
-	 * @throws \Exception
-	 */
-	public function determineGroupObjectClasses() {
-		$reqs = ['ldapHost', 'ldapBase'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return  false;
-		}
-		$cr = $this->getConnection();
-		if (!$cr) {
-			throw new \Exception('Could not connect to LDAP');
-		}
-
-		$obclasses = ['groupOfNames', 'groupOfUniqueNames', 'group', 'posixGroup', '*'];
-		$this->determineFeature($obclasses,
-			'objectclass',
-			'ldap_groupfilter_objectclass',
-			'ldapGroupFilterObjectclass',
-			false);
-
-		return $this->result;
-	}
-
-	/**
-	 * detects the available object classes
-	 * @return WizardResult|false
-	 * @throws \Exception
-	 */
-	public function determineUserObjectClasses() {
-		$reqs = ['ldapHost', 'ldapBase'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return  false;
-		}
-		$cr = $this->getConnection();
-		if (!$cr) {
-			throw new \Exception('Could not connect to LDAP');
-		}
-
-		$obclasses = ['inetOrgPerson', 'person', 'organizationalPerson',
-			'user', 'posixAccount', '*'];
-		$filter = $this->configuration->ldapUserFilter;
-		//if filter is empty, it is probably the first time the wizard is called
-		//then, apply suggestions.
-		$this->determineFeature($obclasses,
-			'objectclass',
-			'ldap_userfilter_objectclass',
-			'ldapUserFilterObjectclass',
-			empty($filter));
-
-		return $this->result;
-	}
-
-	/**
-	 * @return WizardResult|false
-	 * @throws \Exception
-	 */
-	public function getGroupFilter() {
-		$reqs = ['ldapHost', 'ldapBase'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return false;
-		}
-		//make sure the use display name is set
-		$displayName = $this->configuration->ldapGroupDisplayName;
-		if ($displayName === '') {
-			$d = $this->configuration->getDefaults();
-			$this->applyFind('ldap_group_display_name',
-				$d['ldap_group_display_name']);
-		}
-		$filter = $this->composeLdapFilter(self::LFILTER_GROUP_LIST);
-
-		$this->applyFind('ldap_group_filter', $filter);
-		return $this->result;
-	}
-
-	/**
-	 * @return WizardResult|false
-	 * @throws \Exception
-	 */
-	public function getUserListFilter() {
-		$reqs = ['ldapHost', 'ldapBase'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return false;
-		}
-		//make sure the use display name is set
-		$displayName = $this->configuration->ldapUserDisplayName;
-		if ($displayName === '') {
-			$d = $this->configuration->getDefaults();
-			$this->applyFind('ldap_display_name', $d['ldap_display_name']);
-		}
-		$filter = $this->composeLdapFilter(self::LFILTER_USER_LIST);
-		if (!$filter) {
-			throw new \Exception('Cannot create filter');
-		}
-
-		$this->applyFind('ldap_userlist_filter', $filter);
-		return $this->result;
-	}
-
-	/**
-	 * @return WizardResult|false
-	 * @throws \Exception
-	 */
-	public function getUserLoginFilter() {
-		$reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return false;
-		}
-
-		$filter = $this->composeLdapFilter(self::LFILTER_LOGIN);
-		if (!$filter) {
-			throw new \Exception('Cannot create filter');
-		}
-
-		$this->applyFind('ldap_login_filter', $filter);
-		return $this->result;
-	}
-
-	/**
-	 * @return WizardResult|false
-	 * @throws \Exception
-	 */
-	public function testLoginName(string $loginName) {
-		$reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return false;
-		}
-
-		$cr = $this->access->connection->getConnectionResource();
-
-		if (mb_strpos($this->access->connection->ldapLoginFilter, '%uid', 0, 'UTF-8')
-			=== false) {
-			throw new \Exception('missing placeholder');
-		}
-
-		$users = $this->access->countUsersByLoginName($loginName);
-		if ($this->ldap->errno($cr) !== 0) {
-			throw new \Exception($this->ldap->error($cr));
-		}
-		$filter = str_replace('%uid', $loginName, $this->access->connection->ldapLoginFilter);
-		$this->result->addChange('ldap_test_loginname', $users);
-		$this->result->addChange('ldap_test_effective_filter', $filter);
-		return $this->result;
-	}
-
-	/**
-	 * Tries to determine the port, requires given Host, User DN and Password
-	 * @return WizardResult|false WizardResult on success, false otherwise
-	 * @throws \Exception
-	 */
-	public function guessPortAndTLS() {
-		if (!$this->checkRequirements(['ldapHost',
-		])) {
-			return false;
-		}
-		$this->checkHost();
-		$portSettings = $this->getPortSettingsToTry();
-
-		//proceed from the best configuration and return on first success
-		foreach ($portSettings as $setting) {
-			$p = $setting['port'];
-			$t = $setting['tls'];
-			$this->logger->debug(
-				'Wiz: trying port ' . $p . ', TLS ' . $t,
-				['app' => 'user_ldap']
-			);
-			//connectAndBind may throw Exception, it needs to be caught by the
-			//callee of this method
-
-			try {
-				$settingsFound = $this->connectAndBind($p, $t);
-			} catch (\Exception $e) {
-				// any reply other than -1 (= cannot connect) is already okay,
-				// because then we found the server
-				// unavailable startTLS returns -11
-				if ($e->getCode() > 0) {
-					$settingsFound = true;
-				} else {
-					throw $e;
-				}
-			}
-
-			if ($settingsFound === true) {
-				$config = [
-					'ldapPort' => (string)$p,
-					'ldapTLS' => (string)$t,
-				];
-				$this->configuration->setConfiguration($config);
-				$this->logger->debug(
-					'Wiz: detected Port ' . $p,
-					['app' => 'user_ldap']
-				);
-				$this->result->addChange('ldap_port', $p);
-				return $this->result;
-			}
-		}
-
-		//custom port, undetected (we do not brute force)
-		return false;
-	}
-
-	/**
-	 * tries to determine a base dn from User DN or LDAP Host
-	 * @return WizardResult|false WizardResult on success, false otherwise
-	 */
-	public function guessBaseDN() {
-		$reqs = ['ldapHost'];
-		if (!$this->configuration->usesLdapi()) {
-			$reqs[] = 'ldapPort';
-		}
-		if (!$this->checkRequirements($reqs)) {
-			return false;
-		}
-
-		//check whether a DN is given in the agent name (99.9% of all cases)
-		$base = null;
-		$i = stripos($this->configuration->ldapAgentName, 'dc=');
-		if ($i !== false) {
-			$base = substr($this->configuration->ldapAgentName, $i);
-			if ($this->testBaseDN($base)) {
-				$this->applyFind('ldap_base', $base);
-				return $this->result;
-			}
-		}
-
-		//this did not help :(
-		//Let's see whether we can parse the Host URL and convert the domain to
-		//a base DN
-		$helper = Server::get(Helper::class);
-		$domain = $helper->getDomainFromURL($this->configuration->ldapHost);
-		if (!$domain) {
-			return false;
-		}
-
-		$dparts = explode('.', $domain);
-		while (count($dparts) > 0) {
-			$base2 = 'dc=' . implode(',dc=', $dparts);
-			if ($base !== $base2 && $this->testBaseDN($base2)) {
-				$this->applyFind('ldap_base', $base2);
-				return $this->result;
-			}
-			array_shift($dparts);
-		}
-
-		return false;
-	}
-
-	/**
-	 * sets the found value for the configuration key in the WizardResult
-	 * as well as in the Configuration instance
-	 * @param string $key the configuration key
-	 * @param string $value the (detected) value
-	 *
-	 */
-	private function applyFind(string $key, string $value): void {
-		$this->result->addChange($key, $value);
-		$this->configuration->setConfiguration([$key => $value]);
-	}
-
-	/**
-	 * Checks, whether a port was entered in the Host configuration
-	 * field. In this case the port will be stripped off, but also stored as
-	 * setting.
-	 */
-	private function checkHost(): void {
-		$host = $this->configuration->ldapHost;
-		$hostInfo = parse_url($host);
-
-		//removes Port from Host
-		if (is_array($hostInfo) && isset($hostInfo['port'])) {
-			$port = $hostInfo['port'];
-			$host = str_replace(':' . $port, '', $host);
-			$this->applyFind('ldap_host', $host);
-			$this->applyFind('ldap_port', (string)$port);
-		}
-	}
-
-	/**
-	 * tries to detect the group member association attribute which is
-	 * one of 'uniqueMember', 'memberUid', 'member', 'gidNumber'
-	 * @return string|false string with the attribute name, false on error
-	 * @throws \Exception
-	 */
-	private function detectGroupMemberAssoc() {
-		$possibleAttrs = ['uniqueMember', 'memberUid', 'member', 'gidNumber', 'zimbraMailForwardingAddress'];
-		$filter = $this->configuration->ldapGroupFilter;
-		if (empty($filter)) {
-			return false;
-		}
-		$cr = $this->getConnection();
-		if (!$cr) {
-			throw new \Exception('Could not connect to LDAP');
-		}
-		$base = $this->configuration->ldapBaseGroups[0] ?: $this->configuration->ldapBase[0];
-		$rr = $this->ldap->search($cr, $base, $filter, $possibleAttrs, 0, 1000);
-		if (!$this->ldap->isResource($rr)) {
-			return false;
-		}
-		/** @var \LDAP\Result $rr */
-		$er = $this->ldap->firstEntry($cr, $rr);
-		while ($this->ldap->isResource($er)) {
-			$this->ldap->getDN($cr, $er);
-			$attrs = $this->ldap->getAttributes($cr, $er);
-			$result = [];
-			$possibleAttrsCount = count($possibleAttrs);
-			for ($i = 0; $i < $possibleAttrsCount; $i++) {
-				if (isset($attrs[$possibleAttrs[$i]])) {
-					$result[$possibleAttrs[$i]] = $attrs[$possibleAttrs[$i]]['count'];
-				}
-			}
-			if (!empty($result)) {
-				natsort($result);
-				return key($result);
-			}
-
-			$er = $this->ldap->nextEntry($cr, $er);
-		}
-
-		return false;
-	}
-
-	/**
-	 * Checks whether for a given BaseDN results will be returned
-	 * @param string $base the BaseDN to test
-	 * @return bool true on success, false otherwise
-	 * @throws \Exception
-	 */
-	private function testBaseDN(string $base): bool {
-		$cr = $this->getConnection();
-		if (!$cr) {
-			throw new \Exception('Could not connect to LDAP');
-		}
-
-		//base is there, let's validate it. If we search for anything, we should
-		//get a result set > 0 on a proper base
-		$rr = $this->ldap->search($cr, $base, 'objectClass=*', ['dn'], 0, 1);
-		if (!$this->ldap->isResource($rr)) {
-			$errorNo = $this->ldap->errno($cr);
-			$errorMsg = $this->ldap->error($cr);
-			$this->logger->info(
-				'Wiz: Could not search base ' . $base . ' Error ' . $errorNo . ': ' . $errorMsg,
-				['app' => 'user_ldap']
-			);
-			return false;
-		}
-		/** @var \LDAP\Result $rr */
-		$entries = $this->ldap->countEntries($cr, $rr);
-		return ($entries !== false) && ($entries > 0);
-	}
-
-	/**
-	 * Checks whether the server supports memberOf in LDAP Filter.
-	 * Note: at least in OpenLDAP, availability of memberOf is dependent on
-	 * a configured objectClass. I.e. not necessarily for all available groups
-	 * memberOf does work.
-	 *
-	 * @return bool true if it does, false otherwise
-	 * @throws \Exception
-	 */
-	private function testMemberOf(): bool {
-		$cr = $this->getConnection();
-		if (!$cr) {
-			throw new \Exception('Could not connect to LDAP');
-		}
-		$result = $this->access->countUsers('memberOf=*', ['memberOf'], 1);
-		if (is_int($result) && $result > 0) {
-			return true;
-		}
-		return false;
-	}
-
-	/**
-	 * creates an LDAP Filter from given configuration
-	 * @param int $filterType int, for which use case the filter shall be created
-	 *                        can be any of self::LFILTER_USER_LIST, self::LFILTER_LOGIN or
-	 *                        self::LFILTER_GROUP_LIST
-	 * @throws \Exception
-	 */
-	private function composeLdapFilter(int $filterType): string {
-		$filter = '';
-		$parts = 0;
-		switch ($filterType) {
-			case self::LFILTER_USER_LIST:
-				$objcs = $this->configuration->ldapUserFilterObjectclass;
-				//glue objectclasses
-				if (is_array($objcs) && count($objcs) > 0) {
-					$filter .= '(|';
-					foreach ($objcs as $objc) {
-						$filter .= '(objectclass=' . ldap_escape($objc, '', LDAP_ESCAPE_FILTER) . ')';
-					}
-					$filter .= ')';
-					$parts++;
-				}
-				//glue group memberships
-				if ($this->configuration->hasMemberOfFilterSupport) {
-					$cns = $this->configuration->ldapUserFilterGroups;
-					if (is_array($cns) && count($cns) > 0) {
-						$filter .= '(|';
-						$cr = $this->getConnection();
-						if (!$cr) {
-							throw new \Exception('Could not connect to LDAP');
-						}
-						$base = $this->configuration->ldapBase[0];
-						foreach ($cns as $cn) {
-							$rr = $this->ldap->search($cr, $base, 'cn=' . ldap_escape($cn, '', LDAP_ESCAPE_FILTER), ['dn', 'primaryGroupToken']);
-							if (!$this->ldap->isResource($rr)) {
-								continue;
-							}
-							/** @var \LDAP\Result $rr */
-							$er = $this->ldap->firstEntry($cr, $rr);
-							$attrs = $this->ldap->getAttributes($cr, $er);
-							$dn = $this->ldap->getDN($cr, $er);
-							if ($dn === false || $dn === '') {
-								continue;
-							}
-							$filterPart = '(memberof=' . ldap_escape($dn, '', LDAP_ESCAPE_FILTER) . ')';
-							if (isset($attrs['primaryGroupToken'])) {
-								$pgt = $attrs['primaryGroupToken'][0];
-								$primaryFilterPart = '(primaryGroupID=' . ldap_escape($pgt, '', LDAP_ESCAPE_FILTER) . ')';
-								$filterPart = '(|' . $filterPart . $primaryFilterPart . ')';
-							}
-							$filter .= $filterPart;
-						}
-						$filter .= ')';
-					}
-					$parts++;
-				}
-				//wrap parts in AND condition
-				if ($parts > 1) {
-					$filter = '(&' . $filter . ')';
-				}
-				if ($filter === '') {
-					$filter = '(objectclass=*)';
-				}
-				break;
-
-			case self::LFILTER_GROUP_LIST:
-				$objcs = $this->configuration->ldapGroupFilterObjectclass;
-				//glue objectclasses
-				if (is_array($objcs) && count($objcs) > 0) {
-					$filter .= '(|';
-					foreach ($objcs as $objc) {
-						$filter .= '(objectclass=' . ldap_escape($objc, '', LDAP_ESCAPE_FILTER) . ')';
-					}
-					$filter .= ')';
-					$parts++;
-				}
-				//glue group memberships
-				$cns = $this->configuration->ldapGroupFilterGroups;
-				if (is_array($cns) && count($cns) > 0) {
-					$filter .= '(|';
-					foreach ($cns as $cn) {
-						$filter .= '(cn=' . ldap_escape($cn, '', LDAP_ESCAPE_FILTER) . ')';
-					}
-					$filter .= ')';
-				}
-				$parts++;
-				//wrap parts in AND condition
-				if ($parts > 1) {
-					$filter = '(&' . $filter . ')';
-				}
-				break;
-
-			case self::LFILTER_LOGIN:
-				$ulf = $this->configuration->ldapUserFilter;
-				$loginpart = '=%uid';
-				$filterUsername = '';
-				$userAttributes = $this->getUserAttributes();
-				if ($userAttributes === false) {
-					throw new \Exception('Failed to get user attributes');
-				}
-				$userAttributes = array_change_key_case(array_flip($userAttributes));
-				$parts = 0;
-
-				if ($this->configuration->ldapLoginFilterUsername === '1') {
-					$attr = '';
-					if (isset($userAttributes['uid'])) {
-						$attr = 'uid';
-					} elseif (isset($userAttributes['samaccountname'])) {
-						$attr = 'samaccountname';
-					} elseif (isset($userAttributes['cn'])) {
-						//fallback
-						$attr = 'cn';
-					}
-					if ($attr !== '') {
-						$filterUsername = '(' . $attr . $loginpart . ')';
-						$parts++;
-					}
-				}
-
-				$filterEmail = '';
-				if ($this->configuration->ldapLoginFilterEmail === '1') {
-					$filterEmail = '(|(mailPrimaryAddress=%uid)(mail=%uid))';
-					$parts++;
-				}
-
-				$filterAttributes = '';
-				$attrsToFilter = $this->configuration->ldapLoginFilterAttributes;
-				if (is_array($attrsToFilter) && count($attrsToFilter) > 0) {
-					$filterAttributes = '(|';
-					foreach ($attrsToFilter as $attribute) {
-						$filterAttributes .= '(' . $attribute . $loginpart . ')';
-					}
-					$filterAttributes .= ')';
-					$parts++;
-				}
-
-				$filterLogin = '';
-				if ($parts > 1) {
-					$filterLogin = '(|';
-				}
-				$filterLogin .= $filterUsername;
-				$filterLogin .= $filterEmail;
-				$filterLogin .= $filterAttributes;
-				if ($parts > 1) {
-					$filterLogin .= ')';
-				}
-
-				$filter = '(&' . $ulf . $filterLogin . ')';
-				break;
-		}
-
-		$this->logger->debug(
-			'Wiz: Final filter ' . $filter,
-			['app' => 'user_ldap']
-		);
-
-		return $filter;
-	}
-
-	/**
-	 * Connects and Binds to an LDAP Server
-	 *
-	 * @param int $port the port to connect with
-	 * @param bool $tls whether startTLS is to be used
-	 * @throws \Exception
-	 */
-	private function connectAndBind(int $port, bool $tls): bool {
-		//connect, does not really trigger any server communication
-		$host = $this->configuration->ldapHost;
-		$hostInfo = parse_url((string)$host);
-		if (!is_string($host) || !$hostInfo) {
-			throw new \Exception(self::$l->t('Invalid Host'));
-		}
-		$this->logger->debug(
-			'Wiz: Attempting to connect',
-			['app' => 'user_ldap']
-		);
-		$cr = $this->ldap->connect($host, (string)$port);
-		if (!$this->ldap->isResource($cr)) {
-			throw new \Exception(self::$l->t('Invalid Host'));
-		}
-		/** @var \LDAP\Connection $cr */
-
-		//set LDAP options
-		$this->ldap->setOption($cr, LDAP_OPT_PROTOCOL_VERSION, 3);
-		$this->ldap->setOption($cr, LDAP_OPT_REFERRALS, 0);
-		$this->ldap->setOption($cr, LDAP_OPT_NETWORK_TIMEOUT, self::LDAP_NW_TIMEOUT);
-
-		try {
-			if ($tls) {
-				$isTlsWorking = @$this->ldap->startTls($cr);
-				if (!$isTlsWorking) {
-					return false;
-				}
-			}
-
-			$this->logger->debug(
-				'Wiz: Attempting to Bind',
-				['app' => 'user_ldap']
-			);
-			//interesting part: do the bind!
-			$login = $this->ldap->bind($cr,
-				$this->configuration->ldapAgentName,
-				$this->configuration->ldapAgentPassword
-			);
-			$errNo = $this->ldap->errno($cr);
-			$error = $this->ldap->error($cr);
-			$this->ldap->unbind($cr);
-		} catch (ServerNotAvailableException $e) {
-			return false;
-		}
-
-		if ($login === true) {
-			$this->logger->debug(
-				'Wiz: Bind successful to Port ' . $port . ' TLS ' . (int)$tls,
-				['app' => 'user_ldap']
-			);
-			return true;
-		}
-
-		if ($errNo === -1) {
-			//host, port or TLS wrong
-			return false;
-		}
-		throw new \Exception($error, $errNo);
-	}
-
-	/**
-	 * checks whether a valid combination of agent and password has been
-	 * provided (either two values or nothing for anonymous connect)
-	 * @return bool true if everything is fine, false otherwise
-	 */
-	private function checkAgentRequirements(): bool {
-		$agent = $this->configuration->ldapAgentName;
-		$pwd = $this->configuration->ldapAgentPassword;
-
-		return
-			($agent !== '' && $pwd !== '')
-			|| ($agent === '' && $pwd === '')
-		;
-	}
-
-	private function checkRequirements(array $reqs): bool {
-		$this->checkAgentRequirements();
-		foreach ($reqs as $option) {
-			$value = $this->configuration->$option;
-			if (empty($value)) {
-				return false;
-			}
-		}
-		return true;
-	}
-
-	/**
-	 * does a cumulativeSearch on LDAP to get different values of a
-	 * specified attribute
-	 * @param string[] $filters array, the filters that shall be used in the search
-	 * @param string $attr the attribute of which a list of values shall be returned
-	 * @param int $dnReadLimit the amount of how many DNs should be analyzed.
-	 *                         The lower, the faster
-	 * @param string $maxF string. if not null, this variable will have the filter that
-	 *                     yields most result entries
-	 * @return array|false an array with the values on success, false otherwise
-	 */
-	public function cumulativeSearchOnAttribute(array $filters, string $attr, int $dnReadLimit = 3, ?string &$maxF = null) {
-		$dnRead = [];
-		$foundItems = [];
-		$maxEntries = 0;
-		if (!is_array($this->configuration->ldapBase)
-		   || !isset($this->configuration->ldapBase[0])) {
-			return false;
-		}
-		$base = $this->configuration->ldapBase[0];
-		$cr = $this->getConnection();
-		if (!$this->ldap->isResource($cr)) {
-			return false;
-		}
-		/** @var \LDAP\Connection $cr */
-		$lastFilter = null;
-		if (isset($filters[count($filters) - 1])) {
-			$lastFilter = $filters[count($filters) - 1];
-		}
-		foreach ($filters as $filter) {
-			if ($lastFilter === $filter && count($foundItems) > 0) {
-				//skip when the filter is a wildcard and results were found
-				continue;
-			}
-			// 20k limit for performance and reason
-			$rr = $this->ldap->search($cr, $base, $filter, [$attr], 0, 20000);
-			if (!$this->ldap->isResource($rr)) {
-				continue;
-			}
-			/** @var \LDAP\Result $rr */
-			$entries = $this->ldap->countEntries($cr, $rr);
-			$getEntryFunc = 'firstEntry';
-			if (($entries !== false) && ($entries > 0)) {
-				if (!is_null($maxF) && $entries > $maxEntries) {
-					$maxEntries = $entries;
-					$maxF = $filter;
-				}
-				$dnReadCount = 0;
-				do {
-					$entry = $this->ldap->$getEntryFunc($cr, $rr);
-					$getEntryFunc = 'nextEntry';
-					if (!$this->ldap->isResource($entry)) {
-						continue 2;
-					}
-					$rr = $entry; //will be expected by nextEntry next round
-					$attributes = $this->ldap->getAttributes($cr, $entry);
-					$dn = $this->ldap->getDN($cr, $entry);
-					if ($attributes === false || $dn === false || in_array($dn, $dnRead)) {
-						continue;
-					}
-					$newItems = [];
-					$state = $this->getAttributeValuesFromEntry(
-						$attributes,
-						$attr,
-						$newItems
-					);
-					$dnReadCount++;
-					$foundItems = array_merge($foundItems, $newItems);
-					$dnRead[] = $dn;
-				} while ($dnReadLimit === 0 || $dnReadCount < $dnReadLimit);
-			}
-		}
-
-		return array_unique($foundItems);
-	}
-
-	/**
-	 * determines if and which $attr are available on the LDAP server
-	 * @param string[] $objectclasses the objectclasses to use as search filter
-	 * @param string $attr the attribute to look for
-	 * @param string $dbkey the dbkey of the setting the feature is connected to
-	 * @param string $confkey the confkey counterpart for the $dbkey as used in the
-	 *                        Configuration class
-	 * @param bool $po whether the objectClass with most result entries
-	 *                 shall be pre-selected via the result
-	 * @return array list of found items.
-	 * @throws \Exception
-	 */
-	private function determineFeature(array $objectclasses, string $attr, string $dbkey, string $confkey, bool $po = false): array {
-		$cr = $this->getConnection();
-		if (!$cr) {
-			throw new \Exception('Could not connect to LDAP');
-		}
-		$p = 'objectclass=';
-		foreach ($objectclasses as $key => $value) {
-			$objectclasses[$key] = $p . $value;
-		}
-		$maxEntryObjC = '';
-
-		//how deep to dig?
-		//When looking for objectclasses, testing few entries is sufficient,
-		$dig = 3;
-
-		$availableFeatures
-			= $this->cumulativeSearchOnAttribute($objectclasses, $attr,
-				$dig, $maxEntryObjC);
-		if (is_array($availableFeatures)
-		   && count($availableFeatures) > 0) {
-			natcasesort($availableFeatures);
-			//natcasesort keeps indices, but we must get rid of them for proper
-			//sorting in the web UI. Therefore: array_values
-			$this->result->addOptions($dbkey, array_values($availableFeatures));
-		} else {
-			throw new \Exception(self::$l->t('Could not find the desired feature'));
-		}
-
-		$setFeatures = $this->configuration->$confkey;
-		if (is_array($setFeatures) && !empty($setFeatures)) {
-			//something is already configured? pre-select it.
-			$this->result->addChange($dbkey, $setFeatures);
-		} elseif ($po && $maxEntryObjC !== '') {
-			//pre-select objectclass with most result entries
-			$maxEntryObjC = str_replace($p, '', $maxEntryObjC);
-			$this->applyFind($dbkey, $maxEntryObjC);
-			$this->result->addChange($dbkey, $maxEntryObjC);
-		}
-
-		return $availableFeatures;
-	}
-
-	/**
-	 * appends a list of values fr
-	 * @param array $result the return value from ldap_get_attributes
-	 * @param string $attribute the attribute values to look for
-	 * @param array &$known new values will be appended here
-	 * @return int state on of the class constants LRESULT_PROCESSED_OK,
-	 *             LRESULT_PROCESSED_INVALID or LRESULT_PROCESSED_SKIP
-	 */
-	private function getAttributeValuesFromEntry(array $result, string $attribute, array &$known): int {
-		if (!isset($result['count'])
-		   || !$result['count'] > 0) {
-			return self::LRESULT_PROCESSED_INVALID;
-		}
-
-		// strtolower on all keys for proper comparison
-		$result = Util::mb_array_change_key_case($result);
-		$attribute = strtolower($attribute);
-		if (isset($result[$attribute])) {
-			foreach ($result[$attribute] as $key => $val) {
-				if ($key === 'count') {
-					continue;
-				}
-				if (!in_array($val, $known)) {
-					$known[] = $val;
-				}
-			}
-			return self::LRESULT_PROCESSED_OK;
-		} else {
-			return self::LRESULT_PROCESSED_SKIP;
-		}
-	}
-
-	/**
-	 * @return \LDAP\Connection|false a link resource on success, otherwise false
-	 */
-	private function getConnection(): \LDAP\Connection|false {
-		if (!is_null($this->cr)) {
-			return $this->cr;
-		}
-
-		$cr = $this->ldap->connect(
-			$this->configuration->ldapHost,
-			$this->configuration->ldapPort
-		);
-
-		if ($cr === false) {
-			return false;
-		}
-
-		$this->ldap->setOption($cr, LDAP_OPT_PROTOCOL_VERSION, 3);
-		$this->ldap->setOption($cr, LDAP_OPT_REFERRALS, 0);
-		$this->ldap->setOption($cr, LDAP_OPT_NETWORK_TIMEOUT, self::LDAP_NW_TIMEOUT);
-		if ($this->configuration->ldapTLS) {
-			$this->ldap->startTls($cr);
-		}
-
-		$lo = @$this->ldap->bind($cr,
-			$this->configuration->ldapAgentName,
-			$this->configuration->ldapAgentPassword);
-		if ($lo === true) {
-			$this->cr = $cr;
-			return $cr;
-		}
-
-		return false;
-	}
-
-	/**
-	 * @return array<array{port:int,tls:bool}>
-	 */
-	private function getDefaultLdapPortSettings(): array {
-		static $settings = [
-			['port' => 7636, 'tls' => false],
-			['port' => 636, 'tls' => false],
-			['port' => 7389, 'tls' => true],
-			['port' => 389, 'tls' => true],
-			['port' => 7389, 'tls' => false],
-			['port' => 389, 'tls' => false],
-		];
-		return $settings;
-	}
-
-	/**
-	 * @return array<array{port:int,tls:bool}>
-	 */
-	private function getPortSettingsToTry(): array {
-		//389 ← LDAP / Unencrypted or StartTLS
-		//636 ← LDAPS / SSL
-		//7xxx ← UCS. need to be checked first, because both ports may be open
-		$host = $this->configuration->ldapHost;
-		$port = (int)$this->configuration->ldapPort;
-		$portSettings = [];
-
-		//In case the port is already provided, we will check this first
-		if ($port > 0) {
-			$hostInfo = parse_url($host);
-			if (!(is_array($hostInfo)
-				&& isset($hostInfo['scheme'])
-				&& stripos($hostInfo['scheme'], 'ldaps') !== false)) {
-				$portSettings[] = ['port' => $port, 'tls' => true];
-			}
-			$portSettings[] = ['port' => $port, 'tls' => false];
-		} elseif ($this->configuration->usesLdapi()) {
-			$portSettings[] = ['port' => 0, 'tls' => false];
-		}
-
-		//default ports
-		$portSettings = array_merge($portSettings,
-			$this->getDefaultLdapPortSettings());
-
-		return $portSettings;
-	}
+    protected static ?IL10N $l = null;
+    protected ?\LDAP\Connection $cr = null;
+    protected WizardResult $result;
+    protected LoggerInterface $logger;
+
+    public const LRESULT_PROCESSED_OK = 2;
+    public const LRESULT_PROCESSED_INVALID = 3;
+    public const LRESULT_PROCESSED_SKIP = 4;
+
+    public const LFILTER_LOGIN = 2;
+    public const LFILTER_USER_LIST = 3;
+    public const LFILTER_GROUP_LIST = 4;
+
+    public const LFILTER_MODE_ASSISTED = 2;
+    public const LFILTER_MODE_RAW = 1;
+
+    public const LDAP_NW_TIMEOUT = 4;
+
+    public function __construct(
+        protected Configuration $configuration,
+        ILDAPWrapper $ldap,
+        protected Access $access,
+    ) {
+        parent::__construct($ldap);
+        if (is_null(static::$l)) {
+            static::$l = Server::get(IL10NFactory::class)->get('user_ldap');
+        }
+        $this->result = new WizardResult();
+        $this->logger = Server::get(LoggerInterface::class);
+    }
+
+    public function __destruct() {
+        if ($this->result->hasChanges()) {
+            $this->configuration->saveConfiguration();
+        }
+    }
+
+    /**
+     * counts entries in the LDAP directory
+     *
+     * @param string $filter the LDAP search filter
+     * @param string $type a string being either 'users' or 'groups';
+     * @throws \Exception
+     */
+    public function countEntries(string $filter, string $type): int {
+        $reqs = ['ldapHost', 'ldapBase'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if ($type === 'users') {
+            $reqs[] = 'ldapUserFilter';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            throw new \Exception('Requirements not met', 400);
+        }
+
+        $attr = ['dn']; // default
+        $limit = 1001;
+        if ($type === 'groups') {
+            $result = $this->access->countGroups($filter, $attr, $limit);
+        } elseif ($type === 'users') {
+            $result = $this->access->countUsers($filter, $attr, $limit);
+        } elseif ($type === 'objects') {
+            $result = $this->access->countObjects($limit);
+        } else {
+            throw new \Exception('Internal error: Invalid object type', 500);
+        }
+
+        return (int)$result;
+    }
+
+    /**
+     * @return WizardResult|false
+     */
+    public function countGroups() {
+        $filter = $this->configuration->ldapGroupFilter;
+
+        if (empty($filter)) {
+            $output = self::$l->n('%n group found', '%n groups found', 0);
+            $this->result->addChange('ldap_group_count', $output);
+            return $this->result;
+        }
+
+        try {
+            $groupsTotal = $this->countEntries($filter, 'groups');
+        } catch (\Exception $e) {
+            //400 can be ignored, 500 is forwarded
+            if ($e->getCode() === 500) {
+                throw $e;
+            }
+            return false;
+        }
+
+        if ($groupsTotal > 1000) {
+            $output = self::$l->t('> 1000 groups found');
+        } else {
+            $output = self::$l->n(
+                '%n group found',
+                '%n groups found',
+                $groupsTotal
+            );
+        }
+        $this->result->addChange('ldap_group_count', $output);
+        return $this->result;
+    }
+
+    /**
+     * @throws \Exception
+     */
+    public function countUsers(): WizardResult {
+        $filter = $this->access->getFilterForUserCount();
+
+        $usersTotal = $this->countEntries($filter, 'users');
+        if ($usersTotal > 1000) {
+            $output = self::$l->t('> 1000 users found');
+        } else {
+            $output = self::$l->n(
+                '%n user found',
+                '%n users found',
+                $usersTotal
+            );
+        }
+        $this->result->addChange('ldap_user_count', $output);
+        return $this->result;
+    }
+
+    /**
+     * counts any objects in the currently set base dn
+     *
+     * @throws \Exception
+     */
+    public function countInBaseDN(): WizardResult {
+        // we don't need to provide a filter in this case
+        $total = $this->countEntries('', 'objects');
+        $this->result->addChange('ldap_test_base', $total);
+        return $this->result;
+    }
+
+    /**
+     * counts users with a specified attribute
+     * @return int|false
+     */
+    public function countUsersWithAttribute(string $attr, bool $existsCheck = false) {
+        $reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return  false;
+        }
+
+        $filter = $this->access->combineFilterWithAnd([
+            $this->configuration->ldapUserFilter,
+            $attr . '=*'
+        ]);
+
+        $limit = $existsCheck ? null : 1;
+
+        return $this->access->countUsers($filter, ['dn'], $limit);
+    }
+
+    /**
+     * detects the display name attribute. If a setting is already present that
+     * returns at least one hit, the detection will be canceled.
+     * @return WizardResult|false
+     * @throws \Exception
+     */
+    public function detectUserDisplayNameAttribute() {
+        $reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return  false;
+        }
+
+        $attr = $this->configuration->ldapUserDisplayName;
+        if ($attr !== '' && $attr !== 'displayName') {
+            // most likely not the default value with upper case N,
+            // verify it still produces a result
+            $count = (int)$this->countUsersWithAttribute($attr, true);
+            if ($count > 0) {
+                //no change, but we sent it back to make sure the user interface
+                //is still correct, even if the call was cancelled meanwhile
+                $this->result->addChange('ldap_display_name', $attr);
+                return $this->result;
+            }
+        }
+
+        // first attribute that has at least one result wins
+        $displayNameAttrs = ['displayname', 'cn'];
+        foreach ($displayNameAttrs as $attr) {
+            $count = (int)$this->countUsersWithAttribute($attr, true);
+
+            if ($count > 0) {
+                $this->applyFind('ldap_display_name', $attr);
+                return $this->result;
+            }
+        }
+
+        throw new \Exception(self::$l->t('Could not detect user display name attribute. Please specify it yourself in advanced LDAP settings.'));
+    }
+
+    /**
+     * detects the most often used email attribute for users applying to the
+     * user list filter. If a setting is already present that returns at least
+     * one hit, the detection will be canceled.
+     * @return WizardResult|bool
+     */
+    public function detectEmailAttribute() {
+        $reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return  false;
+        }
+
+        $attr = $this->configuration->ldapEmailAttribute;
+        if ($attr !== '') {
+            $count = (int)$this->countUsersWithAttribute($attr, true);
+            if ($count > 0) {
+                return false;
+            }
+            $writeLog = true;
+        } else {
+            $writeLog = false;
+        }
+
+        $emailAttributes = ['mail', 'mailPrimaryAddress'];
+        $winner = '';
+        $maxUsers = 0;
+        foreach ($emailAttributes as $attr) {
+            $count = $this->countUsersWithAttribute($attr);
+            if ($count > $maxUsers) {
+                $maxUsers = $count;
+                $winner = $attr;
+            }
+        }
+
+        if ($winner !== '') {
+            $this->applyFind('ldap_email_attr', $winner);
+            if ($writeLog) {
+                $this->logger->info(
+                    'The mail attribute has automatically been reset, '
+                    . 'because the original value did not return any results.',
+                    ['app' => 'user_ldap']
+                );
+            }
+        }
+
+        return $this->result;
+    }
+
+    /**
+     * @return WizardResult|false
+     * @throws \Exception
+     */
+    public function determineAttributes() {
+        $reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return  false;
+        }
+
+        $attributes = $this->getUserAttributes();
+
+        if (!is_array($attributes)) {
+            throw new \Exception('Failed to determine user attributes');
+        }
+
+        natcasesort($attributes);
+        $attributes = array_values($attributes);
+
+        $this->result->addOptions('ldap_loginfilter_attributes', $attributes);
+
+        $selected = $this->configuration->ldapLoginFilterAttributes;
+        if (is_array($selected) && !empty($selected)) {
+            $this->result->addChange('ldap_loginfilter_attributes', $selected);
+        }
+
+        return $this->result;
+    }
+
+    /**
+     * detects the available LDAP attributes
+     * @return array|false
+     * @throws \Exception
+     */
+    private function getUserAttributes() {
+        $reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return  false;
+        }
+        $cr = $this->getConnection();
+        if (!$cr) {
+            throw new \Exception('Could not connect to LDAP');
+        }
+
+        $base = $this->configuration->ldapBase[0];
+        $filter = $this->configuration->ldapUserFilter;
+        $rr = $this->ldap->search($cr, $base, $filter, [], 1, 1);
+        if (!$this->ldap->isResource($rr)) {
+            return false;
+        }
+        /** @var \LDAP\Result $rr */
+        $er = $this->ldap->firstEntry($cr, $rr);
+        $attributes = $this->ldap->getAttributes($cr, $er);
+        if ($attributes === false) {
+            return false;
+        }
+        $pureAttributes = [];
+        for ($i = 0; $i < $attributes['count']; $i++) {
+            $pureAttributes[] = $attributes[$i];
+        }
+
+        return $pureAttributes;
+    }
+
+    /**
+     * detects the available LDAP groups
+     * @return WizardResult|false the instance's WizardResult instance
+     */
+    public function determineGroupsForGroups() {
+        return $this->determineGroups('ldap_groupfilter_groups',
+            'ldapGroupFilterGroups',
+            false);
+    }
+
+    /**
+     * detects the available LDAP groups
+     * @return WizardResult|false the instance's WizardResult instance
+     */
+    public function determineGroupsForUsers() {
+        return $this->determineGroups('ldap_userfilter_groups',
+            'ldapUserFilterGroups');
+    }
+
+    /**
+     * detects the available LDAP groups
+     * @return WizardResult|false the instance's WizardResult instance
+     * @throws \Exception
+     */
+    private function determineGroups(string $dbKey, string $confKey, bool $testMemberOf = true) {
+        $reqs = ['ldapHost', 'ldapBase'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return  false;
+        }
+        $cr = $this->getConnection();
+        if (!$cr) {
+            throw new \Exception('Could not connect to LDAP');
+        }
+
+        $this->fetchGroups($dbKey, $confKey);
+
+        if ($testMemberOf) {
+            $this->configuration->hasMemberOfFilterSupport = (string)$this->testMemberOf();
+            $this->result->markChange();
+            if (!$this->configuration->hasMemberOfFilterSupport) {
+                throw new \Exception('memberOf is not supported by the server');
+            }
+        }
+
+        return $this->result;
+    }
+
+    /**
+     * fetches all groups from LDAP and adds them to the result object
+     *
+     * @throws \Exception
+     */
+    public function fetchGroups(string $dbKey, string $confKey): array {
+        $obclasses = ['posixGroup', 'group', 'zimbraDistributionList', 'groupOfNames', 'groupOfUniqueNames'];
+
+        $filterParts = [];
+        foreach ($obclasses as $obclass) {
+            $filterParts[] = 'objectclass=' . $obclass;
+        }
+        //we filter for everything
+        //- that looks like a group and
+        //- has the group display name set
+        $filter = $this->access->combineFilterWithOr($filterParts);
+        $filter = $this->access->combineFilterWithAnd([$filter, 'cn=*']);
+
+        $groupNames = [];
+        $groupEntries = [];
+        $limit = 400;
+        $offset = 0;
+        do {
+            // we need to request dn additionally here, otherwise memberOf
+            // detection will fail later
+            $result = $this->access->searchGroups($filter, ['cn', 'dn'], $limit, $offset);
+            foreach ($result as $item) {
+                if (!isset($item['cn']) || !is_array($item['cn']) || !isset($item['cn'][0])) {
+                    // just in case - no issue known
+                    continue;
+                }
+                $groupNames[] = $item['cn'][0];
+                $groupEntries[] = $item;
+            }
+            $offset += $limit;
+        } while ($this->access->hasMoreResults());
+
+        if (count($groupNames) > 0) {
+            natsort($groupNames);
+            $this->result->addOptions($dbKey, array_values($groupNames));
+        } else {
+            throw new \Exception(self::$l->t('Could not find the desired feature'));
+        }
+
+        $setFeatures = $this->configuration->$confKey;
+        if (is_array($setFeatures) && !empty($setFeatures)) {
+            //something is already configured? pre-select it.
+            $this->result->addChange($dbKey, $setFeatures);
+        }
+        return $groupEntries;
+    }
+
+    /**
+     * @return WizardResult|false
+     */
+    public function determineGroupMemberAssoc() {
+        $reqs = ['ldapHost', 'ldapGroupFilter'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return  false;
+        }
+        $attribute = $this->detectGroupMemberAssoc();
+        if ($attribute === false) {
+            return false;
+        }
+        $this->configuration->setConfiguration(['ldapGroupMemberAssocAttr' => $attribute]);
+        $this->result->addChange('ldap_group_member_assoc_attribute', $attribute);
+
+        return $this->result;
+    }
+
+    /**
+     * Detects the available object classes
+     * @return WizardResult|false the instance's WizardResult instance
+     * @throws \Exception
+     */
+    public function determineGroupObjectClasses() {
+        $reqs = ['ldapHost', 'ldapBase'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return  false;
+        }
+        $cr = $this->getConnection();
+        if (!$cr) {
+            throw new \Exception('Could not connect to LDAP');
+        }
+
+        $obclasses = ['groupOfNames', 'groupOfUniqueNames', 'group', 'posixGroup', '*'];
+        $this->determineFeature($obclasses,
+            'objectclass',
+            'ldap_groupfilter_objectclass',
+            'ldapGroupFilterObjectclass',
+            false);
+
+        return $this->result;
+    }
+
+    /**
+     * detects the available object classes
+     * @return WizardResult|false
+     * @throws \Exception
+     */
+    public function determineUserObjectClasses() {
+        $reqs = ['ldapHost', 'ldapBase'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return  false;
+        }
+        $cr = $this->getConnection();
+        if (!$cr) {
+            throw new \Exception('Could not connect to LDAP');
+        }
+
+        $obclasses = ['inetOrgPerson', 'person', 'organizationalPerson',
+            'user', 'posixAccount', '*'];
+        $filter = $this->configuration->ldapUserFilter;
+        //if filter is empty, it is probably the first time the wizard is called
+        //then, apply suggestions.
+        $this->determineFeature($obclasses,
+            'objectclass',
+            'ldap_userfilter_objectclass',
+            'ldapUserFilterObjectclass',
+            empty($filter));
+
+        return $this->result;
+    }
+
+    /**
+     * @return WizardResult|false
+     * @throws \Exception
+     */
+    public function getGroupFilter() {
+        $reqs = ['ldapHost', 'ldapBase'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return false;
+        }
+        //make sure the use display name is set
+        $displayName = $this->configuration->ldapGroupDisplayName;
+        if ($displayName === '') {
+            $d = $this->configuration->getDefaults();
+            $this->applyFind('ldap_group_display_name',
+                $d['ldap_group_display_name']);
+        }
+        $filter = $this->composeLdapFilter(self::LFILTER_GROUP_LIST);
+
+        $this->applyFind('ldap_group_filter', $filter);
+        return $this->result;
+    }
+
+    /**
+     * @return WizardResult|false
+     * @throws \Exception
+     */
+    public function getUserListFilter() {
+        $reqs = ['ldapHost', 'ldapBase'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return false;
+        }
+        //make sure the use display name is set
+        $displayName = $this->configuration->ldapUserDisplayName;
+        if ($displayName === '') {
+            $d = $this->configuration->getDefaults();
+            $this->applyFind('ldap_display_name', $d['ldap_display_name']);
+        }
+        $filter = $this->composeLdapFilter(self::LFILTER_USER_LIST);
+        if (!$filter) {
+            throw new \Exception('Cannot create filter');
+        }
+
+        $this->applyFind('ldap_userlist_filter', $filter);
+        return $this->result;
+    }
+
+    /**
+     * @return WizardResult|false
+     * @throws \Exception
+     */
+    public function getUserLoginFilter() {
+        $reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return false;
+        }
+
+        $filter = $this->composeLdapFilter(self::LFILTER_LOGIN);
+        if (!$filter) {
+            throw new \Exception('Cannot create filter');
+        }
+
+        $this->applyFind('ldap_login_filter', $filter);
+        return $this->result;
+    }
+
+    /**
+     * @return WizardResult|false
+     * @throws \Exception
+     */
+    public function testLoginName(string $loginName) {
+        $reqs = ['ldapHost', 'ldapBase', 'ldapUserFilter'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return false;
+        }
+
+        $cr = $this->access->connection->getConnectionResource();
+
+        if (mb_strpos($this->access->connection->ldapLoginFilter, '%uid', 0, 'UTF-8')
+            === false) {
+            throw new \Exception('missing placeholder');
+        }
+
+        $users = $this->access->countUsersByLoginName($loginName);
+        if ($this->ldap->errno($cr) !== 0) {
+            throw new \Exception($this->ldap->error($cr));
+        }
+        $filter = str_replace('%uid', $loginName, $this->access->connection->ldapLoginFilter);
+        $this->result->addChange('ldap_test_loginname', $users);
+        $this->result->addChange('ldap_test_effective_filter', $filter);
+        return $this->result;
+    }
+
+    /**
+     * Tries to determine the port, requires given Host, User DN and Password
+     * @return WizardResult|false WizardResult on success, false otherwise
+     * @throws \Exception
+     */
+    public function guessPortAndTLS() {
+        if (!$this->checkRequirements(['ldapHost',
+        ])) {
+            return false;
+        }
+        $this->checkHost();
+        $portSettings = $this->getPortSettingsToTry();
+
+        //proceed from the best configuration and return on first success
+        foreach ($portSettings as $setting) {
+            $p = $setting['port'];
+            $t = $setting['tls'];
+            $this->logger->debug(
+                'Wiz: trying port ' . $p . ', TLS ' . $t,
+                ['app' => 'user_ldap']
+            );
+            //connectAndBind may throw Exception, it needs to be caught by the
+            //callee of this method
+
+            try {
+                $settingsFound = $this->connectAndBind($p, $t);
+            } catch (\Exception $e) {
+                // any reply other than -1 (= cannot connect) is already okay,
+                // because then we found the server
+                // unavailable startTLS returns -11
+                if ($e->getCode() > 0) {
+                    $settingsFound = true;
+                } else {
+                    throw $e;
+                }
+            }
+
+            if ($settingsFound === true) {
+                $config = [
+                    'ldapPort' => (string)$p,
+                    'ldapTLS' => (string)$t,
+                ];
+                $this->configuration->setConfiguration($config);
+                $this->logger->debug(
+                    'Wiz: detected Port ' . $p,
+                    ['app' => 'user_ldap']
+                );
+                $this->result->addChange('ldap_port', $p);
+                return $this->result;
+            }
+        }
+
+        //custom port, undetected (we do not brute force)
+        return false;
+    }
+
+    /**
+     * tries to determine a base dn from User DN or LDAP Host
+     * @return WizardResult|false WizardResult on success, false otherwise
+     */
+    public function guessBaseDN() {
+        $reqs = ['ldapHost'];
+        if (!$this->configuration->usesLdapi()) {
+            $reqs[] = 'ldapPort';
+        }
+        if (!$this->checkRequirements($reqs)) {
+            return false;
+        }
+
+        //check whether a DN is given in the agent name (99.9% of all cases)
+        $base = null;
+        $i = stripos($this->configuration->ldapAgentName, 'dc=');
+        if ($i !== false) {
+            $base = substr($this->configuration->ldapAgentName, $i);
+            if ($this->testBaseDN($base)) {
+                $this->applyFind('ldap_base', $base);
+                return $this->result;
+            }
+        }
+
+        //this did not help :(
+        //Let's see whether we can parse the Host URL and convert the domain to
+        //a base DN
+        $helper = Server::get(Helper::class);
+        $domain = $helper->getDomainFromURL($this->configuration->ldapHost);
+        if (!$domain) {
+            return false;
+        }
+
+        $dparts = explode('.', $domain);
+        while (count($dparts) > 0) {
+            $base2 = 'dc=' . implode(',dc=', $dparts);
+            if ($base !== $base2 && $this->testBaseDN($base2)) {
+                $this->applyFind('ldap_base', $base2);
+                return $this->result;
+            }
+            array_shift($dparts);
+        }
+
+        return false;
+    }
+
+    /**
+     * sets the found value for the configuration key in the WizardResult
+     * as well as in the Configuration instance
+     * @param string $key the configuration key
+     * @param string $value the (detected) value
+     *
+     */
+    private function applyFind(string $key, string $value): void {
+        $this->result->addChange($key, $value);
+        $this->configuration->setConfiguration([$key => $value]);
+    }
+
+    /**
+     * Checks, whether a port was entered in the Host configuration
+     * field. In this case the port will be stripped off, but also stored as
+     * setting.
+     */
+    private function checkHost(): void {
+        $host = $this->configuration->ldapHost;
+        $hostInfo = parse_url($host);
+
+        //removes Port from Host
+        if (is_array($hostInfo) && isset($hostInfo['port'])) {
+            $port = $hostInfo['port'];
+            $host = str_replace(':' . $port, '', $host);
+            $this->applyFind('ldap_host', $host);
+            $this->applyFind('ldap_port', (string)$port);
+        }
+    }
+
+    /**
+     * tries to detect the group member association attribute which is
+     * one of 'uniqueMember', 'memberUid', 'member', 'gidNumber'
+     * @return string|false string with the attribute name, false on error
+     * @throws \Exception
+     */
+    private function detectGroupMemberAssoc() {
+        $possibleAttrs = ['uniqueMember', 'memberUid', 'member', 'gidNumber', 'zimbraMailForwardingAddress'];
+        $filter = $this->configuration->ldapGroupFilter;
+        if (empty($filter)) {
+            return false;
+        }
+        $cr = $this->getConnection();
+        if (!$cr) {
+            throw new \Exception('Could not connect to LDAP');
+        }
+        $base = $this->configuration->ldapBaseGroups[0] ?: $this->configuration->ldapBase[0];
+        $rr = $this->ldap->search($cr, $base, $filter, $possibleAttrs, 0, 1000);
+        if (!$this->ldap->isResource($rr)) {
+            return false;
+        }
+        /** @var \LDAP\Result $rr */
+        $er = $this->ldap->firstEntry($cr, $rr);
+        while ($this->ldap->isResource($er)) {
+            $this->ldap->getDN($cr, $er);
+            $attrs = $this->ldap->getAttributes($cr, $er);
+            $result = [];
+            $possibleAttrsCount = count($possibleAttrs);
+            for ($i = 0; $i < $possibleAttrsCount; $i++) {
+                if (isset($attrs[$possibleAttrs[$i]])) {
+                    $result[$possibleAttrs[$i]] = $attrs[$possibleAttrs[$i]]['count'];
+                }
+            }
+            if (!empty($result)) {
+                natsort($result);
+                return key($result);
+            }
+
+            $er = $this->ldap->nextEntry($cr, $er);
+        }
+
+        return false;
+    }
+
+    /**
+     * Checks whether for a given BaseDN results will be returned
+     * @param string $base the BaseDN to test
+     * @return bool true on success, false otherwise
+     * @throws \Exception
+     */
+    private function testBaseDN(string $base): bool {
+        $cr = $this->getConnection();
+        if (!$cr) {
+            throw new \Exception('Could not connect to LDAP');
+        }
+
+        //base is there, let's validate it. If we search for anything, we should
+        //get a result set > 0 on a proper base
+        $rr = $this->ldap->search($cr, $base, 'objectClass=*', ['dn'], 0, 1);
+        if (!$this->ldap->isResource($rr)) {
+            $errorNo = $this->ldap->errno($cr);
+            $errorMsg = $this->ldap->error($cr);
+            $this->logger->info(
+                'Wiz: Could not search base ' . $base . ' Error ' . $errorNo . ': ' . $errorMsg,
+                ['app' => 'user_ldap']
+            );
+            return false;
+        }
+        /** @var \LDAP\Result $rr */
+        $entries = $this->ldap->countEntries($cr, $rr);
+        return ($entries !== false) && ($entries > 0);
+    }
+
+    /**
+     * Checks whether the server supports memberOf in LDAP Filter.
+     * Note: at least in OpenLDAP, availability of memberOf is dependent on
+     * a configured objectClass. I.e. not necessarily for all available groups
+     * memberOf does work.
+     *
+     * @return bool true if it does, false otherwise
+     * @throws \Exception
+     */
+    private function testMemberOf(): bool {
+        $cr = $this->getConnection();
+        if (!$cr) {
+            throw new \Exception('Could not connect to LDAP');
+        }
+        $result = $this->access->countUsers('memberOf=*', ['memberOf'], 1);
+        if (is_int($result) && $result > 0) {
+            return true;
+        }
+        return false;
+    }
+
+    /**
+     * creates an LDAP Filter from given configuration
+     * @param int $filterType int, for which use case the filter shall be created
+     *                        can be any of self::LFILTER_USER_LIST, self::LFILTER_LOGIN or
+     *                        self::LFILTER_GROUP_LIST
+     * @throws \Exception
+     */
+    private function composeLdapFilter(int $filterType): string {
+        $filter = '';
+        $parts = 0;
+        switch ($filterType) {
+            case self::LFILTER_USER_LIST:
+                $objcs = $this->configuration->ldapUserFilterObjectclass;
+                //glue objectclasses
+                if (is_array($objcs) && count($objcs) > 0) {
+                    $filter .= '(|';
+                    foreach ($objcs as $objc) {
+                        $filter .= '(objectclass=' . ldap_escape($objc, '', LDAP_ESCAPE_FILTER) . ')';
+                    }
+                    $filter .= ')';
+                    $parts++;
+                }
+                //glue group memberships
+                if ($this->configuration->hasMemberOfFilterSupport) {
+                    $cns = $this->configuration->ldapUserFilterGroups;
+                    if (is_array($cns) && count($cns) > 0) {
+                        $filter .= '(|';
+                        $cr = $this->getConnection();
+                        if (!$cr) {
+                            throw new \Exception('Could not connect to LDAP');
+                        }
+                        $base = $this->configuration->ldapBase[0];
+                        foreach ($cns as $cn) {
+                            $rr = $this->ldap->search($cr, $base, 'cn=' . ldap_escape($cn, '', LDAP_ESCAPE_FILTER), ['dn', 'primaryGroupToken']);
+                            if (!$this->ldap->isResource($rr)) {
+                                continue;
+                            }
+                            /** @var \LDAP\Result $rr */
+                            $er = $this->ldap->firstEntry($cr, $rr);
+                            $attrs = $this->ldap->getAttributes($cr, $er);
+                            $dn = $this->ldap->getDN($cr, $er);
+                            if ($dn === false || $dn === '') {
+                                continue;
+                            }
+                            $filterPart = '(memberof=' . ldap_escape($dn, '', LDAP_ESCAPE_FILTER) . ')';
+                            if (isset($attrs['primaryGroupToken'])) {
+                                $pgt = $attrs['primaryGroupToken'][0];
+                                $primaryFilterPart = '(primaryGroupID=' . ldap_escape($pgt, '', LDAP_ESCAPE_FILTER) . ')';
+                                $filterPart = '(|' . $filterPart . $primaryFilterPart . ')';
+                            }
+                            $filter .= $filterPart;
+                        }
+                        $filter .= ')';
+                    }
+                    $parts++;
+                }
+                //wrap parts in AND condition
+                if ($parts > 1) {
+                    $filter = '(&' . $filter . ')';
+                }
+                if ($filter === '') {
+                    $filter = '(objectclass=*)';
+                }
+                break;
+
+            case self::LFILTER_GROUP_LIST:
+                $objcs = $this->configuration->ldapGroupFilterObjectclass;
+                //glue objectclasses
+                if (is_array($objcs) && count($objcs) > 0) {
+                    $filter .= '(|';
+                    foreach ($objcs as $objc) {
+                        $filter .= '(objectclass=' . ldap_escape($objc, '', LDAP_ESCAPE_FILTER) . ')';
+                    }
+                    $filter .= ')';
+                    $parts++;
+                }
+                //glue group memberships
+                $cns = $this->configuration->ldapGroupFilterGroups;
+                if (is_array($cns) && count($cns) > 0) {
+                    $filter .= '(|';
+                    foreach ($cns as $cn) {
+                        $filter .= '(cn=' . ldap_escape($cn, '', LDAP_ESCAPE_FILTER) . ')';
+                    }
+                    $filter .= ')';
+                }
+                $parts++;
+                //wrap parts in AND condition
+                if ($parts > 1) {
+                    $filter = '(&' . $filter . ')';
+                }
+                break;
+
+            case self::LFILTER_LOGIN:
+                $ulf = $this->configuration->ldapUserFilter;
+                $loginpart = '=%uid';
+                $filterUsername = '';
+                $userAttributes = $this->getUserAttributes();
+                if ($userAttributes === false) {
+                    throw new \Exception('Failed to get user attributes');
+                }
+                $userAttributes = array_change_key_case(array_flip($userAttributes));
+                $parts = 0;
+
+                if ($this->configuration->ldapLoginFilterUsername === '1') {
+                    $attr = '';
+                    if (isset($userAttributes['uid'])) {
+                        $attr = 'uid';
+                    } elseif (isset($userAttributes['samaccountname'])) {
+                        $attr = 'samaccountname';
+                    } elseif (isset($userAttributes['cn'])) {
+                        //fallback
+                        $attr = 'cn';
+                    }
+                    if ($attr !== '') {
+                        $filterUsername = '(' . $attr . $loginpart . ')';
+                        $parts++;
+                    }
+                }
+
+                $filterEmail = '';
+                if ($this->configuration->ldapLoginFilterEmail === '1') {
+                    $filterEmail = '(|(mailPrimaryAddress=%uid)(mail=%uid))';
+                    $parts++;
+                }
+
+                $filterAttributes = '';
+                $attrsToFilter = $this->configuration->ldapLoginFilterAttributes;
+                if (is_array($attrsToFilter) && count($attrsToFilter) > 0) {
+                    $filterAttributes = '(|';
+                    foreach ($attrsToFilter as $attribute) {
+                        $filterAttributes .= '(' . $attribute . $loginpart . ')';
+                    }
+                    $filterAttributes .= ')';
+                    $parts++;
+                }
+
+                $filterLogin = '';
+                if ($parts > 1) {
+                    $filterLogin = '(|';
+                }
+                $filterLogin .= $filterUsername;
+                $filterLogin .= $filterEmail;
+                $filterLogin .= $filterAttributes;
+                if ($parts > 1) {
+                    $filterLogin .= ')';
+                }
+
+                $filter = '(&' . $ulf . $filterLogin . ')';
+                break;
+        }
+
+        $this->logger->debug(
+            'Wiz: Final filter ' . $filter,
+            ['app' => 'user_ldap']
+        );
+
+        return $filter;
+    }
+
+    /**
+     * Connects and Binds to an LDAP Server
+     *
+     * @param int $port the port to connect with
+     * @param bool $tls whether startTLS is to be used
+     * @throws \Exception
+     */
+    private function connectAndBind(int $port, bool $tls): bool {
+        //connect, does not really trigger any server communication
+        $host = $this->configuration->ldapHost;
+        $hostInfo = parse_url((string)$host);
+        if (!is_string($host) || !$hostInfo) {
+            throw new \Exception(self::$l->t('Invalid Host'));
+        }
+        $this->logger->debug(
+            'Wiz: Attempting to connect',
+            ['app' => 'user_ldap']
+        );
+        $cr = $this->ldap->connect($host, (string)$port);
+        if (!$this->ldap->isResource($cr)) {
+            throw new \Exception(self::$l->t('Invalid Host'));
+        }
+        /** @var \LDAP\Connection $cr */
+
+        //set LDAP options
+        $this->ldap->setOption($cr, LDAP_OPT_PROTOCOL_VERSION, 3);
+        $this->ldap->setOption($cr, LDAP_OPT_REFERRALS, 0);
+        $this->ldap->setOption($cr, LDAP_OPT_NETWORK_TIMEOUT, self::LDAP_NW_TIMEOUT);
+
+        try {
+            if ($tls) {
+                $isTlsWorking = @$this->ldap->startTls($cr);
+                if (!$isTlsWorking) {
+                    return false;
+                }
+            }
+
+            $this->logger->debug(
+                'Wiz: Attempting to Bind',
+                ['app' => 'user_ldap']
+            );
+            //interesting part: do the bind!
+            $login = $this->ldap->bind($cr,
+                $this->configuration->ldapAgentName,
+                $this->configuration->ldapAgentPassword
+            );
+            $errNo = $this->ldap->errno($cr);
+            $error = $this->ldap->error($cr);
+            $this->ldap->unbind($cr);
+        } catch (ServerNotAvailableException $e) {
+            return false;
+        }
+
+        if ($login === true) {
+            $this->logger->debug(
+                'Wiz: Bind successful to Port ' . $port . ' TLS ' . (int)$tls,
+                ['app' => 'user_ldap']
+            );
+            return true;
+        }
+
+        if ($errNo === -1) {
+            //host, port or TLS wrong
+            return false;
+        }
+        throw new \Exception($error, $errNo);
+    }
+
+    /**
+     * checks whether a valid combination of agent and password has been
+     * provided (either two values or nothing for anonymous connect)
+     * @return bool true if everything is fine, false otherwise
+     */
+    private function checkAgentRequirements(): bool {
+        $agent = $this->configuration->ldapAgentName;
+        $pwd = $this->configuration->ldapAgentPassword;
+
+        return
+            ($agent !== '' && $pwd !== '')
+            || ($agent === '' && $pwd === '')
+        ;
+    }
+
+    private function checkRequirements(array $reqs): bool {
+        $this->checkAgentRequirements();
+        foreach ($reqs as $option) {
+            $value = $this->configuration->$option;
+            if (empty($value)) {
+                return false;
+            }
+        }
+        return true;
+    }
+
+    /**
+     * does a cumulativeSearch on LDAP to get different values of a
+     * specified attribute
+     * @param string[] $filters array, the filters that shall be used in the search
+     * @param string $attr the attribute of which a list of values shall be returned
+     * @param int $dnReadLimit the amount of how many DNs should be analyzed.
+     *                         The lower, the faster
+     * @param string $maxF string. if not null, this variable will have the filter that
+     *                     yields most result entries
+     * @return array|false an array with the values on success, false otherwise
+     */
+    public function cumulativeSearchOnAttribute(array $filters, string $attr, int $dnReadLimit = 3, ?string &$maxF = null) {
+        $dnRead = [];
+        $foundItems = [];
+        $maxEntries = 0;
+        if (!is_array($this->configuration->ldapBase)
+           || !isset($this->configuration->ldapBase[0])) {
+            return false;
+        }
+        $base = $this->configuration->ldapBase[0];
+        $cr = $this->getConnection();
+        if (!$this->ldap->isResource($cr)) {
+            return false;
+        }
+        /** @var \LDAP\Connection $cr */
+        $lastFilter = null;
+        if (isset($filters[count($filters) - 1])) {
+            $lastFilter = $filters[count($filters) - 1];
+        }
+        foreach ($filters as $filter) {
+            if ($lastFilter === $filter && count($foundItems) > 0) {
+                //skip when the filter is a wildcard and results were found
+                continue;
+            }
+            // 20k limit for performance and reason
+            $rr = $this->ldap->search($cr, $base, $filter, [$attr], 0, 20000);
+            if (!$this->ldap->isResource($rr)) {
+                continue;
+            }
+            /** @var \LDAP\Result $rr */
+            $entries = $this->ldap->countEntries($cr, $rr);
+            $getEntryFunc = 'firstEntry';
+            if (($entries !== false) && ($entries > 0)) {
+                if (!is_null($maxF) && $entries > $maxEntries) {
+                    $maxEntries = $entries;
+                    $maxF = $filter;
+                }
+                $dnReadCount = 0;
+                do {
+                    $entry = $this->ldap->$getEntryFunc($cr, $rr);
+                    $getEntryFunc = 'nextEntry';
+                    if (!$this->ldap->isResource($entry)) {
+                        continue 2;
+                    }
+                    $rr = $entry; //will be expected by nextEntry next round
+                    $attributes = $this->ldap->getAttributes($cr, $entry);
+                    $dn = $this->ldap->getDN($cr, $entry);
+                    if ($attributes === false || $dn === false || in_array($dn, $dnRead)) {
+                        continue;
+                    }
+                    $newItems = [];
+                    $state = $this->getAttributeValuesFromEntry(
+                        $attributes,
+                        $attr,
+                        $newItems
+                    );
+                    $dnReadCount++;
+                    $foundItems = array_merge($foundItems, $newItems);
+                    $dnRead[] = $dn;
+                } while ($dnReadLimit === 0 || $dnReadCount < $dnReadLimit);
+            }
+        }
+
+        return array_unique($foundItems);
+    }
+
+    /**
+     * determines if and which $attr are available on the LDAP server
+     * @param string[] $objectclasses the objectclasses to use as search filter
+     * @param string $attr the attribute to look for
+     * @param string $dbkey the dbkey of the setting the feature is connected to
+     * @param string $confkey the confkey counterpart for the $dbkey as used in the
+     *                        Configuration class
+     * @param bool $po whether the objectClass with most result entries
+     *                 shall be pre-selected via the result
+     * @return array list of found items.
+     * @throws \Exception
+     */
+    private function determineFeature(array $objectclasses, string $attr, string $dbkey, string $confkey, bool $po = false): array {
+        $cr = $this->getConnection();
+        if (!$cr) {
+            throw new \Exception('Could not connect to LDAP');
+        }
+        $p = 'objectclass=';
+        foreach ($objectclasses as $key => $value) {
+            $objectclasses[$key] = $p . $value;
+        }
+        $maxEntryObjC = '';
+
+        //how deep to dig?
+        //When looking for objectclasses, testing few entries is sufficient,
+        $dig = 3;
+
+        $availableFeatures
+            = $this->cumulativeSearchOnAttribute($objectclasses, $attr,
+                $dig, $maxEntryObjC);
+        if (is_array($availableFeatures)
+           && count($availableFeatures) > 0) {
+            natcasesort($availableFeatures);
+            //natcasesort keeps indices, but we must get rid of them for proper
+            //sorting in the web UI. Therefore: array_values
+            $this->result->addOptions($dbkey, array_values($availableFeatures));
+        } else {
+            throw new \Exception(self::$l->t('Could not find the desired feature'));
+        }
+
+        $setFeatures = $this->configuration->$confkey;
+        if (is_array($setFeatures) && !empty($setFeatures)) {
+            //something is already configured? pre-select it.
+            $this->result->addChange($dbkey, $setFeatures);
+        } elseif ($po && $maxEntryObjC !== '') {
+            //pre-select objectclass with most result entries
+            $maxEntryObjC = str_replace($p, '', $maxEntryObjC);
+            $this->applyFind($dbkey, $maxEntryObjC);
+            $this->result->addChange($dbkey, $maxEntryObjC);
+        }
+
+        return $availableFeatures;
+    }
+
+    /**
+     * appends a list of values fr
+     * @param array $result the return value from ldap_get_attributes
+     * @param string $attribute the attribute values to look for
+     * @param array &$known new values will be appended here
+     * @return int state on of the class constants LRESULT_PROCESSED_OK,
+     *             LRESULT_PROCESSED_INVALID or LRESULT_PROCESSED_SKIP
+     */
+    private function getAttributeValuesFromEntry(array $result, string $attribute, array &$known): int {
+        if (!isset($result['count'])
+           || !$result['count'] > 0) {
+            return self::LRESULT_PROCESSED_INVALID;
+        }
+
+        // strtolower on all keys for proper comparison
+        $result = Util::mb_array_change_key_case($result);
+        $attribute = strtolower($attribute);
+        if (isset($result[$attribute])) {
+            foreach ($result[$attribute] as $key => $val) {
+                if ($key === 'count') {
+                    continue;
+                }
+                if (!in_array($val, $known)) {
+                    $known[] = $val;
+                }
+            }
+            return self::LRESULT_PROCESSED_OK;
+        } else {
+            return self::LRESULT_PROCESSED_SKIP;
+        }
+    }
+
+    /**
+     * @return \LDAP\Connection|false a link resource on success, otherwise false
+     */
+    private function getConnection(): \LDAP\Connection|false {
+        if (!is_null($this->cr)) {
+            return $this->cr;
+        }
+
+        $cr = $this->ldap->connect(
+            $this->configuration->ldapHost,
+            $this->configuration->ldapPort
+        );
+
+        if ($cr === false) {
+            return false;
+        }
+
+        $this->ldap->setOption($cr, LDAP_OPT_PROTOCOL_VERSION, 3);
+        $this->ldap->setOption($cr, LDAP_OPT_REFERRALS, 0);
+        $this->ldap->setOption($cr, LDAP_OPT_NETWORK_TIMEOUT, self::LDAP_NW_TIMEOUT);
+        if ($this->configuration->ldapTLS) {
+            $this->ldap->startTls($cr);
+        }
+
+        $lo = @$this->ldap->bind($cr,
+            $this->configuration->ldapAgentName,
+            $this->configuration->ldapAgentPassword);
+        if ($lo === true) {
+            $this->cr = $cr;
+            return $cr;
+        }
+
+        return false;
+    }
+
+    /**
+     * @return array<array{port:int,tls:bool}>
+     */
+    private function getDefaultLdapPortSettings(): array {
+        static $settings = [
+            ['port' => 7636, 'tls' => false],
+            ['port' => 636, 'tls' => false],
+            ['port' => 7389, 'tls' => true],
+            ['port' => 389, 'tls' => true],
+            ['port' => 7389, 'tls' => false],
+            ['port' => 389, 'tls' => false],
+        ];
+        return $settings;
+    }
+
+    /**
+     * @return array<array{port:int,tls:bool}>
+     */
+    private function getPortSettingsToTry(): array {
+        //389 ← LDAP / Unencrypted or StartTLS
+        //636 ← LDAPS / SSL
+        //7xxx ← UCS. need to be checked first, because both ports may be open
+        $host = $this->configuration->ldapHost;
+        $port = (int)$this->configuration->ldapPort;
+        $portSettings = [];
+
+        //In case the port is already provided, we will check this first
+        if ($port > 0) {
+            $hostInfo = parse_url($host);
+            if (!(is_array($hostInfo)
+                && isset($hostInfo['scheme'])
+                && stripos($hostInfo['scheme'], 'ldaps') !== false)) {
+                $portSettings[] = ['port' => $port, 'tls' => true];
+            }
+            $portSettings[] = ['port' => $port, 'tls' => false];
+        } elseif ($this->configuration->usesLdapi()) {
+            $portSettings[] = ['port' => 0, 'tls' => false];
+        }
+
+        //default ports
+        $portSettings = array_merge($portSettings,
+            $this->getDefaultLdapPortSettings());
+
+        return $portSettings;
+    }
 }

Spacing +34 added lines, -34 removed lines

@@ -84,7 +84,7 @@ 
 			throw new \Exception('Internal error: Invalid object type', 500);
 		}
 
-		return (int)$result;
+		return (int) $result;
 	}
 
 	/**
@@ -169,7 +169,7 @@ 
 
 		$filter = $this->access->combineFilterWithAnd([
 			$this->configuration->ldapUserFilter,
-			$attr . '=*'
+			$attr.'=*'
 		]);
 
 		$limit = $existsCheck ? null : 1;
@@ -196,7 +196,7 @@ 
 		if ($attr !== '' && $attr !== 'displayName') {
 			// most likely not the default value with upper case N,
 			// verify it still produces a result
-			$count = (int)$this->countUsersWithAttribute($attr, true);
+			$count = (int) $this->countUsersWithAttribute($attr, true);
 			if ($count > 0) {
 				//no change, but we sent it back to make sure the user interface
 				//is still correct, even if the call was cancelled meanwhile
@@ -208,7 +208,7 @@ 
 		// first attribute that has at least one result wins
 		$displayNameAttrs = ['displayname', 'cn'];
 		foreach ($displayNameAttrs as $attr) {
-			$count = (int)$this->countUsersWithAttribute($attr, true);
+			$count = (int) $this->countUsersWithAttribute($attr, true);
 
 			if ($count > 0) {
 				$this->applyFind('ldap_display_name', $attr);
@@ -236,7 +236,7 @@ 
 
 		$attr = $this->configuration->ldapEmailAttribute;
 		if ($attr !== '') {
-			$count = (int)$this->countUsersWithAttribute($attr, true);
+			$count = (int) $this->countUsersWithAttribute($attr, true);
 			if ($count > 0) {
 				return false;
 			}
@@ -380,7 +380,7 @@ 
 		$this->fetchGroups($dbKey, $confKey);
 
 		if ($testMemberOf) {
-			$this->configuration->hasMemberOfFilterSupport = (string)$this->testMemberOf();
+			$this->configuration->hasMemberOfFilterSupport = (string) $this->testMemberOf();
 			$this->result->markChange();
 			if (!$this->configuration->hasMemberOfFilterSupport) {
 				throw new \Exception('memberOf is not supported by the server');
@@ -400,7 +400,7 @@ 
 
 		$filterParts = [];
 		foreach ($obclasses as $obclass) {
-			$filterParts[] = 'objectclass=' . $obclass;
+			$filterParts[] = 'objectclass='.$obclass;
 		}
 		//we filter for everything
 		//- that looks like a group and
@@ -645,7 +645,7 @@ 
 			$p = $setting['port'];
 			$t = $setting['tls'];
 			$this->logger->debug(
-				'Wiz: trying port ' . $p . ', TLS ' . $t,
+				'Wiz: trying port '.$p.', TLS '.$t,
 				['app' => 'user_ldap']
 			);
 			//connectAndBind may throw Exception, it needs to be caught by the
@@ -666,12 +666,12 @@ 
 
 			if ($settingsFound === true) {
 				$config = [
-					'ldapPort' => (string)$p,
-					'ldapTLS' => (string)$t,
+					'ldapPort' => (string) $p,
+					'ldapTLS' => (string) $t,
 				];
 				$this->configuration->setConfiguration($config);
 				$this->logger->debug(
-					'Wiz: detected Port ' . $p,
+					'Wiz: detected Port '.$p,
 					['app' => 'user_ldap']
 				);
 				$this->result->addChange('ldap_port', $p);
@@ -718,7 +718,7 @@ 
 
 		$dparts = explode('.', $domain);
 		while (count($dparts) > 0) {
-			$base2 = 'dc=' . implode(',dc=', $dparts);
+			$base2 = 'dc='.implode(',dc=', $dparts);
 			if ($base !== $base2 && $this->testBaseDN($base2)) {
 				$this->applyFind('ldap_base', $base2);
 				return $this->result;
@@ -753,9 +753,9 @@ 
 		//removes Port from Host
 		if (is_array($hostInfo) && isset($hostInfo['port'])) {
 			$port = $hostInfo['port'];
-			$host = str_replace(':' . $port, '', $host);
+			$host = str_replace(':'.$port, '', $host);
 			$this->applyFind('ldap_host', $host);
-			$this->applyFind('ldap_port', (string)$port);
+			$this->applyFind('ldap_port', (string) $port);
 		}
 	}
 
@@ -822,7 +822,7 @@ 
 			$errorNo = $this->ldap->errno($cr);
 			$errorMsg = $this->ldap->error($cr);
 			$this->logger->info(
-				'Wiz: Could not search base ' . $base . ' Error ' . $errorNo . ': ' . $errorMsg,
+				'Wiz: Could not search base '.$base.' Error '.$errorNo.': '.$errorMsg,
 				['app' => 'user_ldap']
 			);
 			return false;
@@ -870,7 +870,7 @@ 
 				if (is_array($objcs) && count($objcs) > 0) {
 					$filter .= '(|';
 					foreach ($objcs as $objc) {
-						$filter .= '(objectclass=' . ldap_escape($objc, '', LDAP_ESCAPE_FILTER) . ')';
+						$filter .= '(objectclass='.ldap_escape($objc, '', LDAP_ESCAPE_FILTER).')';
 					}
 					$filter .= ')';
 					$parts++;
@@ -886,7 +886,7 @@ 
 						}
 						$base = $this->configuration->ldapBase[0];
 						foreach ($cns as $cn) {
-							$rr = $this->ldap->search($cr, $base, 'cn=' . ldap_escape($cn, '', LDAP_ESCAPE_FILTER), ['dn', 'primaryGroupToken']);
+							$rr = $this->ldap->search($cr, $base, 'cn='.ldap_escape($cn, '', LDAP_ESCAPE_FILTER), ['dn', 'primaryGroupToken']);
 							if (!$this->ldap->isResource($rr)) {
 								continue;
 							}
@@ -897,11 +897,11 @@ 
 							if ($dn === false || $dn === '') {
 								continue;
 							}
-							$filterPart = '(memberof=' . ldap_escape($dn, '', LDAP_ESCAPE_FILTER) . ')';
+							$filterPart = '(memberof='.ldap_escape($dn, '', LDAP_ESCAPE_FILTER).')';
 							if (isset($attrs['primaryGroupToken'])) {
 								$pgt = $attrs['primaryGroupToken'][0];
-								$primaryFilterPart = '(primaryGroupID=' . ldap_escape($pgt, '', LDAP_ESCAPE_FILTER) . ')';
-								$filterPart = '(|' . $filterPart . $primaryFilterPart . ')';
+								$primaryFilterPart = '(primaryGroupID='.ldap_escape($pgt, '', LDAP_ESCAPE_FILTER).')';
+								$filterPart = '(|'.$filterPart.$primaryFilterPart.')';
 							}
 							$filter .= $filterPart;
 						}
@@ -911,7 +911,7 @@ 
 				}
 				//wrap parts in AND condition
 				if ($parts > 1) {
-					$filter = '(&' . $filter . ')';
+					$filter = '(&'.$filter.')';
 				}
 				if ($filter === '') {
 					$filter = '(objectclass=*)';
@@ -924,7 +924,7 @@ 
 				if (is_array($objcs) && count($objcs) > 0) {
 					$filter .= '(|';
 					foreach ($objcs as $objc) {
-						$filter .= '(objectclass=' . ldap_escape($objc, '', LDAP_ESCAPE_FILTER) . ')';
+						$filter .= '(objectclass='.ldap_escape($objc, '', LDAP_ESCAPE_FILTER).')';
 					}
 					$filter .= ')';
 					$parts++;
@@ -934,14 +934,14 @@ 
 				if (is_array($cns) && count($cns) > 0) {
 					$filter .= '(|';
 					foreach ($cns as $cn) {
-						$filter .= '(cn=' . ldap_escape($cn, '', LDAP_ESCAPE_FILTER) . ')';
+						$filter .= '(cn='.ldap_escape($cn, '', LDAP_ESCAPE_FILTER).')';
 					}
 					$filter .= ')';
 				}
 				$parts++;
 				//wrap parts in AND condition
 				if ($parts > 1) {
-					$filter = '(&' . $filter . ')';
+					$filter = '(&'.$filter.')';
 				}
 				break;
 
@@ -967,7 +967,7 @@ 
 						$attr = 'cn';
 					}
 					if ($attr !== '') {
-						$filterUsername = '(' . $attr . $loginpart . ')';
+						$filterUsername = '('.$attr.$loginpart.')';
 						$parts++;
 					}
 				}
@@ -983,7 +983,7 @@ 
 				if (is_array($attrsToFilter) && count($attrsToFilter) > 0) {
 					$filterAttributes = '(|';
 					foreach ($attrsToFilter as $attribute) {
-						$filterAttributes .= '(' . $attribute . $loginpart . ')';
+						$filterAttributes .= '('.$attribute.$loginpart.')';
 					}
 					$filterAttributes .= ')';
 					$parts++;
@@ -1000,12 +1000,12 @@ 
 					$filterLogin .= ')';
 				}
 
-				$filter = '(&' . $ulf . $filterLogin . ')';
+				$filter = '(&'.$ulf.$filterLogin.')';
 				break;
 		}
 
 		$this->logger->debug(
-			'Wiz: Final filter ' . $filter,
+			'Wiz: Final filter '.$filter,
 			['app' => 'user_ldap']
 		);
 
@@ -1022,7 +1022,7 @@ 
 	private function connectAndBind(int $port, bool $tls): bool {
 		//connect, does not really trigger any server communication
 		$host = $this->configuration->ldapHost;
-		$hostInfo = parse_url((string)$host);
+		$hostInfo = parse_url((string) $host);
 		if (!is_string($host) || !$hostInfo) {
 			throw new \Exception(self::$l->t('Invalid Host'));
 		}
@@ -1030,7 +1030,7 @@ 
 			'Wiz: Attempting to connect',
 			['app' => 'user_ldap']
 		);
-		$cr = $this->ldap->connect($host, (string)$port);
+		$cr = $this->ldap->connect($host, (string) $port);
 		if (!$this->ldap->isResource($cr)) {
 			throw new \Exception(self::$l->t('Invalid Host'));
 		}
@@ -1067,7 +1067,7 @@ 
 
 		if ($login === true) {
 			$this->logger->debug(
-				'Wiz: Bind successful to Port ' . $port . ' TLS ' . (int)$tls,
+				'Wiz: Bind successful to Port '.$port.' TLS '.(int) $tls,
 				['app' => 'user_ldap']
 			);
 			return true;
@@ -1201,7 +1201,7 @@ 
 		}
 		$p = 'objectclass=';
 		foreach ($objectclasses as $key => $value) {
-			$objectclasses[$key] = $p . $value;
+			$objectclasses[$key] = $p.$value;
 		}
 		$maxEntryObjC = '';
 
@@ -1271,7 +1271,7 @@ 
 	/**
 	 * @return \LDAP\Connection|false a link resource on success, otherwise false
 	 */
-	private function getConnection(): \LDAP\Connection|false {
+	private function getConnection(): \LDAP\Connection | false {
 		if (!is_null($this->cr)) {
 			return $this->cr;
 		}
@@ -1326,7 +1326,7 @@ 
 		//636 ← LDAPS / SSL
 		//7xxx ← UCS. need to be checked first, because both ports may be open
 		$host = $this->configuration->ldapHost;
-		$port = (int)$this->configuration->ldapPort;
+		$port = (int) $this->configuration->ldapPort;
 		$portSettings = [];
 
 		//In case the port is already provided, we will check this first

apps/user_ldap/lib/Controller/ConfigAPIController.php

Indentation +293 added lines, -293 removed lines

@@ -27,249 +27,249 @@ 
 use Psr\Log\LoggerInterface;
 
 class ConfigAPIController extends OCSController {
-	public function __construct(
-		string $appName,
-		IRequest $request,
-		private Helper $ldapHelper,
-		private LoggerInterface $logger,
-		private ConnectionFactory $connectionFactory,
-		private IL10N $l,
-	) {
-		parent::__construct($appName, $request);
-	}
+    public function __construct(
+        string $appName,
+        IRequest $request,
+        private Helper $ldapHelper,
+        private LoggerInterface $logger,
+        private ConnectionFactory $connectionFactory,
+        private IL10N $l,
+    ) {
+        parent::__construct($appName, $request);
+    }
 
-	/**
-	 * Create a new (empty) configuration and return the resulting prefix
-	 *
-	 * @return DataResponse<Http::STATUS_OK, array{configID: string}, array{}>
-	 * @throws OCSException
-	 *
-	 * 200: Config created successfully
-	 */
-	#[AuthorizedAdminSetting(settings: Admin::class)]
-	#[ApiRoute(verb: 'POST', url: '/api/v1/config')]
-	public function create() {
-		try {
-			$configPrefix = $this->ldapHelper->getNextServerConfigurationPrefix();
-			$configHolder = new Configuration($configPrefix);
-			$configHolder->ldapConfigurationActive = false;
-			$configHolder->saveConfiguration();
-		} catch (\Exception $e) {
-			$this->logger->error($e->getMessage(), ['exception' => $e]);
-			throw new OCSException('An issue occurred when creating the new config.');
-		}
-		return new DataResponse(['configID' => $configPrefix]);
-	}
+    /**
+     * Create a new (empty) configuration and return the resulting prefix
+     *
+     * @return DataResponse<Http::STATUS_OK, array{configID: string}, array{}>
+     * @throws OCSException
+     *
+     * 200: Config created successfully
+     */
+    #[AuthorizedAdminSetting(settings: Admin::class)]
+    #[ApiRoute(verb: 'POST', url: '/api/v1/config')]
+    public function create() {
+        try {
+            $configPrefix = $this->ldapHelper->getNextServerConfigurationPrefix();
+            $configHolder = new Configuration($configPrefix);
+            $configHolder->ldapConfigurationActive = false;
+            $configHolder->saveConfiguration();
+        } catch (\Exception $e) {
+            $this->logger->error($e->getMessage(), ['exception' => $e]);
+            throw new OCSException('An issue occurred when creating the new config.');
+        }
+        return new DataResponse(['configID' => $configPrefix]);
+    }
 
-	/**
-	 * Delete a LDAP configuration
-	 *
-	 * @param string $configID ID of the config
-	 * @return DataResponse<Http::STATUS_OK, list<empty>, array{}>
-	 * @throws OCSException
-	 * @throws OCSNotFoundException Config not found
-	 *
-	 * 200: Config deleted successfully
-	 */
-	#[AuthorizedAdminSetting(settings: Admin::class)]
-	#[ApiRoute(verb: 'DELETE', url: '/api/v1/config/{configID}')]
-	public function delete($configID) {
-		try {
-			$this->ensureConfigIDExists($configID);
-			if (!$this->ldapHelper->deleteServerConfiguration($configID)) {
-				throw new OCSException('Could not delete configuration');
-			}
-		} catch (OCSException $e) {
-			throw $e;
-		} catch (\Exception $e) {
-			$this->logger->error($e->getMessage(), ['exception' => $e]);
-			throw new OCSException('An issue occurred when deleting the config.');
-		}
+    /**
+     * Delete a LDAP configuration
+     *
+     * @param string $configID ID of the config
+     * @return DataResponse<Http::STATUS_OK, list<empty>, array{}>
+     * @throws OCSException
+     * @throws OCSNotFoundException Config not found
+     *
+     * 200: Config deleted successfully
+     */
+    #[AuthorizedAdminSetting(settings: Admin::class)]
+    #[ApiRoute(verb: 'DELETE', url: '/api/v1/config/{configID}')]
+    public function delete($configID) {
+        try {
+            $this->ensureConfigIDExists($configID);
+            if (!$this->ldapHelper->deleteServerConfiguration($configID)) {
+                throw new OCSException('Could not delete configuration');
+            }
+        } catch (OCSException $e) {
+            throw $e;
+        } catch (\Exception $e) {
+            $this->logger->error($e->getMessage(), ['exception' => $e]);
+            throw new OCSException('An issue occurred when deleting the config.');
+        }
 
-		return new DataResponse();
-	}
+        return new DataResponse();
+    }
 
-	/**
-	 * Modify a configuration
-	 *
-	 * @param string $configID ID of the config
-	 * @param array<string, mixed> $configData New config
-	 * @return DataResponse<Http::STATUS_OK, array<string, mixed>, array{}>
-	 * @throws OCSException
-	 * @throws OCSBadRequestException Modifying config is not possible
-	 * @throws OCSNotFoundException Config not found
-	 *
-	 * 200: Config returned
-	 */
-	#[AuthorizedAdminSetting(settings: Admin::class)]
-	#[ApiRoute(verb: 'PUT', url: '/api/v1/config/{configID}')]
-	public function modify($configID, $configData) {
-		try {
-			$this->ensureConfigIDExists($configID);
+    /**
+     * Modify a configuration
+     *
+     * @param string $configID ID of the config
+     * @param array<string, mixed> $configData New config
+     * @return DataResponse<Http::STATUS_OK, array<string, mixed>, array{}>
+     * @throws OCSException
+     * @throws OCSBadRequestException Modifying config is not possible
+     * @throws OCSNotFoundException Config not found
+     *
+     * 200: Config returned
+     */
+    #[AuthorizedAdminSetting(settings: Admin::class)]
+    #[ApiRoute(verb: 'PUT', url: '/api/v1/config/{configID}')]
+    public function modify($configID, $configData) {
+        try {
+            $this->ensureConfigIDExists($configID);
 
-			if (!is_array($configData)) {
-				throw new OCSBadRequestException('configData is not properly set');
-			}
+            if (!is_array($configData)) {
+                throw new OCSBadRequestException('configData is not properly set');
+            }
 
-			$configuration = new Configuration($configID);
-			$configKeys = $configuration->getConfigTranslationArray();
+            $configuration = new Configuration($configID);
+            $configKeys = $configuration->getConfigTranslationArray();
 
-			foreach ($configKeys as $i => $key) {
-				if (isset($configData[$key])) {
-					$configuration->$key = $configData[$key];
-				}
-			}
+            foreach ($configKeys as $i => $key) {
+                if (isset($configData[$key])) {
+                    $configuration->$key = $configData[$key];
+                }
+            }
 
-			$configuration->saveConfiguration();
-			$this->connectionFactory->get($configID)->clearCache();
-		} catch (OCSException $e) {
-			throw $e;
-		} catch (\Exception $e) {
-			$this->logger->error($e->getMessage(), ['exception' => $e]);
-			throw new OCSException('An issue occurred when modifying the config.');
-		}
+            $configuration->saveConfiguration();
+            $this->connectionFactory->get($configID)->clearCache();
+        } catch (OCSException $e) {
+            throw $e;
+        } catch (\Exception $e) {
+            $this->logger->error($e->getMessage(), ['exception' => $e]);
+            throw new OCSException('An issue occurred when modifying the config.');
+        }
 
-		return $this->show($configID, false);
-	}
+        return $this->show($configID, false);
+    }
 
-	/**
-	 * Get a configuration
-	 *
-	 * Output can look like this:
-	 * <?xml version="1.0"?>
-	 * <ocs>
-	 *   <meta>
-	 *     <status>ok</status>
-	 *     <statuscode>200</statuscode>
-	 *     <message>OK</message>
-	 *   </meta>
-	 *   <data>
-	 *     <ldapHost>ldaps://my.ldap.server</ldapHost>
-	 *     <ldapPort>7770</ldapPort>
-	 *     <ldapBackupHost></ldapBackupHost>
-	 *     <ldapBackupPort></ldapBackupPort>
-	 *     <ldapBase>ou=small,dc=my,dc=ldap,dc=server</ldapBase>
-	 *     <ldapBaseUsers>ou=users,ou=small,dc=my,dc=ldap,dc=server</ldapBaseUsers>
-	 *     <ldapBaseGroups>ou=small,dc=my,dc=ldap,dc=server</ldapBaseGroups>
-	 *     <ldapAgentName>cn=root,dc=my,dc=ldap,dc=server</ldapAgentName>
-	 *     <ldapAgentPassword>clearTextWithShowPassword=1</ldapAgentPassword>
-	 *     <ldapTLS>1</ldapTLS>
-	 *     <turnOffCertCheck>0</turnOffCertCheck>
-	 *     <ldapIgnoreNamingRules/>
-	 *     <ldapUserDisplayName>displayname</ldapUserDisplayName>
-	 *     <ldapUserDisplayName2>uid</ldapUserDisplayName2>
-	 *     <ldapUserFilterObjectclass>inetOrgPerson</ldapUserFilterObjectclass>
-	 *     <ldapUserFilterGroups></ldapUserFilterGroups>
-	 *     <ldapUserFilter>(&amp;(objectclass=nextcloudUser)(nextcloudEnabled=TRUE))</ldapUserFilter>
-	 *     <ldapUserFilterMode>1</ldapUserFilterMode>
-	 *     <ldapGroupFilter>(&amp;(|(objectclass=nextcloudGroup)))</ldapGroupFilter>
-	 *     <ldapGroupFilterMode>0</ldapGroupFilterMode>
-	 *     <ldapGroupFilterObjectclass>nextcloudGroup</ldapGroupFilterObjectclass>
-	 *     <ldapGroupFilterGroups></ldapGroupFilterGroups>
-	 *     <ldapGroupDisplayName>cn</ldapGroupDisplayName>
-	 *     <ldapGroupMemberAssocAttr>memberUid</ldapGroupMemberAssocAttr>
-	 *     <ldapLoginFilter>(&amp;(|(objectclass=inetOrgPerson))(uid=%uid))</ldapLoginFilter>
-	 *     <ldapLoginFilterMode>0</ldapLoginFilterMode>
-	 *     <ldapLoginFilterEmail>0</ldapLoginFilterEmail>
-	 *     <ldapLoginFilterUsername>1</ldapLoginFilterUsername>
-	 *     <ldapLoginFilterAttributes></ldapLoginFilterAttributes>
-	 *     <ldapQuotaAttribute></ldapQuotaAttribute>
-	 *     <ldapQuotaDefault></ldapQuotaDefault>
-	 *     <ldapEmailAttribute>mail</ldapEmailAttribute>
-	 *     <ldapCacheTTL>20</ldapCacheTTL>
-	 *     <ldapUuidUserAttribute>auto</ldapUuidUserAttribute>
-	 *     <ldapUuidGroupAttribute>auto</ldapUuidGroupAttribute>
-	 *     <ldapOverrideMainServer></ldapOverrideMainServer>
-	 *     <ldapConfigurationActive>1</ldapConfigurationActive>
-	 *     <ldapAttributesForUserSearch>uid;sn;givenname</ldapAttributesForUserSearch>
-	 *     <ldapAttributesForGroupSearch></ldapAttributesForGroupSearch>
-	 *     <ldapExperiencedAdmin>0</ldapExperiencedAdmin>
-	 *     <homeFolderNamingRule></homeFolderNamingRule>
-	 *     <hasMemberOfFilterSupport></hasMemberOfFilterSupport>
-	 *     <useMemberOfToDetectMembership>1</useMemberOfToDetectMembership>
-	 *     <ldapExpertUsernameAttr>uid</ldapExpertUsernameAttr>
-	 *     <ldapExpertUUIDUserAttr>uid</ldapExpertUUIDUserAttr>
-	 *     <ldapExpertUUIDGroupAttr></ldapExpertUUIDGroupAttr>
-	 *     <lastJpegPhotoLookup>0</lastJpegPhotoLookup>
-	 *     <ldapNestedGroups>0</ldapNestedGroups>
-	 *     <ldapPagingSize>500</ldapPagingSize>
-	 *     <turnOnPasswordChange>1</turnOnPasswordChange>
-	 *     <ldapDynamicGroupMemberURL></ldapDynamicGroupMemberURL>
-	 *   </data>
-	 * </ocs>
-	 *
-	 * @param string $configID ID of the config
-	 * @param bool $showPassword Whether to show the password
-	 * @return DataResponse<Http::STATUS_OK, array<string, mixed>, array{}>
-	 * @throws OCSException
-	 * @throws OCSNotFoundException Config not found
-	 *
-	 * 200: Config returned
-	 */
-	#[AuthorizedAdminSetting(settings: Admin::class)]
-	#[ApiRoute(verb: 'GET', url: '/api/v1/config/{configID}')]
-	public function show($configID, $showPassword = false) {
-		try {
-			$this->ensureConfigIDExists($configID);
+    /**
+     * Get a configuration
+     *
+     * Output can look like this:
+     * <?xml version="1.0"?>
+     * <ocs>
+     *   <meta>
+     *     <status>ok</status>
+     *     <statuscode>200</statuscode>
+     *     <message>OK</message>
+     *   </meta>
+     *   <data>
+     *     <ldapHost>ldaps://my.ldap.server</ldapHost>
+     *     <ldapPort>7770</ldapPort>
+     *     <ldapBackupHost></ldapBackupHost>
+     *     <ldapBackupPort></ldapBackupPort>
+     *     <ldapBase>ou=small,dc=my,dc=ldap,dc=server</ldapBase>
+     *     <ldapBaseUsers>ou=users,ou=small,dc=my,dc=ldap,dc=server</ldapBaseUsers>
+     *     <ldapBaseGroups>ou=small,dc=my,dc=ldap,dc=server</ldapBaseGroups>
+     *     <ldapAgentName>cn=root,dc=my,dc=ldap,dc=server</ldapAgentName>
+     *     <ldapAgentPassword>clearTextWithShowPassword=1</ldapAgentPassword>
+     *     <ldapTLS>1</ldapTLS>
+     *     <turnOffCertCheck>0</turnOffCertCheck>
+     *     <ldapIgnoreNamingRules/>
+     *     <ldapUserDisplayName>displayname</ldapUserDisplayName>
+     *     <ldapUserDisplayName2>uid</ldapUserDisplayName2>
+     *     <ldapUserFilterObjectclass>inetOrgPerson</ldapUserFilterObjectclass>
+     *     <ldapUserFilterGroups></ldapUserFilterGroups>
+     *     <ldapUserFilter>(&amp;(objectclass=nextcloudUser)(nextcloudEnabled=TRUE))</ldapUserFilter>
+     *     <ldapUserFilterMode>1</ldapUserFilterMode>
+     *     <ldapGroupFilter>(&amp;(|(objectclass=nextcloudGroup)))</ldapGroupFilter>
+     *     <ldapGroupFilterMode>0</ldapGroupFilterMode>
+     *     <ldapGroupFilterObjectclass>nextcloudGroup</ldapGroupFilterObjectclass>
+     *     <ldapGroupFilterGroups></ldapGroupFilterGroups>
+     *     <ldapGroupDisplayName>cn</ldapGroupDisplayName>
+     *     <ldapGroupMemberAssocAttr>memberUid</ldapGroupMemberAssocAttr>
+     *     <ldapLoginFilter>(&amp;(|(objectclass=inetOrgPerson))(uid=%uid))</ldapLoginFilter>
+     *     <ldapLoginFilterMode>0</ldapLoginFilterMode>
+     *     <ldapLoginFilterEmail>0</ldapLoginFilterEmail>
+     *     <ldapLoginFilterUsername>1</ldapLoginFilterUsername>
+     *     <ldapLoginFilterAttributes></ldapLoginFilterAttributes>
+     *     <ldapQuotaAttribute></ldapQuotaAttribute>
+     *     <ldapQuotaDefault></ldapQuotaDefault>
+     *     <ldapEmailAttribute>mail</ldapEmailAttribute>
+     *     <ldapCacheTTL>20</ldapCacheTTL>
+     *     <ldapUuidUserAttribute>auto</ldapUuidUserAttribute>
+     *     <ldapUuidGroupAttribute>auto</ldapUuidGroupAttribute>
+     *     <ldapOverrideMainServer></ldapOverrideMainServer>
+     *     <ldapConfigurationActive>1</ldapConfigurationActive>
+     *     <ldapAttributesForUserSearch>uid;sn;givenname</ldapAttributesForUserSearch>
+     *     <ldapAttributesForGroupSearch></ldapAttributesForGroupSearch>
+     *     <ldapExperiencedAdmin>0</ldapExperiencedAdmin>
+     *     <homeFolderNamingRule></homeFolderNamingRule>
+     *     <hasMemberOfFilterSupport></hasMemberOfFilterSupport>
+     *     <useMemberOfToDetectMembership>1</useMemberOfToDetectMembership>
+     *     <ldapExpertUsernameAttr>uid</ldapExpertUsernameAttr>
+     *     <ldapExpertUUIDUserAttr>uid</ldapExpertUUIDUserAttr>
+     *     <ldapExpertUUIDGroupAttr></ldapExpertUUIDGroupAttr>
+     *     <lastJpegPhotoLookup>0</lastJpegPhotoLookup>
+     *     <ldapNestedGroups>0</ldapNestedGroups>
+     *     <ldapPagingSize>500</ldapPagingSize>
+     *     <turnOnPasswordChange>1</turnOnPasswordChange>
+     *     <ldapDynamicGroupMemberURL></ldapDynamicGroupMemberURL>
+     *   </data>
+     * </ocs>
+     *
+     * @param string $configID ID of the config
+     * @param bool $showPassword Whether to show the password
+     * @return DataResponse<Http::STATUS_OK, array<string, mixed>, array{}>
+     * @throws OCSException
+     * @throws OCSNotFoundException Config not found
+     *
+     * 200: Config returned
+     */
+    #[AuthorizedAdminSetting(settings: Admin::class)]
+    #[ApiRoute(verb: 'GET', url: '/api/v1/config/{configID}')]
+    public function show($configID, $showPassword = false) {
+        try {
+            $this->ensureConfigIDExists($configID);
 
-			$config = new Configuration($configID);
-			$data = $config->getConfiguration();
-			if (!$showPassword) {
-				$data['ldapAgentPassword'] = '***';
-			}
-			foreach ($data as $key => $value) {
-				if (is_array($value)) {
-					$value = implode(';', $value);
-					$data[$key] = $value;
-				}
-			}
-		} catch (OCSException $e) {
-			throw $e;
-		} catch (\Exception $e) {
-			$this->logger->error($e->getMessage(), ['exception' => $e]);
-			throw new OCSException('An issue occurred when modifying the config.');
-		}
+            $config = new Configuration($configID);
+            $data = $config->getConfiguration();
+            if (!$showPassword) {
+                $data['ldapAgentPassword'] = '***';
+            }
+            foreach ($data as $key => $value) {
+                if (is_array($value)) {
+                    $value = implode(';', $value);
+                    $data[$key] = $value;
+                }
+            }
+        } catch (OCSException $e) {
+            throw $e;
+        } catch (\Exception $e) {
+            $this->logger->error($e->getMessage(), ['exception' => $e]);
+            throw new OCSException('An issue occurred when modifying the config.');
+        }
 
-		return new DataResponse($data);
-	}
+        return new DataResponse($data);
+    }
 
-	/**
-	 * Test a configuration
-	 *
-	 * @param string $configID ID of the LDAP config
-	 * @return DataResponse<Http::STATUS_OK, array{success:bool,message:string}, array{}>
-	 * @throws OCSException An unexpected error happened
-	 * @throws OCSNotFoundException Config not found
-	 *
-	 * 200: Test was run and results are returned
-	 */
-	#[AuthorizedAdminSetting(settings: Admin::class)]
-	#[ApiRoute(verb: 'POST', url: '/api/v1/config/{configID}/test')]
-	public function testConfiguration(string $configID) {
-		try {
-			$this->ensureConfigIDExists($configID);
-			$connection = $this->connectionFactory->get($configID);
-			$conf = $connection->getConfiguration();
-			if ($conf['ldap_configuration_active'] === '0') {
-				//needs to be true, otherwise it will also fail with an irritating message
-				$conf['ldap_configuration_active'] = '1';
-			}
-			try {
-				$connection->setConfiguration($conf, throw: true);
-			} catch (ConfigurationIssueException $e) {
-				return new DataResponse([
-					'success' => false,
-					'message' => $this->l->t('Invalid configuration: %s', $e->getHint()),
-				]);
-			}
-			// Configuration is okay
-			if (!$connection->bind()) {
-				return new DataResponse([
-					'success' => false,
-					'message' => $this->l->t('Valid configuration, but binding failed. Please check the server settings and credentials.'),
-				]);
-			}
-			/*
+    /**
+     * Test a configuration
+     *
+     * @param string $configID ID of the LDAP config
+     * @return DataResponse<Http::STATUS_OK, array{success:bool,message:string}, array{}>
+     * @throws OCSException An unexpected error happened
+     * @throws OCSNotFoundException Config not found
+     *
+     * 200: Test was run and results are returned
+     */
+    #[AuthorizedAdminSetting(settings: Admin::class)]
+    #[ApiRoute(verb: 'POST', url: '/api/v1/config/{configID}/test')]
+    public function testConfiguration(string $configID) {
+        try {
+            $this->ensureConfigIDExists($configID);
+            $connection = $this->connectionFactory->get($configID);
+            $conf = $connection->getConfiguration();
+            if ($conf['ldap_configuration_active'] === '0') {
+                //needs to be true, otherwise it will also fail with an irritating message
+                $conf['ldap_configuration_active'] = '1';
+            }
+            try {
+                $connection->setConfiguration($conf, throw: true);
+            } catch (ConfigurationIssueException $e) {
+                return new DataResponse([
+                    'success' => false,
+                    'message' => $this->l->t('Invalid configuration: %s', $e->getHint()),
+                ]);
+            }
+            // Configuration is okay
+            if (!$connection->bind()) {
+                return new DataResponse([
+                    'success' => false,
+                    'message' => $this->l->t('Valid configuration, but binding failed. Please check the server settings and credentials.'),
+                ]);
+            }
+            /*
 			* This shiny if block is an ugly hack to find out whether anonymous
 			* bind is possible on AD or not. Because AD happily and constantly
 			* replies with success to any anonymous bind request, we need to
@@ -278,69 +278,69 @@ 
 			* exception by the LDAP wrapper. We catch this. Other cases may
 			* pass (like e.g. expected syntax error).
 			*/
-			try {
-				$ldapWrapper = Server::get(ILDAPWrapper::class);
-				$ldapWrapper->read($connection->getConnectionResource(), '', 'objectClass=*', ['dn']);
-			} catch (\Exception $e) {
-				if ($e->getCode() === 1) {
-					return new DataResponse([
-						'success' => false,
-						'message' => $this->l->t('Invalid configuration: Anonymous binding is not allowed.'),
-					]);
-				}
-			}
-			return new DataResponse([
-				'success' => true,
-				'message' => $this->l->t('Valid configuration, connection established!'),
-			]);
-		} catch (OCSException $e) {
-			throw $e;
-		} catch (\Exception $e) {
-			$this->logger->error($e->getMessage(), ['exception' => $e]);
-			throw new OCSException('An issue occurred when testing the config.');
-		}
-	}
+            try {
+                $ldapWrapper = Server::get(ILDAPWrapper::class);
+                $ldapWrapper->read($connection->getConnectionResource(), '', 'objectClass=*', ['dn']);
+            } catch (\Exception $e) {
+                if ($e->getCode() === 1) {
+                    return new DataResponse([
+                        'success' => false,
+                        'message' => $this->l->t('Invalid configuration: Anonymous binding is not allowed.'),
+                    ]);
+                }
+            }
+            return new DataResponse([
+                'success' => true,
+                'message' => $this->l->t('Valid configuration, connection established!'),
+            ]);
+        } catch (OCSException $e) {
+            throw $e;
+        } catch (\Exception $e) {
+            $this->logger->error($e->getMessage(), ['exception' => $e]);
+            throw new OCSException('An issue occurred when testing the config.');
+        }
+    }
 
-	/**
-	 * Copy a configuration
-	 *
-	 * @param string $configID ID of the LDAP config
-	 * @return DataResponse<Http::STATUS_OK, array{configID:string}, array{}>
-	 * @throws OCSException An unexpected error happened
-	 * @throws OCSNotFoundException Config not found
-	 *
-	 * 200: Config was copied, new configID was returned
-	 */
-	#[AuthorizedAdminSetting(settings: Admin::class)]
-	#[ApiRoute(verb: 'POST', url: '/api/v1/config/{configID}/copy')]
-	public function copyConfiguration(string $configID) {
-		try {
-			$this->ensureConfigIDExists($configID);
-			$configPrefix = $this->ldapHelper->getNextServerConfigurationPrefix();
-			$newConfig = new Configuration($configPrefix, false);
-			$originalConfig = new Configuration($configID);
-			$newConfig->setConfiguration($originalConfig->getConfiguration());
-			$newConfig->saveConfiguration();
-			return new DataResponse(['configID' => $configPrefix]);
-		} catch (OCSException $e) {
-			throw $e;
-		} catch (\Exception $e) {
-			$this->logger->error($e->getMessage(), ['exception' => $e]);
-			throw new OCSException('An issue occurred when creating the new config.');
-		}
-	}
+    /**
+     * Copy a configuration
+     *
+     * @param string $configID ID of the LDAP config
+     * @return DataResponse<Http::STATUS_OK, array{configID:string}, array{}>
+     * @throws OCSException An unexpected error happened
+     * @throws OCSNotFoundException Config not found
+     *
+     * 200: Config was copied, new configID was returned
+     */
+    #[AuthorizedAdminSetting(settings: Admin::class)]
+    #[ApiRoute(verb: 'POST', url: '/api/v1/config/{configID}/copy')]
+    public function copyConfiguration(string $configID) {
+        try {
+            $this->ensureConfigIDExists($configID);
+            $configPrefix = $this->ldapHelper->getNextServerConfigurationPrefix();
+            $newConfig = new Configuration($configPrefix, false);
+            $originalConfig = new Configuration($configID);
+            $newConfig->setConfiguration($originalConfig->getConfiguration());
+            $newConfig->saveConfiguration();
+            return new DataResponse(['configID' => $configPrefix]);
+        } catch (OCSException $e) {
+            throw $e;
+        } catch (\Exception $e) {
+            $this->logger->error($e->getMessage(), ['exception' => $e]);
+            throw new OCSException('An issue occurred when creating the new config.');
+        }
+    }
 
-	/**
-	 * If the given config ID is not available, an exception is thrown
-	 *
-	 * @param string $configID
-	 * @throws OCSNotFoundException
-	 */
-	#[AuthorizedAdminSetting(settings: Admin::class)]
-	private function ensureConfigIDExists($configID): void {
-		$prefixes = $this->ldapHelper->getServerConfigurationPrefixes();
-		if (!in_array($configID, $prefixes, true)) {
-			throw new OCSNotFoundException('Config ID not found');
-		}
-	}
+    /**
+     * If the given config ID is not available, an exception is thrown
+     *
+     * @param string $configID
+     * @throws OCSNotFoundException
+     */
+    #[AuthorizedAdminSetting(settings: Admin::class)]
+    private function ensureConfigIDExists($configID): void {
+        $prefixes = $this->ldapHelper->getServerConfigurationPrefixes();
+        if (!in_array($configID, $prefixes, true)) {
+            throw new OCSNotFoundException('Config ID not found');
+        }
+    }
 }

apps/user_ldap/lib/Controller/WizardController.php

Indentation +125 added lines, -125 removed lines

@@ -31,134 +31,134 @@
 use Psr\Log\LoggerInterface;
 
 class WizardController extends OCSController {
-	public function __construct(
-		string $appName,
-		IRequest $request,
-		private LoggerInterface $logger,
-		private ConnectionFactory $connectionFactory,
-		private IL10N $l,
-		private WizardFactory $wizardFactory,
-		private IEventDispatcher $eventDispatcher,
-	) {
-		parent::__construct($appName, $request);
-	}
+    public function __construct(
+        string $appName,
+        IRequest $request,
+        private LoggerInterface $logger,
+        private ConnectionFactory $connectionFactory,
+        private IL10N $l,
+        private WizardFactory $wizardFactory,
+        private IEventDispatcher $eventDispatcher,
+    ) {
+        parent::__construct($appName, $request);
+    }
 
-	/**
-	 * Run a wizard action and returns the result
-	 *
-	 * @param string $configID ID of the LDAP configuration
-	 * @param string $wizardAction Wizard action to run
-	 * @param ?string $loginName Login name to test for testLoginName action
-	 * @return DataResponse<Http::STATUS_OK, array{changes:array<string,int|string|list<int>|list<string>>,options?:array<string,list<string>>}, array{}>
-	 * @throws OCSException
-	 *
-	 * 200: Wizard action result
-	 */
-	#[AuthorizedAdminSetting(settings: Admin::class)]
-	#[ApiRoute(verb: 'POST', url: '/api/v1/wizard/{configID}/{wizardAction}')]
-	public function action(
-		string $configID, string $wizardAction,
-		?string $loginName = null,
-	) {
-		try {
-			$wizard = $this->wizardFactory->get($configID);
-			switch ($wizardAction) {
-				case 'guessPortAndTLS':
-				case 'guessBaseDN':
-				case 'detectEmailAttribute':
-				case 'detectUserDisplayNameAttribute':
-				case 'determineGroupMemberAssoc':
-				case 'determineUserObjectClasses':
-				case 'determineGroupObjectClasses':
-				case 'determineGroupsForUsers':
-				case 'determineGroupsForGroups':
-				case 'determineAttributes':
-				case 'getUserListFilter':
-				case 'getUserLoginFilter':
-				case 'getGroupFilter':
-				case 'countUsers':
-				case 'countGroups':
-				case 'countInBaseDN':
-					try {
-						$result = $wizard->$wizardAction();
-						if ($result !== false) {
-							return new DataResponse($result->getResultArray());
-						}
-					} catch (\Exception $e) {
-						throw new OCSException($e->getMessage());
-					}
-					throw new OCSException();
+    /**
+     * Run a wizard action and returns the result
+     *
+     * @param string $configID ID of the LDAP configuration
+     * @param string $wizardAction Wizard action to run
+     * @param ?string $loginName Login name to test for testLoginName action
+     * @return DataResponse<Http::STATUS_OK, array{changes:array<string,int|string|list<int>|list<string>>,options?:array<string,list<string>>}, array{}>
+     * @throws OCSException
+     *
+     * 200: Wizard action result
+     */
+    #[AuthorizedAdminSetting(settings: Admin::class)]
+    #[ApiRoute(verb: 'POST', url: '/api/v1/wizard/{configID}/{wizardAction}')]
+    public function action(
+        string $configID, string $wizardAction,
+        ?string $loginName = null,
+    ) {
+        try {
+            $wizard = $this->wizardFactory->get($configID);
+            switch ($wizardAction) {
+                case 'guessPortAndTLS':
+                case 'guessBaseDN':
+                case 'detectEmailAttribute':
+                case 'detectUserDisplayNameAttribute':
+                case 'determineGroupMemberAssoc':
+                case 'determineUserObjectClasses':
+                case 'determineGroupObjectClasses':
+                case 'determineGroupsForUsers':
+                case 'determineGroupsForGroups':
+                case 'determineAttributes':
+                case 'getUserListFilter':
+                case 'getUserLoginFilter':
+                case 'getGroupFilter':
+                case 'countUsers':
+                case 'countGroups':
+                case 'countInBaseDN':
+                    try {
+                        $result = $wizard->$wizardAction();
+                        if ($result !== false) {
+                            return new DataResponse($result->getResultArray());
+                        }
+                    } catch (\Exception $e) {
+                        throw new OCSException($e->getMessage());
+                    }
+                    throw new OCSException();
 
-				case 'testLoginName':
-					try {
-						if ($loginName === null || $loginName === '') {
-							throw new OCSException('No login name passed');
-						}
-						$result = $wizard->$wizardAction($loginName);
-						if ($result !== false) {
-							return new DataResponse($result->getResultArray());
-						}
-					} catch (\Exception $e) {
-						throw new OCSException($e->getMessage());
-					}
-					throw new OCSException();
+                case 'testLoginName':
+                    try {
+                        if ($loginName === null || $loginName === '') {
+                            throw new OCSException('No login name passed');
+                        }
+                        $result = $wizard->$wizardAction($loginName);
+                        if ($result !== false) {
+                            return new DataResponse($result->getResultArray());
+                        }
+                    } catch (\Exception $e) {
+                        throw new OCSException($e->getMessage());
+                    }
+                    throw new OCSException();
 
-				default:
-					throw new OCSException($this->l->t('Action does not exist'));
-					break;
-			}
-		} catch (OCSException $e) {
-			throw $e;
-		} catch (\Exception $e) {
-			$this->logger->error($e->getMessage(), ['exception' => $e]);
-			throw new OCSException('An issue occurred.');
-		}
-	}
+                default:
+                    throw new OCSException($this->l->t('Action does not exist'));
+                    break;
+            }
+        } catch (OCSException $e) {
+            throw $e;
+        } catch (\Exception $e) {
+            $this->logger->error($e->getMessage(), ['exception' => $e]);
+            throw new OCSException('An issue occurred.');
+        }
+    }
 
-	/**
-	 * Clear user or group mappings
-	 *
-	 * @param 'user'|'group' $subject Whether to clear group or user mappings
-	 * @return DataResponse<Http::STATUS_OK, list<empty>, array{}>
-	 * @throws OCSException
-	 *
-	 * 200: Clearing was done successfuly
-	 */
-	#[AuthorizedAdminSetting(settings: Admin::class)]
-	#[ApiRoute(verb: 'POST', url: '/api/v1/wizard/clearMappings')]
-	public function clearMappings(
-		string $subject,
-	) {
-		$mapping = null;
-		try {
-			if ($subject === 'user') {
-				$mapping = Server::get(UserMapping::class);
-				$result = $mapping->clearCb(
-					function (string $uid): void {
-						$this->eventDispatcher->dispatchTyped(new BeforeUserIdUnassignedEvent($uid));
-						/** @psalm-suppress UndefinedInterfaceMethod For now we have to emit, will be removed when all hooks are removed */
-						Server::get(IUserManager::class)->emit('\OC\User', 'preUnassignedUserId', [$uid]);
-					},
-					function (string $uid): void {
-						$this->eventDispatcher->dispatchTyped(new UserIdUnassignedEvent($uid));
-						/** @psalm-suppress UndefinedInterfaceMethod For now we have to emit, will be removed when all hooks are removed */
-						Server::get(IUserManager::class)->emit('\OC\User', 'postUnassignedUserId', [$uid]);
-					}
-				);
-			} elseif ($subject === 'group') {
-				$mapping = Server::get(GroupMapping::class);
-				$result = $mapping->clear();
-			} else {
-				throw new OCSException($this->l->t('Unsupported subject ' . $subject));
-			}
+    /**
+     * Clear user or group mappings
+     *
+     * @param 'user'|'group' $subject Whether to clear group or user mappings
+     * @return DataResponse<Http::STATUS_OK, list<empty>, array{}>
+     * @throws OCSException
+     *
+     * 200: Clearing was done successfuly
+     */
+    #[AuthorizedAdminSetting(settings: Admin::class)]
+    #[ApiRoute(verb: 'POST', url: '/api/v1/wizard/clearMappings')]
+    public function clearMappings(
+        string $subject,
+    ) {
+        $mapping = null;
+        try {
+            if ($subject === 'user') {
+                $mapping = Server::get(UserMapping::class);
+                $result = $mapping->clearCb(
+                    function (string $uid): void {
+                        $this->eventDispatcher->dispatchTyped(new BeforeUserIdUnassignedEvent($uid));
+                        /** @psalm-suppress UndefinedInterfaceMethod For now we have to emit, will be removed when all hooks are removed */
+                        Server::get(IUserManager::class)->emit('\OC\User', 'preUnassignedUserId', [$uid]);
+                    },
+                    function (string $uid): void {
+                        $this->eventDispatcher->dispatchTyped(new UserIdUnassignedEvent($uid));
+                        /** @psalm-suppress UndefinedInterfaceMethod For now we have to emit, will be removed when all hooks are removed */
+                        Server::get(IUserManager::class)->emit('\OC\User', 'postUnassignedUserId', [$uid]);
+                    }
+                );
+            } elseif ($subject === 'group') {
+                $mapping = Server::get(GroupMapping::class);
+                $result = $mapping->clear();
+            } else {
+                throw new OCSException($this->l->t('Unsupported subject ' . $subject));
+            }
 
-			if (!$result) {
-				throw new OCSException($this->l->t('Failed to clear the mappings.'));
-			}
-			return new DataResponse();
-		} catch (\Exception $e) {
-			$this->logger->error($e->getMessage(), ['exception' => $e]);
-			throw new OCSException('An issue occurred.');
-		}
-	}
+            if (!$result) {
+                throw new OCSException($this->l->t('Failed to clear the mappings.'));
+            }
+            return new DataResponse();
+        } catch (\Exception $e) {
+            $this->logger->error($e->getMessage(), ['exception' => $e]);
+            throw new OCSException('An issue occurred.');
+        }
+    }
 }

Spacing +3 added lines, -3 removed lines

@@ -134,12 +134,12 @@ 
 			if ($subject === 'user') {
 				$mapping = Server::get(UserMapping::class);
 				$result = $mapping->clearCb(
-					function (string $uid): void {
+					function(string $uid): void {
 						$this->eventDispatcher->dispatchTyped(new BeforeUserIdUnassignedEvent($uid));
 						/** @psalm-suppress UndefinedInterfaceMethod For now we have to emit, will be removed when all hooks are removed */
 						Server::get(IUserManager::class)->emit('\OC\User', 'preUnassignedUserId', [$uid]);
 					},
-					function (string $uid): void {
+					function(string $uid): void {
 						$this->eventDispatcher->dispatchTyped(new UserIdUnassignedEvent($uid));
 						/** @psalm-suppress UndefinedInterfaceMethod For now we have to emit, will be removed when all hooks are removed */
 						Server::get(IUserManager::class)->emit('\OC\User', 'postUnassignedUserId', [$uid]);
@@ -149,7 +149,7 @@ 
 				$mapping = Server::get(GroupMapping::class);
 				$result = $mapping->clear();
 			} else {
-				throw new OCSException($this->l->t('Unsupported subject ' . $subject));
+				throw new OCSException($this->l->t('Unsupported subject '.$subject));
 			}
 
 			if (!$result) {

apps/user_ldap/lib/WizardResult.php

Indentation +47 added lines, -47 removed lines

@@ -11,51 +11,51 @@
 namespace OCA\User_LDAP;
 
 class WizardResult {
-	/**
-	 * @var array<string,int|string|int[]|string[]>
-	 */
-	protected array $changes = [];
-	/**
-	 * @var array<string,string[]>
-	 */
-	protected array $options = [];
-	protected bool $markedChange = false;
-
-	/**
-	 * @param int|string|int[]|string[] $value
-	 */
-	public function addChange(string $key, int|string|array $value): void {
-		$this->changes[$key] = $value;
-	}
-
-
-	public function markChange(): void {
-		$this->markedChange = true;
-	}
-
-	/**
-	 * @param string|string[] $values
-	 */
-	public function addOptions(string $key, string|array $values): void {
-		if (!is_array($values)) {
-			$values = [$values];
-		}
-		$this->options[$key] = $values;
-	}
-
-	public function hasChanges(): bool {
-		return (count($this->changes) > 0 || $this->markedChange);
-	}
-
-	/**
-	 * @return array{changes:array<string,int|string|int[]|string[]>,options?:array<string,string[]>}
-	 */
-	public function getResultArray(): array {
-		$result = [];
-		$result['changes'] = $this->changes;
-		if (count($this->options) > 0) {
-			$result['options'] = $this->options;
-		}
-		return $result;
-	}
+    /**
+     * @var array<string,int|string|int[]|string[]>
+     */
+    protected array $changes = [];
+    /**
+     * @var array<string,string[]>
+     */
+    protected array $options = [];
+    protected bool $markedChange = false;
+
+    /**
+     * @param int|string|int[]|string[] $value
+     */
+    public function addChange(string $key, int|string|array $value): void {
+        $this->changes[$key] = $value;
+    }
+
+
+    public function markChange(): void {
+        $this->markedChange = true;
+    }
+
+    /**
+     * @param string|string[] $values
+     */
+    public function addOptions(string $key, string|array $values): void {
+        if (!is_array($values)) {
+            $values = [$values];
+        }
+        $this->options[$key] = $values;
+    }
+
+    public function hasChanges(): bool {
+        return (count($this->changes) > 0 || $this->markedChange);
+    }
+
+    /**
+     * @return array{changes:array<string,int|string|int[]|string[]>,options?:array<string,string[]>}
+     */
+    public function getResultArray(): array {
+        $result = [];
+        $result['changes'] = $this->changes;
+        if (count($this->options) > 0) {
+            $result['options'] = $this->options;
+        }
+        return $result;
+    }
 }

Spacing +2 added lines, -2 removed lines

@@ -24,7 +24,7 @@ 
 	/**
 	 * @param int|string|int[]|string[] $value
 	 */
-	public function addChange(string $key, int|string|array $value): void {
+	public function addChange(string $key, int | string | array $value): void {
 		$this->changes[$key] = $value;
 	}
 
@@ -36,7 +36,7 @@ 
 	/**
 	 * @param string|string[] $values
 	 */
-	public function addOptions(string $key, string|array $values): void {
+	public function addOptions(string $key, string | array $values): void {
 		if (!is_array($values)) {
 			$values = [$values];
 		}

apps/user_ldap/lib/WizardFactory.php

Indentation +14 added lines, -14 removed lines

@@ -10,22 +10,22 @@
 namespace OCA\User_LDAP;
 
 class WizardFactory {
-	public function __construct(
-		private ILDAPWrapper $ldap,
-		private AccessFactory $accessFactory,
-	) {
-	}
+    public function __construct(
+        private ILDAPWrapper $ldap,
+        private AccessFactory $accessFactory,
+    ) {
+    }
 
-	public function get(string $configID): Wizard {
-		$configuration = new Configuration($configID);
+    public function get(string $configID): Wizard {
+        $configuration = new Configuration($configID);
 
-		$connection = new Connection($this->ldap, $configID, null);
-		$connection->setConfiguration($configuration->getConfiguration());
-		$connection->ldapConfigurationActive = (string)true;
-		$connection->setIgnoreValidation(true);
+        $connection = new Connection($this->ldap, $configID, null);
+        $connection->setConfiguration($configuration->getConfiguration());
+        $connection->ldapConfigurationActive = (string)true;
+        $connection->setIgnoreValidation(true);
 
-		$access = $this->accessFactory->get($connection);
+        $access = $this->accessFactory->get($connection);
 
-		return new Wizard($configuration, $this->ldap, $access);
-	}
+        return new Wizard($configuration, $this->ldap, $access);
+    }
 }

Spacing +1 added lines, -1 removed lines

@@ -21,7 +21,7 @@
 
 		$connection = new Connection($this->ldap, $configID, null);
 		$connection->setConfiguration($configuration->getConfiguration());
-		$connection->ldapConfigurationActive = (string)true;
+		$connection->ldapConfigurationActive = (string) true;
 		$connection->setIgnoreValidation(true);
 
 		$access = $this->accessFactory->get($connection);

apps/user_ldap/appinfo/routes.php

Indentation +6 added lines, -6 removed lines

@@ -9,10 +9,10 @@
  */
 
 return [
-	'routes' => [
-		['name' => 'renewPassword#tryRenewPassword', 'url' => '/renewpassword', 'verb' => 'POST'],
-		['name' => 'renewPassword#showRenewPasswordForm', 'url' => '/renewpassword/{user}', 'verb' => 'GET'],
-		['name' => 'renewPassword#cancel', 'url' => '/renewpassword/cancel', 'verb' => 'GET'],
-		['name' => 'renewPassword#showLoginFormInvalidPassword', 'url' => '/renewpassword/invalidlogin/{user}', 'verb' => 'GET'],
-	],
+    'routes' => [
+        ['name' => 'renewPassword#tryRenewPassword', 'url' => '/renewpassword', 'verb' => 'POST'],
+        ['name' => 'renewPassword#showRenewPasswordForm', 'url' => '/renewpassword/{user}', 'verb' => 'GET'],
+        ['name' => 'renewPassword#cancel', 'url' => '/renewpassword/cancel', 'verb' => 'GET'],
+        ['name' => 'renewPassword#showLoginFormInvalidPassword', 'url' => '/renewpassword/invalidlogin/{user}', 'verb' => 'GET'],
+    ],
 ];

apps/user_ldap/composer/composer/autoload_static.php

Spacing +99 added lines, -99 removed lines

@@ -6,118 +6,118 @@
 
 class ComposerStaticInitUser_LDAP
 {
-    public static $prefixLengthsPsr4 = array (
+    public static $prefixLengthsPsr4 = array(
         'O' => 
-        array (
+        array(
             'OCA\\User_LDAP\\' => 14,
         ),
     );
 
-    public static $prefixDirsPsr4 = array (
+    public static $prefixDirsPsr4 = array(
         'OCA\\User_LDAP\\' => 
-        array (
-            0 => __DIR__ . '/..' . '/../lib',
+        array(
+            0 => __DIR__.'/..'.'/../lib',
         ),
     );
 
-    public static $classMap = array (
-        'Composer\\InstalledVersions' => __DIR__ . '/..' . '/composer/InstalledVersions.php',
-        'OCA\\User_LDAP\\Access' => __DIR__ . '/..' . '/../lib/Access.php',
-        'OCA\\User_LDAP\\AccessFactory' => __DIR__ . '/..' . '/../lib/AccessFactory.php',
-        'OCA\\User_LDAP\\AppInfo\\Application' => __DIR__ . '/..' . '/../lib/AppInfo/Application.php',
-        'OCA\\User_LDAP\\BackendUtility' => __DIR__ . '/..' . '/../lib/BackendUtility.php',
-        'OCA\\User_LDAP\\Command\\CheckGroup' => __DIR__ . '/..' . '/../lib/Command/CheckGroup.php',
-        'OCA\\User_LDAP\\Command\\CheckUser' => __DIR__ . '/..' . '/../lib/Command/CheckUser.php',
-        'OCA\\User_LDAP\\Command\\CreateEmptyConfig' => __DIR__ . '/..' . '/../lib/Command/CreateEmptyConfig.php',
-        'OCA\\User_LDAP\\Command\\DeleteConfig' => __DIR__ . '/..' . '/../lib/Command/DeleteConfig.php',
-        'OCA\\User_LDAP\\Command\\PromoteGroup' => __DIR__ . '/..' . '/../lib/Command/PromoteGroup.php',
-        'OCA\\User_LDAP\\Command\\ResetGroup' => __DIR__ . '/..' . '/../lib/Command/ResetGroup.php',
-        'OCA\\User_LDAP\\Command\\ResetUser' => __DIR__ . '/..' . '/../lib/Command/ResetUser.php',
-        'OCA\\User_LDAP\\Command\\Search' => __DIR__ . '/..' . '/../lib/Command/Search.php',
-        'OCA\\User_LDAP\\Command\\SetConfig' => __DIR__ . '/..' . '/../lib/Command/SetConfig.php',
-        'OCA\\User_LDAP\\Command\\ShowConfig' => __DIR__ . '/..' . '/../lib/Command/ShowConfig.php',
-        'OCA\\User_LDAP\\Command\\ShowRemnants' => __DIR__ . '/..' . '/../lib/Command/ShowRemnants.php',
-        'OCA\\User_LDAP\\Command\\TestConfig' => __DIR__ . '/..' . '/../lib/Command/TestConfig.php',
-        'OCA\\User_LDAP\\Command\\TestUserSettings' => __DIR__ . '/..' . '/../lib/Command/TestUserSettings.php',
-        'OCA\\User_LDAP\\Command\\UpdateUUID' => __DIR__ . '/..' . '/../lib/Command/UpdateUUID.php',
-        'OCA\\User_LDAP\\Configuration' => __DIR__ . '/..' . '/../lib/Configuration.php',
-        'OCA\\User_LDAP\\Connection' => __DIR__ . '/..' . '/../lib/Connection.php',
-        'OCA\\User_LDAP\\ConnectionFactory' => __DIR__ . '/..' . '/../lib/ConnectionFactory.php',
-        'OCA\\User_LDAP\\Controller\\ConfigAPIController' => __DIR__ . '/..' . '/../lib/Controller/ConfigAPIController.php',
-        'OCA\\User_LDAP\\Controller\\RenewPasswordController' => __DIR__ . '/..' . '/../lib/Controller/RenewPasswordController.php',
-        'OCA\\User_LDAP\\Controller\\WizardController' => __DIR__ . '/..' . '/../lib/Controller/WizardController.php',
-        'OCA\\User_LDAP\\DataCollector\\LdapDataCollector' => __DIR__ . '/..' . '/../lib/DataCollector/LdapDataCollector.php',
-        'OCA\\User_LDAP\\Db\\GroupMembership' => __DIR__ . '/..' . '/../lib/Db/GroupMembership.php',
-        'OCA\\User_LDAP\\Db\\GroupMembershipMapper' => __DIR__ . '/..' . '/../lib/Db/GroupMembershipMapper.php',
-        'OCA\\User_LDAP\\Events\\GroupBackendRegistered' => __DIR__ . '/..' . '/../lib/Events/GroupBackendRegistered.php',
-        'OCA\\User_LDAP\\Events\\UserBackendRegistered' => __DIR__ . '/..' . '/../lib/Events/UserBackendRegistered.php',
-        'OCA\\User_LDAP\\Exceptions\\AttributeNotSet' => __DIR__ . '/..' . '/../lib/Exceptions/AttributeNotSet.php',
-        'OCA\\User_LDAP\\Exceptions\\ConfigurationIssueException' => __DIR__ . '/..' . '/../lib/Exceptions/ConfigurationIssueException.php',
-        'OCA\\User_LDAP\\Exceptions\\ConstraintViolationException' => __DIR__ . '/..' . '/../lib/Exceptions/ConstraintViolationException.php',
-        'OCA\\User_LDAP\\Exceptions\\NoMoreResults' => __DIR__ . '/..' . '/../lib/Exceptions/NoMoreResults.php',
-        'OCA\\User_LDAP\\Exceptions\\NotOnLDAP' => __DIR__ . '/..' . '/../lib/Exceptions/NotOnLDAP.php',
-        'OCA\\User_LDAP\\GroupPluginManager' => __DIR__ . '/..' . '/../lib/GroupPluginManager.php',
-        'OCA\\User_LDAP\\Group_LDAP' => __DIR__ . '/..' . '/../lib/Group_LDAP.php',
-        'OCA\\User_LDAP\\Group_Proxy' => __DIR__ . '/..' . '/../lib/Group_Proxy.php',
-        'OCA\\User_LDAP\\Handler\\ExtStorageConfigHandler' => __DIR__ . '/..' . '/../lib/Handler/ExtStorageConfigHandler.php',
-        'OCA\\User_LDAP\\Helper' => __DIR__ . '/..' . '/../lib/Helper.php',
-        'OCA\\User_LDAP\\IGroupLDAP' => __DIR__ . '/..' . '/../lib/IGroupLDAP.php',
-        'OCA\\User_LDAP\\ILDAPGroupPlugin' => __DIR__ . '/..' . '/../lib/ILDAPGroupPlugin.php',
-        'OCA\\User_LDAP\\ILDAPUserPlugin' => __DIR__ . '/..' . '/../lib/ILDAPUserPlugin.php',
-        'OCA\\User_LDAP\\ILDAPWrapper' => __DIR__ . '/..' . '/../lib/ILDAPWrapper.php',
-        'OCA\\User_LDAP\\IUserLDAP' => __DIR__ . '/..' . '/../lib/IUserLDAP.php',
-        'OCA\\User_LDAP\\Jobs\\CleanUp' => __DIR__ . '/..' . '/../lib/Jobs/CleanUp.php',
-        'OCA\\User_LDAP\\Jobs\\Sync' => __DIR__ . '/..' . '/../lib/Jobs/Sync.php',
-        'OCA\\User_LDAP\\Jobs\\UpdateGroups' => __DIR__ . '/..' . '/../lib/Jobs/UpdateGroups.php',
-        'OCA\\User_LDAP\\LDAP' => __DIR__ . '/..' . '/../lib/LDAP.php',
-        'OCA\\User_LDAP\\LDAPProvider' => __DIR__ . '/..' . '/../lib/LDAPProvider.php',
-        'OCA\\User_LDAP\\LDAPProviderFactory' => __DIR__ . '/..' . '/../lib/LDAPProviderFactory.php',
-        'OCA\\User_LDAP\\LDAPUtility' => __DIR__ . '/..' . '/../lib/LDAPUtility.php',
-        'OCA\\User_LDAP\\LoginListener' => __DIR__ . '/..' . '/../lib/LoginListener.php',
-        'OCA\\User_LDAP\\Mapping\\AbstractMapping' => __DIR__ . '/..' . '/../lib/Mapping/AbstractMapping.php',
-        'OCA\\User_LDAP\\Mapping\\GroupMapping' => __DIR__ . '/..' . '/../lib/Mapping/GroupMapping.php',
-        'OCA\\User_LDAP\\Mapping\\UserMapping' => __DIR__ . '/..' . '/../lib/Mapping/UserMapping.php',
-        'OCA\\User_LDAP\\Migration\\GroupMappingMigration' => __DIR__ . '/..' . '/../lib/Migration/GroupMappingMigration.php',
-        'OCA\\User_LDAP\\Migration\\RemoveRefreshTime' => __DIR__ . '/..' . '/../lib/Migration/RemoveRefreshTime.php',
-        'OCA\\User_LDAP\\Migration\\SetDefaultProvider' => __DIR__ . '/..' . '/../lib/Migration/SetDefaultProvider.php',
-        'OCA\\User_LDAP\\Migration\\UUIDFix' => __DIR__ . '/..' . '/../lib/Migration/UUIDFix.php',
-        'OCA\\User_LDAP\\Migration\\UUIDFixGroup' => __DIR__ . '/..' . '/../lib/Migration/UUIDFixGroup.php',
-        'OCA\\User_LDAP\\Migration\\UUIDFixInsert' => __DIR__ . '/..' . '/../lib/Migration/UUIDFixInsert.php',
-        'OCA\\User_LDAP\\Migration\\UUIDFixUser' => __DIR__ . '/..' . '/../lib/Migration/UUIDFixUser.php',
-        'OCA\\User_LDAP\\Migration\\UnsetDefaultProvider' => __DIR__ . '/..' . '/../lib/Migration/UnsetDefaultProvider.php',
-        'OCA\\User_LDAP\\Migration\\Version1010Date20200630192842' => __DIR__ . '/..' . '/../lib/Migration/Version1010Date20200630192842.php',
-        'OCA\\User_LDAP\\Migration\\Version1120Date20210917155206' => __DIR__ . '/..' . '/../lib/Migration/Version1120Date20210917155206.php',
-        'OCA\\User_LDAP\\Migration\\Version1130Date20211102154716' => __DIR__ . '/..' . '/../lib/Migration/Version1130Date20211102154716.php',
-        'OCA\\User_LDAP\\Migration\\Version1130Date20220110154717' => __DIR__ . '/..' . '/../lib/Migration/Version1130Date20220110154717.php',
-        'OCA\\User_LDAP\\Migration\\Version1130Date20220110154718' => __DIR__ . '/..' . '/../lib/Migration/Version1130Date20220110154718.php',
-        'OCA\\User_LDAP\\Migration\\Version1130Date20220110154719' => __DIR__ . '/..' . '/../lib/Migration/Version1130Date20220110154719.php',
-        'OCA\\User_LDAP\\Migration\\Version1141Date20220323143801' => __DIR__ . '/..' . '/../lib/Migration/Version1141Date20220323143801.php',
-        'OCA\\User_LDAP\\Migration\\Version1190Date20230706134108' => __DIR__ . '/..' . '/../lib/Migration/Version1190Date20230706134108.php',
-        'OCA\\User_LDAP\\Migration\\Version1190Date20230706134109' => __DIR__ . '/..' . '/../lib/Migration/Version1190Date20230706134109.php',
-        'OCA\\User_LDAP\\Notification\\Notifier' => __DIR__ . '/..' . '/../lib/Notification/Notifier.php',
-        'OCA\\User_LDAP\\PagedResults\\TLinkId' => __DIR__ . '/..' . '/../lib/PagedResults/TLinkId.php',
-        'OCA\\User_LDAP\\Proxy' => __DIR__ . '/..' . '/../lib/Proxy.php',
-        'OCA\\User_LDAP\\Service\\BirthdateParserService' => __DIR__ . '/..' . '/../lib/Service/BirthdateParserService.php',
-        'OCA\\User_LDAP\\Service\\UpdateGroupsService' => __DIR__ . '/..' . '/../lib/Service/UpdateGroupsService.php',
-        'OCA\\User_LDAP\\Settings\\Admin' => __DIR__ . '/..' . '/../lib/Settings/Admin.php',
-        'OCA\\User_LDAP\\Settings\\Section' => __DIR__ . '/..' . '/../lib/Settings/Section.php',
-        'OCA\\User_LDAP\\SetupChecks\\LdapConnection' => __DIR__ . '/..' . '/../lib/SetupChecks/LdapConnection.php',
-        'OCA\\User_LDAP\\SetupChecks\\LdapInvalidUuids' => __DIR__ . '/..' . '/../lib/SetupChecks/LdapInvalidUuids.php',
-        'OCA\\User_LDAP\\UserPluginManager' => __DIR__ . '/..' . '/../lib/UserPluginManager.php',
-        'OCA\\User_LDAP\\User\\DeletedUsersIndex' => __DIR__ . '/..' . '/../lib/User/DeletedUsersIndex.php',
-        'OCA\\User_LDAP\\User\\Manager' => __DIR__ . '/..' . '/../lib/User/Manager.php',
-        'OCA\\User_LDAP\\User\\OfflineUser' => __DIR__ . '/..' . '/../lib/User/OfflineUser.php',
-        'OCA\\User_LDAP\\User\\User' => __DIR__ . '/..' . '/../lib/User/User.php',
-        'OCA\\User_LDAP\\User_LDAP' => __DIR__ . '/..' . '/../lib/User_LDAP.php',
-        'OCA\\User_LDAP\\User_Proxy' => __DIR__ . '/..' . '/../lib/User_Proxy.php',
-        'OCA\\User_LDAP\\Wizard' => __DIR__ . '/..' . '/../lib/Wizard.php',
-        'OCA\\User_LDAP\\WizardFactory' => __DIR__ . '/..' . '/../lib/WizardFactory.php',
-        'OCA\\User_LDAP\\WizardResult' => __DIR__ . '/..' . '/../lib/WizardResult.php',
+    public static $classMap = array(
+        'Composer\\InstalledVersions' => __DIR__.'/..'.'/composer/InstalledVersions.php',
+        'OCA\\User_LDAP\\Access' => __DIR__.'/..'.'/../lib/Access.php',
+        'OCA\\User_LDAP\\AccessFactory' => __DIR__.'/..'.'/../lib/AccessFactory.php',
+        'OCA\\User_LDAP\\AppInfo\\Application' => __DIR__.'/..'.'/../lib/AppInfo/Application.php',
+        'OCA\\User_LDAP\\BackendUtility' => __DIR__.'/..'.'/../lib/BackendUtility.php',
+        'OCA\\User_LDAP\\Command\\CheckGroup' => __DIR__.'/..'.'/../lib/Command/CheckGroup.php',
+        'OCA\\User_LDAP\\Command\\CheckUser' => __DIR__.'/..'.'/../lib/Command/CheckUser.php',
+        'OCA\\User_LDAP\\Command\\CreateEmptyConfig' => __DIR__.'/..'.'/../lib/Command/CreateEmptyConfig.php',
+        'OCA\\User_LDAP\\Command\\DeleteConfig' => __DIR__.'/..'.'/../lib/Command/DeleteConfig.php',
+        'OCA\\User_LDAP\\Command\\PromoteGroup' => __DIR__.'/..'.'/../lib/Command/PromoteGroup.php',
+        'OCA\\User_LDAP\\Command\\ResetGroup' => __DIR__.'/..'.'/../lib/Command/ResetGroup.php',
+        'OCA\\User_LDAP\\Command\\ResetUser' => __DIR__.'/..'.'/../lib/Command/ResetUser.php',
+        'OCA\\User_LDAP\\Command\\Search' => __DIR__.'/..'.'/../lib/Command/Search.php',
+        'OCA\\User_LDAP\\Command\\SetConfig' => __DIR__.'/..'.'/../lib/Command/SetConfig.php',
+        'OCA\\User_LDAP\\Command\\ShowConfig' => __DIR__.'/..'.'/../lib/Command/ShowConfig.php',
+        'OCA\\User_LDAP\\Command\\ShowRemnants' => __DIR__.'/..'.'/../lib/Command/ShowRemnants.php',
+        'OCA\\User_LDAP\\Command\\TestConfig' => __DIR__.'/..'.'/../lib/Command/TestConfig.php',
+        'OCA\\User_LDAP\\Command\\TestUserSettings' => __DIR__.'/..'.'/../lib/Command/TestUserSettings.php',
+        'OCA\\User_LDAP\\Command\\UpdateUUID' => __DIR__.'/..'.'/../lib/Command/UpdateUUID.php',
+        'OCA\\User_LDAP\\Configuration' => __DIR__.'/..'.'/../lib/Configuration.php',
+        'OCA\\User_LDAP\\Connection' => __DIR__.'/..'.'/../lib/Connection.php',
+        'OCA\\User_LDAP\\ConnectionFactory' => __DIR__.'/..'.'/../lib/ConnectionFactory.php',
+        'OCA\\User_LDAP\\Controller\\ConfigAPIController' => __DIR__.'/..'.'/../lib/Controller/ConfigAPIController.php',
+        'OCA\\User_LDAP\\Controller\\RenewPasswordController' => __DIR__.'/..'.'/../lib/Controller/RenewPasswordController.php',
+        'OCA\\User_LDAP\\Controller\\WizardController' => __DIR__.'/..'.'/../lib/Controller/WizardController.php',
+        'OCA\\User_LDAP\\DataCollector\\LdapDataCollector' => __DIR__.'/..'.'/../lib/DataCollector/LdapDataCollector.php',
+        'OCA\\User_LDAP\\Db\\GroupMembership' => __DIR__.'/..'.'/../lib/Db/GroupMembership.php',
+        'OCA\\User_LDAP\\Db\\GroupMembershipMapper' => __DIR__.'/..'.'/../lib/Db/GroupMembershipMapper.php',
+        'OCA\\User_LDAP\\Events\\GroupBackendRegistered' => __DIR__.'/..'.'/../lib/Events/GroupBackendRegistered.php',
+        'OCA\\User_LDAP\\Events\\UserBackendRegistered' => __DIR__.'/..'.'/../lib/Events/UserBackendRegistered.php',
+        'OCA\\User_LDAP\\Exceptions\\AttributeNotSet' => __DIR__.'/..'.'/../lib/Exceptions/AttributeNotSet.php',
+        'OCA\\User_LDAP\\Exceptions\\ConfigurationIssueException' => __DIR__.'/..'.'/../lib/Exceptions/ConfigurationIssueException.php',
+        'OCA\\User_LDAP\\Exceptions\\ConstraintViolationException' => __DIR__.'/..'.'/../lib/Exceptions/ConstraintViolationException.php',
+        'OCA\\User_LDAP\\Exceptions\\NoMoreResults' => __DIR__.'/..'.'/../lib/Exceptions/NoMoreResults.php',
+        'OCA\\User_LDAP\\Exceptions\\NotOnLDAP' => __DIR__.'/..'.'/../lib/Exceptions/NotOnLDAP.php',
+        'OCA\\User_LDAP\\GroupPluginManager' => __DIR__.'/..'.'/../lib/GroupPluginManager.php',
+        'OCA\\User_LDAP\\Group_LDAP' => __DIR__.'/..'.'/../lib/Group_LDAP.php',
+        'OCA\\User_LDAP\\Group_Proxy' => __DIR__.'/..'.'/../lib/Group_Proxy.php',
+        'OCA\\User_LDAP\\Handler\\ExtStorageConfigHandler' => __DIR__.'/..'.'/../lib/Handler/ExtStorageConfigHandler.php',
+        'OCA\\User_LDAP\\Helper' => __DIR__.'/..'.'/../lib/Helper.php',
+        'OCA\\User_LDAP\\IGroupLDAP' => __DIR__.'/..'.'/../lib/IGroupLDAP.php',
+        'OCA\\User_LDAP\\ILDAPGroupPlugin' => __DIR__.'/..'.'/../lib/ILDAPGroupPlugin.php',
+        'OCA\\User_LDAP\\ILDAPUserPlugin' => __DIR__.'/..'.'/../lib/ILDAPUserPlugin.php',
+        'OCA\\User_LDAP\\ILDAPWrapper' => __DIR__.'/..'.'/../lib/ILDAPWrapper.php',
+        'OCA\\User_LDAP\\IUserLDAP' => __DIR__.'/..'.'/../lib/IUserLDAP.php',
+        'OCA\\User_LDAP\\Jobs\\CleanUp' => __DIR__.'/..'.'/../lib/Jobs/CleanUp.php',
+        'OCA\\User_LDAP\\Jobs\\Sync' => __DIR__.'/..'.'/../lib/Jobs/Sync.php',
+        'OCA\\User_LDAP\\Jobs\\UpdateGroups' => __DIR__.'/..'.'/../lib/Jobs/UpdateGroups.php',
+        'OCA\\User_LDAP\\LDAP' => __DIR__.'/..'.'/../lib/LDAP.php',
+        'OCA\\User_LDAP\\LDAPProvider' => __DIR__.'/..'.'/../lib/LDAPProvider.php',
+        'OCA\\User_LDAP\\LDAPProviderFactory' => __DIR__.'/..'.'/../lib/LDAPProviderFactory.php',
+        'OCA\\User_LDAP\\LDAPUtility' => __DIR__.'/..'.'/../lib/LDAPUtility.php',
+        'OCA\\User_LDAP\\LoginListener' => __DIR__.'/..'.'/../lib/LoginListener.php',
+        'OCA\\User_LDAP\\Mapping\\AbstractMapping' => __DIR__.'/..'.'/../lib/Mapping/AbstractMapping.php',
+        'OCA\\User_LDAP\\Mapping\\GroupMapping' => __DIR__.'/..'.'/../lib/Mapping/GroupMapping.php',
+        'OCA\\User_LDAP\\Mapping\\UserMapping' => __DIR__.'/..'.'/../lib/Mapping/UserMapping.php',
+        'OCA\\User_LDAP\\Migration\\GroupMappingMigration' => __DIR__.'/..'.'/../lib/Migration/GroupMappingMigration.php',
+        'OCA\\User_LDAP\\Migration\\RemoveRefreshTime' => __DIR__.'/..'.'/../lib/Migration/RemoveRefreshTime.php',
+        'OCA\\User_LDAP\\Migration\\SetDefaultProvider' => __DIR__.'/..'.'/../lib/Migration/SetDefaultProvider.php',
+        'OCA\\User_LDAP\\Migration\\UUIDFix' => __DIR__.'/..'.'/../lib/Migration/UUIDFix.php',
+        'OCA\\User_LDAP\\Migration\\UUIDFixGroup' => __DIR__.'/..'.'/../lib/Migration/UUIDFixGroup.php',
+        'OCA\\User_LDAP\\Migration\\UUIDFixInsert' => __DIR__.'/..'.'/../lib/Migration/UUIDFixInsert.php',
+        'OCA\\User_LDAP\\Migration\\UUIDFixUser' => __DIR__.'/..'.'/../lib/Migration/UUIDFixUser.php',
+        'OCA\\User_LDAP\\Migration\\UnsetDefaultProvider' => __DIR__.'/..'.'/../lib/Migration/UnsetDefaultProvider.php',
+        'OCA\\User_LDAP\\Migration\\Version1010Date20200630192842' => __DIR__.'/..'.'/../lib/Migration/Version1010Date20200630192842.php',
+        'OCA\\User_LDAP\\Migration\\Version1120Date20210917155206' => __DIR__.'/..'.'/../lib/Migration/Version1120Date20210917155206.php',
+        'OCA\\User_LDAP\\Migration\\Version1130Date20211102154716' => __DIR__.'/..'.'/../lib/Migration/Version1130Date20211102154716.php',
+        'OCA\\User_LDAP\\Migration\\Version1130Date20220110154717' => __DIR__.'/..'.'/../lib/Migration/Version1130Date20220110154717.php',
+        'OCA\\User_LDAP\\Migration\\Version1130Date20220110154718' => __DIR__.'/..'.'/../lib/Migration/Version1130Date20220110154718.php',
+        'OCA\\User_LDAP\\Migration\\Version1130Date20220110154719' => __DIR__.'/..'.'/../lib/Migration/Version1130Date20220110154719.php',
+        'OCA\\User_LDAP\\Migration\\Version1141Date20220323143801' => __DIR__.'/..'.'/../lib/Migration/Version1141Date20220323143801.php',
+        'OCA\\User_LDAP\\Migration\\Version1190Date20230706134108' => __DIR__.'/..'.'/../lib/Migration/Version1190Date20230706134108.php',
+        'OCA\\User_LDAP\\Migration\\Version1190Date20230706134109' => __DIR__.'/..'.'/../lib/Migration/Version1190Date20230706134109.php',
+        'OCA\\User_LDAP\\Notification\\Notifier' => __DIR__.'/..'.'/../lib/Notification/Notifier.php',
+        'OCA\\User_LDAP\\PagedResults\\TLinkId' => __DIR__.'/..'.'/../lib/PagedResults/TLinkId.php',
+        'OCA\\User_LDAP\\Proxy' => __DIR__.'/..'.'/../lib/Proxy.php',
+        'OCA\\User_LDAP\\Service\\BirthdateParserService' => __DIR__.'/..'.'/../lib/Service/BirthdateParserService.php',
+        'OCA\\User_LDAP\\Service\\UpdateGroupsService' => __DIR__.'/..'.'/../lib/Service/UpdateGroupsService.php',
+        'OCA\\User_LDAP\\Settings\\Admin' => __DIR__.'/..'.'/../lib/Settings/Admin.php',
+        'OCA\\User_LDAP\\Settings\\Section' => __DIR__.'/..'.'/../lib/Settings/Section.php',
+        'OCA\\User_LDAP\\SetupChecks\\LdapConnection' => __DIR__.'/..'.'/../lib/SetupChecks/LdapConnection.php',
+        'OCA\\User_LDAP\\SetupChecks\\LdapInvalidUuids' => __DIR__.'/..'.'/../lib/SetupChecks/LdapInvalidUuids.php',
+        'OCA\\User_LDAP\\UserPluginManager' => __DIR__.'/..'.'/../lib/UserPluginManager.php',
+        'OCA\\User_LDAP\\User\\DeletedUsersIndex' => __DIR__.'/..'.'/../lib/User/DeletedUsersIndex.php',
+        'OCA\\User_LDAP\\User\\Manager' => __DIR__.'/..'.'/../lib/User/Manager.php',
+        'OCA\\User_LDAP\\User\\OfflineUser' => __DIR__.'/..'.'/../lib/User/OfflineUser.php',
+        'OCA\\User_LDAP\\User\\User' => __DIR__.'/..'.'/../lib/User/User.php',
+        'OCA\\User_LDAP\\User_LDAP' => __DIR__.'/..'.'/../lib/User_LDAP.php',
+        'OCA\\User_LDAP\\User_Proxy' => __DIR__.'/..'.'/../lib/User_Proxy.php',
+        'OCA\\User_LDAP\\Wizard' => __DIR__.'/..'.'/../lib/Wizard.php',
+        'OCA\\User_LDAP\\WizardFactory' => __DIR__.'/..'.'/../lib/WizardFactory.php',
+        'OCA\\User_LDAP\\WizardResult' => __DIR__.'/..'.'/../lib/WizardResult.php',
     );
 
     public static function getInitializer(ClassLoader $loader)
     {
-        return \Closure::bind(function () use ($loader) {
+        return \Closure::bind(function() use ($loader) {
             $loader->prefixLengthsPsr4 = ComposerStaticInitUser_LDAP::$prefixLengthsPsr4;
             $loader->prefixDirsPsr4 = ComposerStaticInitUser_LDAP::$prefixDirsPsr4;
             $loader->classMap = ComposerStaticInitUser_LDAP::$classMap;

apps/user_ldap/composer/composer/autoload_classmap.php

Spacing +92 added lines, -92 removed lines

@@ -6,96 +6,96 @@
 $baseDir = $vendorDir;
 
 return array(
-    'Composer\\InstalledVersions' => $vendorDir . '/composer/InstalledVersions.php',
-    'OCA\\User_LDAP\\Access' => $baseDir . '/../lib/Access.php',
-    'OCA\\User_LDAP\\AccessFactory' => $baseDir . '/../lib/AccessFactory.php',
-    'OCA\\User_LDAP\\AppInfo\\Application' => $baseDir . '/../lib/AppInfo/Application.php',
-    'OCA\\User_LDAP\\BackendUtility' => $baseDir . '/../lib/BackendUtility.php',
-    'OCA\\User_LDAP\\Command\\CheckGroup' => $baseDir . '/../lib/Command/CheckGroup.php',
-    'OCA\\User_LDAP\\Command\\CheckUser' => $baseDir . '/../lib/Command/CheckUser.php',
-    'OCA\\User_LDAP\\Command\\CreateEmptyConfig' => $baseDir . '/../lib/Command/CreateEmptyConfig.php',
-    'OCA\\User_LDAP\\Command\\DeleteConfig' => $baseDir . '/../lib/Command/DeleteConfig.php',
-    'OCA\\User_LDAP\\Command\\PromoteGroup' => $baseDir . '/../lib/Command/PromoteGroup.php',
-    'OCA\\User_LDAP\\Command\\ResetGroup' => $baseDir . '/../lib/Command/ResetGroup.php',
-    'OCA\\User_LDAP\\Command\\ResetUser' => $baseDir . '/../lib/Command/ResetUser.php',
-    'OCA\\User_LDAP\\Command\\Search' => $baseDir . '/../lib/Command/Search.php',
-    'OCA\\User_LDAP\\Command\\SetConfig' => $baseDir . '/../lib/Command/SetConfig.php',
-    'OCA\\User_LDAP\\Command\\ShowConfig' => $baseDir . '/../lib/Command/ShowConfig.php',
-    'OCA\\User_LDAP\\Command\\ShowRemnants' => $baseDir . '/../lib/Command/ShowRemnants.php',
-    'OCA\\User_LDAP\\Command\\TestConfig' => $baseDir . '/../lib/Command/TestConfig.php',
-    'OCA\\User_LDAP\\Command\\TestUserSettings' => $baseDir . '/../lib/Command/TestUserSettings.php',
-    'OCA\\User_LDAP\\Command\\UpdateUUID' => $baseDir . '/../lib/Command/UpdateUUID.php',
-    'OCA\\User_LDAP\\Configuration' => $baseDir . '/../lib/Configuration.php',
-    'OCA\\User_LDAP\\Connection' => $baseDir . '/../lib/Connection.php',
-    'OCA\\User_LDAP\\ConnectionFactory' => $baseDir . '/../lib/ConnectionFactory.php',
-    'OCA\\User_LDAP\\Controller\\ConfigAPIController' => $baseDir . '/../lib/Controller/ConfigAPIController.php',
-    'OCA\\User_LDAP\\Controller\\RenewPasswordController' => $baseDir . '/../lib/Controller/RenewPasswordController.php',
-    'OCA\\User_LDAP\\Controller\\WizardController' => $baseDir . '/../lib/Controller/WizardController.php',
-    'OCA\\User_LDAP\\DataCollector\\LdapDataCollector' => $baseDir . '/../lib/DataCollector/LdapDataCollector.php',
-    'OCA\\User_LDAP\\Db\\GroupMembership' => $baseDir . '/../lib/Db/GroupMembership.php',
-    'OCA\\User_LDAP\\Db\\GroupMembershipMapper' => $baseDir . '/../lib/Db/GroupMembershipMapper.php',
-    'OCA\\User_LDAP\\Events\\GroupBackendRegistered' => $baseDir . '/../lib/Events/GroupBackendRegistered.php',
-    'OCA\\User_LDAP\\Events\\UserBackendRegistered' => $baseDir . '/../lib/Events/UserBackendRegistered.php',
-    'OCA\\User_LDAP\\Exceptions\\AttributeNotSet' => $baseDir . '/../lib/Exceptions/AttributeNotSet.php',
-    'OCA\\User_LDAP\\Exceptions\\ConfigurationIssueException' => $baseDir . '/../lib/Exceptions/ConfigurationIssueException.php',
-    'OCA\\User_LDAP\\Exceptions\\ConstraintViolationException' => $baseDir . '/../lib/Exceptions/ConstraintViolationException.php',
-    'OCA\\User_LDAP\\Exceptions\\NoMoreResults' => $baseDir . '/../lib/Exceptions/NoMoreResults.php',
-    'OCA\\User_LDAP\\Exceptions\\NotOnLDAP' => $baseDir . '/../lib/Exceptions/NotOnLDAP.php',
-    'OCA\\User_LDAP\\GroupPluginManager' => $baseDir . '/../lib/GroupPluginManager.php',
-    'OCA\\User_LDAP\\Group_LDAP' => $baseDir . '/../lib/Group_LDAP.php',
-    'OCA\\User_LDAP\\Group_Proxy' => $baseDir . '/../lib/Group_Proxy.php',
-    'OCA\\User_LDAP\\Handler\\ExtStorageConfigHandler' => $baseDir . '/../lib/Handler/ExtStorageConfigHandler.php',
-    'OCA\\User_LDAP\\Helper' => $baseDir . '/../lib/Helper.php',
-    'OCA\\User_LDAP\\IGroupLDAP' => $baseDir . '/../lib/IGroupLDAP.php',
-    'OCA\\User_LDAP\\ILDAPGroupPlugin' => $baseDir . '/../lib/ILDAPGroupPlugin.php',
-    'OCA\\User_LDAP\\ILDAPUserPlugin' => $baseDir . '/../lib/ILDAPUserPlugin.php',
-    'OCA\\User_LDAP\\ILDAPWrapper' => $baseDir . '/../lib/ILDAPWrapper.php',
-    'OCA\\User_LDAP\\IUserLDAP' => $baseDir . '/../lib/IUserLDAP.php',
-    'OCA\\User_LDAP\\Jobs\\CleanUp' => $baseDir . '/../lib/Jobs/CleanUp.php',
-    'OCA\\User_LDAP\\Jobs\\Sync' => $baseDir . '/../lib/Jobs/Sync.php',
-    'OCA\\User_LDAP\\Jobs\\UpdateGroups' => $baseDir . '/../lib/Jobs/UpdateGroups.php',
-    'OCA\\User_LDAP\\LDAP' => $baseDir . '/../lib/LDAP.php',
-    'OCA\\User_LDAP\\LDAPProvider' => $baseDir . '/../lib/LDAPProvider.php',
-    'OCA\\User_LDAP\\LDAPProviderFactory' => $baseDir . '/../lib/LDAPProviderFactory.php',
-    'OCA\\User_LDAP\\LDAPUtility' => $baseDir . '/../lib/LDAPUtility.php',
-    'OCA\\User_LDAP\\LoginListener' => $baseDir . '/../lib/LoginListener.php',
-    'OCA\\User_LDAP\\Mapping\\AbstractMapping' => $baseDir . '/../lib/Mapping/AbstractMapping.php',
-    'OCA\\User_LDAP\\Mapping\\GroupMapping' => $baseDir . '/../lib/Mapping/GroupMapping.php',
-    'OCA\\User_LDAP\\Mapping\\UserMapping' => $baseDir . '/../lib/Mapping/UserMapping.php',
-    'OCA\\User_LDAP\\Migration\\GroupMappingMigration' => $baseDir . '/../lib/Migration/GroupMappingMigration.php',
-    'OCA\\User_LDAP\\Migration\\RemoveRefreshTime' => $baseDir . '/../lib/Migration/RemoveRefreshTime.php',
-    'OCA\\User_LDAP\\Migration\\SetDefaultProvider' => $baseDir . '/../lib/Migration/SetDefaultProvider.php',
-    'OCA\\User_LDAP\\Migration\\UUIDFix' => $baseDir . '/../lib/Migration/UUIDFix.php',
-    'OCA\\User_LDAP\\Migration\\UUIDFixGroup' => $baseDir . '/../lib/Migration/UUIDFixGroup.php',
-    'OCA\\User_LDAP\\Migration\\UUIDFixInsert' => $baseDir . '/../lib/Migration/UUIDFixInsert.php',
-    'OCA\\User_LDAP\\Migration\\UUIDFixUser' => $baseDir . '/../lib/Migration/UUIDFixUser.php',
-    'OCA\\User_LDAP\\Migration\\UnsetDefaultProvider' => $baseDir . '/../lib/Migration/UnsetDefaultProvider.php',
-    'OCA\\User_LDAP\\Migration\\Version1010Date20200630192842' => $baseDir . '/../lib/Migration/Version1010Date20200630192842.php',
-    'OCA\\User_LDAP\\Migration\\Version1120Date20210917155206' => $baseDir . '/../lib/Migration/Version1120Date20210917155206.php',
-    'OCA\\User_LDAP\\Migration\\Version1130Date20211102154716' => $baseDir . '/../lib/Migration/Version1130Date20211102154716.php',
-    'OCA\\User_LDAP\\Migration\\Version1130Date20220110154717' => $baseDir . '/../lib/Migration/Version1130Date20220110154717.php',
-    'OCA\\User_LDAP\\Migration\\Version1130Date20220110154718' => $baseDir . '/../lib/Migration/Version1130Date20220110154718.php',
-    'OCA\\User_LDAP\\Migration\\Version1130Date20220110154719' => $baseDir . '/../lib/Migration/Version1130Date20220110154719.php',
-    'OCA\\User_LDAP\\Migration\\Version1141Date20220323143801' => $baseDir . '/../lib/Migration/Version1141Date20220323143801.php',
-    'OCA\\User_LDAP\\Migration\\Version1190Date20230706134108' => $baseDir . '/../lib/Migration/Version1190Date20230706134108.php',
-    'OCA\\User_LDAP\\Migration\\Version1190Date20230706134109' => $baseDir . '/../lib/Migration/Version1190Date20230706134109.php',
-    'OCA\\User_LDAP\\Notification\\Notifier' => $baseDir . '/../lib/Notification/Notifier.php',
-    'OCA\\User_LDAP\\PagedResults\\TLinkId' => $baseDir . '/../lib/PagedResults/TLinkId.php',
-    'OCA\\User_LDAP\\Proxy' => $baseDir . '/../lib/Proxy.php',
-    'OCA\\User_LDAP\\Service\\BirthdateParserService' => $baseDir . '/../lib/Service/BirthdateParserService.php',
-    'OCA\\User_LDAP\\Service\\UpdateGroupsService' => $baseDir . '/../lib/Service/UpdateGroupsService.php',
-    'OCA\\User_LDAP\\Settings\\Admin' => $baseDir . '/../lib/Settings/Admin.php',
-    'OCA\\User_LDAP\\Settings\\Section' => $baseDir . '/../lib/Settings/Section.php',
-    'OCA\\User_LDAP\\SetupChecks\\LdapConnection' => $baseDir . '/../lib/SetupChecks/LdapConnection.php',
-    'OCA\\User_LDAP\\SetupChecks\\LdapInvalidUuids' => $baseDir . '/../lib/SetupChecks/LdapInvalidUuids.php',
-    'OCA\\User_LDAP\\UserPluginManager' => $baseDir . '/../lib/UserPluginManager.php',
-    'OCA\\User_LDAP\\User\\DeletedUsersIndex' => $baseDir . '/../lib/User/DeletedUsersIndex.php',
-    'OCA\\User_LDAP\\User\\Manager' => $baseDir . '/../lib/User/Manager.php',
-    'OCA\\User_LDAP\\User\\OfflineUser' => $baseDir . '/../lib/User/OfflineUser.php',
-    'OCA\\User_LDAP\\User\\User' => $baseDir . '/../lib/User/User.php',
-    'OCA\\User_LDAP\\User_LDAP' => $baseDir . '/../lib/User_LDAP.php',
-    'OCA\\User_LDAP\\User_Proxy' => $baseDir . '/../lib/User_Proxy.php',
-    'OCA\\User_LDAP\\Wizard' => $baseDir . '/../lib/Wizard.php',
-    'OCA\\User_LDAP\\WizardFactory' => $baseDir . '/../lib/WizardFactory.php',
-    'OCA\\User_LDAP\\WizardResult' => $baseDir . '/../lib/WizardResult.php',
+    'Composer\\InstalledVersions' => $vendorDir.'/composer/InstalledVersions.php',
+    'OCA\\User_LDAP\\Access' => $baseDir.'/../lib/Access.php',
+    'OCA\\User_LDAP\\AccessFactory' => $baseDir.'/../lib/AccessFactory.php',
+    'OCA\\User_LDAP\\AppInfo\\Application' => $baseDir.'/../lib/AppInfo/Application.php',
+    'OCA\\User_LDAP\\BackendUtility' => $baseDir.'/../lib/BackendUtility.php',
+    'OCA\\User_LDAP\\Command\\CheckGroup' => $baseDir.'/../lib/Command/CheckGroup.php',
+    'OCA\\User_LDAP\\Command\\CheckUser' => $baseDir.'/../lib/Command/CheckUser.php',
+    'OCA\\User_LDAP\\Command\\CreateEmptyConfig' => $baseDir.'/../lib/Command/CreateEmptyConfig.php',
+    'OCA\\User_LDAP\\Command\\DeleteConfig' => $baseDir.'/../lib/Command/DeleteConfig.php',
+    'OCA\\User_LDAP\\Command\\PromoteGroup' => $baseDir.'/../lib/Command/PromoteGroup.php',
+    'OCA\\User_LDAP\\Command\\ResetGroup' => $baseDir.'/../lib/Command/ResetGroup.php',
+    'OCA\\User_LDAP\\Command\\ResetUser' => $baseDir.'/../lib/Command/ResetUser.php',
+    'OCA\\User_LDAP\\Command\\Search' => $baseDir.'/../lib/Command/Search.php',
+    'OCA\\User_LDAP\\Command\\SetConfig' => $baseDir.'/../lib/Command/SetConfig.php',
+    'OCA\\User_LDAP\\Command\\ShowConfig' => $baseDir.'/../lib/Command/ShowConfig.php',
+    'OCA\\User_LDAP\\Command\\ShowRemnants' => $baseDir.'/../lib/Command/ShowRemnants.php',
+    'OCA\\User_LDAP\\Command\\TestConfig' => $baseDir.'/../lib/Command/TestConfig.php',
+    'OCA\\User_LDAP\\Command\\TestUserSettings' => $baseDir.'/../lib/Command/TestUserSettings.php',
+    'OCA\\User_LDAP\\Command\\UpdateUUID' => $baseDir.'/../lib/Command/UpdateUUID.php',
+    'OCA\\User_LDAP\\Configuration' => $baseDir.'/../lib/Configuration.php',
+    'OCA\\User_LDAP\\Connection' => $baseDir.'/../lib/Connection.php',
+    'OCA\\User_LDAP\\ConnectionFactory' => $baseDir.'/../lib/ConnectionFactory.php',
+    'OCA\\User_LDAP\\Controller\\ConfigAPIController' => $baseDir.'/../lib/Controller/ConfigAPIController.php',
+    'OCA\\User_LDAP\\Controller\\RenewPasswordController' => $baseDir.'/../lib/Controller/RenewPasswordController.php',
+    'OCA\\User_LDAP\\Controller\\WizardController' => $baseDir.'/../lib/Controller/WizardController.php',
+    'OCA\\User_LDAP\\DataCollector\\LdapDataCollector' => $baseDir.'/../lib/DataCollector/LdapDataCollector.php',
+    'OCA\\User_LDAP\\Db\\GroupMembership' => $baseDir.'/../lib/Db/GroupMembership.php',
+    'OCA\\User_LDAP\\Db\\GroupMembershipMapper' => $baseDir.'/../lib/Db/GroupMembershipMapper.php',
+    'OCA\\User_LDAP\\Events\\GroupBackendRegistered' => $baseDir.'/../lib/Events/GroupBackendRegistered.php',
+    'OCA\\User_LDAP\\Events\\UserBackendRegistered' => $baseDir.'/../lib/Events/UserBackendRegistered.php',
+    'OCA\\User_LDAP\\Exceptions\\AttributeNotSet' => $baseDir.'/../lib/Exceptions/AttributeNotSet.php',
+    'OCA\\User_LDAP\\Exceptions\\ConfigurationIssueException' => $baseDir.'/../lib/Exceptions/ConfigurationIssueException.php',
+    'OCA\\User_LDAP\\Exceptions\\ConstraintViolationException' => $baseDir.'/../lib/Exceptions/ConstraintViolationException.php',
+    'OCA\\User_LDAP\\Exceptions\\NoMoreResults' => $baseDir.'/../lib/Exceptions/NoMoreResults.php',
+    'OCA\\User_LDAP\\Exceptions\\NotOnLDAP' => $baseDir.'/../lib/Exceptions/NotOnLDAP.php',
+    'OCA\\User_LDAP\\GroupPluginManager' => $baseDir.'/../lib/GroupPluginManager.php',
+    'OCA\\User_LDAP\\Group_LDAP' => $baseDir.'/../lib/Group_LDAP.php',
+    'OCA\\User_LDAP\\Group_Proxy' => $baseDir.'/../lib/Group_Proxy.php',
+    'OCA\\User_LDAP\\Handler\\ExtStorageConfigHandler' => $baseDir.'/../lib/Handler/ExtStorageConfigHandler.php',
+    'OCA\\User_LDAP\\Helper' => $baseDir.'/../lib/Helper.php',
+    'OCA\\User_LDAP\\IGroupLDAP' => $baseDir.'/../lib/IGroupLDAP.php',
+    'OCA\\User_LDAP\\ILDAPGroupPlugin' => $baseDir.'/../lib/ILDAPGroupPlugin.php',
+    'OCA\\User_LDAP\\ILDAPUserPlugin' => $baseDir.'/../lib/ILDAPUserPlugin.php',
+    'OCA\\User_LDAP\\ILDAPWrapper' => $baseDir.'/../lib/ILDAPWrapper.php',
+    'OCA\\User_LDAP\\IUserLDAP' => $baseDir.'/../lib/IUserLDAP.php',
+    'OCA\\User_LDAP\\Jobs\\CleanUp' => $baseDir.'/../lib/Jobs/CleanUp.php',
+    'OCA\\User_LDAP\\Jobs\\Sync' => $baseDir.'/../lib/Jobs/Sync.php',
+    'OCA\\User_LDAP\\Jobs\\UpdateGroups' => $baseDir.'/../lib/Jobs/UpdateGroups.php',
+    'OCA\\User_LDAP\\LDAP' => $baseDir.'/../lib/LDAP.php',
+    'OCA\\User_LDAP\\LDAPProvider' => $baseDir.'/../lib/LDAPProvider.php',
+    'OCA\\User_LDAP\\LDAPProviderFactory' => $baseDir.'/../lib/LDAPProviderFactory.php',
+    'OCA\\User_LDAP\\LDAPUtility' => $baseDir.'/../lib/LDAPUtility.php',
+    'OCA\\User_LDAP\\LoginListener' => $baseDir.'/../lib/LoginListener.php',
+    'OCA\\User_LDAP\\Mapping\\AbstractMapping' => $baseDir.'/../lib/Mapping/AbstractMapping.php',
+    'OCA\\User_LDAP\\Mapping\\GroupMapping' => $baseDir.'/../lib/Mapping/GroupMapping.php',
+    'OCA\\User_LDAP\\Mapping\\UserMapping' => $baseDir.'/../lib/Mapping/UserMapping.php',
+    'OCA\\User_LDAP\\Migration\\GroupMappingMigration' => $baseDir.'/../lib/Migration/GroupMappingMigration.php',
+    'OCA\\User_LDAP\\Migration\\RemoveRefreshTime' => $baseDir.'/../lib/Migration/RemoveRefreshTime.php',
+    'OCA\\User_LDAP\\Migration\\SetDefaultProvider' => $baseDir.'/../lib/Migration/SetDefaultProvider.php',
+    'OCA\\User_LDAP\\Migration\\UUIDFix' => $baseDir.'/../lib/Migration/UUIDFix.php',
+    'OCA\\User_LDAP\\Migration\\UUIDFixGroup' => $baseDir.'/../lib/Migration/UUIDFixGroup.php',
+    'OCA\\User_LDAP\\Migration\\UUIDFixInsert' => $baseDir.'/../lib/Migration/UUIDFixInsert.php',
+    'OCA\\User_LDAP\\Migration\\UUIDFixUser' => $baseDir.'/../lib/Migration/UUIDFixUser.php',
+    'OCA\\User_LDAP\\Migration\\UnsetDefaultProvider' => $baseDir.'/../lib/Migration/UnsetDefaultProvider.php',
+    'OCA\\User_LDAP\\Migration\\Version1010Date20200630192842' => $baseDir.'/../lib/Migration/Version1010Date20200630192842.php',
+    'OCA\\User_LDAP\\Migration\\Version1120Date20210917155206' => $baseDir.'/../lib/Migration/Version1120Date20210917155206.php',
+    'OCA\\User_LDAP\\Migration\\Version1130Date20211102154716' => $baseDir.'/../lib/Migration/Version1130Date20211102154716.php',
+    'OCA\\User_LDAP\\Migration\\Version1130Date20220110154717' => $baseDir.'/../lib/Migration/Version1130Date20220110154717.php',
+    'OCA\\User_LDAP\\Migration\\Version1130Date20220110154718' => $baseDir.'/../lib/Migration/Version1130Date20220110154718.php',
+    'OCA\\User_LDAP\\Migration\\Version1130Date20220110154719' => $baseDir.'/../lib/Migration/Version1130Date20220110154719.php',
+    'OCA\\User_LDAP\\Migration\\Version1141Date20220323143801' => $baseDir.'/../lib/Migration/Version1141Date20220323143801.php',
+    'OCA\\User_LDAP\\Migration\\Version1190Date20230706134108' => $baseDir.'/../lib/Migration/Version1190Date20230706134108.php',
+    'OCA\\User_LDAP\\Migration\\Version1190Date20230706134109' => $baseDir.'/../lib/Migration/Version1190Date20230706134109.php',
+    'OCA\\User_LDAP\\Notification\\Notifier' => $baseDir.'/../lib/Notification/Notifier.php',
+    'OCA\\User_LDAP\\PagedResults\\TLinkId' => $baseDir.'/../lib/PagedResults/TLinkId.php',
+    'OCA\\User_LDAP\\Proxy' => $baseDir.'/../lib/Proxy.php',
+    'OCA\\User_LDAP\\Service\\BirthdateParserService' => $baseDir.'/../lib/Service/BirthdateParserService.php',
+    'OCA\\User_LDAP\\Service\\UpdateGroupsService' => $baseDir.'/../lib/Service/UpdateGroupsService.php',
+    'OCA\\User_LDAP\\Settings\\Admin' => $baseDir.'/../lib/Settings/Admin.php',
+    'OCA\\User_LDAP\\Settings\\Section' => $baseDir.'/../lib/Settings/Section.php',
+    'OCA\\User_LDAP\\SetupChecks\\LdapConnection' => $baseDir.'/../lib/SetupChecks/LdapConnection.php',
+    'OCA\\User_LDAP\\SetupChecks\\LdapInvalidUuids' => $baseDir.'/../lib/SetupChecks/LdapInvalidUuids.php',
+    'OCA\\User_LDAP\\UserPluginManager' => $baseDir.'/../lib/UserPluginManager.php',
+    'OCA\\User_LDAP\\User\\DeletedUsersIndex' => $baseDir.'/../lib/User/DeletedUsersIndex.php',
+    'OCA\\User_LDAP\\User\\Manager' => $baseDir.'/../lib/User/Manager.php',
+    'OCA\\User_LDAP\\User\\OfflineUser' => $baseDir.'/../lib/User/OfflineUser.php',
+    'OCA\\User_LDAP\\User\\User' => $baseDir.'/../lib/User/User.php',
+    'OCA\\User_LDAP\\User_LDAP' => $baseDir.'/../lib/User_LDAP.php',
+    'OCA\\User_LDAP\\User_Proxy' => $baseDir.'/../lib/User_Proxy.php',
+    'OCA\\User_LDAP\\Wizard' => $baseDir.'/../lib/Wizard.php',
+    'OCA\\User_LDAP\\WizardFactory' => $baseDir.'/../lib/WizardFactory.php',
+    'OCA\\User_LDAP\\WizardResult' => $baseDir.'/../lib/WizardResult.php',
 );

tests/lib/UrlGeneratorTest.php

Indentation +251 added lines, -251 removed lines

@@ -22,255 +22,255 @@
  * @package Test
  */
 class UrlGeneratorTest extends \Test\TestCase {
-	/** @var \PHPUnit\Framework\MockObject\MockObject|IConfig */
-	private $config;
-	/** @var \PHPUnit\Framework\MockObject\MockObject|IUserSession */
-	private $userSession;
-	/** @var \PHPUnit\Framework\MockObject\MockObject|ICacheFactory */
-	private $cacheFactory;
-	/** @var \PHPUnit\Framework\MockObject\MockObject|IRequest */
-	private $request;
-	/** @var \PHPUnit\Framework\MockObject\MockObject|Router */
-	private $router;
-	/** @var IURLGenerator */
-	private $urlGenerator;
-	/** @var string */
-	private $originalWebRoot;
-
-	protected function setUp(): void {
-		parent::setUp();
-		$this->config = $this->createMock(IConfig::class);
-		$this->userSession = $this->createMock(IUserSession::class);
-		$this->cacheFactory = $this->createMock(ICacheFactory::class);
-		$this->request = $this->createMock(IRequest::class);
-		$this->router = $this->createMock(Router::class);
-		$this->urlGenerator = new URLGenerator(
-			$this->config,
-			$this->userSession,
-			$this->cacheFactory,
-			$this->request,
-			$this->router
-		);
-		$this->originalWebRoot = \OC::$WEBROOT;
-	}
-
-	protected function tearDown(): void {
-		// Reset webRoot
-		\OC::$WEBROOT = $this->originalWebRoot;
-	}
-
-	private function mockBaseUrl() {
-		$this->request->expects($this->once())
-			->method('getServerProtocol')
-			->willReturn('http');
-		$this->request->expects($this->once())
-			->method('getServerHost')
-			->willReturn('localhost');
-	}
-
-	/**
-	 * test linkTo URL construction
-	 */
-	#[\PHPUnit\Framework\Attributes\DataProvider('provideDocRootAppUrlParts')]
-	public function testLinkToDocRoot($app, $file, $args, $expectedResult): void {
-		\OC::$WEBROOT = '';
-		$result = $this->urlGenerator->linkTo($app, $file, $args);
-		$this->assertEquals($expectedResult, $result);
-	}
-
-	/**
-	 * test linkTo URL construction in sub directory
-	 */
-	#[\PHPUnit\Framework\Attributes\DataProvider('provideSubDirAppUrlParts')]
-	public function testLinkToSubDir($app, $file, $args, $expectedResult): void {
-		\OC::$WEBROOT = '/nextcloud';
-		$result = $this->urlGenerator->linkTo($app, $file, $args);
-		$this->assertEquals($expectedResult, $result);
-	}
-
-	#[\PHPUnit\Framework\Attributes\DataProvider('provideRoutes')]
-	public function testLinkToRouteAbsolute($route, $expected): void {
-		$this->mockBaseUrl();
-		\OC::$WEBROOT = '/nextcloud';
-		$this->router->expects($this->once())
-			->method('generate')
-			->willReturnCallback(function ($routeName, $parameters) {
-				if ($routeName === 'core.Preview.getPreview') {
-					return '/index.php/core/preview.png';
-				} elseif ($routeName === 'cloud_federation_api.requesthandlercontroller.addShare') {
-					return '/index.php/ocm/shares';
-				}
-			});
-		$result = $this->urlGenerator->linkToRouteAbsolute($route);
-		$this->assertEquals($expected, $result);
-	}
-
-	public static function provideRoutes(): array {
-		return [
-			['core.Preview.getPreview', 'http://localhost/nextcloud/index.php/core/preview.png'],
-			['cloud_federation_api.requesthandlercontroller.addShare', 'http://localhost/nextcloud/index.php/ocm/shares'],
-		];
-	}
-
-	public static function provideDocRootAppUrlParts(): array {
-		return [
-			['testing', 'ajax/endpoint.php', [], '/index.php/apps/testing/ajax/endpoint.php'],
-			['testing', 'ajax/endpoint.php', ['trut' => 'trat', 'dut' => 'dat'], '/index.php/apps/testing/ajax/endpoint.php?trut=trat&dut=dat'],
-			['', 'index.php', ['trut' => 'trat', 'dut' => 'dat'], '/index.php?trut=trat&dut=dat'],
-		];
-	}
-
-	public static function provideSubDirAppUrlParts(): array {
-		return [
-			['testing', 'ajax/endpoint.php', [], '/nextcloud/index.php/apps/testing/ajax/endpoint.php'],
-			['testing', 'ajax/endpoint.php', ['trut' => 'trat', 'dut' => 'dat'], '/nextcloud/index.php/apps/testing/ajax/endpoint.php?trut=trat&dut=dat'],
-			['', 'index.php', ['trut' => 'trat', 'dut' => 'dat'], '/nextcloud/index.php?trut=trat&dut=dat'],
-		];
-	}
-
-	/**
-	 * test absolute URL construction
-	 */
-	#[\PHPUnit\Framework\Attributes\DataProvider('provideDocRootURLs')]
-	public function testGetAbsoluteURLDocRoot($url, $expectedResult): void {
-		$this->mockBaseUrl();
-		\OC::$WEBROOT = '';
-		$result = $this->urlGenerator->getAbsoluteURL($url);
-		$this->assertEquals($expectedResult, $result);
-	}
-
-	/**
-	 * test absolute URL construction
-	 */
-	#[\PHPUnit\Framework\Attributes\DataProvider('provideSubDirURLs')]
-	public function testGetAbsoluteURLSubDir($url, $expectedResult): void {
-		$this->mockBaseUrl();
-		\OC::$WEBROOT = '/nextcloud';
-		$result = $this->urlGenerator->getAbsoluteURL($url);
-		$this->assertEquals($expectedResult, $result);
-	}
-
-	public static function provideDocRootURLs(): array {
-		return [
-			['index.php', 'http://localhost/index.php'],
-			['/index.php', 'http://localhost/index.php'],
-			['/apps/index.php', 'http://localhost/apps/index.php'],
-			['apps/index.php', 'http://localhost/apps/index.php'],
-		];
-	}
-
-	public static function provideSubDirURLs(): array {
-		return [
-			['', 'http://localhost/nextcloud/'],
-			['/', 'http://localhost/nextcloud/'],
-			['index.php', 'http://localhost/nextcloud/index.php'],
-			['/index.php', 'http://localhost/nextcloud/index.php'],
-			['/apps/index.php', 'http://localhost/nextcloud/apps/index.php'],
-			['apps/index.php', 'http://localhost/nextcloud/apps/index.php'],
-		];
-	}
-
-	public function testGetBaseUrl(): void {
-		$this->mockBaseUrl();
-		\OC::$WEBROOT = '/nextcloud';
-		$actual = $this->urlGenerator->getBaseUrl();
-		$expected = 'http://localhost/nextcloud';
-		$this->assertEquals($expected, $actual);
-	}
-
-	public function testGetWebroot(): void {
-		\OC::$WEBROOT = '/nextcloud';
-		$actual = $this->urlGenerator->getWebroot();
-		$this->assertEquals(\OC::$WEBROOT, $actual);
-	}
-
-	#[\PHPUnit\Framework\Attributes\DataProvider('provideOCSRoutes')]
-	public function testLinkToOCSRouteAbsolute(string $route, bool $ignoreFrontController, string $expected): void {
-		$this->mockBaseUrl();
-		\OC::$WEBROOT = '/nextcloud';
-		$this->router->expects($this->once())
-			->method('generate')
-			->willReturnCallback(function (string $routeName, array $parameters) use ($ignoreFrontController) {
-				if ($routeName === 'ocs.core.OCS.getCapabilities') {
-					if (!$ignoreFrontController) {
-						return '/nextcloud/index.php/ocsapp/cloud/capabilities';
-					}
-					return '/nextcloud/ocsapp/cloud/capabilities';
-				} elseif ($routeName === 'ocs.core.WhatsNew.dismiss') {
-					if (!$ignoreFrontController) {
-						return '/nextcloud/index.php/ocsapp/core/whatsnew';
-					}
-					return '/nextcloud/ocsapp/core/whatsnew';
-				}
-			});
-		$result = $this->urlGenerator->linkToOCSRouteAbsolute($route);
-		$this->assertEquals($expected, $result);
-	}
-
-	public static function provideOCSRoutes(): array {
-		return [
-			['core.OCS.getCapabilities', false, 'http://localhost/nextcloud/ocs/v2.php/cloud/capabilities'],
-			['core.OCS.getCapabilities', true, 'http://localhost/nextcloud/ocs/v2.php/cloud/capabilities'],
-			['core.WhatsNew.dismiss', false, 'http://localhost/nextcloud/ocs/v2.php/core/whatsnew'],
-			['core.WhatsNew.dismiss', true, 'http://localhost/nextcloud/ocs/v2.php/core/whatsnew'],
-		];
-	}
-
-	private function mockLinkToDefaultPageUrl(bool $ignoreFrontControllerConfig = false) {
-		$this->config->expects($this->once())
-			->method('getAppValue')
-			->with('core', 'defaultpage')
-			->willReturn('');
-
-		$this->config->expects($this->once())
-			->method('getSystemValueBool')
-			->with('htaccess.IgnoreFrontController', $this->anything())
-			->willReturn($ignoreFrontControllerConfig);
-	}
-
-	public function testLinkToDefaultPageUrlWithRedirectUrlWithoutFrontController(): void {
-		$this->mockBaseUrl();
-
-		$_REQUEST['redirect_url'] = 'myRedirectUrl.com';
-		$this->assertSame('http://localhost' . \OC::$WEBROOT . '/myRedirectUrl.com', $this->urlGenerator->linkToDefaultPageUrl());
-	}
-
-	public function testLinkToDefaultPageUrlWithRedirectUrlRedirectBypassWithoutFrontController(): void {
-		$this->mockBaseUrl();
-		$this->mockLinkToDefaultPageUrl();
-		putenv('front_controller_active=false');
-
-		$_REQUEST['redirect_url'] = 'myRedirectUrl.com@foo.com:a';
-		$this->assertSame('http://localhost' . \OC::$WEBROOT . '/index.php/apps/dashboard/', $this->urlGenerator->linkToDefaultPageUrl());
-	}
-
-	public function testLinkToDefaultPageUrlWithRedirectUrlRedirectBypassWithFrontController(): void {
-		$this->mockBaseUrl();
-		$this->mockLinkToDefaultPageUrl();
-		putenv('front_controller_active=true');
-
-		$_REQUEST['redirect_url'] = 'myRedirectUrl.com@foo.com:a';
-		$this->assertSame('http://localhost' . \OC::$WEBROOT . '/apps/dashboard/', $this->urlGenerator->linkToDefaultPageUrl());
-	}
-
-	public function testLinkToDefaultPageUrlWithRedirectUrlWithIgnoreFrontController(): void {
-		$this->mockBaseUrl();
-		$this->mockLinkToDefaultPageUrl(true);
-		putenv('front_controller_active=false');
-
-		$_REQUEST['redirect_url'] = 'myRedirectUrl.com@foo.com:a';
-		$this->assertSame('http://localhost' . \OC::$WEBROOT . '/apps/dashboard/', $this->urlGenerator->linkToDefaultPageUrl());
-	}
-
-	public static function imagePathProvider(): array {
-		return [
-			['core', 'favicon-mask.svg', \OC::$WEBROOT . '/core/img/favicon-mask.svg'],
-			['files', 'folder.svg', \OC::$WEBROOT . '/apps/files/img/folder.svg'],
-		];
-	}
-
-	#[\PHPUnit\Framework\Attributes\DataProvider('imagePathProvider')]
-	public function testImagePath(string $appName, string $file, string $result): void {
-		$this->assertSame($result, $this->urlGenerator->imagePath($appName, $file));
-	}
+    /** @var \PHPUnit\Framework\MockObject\MockObject|IConfig */
+    private $config;
+    /** @var \PHPUnit\Framework\MockObject\MockObject|IUserSession */
+    private $userSession;
+    /** @var \PHPUnit\Framework\MockObject\MockObject|ICacheFactory */
+    private $cacheFactory;
+    /** @var \PHPUnit\Framework\MockObject\MockObject|IRequest */
+    private $request;
+    /** @var \PHPUnit\Framework\MockObject\MockObject|Router */
+    private $router;
+    /** @var IURLGenerator */
+    private $urlGenerator;
+    /** @var string */
+    private $originalWebRoot;
+
+    protected function setUp(): void {
+        parent::setUp();
+        $this->config = $this->createMock(IConfig::class);
+        $this->userSession = $this->createMock(IUserSession::class);
+        $this->cacheFactory = $this->createMock(ICacheFactory::class);
+        $this->request = $this->createMock(IRequest::class);
+        $this->router = $this->createMock(Router::class);
+        $this->urlGenerator = new URLGenerator(
+            $this->config,
+            $this->userSession,
+            $this->cacheFactory,
+            $this->request,
+            $this->router
+        );
+        $this->originalWebRoot = \OC::$WEBROOT;
+    }
+
+    protected function tearDown(): void {
+        // Reset webRoot
+        \OC::$WEBROOT = $this->originalWebRoot;
+    }
+
+    private function mockBaseUrl() {
+        $this->request->expects($this->once())
+            ->method('getServerProtocol')
+            ->willReturn('http');
+        $this->request->expects($this->once())
+            ->method('getServerHost')
+            ->willReturn('localhost');
+    }
+
+    /**
+     * test linkTo URL construction
+     */
+    #[\PHPUnit\Framework\Attributes\DataProvider('provideDocRootAppUrlParts')]
+    public function testLinkToDocRoot($app, $file, $args, $expectedResult): void {
+        \OC::$WEBROOT = '';
+        $result = $this->urlGenerator->linkTo($app, $file, $args);
+        $this->assertEquals($expectedResult, $result);
+    }
+
+    /**
+     * test linkTo URL construction in sub directory
+     */
+    #[\PHPUnit\Framework\Attributes\DataProvider('provideSubDirAppUrlParts')]
+    public function testLinkToSubDir($app, $file, $args, $expectedResult): void {
+        \OC::$WEBROOT = '/nextcloud';
+        $result = $this->urlGenerator->linkTo($app, $file, $args);
+        $this->assertEquals($expectedResult, $result);
+    }
+
+    #[\PHPUnit\Framework\Attributes\DataProvider('provideRoutes')]
+    public function testLinkToRouteAbsolute($route, $expected): void {
+        $this->mockBaseUrl();
+        \OC::$WEBROOT = '/nextcloud';
+        $this->router->expects($this->once())
+            ->method('generate')
+            ->willReturnCallback(function ($routeName, $parameters) {
+                if ($routeName === 'core.Preview.getPreview') {
+                    return '/index.php/core/preview.png';
+                } elseif ($routeName === 'cloud_federation_api.requesthandlercontroller.addShare') {
+                    return '/index.php/ocm/shares';
+                }
+            });
+        $result = $this->urlGenerator->linkToRouteAbsolute($route);
+        $this->assertEquals($expected, $result);
+    }
+
+    public static function provideRoutes(): array {
+        return [
+            ['core.Preview.getPreview', 'http://localhost/nextcloud/index.php/core/preview.png'],
+            ['cloud_federation_api.requesthandlercontroller.addShare', 'http://localhost/nextcloud/index.php/ocm/shares'],
+        ];
+    }
+
+    public static function provideDocRootAppUrlParts(): array {
+        return [
+            ['testing', 'ajax/endpoint.php', [], '/index.php/apps/testing/ajax/endpoint.php'],
+            ['testing', 'ajax/endpoint.php', ['trut' => 'trat', 'dut' => 'dat'], '/index.php/apps/testing/ajax/endpoint.php?trut=trat&dut=dat'],
+            ['', 'index.php', ['trut' => 'trat', 'dut' => 'dat'], '/index.php?trut=trat&dut=dat'],
+        ];
+    }
+
+    public static function provideSubDirAppUrlParts(): array {
+        return [
+            ['testing', 'ajax/endpoint.php', [], '/nextcloud/index.php/apps/testing/ajax/endpoint.php'],
+            ['testing', 'ajax/endpoint.php', ['trut' => 'trat', 'dut' => 'dat'], '/nextcloud/index.php/apps/testing/ajax/endpoint.php?trut=trat&dut=dat'],
+            ['', 'index.php', ['trut' => 'trat', 'dut' => 'dat'], '/nextcloud/index.php?trut=trat&dut=dat'],
+        ];
+    }
+
+    /**
+     * test absolute URL construction
+     */
+    #[\PHPUnit\Framework\Attributes\DataProvider('provideDocRootURLs')]
+    public function testGetAbsoluteURLDocRoot($url, $expectedResult): void {
+        $this->mockBaseUrl();
+        \OC::$WEBROOT = '';
+        $result = $this->urlGenerator->getAbsoluteURL($url);
+        $this->assertEquals($expectedResult, $result);
+    }
+
+    /**
+     * test absolute URL construction
+     */
+    #[\PHPUnit\Framework\Attributes\DataProvider('provideSubDirURLs')]
+    public function testGetAbsoluteURLSubDir($url, $expectedResult): void {
+        $this->mockBaseUrl();
+        \OC::$WEBROOT = '/nextcloud';
+        $result = $this->urlGenerator->getAbsoluteURL($url);
+        $this->assertEquals($expectedResult, $result);
+    }
+
+    public static function provideDocRootURLs(): array {
+        return [
+            ['index.php', 'http://localhost/index.php'],
+            ['/index.php', 'http://localhost/index.php'],
+            ['/apps/index.php', 'http://localhost/apps/index.php'],
+            ['apps/index.php', 'http://localhost/apps/index.php'],
+        ];
+    }
+
+    public static function provideSubDirURLs(): array {
+        return [
+            ['', 'http://localhost/nextcloud/'],
+            ['/', 'http://localhost/nextcloud/'],
+            ['index.php', 'http://localhost/nextcloud/index.php'],
+            ['/index.php', 'http://localhost/nextcloud/index.php'],
+            ['/apps/index.php', 'http://localhost/nextcloud/apps/index.php'],
+            ['apps/index.php', 'http://localhost/nextcloud/apps/index.php'],
+        ];
+    }
+
+    public function testGetBaseUrl(): void {
+        $this->mockBaseUrl();
+        \OC::$WEBROOT = '/nextcloud';
+        $actual = $this->urlGenerator->getBaseUrl();
+        $expected = 'http://localhost/nextcloud';
+        $this->assertEquals($expected, $actual);
+    }
+
+    public function testGetWebroot(): void {
+        \OC::$WEBROOT = '/nextcloud';
+        $actual = $this->urlGenerator->getWebroot();
+        $this->assertEquals(\OC::$WEBROOT, $actual);
+    }
+
+    #[\PHPUnit\Framework\Attributes\DataProvider('provideOCSRoutes')]
+    public function testLinkToOCSRouteAbsolute(string $route, bool $ignoreFrontController, string $expected): void {
+        $this->mockBaseUrl();
+        \OC::$WEBROOT = '/nextcloud';
+        $this->router->expects($this->once())
+            ->method('generate')
+            ->willReturnCallback(function (string $routeName, array $parameters) use ($ignoreFrontController) {
+                if ($routeName === 'ocs.core.OCS.getCapabilities') {
+                    if (!$ignoreFrontController) {
+                        return '/nextcloud/index.php/ocsapp/cloud/capabilities';
+                    }
+                    return '/nextcloud/ocsapp/cloud/capabilities';
+                } elseif ($routeName === 'ocs.core.WhatsNew.dismiss') {
+                    if (!$ignoreFrontController) {
+                        return '/nextcloud/index.php/ocsapp/core/whatsnew';
+                    }
+                    return '/nextcloud/ocsapp/core/whatsnew';
+                }
+            });
+        $result = $this->urlGenerator->linkToOCSRouteAbsolute($route);
+        $this->assertEquals($expected, $result);
+    }
+
+    public static function provideOCSRoutes(): array {
+        return [
+            ['core.OCS.getCapabilities', false, 'http://localhost/nextcloud/ocs/v2.php/cloud/capabilities'],
+            ['core.OCS.getCapabilities', true, 'http://localhost/nextcloud/ocs/v2.php/cloud/capabilities'],
+            ['core.WhatsNew.dismiss', false, 'http://localhost/nextcloud/ocs/v2.php/core/whatsnew'],
+            ['core.WhatsNew.dismiss', true, 'http://localhost/nextcloud/ocs/v2.php/core/whatsnew'],
+        ];
+    }
+
+    private function mockLinkToDefaultPageUrl(bool $ignoreFrontControllerConfig = false) {
+        $this->config->expects($this->once())
+            ->method('getAppValue')
+            ->with('core', 'defaultpage')
+            ->willReturn('');
+
+        $this->config->expects($this->once())
+            ->method('getSystemValueBool')
+            ->with('htaccess.IgnoreFrontController', $this->anything())
+            ->willReturn($ignoreFrontControllerConfig);
+    }
+
+    public function testLinkToDefaultPageUrlWithRedirectUrlWithoutFrontController(): void {
+        $this->mockBaseUrl();
+
+        $_REQUEST['redirect_url'] = 'myRedirectUrl.com';
+        $this->assertSame('http://localhost' . \OC::$WEBROOT . '/myRedirectUrl.com', $this->urlGenerator->linkToDefaultPageUrl());
+    }
+
+    public function testLinkToDefaultPageUrlWithRedirectUrlRedirectBypassWithoutFrontController(): void {
+        $this->mockBaseUrl();
+        $this->mockLinkToDefaultPageUrl();
+        putenv('front_controller_active=false');
+
+        $_REQUEST['redirect_url'] = 'myRedirectUrl.com@foo.com:a';
+        $this->assertSame('http://localhost' . \OC::$WEBROOT . '/index.php/apps/dashboard/', $this->urlGenerator->linkToDefaultPageUrl());
+    }
+
+    public function testLinkToDefaultPageUrlWithRedirectUrlRedirectBypassWithFrontController(): void {
+        $this->mockBaseUrl();
+        $this->mockLinkToDefaultPageUrl();
+        putenv('front_controller_active=true');
+
+        $_REQUEST['redirect_url'] = 'myRedirectUrl.com@foo.com:a';
+        $this->assertSame('http://localhost' . \OC::$WEBROOT . '/apps/dashboard/', $this->urlGenerator->linkToDefaultPageUrl());
+    }
+
+    public function testLinkToDefaultPageUrlWithRedirectUrlWithIgnoreFrontController(): void {
+        $this->mockBaseUrl();
+        $this->mockLinkToDefaultPageUrl(true);
+        putenv('front_controller_active=false');
+
+        $_REQUEST['redirect_url'] = 'myRedirectUrl.com@foo.com:a';
+        $this->assertSame('http://localhost' . \OC::$WEBROOT . '/apps/dashboard/', $this->urlGenerator->linkToDefaultPageUrl());
+    }
+
+    public static function imagePathProvider(): array {
+        return [
+            ['core', 'favicon-mask.svg', \OC::$WEBROOT . '/core/img/favicon-mask.svg'],
+            ['files', 'folder.svg', \OC::$WEBROOT . '/apps/files/img/folder.svg'],
+        ];
+    }
+
+    #[\PHPUnit\Framework\Attributes\DataProvider('imagePathProvider')]
+    public function testImagePath(string $appName, string $file, string $result): void {
+        $this->assertSame($result, $this->urlGenerator->imagePath($appName, $file));
+    }
 }