2016-10-31 20:59:46 -07:00
< ? php
namespace App\Console\Commands ;
use Illuminate\Console\Command ;
use App\Models\Setting ;
use App\Models\Ldap ;
use App\Models\User ;
use App\Models\Location ;
use Log ;
class LdapSync extends Command
{
/**
* The name and signature of the console command .
*
* @ var string
*/
2018-01-23 18:15:36 -08:00
protected $signature = 'snipeit:ldap-sync {--location=} {--location_id=} {--base_dn=} {--summary} {--json_summary}' ;
2016-10-31 20:59:46 -07:00
/**
* The console command description .
*
* @ var string
*/
protected $description = 'Command line LDAP sync' ;
/**
* Create a new command instance .
*
* @ return void
*/
public function __construct ()
{
parent :: __construct ();
}
/**
* Execute the console command .
*
* @ return mixed
*/
public function handle ()
{
ini_set ( 'max_execution_time' , 600 ); //600 seconds = 10 minutes
ini_set ( 'memory_limit' , '500M' );
$ldap_result_username = Setting :: getSettings () -> ldap_username_field ;
$ldap_result_last_name = Setting :: getSettings () -> ldap_lname_field ;
$ldap_result_first_name = Setting :: getSettings () -> ldap_fname_field ;
$ldap_result_active_flag = Setting :: getSettings () -> ldap_active_flag_field ;
$ldap_result_emp_num = Setting :: getSettings () -> ldap_emp_num ;
$ldap_result_email = Setting :: getSettings () -> ldap_email ;
try {
$ldapconn = Ldap :: connectToLdap ();
Ldap :: bindAdminToLdap ( $ldapconn );
} catch ( \Exception $e ) {
2017-10-06 16:15:14 -07:00
if ( $this -> option ( 'json_summary' )) {
$json_summary = [ " error " => true , " error_message " => $e -> getMessage (), " summary " => [] ];
$this -> info ( json_encode ( $json_summary ));
}
2019-03-13 15:14:03 -07:00
LOG :: info ( $e );
2017-10-06 16:15:14 -07:00
return [];
2016-10-31 20:59:46 -07:00
}
$summary = array ();
2019-05-06 06:40:53 -07:00
try {
2018-01-23 18:15:36 -08:00
if ( $this -> option ( 'base_dn' ) != '' ) {
$search_base = $this -> option ( 'base_dn' );
2019-05-06 06:40:53 -07:00
LOG :: debug ( 'Importing users from specified base DN: \"' . $search_base . '\".' );
2018-01-23 18:15:36 -08:00
} else {
$search_base = null ;
}
$results = Ldap :: findLdapUsers ( $search_base );
} catch ( \Exception $e ) {
if ( $this -> option ( 'json_summary' )) {
2017-12-14 12:57:43 -08:00
$json_summary = [ " error " => true , " error_message " => $e -> getMessage (), " summary " => [] ];
$this -> info ( json_encode ( $json_summary ));
}
2019-03-13 15:14:03 -07:00
LOG :: info ( $e );
2017-12-14 12:57:43 -08:00
return [];
}
2017-01-11 23:37:14 -08:00
2018-01-23 18:15:36 -08:00
/* Determine which location to assign users to by default. */
2018-02-13 17:06:42 -08:00
$location = NULL ;
2016-10-31 20:59:46 -07:00
if ( $this -> option ( 'location' ) != '' ) {
2016-12-29 14:02:18 -08:00
$location = Location :: where ( 'name' , '=' , $this -> option ( 'location' )) -> first ();
2016-10-31 20:59:46 -07:00
LOG :: debug ( 'Location name ' . $this -> option ( 'location' ) . ' passed' );
LOG :: debug ( 'Importing to ' . $location -> name . ' (' . $location -> id . ')' );
} elseif ( $this -> option ( 'location_id' ) != '' ) {
2016-12-29 14:02:18 -08:00
$location = Location :: where ( 'id' , '=' , $this -> option ( 'location_id' )) -> first ();
2016-10-31 20:59:46 -07:00
LOG :: debug ( 'Location ID ' . $this -> option ( 'location_id' ) . ' passed' );
LOG :: debug ( 'Importing to ' . $location -> name . ' (' . $location -> id . ')' );
2018-01-23 18:15:36 -08:00
}
2018-02-13 17:06:42 -08:00
2016-10-31 20:59:46 -07:00
if ( ! isset ( $location )) {
2017-06-01 21:20:40 -07:00
LOG :: debug ( 'That location is invalid or a location was not provided, so no location will be assigned by default.' );
2016-10-31 20:59:46 -07:00
}
2018-01-23 18:15:36 -08:00
/* Process locations with explicitly defined OUs, if doing a full import. */
if ( $this -> option ( 'base_dn' ) == '' ) {
// Retrieve locations with a mapped OU, and sort them from the shallowest to deepest OU (see #3993)
$ldap_ou_locations = Location :: where ( 'ldap_ou' , '!=' , '' ) -> get () -> toArray ();
$ldap_ou_lengths = array ();
2019-05-06 06:40:53 -07:00
2018-01-23 18:15:36 -08:00
foreach ( $ldap_ou_locations as $location ) {
$ldap_ou_lengths [] = strlen ( $location [ " ldap_ou " ]);
2017-01-11 23:37:14 -08:00
}
2018-01-23 18:15:36 -08:00
array_multisort ( $ldap_ou_lengths , SORT_ASC , $ldap_ou_locations );
if ( sizeof ( $ldap_ou_locations ) > 0 ) {
LOG :: debug ( 'Some locations have special OUs set. Locations will be automatically set for users in those OUs.' );
}
// Inject location information fields
for ( $i = 0 ; $i < $results [ " count " ]; $i ++ ) {
$results [ $i ][ " ldap_location_override " ] = false ;
$results [ $i ][ " location_id " ] = 0 ;
2017-01-11 23:37:14 -08:00
}
2018-01-23 18:15:36 -08:00
// Grab subsets based on location-specific DNs, and overwrite location for these users.
foreach ( $ldap_ou_locations as $ldap_loc ) {
$location_users = Ldap :: findLdapUsers ( $ldap_loc [ " ldap_ou " ]);
$usernames = array ();
for ( $i = 0 ; $i < $location_users [ " count " ]; $i ++ ) {
2018-09-27 16:11:09 -07:00
if ( array_key_exists ( $ldap_result_username , $location_users [ $i ])) {
$location_users [ $i ][ " ldap_location_override " ] = true ;
$location_users [ $i ][ " location_id " ] = $ldap_loc [ " id " ];
$usernames [] = $location_users [ $i ][ $ldap_result_username ][ 0 ];
}
2018-01-23 18:15:36 -08:00
}
// Delete located users from the general group.
foreach ( $results as $key => $generic_entry ) {
2018-09-27 16:11:09 -07:00
if (( is_array ( $generic_entry )) && ( array_key_exists ( $ldap_result_username , $generic_entry ))) {
if ( in_array ( $generic_entry [ $ldap_result_username ][ 0 ], $usernames )) {
unset ( $results [ $key ]);
}
2018-01-23 18:15:36 -08:00
}
}
$global_count = $results [ 'count' ];
$results = array_merge ( $location_users , $results );
$results [ 'count' ] = $global_count ;
}
2017-01-11 23:37:14 -08:00
}
2016-10-31 20:59:46 -07:00
2018-01-23 18:15:36 -08:00
/* Create user account entries in Snipe-IT */
2016-10-31 20:59:46 -07:00
$tmp_pass = substr ( str_shuffle ( " 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ " ), 0 , 20 );
$pass = bcrypt ( $tmp_pass );
for ( $i = 0 ; $i < $results [ " count " ]; $i ++ ) {
if ( empty ( $ldap_result_active_flag ) || $results [ $i ][ $ldap_result_active_flag ][ 0 ] == " TRUE " ) {
$item = array ();
$item [ " username " ] = isset ( $results [ $i ][ $ldap_result_username ][ 0 ]) ? $results [ $i ][ $ldap_result_username ][ 0 ] : " " ;
$item [ " employee_number " ] = isset ( $results [ $i ][ $ldap_result_emp_num ][ 0 ]) ? $results [ $i ][ $ldap_result_emp_num ][ 0 ] : " " ;
$item [ " lastname " ] = isset ( $results [ $i ][ $ldap_result_last_name ][ 0 ]) ? $results [ $i ][ $ldap_result_last_name ][ 0 ] : " " ;
$item [ " firstname " ] = isset ( $results [ $i ][ $ldap_result_first_name ][ 0 ]) ? $results [ $i ][ $ldap_result_first_name ][ 0 ] : " " ;
$item [ " email " ] = isset ( $results [ $i ][ $ldap_result_email ][ 0 ]) ? $results [ $i ][ $ldap_result_email ][ 0 ] : " " ;
2017-01-11 23:37:14 -08:00
$item [ " ldap_location_override " ] = isset ( $results [ $i ][ " ldap_location_override " ]) ? $results [ $i ][ " ldap_location_override " ] : " " ;
$item [ " location_id " ] = isset ( $results [ $i ][ " location_id " ]) ? $results [ $i ][ " location_id " ] : " " ;
2019-05-06 06:40:53 -07:00
$user = User :: where ( 'username' , $item [ " username " ]) -> first ();
if ( $user ) {
// Updating an existing user.
$item [ " createorupdate " ] = 'updated' ;
2017-10-06 16:15:14 -07:00
} else {
2019-05-06 06:40:53 -07:00
// Creating a new user.
2016-10-31 20:59:46 -07:00
$user = new User ;
$user -> password = $pass ;
2019-05-06 06:40:53 -07:00
$user -> activated = 0 ;
2016-10-31 20:59:46 -07:00
$item [ " createorupdate " ] = 'created' ;
}
2019-05-15 19:15:41 -07:00
$user -> first_name = $item [ " firstname " ];
$user -> last_name = $item [ " lastname " ];
$user -> username = $item [ " username " ];
$user -> email = $item [ " email " ];
2016-10-31 20:59:46 -07:00
$user -> employee_num = e ( $item [ " employee_number " ]);
2019-05-06 06:40:53 -07:00
// Sync activated state for Active Directory.
if ( array_key_exists ( 'useraccountcontrol' , $results [ $i ]) ) {
$enabled_accounts = [
'512' , '544' , '66048' , '66080' , '262656' , '262688' , '328192' , '328224'
];
$user -> activated = ( in_array ( $results [ $i ][ 'useraccountcontrol' ][ 0 ], $enabled_accounts ) ) ? 1 : 0 ;
}
2016-10-31 20:59:46 -07:00
2017-01-11 23:37:14 -08:00
if ( $item [ 'ldap_location_override' ] == true ) {
$user -> location_id = $item [ 'location_id' ];
2018-02-13 17:06:42 -08:00
} elseif (( isset ( $location )) && ( ! empty ( $location ))) {
2018-03-05 22:42:40 -08:00
2018-03-05 22:44:05 -08:00
if (( is_array ( $location )) && ( array_key_exists ( 'id' , $location ))) {
2018-03-05 22:42:40 -08:00
$user -> location_id = $location [ 'id' ];
} elseif ( is_object ( $location )) {
$user -> location_id = $location -> id ;
}
2016-10-31 20:59:46 -07:00
}
2019-05-06 06:40:53 -07:00
2016-10-31 20:59:46 -07:00
$user -> ldap_import = 1 ;
$errors = '' ;
if ( $user -> save ()) {
$item [ " note " ] = $item [ " createorupdate " ];
$item [ " status " ] = 'success' ;
} else {
foreach ( $user -> getErrors () -> getMessages () as $key => $err ) {
$errors .= $err [ 0 ];
}
$item [ " note " ] = $errors ;
$item [ " status " ] = 'error' ;
}
array_push ( $summary , $item );
}
}
if ( $this -> option ( 'summary' )) {
for ( $x = 0 ; $x < count ( $summary ); $x ++ ) {
if ( $summary [ $x ][ 'status' ] == 'error' ) {
2018-01-23 18:15:36 -08:00
$this -> error ( 'ERROR: ' . $summary [ $x ][ 'firstname' ] . ' ' . $summary [ $x ][ 'lastname' ] . ' (username: ' . $summary [ $x ][ 'username' ] . ') was not imported: ' . $summary [ $x ][ 'note' ]);
2016-10-31 20:59:46 -07:00
} else {
2018-01-23 18:15:36 -08:00
$this -> info ( 'User ' . $summary [ $x ][ 'firstname' ] . ' ' . $summary [ $x ][ 'lastname' ] . ' (username: ' . $summary [ $x ][ 'username' ] . ') was ' . strtoupper ( $summary [ $x ][ 'createorupdate' ]) . '.' );
2016-10-31 20:59:46 -07:00
}
}
2017-10-06 16:15:14 -07:00
} else if ( $this -> option ( 'json_summary' )) {
$json_summary = [ " error " => false , " error_message " => " " , " summary " => $summary ];
$this -> info ( json_encode ( $json_summary ));
2016-10-31 20:59:46 -07:00
} else {
return $summary ;
}
}
}