5define(
'IL_LDAP_BIND_ANONYMOUS',0);
 
    6define(
'IL_LDAP_BIND_USER',1);
 
    8define(
'IL_LDAP_SCOPE_SUB',0);
 
    9define(
'IL_LDAP_SCOPE_ONE',1);
 
   10define(
'IL_LDAP_SCOPE_BASE',2);
 
   48                $this->server_id = $a_server_id;
 
   60                if(isset(self::$instances[$a_server_id]))
 
   62                        return self::$instances[$a_server_id];
 
   64                return self::$instances[$a_server_id] = 
new ilLDAPServer($a_server_id);
 
   75                if(!$this->fallback_urls)
 
   80                $all_urls = array_merge($this->fallback_urls);
 
   81                $all_urls[] = $this->
getUrl();
 
   83                $query = 
'UPDATE ldap_server_settings SET '.
 
   84                                'url = '.$ilDB->quote(implode(
',', $all_urls),
'text').
' '.
 
   85                                'WHERE server_id = '.$ilDB->quote($this->
getServerId(),
'integer');
 
   97                return function_exists(
'ldap_bind');
 
  109                $query = 
"SELECT server_id FROM ldap_server_settings ".
 
  110                        "WHERE active = 1 AND authentication = 1 ".
 
  113                $server_ids = array();
 
  116                        $server_ids[] = 
$row->server_id;
 
  130                $query = 
"SELECT server_id FROM ldap_server_settings ".
 
  132                        "AND sync_per_cron = 1 ".
 
  138                        $server_ids[] = 
$row->server_id;
 
  140                return $server_ids ? $server_ids : array();
 
  154                $query = 
"SELECT server_id FROM ldap_server_settings ".
 
  156                        "AND role_sync_active = 1 ";
 
  159                $server_ids = array();
 
  162                        $server_ids[] = 
$row->server_id;
 
  204                $query = 
"SELECT server_id FROM ldap_server_settings ORDER BY name";
 
  209                        $server_ids[] = 
$row->server_id;
 
  211                return $server_ids ? $server_ids : array();
 
  223                $query = 
"SELECT server_id FROM ldap_server_settings ORDER BY name";
 
  245                $query = 
"SELECT * FROM ldap_server_settings ORDER BY name";
 
  278                $query = 
"SELECT server_id FROM ldap_server_settings ".
 
  279                        "WHERE active = ".$ilDB->quote(1,
'integer').
" ".
 
  280                        "AND authentication = ".$ilDB->quote(0,
'integer').
" ".
 
  281                        "AND ( authentication_type = ".$ilDB->quote($a_auth_mode,
'integer').
" ".
 
  282                        "OR authentication_type = ".$ilDB->quote(0,
'integer').
")";
 
  285                $server_ids = array();
 
  288                        $server_ids[] = 
$row->server_id;
 
  303                $query = 
"SELECT server_id FROM ldap_server_settings ".
 
  304                        "WHERE authentication_type = ".$ilDB->quote($a_auth_mode,
'integer').
" ".
 
  305                        "AND authentication = ".$ilDB->quote(0,
'integer');
 
  318                $query = 
"SELECT server_id FROM ldap_server_settings ".
 
  319                        "WHERE authentication_type = ".$ilDB->quote($a_auth_mode,
'integer').
" ";
 
  323                        return $row->server_id;
 
  335                $query = 
'UPDATE ldap_server_settings '.
 
  336                        'SET authentication_type = '. 
$ilDB->quote(0,
'integer').
' '.
 
  337                        'WHERE authentication_type = '.$ilDB->quote($a_authmode,
'integer');
 
  358                        $query = 
"UPDATE ldap_server_settings ".
 
  359                                'SET authentication_type = '.$ilDB->quote($a_auth_mode,
'integer').
" ".
 
  360                                'WHERE server_id = '.$ilDB->quote($a_ldap_server_id,
'integer');
 
  375                        $GLOBALS[
'ilLog']->write(__METHOD__.
': No auth mode given..............');
 
  378                $auth_arr = explode(
'_', $a_auth_mode);
 
  379                return ($auth_arr[0] == 
AUTH_LDAP) and $auth_arr[1];
 
  389                if(self::isAuthModeLDAP($a_auth_mode))
 
  391                        $auth_arr = explode(
'_', $a_auth_mode);
 
  403                $auth_arr = explode(
'_', $a_auth_key);
 
  404                if(count((array) $auth_arr) > 1)
 
  406                        return 'ldap_'.$auth_arr[1];
 
  418                $auth_arr = explode(
'_', $a_auth_mode);
 
  419                if(count((array) $auth_arr) > 1)
 
  440                $this->enabled_authentication = (bool) $a_status;
 
  458                $this->authentication_mapping = $a_map;
 
  480                        return 'ldap_'.$this->getServerId();
 
  489        $this->active = $a_status;
 
  493                return $this->active;
 
  501        $this->url_string = $a_url;
 
  504                $urls = explode(
',',$a_url);
 
  507                foreach($urls as 
$url)
 
  516                                $this->fallback_urls[] = 
$url;
 
  522        return $this->url_string;
 
  534                include_once(
'Services/LDAP/classes/class.ilLDAPQuery.php');
 
  536                foreach(array_merge(array(0 => $this->url),$this->fallback_urls) as 
$url)
 
  550                                ilLoggerFactory::getLogger(
'auth')->error(
'Cannot connect to LDAP server: '. $url .
' '. $exc->getCode().
' '. $exc->getMessage());
 
  564        $this->name = $a_name;
 
  572        $this->version = $a_version;
 
  576        return $this->base_dn;
 
  580        $this->base_dn = $a_base_dn;
 
  584                return $this->referrals ? true : 
false;
 
  588                $this->referrals = $a_status; 
 
  592                return $this->tls ? true : 
false;
 
  596                $this->tls = $a_status;
 
  600                return $this->binding_type;
 
  615                return $this->bind_user;
 
  619                $this->bind_user = $a_user;
 
  623                return $this->bind_password;
 
  627                $this->bind_password = $a_password;
 
  631                return $this->search_base;
 
  635                $this->search_base = $a_search_base;
 
  639                return $this->user_attribute;
 
  643                $this->user_attribute = $a_user_attr;
 
  651                $this->filter = $a_filter;
 
  655                return $this->group_dn;
 
  659                $this->group_dn = $a_value;
 
  667                $this->group_filter = $a_value;
 
  671                return $this->group_member;
 
  675                $this->group_member = $a_value;
 
  679                return $this->group_name;
 
  683                $this->group_name = $a_value;
 
  705                                $new_names[] = trim($name);
 
  714                return $this->group_attribute;
 
  718                $this->group_attribute = $a_value;
 
  723                $this->group_optional = (bool) $a_status;               
 
  727                return (
bool) $this->group_optional;
 
  731                $this->group_user_filter = $a_filter;
 
  735                return $this->group_user_filter;
 
  740                return (
bool) $this->memberisdn;
 
  744                $this->memberisdn = (bool) $a_value;
 
  748                $this->group_scope = $a_value;
 
  752                return $this->group_scope;
 
  756                $this->user_scope = $a_value;
 
  760                return $this->user_scope;
 
  764                return $this->sync_on_login;
 
  768                $this->sync_on_login = (int) $a_value;
 
  772                return $this->sync_per_cron;
 
  776                $this->sync_per_cron = (int) $a_value;
 
  780                $this->global_role = $a_role;
 
  788                $this->role_bind_dn = $a_value;
 
  796                $this->role_bind_pass = $a_value;
 
  804                $this->role_sync_active = $a_value;
 
  809                return $this->username_filter;
 
  813                $this->username_filter = $a_value;
 
  825                $this->account_migration = $a_status;
 
  836                return $this->account_migration ? true : 
false;
 
  850                if(!strlen($this->
getName()) ||
 
  851                        !strlen($this->
getUrl()) ||
 
  855                        $ilErr->setMessage($this->lng->txt(
'fill_out_all_required_fields'));
 
  861                        $ilErr->appendMessage($this->lng->txt(
'ldap_missing_bind_user'));
 
  866                        $ilErr->appendMessage($this->lng->txt(
'ldap_missing_role_assignment'));
 
  870                        $ilErr->appendMessage($this->lng->txt(
'ldap_tls_conflict'));
 
  873                return strlen(
$ilErr->getMessage()) ? false : 
true;
 
  880                $next_id = 
$ilDB->nextId(
'ldap_server_settings');
 
  882                $query = 
'INSERT INTO ldap_server_settings (server_id,active,name,url,version,base_dn,referrals,tls,bind_type,bind_user,bind_pass,'.
 
  883                        'search_base,user_scope,user_attribute,filter,group_dn,group_scope,group_filter,group_member,group_memberisdn,group_name,'.
 
  884                        'group_attribute,group_optional,group_user_filter,sync_on_login,sync_per_cron,role_sync_active,role_bind_dn,role_bind_pass,migration, '.
 
  885                        'authentication,authentication_type,username_filter) '.
 
  886                        'VALUES (%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s)';
 
  889                                'integer',
'integer',
'text',
'text',
'integer',
'text',
'integer',
'integer',
'integer',
'text',
'text',
'text',
'integer',
 
  890                                'text',
'text',
'text',
'integer',
'text',
'text',
'integer',
'text',
'text',
'integer',
'text',
'integer',
'integer',
'integer',
 
  891                                'text',
'text', 
'integer',
'integer',
'integer',
"text"),
 
  928                $this->server_id = $next_id;
 
  936                $query = 
"UPDATE ldap_server_settings SET ".
 
  937                        "active = ".$this->db->quote($this->
isActive(),
'integer').
", ".
 
  938                        "name = ".$this->db->quote($this->
getName(),
'text').
", ".
 
  939                        "url = ".$this->db->quote($this->
getUrlString(),
'text').
", ".
 
  940                        "version = ".$this->db->quote($this->
getVersion(),
'integer').
", ".
 
  941                        "base_dn = ".$this->db->quote($this->
getBaseDN(),
'text').
", ".
 
  943                        "tls = ".$this->db->quote($this->
isActiveTLS(),
'integer').
", ".
 
  944                        "bind_type = ".$this->db->quote($this->
getBindingType(),
'integer').
", ".
 
  945                        "bind_user = ".$this->db->quote($this->
getBindUser(),
'text').
", ".
 
  947                        "search_base = ".$this->db->quote($this->
getSearchBase(),
'text').
", ".
 
  948                        "user_scope = ".$this->db->quote($this->
getUserScope(),
'integer').
", ".
 
  949                        "user_attribute = ".$this->db->quote($this->
getUserAttribute(),
'text').
", ".
 
  950                        "filter = ".$this->db->quote($this->
getFilter(),
'text').
", ".
 
  951                        "group_dn = ".$this->db->quote($this->
getGroupDN(),
'text').
", ".
 
  952                        "group_scope = ".$this->db->quote($this->
getGroupScope(),
'integer').
", ".
 
  953                        "group_filter = ".$this->db->quote($this->
getGroupFilter(),
'text').
", ".
 
  954                        "group_member = ".$this->db->quote($this->
getGroupMember(),
'text').
", ".
 
  956                        "group_name = ".$this->db->quote($this->
getGroupName(),
'text').
", ".
 
  960                        "sync_on_login = ".$this->db->quote(($this->
enabledSyncOnLogin() ? 1 : 0),
'integer').
", ".
 
  961                        "sync_per_cron = ".$this->db->quote(($this->
enabledSyncPerCron() ? 1 : 0),
'integer').
", ".
 
  963                        "role_bind_dn = ".$this->db->quote($this->
getRoleBindDN(),
'text').
", ".
 
  971                        "WHERE server_id = ".$this->db->quote($this->
getServerId(),
'integer');
 
  980        public function delete()
 
  987                include_once 
'Services/LDAP/classes/class.ilLDAPAttributeMapping.php';
 
  990                include_once 
'Services/LDAP/classes/class.ilLDAPRoleAssignmentRule.php';
 
  993                foreach($rules as $ruleAssigment)
 
  995                        $ruleAssigment->delete();
 
  998                include_once 
'Services/LDAP/classes/class.ilLDAPRoleGroupMappingSettings.php';
 
 1001                $query = 
"DELETE FROM ldap_server_settings ".
 
 1002                        "WHERE server_id = ".$this->db->quote($this->
getServerId(),
'integer');
 
 1015                        'url'           => $this->
getUrl(),
 
 1042                if(@include_once(
'Log.php'))
 
 1044                        if(@include_once(
'Log/observer.php'))
 
 1081                $filter = trim($a_filter);
 
 1083                if(!strlen($filter))
 
 1088                if(strpos($filter,
'(') !== 0)
 
 1090                        $filter = (
'('.$filter);
 
 1092                if(substr($filter,-1) != 
')')
 
 1094                        $filter = ($filter.
')');
 
 1110                        include_once(
'Services/LDAP/classes/class.ilLDAPAttributeMapping.php');
 
 1111                        include_once(
'Services/LDAP/classes/class.ilLDAPRoleAssignmentRules.php');
 
 1115                                $mapping->getFields(),
 
 1134                if(!$this->server_id)
 
 1138                $query = 
"SELECT * FROM ldap_server_settings WHERE server_id = ".$this->db->quote($this->server_id).
"";
 
An exception for terminatinating execution or to throw for unit testing.
const IL_LDAP_BIND_ANONYMOUS
static _getAuthModeName($a_auth_key)
static _delete($a_server_id)
Delete mapping rules by server id.
static _getInstanceByServerId($a_server_id)
Get instance of class.
static _getRules($a_server_id)
Get all rules.
static getAttributeNames($a_server_id)
get all possible attribute names
static _deleteByServerId($a_server_id)
static getServerIdByAuthMode($a_auth_mode)
Get auth id by auth mode.
static _getServerList()
Get list of all configured servers.
isAuthenticationEnabled()
Check if authentication is enabled.
static getDataSource($a_auth_mode)
read()
Read server settings.
setGroupAttribute($a_value)
setAuthenticationMapping($a_map)
Set mapped authentication mapping.
static _getCronServerIds()
Get list of acticve servers with option 'SyncCron'.
static disableDataSourceForAuthMode($a_authmode)
Disable data source.
static checkLDAPLib()
Check if ldap module is installed.
setSearchBase($a_search_base)
static getInstanceByServerId($a_server_id)
Get instance by server id.
enableSyncOnLogin($a_value)
getAuthenticationMapping()
Get authentication mode that is mapped.
doConnectionCheck()
Check ldap connection and do a fallback to the next server if no connection is possible.
static _getActiveServerList()
Get active server list.
static _getPasswordServers()
Checks whether password synchronistation is enabled for an user.
static getAuthModeByKey($a_auth_key)
get auth mode by key
enableGroupMemberIsDN($a_value)
setUsernameFilter($a_value)
toPearAuthArray()
Creates an array of options compatible to PEAR Auth.
validate()
Validate user input.
static _getAllServer()
Get list of all configured servers.
enableSyncPerCron($a_value)
toggleReferrer($a_status)
setGroupUserFilter($a_filter)
enableRoleSynchronization($a_value)
const DEFAULT_NETWORK_TIMEOUT
static isAuthModeLDAP($a_auth_mode)
Check if user auth mode is LDAP.
static isDataSourceActive($a_auth_mode)
Check if a data source is active for a specific auth mode @global ilDB $ilDB.
getAuthenticationMappingKey()
Get authentication mapping key Default is ldap.
getGroupNames()
Get group names as array.
toggleMembershipOptional($a_status)
__construct($a_server_id=0)
setRoleBindPassword($a_value)
getPearAtributeArray()
Get attribute array for pear auth data.
isAccountMigrationEnabled()
enabled account migration
rotateFallbacks()
Rotate fallback urls in case of connect timeouts.
setBindPassword($a_password)
static toggleDataSource($a_ldap_server_id, $a_auth_mode, $a_status)
Toggle Data Source.
setUserAttribute($a_user_attr)
static _getRoleSyncServerIds()
Check whether there if there is an active server with option role_sync_active.
enableAccountMigration($a_status)
Enable account migration.
enableAuthentication($a_status)
Enable authentication for this ldap server.
static getAvailableDataSources($a_auth_mode)
static _getFirstActiveServer()
Get first active server.
static getKeyByAuthMode($a_auth_mode)
Get auth id by auth mode.
static getServerIds()
Get all server ids @global ilDB $ilDB.
prepareFilter($a_filter)
Create brackets for filters if they do not exist.
enabledRoleSynchronization()
static getLogger($a_component_id)
Get component logger.
$GLOBALS['loaded']
Global hash that tracks already loaded includes.
if(!is_array($argv)) $options