haveAuthInfo())
pla_error(_('Not enough information to login to server. Please check your configuration.'));
$friendly_attrs = process_friendly_attr_table(); // @todo might not need this.
$pjs = array();
# REMOVE THSE @todo
$today = date('U');
$shadow_before_today_attrs = arrayLower(array('shadowLastChange','shadowMin'));
$shadow_after_today_attrs = arrayLower(array('shadowMax','shadowExpire','shadowWarning','shadowInactive'));
$shadow_format_attrs = array_merge($shadow_before_today_attrs,$shadow_after_today_attrs);
# END REMOVE
# If we have a DN, then this is to edit the entry.
if (isset($_REQUEST['dn'])) {
$dn = $_GET['dn'];
$decoded_dn = rawurldecode($dn);
$encoded_dn = rawurlencode($decoded_dn);
if (! $ldapserver->haveAuthInfo())
pla_error(_('Not enough information to login to server. Please check your configuration.'));
$ldapserver->dnExists($dn)
or pla_error(sprintf(_('No such entry: %s'),pretty_print_dn($dn)));
$rdn = get_rdn($dn);
$attrs = $ldapserver->getDNAttrs($dn,false,$config->GetValue('deref','view'));
$modified_attrs = isset($_REQUEST['modified_attrs']) ? $_REQUEST['modified_attrs'] : false;
$show_internal_attrs = isset($_REQUEST['show_internal_attrs']) ? true : false;
# If an entry has more children than this, stop searching and display this amount with a '+'
$max_children = 100;
} else {
$dn = '';
$rdn = '';
$encoded_dn = '';
if ($_REQUEST['template'] == 'custom') {
include TMPLDIR.'template_header.php';
require TMPLDIR.'creation/custom.php';
die();
} else {
$templates = new Templates($ldapserver->server_id);
$template = $templates->GetTemplate($_REQUEST['template']);
}
}
include TMPLDIR.'template_header.php';
/*
* When we get here, (either a new entry, or modifying an existing entry), if the
* empty_attrs array has content, then we need to ask the user for this information.
*/
if (isset($template['empty_attrs'])) {
masort($template['empty_attrs'],'page,order',1);
# What page are we working on.
$page = isset($_REQUEST['page']) ? $_REQUEST['page'] : 1;
printf('
%s
',$template['description']);
echo "\n\n";
if (isset($_REQUEST['nextpage']) && ! $_REQUEST['nextpage']) {
$new_dn = sprintf('%s=%s,%s',$template['rdn'],$_REQUEST['form'][$template['rdn']],$_REQUEST['container']);
echo ''."\n\n";
printf(''._('Page %d').'',$page);
echo "\n\n";
if ($mustitems) {
$jstext = '
';
$pjs[] = $jstext;
}
if (isset($verifyitems) && $verifyitems) {
//@todo: Return focus to the first item.
$pjs[] = '
';
}
# User needs to submit form to continue.
foreach ($pjs as $script)
echo $script;
die();
}
if (! isset($template))
$template['attrs'] = $attrs;
# If we get here - we are displaying/editing the entry.
# Sort these entries.
uksort($template['attrs'],'sortAttrs');
$js_date_attrs = $config->GetValue('appearance','date_attrs');
$js[] = sprintf('',$config->GetValue('appearance','date'));
foreach ($template['attrs'] as $attr => $vals) {
if (! is_array($vals))
$vals = array($vals);
flush();
$schema_attr = $ldapserver->getSchemaAttribute($attr,$dn);
if ($schema_attr)
$attr_syntax = $schema_attr->getSyntaxOID();
else
$attr_syntax = null;
if (! strcasecmp($attr,'dn'))
continue;
# has the config.php specified that this attribute is to be hidden or shown?
if ($ldapserver->isAttrHidden($attr))
continue;
# Setup the $attr_note, which will be displayed to the right of the attr name (if any)
$attr_note = '';
# is there a user-friendly translation available for this attribute?
if (isset($friendly_attrs[ strtolower($attr) ])) {
$attr_display = $friendly_attrs[ strtolower($attr) ];
$attr_note = "alias";
} else {
$attr_display = $attr;
}
# is this attribute required by an objectClass?
$required_by = '';
if ($schema_attr)
foreach ($schema_attr->getRequiredByObjectClasses() as $required) {
if (isset($attrs['objectClass']) && ! is_array($attrs['objectClass']))
$attrs['objectClass'] = array($attrs['objectClass']);
if (isset($attrs['objectClass']) && in_array(strtolower($required),arrayLower($attrs['objectClass'])))
$required_by .= $required . ' ';
# It seems that some LDAP servers (Domino) returns attributes in lower case?
elseif (isset($attrs['objectclass']) && in_array(strtolower($required),arrayLower($attrs['objectclass'])))
$required_by .= $required . ' ';
}
if ($required_by) {
if (trim($attr_note))
$attr_note .= ', ';
$attr_note .= "" . _('required') . " ";
}
# is this attribute required because its the RDN
if (preg_match("/^${attr}=/",$rdn)) {
if (trim($attr_note))
$attr_note .= ', ';
$attr_note .= " " . 'rdn' . " ";
}
if (is_array($modified_attrs) && in_array($attr,$modified_attrs))
$is_modified_attr = true;
else
$is_modified_attr = false;
if ($is_modified_attr)
echo '
';
if ($attr_note)
printf('%s',$attr_note);
if ($ldapserver->isAttrReadOnly($attr))
printf('(%s)',_('This attribute has been flagged as read only by the phpLDAPadmin administrator'),_('read only'));
echo '
';
echo '
';
if ($is_modified_attr)
echo '
';
else
echo '
';
echo '
';
/*
* Is this attribute a jpegPhoto?
*/
if ($ldapserver->isJpegPhoto($attr)) {
/* Don't draw the delete buttons if there is more than one jpegPhoto
(phpLDAPadmin can't handle this case yet) */
if ($ldapserver->isReadOnly() || $ldapserver->isAttrReadOnly($attr))
draw_jpeg_photos($ldapserver,$dn,$attr,false);
else
draw_jpeg_photos($ldapserver,$dn,$attr,true);
# proceed to the next attribute
echo '
';
if ($is_modified_attr)
echo '
';
continue;
}
/*
* Is this attribute binary?
*/
if ($ldapserver->isAttrBinary($attr)) {
$href = sprintf('download_binary_attr.php?server_id=%s&dn=%s&attr=%s',
$ldapserver->server_id,$encoded_dn,$attr);
echo '';
echo _('Binary value');
if (! strcasecmp($attr,'objectSid'))
printf(' (%s)',binSIDtoText($vals[0]));
echo ' ';
if (count($vals) > 1) {
for ($i=1; $i<=count($vals); $i++)
printf(' %s(%s) ',
$href,$i,_('download value'),$i);
} else {
printf(' %s ',$href,_('download value'));
}
if (! $ldapserver->isReadOnly() && ! $ldapserver->isAttrReadOnly($attr))
printf(' %s',
$attr,_('delete attribute'));
echo '';
echo '';
echo '';
if ($is_modified_attr)
echo '
';
continue;
}
/*
* Note: at this point,the attribute must be text-based (not binary or jpeg)
*/
# If this is the userPassword attribute, add the javascript so we can call check password later.
if (! strcasecmp($attr,'userPassword')) {
$js[] = '
';
}
/*
* If this server is in read-only mode or this attribute is configured as read_only,
* simply draw the attribute values and continue.
*/
if ($ldapserver->isReadOnly() || $ldapserver->isAttrReadOnly($attr) || (preg_match("/^${attr}=/",$rdn))) {
if (is_array($vals)) {
foreach ($vals as $i => $val) {
if (trim($val) == '')
printf('[%s] ',_('empty'));
elseif (! strcasecmp($attr,'userPassword') && $config->GetValue('appearance','obfuscate_password_display'))
echo preg_replace('/./','*',$val).' ';
elseif (in_array(strtolower($attr),$shadow_format_attrs)) {
$shadow_date = shadow_date($attrs,$attr);
echo htmlspecialchars($val).' ';
echo '';
if (($today < $shadow_date) && in_array(strtolower($attr),$shadow_before_today_attrs))
echo ''.htmlspecialchars("(".strftime($config->GetValue('appearance','date'),$shadow_date).")").'';
elseif ($today > $shadow_date && in_array(strtolower($attr),$shadow_after_today_attrs))
echo ''.htmlspecialchars("(".strftime($config->GetValue('appearance','date'),$shadow_date).")").'';
else
echo htmlspecialchars("(".strftime($config->GetValue('appearance','date'),shadow_date($attrs,$attr)).")");
echo '';
} else
echo htmlspecialchars($val).' ';
}
//@todo: redundant?
} else {
if (! strcasecmp($attr,'userPassword') && obfuscate_password_display())
echo preg_replace('/./','*',$vals).' ';
else
echo $vals.' ';
}
if (! strcasecmp($attr,'userPassword'))
printf('%s',base64_encode($user_password),_('Check password...'));
if (preg_match("/^${attr}=/",$rdn))
printf('(%s)',$rename_href,_('rename'));
echo '';
echo '';
if ($is_modified_attr)
echo '
';
continue;
}
/*
* Is this a userPassword attribute?
*/
if (0 == strcasecmp($attr,'userpassword')) {
foreach ($vals as $user_password) {
$enc_type = get_enc_type($user_password);
# Set the default hashing type if the password is blank (must be newly created)
if ($user_password == '')
$enc_type = get_default_hash($ldapserver->server_id);
printf('',htmlspecialchars($user_password));
echo '';
printf('',($enc_type == '' ? 'clear' : $enc_type));
if (obfuscate_password_display($enc_type))
echo htmlspecialchars(preg_replace('/./','*',$user_password));
else
echo htmlspecialchars($user_password);
echo ' ';
printf('',
(obfuscate_password_display($enc_type) ? 'password' : 'text'));
echo enc_type_select_list($enc_type);
echo ' ';
printf('%s',base64_encode($user_password),_('Check password...'));
echo ' ';
}
/* Draw the "add value" link under the list of values for this attributes */
if (! $ldapserver->isReadOnly() && ($schema_attr = $ldapserver->getSchemaAttribute($attr,$dn)) &&
! $schema_attr->getIsSingleValue()) {
$add_href = sprintf('add_value_form.php?server_id=%s&dn=%s&attr=%s',
$ldapserver->server_id,$encoded_dn,rawurlencode($attr));
printf('
',
$add_href,sprintf(_('Add an additional value to attribute \'%s\''),$attr),_('add value'));
}
echo '';
echo '';
if ($is_modified_attr)
echo '
';
continue;
}
/*
* Is this a boolean attribute?
*/
if ($ldapserver->isAttrBoolean($attr)) {
$val = $vals[0];
printf('',htmlspecialchars($attr),htmlspecialchars($val));
printf('';
echo '';
echo '';
if ($is_modified_attr)
echo '
';
continue;
}
/*
* Is this a date type attribute?
*/
if (in_array_ignore_case($attr,array_keys($js_date_attrs))) {
$val = $vals[0];
printf('',htmlspecialchars($attr),htmlspecialchars($val));
printf(' ',
$attr,htmlspecialchars($attr),htmlspecialchars($val));
draw_date_selector_link($attr);
echo '';
echo '';
$js[] = sprintf('',$attr,$js_date_attrs[$attr]);
if ($is_modified_attr)
echo '
';
continue;
}
/*
* End of special case attributes (non plain text).
*/
/*
* This is a plain text attribute, to be displayed and edited in plain text.
*/
foreach ($vals as $i => $val) {
$input_name = sprintf('new_values[%s][%s]',htmlspecialchars($attr),$i);
/* We smack an id="..." tag in here that doesn't have [][] in it to allow the
draw_chooser_link() to identify it after the user clicks. */
$input_id = sprintf('new_values_%s_%s',htmlspecialchars($attr),$i);
/* The old_values array will let update.php know if the entry contents changed
between the time the user loaded this page and saved their changes. */
printf('',
htmlspecialchars($attr),$i,htmlspecialchars($val));
# Is this value is a structural objectClass, make it read-only
if (! strcasecmp($attr,'objectClass')) {
printf(' ',
_('View the schema description for this objectClass'),$ldapserver->server_id,htmlspecialchars($val));
$schema_object = $ldapserver->getSchemaObjectClass($val);
if ($schema_object->getType() == 'structural') {
printf(' %s (%s) ',
$val,_('This is a structural ObjectClass and cannot be removed.'),_('structural'));
printf('',$input_name,$input_id,htmlspecialchars($val));
continue;
}
}
if (is_dn_string($val) || $ldapserver->isDNAttr($attr))
if ($ldapserver->dnExists($val)) {
printf(' ',
htmlspecialchars($val),$ldapserver->server_id,rawurlencode($val));
} else {
printf(' ',
htmlspecialchars($val),$ldapserver->server_id,rawurlencode($val));
}
elseif (is_mail_string($val))
printf(' ',htmlspecialchars($val));
elseif (is_url_string($val))
printf(' ',htmlspecialchars($val));
if ($ldapserver->isMultiLineAttr($attr,$val))
printf('',$input_name,$input_id,htmlspecialchars($val));
else
printf(' ',$input_name,$input_id,htmlspecialchars($val));
/* draw a link for popping up the entry browser if this is the type of attribute
that houses DNs. */
if ($ldapserver->isDNAttr($attr))
draw_chooser_link("edit_form.$input_id",false);
echo ' ';
# If this is a gidNumber on a non-PosixGroup entry, lookup its name and description for convenience
if (! strcasecmp($attr,'gidNumber') &&
! in_array_ignore_case('posixGroup',$ldapserver->getDNAttr($dn,'objectClass'))) {
$gid_number = $val;
$search_group_filter = "(&(objectClass=posixGroup)(gidNumber=$val))";
$group = $ldapserver->search(null,null,$search_group_filter,array('dn','description'));
if (count($group) > 0) {
echo ' ';
$group = array_pop($group);
$group_dn = $group['dn'];
$group_name = explode('=',get_rdn($group_dn));
$group_name = $group_name[1];
$href = sprintf('template_engine.php?server_id=%s&dn=%s',$ldapserver->server_id,urlencode($group_dn));
echo '';
printf('%s',$href,htmlspecialchars($group_name));
$description = isset($group['description']) ? $group['description'] : null;
if ($description)
printf(' (%s)',htmlspecialchars($description));
echo '';
}
}
# Show the dates for all the shadow attributes.
if (in_array(strtolower($attr),$shadow_format_attrs)) {
if (($shadow_date = shadow_date($attrs,$attr)) !== false) {
echo ' ';
echo '';
if (($today < $shadow_date) && in_array(strtolower($attr),$shadow_before_today_attrs))
echo ''.htmlspecialchars(strftime($config->GetValue('appearance','date'),$shadow_date)).'';
elseif ($today > $shadow_date && in_array(strtolower($attr),$shadow_after_today_attrs))
echo ''.htmlspecialchars(strftime($config->GetValue('appearance','date'),$shadow_date)).'';
else
echo htmlspecialchars(strftime($config->GetValue('appearance','date'),$shadow_date));
echo '';
}
}
} /* end foreach value */
/* Draw the "add value" link under the list of values for this attributes */
if (! $ldapserver->isReadOnly() && ($schema_attr = $ldapserver->getSchemaAttribute($attr,$dn)) &&
! $schema_attr->getIsSingleValue()) {
$add_href = sprintf('add_value_form.php?server_id=%s&dn=%s&attr=%s',
$ldapserver->server_id,$encoded_dn,rawurlencode($attr));
printf('
%s(%s)
%s',
$attr,_('delete attribute'));
echo '';
echo '';
echo '';
if ($is_modified_attr)
echo '
',
_('View the schema description for this objectClass'),$ldapserver->server_id,htmlspecialchars($val));
$schema_object = $ldapserver->getSchemaObjectClass($val);
if ($schema_object->getType() == 'structural') {
printf(' %s (%s)
',
htmlspecialchars($val),$ldapserver->server_id,rawurlencode($val));
} else {
printf('
',
htmlspecialchars($val),$ldapserver->server_id,rawurlencode($val));
}
elseif (is_mail_string($val))
printf('
',htmlspecialchars($val));
elseif (is_url_string($val))
printf('
',htmlspecialchars($val));
if ($ldapserver->isMultiLineAttr($attr,$val))
printf('',$input_name,$input_id,htmlspecialchars($val));
else
printf(' ',$input_name,$input_id,htmlspecialchars($val));
/* draw a link for popping up the entry browser if this is the type of attribute
that houses DNs. */
if ($ldapserver->isDNAttr($attr))
draw_chooser_link("edit_form.$input_id",false);
echo '