|
|
|
|
@ -6,207 +6,18 @@ |
|
|
|
|
|
|
|
|
|
*/ |
|
|
|
|
require_once api_get_path(SYS_PATH).'main/auth/cas/cas_var.inc.php'; |
|
|
|
|
require_once api_get_path(SYS_PATH).'main/auth/external_login/ldap.inc.php'; |
|
|
|
|
require_once api_get_path(SYS_PATH).'main/auth/external_login/functions.inc.php'; |
|
|
|
|
|
|
|
|
|
/** |
|
|
|
|
* @return true if cas is configured |
|
|
|
|
* @return bool whether cas is configured |
|
|
|
|
*/ |
|
|
|
|
function cas_configured() |
|
|
|
|
{ |
|
|
|
|
global $cas_auth_ver, $cas_auth_server, $cas_auth_port, $cas_auth_uri; |
|
|
|
|
$res = false; |
|
|
|
|
if (!empty($cas_auth_ver) && !empty($cas_auth_server) && !empty($cas_auth_port)) { |
|
|
|
|
$res = true; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
return $res; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
/** |
|
|
|
|
* checks if the user already get a session. |
|
|
|
|
* |
|
|
|
|
* @return the user login if the user already has a session ,false otherwise |
|
|
|
|
*/ |
|
|
|
|
function cas_is_authenticated() |
|
|
|
|
{ |
|
|
|
|
global $cas_auth_ver, $cas_auth_server, $cas_auth_port, $cas_auth_uri; |
|
|
|
|
global $PHPCAS_CLIENT; |
|
|
|
|
global $logout; |
|
|
|
|
|
|
|
|
|
if (!cas_configured()) { |
|
|
|
|
return; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
if (!is_object($PHPCAS_CLIENT)) { |
|
|
|
|
phpCAS::client($cas_auth_ver, $cas_auth_server, $cas_auth_port, $cas_auth_uri); |
|
|
|
|
phpCAS::setNoCasServerValidation(); |
|
|
|
|
} |
|
|
|
|
$auth = phpCAS::checkAuthentication(); |
|
|
|
|
|
|
|
|
|
if ($auth) { |
|
|
|
|
$login = trim(phpCAS::getUser()); |
|
|
|
|
/* |
|
|
|
|
Get user attributes. Here are the attributes for crdp platform |
|
|
|
|
sn => name |
|
|
|
|
ENTPersonMailInterne => mail |
|
|
|
|
ENTPersonAlias => login |
|
|
|
|
ENTPersonProfils => profil |
|
|
|
|
givenName => first name |
|
|
|
|
*/ |
|
|
|
|
/*$user=phpCAS::getAttributes(); |
|
|
|
|
$firstName = trim($user['givenName']); |
|
|
|
|
$lastName = trim($user['sn']); |
|
|
|
|
$login = trim($user['ENTPersonAlias']); |
|
|
|
|
$profil = trim($user['ENTPersonProfils']); |
|
|
|
|
$email = trim($user['ENTPersonMailInterne']); |
|
|
|
|
$satus=5; |
|
|
|
|
switch ($profil){ |
|
|
|
|
case 'admin_etab': |
|
|
|
|
$status=3; //Session admin |
|
|
|
|
break; |
|
|
|
|
case 'admin_sie': |
|
|
|
|
$status=3; //Session admin |
|
|
|
|
break; |
|
|
|
|
case 'National_3': |
|
|
|
|
$status=1; // Teacher |
|
|
|
|
break; |
|
|
|
|
case 'National_1': |
|
|
|
|
$status=5; // Student |
|
|
|
|
break; |
|
|
|
|
default: |
|
|
|
|
$status=5; // Student |
|
|
|
|
}*/ |
|
|
|
|
if (!$logout) { |
|
|
|
|
// get user info from username |
|
|
|
|
$tab_user_info = api_get_user_info($login); |
|
|
|
|
|
|
|
|
|
// user found in the chamilo database |
|
|
|
|
if (is_array($tab_user_info)) { |
|
|
|
|
// if option is on we update user automatically from ldap server |
|
|
|
|
if (api_get_setting("update_user_info_cas_with_ldap") == "true") { |
|
|
|
|
$ldapuser = extldap_authenticate($login, 'nopass', true); |
|
|
|
|
if ($ldapuser !== false) { |
|
|
|
|
$chamilo_user = extldap_get_chamilo_user($ldapuser); |
|
|
|
|
$chamilo_user['user_id'] = $tab_user_info['user_id']; |
|
|
|
|
$chamilo_user['status'] = $tab_user_info['status']; |
|
|
|
|
UserManager::update_user( |
|
|
|
|
$chamilo_user["user_id"], |
|
|
|
|
$chamilo_user["firstname"], |
|
|
|
|
$chamilo_user["lastname"], |
|
|
|
|
$login, |
|
|
|
|
null, |
|
|
|
|
null, |
|
|
|
|
$chamilo_user["email"], |
|
|
|
|
$chamilo_user["status"], |
|
|
|
|
'', |
|
|
|
|
'', |
|
|
|
|
'', |
|
|
|
|
'', |
|
|
|
|
1, |
|
|
|
|
null, |
|
|
|
|
0, |
|
|
|
|
null, |
|
|
|
|
'' |
|
|
|
|
); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
return $login; |
|
|
|
|
} // user not found |
|
|
|
|
else { |
|
|
|
|
// if option is on we can ADD user automatically from ldap server or by modify own profil |
|
|
|
|
$user_added = false; |
|
|
|
|
switch (api_get_setting("cas_add_user_activate")) { |
|
|
|
|
case PLATFORM_AUTH_SOURCE: |
|
|
|
|
// user will have to modify firstname, lastname, email in chamilo profil edit |
|
|
|
|
$userdata = get_lang("EditInProfil"); |
|
|
|
|
UserManager::create_user( |
|
|
|
|
$userdata, |
|
|
|
|
$userdata, |
|
|
|
|
'5', |
|
|
|
|
$userdata, |
|
|
|
|
$login, |
|
|
|
|
'casplaceholder', |
|
|
|
|
'', |
|
|
|
|
'', |
|
|
|
|
'', |
|
|
|
|
'', |
|
|
|
|
CAS_AUTH_SOURCE |
|
|
|
|
); |
|
|
|
|
$user_added = $login; |
|
|
|
|
break; |
|
|
|
|
case LDAP_AUTH_SOURCE: |
|
|
|
|
// user info are read from ldap connexion |
|
|
|
|
// get user info from ldap server |
|
|
|
|
// user has already been authenticated by CAS |
|
|
|
|
// If user not found in LDAP, user not created |
|
|
|
|
$ldapuser = extldap_authenticate($login, 'nopass', true); |
|
|
|
|
if ($ldapuser !== false) { |
|
|
|
|
$chamilo_user = extldap_get_chamilo_user($ldapuser); |
|
|
|
|
$chamilo_user['username'] = $login; |
|
|
|
|
$chamilo_user['auth_source'] = CAS_AUTH_SOURCE; |
|
|
|
|
$chamilo_uid = external_add_user($chamilo_user); |
|
|
|
|
$user_added = $login; |
|
|
|
|
} |
|
|
|
|
break; |
|
|
|
|
default: |
|
|
|
|
break; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
return $user_added; |
|
|
|
|
} |
|
|
|
|
foreach(['cas_server', 'cas_protocol', 'cas_port'] as $v) { |
|
|
|
|
if (is_null(api_get_setting($v))) { |
|
|
|
|
return false; |
|
|
|
|
} |
|
|
|
|
// //If the user is in the dokeos database and we are ,not in a logout request, we upgrade his infomration by ldap |
|
|
|
|
// if (! $logout){ |
|
|
|
|
// $user_table = Database::get_main_table(TABLE_MAIN_USER); |
|
|
|
|
// $sql = "SELECT user_id, username, password, auth_source, active, expiration_date ". |
|
|
|
|
// "FROM $user_table ". |
|
|
|
|
// "WHERE username = '$login' "; |
|
|
|
|
// |
|
|
|
|
// $result = Database::query($sql,__FILE__,__LINE__); |
|
|
|
|
// if(mysql_num_rows($result) == 0) { |
|
|
|
|
// require_once(api_get_path(SYS_PATH).'main/inc/lib/usermanager.lib.php'); |
|
|
|
|
// $rnumber=rand(0,256000); |
|
|
|
|
// UserManager::create_user($firstName, $lastName, $status, $email, $login, md5('casplaceholder'.$rnumber), $official_code='',$language='',$phone='',$picture_uri='',$auth_source = PLATFORM_AUTH_SOURCE); |
|
|
|
|
// } |
|
|
|
|
// else { |
|
|
|
|
// $user = mysql_fetch_assoc($result); |
|
|
|
|
// $user_id = intval($user['user_id']); |
|
|
|
|
// //echo "deb : $status"; |
|
|
|
|
// UserManager::update_user ($user_id, $firstname, $lastname, $login, null, null, $email, $status, '', '', '', '', 1, null, 0, null,'') ; |
|
|
|
|
// |
|
|
|
|
// } |
|
|
|
|
// } |
|
|
|
|
return $login; |
|
|
|
|
} else { |
|
|
|
|
return false; |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
/** |
|
|
|
|
* Logs out the user of the cas |
|
|
|
|
* The user MUST be logged in with cas to use this function. |
|
|
|
|
* |
|
|
|
|
* @param $uinfo array user info (not needed) |
|
|
|
|
* @param $location string redirect url |
|
|
|
|
* |
|
|
|
|
* @see online_logout() |
|
|
|
|
*/ |
|
|
|
|
function cas_logout($uinfo = null, $location = null) |
|
|
|
|
{ |
|
|
|
|
global $cas_auth_ver, $cas_auth_server, $cas_auth_port, $cas_auth_uri; |
|
|
|
|
global $PHPCAS_CLIENT; |
|
|
|
|
if (!is_object($PHPCAS_CLIENT)) { |
|
|
|
|
phpCAS::client($cas_auth_ver, $cas_auth_server, $cas_auth_port, $cas_auth_uri); |
|
|
|
|
phpCAS::setNoCasServerValidation(); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
if (!isset($location)) { |
|
|
|
|
$location = api_get_path(WEB_PATH); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
phpCAS::logoutWithRedirectService($location); |
|
|
|
|
return phpCAS::isInitialized(); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
/* |
|
|
|
|
|
Sébastien Ducoulombier
6 years ago