isReadOnly()) pla_error(_('You cannot perform updates while server is in read-only mode')); if (! $_SESSION[APPCONFIG]->isCommandAvailable('attribute_add')) pla_error(sprintf('%s%s %s',_('This operation is not permitted by the configuration'),_(':'),_('add attribute'))); $entry['val'] = get_request('val','POST'); $entry['binary'] = get_request('binary','POST'); $entry['dn']['string'] = get_request('dn','POST'); $entry['dn']['encode'] = rawurlencode($entry['dn']['string']); $entry['attr']['string'] = get_request('attr','POST'); $entry['attr']['encode'] = rawurlencode($entry['attr']['string']); if ((strlen($entry['binary']) <= 0) && (strlen($entry['val']) <= 0)) pla_error(_('You left the attribute value blank. Please go back and try again.')); /* * Special case for binary attributes (like jpegPhoto and userCertificate): * we must go read the data from the file and override $val with the binary data * Secondly, we must check if the ";binary" option has to be appended to the name * of the attribute. */ # Check to see if this is a unique Attribute if ($badattr = $ldapserver->checkUniqueAttr($entry['dn']['string'],$entry['attr']['string'],array($entry['val']))) { $href = htmlspecialchars(sprintf('cmd.php?cmd=search&search=true&form=advanced&server_id=%s&filter=%s=%s', $ldapserver->server_id,$entry['attr']['string'],$badattr)); pla_error(sprintf(_('Your attempt to add %s (%s) to
%s
is NOT allowed. That attribute/value belongs to another entry.

You might like to search for that entry.'),$entry['attr']['string'],$badattr,$entry['dn']['string'],$href)); } if (strlen($entry['binary']) > 0) { if ($_FILES['val']['size'] == 0) pla_error(_('The file you chose is either empty or does not exist. Please go back and try again.')); if (! is_uploaded_file($_FILES['val']['tmp_name'])) { if (isset($_FILES['val']['error'])) switch($_FILES['val']['error']) { case 0: # No error; possible file attack! pla_error(_('Security error: The file being uploaded may be malicious.')); break; case 1: # Uploaded file exceeds the upload_max_filesize directive in php.ini pla_error(_('The file you uploaded is too large. Please check php.ini, upload_max_size setting')); break; case 2: # Uploaded file exceeds the MAX_FILE_SIZE directive specified in the html form pla_error(_('The file you uploaded is too large. Please check php.ini, upload_max_size setting')); break; case 3: # Uploaded file was only partially uploaded pla_error(_('The file you selected was only partially uploaded, likley due to a network error.')); break; case 4: # No file was uploaded pla_error(_('You left the attribute value blank. Please go back and try again.')); break; default: # A default error, just in case! :) pla_error(_('Security error: The file being uploaded may be malicious.')); break; } else pla_error(_('Security error: The file being uploaded may be malicious.')); } $binaryfile['name'] = $_FILES['val']['tmp_name']; $binaryfile['handle'] = fopen($binaryfile['name'],'r'); $binaryfile['data'] = fread($binaryfile['handle'],filesize($binaryfile['name'])); fclose($binaryfile['handle']); $entry['val'] = $binaryfile['data']; if (is_binary_option_required($ldapserver,$entry['attr']['string'])) $entry['attr']['string'] .= ';binary'; } /* Automagically hash new userPassword attributes according to the chosen in config.php. */ if (strcasecmp($entry['attr']['string'],'userpassword') == 0) { if (trim($ldapserver->default_hash) != '' ) { $enc_type = $ldapserver->default_hash; $entry['val'] = password_hash($entry['val'],$enc_type); } } elseif (strcasecmp($entry['attr']['string'],'sambaNTPassword') == 0) { $sambapassword = new smbHash; $entry['val'] = $sambapassword->nthash($entry['val']); } elseif (strcasecmp($entry['attr']['string'],'sambaLMPassword') == 0) { $sambapassword = new smbHash; $entry['val'] = $sambapassword->lmhash($entry['val']); } $new_entry = array($entry['attr']['string'] => $entry['val']); $result = $ldapserver->attrModify($entry['dn']['string'],$new_entry); if ($result) { header(sprintf('Location: cmd.php?cmd=template_engine&server_id=%s&dn=%s&modified_attrs[]=%s', $ldapserver->server_id,$entry['dn']['encode'],$entry['attr']['encode'])); die(); } else { pla_error(_('Failed to add the attribute.'),$ldapserver->error(),$ldapserver->errno()); } /** * Check if we need to append the ;binary option to the name * of some binary attribute * * @param object $ldapserver Server Object that the attribute is in. * @param attr $attr Attribute to test to see if it requires ;binary added to it. * @return bool */ function is_binary_option_required($ldapserver,$attr) { # List of the binary attributes which need the ";binary" option $binary_attributes_with_options = array( # Superior: Ldapv3 Syntaxes (1.3.6.1.4.1.1466.115.121.1) '1.3.6.1.4.1.1466.115.121.1.8' => 'userCertificate', '1.3.6.1.4.1.1466.115.121.1.8' => 'caCertificate', '1.3.6.1.4.1.1466.115.121.1.10' => 'crossCertificatePair', '1.3.6.1.4.1.1466.115.121.1.9' => 'certificateRevocationList', '1.3.6.1.4.1.1466.115.121.1.9' => 'authorityRevocationList', # Superior: Netscape Ldap attributes types (2.16.840.1.113730.3.1) '2.16.840.1.113730.3.1.40' => 'userSMIMECertificate' ); $schema_attr = $ldapserver->getSchemaAttribute($attr); if (! $schema_attr) return false; $syntax = $schema_attr->getSyntaxOID(); if (isset($binary_attributes_with_options[$syntax])) return true; return false; } ?>