mirror/librenms-librenms
1
0
Fork 0
mirror of https://github.com/librenms/librenms.git synced 2024-10-07 16:52:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

PSR2 Cleanup: /html edition

Browse Source 
Travis tests for code conformance. Ignore warnings for now.
Fixed all errors, left most warnings.
This commit is contained in:
Tony Murray
2016-08-18 20:28:22 -05:00
parent f0c82498b5
commit 8c639aa5a4
468 changed files with 6605 additions and 7629 deletions
Download Patch File Download Diff File Expand all files Collapse all files

205
html/includes/authentication/ad-authorization.inc.php
View File

@@ -1,6 +1,6 @@
<?php
if (! isset ($_SESSION['username'])) {
if (! isset($_SESSION['username'])) {
$_SESSION['username'] = '';
}
@@ -27,24 +27,23 @@ if (isset($config['auth_ad_binduser']) && isset($config['auth_ad_bindpassword'])
if (! ldap_bind($ldap_connection, "${config['auth_ad_binduser']}@${config['auth_ad_domain']}", "${config['auth_ad_bindpassword']}")) {
echo ldap_error($ldap_connection);
}
}
else {
} else {
// Anonymous
if (! ldap_bind($ldap_connection)) {
echo ldap_error($ldap_connection);
}
}
function authenticate ($username, $password) {
function authenticate($username, $password)
{
global $config;
if (isset ($_SERVER['REMOTE_USER'])) {
$_SESSION['username'] = mres ($_SERVER['REMOTE_USER']);
if (isset($_SERVER['REMOTE_USER'])) {
$_SESSION['username'] = mres($_SERVER['REMOTE_USER']);
if (user_exists ($_SESSION['username'])) {
if (user_exists($_SESSION['username'])) {
adduser($username);
return 1;
}
$_SESSION['username'] = $config['http_auth_guest'];
@@ -55,62 +54,72 @@ function authenticate ($username, $password) {
}
function reauthenticate() {
function reauthenticate()
{
// not supported so return 0
return 0;
}
function passwordscanchange() {
function passwordscanchange()
{
// not supported so return 0
return 0;
}
function changepassword() {
function changepassword()
{
// not supported so return 0
return 0;
}
function auth_usermanagement() {
function auth_usermanagement()
{
// not supported so return 0
return 0;
}
function adduser($username, $level=0, $email='', $realname='', $can_modify_passwd=0, $description='', $twofactor=0) {
function adduser($username, $level = 0, $email = '', $realname = '', $can_modify_passwd = 0, $description = '', $twofactor = 0)
{
// Check to see if user is already added in the database
if (!user_exists_in_db($username)) {
$userid = dbInsert(array('username' => $username, 'realname' => $realname, 'email' => $email, 'descr' => $description, 'level' => $level, 'can_modify_passwd' => $can_modify_passwd, 'twofactor' => $twofactor, 'user_id' => get_userid($username)), 'users');
if ($userid == false) {
return false;
}
else {
foreach (dbFetchRows('select notifications.* from notifications where not exists( select 1 from notifications_attribs where notifications.notifications_id = notifications_attribs.notifications_id and notifications_attribs.user_id = ?) order by notifications.notifications_id desc',array($userid)) as $notif) {
dbInsert(array('notifications_id'=>$notif['notifications_id'],'user_id'=>$userid,'key'=>'read','value'=>1),'notifications_attribs');
} else {
foreach (dbFetchRows('select notifications.* from notifications where not exists( select 1 from notifications_attribs where notifications.notifications_id = notifications_attribs.notifications_id and notifications_attribs.user_id = ?) order by notifications.notifications_id desc', array($userid)) as $notif) {
dbInsert(array('notifications_id'=>$notif['notifications_id'],'user_id'=>$userid,'key'=>'read','value'=>1), 'notifications_attribs');
}
}
return $userid;
}
else {
} else {
return false;
}
}
function user_exists_in_db($username) {
function user_exists_in_db($username)
{
$return = dbFetchCell('SELECT COUNT(*) FROM users WHERE username = ?', array($username), true);
return $return;
}
function user_exists($username) {
function user_exists($username)
{
global $config, $ldap_connection;
if (auth_ldap_session_cache_get ('user_exists'))
if (auth_ldap_session_cache_get('user_exists')) {
return 1;
}
$search = ldap_search($ldap_connection, $config['auth_ad_base_dn'],
"(samaccountname=${username})",array('samaccountname'));
$search = ldap_search(
$ldap_connection,
$config['auth_ad_base_dn'],
"(samaccountname=${username})",
array('samaccountname')
);
$entries = ldap_get_entries($ldap_connection, $search);
if ($entries['count']) {
@@ -118,7 +127,7 @@ function user_exists($username) {
* Cache positiv result as this will result in more queries which we
* want to speed up.
*/
auth_ldap_session_cache_set ('user_exists', 1);
auth_ldap_session_cache_set('user_exists', 1);
return 1;
}
@@ -126,20 +135,24 @@ function user_exists($username) {
}
function get_userlevel($username) {
function get_userlevel($username)
{
global $config, $ldap_connection;
$userlevel = auth_ldap_session_cache_get ('userlevel');
$userlevel = auth_ldap_session_cache_get('userlevel');
if ($userlevel) {
return $userlevel;
}
else {
} else {
$userlevel = 0;
}
// Find all defined groups $username is in
$search = ldap_search($ldap_connection, $config['auth_ad_base_dn'],
"(samaccountname={$username})", array('memberOf'));
$search = ldap_search(
$ldap_connection,
$config['auth_ad_base_dn'],
"(samaccountname={$username})",
array('memberOf')
);
$entries = ldap_get_entries($ldap_connection, $search);
// Loop the list and find the highest level
@@ -150,37 +163,42 @@ function get_userlevel($username) {
}
}
auth_ldap_session_cache_set ('userlevel', $userlevel);
auth_ldap_session_cache_set('userlevel', $userlevel);
return $userlevel;
}
function get_userid($username) {
function get_userid($username)
{
global $config, $ldap_connection;
$user_id = auth_ldap_session_cache_get ('userid');
if (isset ($user_id)) {
$user_id = auth_ldap_session_cache_get('userid');
if (isset($user_id)) {
return $user_id;
}
else {
} else {
$user_id = -1;
}
$attributes = array('objectsid');
$search = ldap_search($ldap_connection, $config['auth_ad_base_dn'],
"(samaccountname={$username})", $attributes);
$search = ldap_search(
$ldap_connection,
$config['auth_ad_base_dn'],
"(samaccountname={$username})",
$attributes
);
$entries = ldap_get_entries($ldap_connection, $search);
if ($entries['count']) {
$user_id = preg_replace('/.*-(\d+)$/','$1',sid_from_ldap($entries[0]['objectsid'][0]));
$user_id = preg_replace('/.*-(\d+)$/', '$1', sid_from_ldap($entries[0]['objectsid'][0]));
}
auth_ldap_session_cache_set ('userid', $user_id);
auth_ldap_session_cache_set('userid', $user_id);
return $user_id;
}
function deluser($username) {
function deluser($username)
{
dbDelete('bill_perms', '`user_name` = ?', array($username));
dbDelete('devices_perms', '`user_name` = ?', array($username));
dbDelete('ports_perms', '`user_name` = ?', array($username));
@@ -190,27 +208,35 @@ function deluser($username) {
}
function get_userlist() {
function get_userlist()
{
global $config, $ldap_connection;
$userlist = array();
$userhash = array();
$ldap_groups = get_group_list();
foreach($ldap_groups as $ldap_group) {
foreach ($ldap_groups as $ldap_group) {
$group_cn = get_cn($ldap_group);
$search = ldap_search($ldap_connection, $config['auth_ad_base_dn'], "(cn={$group_cn})", array('member'));
$entries = ldap_get_entries($ldap_connection, $search);
foreach($entries[0]['member'] as $member) {
foreach ($entries[0]['member'] as $member) {
$member_cn = get_cn($member);
$search = ldap_search($ldap_connection, $config['auth_ad_base_dn'], "(cn={$member_cn})",
array('sAMAccountname', 'displayName', 'objectSID', 'mail'));
$search = ldap_search(
$ldap_connection,
$config['auth_ad_base_dn'],
"(cn={$member_cn})",
array('sAMAccountname', 'displayName', 'objectSID', 'mail')
);
$results = ldap_get_entries($ldap_connection, $search);
foreach($results as $result) {
if(isset($result['samaccountname'][0])) {
$userid = preg_replace('/.*-(\d+)$/','$1',
sid_from_ldap($result['objectsid'][0]));
foreach ($results as $result) {
if (isset($result['samaccountname'][0])) {
$userid = preg_replace(
'/.*-(\d+)$/',
'$1',
sid_from_ldap($result['objectsid'][0])
);
// don't make duplicates, user may be member of more than one group
$userhash[$result['samaccountname'][0]] = array(
@@ -223,7 +249,7 @@ function get_userlist() {
}
}
foreach(array_keys($userhash) as $key) {
foreach (array_keys($userhash) as $key) {
$userlist[] = array(
'username' => $key,
'realname' => $userhash[$key]['realname'],
@@ -236,34 +262,41 @@ function get_userlist() {
}
function can_update_users() {
function can_update_users()
{
// not supported so return 0
return 0;
}
function get_user($user_id) {
function get_user($user_id)
{
// not supported so return 0
return dbFetchRow('SELECT * FROM `users` WHERE `user_id` = ?', array($user_id), true);
}
function update_user($user_id, $realname, $level, $can_modify_passwd, $email) {
function update_user($user_id, $realname, $level, $can_modify_passwd, $email)
{
dbUpdate(array('realname' => $realname, 'can_modify_passwd' => $can_modify_passwd, 'email' => $email), 'users', '`user_id` = ?', array($user_id));
}
function get_fullname($username) {
function get_fullname($username)
{
global $config, $ldap_connection;
$attributes = array('name');
$result = ldap_search($ldap_connection, $config['auth_ad_base_dn'],
"(samaccountname={$username})", $attributes);
$result = ldap_search(
$ldap_connection,
$config['auth_ad_base_dn'],
"(samaccountname={$username})",
$attributes
);
$entries = ldap_get_entries($ldap_connection, $result);
if ($entries['count'] > 0) {
$membername = $entries[0]['name'][0];
}
else {
} else {
$membername = $username;
}
@@ -271,7 +304,8 @@ function get_fullname($username) {
}
function get_group_list() {
function get_group_list()
{
global $config;
$ldap_groups = array();
@@ -294,26 +328,30 @@ function get_group_list() {
}
return $ldap_groups;
}
function get_dn($samaccountname) {
function get_dn($samaccountname)
{
global $config, $ldap_connection;
$attributes = array('dn');
$result = ldap_search($ldap_connection, $config['auth_ad_base_dn'],
"(samaccountname={$samaccountname})", $attributes);
$result = ldap_search(
$ldap_connection,
$config['auth_ad_base_dn'],
"(samaccountname={$samaccountname})",
$attributes
);
$entries = ldap_get_entries($ldap_connection, $result);
if ($entries['count'] > 0) {
return $entries[0]['dn'];
}
else {
} else {
return '';
}
}
function get_cn($dn) {
function get_cn($dn)
{
preg_match('/[^,]*/', $dn, $matches, PREG_OFFSET_CAPTURE, 3);
return $matches[0][0];
}
@@ -321,39 +359,44 @@ function get_cn($dn) {
function sid_from_ldap($sid)
{
$sidHex = unpack('H*hex', $sid);
$subAuths = unpack('H2/H2/n/N/V*', $sid);
$subAuths = unpack('H2/H2/n/N/V*', $sid);
$revLevel = hexdec(substr($sidHex, 0, 2));
$authIdent = hexdec(substr($sidHex, 4, 12));
$authIdent = hexdec(substr($sidHex, 4, 12));
return 'S-'.$revLevel.'-'.$authIdent.'-'.implode('-', $subAuths);
}
function auth_ldap_session_cache_get ($attr) {
function auth_ldap_session_cache_get($attr)
{
global $config;
$ttl = 300;
if ($config['auth_ldap_cache_ttl'])
if ($config['auth_ldap_cache_ttl']) {
$ttl = $config['auth_ldap_cache_ttl'];
}
// auth_ldap cache present in this session?
if (! isset ($_SESSION['auth_ldap']))
return Null;
if (! isset($_SESSION['auth_ldap'])) {
return null;
}
$cache = $_SESSION['auth_ldap'];
// $attr present in cache?
if (! isset ($cache[$attr]))
return Null;
if (! isset($cache[$attr])) {
return null;
}
// Value still valid?
if (time () - $cache[$attr]['last_updated'] >= $ttl)
return Null;
if (time() - $cache[$attr]['last_updated'] >= $ttl) {
return null;
}
return $cache[$attr]['value'];
}
function auth_ldap_session_cache_set ($attr, $value) {
function auth_ldap_session_cache_set($attr, $value)
{
$_SESSION['auth_ldap'][$attr]['value'] = $value;
$_SESSION['auth_ldap'][$attr]['last_updated'] = time ();
$_SESSION['auth_ldap'][$attr]['last_updated'] = time();
}