Class to manage LDAP features. More...

Collaboration diagram for Ldap:

Public Member Functions
	__construct ()
	Constructor.

	connect_bind ()
	Connect and bind Use this->server, this->serverPort, this->ldapProtocolVersion, this->serverType, this->searchUser, this->searchPassword After return, this->connection and $this->bind are defined. More...

	close ()
	Simply closes the connection set up earlier. More...

	bind ()
	Anonymously binds to the connection. More...

	bindauth ($bindDn, $pass)
	Binds as an authenticated user, which usually allows for write access. More...

	unbind ()
	Unbind of LDAP server (close connection). More...

	getVersion ()
	Verification de la version du serveur ldap. More...

	setVersion ()
	Change ldap protocol version to use. More...

	setReferrals ()
	changement du referrals. More...

	add ($dn, $info, $user)
	Add a LDAP entry Ldap object connect and bind must have been done. More...

	modify ($dn, $info, $user)
	Modify a LDAP entry Ldap object connect and bind must have been done. More...

	rename ($dn, $newrdn, $newparent, $user, $deleteoldrdn=true)
	Rename a LDAP entry Ldap object connect and bind must have been done. More...

	update ($dn, $info, $user, $olddn, $newrdn=false, $newparent=false)
	Modify a LDAP entry (to use if dn != olddn) Ldap object connect and bind must have been done. More...

	delete ($dn)
	Delete a LDAP entry Ldap object connect and bind must have been done. More...

	dump_content ($dn, $info)
	Build a LDAP message. More...

	dump ($dn, $info)
	Dump a LDAP message to ldapinput.in file. More...

	serverPing ($host, $port=389, $timeout=1)
	Ping a server before ldap_connect for avoid waiting. More...

	addAttribute ($dn, $info, $user)
	Add a LDAP attribute in entry Ldap object connect and bind must have been done. More...

	updateAttribute ($dn, $info, $user)
	Update a LDAP attribute in entry Ldap object connect and bind must have been done. More...

	deleteAttribute ($dn, $info, $user)
	Delete a LDAP attribute in entry Ldap object connect and bind must have been done. More...

	getAttribute ($dn, $filter)
	Returns an array containing attributes and values for first record. More...

	getAttributeValues ($filterrecord, $attribute)
	Returns an array containing values for an attribute and for first record matching filterrecord. More...

	getRecords ($search, $userDn, $useridentifier, $attributeArray, $activefilter=0, $attributeAsArray=array())
	Returns an array containing a details or list of LDAP record(s). More...

	littleEndian ($hex)
	Converts a little-endian hex-number to one, that 'hexdec' can convert Required by Active Directory. More...

	getObjectSid ($ldapUser)
	Recupere le SID de l'utilisateur Required by Active Directory. More...

	binSIDtoText ($binsid)
	Returns the textual SID Indispensable pour Active Directory. More...

	search ($checkDn, $filter)
	Fonction de recherche avec filtre this->connection doit etre defini donc la methode bind ou bindauth doit avoir deja ete appelee Ne pas utiliser pour recherche d'une liste donnee de proprietes car conflit majuscule-minuscule. More...

	fetch ($user, $filter)
	Load all attribute of a LDAP user. More...

	getUserIdentifier ()
	Returns the correct user identifier to use, based on the ldap server type. More...

	parseUACF ($uacf)
	UserAccountControl Flgs to more human understandable form... More...

	parseSAT ($samtype)
	SamAccountType value to text. More...

	convert_time ($value)
	Convertit le temps ActiveDirectory en Unix timestamp. More...

	convFromOutputCharset ($str, $pagecodeto='UTF-8')
	Convert a string from output/memory charset. More...

	getNextGroupGid ($keygroup='LDAP_KEY_GROUPS')
	Return available value of group GID. More...

Public Attributes
	$server = array()
	Tableau des serveurs (IP addresses ou nom d'hotes)

	$connectedServer
	Current connected server.

	$dn
	Base DN (e.g. More...

	$serverType
	type de serveur, actuellement OpenLdap et Active Directory

	$ldapProtocolVersion
	Version du protocole ldap.

	$domain
	Server DN.

	$searchUser
	User administrateur Ldap Active Directory ne supporte pas les connexions anonymes.

	$searchPassword
	Mot de passe de l'administrateur Active Directory ne supporte pas les connexions anonymes.

	$people
	DN des utilisateurs.

	$groups
	DN des groupes.

	$ldapErrorCode
	Code erreur retourne par le serveur Ldap.

	$ldapErrorText
	Message texte de l'erreur.

	$connection
	The internal LDAP connection handle.

	$result
	Result of any connections etc.

const	SYNCHRO_NONE = 0
	No Ldap synchronization.

const	SYNCHRO_DOLIBARR_TO_LDAP = 1
	Dolibarr to Ldap synchronization.

const	SYNCHRO_LDAP_TO_DOLIBARR = 2
	Ldap to Dolibarr synchronization.

Private Member Functions
	convToOutputCharset ($str, $pagecodefrom='UTF-8')
	Convert a string into output/memory charset. More...

Detailed Description

Class to manage LDAP features.

Definition at line 34 of file ldap.class.php.

Member Function Documentation

◆ add()

Ldap::add	(	$dn,
		$info,
		$user
	)

Add a LDAP entry Ldap object connect and bind must have been done.

Parameters

string	$dn	DN entry key
array	$info	Attributes array
User	$user	Objet user that create

Returns: int <0 if KO, >0 if OK

Definition at line 461 of file ldap.class.php.

◆ addAttribute()

Ldap::addAttribute	(	$dn,
		$info,
		$user
	)

Add a LDAP attribute in entry Ldap object connect and bind must have been done.

Parameters

string	$dn	DN entry key
array	$info	Attributes array
User	$user	Objet user that create

Returns: int <0 if KO, >0 if OK

Definition at line 810 of file ldap.class.php.

◆ bind()

Ldap::bind ( )

Anonymously binds to the connection.

After this is done, queries and searches can be done - but read-only.

Returns: boolean true or false

Definition at line 361 of file ldap.class.php.

◆ bindauth()

Ldap::bindauth	(	$bindDn,
		$pass
	)

Binds as an authenticated user, which usually allows for write access.

The FULL dn must be passed. For a directory manager, this is "cn=Directory Manager" under iPlanet. For a user, it will be something like "uid=jbloggs,ou=People,dc=foo,dc=com".

Parameters

string	$bindDn	DN
string	$pass	Password

Returns: boolean true or false

Definition at line 383 of file ldap.class.php.

Referenced by getObjectSid().

◆ binSIDtoText()

Ldap::binSIDtoText ( $binsid )

Returns the textual SID Indispensable pour Active Directory.

Parameters

string $binsid Binary SID

Returns: string Textual SID

Definition at line 1189 of file ldap.class.php.

◆ close()

Ldap::close ( )

Simply closes the connection set up earlier.

Returns true if OK, false if there was an error. This method seems a duplicate/alias of unbind().

Returns: boolean true or false

Deprecated:: ldap_close is an alias of ldap_unbind

See also: unbind()

Definition at line 345 of file ldap.class.php.

◆ connect_bind()

Ldap::connect_bind ( )

Connect and bind Use this->server, this->serverPort, this->ldapProtocolVersion, this->serverType, this->searchUser, this->searchPassword After return, this->connection and $this->bind are defined.

Returns: int <0 if KO, 1 if bind anonymous, 2 if bind auth

Definition at line 192 of file ldap.class.php.

◆ convert_time()

Ldap::convert_time ( $value )

Convertit le temps ActiveDirectory en Unix timestamp.

Parameters

string $value AD time to convert

Returns: integer Unix timestamp

Definition at line 1427 of file ldap.class.php.

◆ convFromOutputCharset()

Ldap::convFromOutputCharset	(	$str,
		$pagecodeto = `'UTF-8'`
	)

Convert a string from output/memory charset.

Parameters

string	$str	String to convert
string	$pagecodeto	Page code for result string

Returns: string Converted string

Definition at line 1464 of file ldap.class.php.

◆ convToOutputCharset()

Ldap::convToOutputCharset	(	$str,
		$pagecodefrom = `'UTF-8'`
	)

private

Convert a string into output/memory charset.

Parameters

string	$str	String to convert
string	$pagecodefrom	Page code of src string

Returns: string Converted string

Definition at line 1445 of file ldap.class.php.

◆ delete()

Ldap::delete ( $dn )

Delete a LDAP entry Ldap object connect and bind must have been done.

Parameters

string $dn DN entry key

Returns: int <0 if KO, >0 if OK

Definition at line 661 of file ldap.class.php.

References $dn, and dol_syslog().

◆ deleteAttribute()

Ldap::deleteAttribute	(	$dn,
		$info,
		$user
	)

Delete a LDAP attribute in entry Ldap object connect and bind must have been done.

Parameters

string	$dn	DN entry key
array	$info	Attributes array
User	$user	Objet user that create

Returns: int <0 if KO, >0 if OK

Definition at line 902 of file ldap.class.php.

◆ dump()

Ldap::dump	(	$dn,
		$info
	)

Dump a LDAP message to ldapinput.in file.

Parameters

string	$dn	DN entry key
array	$info	Attributes array

Returns: int <0 if KO, >0 if OK

Definition at line 731 of file ldap.class.php.

◆ dump_content()

Ldap::dump_content	(	$dn,
		$info
	)

Build a LDAP message.

Parameters

string	$dn	DN entry key
array	$info	Attributes array

Returns: string Content of file

Definition at line 694 of file ldap.class.php.

◆ fetch()

Ldap::fetch	(	$user,
		$filter
	)

Load all attribute of a LDAP user.

Parameters

User \| string	$user	Not used.
string	$filter	Filter for search. Must start with &. Examples: &(objectClass=inetOrgPerson) &(objectClass=user)(objectCategory=person) &(isMemberOf=cn=Sales,ou=Groups,dc=opencsi,dc=com)

Returns: int >0 if OK, <0 if KO

Definition at line 1247 of file ldap.class.php.

◆ getAttribute()

Ldap::getAttribute	(	$dn,
		$filter
	)

Returns an array containing attributes and values for first record.

Parameters

string	$dn	DN entry key
string	$filter	Filter

Returns: int|array <0 or false if KO, array if OK

Definition at line 946 of file ldap.class.php.

◆ getAttributeValues()

Ldap::getAttributeValues	(	$filterrecord,
		$attribute
	)

Returns an array containing values for an attribute and for first record matching filterrecord.

Parameters

string	$filterrecord	Record
string	$attribute	Attributes

Returns: array|boolean

Definition at line 987 of file ldap.class.php.

◆ getNextGroupGid()

Ldap::getNextGroupGid ( $keygroup = 'LDAP_KEY_GROUPS' )

Return available value of group GID.

Parameters

string $keygroup Key of group

Returns: int gid number

Definition at line 1483 of file ldap.class.php.

◆ getObjectSid()

Ldap::getObjectSid ( $ldapUser )

Recupere le SID de l'utilisateur Required by Active Directory.

Parameters

string $ldapUser Login de l'utilisateur

Returns: string Sid

Definition at line 1139 of file ldap.class.php.

References bindauth().

◆ getRecords()

Ldap::getRecords	(	$search,
		$userDn,
		$useridentifier,
		$attributeArray,
		$activefilter = `0`,
		$attributeAsArray = `array()`
	)

Returns an array containing a details or list of LDAP record(s).

ldapsearch -LLLx -hlocalhost -Dcn=admin,dc=parinux,dc=org -w password -b "ou=adherents,ou=people,dc=parinux,dc=org" userPassword

Parameters

string	$search	Value of field to search, '*' for all. Not used if $activefilter is set.
string	$userDn	DN (Ex: ou=adherents,ou=people,dc=parinux,dc=org)
string	$useridentifier	Name of key field (Ex: uid).
array	$attributeArray	Array of fields required. Note this array must also contains field $useridentifier (Ex: sn,userPassword)
int	$activefilter	'1' or 'user'=use field this->filter as filter instead of parameter $search, 'group'=use field this->filtergroup as filter, 'member'=use field this->filtermember as filter
array	$attributeAsArray	Array of fields wanted as an array not a string

Returns: array|int Array of [id_record][ldap_field]=value

Definition at line 1030 of file ldap.class.php.

◆ getUserIdentifier()

Ldap::getUserIdentifier ( )

Returns the correct user identifier to use, based on the ldap server type.

Returns: string Login

Definition at line 1332 of file ldap.class.php.

◆ getVersion()

Ldap::getVersion ( )

Verification de la version du serveur ldap.

Returns: string version

Definition at line 420 of file ldap.class.php.

◆ littleEndian()

Ldap::littleEndian ( $hex )

Converts a little-endian hex-number to one, that 'hexdec' can convert Required by Active Directory.

Parameters

string $hex Hex value

Returns: string Little endian

Definition at line 1122 of file ldap.class.php.

References $result, and dol_strlen().

◆ modify()

Ldap::modify	(	$dn,
		$info,
		$user
	)

Modify a LDAP entry Ldap object connect and bind must have been done.

Parameters

string	$dn	DN entry key
array	$info	Attributes array
User	$user	Objet user that modify

Returns: int <0 if KO, >0 if OK

Definition at line 509 of file ldap.class.php.

◆ parseSAT()

Ldap::parseSAT ( $samtype )

SamAccountType value to text.

Parameters

string $samtype SamType

Returns: string Sam string

Definition at line 1394 of file ldap.class.php.

◆ parseUACF()

Ldap::parseUACF ( $uacf )

UserAccountControl Flgs to more human understandable form...

Parameters

string $uacf UACF

Returns: array

Definition at line 1347 of file ldap.class.php.

◆ rename()

Ldap::rename	(	$dn,
		$newrdn,
		$newparent,
		$user,
		$deleteoldrdn = `true`
	)

Rename a LDAP entry Ldap object connect and bind must have been done.

Parameters

string	$dn	Old DN entry key (uid=qqq,ou=xxx,dc=aaa,dc=bbb) (before update)
string	$newrdn	New RDN entry key (uid=qqq)
string	$newparent	New parent (ou=xxx,dc=aaa,dc=bbb)
User	$user	Objet user that modify
bool	$deleteoldrdn	If true the old RDN value(s) is removed, else the old RDN value(s) is retained as non-distinguished values of the entry.

Returns: int <0 if KO, >0 if OK

Definition at line 567 of file ldap.class.php.

◆ search()

Ldap::search	(	$checkDn,
		$filter
	)

Fonction de recherche avec filtre this->connection doit etre defini donc la methode bind ou bindauth doit avoir deja ete appelee Ne pas utiliser pour recherche d'une liste donnee de proprietes car conflit majuscule-minuscule.

A n'utiliser que pour les pages 'Fiche LDAP' qui affiche champ lisibles par defaut.

Parameters

string	$checkDn	DN de recherche (Ex: ou=users,cn=my-domain,cn=com)
string	$filter	Search filter (ex: (sn=nom_personne) )

Returns: array|int Array with answers (key lowercased - value)

Definition at line 1214 of file ldap.class.php.

◆ serverPing()

Ldap::serverPing	(	$host,
		$port = `389`,
		$timeout = `1`
	)

Ping a server before ldap_connect for avoid waiting.

Parameters

string	$host	Server host or address
int	$port	Server port (default 389)
int	$timeout	Timeout in second (default 1s)

Returns: boolean true or false

Definition at line 763 of file ldap.class.php.

◆ setReferrals()

Ldap::setReferrals ( )

changement du referrals.

Returns: boolean referrals

Definition at line 444 of file ldap.class.php.

◆ setVersion()

Ldap::setVersion ( )

Change ldap protocol version to use.

Returns: boolean version

Definition at line 432 of file ldap.class.php.

◆ unbind()

Ldap::unbind ( )

Unbind of LDAP server (close connection).

Returns: boolean true or false

See also: close()

Definition at line 401 of file ldap.class.php.

◆ update()

Ldap::update	(	$dn,
		$info,
		$user,
		$olddn,
		$newrdn = `false`,
		$newparent = `false`
	)

Modify a LDAP entry (to use if dn != olddn) Ldap object connect and bind must have been done.

Parameters

string	$dn	DN entry key
array	$info	Attributes array
User	$user	Objet user that update
string	$olddn	Old DN entry key (before update)
string	$newrdn	New RDN entry key (uid=qqq) (for ldap_rename)
string	$newparent	New parent (ou=xxx,dc=aaa,dc=bbb) (for ldap_rename)

Returns: int <0 if KO, >0 if OK

Definition at line 611 of file ldap.class.php.

◆ updateAttribute()

Ldap::updateAttribute	(	$dn,
		$info,
		$user
	)

Update a LDAP attribute in entry Ldap object connect and bind must have been done.

Parameters

string	$dn	DN entry key
array	$info	Attributes array
User	$user	Objet user that create

Returns: int <0 if KO, >0 if OK

Definition at line 856 of file ldap.class.php.

Member Data Documentation

◆ $dn

Ldap::$dn

Base DN (e.g.

"dc=foo,dc=com")

Definition at line 59 of file ldap.class.php.

Referenced by delete().

The documentation for this class was generated from the following file:

htdocs/core/class/ldap.class.php

Public Member Functions

Public Attributes

Private Member Functions

Detailed Description

Member Function Documentation

◆ add()

◆ addAttribute()

◆ bind()

◆ bindauth()

◆ binSIDtoText()

◆ close()

◆ connect_bind()

◆ convert_time()

◆ convFromOutputCharset()

◆ convToOutputCharset()

◆ delete()

◆ deleteAttribute()

◆ dump()

◆ dump_content()

◆ fetch()

◆ getAttribute()

◆ getAttributeValues()

◆ getNextGroupGid()

◆ getObjectSid()

◆ getRecords()

◆ getUserIdentifier()

◆ getVersion()

◆ littleEndian()

◆ modify()

◆ parseSAT()

◆ parseUACF()

◆ rename()

◆ search()

◆ serverPing()

◆ setReferrals()

◆ setVersion()

◆ unbind()

◆ update()

◆ updateAttribute()

Member Data Documentation

◆ $dn