@@ -31,84 +31,84 @@ |
||
31 | 31 | * @package OCA\User_LDAP |
32 | 32 | */ |
33 | 33 | class DeletedUsersIndex { |
34 | - /** |
|
35 | - * @var \OCP\IConfig $config |
|
36 | - */ |
|
37 | - protected $config; |
|
34 | + /** |
|
35 | + * @var \OCP\IConfig $config |
|
36 | + */ |
|
37 | + protected $config; |
|
38 | 38 | |
39 | - /** |
|
40 | - * @var \OCP\IDBConnection $db |
|
41 | - */ |
|
42 | - protected $db; |
|
39 | + /** |
|
40 | + * @var \OCP\IDBConnection $db |
|
41 | + */ |
|
42 | + protected $db; |
|
43 | 43 | |
44 | - /** |
|
45 | - * @var \OCA\User_LDAP\Mapping\UserMapping $mapping |
|
46 | - */ |
|
47 | - protected $mapping; |
|
44 | + /** |
|
45 | + * @var \OCA\User_LDAP\Mapping\UserMapping $mapping |
|
46 | + */ |
|
47 | + protected $mapping; |
|
48 | 48 | |
49 | - /** |
|
50 | - * @var array $deletedUsers |
|
51 | - */ |
|
52 | - protected $deletedUsers; |
|
49 | + /** |
|
50 | + * @var array $deletedUsers |
|
51 | + */ |
|
52 | + protected $deletedUsers; |
|
53 | 53 | |
54 | - /** |
|
55 | - * @param \OCP\IConfig $config |
|
56 | - * @param \OCP\IDBConnection $db |
|
57 | - * @param \OCA\User_LDAP\Mapping\UserMapping $mapping |
|
58 | - */ |
|
59 | - public function __construct(\OCP\IConfig $config, \OCP\IDBConnection $db, UserMapping $mapping) { |
|
60 | - $this->config = $config; |
|
61 | - $this->db = $db; |
|
62 | - $this->mapping = $mapping; |
|
63 | - } |
|
54 | + /** |
|
55 | + * @param \OCP\IConfig $config |
|
56 | + * @param \OCP\IDBConnection $db |
|
57 | + * @param \OCA\User_LDAP\Mapping\UserMapping $mapping |
|
58 | + */ |
|
59 | + public function __construct(\OCP\IConfig $config, \OCP\IDBConnection $db, UserMapping $mapping) { |
|
60 | + $this->config = $config; |
|
61 | + $this->db = $db; |
|
62 | + $this->mapping = $mapping; |
|
63 | + } |
|
64 | 64 | |
65 | - /** |
|
66 | - * reads LDAP users marked as deleted from the database |
|
67 | - * @return \OCA\User_LDAP\User\OfflineUser[] |
|
68 | - */ |
|
69 | - private function fetchDeletedUsers() { |
|
70 | - $deletedUsers = $this->config->getUsersForUserValue( |
|
71 | - 'user_ldap', 'isDeleted', '1'); |
|
65 | + /** |
|
66 | + * reads LDAP users marked as deleted from the database |
|
67 | + * @return \OCA\User_LDAP\User\OfflineUser[] |
|
68 | + */ |
|
69 | + private function fetchDeletedUsers() { |
|
70 | + $deletedUsers = $this->config->getUsersForUserValue( |
|
71 | + 'user_ldap', 'isDeleted', '1'); |
|
72 | 72 | |
73 | - $userObjects = array(); |
|
74 | - foreach($deletedUsers as $user) { |
|
75 | - $userObjects[] = new OfflineUser($user, $this->config, $this->db, $this->mapping); |
|
76 | - } |
|
77 | - $this->deletedUsers = $userObjects; |
|
73 | + $userObjects = array(); |
|
74 | + foreach($deletedUsers as $user) { |
|
75 | + $userObjects[] = new OfflineUser($user, $this->config, $this->db, $this->mapping); |
|
76 | + } |
|
77 | + $this->deletedUsers = $userObjects; |
|
78 | 78 | |
79 | - return $this->deletedUsers; |
|
80 | - } |
|
79 | + return $this->deletedUsers; |
|
80 | + } |
|
81 | 81 | |
82 | - /** |
|
83 | - * returns all LDAP users that are marked as deleted |
|
84 | - * @return \OCA\User_LDAP\User\OfflineUser[] |
|
85 | - */ |
|
86 | - public function getUsers() { |
|
87 | - if(is_array($this->deletedUsers)) { |
|
88 | - return $this->deletedUsers; |
|
89 | - } |
|
90 | - return $this->fetchDeletedUsers(); |
|
91 | - } |
|
82 | + /** |
|
83 | + * returns all LDAP users that are marked as deleted |
|
84 | + * @return \OCA\User_LDAP\User\OfflineUser[] |
|
85 | + */ |
|
86 | + public function getUsers() { |
|
87 | + if(is_array($this->deletedUsers)) { |
|
88 | + return $this->deletedUsers; |
|
89 | + } |
|
90 | + return $this->fetchDeletedUsers(); |
|
91 | + } |
|
92 | 92 | |
93 | - /** |
|
94 | - * whether at least one user was detected as deleted |
|
95 | - * @return bool |
|
96 | - */ |
|
97 | - public function hasUsers() { |
|
98 | - if($this->deletedUsers === false) { |
|
99 | - $this->fetchDeletedUsers(); |
|
100 | - } |
|
101 | - if(is_array($this->deletedUsers) && count($this->deletedUsers) > 0) { |
|
102 | - return true; |
|
103 | - } |
|
104 | - return false; |
|
105 | - } |
|
93 | + /** |
|
94 | + * whether at least one user was detected as deleted |
|
95 | + * @return bool |
|
96 | + */ |
|
97 | + public function hasUsers() { |
|
98 | + if($this->deletedUsers === false) { |
|
99 | + $this->fetchDeletedUsers(); |
|
100 | + } |
|
101 | + if(is_array($this->deletedUsers) && count($this->deletedUsers) > 0) { |
|
102 | + return true; |
|
103 | + } |
|
104 | + return false; |
|
105 | + } |
|
106 | 106 | |
107 | - /** |
|
108 | - * marks a user as deleted |
|
109 | - * @param string $ocName |
|
110 | - */ |
|
111 | - public function markUser($ocName) { |
|
112 | - $this->config->setUserValue($ocName, 'user_ldap', 'isDeleted', '1'); |
|
113 | - } |
|
107 | + /** |
|
108 | + * marks a user as deleted |
|
109 | + * @param string $ocName |
|
110 | + */ |
|
111 | + public function markUser($ocName) { |
|
112 | + $this->config->setUserValue($ocName, 'user_ldap', 'isDeleted', '1'); |
|
113 | + } |
|
114 | 114 | } |
@@ -30,13 +30,13 @@ |
||
30 | 30 | * defines methods that are required by User class for LDAP interaction |
31 | 31 | */ |
32 | 32 | interface IUserTools { |
33 | - public function getConnection(); |
|
33 | + public function getConnection(); |
|
34 | 34 | |
35 | - public function readAttribute($dn, $attr, $filter = 'objectClass=*'); |
|
35 | + public function readAttribute($dn, $attr, $filter = 'objectClass=*'); |
|
36 | 36 | |
37 | - public function stringResemblesDN($string); |
|
37 | + public function stringResemblesDN($string); |
|
38 | 38 | |
39 | - public function dn2username($dn, $ldapname = null); |
|
39 | + public function dn2username($dn, $ldapname = null); |
|
40 | 40 | |
41 | - public function username2dn($name); |
|
41 | + public function username2dn($name); |
|
42 | 42 | } |
@@ -42,200 +42,200 @@ |
||
42 | 42 | * cache |
43 | 43 | */ |
44 | 44 | class Manager { |
45 | - /** @var IUserTools */ |
|
46 | - protected $access; |
|
47 | - |
|
48 | - /** @var IConfig */ |
|
49 | - protected $ocConfig; |
|
50 | - |
|
51 | - /** @var IDBConnection */ |
|
52 | - protected $db; |
|
53 | - |
|
54 | - /** @var FilesystemHelper */ |
|
55 | - protected $ocFilesystem; |
|
56 | - |
|
57 | - /** @var LogWrapper */ |
|
58 | - protected $ocLog; |
|
59 | - |
|
60 | - /** @var Image */ |
|
61 | - protected $image; |
|
62 | - |
|
63 | - /** @param \OCP\IAvatarManager */ |
|
64 | - protected $avatarManager; |
|
65 | - |
|
66 | - /** |
|
67 | - * @var CappedMemoryCache $usersByDN |
|
68 | - */ |
|
69 | - protected $usersByDN; |
|
70 | - /** |
|
71 | - * @var CappedMemoryCache $usersByUid |
|
72 | - */ |
|
73 | - protected $usersByUid; |
|
74 | - |
|
75 | - /** |
|
76 | - * @param IConfig $ocConfig |
|
77 | - * @param \OCA\User_LDAP\FilesystemHelper $ocFilesystem object that |
|
78 | - * gives access to necessary functions from the OC filesystem |
|
79 | - * @param \OCA\User_LDAP\LogWrapper $ocLog |
|
80 | - * @param IAvatarManager $avatarManager |
|
81 | - * @param Image $image an empty image instance |
|
82 | - * @param IDBConnection $db |
|
83 | - * @throws \Exception when the methods mentioned above do not exist |
|
84 | - */ |
|
85 | - public function __construct(IConfig $ocConfig, |
|
86 | - FilesystemHelper $ocFilesystem, LogWrapper $ocLog, |
|
87 | - IAvatarManager $avatarManager, Image $image, |
|
88 | - IDBConnection $db, IUserManager $userManager) { |
|
89 | - |
|
90 | - $this->ocConfig = $ocConfig; |
|
91 | - $this->ocFilesystem = $ocFilesystem; |
|
92 | - $this->ocLog = $ocLog; |
|
93 | - $this->avatarManager = $avatarManager; |
|
94 | - $this->image = $image; |
|
95 | - $this->db = $db; |
|
96 | - $this->userManager = $userManager; |
|
97 | - $this->usersByDN = new CappedMemoryCache(); |
|
98 | - $this->usersByUid = new CappedMemoryCache(); |
|
99 | - } |
|
100 | - |
|
101 | - /** |
|
102 | - * @brief binds manager to an instance of IUserTools (implemented by |
|
103 | - * Access). It needs to be assigned first before the manager can be used. |
|
104 | - * @param IUserTools |
|
105 | - */ |
|
106 | - public function setLdapAccess(IUserTools $access) { |
|
107 | - $this->access = $access; |
|
108 | - } |
|
109 | - |
|
110 | - /** |
|
111 | - * @brief creates an instance of User and caches (just runtime) it in the |
|
112 | - * property array |
|
113 | - * @param string $dn the DN of the user |
|
114 | - * @param string $uid the internal (owncloud) username |
|
115 | - * @return \OCA\User_LDAP\User\User |
|
116 | - */ |
|
117 | - private function createAndCache($dn, $uid) { |
|
118 | - $this->checkAccess(); |
|
119 | - $user = new User($uid, $dn, $this->access, $this->ocConfig, |
|
120 | - $this->ocFilesystem, clone $this->image, $this->ocLog, |
|
121 | - $this->avatarManager, $this->userManager); |
|
122 | - $this->usersByDN[$dn] = $user; |
|
123 | - $this->usersByUid[$uid] = $user; |
|
124 | - return $user; |
|
125 | - } |
|
126 | - |
|
127 | - /** |
|
128 | - * @brief checks whether the Access instance has been set |
|
129 | - * @throws \Exception if Access has not been set |
|
130 | - * @return null |
|
131 | - */ |
|
132 | - private function checkAccess() { |
|
133 | - if(is_null($this->access)) { |
|
134 | - throw new \Exception('LDAP Access instance must be set first'); |
|
135 | - } |
|
136 | - } |
|
137 | - |
|
138 | - /** |
|
139 | - * returns a list of attributes that will be processed further, e.g. quota, |
|
140 | - * email, displayname, or others. |
|
141 | - * @param bool $minimal - optional, set to true to skip attributes with big |
|
142 | - * payload |
|
143 | - * @return string[] |
|
144 | - */ |
|
145 | - public function getAttributes($minimal = false) { |
|
146 | - $attributes = array('dn', 'uid', 'samaccountname', 'memberof'); |
|
147 | - $possible = array( |
|
148 | - $this->access->getConnection()->ldapQuotaAttribute, |
|
149 | - $this->access->getConnection()->ldapEmailAttribute, |
|
150 | - $this->access->getConnection()->ldapUserDisplayName, |
|
151 | - $this->access->getConnection()->ldapUserDisplayName2, |
|
152 | - ); |
|
153 | - foreach($possible as $attr) { |
|
154 | - if(!is_null($attr)) { |
|
155 | - $attributes[] = $attr; |
|
156 | - } |
|
157 | - } |
|
158 | - |
|
159 | - $homeRule = $this->access->getConnection()->homeFolderNamingRule; |
|
160 | - if(strpos($homeRule, 'attr:') === 0) { |
|
161 | - $attributes[] = substr($homeRule, strlen('attr:')); |
|
162 | - } |
|
163 | - |
|
164 | - if(!$minimal) { |
|
165 | - // attributes that are not really important but may come with big |
|
166 | - // payload. |
|
167 | - $attributes = array_merge($attributes, array( |
|
168 | - 'jpegphoto', |
|
169 | - 'thumbnailphoto' |
|
170 | - )); |
|
171 | - } |
|
172 | - |
|
173 | - return $attributes; |
|
174 | - } |
|
175 | - |
|
176 | - /** |
|
177 | - * Checks whether the specified user is marked as deleted |
|
178 | - * @param string $id the ownCloud user name |
|
179 | - * @return bool |
|
180 | - */ |
|
181 | - public function isDeletedUser($id) { |
|
182 | - $isDeleted = $this->ocConfig->getUserValue( |
|
183 | - $id, 'user_ldap', 'isDeleted', 0); |
|
184 | - return intval($isDeleted) === 1; |
|
185 | - } |
|
186 | - |
|
187 | - /** |
|
188 | - * creates and returns an instance of OfflineUser for the specified user |
|
189 | - * @param string $id |
|
190 | - * @return \OCA\User_LDAP\User\OfflineUser |
|
191 | - */ |
|
192 | - public function getDeletedUser($id) { |
|
193 | - return new OfflineUser( |
|
194 | - $id, |
|
195 | - $this->ocConfig, |
|
196 | - $this->db, |
|
197 | - $this->access->getUserMapper()); |
|
198 | - } |
|
199 | - |
|
200 | - /** |
|
201 | - * @brief returns a User object by it's ownCloud username |
|
202 | - * @param string $id the DN or username of the user |
|
203 | - * @return \OCA\User_LDAP\User\User|\OCA\User_LDAP\User\OfflineUser|null |
|
204 | - */ |
|
205 | - protected function createInstancyByUserName($id) { |
|
206 | - //most likely a uid. Check whether it is a deleted user |
|
207 | - if($this->isDeletedUser($id)) { |
|
208 | - return $this->getDeletedUser($id); |
|
209 | - } |
|
210 | - $dn = $this->access->username2dn($id); |
|
211 | - if($dn !== false) { |
|
212 | - return $this->createAndCache($dn, $id); |
|
213 | - } |
|
214 | - return null; |
|
215 | - } |
|
216 | - |
|
217 | - /** |
|
218 | - * @brief returns a User object by it's DN or ownCloud username |
|
219 | - * @param string $id the DN or username of the user |
|
220 | - * @return \OCA\User_LDAP\User\User|\OCA\User_LDAP\User\OfflineUser|null |
|
221 | - * @throws \Exception when connection could not be established |
|
222 | - */ |
|
223 | - public function get($id) { |
|
224 | - $this->checkAccess(); |
|
225 | - if(isset($this->usersByDN[$id])) { |
|
226 | - return $this->usersByDN[$id]; |
|
227 | - } else if(isset($this->usersByUid[$id])) { |
|
228 | - return $this->usersByUid[$id]; |
|
229 | - } |
|
230 | - |
|
231 | - if($this->access->stringResemblesDN($id) ) { |
|
232 | - $uid = $this->access->dn2username($id); |
|
233 | - if($uid !== false) { |
|
234 | - return $this->createAndCache($id, $uid); |
|
235 | - } |
|
236 | - } |
|
237 | - |
|
238 | - return $this->createInstancyByUserName($id); |
|
239 | - } |
|
45 | + /** @var IUserTools */ |
|
46 | + protected $access; |
|
47 | + |
|
48 | + /** @var IConfig */ |
|
49 | + protected $ocConfig; |
|
50 | + |
|
51 | + /** @var IDBConnection */ |
|
52 | + protected $db; |
|
53 | + |
|
54 | + /** @var FilesystemHelper */ |
|
55 | + protected $ocFilesystem; |
|
56 | + |
|
57 | + /** @var LogWrapper */ |
|
58 | + protected $ocLog; |
|
59 | + |
|
60 | + /** @var Image */ |
|
61 | + protected $image; |
|
62 | + |
|
63 | + /** @param \OCP\IAvatarManager */ |
|
64 | + protected $avatarManager; |
|
65 | + |
|
66 | + /** |
|
67 | + * @var CappedMemoryCache $usersByDN |
|
68 | + */ |
|
69 | + protected $usersByDN; |
|
70 | + /** |
|
71 | + * @var CappedMemoryCache $usersByUid |
|
72 | + */ |
|
73 | + protected $usersByUid; |
|
74 | + |
|
75 | + /** |
|
76 | + * @param IConfig $ocConfig |
|
77 | + * @param \OCA\User_LDAP\FilesystemHelper $ocFilesystem object that |
|
78 | + * gives access to necessary functions from the OC filesystem |
|
79 | + * @param \OCA\User_LDAP\LogWrapper $ocLog |
|
80 | + * @param IAvatarManager $avatarManager |
|
81 | + * @param Image $image an empty image instance |
|
82 | + * @param IDBConnection $db |
|
83 | + * @throws \Exception when the methods mentioned above do not exist |
|
84 | + */ |
|
85 | + public function __construct(IConfig $ocConfig, |
|
86 | + FilesystemHelper $ocFilesystem, LogWrapper $ocLog, |
|
87 | + IAvatarManager $avatarManager, Image $image, |
|
88 | + IDBConnection $db, IUserManager $userManager) { |
|
89 | + |
|
90 | + $this->ocConfig = $ocConfig; |
|
91 | + $this->ocFilesystem = $ocFilesystem; |
|
92 | + $this->ocLog = $ocLog; |
|
93 | + $this->avatarManager = $avatarManager; |
|
94 | + $this->image = $image; |
|
95 | + $this->db = $db; |
|
96 | + $this->userManager = $userManager; |
|
97 | + $this->usersByDN = new CappedMemoryCache(); |
|
98 | + $this->usersByUid = new CappedMemoryCache(); |
|
99 | + } |
|
100 | + |
|
101 | + /** |
|
102 | + * @brief binds manager to an instance of IUserTools (implemented by |
|
103 | + * Access). It needs to be assigned first before the manager can be used. |
|
104 | + * @param IUserTools |
|
105 | + */ |
|
106 | + public function setLdapAccess(IUserTools $access) { |
|
107 | + $this->access = $access; |
|
108 | + } |
|
109 | + |
|
110 | + /** |
|
111 | + * @brief creates an instance of User and caches (just runtime) it in the |
|
112 | + * property array |
|
113 | + * @param string $dn the DN of the user |
|
114 | + * @param string $uid the internal (owncloud) username |
|
115 | + * @return \OCA\User_LDAP\User\User |
|
116 | + */ |
|
117 | + private function createAndCache($dn, $uid) { |
|
118 | + $this->checkAccess(); |
|
119 | + $user = new User($uid, $dn, $this->access, $this->ocConfig, |
|
120 | + $this->ocFilesystem, clone $this->image, $this->ocLog, |
|
121 | + $this->avatarManager, $this->userManager); |
|
122 | + $this->usersByDN[$dn] = $user; |
|
123 | + $this->usersByUid[$uid] = $user; |
|
124 | + return $user; |
|
125 | + } |
|
126 | + |
|
127 | + /** |
|
128 | + * @brief checks whether the Access instance has been set |
|
129 | + * @throws \Exception if Access has not been set |
|
130 | + * @return null |
|
131 | + */ |
|
132 | + private function checkAccess() { |
|
133 | + if(is_null($this->access)) { |
|
134 | + throw new \Exception('LDAP Access instance must be set first'); |
|
135 | + } |
|
136 | + } |
|
137 | + |
|
138 | + /** |
|
139 | + * returns a list of attributes that will be processed further, e.g. quota, |
|
140 | + * email, displayname, or others. |
|
141 | + * @param bool $minimal - optional, set to true to skip attributes with big |
|
142 | + * payload |
|
143 | + * @return string[] |
|
144 | + */ |
|
145 | + public function getAttributes($minimal = false) { |
|
146 | + $attributes = array('dn', 'uid', 'samaccountname', 'memberof'); |
|
147 | + $possible = array( |
|
148 | + $this->access->getConnection()->ldapQuotaAttribute, |
|
149 | + $this->access->getConnection()->ldapEmailAttribute, |
|
150 | + $this->access->getConnection()->ldapUserDisplayName, |
|
151 | + $this->access->getConnection()->ldapUserDisplayName2, |
|
152 | + ); |
|
153 | + foreach($possible as $attr) { |
|
154 | + if(!is_null($attr)) { |
|
155 | + $attributes[] = $attr; |
|
156 | + } |
|
157 | + } |
|
158 | + |
|
159 | + $homeRule = $this->access->getConnection()->homeFolderNamingRule; |
|
160 | + if(strpos($homeRule, 'attr:') === 0) { |
|
161 | + $attributes[] = substr($homeRule, strlen('attr:')); |
|
162 | + } |
|
163 | + |
|
164 | + if(!$minimal) { |
|
165 | + // attributes that are not really important but may come with big |
|
166 | + // payload. |
|
167 | + $attributes = array_merge($attributes, array( |
|
168 | + 'jpegphoto', |
|
169 | + 'thumbnailphoto' |
|
170 | + )); |
|
171 | + } |
|
172 | + |
|
173 | + return $attributes; |
|
174 | + } |
|
175 | + |
|
176 | + /** |
|
177 | + * Checks whether the specified user is marked as deleted |
|
178 | + * @param string $id the ownCloud user name |
|
179 | + * @return bool |
|
180 | + */ |
|
181 | + public function isDeletedUser($id) { |
|
182 | + $isDeleted = $this->ocConfig->getUserValue( |
|
183 | + $id, 'user_ldap', 'isDeleted', 0); |
|
184 | + return intval($isDeleted) === 1; |
|
185 | + } |
|
186 | + |
|
187 | + /** |
|
188 | + * creates and returns an instance of OfflineUser for the specified user |
|
189 | + * @param string $id |
|
190 | + * @return \OCA\User_LDAP\User\OfflineUser |
|
191 | + */ |
|
192 | + public function getDeletedUser($id) { |
|
193 | + return new OfflineUser( |
|
194 | + $id, |
|
195 | + $this->ocConfig, |
|
196 | + $this->db, |
|
197 | + $this->access->getUserMapper()); |
|
198 | + } |
|
199 | + |
|
200 | + /** |
|
201 | + * @brief returns a User object by it's ownCloud username |
|
202 | + * @param string $id the DN or username of the user |
|
203 | + * @return \OCA\User_LDAP\User\User|\OCA\User_LDAP\User\OfflineUser|null |
|
204 | + */ |
|
205 | + protected function createInstancyByUserName($id) { |
|
206 | + //most likely a uid. Check whether it is a deleted user |
|
207 | + if($this->isDeletedUser($id)) { |
|
208 | + return $this->getDeletedUser($id); |
|
209 | + } |
|
210 | + $dn = $this->access->username2dn($id); |
|
211 | + if($dn !== false) { |
|
212 | + return $this->createAndCache($dn, $id); |
|
213 | + } |
|
214 | + return null; |
|
215 | + } |
|
216 | + |
|
217 | + /** |
|
218 | + * @brief returns a User object by it's DN or ownCloud username |
|
219 | + * @param string $id the DN or username of the user |
|
220 | + * @return \OCA\User_LDAP\User\User|\OCA\User_LDAP\User\OfflineUser|null |
|
221 | + * @throws \Exception when connection could not be established |
|
222 | + */ |
|
223 | + public function get($id) { |
|
224 | + $this->checkAccess(); |
|
225 | + if(isset($this->usersByDN[$id])) { |
|
226 | + return $this->usersByDN[$id]; |
|
227 | + } else if(isset($this->usersByUid[$id])) { |
|
228 | + return $this->usersByUid[$id]; |
|
229 | + } |
|
230 | + |
|
231 | + if($this->access->stringResemblesDN($id) ) { |
|
232 | + $uid = $this->access->dn2username($id); |
|
233 | + if($uid !== false) { |
|
234 | + return $this->createAndCache($id, $uid); |
|
235 | + } |
|
236 | + } |
|
237 | + |
|
238 | + return $this->createInstancyByUserName($id); |
|
239 | + } |
|
240 | 240 | |
241 | 241 | } |
@@ -27,205 +27,205 @@ |
||
27 | 27 | use OCA\User_LDAP\Mapping\UserMapping; |
28 | 28 | |
29 | 29 | class OfflineUser { |
30 | - /** |
|
31 | - * @var string $ocName |
|
32 | - */ |
|
33 | - protected $ocName; |
|
34 | - /** |
|
35 | - * @var string $dn |
|
36 | - */ |
|
37 | - protected $dn; |
|
38 | - /** |
|
39 | - * @var string $uid the UID as provided by LDAP |
|
40 | - */ |
|
41 | - protected $uid; |
|
42 | - /** |
|
43 | - * @var string $displayName |
|
44 | - */ |
|
45 | - protected $displayName; |
|
46 | - /** |
|
47 | - * @var string $homePath |
|
48 | - */ |
|
49 | - protected $homePath; |
|
50 | - /** |
|
51 | - * @var string $lastLogin the timestamp of the last login |
|
52 | - */ |
|
53 | - protected $lastLogin; |
|
54 | - /** |
|
55 | - * @var string $email |
|
56 | - */ |
|
57 | - protected $email; |
|
58 | - /** |
|
59 | - * @var bool $hasActiveShares |
|
60 | - */ |
|
61 | - protected $hasActiveShares; |
|
62 | - /** |
|
63 | - * @var \OCP\IConfig $config |
|
64 | - */ |
|
65 | - protected $config; |
|
66 | - /** |
|
67 | - * @var \OCP\IDBConnection $db |
|
68 | - */ |
|
69 | - protected $db; |
|
70 | - /** |
|
71 | - * @var \OCA\User_LDAP\Mapping\UserMapping |
|
72 | - */ |
|
73 | - protected $mapping; |
|
74 | - |
|
75 | - /** |
|
76 | - * @param string $ocName |
|
77 | - * @param \OCP\IConfig $config |
|
78 | - * @param \OCP\IDBConnection $db |
|
79 | - * @param \OCA\User_LDAP\Mapping\UserMapping $mapping |
|
80 | - */ |
|
81 | - public function __construct($ocName, \OCP\IConfig $config, \OCP\IDBConnection $db, UserMapping $mapping) { |
|
82 | - $this->ocName = $ocName; |
|
83 | - $this->config = $config; |
|
84 | - $this->db = $db; |
|
85 | - $this->mapping = $mapping; |
|
86 | - $this->fetchDetails(); |
|
87 | - } |
|
88 | - |
|
89 | - /** |
|
90 | - * remove the Delete-flag from the user. |
|
91 | - */ |
|
92 | - public function unmark() { |
|
93 | - $this->config->setUserValue($this->ocName, 'user_ldap', 'isDeleted', '0'); |
|
94 | - } |
|
95 | - |
|
96 | - /** |
|
97 | - * exports the user details in an assoc array |
|
98 | - * @return array |
|
99 | - */ |
|
100 | - public function export() { |
|
101 | - $data = array(); |
|
102 | - $data['ocName'] = $this->getOCName(); |
|
103 | - $data['dn'] = $this->getDN(); |
|
104 | - $data['uid'] = $this->getUID(); |
|
105 | - $data['displayName'] = $this->getDisplayName(); |
|
106 | - $data['homePath'] = $this->getHomePath(); |
|
107 | - $data['lastLogin'] = $this->getLastLogin(); |
|
108 | - $data['email'] = $this->getEmail(); |
|
109 | - $data['hasActiveShares'] = $this->getHasActiveShares(); |
|
110 | - |
|
111 | - return $data; |
|
112 | - } |
|
113 | - |
|
114 | - /** |
|
115 | - * getter for ownCloud internal name |
|
116 | - * @return string |
|
117 | - */ |
|
118 | - public function getOCName() { |
|
119 | - return $this->ocName; |
|
120 | - } |
|
121 | - |
|
122 | - /** |
|
123 | - * getter for LDAP uid |
|
124 | - * @return string |
|
125 | - */ |
|
126 | - public function getUID() { |
|
127 | - return $this->uid; |
|
128 | - } |
|
129 | - |
|
130 | - /** |
|
131 | - * getter for LDAP DN |
|
132 | - * @return string |
|
133 | - */ |
|
134 | - public function getDN() { |
|
135 | - return $this->dn; |
|
136 | - } |
|
137 | - |
|
138 | - /** |
|
139 | - * getter for display name |
|
140 | - * @return string |
|
141 | - */ |
|
142 | - public function getDisplayName() { |
|
143 | - return $this->displayName; |
|
144 | - } |
|
145 | - |
|
146 | - /** |
|
147 | - * getter for email |
|
148 | - * @return string |
|
149 | - */ |
|
150 | - public function getEmail() { |
|
151 | - return $this->email; |
|
152 | - } |
|
153 | - |
|
154 | - /** |
|
155 | - * getter for home directory path |
|
156 | - * @return string |
|
157 | - */ |
|
158 | - public function getHomePath() { |
|
159 | - return $this->homePath; |
|
160 | - } |
|
161 | - |
|
162 | - /** |
|
163 | - * getter for the last login timestamp |
|
164 | - * @return int |
|
165 | - */ |
|
166 | - public function getLastLogin() { |
|
167 | - return intval($this->lastLogin); |
|
168 | - } |
|
169 | - |
|
170 | - /** |
|
171 | - * getter for having active shares |
|
172 | - * @return bool |
|
173 | - */ |
|
174 | - public function getHasActiveShares() { |
|
175 | - return $this->hasActiveShares; |
|
176 | - } |
|
177 | - |
|
178 | - /** |
|
179 | - * reads the user details |
|
180 | - */ |
|
181 | - protected function fetchDetails() { |
|
182 | - $properties = array ( |
|
183 | - 'displayName' => 'user_ldap', |
|
184 | - 'uid' => 'user_ldap', |
|
185 | - 'homePath' => 'user_ldap', |
|
186 | - 'email' => 'settings', |
|
187 | - 'lastLogin' => 'login' |
|
188 | - ); |
|
189 | - foreach($properties as $property => $app) { |
|
190 | - $this->$property = $this->config->getUserValue($this->ocName, $app, $property, ''); |
|
191 | - } |
|
192 | - |
|
193 | - $dn = $this->mapping->getDNByName($this->ocName); |
|
194 | - $this->dn = ($dn !== false) ? $dn : ''; |
|
195 | - |
|
196 | - $this->determineShares(); |
|
197 | - } |
|
198 | - |
|
199 | - |
|
200 | - /** |
|
201 | - * finds out whether the user has active shares. The result is stored in |
|
202 | - * $this->hasActiveShares |
|
203 | - */ |
|
204 | - protected function determineShares() { |
|
205 | - $query = $this->db->prepare(' |
|
30 | + /** |
|
31 | + * @var string $ocName |
|
32 | + */ |
|
33 | + protected $ocName; |
|
34 | + /** |
|
35 | + * @var string $dn |
|
36 | + */ |
|
37 | + protected $dn; |
|
38 | + /** |
|
39 | + * @var string $uid the UID as provided by LDAP |
|
40 | + */ |
|
41 | + protected $uid; |
|
42 | + /** |
|
43 | + * @var string $displayName |
|
44 | + */ |
|
45 | + protected $displayName; |
|
46 | + /** |
|
47 | + * @var string $homePath |
|
48 | + */ |
|
49 | + protected $homePath; |
|
50 | + /** |
|
51 | + * @var string $lastLogin the timestamp of the last login |
|
52 | + */ |
|
53 | + protected $lastLogin; |
|
54 | + /** |
|
55 | + * @var string $email |
|
56 | + */ |
|
57 | + protected $email; |
|
58 | + /** |
|
59 | + * @var bool $hasActiveShares |
|
60 | + */ |
|
61 | + protected $hasActiveShares; |
|
62 | + /** |
|
63 | + * @var \OCP\IConfig $config |
|
64 | + */ |
|
65 | + protected $config; |
|
66 | + /** |
|
67 | + * @var \OCP\IDBConnection $db |
|
68 | + */ |
|
69 | + protected $db; |
|
70 | + /** |
|
71 | + * @var \OCA\User_LDAP\Mapping\UserMapping |
|
72 | + */ |
|
73 | + protected $mapping; |
|
74 | + |
|
75 | + /** |
|
76 | + * @param string $ocName |
|
77 | + * @param \OCP\IConfig $config |
|
78 | + * @param \OCP\IDBConnection $db |
|
79 | + * @param \OCA\User_LDAP\Mapping\UserMapping $mapping |
|
80 | + */ |
|
81 | + public function __construct($ocName, \OCP\IConfig $config, \OCP\IDBConnection $db, UserMapping $mapping) { |
|
82 | + $this->ocName = $ocName; |
|
83 | + $this->config = $config; |
|
84 | + $this->db = $db; |
|
85 | + $this->mapping = $mapping; |
|
86 | + $this->fetchDetails(); |
|
87 | + } |
|
88 | + |
|
89 | + /** |
|
90 | + * remove the Delete-flag from the user. |
|
91 | + */ |
|
92 | + public function unmark() { |
|
93 | + $this->config->setUserValue($this->ocName, 'user_ldap', 'isDeleted', '0'); |
|
94 | + } |
|
95 | + |
|
96 | + /** |
|
97 | + * exports the user details in an assoc array |
|
98 | + * @return array |
|
99 | + */ |
|
100 | + public function export() { |
|
101 | + $data = array(); |
|
102 | + $data['ocName'] = $this->getOCName(); |
|
103 | + $data['dn'] = $this->getDN(); |
|
104 | + $data['uid'] = $this->getUID(); |
|
105 | + $data['displayName'] = $this->getDisplayName(); |
|
106 | + $data['homePath'] = $this->getHomePath(); |
|
107 | + $data['lastLogin'] = $this->getLastLogin(); |
|
108 | + $data['email'] = $this->getEmail(); |
|
109 | + $data['hasActiveShares'] = $this->getHasActiveShares(); |
|
110 | + |
|
111 | + return $data; |
|
112 | + } |
|
113 | + |
|
114 | + /** |
|
115 | + * getter for ownCloud internal name |
|
116 | + * @return string |
|
117 | + */ |
|
118 | + public function getOCName() { |
|
119 | + return $this->ocName; |
|
120 | + } |
|
121 | + |
|
122 | + /** |
|
123 | + * getter for LDAP uid |
|
124 | + * @return string |
|
125 | + */ |
|
126 | + public function getUID() { |
|
127 | + return $this->uid; |
|
128 | + } |
|
129 | + |
|
130 | + /** |
|
131 | + * getter for LDAP DN |
|
132 | + * @return string |
|
133 | + */ |
|
134 | + public function getDN() { |
|
135 | + return $this->dn; |
|
136 | + } |
|
137 | + |
|
138 | + /** |
|
139 | + * getter for display name |
|
140 | + * @return string |
|
141 | + */ |
|
142 | + public function getDisplayName() { |
|
143 | + return $this->displayName; |
|
144 | + } |
|
145 | + |
|
146 | + /** |
|
147 | + * getter for email |
|
148 | + * @return string |
|
149 | + */ |
|
150 | + public function getEmail() { |
|
151 | + return $this->email; |
|
152 | + } |
|
153 | + |
|
154 | + /** |
|
155 | + * getter for home directory path |
|
156 | + * @return string |
|
157 | + */ |
|
158 | + public function getHomePath() { |
|
159 | + return $this->homePath; |
|
160 | + } |
|
161 | + |
|
162 | + /** |
|
163 | + * getter for the last login timestamp |
|
164 | + * @return int |
|
165 | + */ |
|
166 | + public function getLastLogin() { |
|
167 | + return intval($this->lastLogin); |
|
168 | + } |
|
169 | + |
|
170 | + /** |
|
171 | + * getter for having active shares |
|
172 | + * @return bool |
|
173 | + */ |
|
174 | + public function getHasActiveShares() { |
|
175 | + return $this->hasActiveShares; |
|
176 | + } |
|
177 | + |
|
178 | + /** |
|
179 | + * reads the user details |
|
180 | + */ |
|
181 | + protected function fetchDetails() { |
|
182 | + $properties = array ( |
|
183 | + 'displayName' => 'user_ldap', |
|
184 | + 'uid' => 'user_ldap', |
|
185 | + 'homePath' => 'user_ldap', |
|
186 | + 'email' => 'settings', |
|
187 | + 'lastLogin' => 'login' |
|
188 | + ); |
|
189 | + foreach($properties as $property => $app) { |
|
190 | + $this->$property = $this->config->getUserValue($this->ocName, $app, $property, ''); |
|
191 | + } |
|
192 | + |
|
193 | + $dn = $this->mapping->getDNByName($this->ocName); |
|
194 | + $this->dn = ($dn !== false) ? $dn : ''; |
|
195 | + |
|
196 | + $this->determineShares(); |
|
197 | + } |
|
198 | + |
|
199 | + |
|
200 | + /** |
|
201 | + * finds out whether the user has active shares. The result is stored in |
|
202 | + * $this->hasActiveShares |
|
203 | + */ |
|
204 | + protected function determineShares() { |
|
205 | + $query = $this->db->prepare(' |
|
206 | 206 | SELECT COUNT(`uid_owner`) |
207 | 207 | FROM `*PREFIX*share` |
208 | 208 | WHERE `uid_owner` = ? |
209 | 209 | ', 1); |
210 | - $query->execute(array($this->ocName)); |
|
211 | - $sResult = $query->fetchColumn(0); |
|
212 | - if(intval($sResult) === 1) { |
|
213 | - $this->hasActiveShares = true; |
|
214 | - return; |
|
215 | - } |
|
216 | - |
|
217 | - $query = $this->db->prepare(' |
|
210 | + $query->execute(array($this->ocName)); |
|
211 | + $sResult = $query->fetchColumn(0); |
|
212 | + if(intval($sResult) === 1) { |
|
213 | + $this->hasActiveShares = true; |
|
214 | + return; |
|
215 | + } |
|
216 | + |
|
217 | + $query = $this->db->prepare(' |
|
218 | 218 | SELECT COUNT(`owner`) |
219 | 219 | FROM `*PREFIX*share_external` |
220 | 220 | WHERE `owner` = ? |
221 | 221 | ', 1); |
222 | - $query->execute(array($this->ocName)); |
|
223 | - $sResult = $query->fetchColumn(0); |
|
224 | - if(intval($sResult) === 1) { |
|
225 | - $this->hasActiveShares = true; |
|
226 | - return; |
|
227 | - } |
|
228 | - |
|
229 | - $this->hasActiveShares = false; |
|
230 | - } |
|
222 | + $query->execute(array($this->ocName)); |
|
223 | + $sResult = $query->fetchColumn(0); |
|
224 | + if(intval($sResult) === 1) { |
|
225 | + $this->hasActiveShares = true; |
|
226 | + return; |
|
227 | + } |
|
228 | + |
|
229 | + $this->hasActiveShares = false; |
|
230 | + } |
|
231 | 231 | } |
@@ -24,26 +24,26 @@ |
||
24 | 24 | |
25 | 25 | interface IUserLDAP { |
26 | 26 | |
27 | - //Functions used by LDAPProvider |
|
27 | + //Functions used by LDAPProvider |
|
28 | 28 | |
29 | - /** |
|
30 | - * Return access for LDAP interaction. |
|
31 | - * @param string $uid |
|
32 | - * @return Access instance of Access for LDAP interaction |
|
33 | - */ |
|
34 | - public function getLDAPAccess($uid); |
|
29 | + /** |
|
30 | + * Return access for LDAP interaction. |
|
31 | + * @param string $uid |
|
32 | + * @return Access instance of Access for LDAP interaction |
|
33 | + */ |
|
34 | + public function getLDAPAccess($uid); |
|
35 | 35 | |
36 | - /** |
|
37 | - * Return a new LDAP connection for the specified user. |
|
38 | - * @param string $uid |
|
39 | - * @return resource of the LDAP connection |
|
40 | - */ |
|
41 | - public function getNewLDAPConnection($uid); |
|
36 | + /** |
|
37 | + * Return a new LDAP connection for the specified user. |
|
38 | + * @param string $uid |
|
39 | + * @return resource of the LDAP connection |
|
40 | + */ |
|
41 | + public function getNewLDAPConnection($uid); |
|
42 | 42 | |
43 | - /** |
|
44 | - * Return the username for the given LDAP DN, if available. |
|
45 | - * @param string $dn |
|
46 | - * @return string|false with the username |
|
47 | - */ |
|
48 | - public function dn2UserName($dn); |
|
43 | + /** |
|
44 | + * Return the username for the given LDAP DN, if available. |
|
45 | + * @param string $dn |
|
46 | + * @return string|false with the username |
|
47 | + */ |
|
48 | + public function dn2UserName($dn); |
|
49 | 49 | } |
@@ -27,13 +27,13 @@ |
||
27 | 27 | |
28 | 28 | |
29 | 29 | abstract class BackendUtility { |
30 | - protected $access; |
|
30 | + protected $access; |
|
31 | 31 | |
32 | - /** |
|
33 | - * constructor, make sure the subclasses call this one! |
|
34 | - * @param Access $access an instance of Access for LDAP interaction |
|
35 | - */ |
|
36 | - public function __construct(Access $access) { |
|
37 | - $this->access = $access; |
|
38 | - } |
|
32 | + /** |
|
33 | + * constructor, make sure the subclasses call this one! |
|
34 | + * @param Access $access an instance of Access for LDAP interaction |
|
35 | + */ |
|
36 | + public function __construct(Access $access) { |
|
37 | + $this->access = $access; |
|
38 | + } |
|
39 | 39 | } |
@@ -28,52 +28,52 @@ |
||
28 | 28 | namespace OCA\User_LDAP; |
29 | 29 | |
30 | 30 | class WizardResult { |
31 | - protected $changes = array(); |
|
32 | - protected $options = array(); |
|
33 | - protected $markedChange = false; |
|
31 | + protected $changes = array(); |
|
32 | + protected $options = array(); |
|
33 | + protected $markedChange = false; |
|
34 | 34 | |
35 | - /** |
|
36 | - * @param string $key |
|
37 | - * @param mixed $value |
|
38 | - */ |
|
39 | - public function addChange($key, $value) { |
|
40 | - $this->changes[$key] = $value; |
|
41 | - } |
|
35 | + /** |
|
36 | + * @param string $key |
|
37 | + * @param mixed $value |
|
38 | + */ |
|
39 | + public function addChange($key, $value) { |
|
40 | + $this->changes[$key] = $value; |
|
41 | + } |
|
42 | 42 | |
43 | - /** |
|
44 | - * |
|
45 | - */ |
|
46 | - public function markChange() { |
|
47 | - $this->markedChange = true; |
|
48 | - } |
|
43 | + /** |
|
44 | + * |
|
45 | + */ |
|
46 | + public function markChange() { |
|
47 | + $this->markedChange = true; |
|
48 | + } |
|
49 | 49 | |
50 | - /** |
|
51 | - * @param string $key |
|
52 | - * @param array|string $values |
|
53 | - */ |
|
54 | - public function addOptions($key, $values) { |
|
55 | - if(!is_array($values)) { |
|
56 | - $values = array($values); |
|
57 | - } |
|
58 | - $this->options[$key] = $values; |
|
59 | - } |
|
50 | + /** |
|
51 | + * @param string $key |
|
52 | + * @param array|string $values |
|
53 | + */ |
|
54 | + public function addOptions($key, $values) { |
|
55 | + if(!is_array($values)) { |
|
56 | + $values = array($values); |
|
57 | + } |
|
58 | + $this->options[$key] = $values; |
|
59 | + } |
|
60 | 60 | |
61 | - /** |
|
62 | - * @return bool |
|
63 | - */ |
|
64 | - public function hasChanges() { |
|
65 | - return (count($this->changes) > 0 || $this->markedChange); |
|
66 | - } |
|
61 | + /** |
|
62 | + * @return bool |
|
63 | + */ |
|
64 | + public function hasChanges() { |
|
65 | + return (count($this->changes) > 0 || $this->markedChange); |
|
66 | + } |
|
67 | 67 | |
68 | - /** |
|
69 | - * @return array |
|
70 | - */ |
|
71 | - public function getResultArray() { |
|
72 | - $result = array(); |
|
73 | - $result['changes'] = $this->changes; |
|
74 | - if(count($this->options) > 0) { |
|
75 | - $result['options'] = $this->options; |
|
76 | - } |
|
77 | - return $result; |
|
78 | - } |
|
68 | + /** |
|
69 | + * @return array |
|
70 | + */ |
|
71 | + public function getResultArray() { |
|
72 | + $result = array(); |
|
73 | + $result['changes'] = $this->changes; |
|
74 | + if(count($this->options) > 0) { |
|
75 | + $result['options'] = $this->options; |
|
76 | + } |
|
77 | + return $result; |
|
78 | + } |
|
79 | 79 | } |
@@ -36,101 +36,101 @@ |
||
36 | 36 | use OCA\User_LDAP\User_Proxy; |
37 | 37 | |
38 | 38 | class CheckUser extends Command { |
39 | - /** @var \OCA\User_LDAP\User_Proxy */ |
|
40 | - protected $backend; |
|
41 | - |
|
42 | - /** @var \OCA\User_LDAP\Helper */ |
|
43 | - protected $helper; |
|
44 | - |
|
45 | - /** @var \OCA\User_LDAP\User\DeletedUsersIndex */ |
|
46 | - protected $dui; |
|
47 | - |
|
48 | - /** @var \OCA\User_LDAP\Mapping\UserMapping */ |
|
49 | - protected $mapping; |
|
50 | - |
|
51 | - /** |
|
52 | - * @param User_Proxy $uBackend |
|
53 | - * @param LDAPHelper $helper |
|
54 | - * @param DeletedUsersIndex $dui |
|
55 | - * @param UserMapping $mapping |
|
56 | - */ |
|
57 | - public function __construct(User_Proxy $uBackend, LDAPHelper $helper, DeletedUsersIndex $dui, UserMapping $mapping) { |
|
58 | - $this->backend = $uBackend; |
|
59 | - $this->helper = $helper; |
|
60 | - $this->dui = $dui; |
|
61 | - $this->mapping = $mapping; |
|
62 | - parent::__construct(); |
|
63 | - } |
|
64 | - |
|
65 | - protected function configure() { |
|
66 | - $this |
|
67 | - ->setName('ldap:check-user') |
|
68 | - ->setDescription('checks whether a user exists on LDAP.') |
|
69 | - ->addArgument( |
|
70 | - 'ocName', |
|
71 | - InputArgument::REQUIRED, |
|
72 | - 'the user name as used in ownCloud' |
|
73 | - ) |
|
74 | - ->addOption( |
|
75 | - 'force', |
|
76 | - null, |
|
77 | - InputOption::VALUE_NONE, |
|
78 | - 'ignores disabled LDAP configuration' |
|
79 | - ) |
|
80 | - ; |
|
81 | - } |
|
82 | - |
|
83 | - protected function execute(InputInterface $input, OutputInterface $output) { |
|
84 | - try { |
|
85 | - $uid = $input->getArgument('ocName'); |
|
86 | - $this->isAllowed($input->getOption('force')); |
|
87 | - $this->confirmUserIsMapped($uid); |
|
88 | - $exists = $this->backend->userExistsOnLDAP($uid); |
|
89 | - if($exists === true) { |
|
90 | - $output->writeln('The user is still available on LDAP.'); |
|
91 | - return; |
|
92 | - } |
|
93 | - |
|
94 | - $this->dui->markUser($uid); |
|
95 | - $output->writeln('The user does not exists on LDAP anymore.'); |
|
96 | - $output->writeln('Clean up the user\'s remnants by: ./occ user:delete "' |
|
97 | - . $uid . '"'); |
|
98 | - } catch (\Exception $e) { |
|
99 | - $output->writeln('<error>' . $e->getMessage(). '</error>'); |
|
100 | - } |
|
101 | - } |
|
102 | - |
|
103 | - /** |
|
104 | - * checks whether a user is actually mapped |
|
105 | - * @param string $ocName the username as used in ownCloud |
|
106 | - * @throws \Exception |
|
107 | - * @return true |
|
108 | - */ |
|
109 | - protected function confirmUserIsMapped($ocName) { |
|
110 | - $dn = $this->mapping->getDNByName($ocName); |
|
111 | - if ($dn === false) { |
|
112 | - throw new \Exception('The given user is not a recognized LDAP user.'); |
|
113 | - } |
|
114 | - |
|
115 | - return true; |
|
116 | - } |
|
117 | - |
|
118 | - /** |
|
119 | - * checks whether the setup allows reliable checking of LDAP user existence |
|
120 | - * @throws \Exception |
|
121 | - * @return true |
|
122 | - */ |
|
123 | - protected function isAllowed($force) { |
|
124 | - if($this->helper->haveDisabledConfigurations() && !$force) { |
|
125 | - throw new \Exception('Cannot check user existence, because ' |
|
126 | - . 'disabled LDAP configurations are present.'); |
|
127 | - } |
|
128 | - |
|
129 | - // we don't check ldapUserCleanupInterval from config.php because this |
|
130 | - // action is triggered manually, while the setting only controls the |
|
131 | - // background job. |
|
132 | - |
|
133 | - return true; |
|
134 | - } |
|
39 | + /** @var \OCA\User_LDAP\User_Proxy */ |
|
40 | + protected $backend; |
|
41 | + |
|
42 | + /** @var \OCA\User_LDAP\Helper */ |
|
43 | + protected $helper; |
|
44 | + |
|
45 | + /** @var \OCA\User_LDAP\User\DeletedUsersIndex */ |
|
46 | + protected $dui; |
|
47 | + |
|
48 | + /** @var \OCA\User_LDAP\Mapping\UserMapping */ |
|
49 | + protected $mapping; |
|
50 | + |
|
51 | + /** |
|
52 | + * @param User_Proxy $uBackend |
|
53 | + * @param LDAPHelper $helper |
|
54 | + * @param DeletedUsersIndex $dui |
|
55 | + * @param UserMapping $mapping |
|
56 | + */ |
|
57 | + public function __construct(User_Proxy $uBackend, LDAPHelper $helper, DeletedUsersIndex $dui, UserMapping $mapping) { |
|
58 | + $this->backend = $uBackend; |
|
59 | + $this->helper = $helper; |
|
60 | + $this->dui = $dui; |
|
61 | + $this->mapping = $mapping; |
|
62 | + parent::__construct(); |
|
63 | + } |
|
64 | + |
|
65 | + protected function configure() { |
|
66 | + $this |
|
67 | + ->setName('ldap:check-user') |
|
68 | + ->setDescription('checks whether a user exists on LDAP.') |
|
69 | + ->addArgument( |
|
70 | + 'ocName', |
|
71 | + InputArgument::REQUIRED, |
|
72 | + 'the user name as used in ownCloud' |
|
73 | + ) |
|
74 | + ->addOption( |
|
75 | + 'force', |
|
76 | + null, |
|
77 | + InputOption::VALUE_NONE, |
|
78 | + 'ignores disabled LDAP configuration' |
|
79 | + ) |
|
80 | + ; |
|
81 | + } |
|
82 | + |
|
83 | + protected function execute(InputInterface $input, OutputInterface $output) { |
|
84 | + try { |
|
85 | + $uid = $input->getArgument('ocName'); |
|
86 | + $this->isAllowed($input->getOption('force')); |
|
87 | + $this->confirmUserIsMapped($uid); |
|
88 | + $exists = $this->backend->userExistsOnLDAP($uid); |
|
89 | + if($exists === true) { |
|
90 | + $output->writeln('The user is still available on LDAP.'); |
|
91 | + return; |
|
92 | + } |
|
93 | + |
|
94 | + $this->dui->markUser($uid); |
|
95 | + $output->writeln('The user does not exists on LDAP anymore.'); |
|
96 | + $output->writeln('Clean up the user\'s remnants by: ./occ user:delete "' |
|
97 | + . $uid . '"'); |
|
98 | + } catch (\Exception $e) { |
|
99 | + $output->writeln('<error>' . $e->getMessage(). '</error>'); |
|
100 | + } |
|
101 | + } |
|
102 | + |
|
103 | + /** |
|
104 | + * checks whether a user is actually mapped |
|
105 | + * @param string $ocName the username as used in ownCloud |
|
106 | + * @throws \Exception |
|
107 | + * @return true |
|
108 | + */ |
|
109 | + protected function confirmUserIsMapped($ocName) { |
|
110 | + $dn = $this->mapping->getDNByName($ocName); |
|
111 | + if ($dn === false) { |
|
112 | + throw new \Exception('The given user is not a recognized LDAP user.'); |
|
113 | + } |
|
114 | + |
|
115 | + return true; |
|
116 | + } |
|
117 | + |
|
118 | + /** |
|
119 | + * checks whether the setup allows reliable checking of LDAP user existence |
|
120 | + * @throws \Exception |
|
121 | + * @return true |
|
122 | + */ |
|
123 | + protected function isAllowed($force) { |
|
124 | + if($this->helper->haveDisabledConfigurations() && !$force) { |
|
125 | + throw new \Exception('Cannot check user existence, because ' |
|
126 | + . 'disabled LDAP configurations are present.'); |
|
127 | + } |
|
128 | + |
|
129 | + // we don't check ldapUserCleanupInterval from config.php because this |
|
130 | + // action is triggered manually, while the setting only controls the |
|
131 | + // background job. |
|
132 | + |
|
133 | + return true; |
|
134 | + } |
|
135 | 135 | |
136 | 136 | } |
@@ -26,13 +26,13 @@ |
||
26 | 26 | namespace OCA\User_LDAP; |
27 | 27 | |
28 | 28 | abstract class LDAPUtility { |
29 | - protected $ldap; |
|
29 | + protected $ldap; |
|
30 | 30 | |
31 | - /** |
|
32 | - * constructor, make sure the subclasses call this one! |
|
33 | - * @param ILDAPWrapper $ldapWrapper an instance of an ILDAPWrapper |
|
34 | - */ |
|
35 | - public function __construct(ILDAPWrapper $ldapWrapper) { |
|
36 | - $this->ldap = $ldapWrapper; |
|
37 | - } |
|
31 | + /** |
|
32 | + * constructor, make sure the subclasses call this one! |
|
33 | + * @param ILDAPWrapper $ldapWrapper an instance of an ILDAPWrapper |
|
34 | + */ |
|
35 | + public function __construct(ILDAPWrapper $ldapWrapper) { |
|
36 | + $this->ldap = $ldapWrapper; |
|
37 | + } |
|
38 | 38 | } |