<?php print "$title"; ?>

Group name
$group

Group name

Username	First name	Last name
$username	" . $people[$username]['givenname'] . "	" . $people[$username]['sn'] . "

Username

First name

Last name

" . $people[$username]['givenname'] . "

" . $people[$username]['sn'] . "

+
+
+ +
+
+
+ + +
+ +
+ Members +
+
+
+
+ + +
+
+
+
+ +
+
+
+
+ $member\n"; + } + ?> +
+
+
+ +
+ + +
+ + +
+ +
+ +
+ Available accounts +
+
+
+
+ +
+
+
+
+ + +
+
+
+
+ $nonmember\n"; + } + ?> +
+
+
+ +
+
+ + + + diff --git a/ldap_manager/show_user.php b/ldap_manager/show_user.php new file mode 100644 index 0000000..db50aad --- /dev/null +++ b/ldap_manager/show_user.php @@ -0,0 +1,472 @@ + "First name", + "sn" => "Last name", + "uidnumber" => "UID", + "gidnumber" => "GID", + "loginshell" => "Login shell", + "homedirectory" => "Home directory" + ); + + +$ldap_connection = open_ldap_connection(); + + +if (!isset($_POST['username']) and !isset($_GET['username'])) { +?> +
+
The username is missing.
+
+ +
+
The username is invalid.
+
+ $value) { + + if ($user[0][$key][0] != $_POST[$key]) { + $to_update[$key] = $_POST[$key]; + $user[0][$key][0] = $_POST[$key]; + } + + } + + if (isset($_POST['password']) and $_POST['password'] != "") { + + $password = $_POST['password']; + + if (!is_numeric($_POST['pass_score']) or $_POST['pass_score'] < 3) { $weak_password = True; } + if (preg_match("/\"|'/",$password)) { $invalid_password = True; } + if ($_POST['password'] != $_POST['password_match']) { $mismatched_passwords = True; } + if (!preg_match("/$USERNAME_REGEX/",$username)) { $invalid_username = True; } + + if ( !$mismatched_passwords + and !$weak_password + and !$invalid_password + ) { + $to_update['userpassword'] = ldap_hashed_password($password); + } + } + + + $updated_account = ldap_mod_replace($ldap_connection, $user[0]['dn'] , $to_update); + + if ($updated_account) { + ?> + +
+ + Success! The group has been updated. +
+ + +
+ + Success! The group has been updated. +
+ +
+
The password wasn't strong enough.
+
+ +
+
The password contained invalid characters.
+
+ +
+
The passwords didn't match.
+
+ $group) { + if (is_numeric($index) and preg_match("/$USERNAME_REGEX/",$group)) { + array_push($updated_group_membership,$group); + } + } + + $groups_to_add = array_diff($updated_group_membership,$currently_member_of); + $groups_to_del = array_diff($currently_member_of,$updated_group_membership); + + + foreach ($groups_to_del as $this_group) { + ldap_delete_member_from_group($ldap_connection,$this_group,$username); + } + foreach ($groups_to_add as $this_group) { + ldap_add_member_to_group($ldap_connection,$this_group,$username); + } + + $not_member_of = array_diff($all_groups,$updated_group_membership); + $member_of = $updated_group_membership; + + ?> + +
+ + Success! The group has been updated. +
+ + + + + + + + + +
+
+ +
+
+
+ +
+
+
+
+ + + + + + + $value) { + ?> +
+ +
+ +
+
+ + +
+ Password +
+ +
+
+ +
+
+ +
+ Confirm +
+ +
+
+ +
+
+
+ +
+ +
+
+
+ +
+
+ +
+
+ +

+ +
+
+
Group membership
+
+
+ +
+ +
+ Member of +
+
+
+
+ + +
+
+
+
+ +
+
+
+
+ $group\n"; + } + ?> +
+
+
+ +
+ + +
+ + +
+ +
+ +
+ Available groups +
+
+
+
+ +
+
+
+
+ + +
+
+
+
+ $group\n"; + } + ?> +
+
+
+ +
+
+
+ + + diff --git a/log_in/index.php b/log_in/index.php new file mode 100644 index 0000000..cc50fbe --- /dev/null +++ b/log_in/index.php @@ -0,0 +1,76 @@ + +
+
+ +
+
Log in
+
+ + +
+ The username and/or password are unrecognised. +
+ + + +
+ + +
+ Username +
+ +
+
+ + +
+ Password +
+ +
+
+ +
+ +
+ +
+
+
+
+ diff --git a/log_out/index.php b/log_out/index.php new file mode 100644 index 0000000..9624e9a --- /dev/null +++ b/log_out/index.php @@ -0,0 +1,4 @@ + diff --git a/setup/index.php b/setup/index.php new file mode 100644 index 0000000..067f9b9 --- /dev/null +++ b/setup/index.php @@ -0,0 +1,52 @@ + +
+
The password was incorrect.
+
+ +
+
+
Password for
+
+
+
+ +
+
+ +
+
+
+
+
+
+ diff --git a/setup/module_functions.inc.php b/setup/module_functions.inc.php new file mode 100644 index 0000000..3091dc4 --- /dev/null +++ b/setup/module_functions.inc.php @@ -0,0 +1,7 @@ +$GOOD_ICON"; +$li_warn="
$WARN_ICON"; +$li_fail="

$FAIL_ICON"; + +?> diff --git a/setup/run_checks.php b/setup/run_checks.php new file mode 100644 index 0000000..3190dbf --- /dev/null +++ b/setup/run_checks.php @@ -0,0 +1,235 @@ + + +

" method="post"> + + + +

+ +
+
LDAP connection tests
+
+
+\n"; + +#TLS? +if ($LDAP['starttls'] && $ENCRYPTED == True) { + print "$li_good Encrypted connection to ${LDAP['uri']} via STARTTLS\n"; +} +else { + print "$li_warn Unable to connect to ${LDAP['uri']} via STARTTLS. "; + print "What's this?\n"; +} + + +?> +
+
+
+ +
+
LDAP OU checks
+
+
+${LDAP['group_dn']}) doesn't exist. "; + print "What's this?"; + print "Create? "; + print "\n"; + $show_finish_button = False; + +} +else { + print "$li_good The group OU (${LDAP['group_dn']}) is present."; +} + +$user_filter = "(&(objectclass=organizationalUnit)(ou=${LDAP['user_ou']}))"; +$ldap_user_search = ldap_search($ldap_connection, "${LDAP['base_dn']}", $user_filter); +$user_result = ldap_get_entries($ldap_connection, $ldap_user_search); + +if ($user_result['count'] != 1) { + + print "$li_fail The user OU (${LDAP['user_dn']}) doesn't exist. "; + print "What's this?"; + print "Create? "; + print "\n"; + $show_finish_button = False; + +} +else { + print "$li_good The user OU (${LDAP['user_dn']}) is present."; +} + +?> +
+
+
+ +

+
LDAP group and settings
+

+lastGID

What's this?

Create?

lastGID

lastUID

What's this?

Create?

lastUID

$DEFAULT_USER_GROUP

What's this?

Create?

$DEFAULT_USER_GROUP

${LDAP['admins_group']}

What's this?

Create?

${LDAP['admins_group']}

+ + +

+ +

+ + +

+ diff --git a/setup/setup_admin_account.php b/setup/setup_admin_account.php new file mode 100644 index 0000000..26fa788 --- /dev/null +++ b/setup/setup_admin_account.php @@ -0,0 +1,204 @@ + +

Account created.

+ + +

Couldn't create the account.

+ +

Couldn't add the account to the admin group.

+ + + +

The password wasn't strong enough.

+ +

The password contained invalid characters.

+ +

The passwords didn't match.

+ +

The username is invalid.

+ + + + + + +

+ +

New administrator account

+ + + +

+ +

+ diff --git a/setup/setup_ldap.php b/setup/setup_ldap.php new file mode 100644 index 0000000..b7a2fc2 --- /dev/null +++ b/setup/setup_ldap.php @@ -0,0 +1,196 @@ + + +

+ +

Updating LDAP...

${LDAP['group_dn']}

$error

${LDAP['user_dn']}

$error

cn=lastGID,${LDAP['base_dn']}

$error

cn=lastUID,${LDAP['base_dn']}

$error

$DEFAULT_USER_GROUP

$error

${LDAP['admins_group']}

$error

+ +

+ + + +

+ +

+ + +

+ +