+global\auth_plugin_authad::getUserData()

Complexity

Conditions	20
Paths	387

Size

Total Lines

90

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function getUserData($user, $requireGroups = true)
    {
        global $conf;
        global $lang;
        global $ID;
        $adldap = $this->initAdLdap($this->getUserDomain($user));
        if (!$adldap) return array();

        if ($user == '') return array();

        $fields = array('mail', 'displayname', 'samaccountname', 'lastpwd', 'pwdlastset', 'useraccountcontrol');

        // add additional fields to read
        $fields = array_merge($fields, $this->conf['additional']);
        $fields = array_unique($fields);
        $fields = array_filter($fields);

        //get info for given user
        $result = $adldap->user()->info($this->getUserName($user), $fields);
        if ($result == false) {
            return array();
        }

        //general user info
        $info = array();
        $info['name'] = $result[0]['displayname'][0];
        $info['mail'] = $result[0]['mail'][0];
        $info['uid']  = $result[0]['samaccountname'][0];
        $info['dn']   = $result[0]['dn'];
        //last password set (Windows counts from January 1st 1601)
        $info['lastpwd'] = $result[0]['pwdlastset'][0] / 10000000 - 11644473600;
        //will it expire?
        $info['expires'] = !($result[0]['useraccountcontrol'][0] & 0x10000); //ADS_UF_DONT_EXPIRE_PASSWD

        // additional information
        foreach ($this->conf['additional'] as $field) {
            if (isset($result[0][strtolower($field)])) {
                $info[$field] = $result[0][strtolower($field)][0];
            }
        }

        // handle ActiveDirectory memberOf
        $info['grps'] = $adldap->user()->groups($this->getUserName($user), (bool) $this->opts['recursive_groups']);

        if (is_array($info['grps'])) {
            foreach ($info['grps'] as $ndx => $group) {
                $info['grps'][$ndx] = $this->cleanGroup($group);
            }
        }

        // always add the default group to the list of groups
        if (!is_array($info['grps']) || !in_array($conf['defaultgroup'], $info['grps'])) {
            $info['grps'][] = $conf['defaultgroup'];
        }

        // add the user's domain to the groups
        $domain = $this->getUserDomain($user);
        if ($domain && !in_array("domain-$domain", (array) $info['grps'])) {
            $info['grps'][] = $this->cleanGroup("domain-$domain");
        }

        // check expiry time
        if ($info['expires'] && $this->conf['expirywarn']) {
            try {
                $expiry = $adldap->user()->passwordExpiry($user);
                if (is_array($expiry)) {
                    $info['expiresat'] = $expiry['expiryts'];
                    $info['expiresin'] = round(($info['expiresat'] - time())/(24*60*60));

                    // if this is the current user, warn him (once per request only)
                    if (($_SERVER['REMOTE_USER'] == $user) &&
                        ($info['expiresin'] <= $this->conf['expirywarn']) &&
                        !$this->msgshown
                    ) {
                        $msg = sprintf($this->getLang('authpwdexpire'), $info['expiresin']);
                        if ($this->canDo('modPass')) {
                            $url = wl($ID, array('do'=> 'profile'));
                            $msg .= ' <a href="'.$url.'">'.$lang['btn_profile'].'</a>';
                        }
                        msg($msg);
                        $this->msgshown = true;
                    }
                }
            } catch (adLDAPException $e) {

The class adLDAPException does not exist. Did you forget a USE statement, or did you not list all dependencies?

                // ignore. should usually not happen
            }
        }

        return $info;
    }