class.ilLDAPAttributeToUser.php

Go to the documentation of this file.

<?php

declare(strict_types=1);

class ilLDAPAttributeToUser
{
    public const MODE_INITIALIZE_ROLES = 1;

    private array $modes = [];
    private ilLDAPServer $server_settings;
    private array $user_data = [];
    private ilLDAPAttributeMapping $mapping;
    private string $new_user_auth_mode = 'ldap';
    private ilLogger $logger;
    private ilXmlWriter $writer;
    private ilUserDefinedFields $udf;

    public function __construct(ilLDAPServer $a_server)
    {
        global $DIC;

        $this->logger = $DIC->logger()->auth();

        $this->server_settings = $a_server;

        $this->initLDAPAttributeMapping();
    }

    public function getServer(): ilLDAPServer
    {
        return $this->server_settings;
    }

    public function setUserData(array $a_data): void
    {
        $this->user_data = $a_data;
    }

    public function setNewUserAuthMode(string $a_authmode): void
    {
        $this->new_user_auth_mode = $a_authmode;
    }

    public function getNewUserAuthMode(): string
    {
        return $this->new_user_auth_mode;
    }

    public function addMode(int $a_mode): void
    {
        //TODO check for proper value
        if (!in_array($a_mode, $this->modes, true)) {
            $this->modes[] = $a_mode;
        }
    }

    public function isModeActive(int $a_mode): bool
    {
        return in_array($a_mode, $this->modes, true);
    }


    public function refresh(): bool
    {
        $this->usersToXML();

        $importParser = new ilUserImportParser();
        $importParser->setXMLContent($this->writer->xmlDumpMem(false));
        $importParser->setRoleAssignment(ilLDAPRoleAssignmentRules::getAllPossibleRoles($this->getServer()->getServerId()));
        $importParser->setFolderId(7);
        $importParser->startParsing();

        return true;
    }

    protected function parseRoleAssignmentsForUpdate(int $a_usr_id, string $a_external_account, array $user): void
    {
        foreach (ilLDAPRoleAssignmentRules::getAssignmentsForUpdate(
            $this->getServer()->getServerId(),
            $a_usr_id,
            $a_external_account,
            $user
        ) as $role_data) {
            $this->writer->xmlElement(
                'Role',
                [
                    'Id' => $role_data['id'],
                    'Type' => $role_data['type'],
                    'Action' => $role_data['action']
                ],
                ''
            );
        }
    }

    protected function parseRoleAssignmentsForCreation(string $a_external_account, array $a_user): void
    {
        foreach (ilLDAPRoleAssignmentRules::getAssignmentsForCreation(
            $this->getServer()->getServerId(),
            $a_external_account,
            $a_user
        ) as $role_data) {
            $this->writer->xmlElement(
                'Role',
                [
                    'Id' => $role_data['id'],
                    'Type' => $role_data['type'],
                    'Action' => $role_data['action']
                ],
                ''
            );
        }
    }

    private function usersToXML(): void
    {
        $this->writer = new ilXmlWriter();
        $this->writer->xmlStartTag('Users');

        $cnt_update = 0;
        $cnt_create = 0;

        // Single users
        foreach ($this->user_data as $external_account => $user) {
            $external_account = (string) $external_account;

            $user['ilExternalAccount'] = $external_account;

            // Required fields
            if ($user['ilInternalAccount']) {
                $usr_id = ilObjUser::_lookupId($user['ilInternalAccount']);

                ++$cnt_update;
                // User exists
                $this->writer->xmlStartTag('User', ['Id' => $usr_id, 'Action' => 'Update']);
                $this->writer->xmlElement('Login', [], $user['ilInternalAccount']);
                $this->writer->xmlElement('ExternalAccount', [], $external_account);
                $this->writer->xmlElement('AuthMode', ['type' => $this->getNewUserAuthMode()]);

                if ($this->isModeActive(self::MODE_INITIALIZE_ROLES)) {
                    $this->parseRoleAssignmentsForCreation($external_account, $user);
                } else {
                    $this->parseRoleAssignmentsForUpdate($usr_id, $external_account, $user);
                }
                $rules = $this->mapping->getRulesForUpdate();
            } else {
                ++$cnt_create;
                // Create user
                $this->writer->xmlStartTag('User', ['Action' => 'Insert']);
                $this->writer->xmlElement('Login', [], ilAuthUtils::_generateLogin($external_account));

                $this->parseRoleAssignmentsForCreation($external_account, $user);
                $rules = $this->mapping->getRules(true);
            }

            $this->writer->xmlElement('Active', [], "true");
            $this->writer->xmlElement('TimeLimitOwner', [], 7);
            $this->writer->xmlElement('TimeLimitUnlimited', [], 1);
            $this->writer->xmlElement('TimeLimitFrom', [], time());
            $this->writer->xmlElement('TimeLimitUntil', [], time());

            // only for new users.
            // If auth_mode is 'default' (ldap) this status should remain.
            if (!$user['ilInternalAccount']) {
                $this->writer->xmlElement(
                    'AuthMode',
                    ['type' => $this->getNewUserAuthMode()],
                    $this->getNewUserAuthMode()
                );
                $this->writer->xmlElement('ExternalAccount', [], $external_account);
            }
            foreach ($rules as $field => $data) {
                // Do Mapping: it is possible to assign multiple ldap attribute to one user data field
                if (!($value = $this->doMapping($user, $data))) {
                    continue;
                }

                switch ($field) {
                    case 'gender':
                        switch (strtolower($value)) {
                            case 'm':
                            case 'male':
                                $this->writer->xmlElement('Gender', [], 'm');
                                break;

                            case 'f':
                            case 'female':
                                $this->writer->xmlElement('Gender', [], 'f');
                                break;

                            default:
                                // use the default for anything that is not clearly m or f
                                $this->writer->xmlElement('Gender', [], 'n');
                                break;
                        }
                        break;

                    case 'firstname':
                        $this->writer->xmlElement('Firstname', [], $value);
                        break;

                    case 'lastname':
                        $this->writer->xmlElement('Lastname', [], $value);
                        break;

                    case 'hobby':
                        $this->writer->xmlElement('Hobby', [], $value);
                        break;

                    case 'title':
                        $this->writer->xmlElement('Title', [], $value);
                        break;

                    case 'institution':
                        $this->writer->xmlElement('Institution', [], $value);
                        break;

                    case 'department':
                        $this->writer->xmlElement('Department', [], $value);
                        break;

                    case 'street':
                        $this->writer->xmlElement('Street', [], $value);
                        break;

                    case 'city':
                        $this->writer->xmlElement('City', [], $value);
                        break;

                    case 'zipcode':
                        $this->writer->xmlElement('PostalCode', [], $value);
                        break;

                    case 'country':
                        $this->writer->xmlElement('Country', [], $value);
                        break;

                    case 'phone_office':
                        $this->writer->xmlElement('PhoneOffice', [], $value);
                        break;

                    case 'phone_home':
                        $this->writer->xmlElement('PhoneHome', [], $value);
                        break;

                    case 'phone_mobile':
                        $this->writer->xmlElement('PhoneMobile', [], $value);
                        break;

                    case 'fax':
                        $this->writer->xmlElement('Fax', [], $value);
                        break;

                    case 'email':
                        $this->writer->xmlElement('Email', [], $value);
                        break;

                    case 'second_email':
                        $this->writer->xmlElement('SecondEmail', [], $value);
                        break;

                    case 'matriculation':
                        $this->writer->xmlElement('Matriculation', [], $value);
                        break;

                    default:
                        // Handle user defined fields
                        if (strpos($field, 'udf_') !== 0) {
                            continue 2;
                        }
                        $id_data = explode('_', $field);
                        if (!isset($id_data[1])) {
                            continue 2;
                        }
                        $this->initUserDefinedFields();
                        $definition = $this->udf->getDefinition((int) $id_data[1]);
                        if (empty($definition)) {
                            $this->logger->warning(sprintf(
                                "Invalid/Orphaned UD field mapping detected: %s",
                                $field
                            ));
                            break;
                        }

                        $this->writer->xmlElement(
                            'UserDefinedField',
                            [
                                'Id' => $definition['il_id'],
                                'Name' => $definition['field_name']
                            ],
                            $value
                        );
                        break;
                }
            }
            $this->writer->xmlEndTag('User');
        }

        if ($cnt_create) {
            $this->logger->info('LDAP: Started creation of ' . $cnt_create . ' users.');
        }
        if ($cnt_update) {
            $this->logger->info('LDAP: Started update of ' . $cnt_update . ' users.');
        }
        $this->writer->xmlEndTag('Users');
    }

    private function convertInput($a_value): string
    {
        if (is_array($a_value)) {
            return $a_value[0];
        }

        return $a_value;
    }

    private function doMapping(array $user, array $rule): string
    {
        $mapping = strtolower(trim($rule['value']));

        if (strpos($mapping, ',') === false) {
            return $this->convertInput($user[$mapping] ?? '');
        }
        // Is multiple mapping

        $fields = explode(',', $mapping);
        $value = '';
        foreach ($fields as $field) {
            if ($value !== '') {
                $value .= ' ';
            }
            $value .= ($this->convertInput($user[trim($field)] ?? ''));
        }
        return $value;
    }

    private function initLDAPAttributeMapping(): void
    {
        $this->mapping = ilLDAPAttributeMapping::_getInstanceByServerId($this->server_settings->getServerId());
    }

    private function initUserDefinedFields(): void
    {
        $this->udf = ilUserDefinedFields::_getInstance();
    }
}