|
|
@@ -0,0 +1,282 @@
|
|
|
+#!/usr/bin/php
|
|
|
+<?php
|
|
|
+/**
|
|
|
+ * Copyright (C) 2005 Rodolphe Quiedeville <rodolphe@quiedeville.org>
|
|
|
+ * Copyright (C) 2006-2012 Laurent Destailleur <eldy@users.sourceforge.net>
|
|
|
+ *
|
|
|
+ * This program is free software; you can redistribute it and/or modify
|
|
|
+ * it under the terms of the GNU General Public License as published by
|
|
|
+ * the Free Software Foundation; either version 2 of the License, or
|
|
|
+ * (at your option) any later version.
|
|
|
+ *
|
|
|
+ * This program is distributed in the hope that it will be useful,
|
|
|
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
+ * GNU General Public License for more details.
|
|
|
+ *
|
|
|
+ * You should have received a copy of the GNU General Public License
|
|
|
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
+ */
|
|
|
+
|
|
|
+/**
|
|
|
+ * \file scripts/user/sync_users_ldap2dolibarr.php
|
|
|
+ * \ingroup ldap member
|
|
|
+ * \brief Script to update users into Dolibarr from LDAP
|
|
|
+ */
|
|
|
+
|
|
|
+$sapi_type = php_sapi_name();
|
|
|
+$script_file = basename(__FILE__);
|
|
|
+$path=dirname(__FILE__).'/';
|
|
|
+
|
|
|
+// Test if batch mode
|
|
|
+if (substr($sapi_type, 0, 3) == 'cgi') {
|
|
|
+ echo "Error: You ar usingr PH for CGI. To execute ".$script_file." from command line, you must use PHP for CLI mode.\n";
|
|
|
+ exit;
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+// Main
|
|
|
+
|
|
|
+$version='1.14';
|
|
|
+@set_time_limit(0);
|
|
|
+$error=0;
|
|
|
+$forcecommit=0;
|
|
|
+
|
|
|
+require_once($path."../../htdocs/master.inc.php");
|
|
|
+require_once(DOL_DOCUMENT_ROOT."/core/lib/date.lib.php");
|
|
|
+require_once(DOL_DOCUMENT_ROOT."/core/class/ldap.class.php");
|
|
|
+require_once(DOL_DOCUMENT_ROOT."/user/class/user.class.php");
|
|
|
+
|
|
|
+$langs->load("main");
|
|
|
+$langs->load("errors");
|
|
|
+
|
|
|
+// List of fields to get from LDAP
|
|
|
+$required_fields = array(
|
|
|
+ $conf->global->LDAP_KEY_USERS,
|
|
|
+ $conf->global->LDAP_FIELD_FULLNAME,
|
|
|
+ $conf->global->LDAP_FIELD_NAME,
|
|
|
+ $conf->global->LDAP_FIELD_FIRSTNAME,
|
|
|
+ $conf->global->LDAP_FIELD_LOGIN,
|
|
|
+ $conf->global->LDAP_FIELD_LOGIN_SAMBA,
|
|
|
+ $conf->global->LDAP_FIELD_PASSWORD,
|
|
|
+ $conf->global->LDAP_FIELD_PASSWORD_CRYPTED,
|
|
|
+ $conf->global->LDAP_FIELD_PHONE,
|
|
|
+ $conf->global->LDAP_FIELD_FAX,
|
|
|
+ $conf->global->LDAP_FIELD_MOBILE,
|
|
|
+ //$conf->global->LDAP_FIELD_ADDRESS,
|
|
|
+ //$conf->global->LDAP_FIELD_ZIP,
|
|
|
+ //$conf->global->LDAP_FIELD_TOWN,
|
|
|
+ //$conf->global->LDAP_FIELD_COUNTRY,
|
|
|
+ $conf->global->LDAP_FIELD_MAIL,
|
|
|
+ $conf->global->LDAP_FIELD_TITLE,
|
|
|
+ $conf->global->LDAP_FIELD_DESCRIPTION,
|
|
|
+ $conf->global->LDAP_FIELD_SID
|
|
|
+);
|
|
|
+
|
|
|
+// Remove from required_fields all entries not configured in LDAP (empty) and duplicated
|
|
|
+$required_fields=array_unique(array_values(array_filter($required_fields, "dolValidElement")));
|
|
|
+
|
|
|
+if ($argv[2]) $conf->global->LDAP_SERVER_HOST=$argv[2];
|
|
|
+
|
|
|
+print "***** $script_file ($version) *****\n";
|
|
|
+
|
|
|
+if (! isset($argv[1])) {
|
|
|
+ //print "Usage: $script_file (nocommitiferror|commitiferror) [id_group]\n";
|
|
|
+ print "Usage: $script_file (nocommitiferror|commitiferror) [ldapserverhost]\n";
|
|
|
+ exit;
|
|
|
+}
|
|
|
+$groupid=$argv[3];
|
|
|
+if ($argv[1] == 'commitiferror') $forcecommit=1;
|
|
|
+
|
|
|
+
|
|
|
+print "Mails sending disabled (useless in batch mode)\n";
|
|
|
+$conf->global->MAIN_DISABLE_ALL_MAILS=1; // On bloque les mails
|
|
|
+print "\n";
|
|
|
+print "----- Synchronize all records from LDAP database:\n";
|
|
|
+print "host=".$conf->global->LDAP_SERVER_HOST."\n";
|
|
|
+print "port=".$conf->global->LDAP_SERVER_PORT."\n";
|
|
|
+print "login=".$conf->global->LDAP_ADMIN_DN."\n";
|
|
|
+print "pass=".preg_replace('/./i','*',$conf->global->LDAP_ADMIN_PASS)."\n";
|
|
|
+print "DN to extract=".$conf->global->LDAP_USER_DN."\n";
|
|
|
+print 'Filter=('.$conf->global->LDAP_KEY_USERS.'=*)'."\n";
|
|
|
+print "----- To Dolibarr database:\n";
|
|
|
+print "type=".$conf->db->type."\n";
|
|
|
+print "host=".$conf->db->host."\n";
|
|
|
+print "port=".$conf->db->port."\n";
|
|
|
+print "login=".$conf->db->user."\n";
|
|
|
+print "database=".$conf->db->name."\n";
|
|
|
+print "----- Options:\n";
|
|
|
+print "commitiferror=".$forcecommit."\n";
|
|
|
+print "Mapped LDAP fields=".join(',',$required_fields)."\n";
|
|
|
+print "\n";
|
|
|
+print "Press a key to confirm...";
|
|
|
+$input = trim(fgets(STDIN));
|
|
|
+print "Hit Enter to continue or CTRL+C to stop...\n";
|
|
|
+$input = trim(fgets(STDIN));
|
|
|
+
|
|
|
+
|
|
|
+if (empty($conf->global->LDAP_USER_DN))
|
|
|
+{
|
|
|
+ print $langs->trans("Error").': '.$langs->trans("LDAP setup for users not defined inside Dolibarr");
|
|
|
+ exit(1);
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+// Charge tableau de correspondance des pays
|
|
|
+$hashlib2rowid=array();
|
|
|
+$countries=array();
|
|
|
+$sql = "SELECT rowid, code, libelle, active";
|
|
|
+$sql.= " FROM ".MAIN_DB_PREFIX."c_pays";
|
|
|
+$sql.= " WHERE active = 1";
|
|
|
+$sql.= " ORDER BY code ASC";
|
|
|
+$resql=$db->query($sql);
|
|
|
+if ($resql)
|
|
|
+{
|
|
|
+ $num = $db->num_rows($resql);
|
|
|
+ $i = 0;
|
|
|
+ if ($num)
|
|
|
+ {
|
|
|
+ while ($i < $num)
|
|
|
+ {
|
|
|
+ $obj = $db->fetch_object($resql);
|
|
|
+ if ($obj)
|
|
|
+ {
|
|
|
+ //print 'Load cache for country '.strtolower($obj->libelle).' rowid='.$obj->rowid."\n";
|
|
|
+ $hashlib2rowid[strtolower($obj->libelle)]=$obj->rowid;
|
|
|
+ $countries[$obj->rowid]=array('rowid' => $obj->rowid, 'label' => $obj->libelle, 'code' => $obj->code);
|
|
|
+ }
|
|
|
+ $i++;
|
|
|
+ }
|
|
|
+ }
|
|
|
+}
|
|
|
+else
|
|
|
+{
|
|
|
+ dol_print_error($db);
|
|
|
+ exit;
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+$ldap = new Ldap();
|
|
|
+$result = $ldap->connect_bind();
|
|
|
+if ($result >= 0)
|
|
|
+{
|
|
|
+ $justthese=array();
|
|
|
+
|
|
|
+
|
|
|
+ // We disable synchro Dolibarr-LDAP
|
|
|
+ $conf->global->LDAP_SYNCHRO_ACTIVE=0;
|
|
|
+
|
|
|
+ $ldaprecords = $ldap->getRecords('*',$conf->global->LDAP_USER_DN, $conf->global->LDAP_KEY_USERS, $required_fields, 0);
|
|
|
+ if (is_array($ldaprecords))
|
|
|
+ {
|
|
|
+ $db->begin();
|
|
|
+
|
|
|
+ // Warning $ldapuser has a key in lowercase
|
|
|
+ foreach ($ldaprecords as $key => $ldapuser)
|
|
|
+ {
|
|
|
+ $fuser = new User($db);
|
|
|
+
|
|
|
+ // Propriete membre
|
|
|
+ $fuser->firstname=$ldapuser[$conf->global->LDAP_FIELD_FIRSTNAME];
|
|
|
+ $fuser->lastname=$ldapuser[$conf->global->LDAP_FIELD_NAME];
|
|
|
+ $fuser->login=$ldapuser[$conf->global->LDAP_FIELD_LOGIN];
|
|
|
+ $fuser->pass=$ldapuser[$conf->global->LDAP_FIELD_PASSWORD];
|
|
|
+ $fuser->pass_indatabase_crypted=$ldapuser[$conf->global->LDAP_FIELD_PASSWORD_CRYPTED];
|
|
|
+
|
|
|
+ //$user->societe;
|
|
|
+ /*
|
|
|
+ $fuser->address=$ldapuser[$conf->global->LDAP_FIELD_ADDRESS];
|
|
|
+ $fuser->zip=$ldapuser[$conf->global->LDAP_FIELD_ZIP];
|
|
|
+ $fuser->town=$ldapuser[$conf->global->LDAP_FIELD_TOWN];
|
|
|
+ $fuser->country=$ldapuser[$conf->global->LDAP_FIELD_COUNTRY];
|
|
|
+ $fuser->country_id=$countries[$hashlib2rowid[strtolower($fuser->country)]]['rowid'];
|
|
|
+ $fuser->country_code=$countries[$hashlib2rowid[strtolower($fuser->country)]]['code'];
|
|
|
+ */
|
|
|
+
|
|
|
+ $fuser->office_phone=$ldapuser[$conf->global->LDAP_FIELD_PHONE];
|
|
|
+ $fuser->user_mobile=$ldapuser[$conf->global->LDAP_FIELD_MOBILE];
|
|
|
+ $fuser->office_fax=$ldapuser[$conf->global->LDAP_FIELD_FAX];
|
|
|
+ $fuser->email=$ldapuser[$conf->global->LDAP_FIELD_MAIL];
|
|
|
+
|
|
|
+ $fuser->job=$ldapuser[$conf->global->LDAP_FIELD_TITLE];
|
|
|
+ $fuser->note=$ldapuser[$conf->global->LDAP_FIELD_DESCRIPTION];
|
|
|
+ $fuser->admin=0;
|
|
|
+ $fuser->societe_id=0;
|
|
|
+ $fuser->contact_id=0;
|
|
|
+ $fuser->fk_member=0;
|
|
|
+
|
|
|
+ $fuser->statut=1;
|
|
|
+ /*if (isset($ldapuser[$conf->global->LDAP_FIELD_MEMBER_STATUS]))
|
|
|
+ {
|
|
|
+ $fuser->datec=dol_stringtotime($ldapuser[$conf->global->LDAP_FIELD_MEMBER_FIRSTSUBSCRIPTION_DATE]);
|
|
|
+ $fuser->datevalid=dol_stringtotime($ldapuser[$conf->global->LDAP_FIELD_MEMBER_FIRSTSUBSCRIPTION_DATE]);
|
|
|
+ $fuser->statut=$ldapuser[$conf->global->LDAP_FIELD_MEMBER_STATUS];
|
|
|
+ }*/
|
|
|
+ //if ($fuser->statut > 1) $fuser->statut=1;
|
|
|
+
|
|
|
+ //print_r($ldapuser);
|
|
|
+
|
|
|
+ // Group of user
|
|
|
+ // We should use here $groupid
|
|
|
+
|
|
|
+ // Creation member
|
|
|
+ print $langs->transnoentities("UserCreate").' # '.$key.': login='.$fuser->login.', fullname='.$fuser->getFullName($langs);
|
|
|
+ $fuser_id=$fuser->create($user);
|
|
|
+ if ($fuser_id > 0)
|
|
|
+ {
|
|
|
+ print ' --> Created member id='.$fuser_id.' login='.$fuser->login;
|
|
|
+ }
|
|
|
+ else
|
|
|
+ {
|
|
|
+ $error++;
|
|
|
+ print ' --> '.$fuser_id.' '.$fuser->error;
|
|
|
+ }
|
|
|
+ print "\n";
|
|
|
+
|
|
|
+ //print_r($fuser);
|
|
|
+ }
|
|
|
+
|
|
|
+ if (! $error || $forcecommit)
|
|
|
+ {
|
|
|
+ if (! $error) print $langs->transnoentities("NoErrorCommitIsDone")."\n";
|
|
|
+ else print $langs->transnoentities("ErrorButCommitIsDone")."\n";
|
|
|
+ $db->commit();
|
|
|
+ }
|
|
|
+ else
|
|
|
+ {
|
|
|
+ print $langs->transnoentities("ErrorSomeErrorWereFoundRollbackIsDone",$error)."\n";
|
|
|
+ $db->rollback();
|
|
|
+ }
|
|
|
+ print "\n";
|
|
|
+ }
|
|
|
+ else
|
|
|
+ {
|
|
|
+ dol_print_error('',$ldap->error);
|
|
|
+ $error++;
|
|
|
+ }
|
|
|
+}
|
|
|
+else
|
|
|
+{
|
|
|
+ dol_print_error('',$ldap->error);
|
|
|
+ $error++;
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+return $error;
|
|
|
+
|
|
|
+
|
|
|
+/**
|
|
|
+ * Function to say if a value is empty or not
|
|
|
+ *
|
|
|
+ * @param string $element Value to test
|
|
|
+ * @return boolean True of false
|
|
|
+ */
|
|
|
+function dolValidElement($element)
|
|
|
+{
|
|
|
+ return (trim($element) != '');
|
|
|
+}
|
|
|
+
|
|
|
+?>
|
Laurent Destailleur