M2LDAP ldap_user_del()

1 files changed, 81 insertions, 16 deletions

diff --git a/egyéb/nextcloud/mayor-ldap.php b/egyéb/nextcloud/mayor-ldap.php
index b740e9ec..0fbd5177 100644
--- a/egyéb/nextcloud/mayor-ldap.php
+++ b/egyéb/nextcloud/mayor-ldap.php
@@ -71,6 +71,7 @@ $cfg['ld_leiras'] = "description";
 $cfg['ld_iroda'] = "physicalDeliveryOfficeName";
 $cfg['ld_info'] = "info";
 $cfg['csoport_oupfx'] = "mayor";
+$cfg['manage_users'] = true;
 
 
 $occ_path = "/var/www/nextcloud/";
@@ -90,9 +91,9 @@ $pwchars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_?";
 $ldap_group_attrs = array('objectCalss', 'samaccountname', 'cn', 'member', 'name', 'description', 'info', 'mail', 'gidNumber', 'samaccounttype', 'instancetype', );
 $ldap_user_attrs  = array('sn', 'serialNumber', 'c', 'l', 'st', 'street', 'title', 'description', 'postalAddress', 'postalCode', 'postOfficeBox', 'physicalDeliveryOfficeName',
                             'telephoneNumber', 'facsimileTelephoneNumber', 'givenName', 'initials', 'otherTelephone', 'info', 'memberOf', 'otherPager', 'co', 'department',
-                            'company', 'streetAddress', 'otherHomePhone', 'wWWHomePage', 'employeeNumber', 'employeeType', 'personalTitle', 'homePostalAddress', 'name',
-                            'countryCode', 'employeeID', 'homeDirectory', 'comment', 'sAMAccountName', 'division', 'otherFacsimileTelephoneNumber', 'otherMobile',
-                            'primaryTelexNumber', 'otherMailbox', 'ipPhone', 'otherIpPhone', 'url', 'uid', 'mail', 'roomNumber', 'homePhone', 'mobile', 'pager', 
+                            'company', 'streetAddress', 'otherHomePhone', 'wWWHomePage', 'employeeNumber', 'employeeType', 'personalTitle', 'homePostalAddress', 'name','accountExpires',
+                            'countryCode', 'employeeID', 'homeDirectory', 'comment', 'sAMAccountName', 'division', 'otherFacsimileTelephoneNumber', 'otherMobile', 'lastLogon',
+                            'primaryTelexNumber', 'otherMailbox', 'ipPhone', 'otherIpPhone', 'url', 'uid', 'mail', 'roomNumber', 'homePhone', 'mobile', 'pager', 'lastLogonTimestamp',
                             'jpegPhoto', 'departmentNumber', 'middleName', 'thumbnailPhoto', 'preferredLanguage', 'uidNumber', 'gidNumber', 'unixHomeDirectory', 'loginShell'
                         );   
 
@@ -358,7 +359,7 @@ function ld_find_group($l, $groupName, $scope, $attrs = array()){
 }
 
 
-    function ld_user_add($l, $user, $fullname, $attr=array()){
+    function ld_user_add($l, $userAccount, $fullname, $attr=array()){
         global $cfg,$log;
         $attrs = $ret = array();
 
@@ -366,9 +367,9 @@ function ld_find_group($l, $groupName, $scope, $attrs = array()){
         $attr = attr_add_defaults($attr);
         if(!empty($fullname)                ){ $attrs['displayname'][0] = $fullname;}
         else if(!empty($attr['fullName'])   ){ $attrs['displayname'][0] = $attr['fullName'];}
-        else                                 { $attrs['displayname'][0] = $user;}
+        else                                 { $attrs['displayname'][0] = $userAccount;}
 
-        $dn = "CN=".ldap_escape($user, "", LDAP_ESCAPE_DN).",CN=Users,".$cfg['ldap_baseDn'];       //Ezt még lehetne cizellálni
+        $dn = "CN=".ldap_escape($userAccount, "", LDAP_ESCAPE_DN).",CN=Users,".$cfg['ldap_baseDn'];       //Ezt még lehetne cizellálni
 
         $attrs['objectclass'][0] = "top";                    //Alap dolgok, ami mindenképpen kell
         $attrs['objectclass'][1] = "person";
@@ -378,7 +379,7 @@ function ld_find_group($l, $groupName, $scope, $attrs = array()){
         $attrs['useraccountcontrol'][0] = "514";
         $attrs['accountexpires'][0] = "9223372036854775807";  // vagy "0"
         $attrs['distinguishedname'][0] = $dn;
-        $attrs[strtolower($cfg['ld_username'])][0]        =   $user; 
+        $attrs[strtolower($cfg['ld_username'])][0]        =   $userAccount; 
 
         $attrs['mail'][0]                                 =   $attr['email'];
         $attrs[strtolower($cfg['ld_oId'])][0]             =   $attr['oId'];
@@ -387,7 +388,7 @@ function ld_find_group($l, $groupName, $scope, $attrs = array()){
         $attrs[strtolower($cfg['ld_viseltNevElotag'])][0] =   $attr['viseltNevElotag']; 
         $attrs[strtolower($cfg['ld_viseltCsaladinev'])][0]=   $attr['viseltCsaladinev']; 
         $attrs[strtolower($cfg['ld_viseltUtonev'])][0]    =   $attr['viseltUtonev']; 
-        $attrs[strtolower($cfg['ld_lakhelyOrszag'])][0]   =   $attr['lakhelyOrszag']; 
+        $attrs[strtolower($cfg['ld_lakhelyOrszag'])][0]   =   @$attr['lakhelyOrszag']; 
         $attrs[strtolower($cfg['ld_lakhelyHelyseg'])][0]  =   $attr['lakhelyHelyseg']; 
         $attrs[strtolower($cfg['ld_lakhelyIrsz'])][0]     =   $attr['lakhelyIrsz']; 
         $attrs[strtolower($cfg['ld_lakHely'])][0]         =   $attr['lakHely']; 
@@ -399,7 +400,10 @@ function ld_find_group($l, $groupName, $scope, $attrs = array()){
         $attrs[strtolower($cfg['ld_iroda'])][0]           = "MaYor-Script-Managed";
         $attrs[strtolower($cfg['ld_info'])][0] = "Jogviszony kezdete: ".($attr['kezdoTanev'])."\r\nJogviszony terv. vége: ".($attr['vegzoTanev']+1)." Június\r\n\r\n(Generated-by MaYor-LDAP Script.)\r\n(Updated: ".date('Y-m-d H:i:s').")\r\n";
         //$attrs[strtolower($cfg['ld_'])][0] = $attr[''];
-        unset($attrs['']);   //Üresek kipucolása
+
+        foreach($attrs as $key => $val){                    //Üresek kipucolása
+            if($key == "" or $val[0] == ""){ unset($attrs[$key]); }
+        }
         $ret[4] = $dn;
         $ret[5] = $attrs;
 
@@ -436,6 +440,64 @@ function ld_find_group($l, $groupName, $scope, $attrs = array()){
     
 
 
+    function ld_user_del($l, $userAccount){
+        global $cfg, $log;
+        $ret = array();
+        $attrs = array(strtolower($cfg['ld_username']), 'lastLogonTimestamp', 'samaccountname', 'physicalDeliveryOfficeName', 'displayName', 'cn');
+
+        $user = ld_user_info($l, $userAccount, $attrs);
+        if ($log['verbose'] > 0 ){ echo "\$user = "; print_r($user); }
+
+        for($i = 0; $i < $user['count']; $i++){        //Az összeset, ha több? lenne.
+            if($user[$i][strtolower($cfg['ld_username'])][0] == $userAccount and !in_array($userAccount, $cfg['kihagy']) and $user[$i]['physicaldeliveryofficename'][0] == "MaYor-Script-Managed" ){ //Biztonság kedvéért 
+                
+                if(!empty($user[$i][strtolower('lastLogonTimestamp')])  /*and $user[$i][strtolower('lastLogonTimestamp')][0] != "0"*/ ){   //Ha egyszer már belépett, letiltja
+                
+                    unset($attrs);                          //Letiltás
+                    $attrs['useraccountcontrol'][0] = "514";
+                    $ret[0] = ldap_mod_replace($l, $user[$i]['dn'], $attrs);
+                    $ret[4] = $user[$i]['dn'];
+                    $ret[2] = ldap_errno($l);
+                    $ret[3] = ldap_err2str($ret[2]);
+                    $ret[5] = $attrs;
+ 
+                } else {                                                //Egyébként törli is
+                    $ret[0] = @ldap_delete($l, $user[$i]['dn']);
+                    $ret[4] = $user[$i]['dn'];
+                    $ret[2] = ldap_errno($l);
+                    $ret[3] = ldap_err2str($ret[2]);
+                }
+            } else { //Nem nyúl hozzá
+                echo "\nNem nyúl hozzá!\n";
+            }
+        }
+        if($i == 0){
+            $ret[3] =  "LDAP ->\t ******** LDAP Felhasználó törlés hiba! (infó: FElhasználó nem található! [".$userAccount."]/[".$cfg['ldap_baseDn']."]) ********\n";
+        }
+        return $ret;
+
+    }
+
+/*
+    function user_del($userAccount){	// kitöröl vagy letilt egy felhasználót a Nextcloud-ban
+	    global $occ_path,$occ_user,$log,$dryrun;
+        $e = "su -s /bin/sh $occ_user -c \"".phpv()." ".escp($occ_path."/occ")." user:info ".escp($userAccount)." --output=json \"";
+        if($log['verbose'] > 7) { echo "bash ->\t".$e."\n"; }
+        $last_login = json_decode(shell_exec($e),true)['last_seen'] ;
+        if($last_login == "1970-01-01T00:00:00+00:00" ){	
+            $e = "su -s /bin/sh $occ_user -c \"".phpv()." ".escp($occ_path."/occ")." user:delete ".escp($userAccount)." \"";		// Ha még soha nem lépett be
+            if($log['verbose'] > 7) { echo "bash ->\t".$e."\n"; }
+            if(!$dryrun){ $ret = shell_exec($e); } else { $ret = true; }											// akkor törölhető
+            if ($log['verbose'] > 11 ){ print_r($ret); }
+        } else {
+            $e = "su -s /bin/sh $occ_user -c \"".phpv()." ".escp($occ_path."/occ")." user:disable ".escp($userAccount)." \"";
+            if($log['verbose'] > 7) { echo "bash ->\t".$e."\n"; }
+            if(!$dryrun){ $ret = shell_exec($e); } else { $ret = true; }											// különben csak letiltja
+            if ($log['verbose'] > 11 ){ print_r($ret); }
+        }      
+    }
+*/
+
 function ld_group_user_add($l, $groupName, $userAccount, $scope = null){
     global $cfg,$log,$ldap_group_attrs,$ldap_user_attrs;
     $ret = array(0 => true, 2 => 0);
@@ -627,7 +689,7 @@ function ld_group_user_del($l, $groupName, $userAccount, $scope = null){
     }
 
 
- function ld_user_del(){}
+
  function ld_user_set(){}
  function ld_user_enable(){}
  function ld_user_disable(){}
@@ -635,7 +697,7 @@ function ld_group_user_del($l, $groupName, $userAccount, $scope = null){
  function ld_user_list(){}
  function ld_group_list(){}
  function ld_user_lastlogin(){}
- 
+
  function ld_ou_add(){}
  function ld_ou_del(){}
 
@@ -1393,9 +1455,9 @@ $attr['osztalyJel']         = "12.c";
 $attr['viseltNevElotag']    = "Msgr.";
 $attr['viseltCsaladinev']   = "Teszt";
 $attr['viseltUtonev']       = "Elek";
-$attr['lakhelyOrszag']      = "Magyarország";
+//$attr['lakhelyOrszag']      = "Magyarország";
 $attr['lakhelyHelyseg']     = "Pilisborosjenő";
-$attr['lakhelyIrsz']        = "1234";
+$attr['lakhelyIrsz']        = "";
 $attr['lakHely']            = "Boros utca 19.";
 $attr['telefon']            = "1234567";
 $attr['mobil']              = "06700000000";
@@ -1406,13 +1468,13 @@ $attr['vegzoTanev']         = 3001;
 
         
 echo "\nUser:\n";
-$rv = ld_user_add($ld, 'aaa', '', $attr);
+$rv = ld_user_add($ld, 'bbb', '', $attr);
 print_r($rv);
 
 echo "g add\n";
 print_r(ld_group_add($ld, "(tk) 10.c Tééészta"));
 echo "g u add\n";
-print_r(ld_group_user_del($ld, "bmrg_cloud", "aaa", "global"));
+print_r(ld_group_user_add($ld, "bmrg_cloud", "bbb", "global"));
 echo "g u add\n";
 print_r(ld_group_user_add($ld, "(tk) 10.c Tééészta", "aaa", "own"));
 
@@ -1422,7 +1484,10 @@ print_r(ld_group_user_add($ld, "(tk) 10.c Tééészta", "23bbmp", "own"));
 echo "g del\n";
 print_r(ld_group_del($ld, "(tk) 10.c Tééészta", ""));
 
-//print_r(ld_user_info($ld, "gergo1111"));
+print_r(ld_user_info($ld, "bbb"));
+
+echo "u del\n";
+print_r(ld_user_del($ld, "gergo111"));
 
 
 ldap_close($ld);