Club Drupal

/**

 * @file

 */

  $_content = "";

  if (module_exists('dblog')) {

    $_content .= "<h3>" . t('LDAP Watchdog Errors and Notifications') . "</h3>";

    $overview = dblog_overview();

    $_content .= render($overview);

    $_content .= l(t('Module enable page'), 'admin/build/modules');

  }

  return $_content;

}

/**

 *

 * @param object $user

 *

 *   set -- grant authorizations (store in db) and return authorizations

 *   test_query -- don't grant authorization, just query and return authorizations.  assume user is ldap authenticated and exists

 *   test_query_set -- do grant authorizations, but also log data for debugging

 *

 *

 * @return

 *

 *   by reference $user->data[<consumer_type>][<authorization_id>] = array();

 *      e.g.   $var['drupal_role']['content_admin'] = array('rid' => 4)

 *      e.g.   $var['og_membership']['bakers club'] = array('expires' => '01/01/2012');

 */

function _ldap_authorizations_user_authorizations(&$user, $op, $consumer_type, $context) {

  $debug = FALSE;

  $detailed_watchdog_log = variable_get('ldap_help_watchdog_detail', 0);

   * determine if user is ldap authenticated

   */

  if ($context == 'test_if_authorizations_granted' || (($op == 'test_query_set' || $op == 'test_query') && @$user->ldap_test == TRUE)) {

  }

  else {

  }

  $watchdog_tokens['%ldap_authenticated'] = ($ldap_authenticated) ? 'yes' : 'no';

    $watchdog_tokens['%consumer_type'] = $consumer_type;

    $watchdog_tokens['%sid'] = $consumer->consumerConf->sid;

      if ($detailed_watchdog_log) {

        watchdog('ldap_authorization', '%username : consumer type  %consumer_type has no

          configuration set.', $watchdog_tokens, WATCHDOG_DEBUG);

    }

    if ($debug) {

      debug(t('%username : testing with consumer type %consumer_type. ldap authenticated=%ldap_authenticated'), $watchdog_tokens);

    }

    if ($context == 'logon' && !$consumer->consumerConf->synchOnLogon) {

      continue;

    }

      $notifications[$consumer_type][] = LDAP_AUTHORIZATION_SERVER_CONFIG_NOT_FOUND;

      if ($detailed_watchdog_log) {

        watchdog('ldap_authorization', '%username : %consumer_type ldap server %sid not enabled or found.', $watchdog_tokens, WATCHDOG_DEBUG);

    ldap_authorization_maps_alter_invoke($user, $ldap_user, $ldap_server, $consumer->consumerConf, $proposed_ldap_authorizations, $op);

    /** make sure keys of array are lower case and values are mixed case

    */

    foreach ($proposed_ldap_authorizations as $key => $authorization_id) {

     */

    $filtered_ldap_authorizations = array();

      foreach ($consumer->consumerConf->mappings as $mapping_filter) {

        $map_from = $mapping_filter['from'];

        $map_to = $mapping_filter['normalized'];

        }

      }

    }

      $_authorizations = array_values($proposed_ldap_authorizations);

      if (is_array($consumer->consumerConf->mappings) && is_array($proposed_ldap_authorizations)) {

        foreach ($consumer->consumerConf->mappings as $mapping_filter) {

          $map_to = $mapping_filter['normalized'];

          $map_from_key = array_search(drupal_strtolower($map_from), array_keys($proposed_ldap_authorizations));

          if ($map_from_key !== FALSE) {

            $_authorizations = array_diff($_authorizations, array($map_from));

            $_authorizations = array_diff($_authorizations, array(drupal_strtolower($map_from)));

            $_authorizations[] = $map_to;

          }

        }

      }

        $filtered_ldap_authorizations[drupal_strtolower($authorization_id)] = array(

          'map_to_string' => $authorization_id,

          'exists' => NULL,

        );

      }

    }

    /**

     * now that we have list of consumers that are to be granted, give other modules a chance to alter it

     *

        $display_authorizations[] = $_consumer['map_to_string'];

      }

      $_SESSION['ldap_authorization_test_query']['post mappings'] = $display_authorizations;

      $_SESSION['ldap_authorization_test_query']['user data'] = $data;

    }

  return array($authorizations, $notifications);

}

/**

 * @param associative array of lower case authorization ids as keys and

 *   all authorization ids a user is granted via ldap authorization configuration

 *   ldap entry is stored in ldap_server configuration

 *

 */

function _ldap_authorizations_user_authorizations_set(&$user, $consumer, $filtered_ldap_authorizations, &$ldap_entry, $watchdog_tokens, $test) {

  $detailed_watchdog_log = variable_get('ldap_help_watchdog_detail', 0);

  $watchdog_tokens['%initial'] = join(', ', $initial_existing_ldap_authorizations);

  $watchdog_tokens['%filtered_ldap_authorizations'] = join(', ', array_keys($filtered_ldap_authorizations));

   * B. if regrantLdapProvisioned is false, $grants_lcase array should only be new authorizations

   */

  if (!$consumer->consumerConf->regrantLdapProvisioned) {

    $grants = array_diff(array_keys($filtered_ldap_authorizations), $initial_existing_ldap_authorizations);

    if ($test) {

      $_SESSION['ldap_authorization_test_query']['setting_data']['Grants after regrantLdapProvisioned filter'] = $grants;

  $watchdog_tokens['%grants1'] = join(', ', $grants);

   * D.  Only grant authorization consumer ids that exist

   */

  foreach ($grants as $i => $grant) {

    if (!empty($filtered_ldap_authorizations[$grant]['exists'])) {

      $existing_grants[$grant] = $filtered_ldap_authorizations[$grant];

  if ($consumer->consumerConf->revokeLdapProvisioned) {

    $revokes_lcase = $consumer->authorizationDiff($initial_existing_ldap_authorizations, array_keys($filtered_ldap_authorizations));

    if (count($revokes_lcase)) {

      foreach ($revokes_lcase as $i => $revoke_lcase) {

        $revokes[$revoke_lcase] = array(

          'value' => NULL,

  $uid = $user->uid;

  $user_edit = array('data' => $user->data);

  $user_edit['data']['ldap_authorizations'] = empty($user->data['ldap_authorizations']) ? array() : $user->data['ldap_authorizations'];

  $user_edit['data']['ldap_authorizations'][$consumer->consumerType] = $user_auth_data;

  $watchdog_tokens['%user_edit_presave'] = print_r($user_edit, TRUE);

    $user2 = user_load($user->uid);

    $user->picture = $user2->picture;

  }

}

function _ldap_authorization_ldap_authorization_maps_alter(&$user, &$user_ldap_entry, &$ldap_server, &$consumer_conf, &$authz_ids, $op) {

  $detailed_watchdog_log = variable_get('ldap_help_watchdog_detail', 0);

  $watchdog_tokens = array();

  $derive_from_dn_authorizations = array();

  if ($rdn_values = $consumer_conf->server->groupUserMembershipsFromDn($user)) {

    $derive_from_dn_authorizations = array_combine($rdn_values, $rdn_values);

    $_SESSION['ldap_authorization_test_query']['maps']['Derive from DN'] = ($rdn_values) ? $derive_from_dn_authorizations : t('disabled');

  }

  $group_dns = $consumer_conf->server->groupMembershipsFromUser($user, 'group_dns');

  if (!$group_dns) {

    $group_dns = array();

    $watchdog_tokens['%ldap_server'] = $ldap_server->sid;

    $watchdog_tokens['%deriveFromDn'] = join(', ', $derive_from_dn_authorizations);

    $watchdog_tokens['%deriveFromGroups'] = join(', ', $group_dns);

    watchdog('ldap_authorization', '%username :_ldap_authorization_ldap_authorization_maps_alter:

      <hr/>deriveFromDn authorization ids: %deriveFromDn