Club Drupal

; Information added by Drupal.org packaging script on 2018-08-09

version = "7.x-1.25"

datestamp = "1533849190"

  file_unmanaged_delete_recursive(honeypot_file_default_scheme() . '://honeypot');

    if (preg_match('/[^a-zA-Z]system_/', $form_id) === 0 && preg_match('/[^a-zA-Z]search_/', $form_id) === 0 && preg_match('/[^a-zA-Z]views_exposed_form_/', $form_id) === 0) {

  return honeypot_file_default_scheme() . '://honeypot/honeypot.css';

  $path = honeypot_file_default_scheme() . '://honeypot';

/**

 * Gets the default file stream for honeypot.

 *

 * @return

 *   'public', 'private' or any other file scheme defined as the default.

 *

 * @see file_default_scheme()

 */

function honeypot_file_default_scheme() {

  return variable_get('honeypot_file_default_scheme', file_default_scheme());

}

  /**

   * Test CSS file availability.

   */

  public function testHoneypotCssAvailability() {

    // Public CSS file can be consumed.

    variable_set('file_default_scheme', 'public');

    if ($wrapper = file_stream_wrapper_get_instance_by_uri(honeypot_get_css_file_path())) {

      $url = $wrapper->getExternalUrl();

    }

    $this->drupalGet($url);

    $this->assertResponse(200);

    // Private CSS file can not be consumed.

    variable_set('file_default_scheme', 'private');

    honeypot_cron();

    if ($wrapper = file_stream_wrapper_get_instance_by_uri(honeypot_get_css_file_path())) {

      $url = $wrapper->getExternalUrl();

    }

    $this->drupalGet($url);

    $this->assertNoResponse(200);

    // Site default is private, but override honeypot's to public to consume.

    variable_set('honeypot_file_default_scheme', 'public');

    honeypot_cron();

    if ($wrapper = file_stream_wrapper_get_instance_by_uri(honeypot_get_css_file_path())) {

      $url = $wrapper->getExternalUrl();

    }

    $this->drupalGet($url);

    $this->assertResponse(200);

  }

; Information added by Drupal.org packaging script on 2018-08-09

version = "7.x-1.25"

datestamp = "1533849190"

Prerequisites

To set up LDAP efficiently, you need to acquire the relevant information for the

domain you are authenticating against.

Contact your organization's staff to receive the necessary information. This

should include:

* The servers available to you (hostname, port, encryption preference)

* The binding method (service account including credentials, if necessary)

* If applicable, the structure of the data you are trying to sync, e.g.

sAMAccountName is the unique name attribute for your Active Directory.

### Requirements

The following requirements need to be met for you to work with any of the LDAP

modules.

* PHP version 5.6.

* PHP LDAP extension.

==================================================================================

 Installation instructions:

==================================================================================

1) Download the LDAP module as you would any other.

2) Go to admin/build/modules and enable the needed modules from the

   Lightweight Directory Access Protocol group.

3) Enable and configure ldap servers and configure at least one server.

4) Enable the other LDAP modules you need.

5) LDAP Help is just for debugging and administrator help. Use it if you have

problems. Disable it in production; it adds no functionality or end user help.

 Configuration overrides

If you need to selectively disable LDAP functionality and cannot disable the

modules, use configuration overrides, such as the following in settings.php and

clearing your cache afterwards.

// Disable the server you are syncing users from LDAP to Drupal.

$conf['ldap_user_conf']['drupalAcctProvisionServer'] = 0;

// Disable LDAP authentication.

$conf['ldap_authentication_conf']['sids'] = [];

// Set bind DN and bind password for service account.

$conf['ldap_servers_overrides']['my_server']['binddn'] = 'my_dn';

$conf['ldap_servers_overrides']['my_server']['bindpw'] = 'my_password';

IMPORTANT: These overrides will change the data in your admin forms, saving them

will save them permanently in the database.

==================================================================================

        'performed on the web server. Please review the readme file of the '.

        'ldap_sso module for more information.')

      '#default_value' => $this->excludeIfNoAuthorizations,

 * Summary of hooks and other developer related functions.

 * Allow a custom module to check user's ldap details and refuse authentication.

 * See also: http://drupal.org/node/1634930.

 * @param array $ldap_user

 *   See README.developers.txt for structure.

 * @param string $name

 *   The drupal account name or proposed drupal account name if none exists yet.

 * @param bool $hook_result

 *   TRUE for allow, FALSE for deny.

 *   If set to TRUE or FALSE, another module has already set this and function

 *   should be careful about overriding this.

function hook_ldap_authentication_allowuser_results_alter(array $ldap_user, $name, &$hook_result) {

  // Other module has denied user, should not override.

  if ($hook_result === FALSE) {

  // Other module has allowed, maybe override.

  elseif ($hook_result === TRUE) {

 * Allow a custom module to alter $ldap_user.

 * @param array $ldap_user

 *   See README.developers.txt for structure.

 * @param array $params

 *   Array of parameters. Includes account key with the Drupal account as value.

function hook_ldap_entry_alter(array &$ldap_user, array $params) {

    $form['#validate'][$key] = 'ldap_authentication_core_override_user_login_authenticate_validate';

        in form_state and attempt ldap authentication.', $watchdog_tokens, WATCHDOG_DEBUG);

    watchdog('ldap_authentication', 'No LDAP servers configured.', array(), WATCHDOG_ERROR);

  $params['account'] = $drupal_account;

  drupal_alter('ldap_entry', $ldap_user, $params);

      watchdog('ldap_authentication', 'Derived drupal username from attribute %account_name_attr returned no username for authname %authname.', $watchdog_tokens, WATCHDOG_ERROR);

      watchdog('ldap_authentication', 'Failed to make changes to user %username updated %changed.', $watchdog_tokens, WATCHDOG_ERROR);

      watchdog('ldap_authentication', '%username : Drupal username maps to user 1, so do not authenticate with ldap', $watchdog_tokens, WATCHDOG_DEBUG);

      watchdog('ldap_authentication', '%username : Drupal User Account found.  Continuing on to attempt ldap authentication', $watchdog_tokens, WATCHDOG_DEBUG);

        watchdog('ldap_authentication', '%username : Failed connecting to %sid.  Error: %err_msg', $watchdog_tokens, WATCHDOG_DEBUG);

      watchdog('ldap_authentication', '%username : Success at connecting to %sid', $watchdog_tokens, WATCHDOG_DEBUG);

        $transformname = $ldap_server->userUsernameToLdapNameTransform($authname, $watchdog_tokens);

  $watchdog_tokens['%err_text'] = _ldap_authentication_err_text($authentication_result) ;

    watchdog('ldap_authentication', '%username : Authentication result id=%result auth_result=%auth_result (%err_text)', $watchdog_tokens, WATCHDOG_DEBUG);

  $watchdog_tokens['%err_text'] = _ldap_authentication_err_text($authentication_result);

    $msg = t('Sorry, unrecognized username or password.');

    $msg = t('Sorry, unrecognized username or password.');

; Information added by Drupal.org packaging script on 2018-08-13

version = "7.x-2.4"

datestamp = "1534201086"

define('LDAP_AUTHENTICATION_MIXED', 1);

define('LDAP_AUTHENTICATION_EXCLUSIVE', 2);

define('LDAP_AUTHENTICATION_CONFLICT_LOG', 1);

define('LDAP_AUTHENTICATION_CONFLICT_RESOLVE', 2);

define('LDAP_AUTHENTICATION_EMAIL_UPDATE_ON_LDAP_CHANGE_ENABLE_NOTIFY', 1);

define('LDAP_AUTHENTICATION_EMAIL_UPDATE_ON_LDAP_CHANGE_ENABLE', 2);

define('LDAP_AUTHENTICATION_EMAIL_UPDATE_ON_LDAP_CHANGE_DISABLE', 3);

define('LDAP_AUTHENTICATION_EMAIL_UPDATE_ON_LDAP_CHANGE_DEFAULT', 1);

define('LDAP_AUTHENTICATION_EMAIL_FIELD_REMOVE', 2);

define('LDAP_AUTHENTICATION_EMAIL_FIELD_DISABLE', 3);

define('LDAP_AUTHENTICATION_EMAIL_FIELD_ALLOW', 4);

define('LDAP_AUTHENTICATION_EMAIL_FIELD_DEFAULT', 3);

define('LDAP_AUTHENTICATION_EMAIL_TEMPLATE_NONE', 1);

define('LDAP_AUTHENTICATION_PASSWORD_FIELD_SHOW', 2);

define('LDAP_AUTHENTICATION_PASSWORD_FIELD_HIDE', 3);

define('LDAP_AUTHENTICATION_PASSWORD_FIELD_ALLOW', 4);

define('LDAP_AUTHENTICATION_PASSWORD_FIELD_DEFAULT', 2);

define('LDAP_AUTHENTICATION_RESULT_FAIL_CONNECT', 1);

define('LDAP_AUTHENTICATION_RESULT_FAIL_BIND', 2);

define('LDAP_AUTHENTICATION_RESULT_FAIL_FIND', 3);

define('LDAP_AUTHENTICATION_RESULT_FAIL_DISALLOWED', 4);

define('LDAP_AUTHENTICATION_RESULT_FAIL_CREDENTIALS', 5);

define('LDAP_AUTHENTICATION_RESULT_SUCCESS', 6);

define('LDAP_AUTHENTICATION_RESULT_FAIL_GENERIC', 7);

define('LDAP_AUTHENTICATION_ACCT_CREATION_DEFAULT', 4);

define('LDAP_AUTHENTICATION_ACCT_CREATION_LDAP_BEHAVIOR', 4);

  $info['name'] = 'ldap_authentication';

      $msg .= ' ' . t('at') . ' ' . l(t($auth_conf->ldapUserHelpLinkText), $auth_conf->ldapUserHelpLinkUrl) . '.';

      $msg .= ' ' . t('with one of your organizations password management sites.');

    $this->assertText(t('Sorry, unrecognized username or password'), 'User 1 failed with bad password', $testid );

    $this->assertTrue($setup_success, ' ldap_authentication UI setup successful', $this->testId('user interface tests'));

 * Abstract class to represent an ldap_authorization consumer behavior

 * LdapAuthorizationConsumer<consumer type> such as LdapAuthorizationConsumerDrupalRole.

/**

 *

 */

  /**

   * Machine name of consumer.  e.g. og_group, drupal_role, etc.

   */

  public $consumerType = NULL;

   * The following properties are generally populated from a

  /**

   * User interface name of consumer. e.g.  drupal role, og group.

   */

  public $name;

  /**

   * User interface name of consumer. e.g. drupal roles, og groups.

   */

  public $namePlural;

  /**

   * User interface short name of consumer. e.g. role, group.

   */

  public $shortName;

  /**

   * User interface short name of consumer plural, e.g. roles, groups.

   */

  public $shortNamePlural;

  /**

   * E.g. roles, groups.

   */

  public $description;

  /**

   * Module providing consumer functionality e.g. ldap_authorization_drupal_roles.

   */

  public $consumerModule;

  /**

   * LDAPConsumerConf object class encapuslating admin form.

   */

  public $consumerConf;

  /**

   * Link to test this consumer.

   */

  public $testLink;

  /**

   * Link to configure this consumer.

   */

  public $editLink;

    'map_to_string' => NULL,

  );

  /**

  /**

  /**

    'onlyApplyToLdapAuthenticated' => TRUE,

    'useMappingsAsFilter' => TRUE,

    'synchOnLogon' => TRUE,

    'revokeLdapProvisioned' => TRUE,

    'regrantLdapProvisioned' => TRUE,

    'createConsumers' => TRUE,

  );

  /**

   * Constructor Method.

   * @param string $consumer_type

   *   e.g. drupal_role, og_group.

   * @param array $params

   *   as associative array of default properties.

  public function __construct($consumer_type, $params) {

    $this->namePlural = $params['consumer_name_plural'];

    $this->shortNamePlural = $params['consumer_short_name_plural'];

   * Function to normalize mappings

   * For example ldap_authorization_og may store mapping target as:

   *   Campus Accounts|group-name=knitters,role-name=administrator member.

   * Create authorization consumers.

   * @param array $consumer

   *   as associative array with the following key/values

   *               NULL indicate consumer's existance not checked yet.

    // Method must be overridden.

   * Populate consumer side of $consumers array.

   * @param array $consumers

   *   as associative array keyed on $consumer_id with values

   *   when values are $consumer['exists'] != TRUE need to be populated by consumer object.

   * @param bool $create_missing_consumers

   *   indicates if consumers (drupal roles, og groups, etc) should be created

   *   if values are NULL, object will be created if.

    // Method must be overridden.

  /**

   *

   */

   * Grant authorizations to a user.

   * @param object $user

   *   drupal user object.

   * @param array $consumers

   *   in form of LdapAuthorizationConsumerAbstractClass::populateConsumersFromConsumerIds.

   * @param array $ldap_entry

   *   is ldap data from ldap entry which drupal user is mapped to.

   * @param bool $user_save

   *   should user object be saved by authorizationGrant method.

   *   method may be desireable to override, if consumer benefits from adding grants as a group rather than one at a time

   * Revoke authorizations to a user.

   * @param object $user

   *   drupal user object.

   * @param array $consumers

   *   in form of LdapAuthorizationConsumerAbstractClass::populateConsumersFromConsumerIds.

   * @param array $ldap_entry

   *   is ldap data from ldap entry which drupal user is mapped to.

   * @param bool $user_save

   *   should user object be saved by authorizationGrant method.

   *   $user_auth_data is returned by reference

   *   method may be desireable to override, if consumer benefits from revoking grants as a group rather than one at a time

   * This is a function to clear off.

   * Some authorization schemes such as organic groups, require a certain order.  implement this method

   * to sort consumer ids/authorization ids.

   * @param string $op

   *   'grant' or 'revoke' signifying what to do with the $consumer_ids.

   * @param $consumers

   *   associative array in form of LdapAuthorizationConsumerAbstract::populateConsumersFromConsumerIds

   *   alters $consumers by reference

  public function sortConsumerIds($op, &$consumers) {}

   * Attempt to flush related caches.  This will be something like og_invalidate_cache($gids)

   * @param $consumers

   *   associative array in form of LdapAuthorizationConsumerAbstract::populateConsumersFromConsumerIds

  public function flushRelatedCaches($consumers = NULL) {}

   * @param string $op

   *   'grant' or 'revoke' signifying what to do with the $consumer_ids.

   * @param array $user_auth_data

   *   is array specific to this consumer_type.  Stored at $user->data['ldap_authorizations'][<consumer_type>].

   * @param $consumers

   *   as associative array in form of LdapAuthorizationConsumerAbstract::populateConsumersFromConsumerIds

   * @param array $ldap_entry,

   *   when available user's ldap entry.

   * @param bool $user_save

   *   indicates is user data array should be saved or not.  this depends on the implementation calling this function.

          // Grant case 1: authorization id already exists for user, but is not ldap provisioned.  mark as ldap provisioned, but don't regrant.

          // Grant case 2: consumer exists, but user is not member. grant authorization

          // allow consuming module to add additional data to $user_auth_data.

          $results[$consumer_id] = $this->grantSingleAuthorization($user, $consumer_id, $consumer, $user_auth_data, $user_save);

          // Grant case 3: something is wrong. consumers should have been created before calling grantsAndRevokes.

          // Grant case 4: consumer exists and user has authorization recorded. do nothing.

          // Grant case 5: $consumer['exists'] has not been properly set before calling function.

          // Revoke case 1: user has authorization, revoke it.  revokeSingleAuthorization will remove $user_auth_data[$consumer_id]

          // defer to default for $user_save param.

          $results[$consumer_id] = $this->revokeSingleAuthorization($user, $consumer_id, $consumer, $user_auth_data, $user_save);

          $log .= t(',result=') . (boolean) ($results[$consumer_id]);

        elseif ($user_has_authorization_recorded) {

          // Revoke case 2: user does not have authorization, but has record of it. remove record of it.

          // Revoke case 3: trying to revoke something that isn't there.

      // Reload this.

      $user_auth_data = $user->data['ldap_authorizations'][$this->consumerType];

   * @param drupal user object $user

   *   to have $consumer_id revoked.

   * @param string lower case $consumer_id

   *   $consumer_id such as drupal role name, og group name, etc.

   * @param mixed $consumer

   *   depends on type of consumer.  Drupal roles are strings, og groups are ??

   * @param array $user_auth_data

   *   array of $user data specific to this consumer type.

   *   stored in $user->data['ldap_authorizations'][<consumer_type>] array.

   * @param bool $reset

   *   signifying if caches associated with $consumer_id should be invalidated.

   *   return boolen TRUE on success, FALSE on fail.  If user save is FALSE, the user object will

   *   $user_auth_data should have successfully revoked consumer id removed.

    // Method must be overridden.

   * @param object $user

   *   as drupal user object to have $consumer_id granted.

   * @param string lower case $consumer_id

   *   $consumer_id such as drupal role name, og group name, etc.

   * @param mixed $consumer

   *   depends on type of consumer.  Drupal roles are strings, og groups are ??

   * @param array $user_auth_data

   *   in form

   * @param bool $reset

   *   signifying if caches associated with $consumer_id should be invalidated.

   * @return boolean FALSE on failure or TRUE on success

    // Method must be overridden.

   * Return all user consumer ids

   *   regardless of it they were granted by this module.

   *

   * @param user object $user

   *

   * @return array of consumer ids such as array('3-2','7-2'), array('admin','user_admin')

   */

    // Method must be overridden.

   * Put authorization ids in displayable format.

   * @param drupal user object $user

   *   to have $consumer_id granted.

   * @param string lower case $consumer_id

   *   $consumer_id such as drupal role name, og group name, etc.

   * @param mixed $consumer

   *   depends on type of consumer.  Drupal roles are strings, og groups are ??

   *

   *   return boolen TRUE on success, FALSE on fail.  If user save is FALSE, the user object will

   *   not be saved and reloaded, so a returned TRUE may be misleading.

   */

    // Method must be overridden.

   * @param drupal user object $user

   * @param string lowercase $consumer_id

   *   such as drupal role name, og group name, etc.

   *

   * @return boolean if an ldap_authorization_* module granted the authorization id

   */

   * the authorization id.

   * @param string lowercase case $consumer_id

   *   such as drupal role name, og group name, etc.

   * Validate authorization mappings on LDAP Authorization OG Admin form.

   *

   * @param array $mapping

   *   single mapping in format generated in normalizeMappings method.

   * @param array $form_values

   *   from authorization configuration form.

   * @param bool $clear_cache

   *

   * @return array of form array($message_type, $message_text) where message type is status, warning, or error

   *   and $message_text is what the user should see.

   */

 * Class to encapsulate an ldap entry to authorization consumer ids mapping configuration.

 * This is the lightweight version of the class for use on logon etc.

 * LDAP Authorization Consumer Configuration.

  /**

   *

   */

  /**

   * Constructor Method.

  public function __construct(&$consumer, $_new = FALSE, $_sid = NULL) {

    // Default value for deriveFromEntryAttrMatchingUserAttr set up this way for backward compatibility in 1.0 branch,

  /**

   *

   */

      $select->condition('ldap_authorization.consumer_type', $this->consumerType);

    foreach ($this->field_to_properties_map() as $db_field_name => $property_name) {

    $this->numericConsumerConfId = isset($server_record->numeric_consumer_conf_id) ? $server_record->numeric_consumer_conf_id : NULL;

  /**

   * Direct mapping of db to object properties.

   */

  /**

   *

   */

   * Destructor Method.

  public function __destruct() {

  /**

   *

   */

  /**

   *

   */

 * Class to encapsulate an ldap authorization ldap entry to authorization ids mapping.

/**

 * LDAP Authorization Consumer Configration Admin Class.

 */

  /**

   *

   */

    // $this;.

    $values = new stdClass();

    $values->only_ldap_authenticated = (int) $this->onlyApplyToLdapAuthenticated;

    $values->use_first_attr_as_groupid = (int) $this->useFirstAttrAsGroupId;

    $values->use_filter = (int) $this->useMappingsAsFilter;

    $values->synch_to_ldap = (int) $this->synchToLdap;

    $values->synch_on_logon = (int) $this->synchOnLogon;

    $values->revoke_ldap_provisioned = (int) $this->revokeLdapProvisioned;

    $values->create_consumers = (int) $this->createConsumers;

    $values->regrant_ldap_provisioned = (int) $this->regrantLdapProvisioned;

      // Populate our object with ctool's properties.

      }

      catch (Exception $e) {