2014-09-29 12:29:36 +02:00
|
|
|
<?php
|
2015-02-04 10:46:36 +01:00
|
|
|
/* Icinga Web 2 | (c) 2013-2015 Icinga Development Team | GPLv2+ */
|
2014-09-29 12:29:36 +02:00
|
|
|
|
2014-11-14 11:01:16 +01:00
|
|
|
namespace Icinga\Module\Setup\Forms;
|
2014-09-29 12:29:36 +02:00
|
|
|
|
|
|
|
use Exception;
|
2015-06-25 15:26:56 +02:00
|
|
|
use Icinga\Authentication\User\UserBackend;
|
2015-06-30 09:20:52 +02:00
|
|
|
use Icinga\Authentication\User\DbUserBackend;
|
|
|
|
use Icinga\Authentication\User\LdapUserBackend;
|
2014-11-18 13:11:52 +01:00
|
|
|
use Icinga\Data\ConfigObject;
|
2015-06-25 15:26:56 +02:00
|
|
|
use Icinga\Web\Form;
|
2014-09-29 12:29:36 +02:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Wizard page to define the initial administrative account
|
|
|
|
*/
|
|
|
|
class AdminAccountPage extends Form
|
|
|
|
{
|
|
|
|
/**
|
|
|
|
* The resource configuration to use
|
|
|
|
*
|
|
|
|
* @var array
|
|
|
|
*/
|
|
|
|
protected $resourceConfig;
|
|
|
|
|
|
|
|
/**
|
|
|
|
* The backend configuration to use
|
|
|
|
*
|
|
|
|
* @var array
|
|
|
|
*/
|
|
|
|
protected $backendConfig;
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Initialize this page
|
|
|
|
*/
|
|
|
|
public function init()
|
|
|
|
{
|
|
|
|
$this->setName('setup_admin_account');
|
2015-06-30 10:58:17 +02:00
|
|
|
$this->addDescription($this->translate(
|
|
|
|
'Now it\'s time to configure your first administrative account for Icinga Web 2.'
|
|
|
|
));
|
2014-09-29 12:29:36 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Set the resource configuration to use
|
|
|
|
*
|
|
|
|
* @param array $config
|
|
|
|
*
|
2015-04-07 14:23:26 +02:00
|
|
|
* @return $this
|
2014-09-29 12:29:36 +02:00
|
|
|
*/
|
|
|
|
public function setResourceConfig(array $config)
|
|
|
|
{
|
|
|
|
$this->resourceConfig = $config;
|
|
|
|
return $this;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Set the backend configuration to use
|
|
|
|
*
|
|
|
|
* @param array $config
|
|
|
|
*
|
2015-04-07 14:23:26 +02:00
|
|
|
* @return $this
|
2014-09-29 12:29:36 +02:00
|
|
|
*/
|
|
|
|
public function setBackendConfig(array $config)
|
|
|
|
{
|
|
|
|
$this->backendConfig = $config;
|
|
|
|
return $this;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @see Form::createElements()
|
|
|
|
*/
|
|
|
|
public function createElements(array $formData)
|
|
|
|
{
|
|
|
|
$choices = array();
|
|
|
|
if ($this->backendConfig['backend'] !== 'db') {
|
2015-01-19 11:07:39 +01:00
|
|
|
$choices['by_name'] = $this->translate('By Name', 'setup.admin');
|
2015-06-30 10:58:17 +02:00
|
|
|
$choice = isset($formData['user_type']) ? $formData['user_type'] : 'by_name';
|
|
|
|
} else {
|
|
|
|
$choices['new_user'] = $this->translate('New User', 'setup.admin');
|
|
|
|
$choice = isset($formData['user_type']) ? $formData['user_type'] : 'new_user';
|
|
|
|
}
|
|
|
|
|
|
|
|
if (in_array($this->backendConfig['backend'], array('db', 'ldap', 'msldap'))) {
|
|
|
|
$users = $this->fetchUsers();
|
|
|
|
if (! empty($users)) {
|
|
|
|
$choices['existing_user'] = $this->translate('Existing User', 'setup.admin');
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (count($choices) > 1) {
|
|
|
|
$this->addDescription($this->translate(
|
|
|
|
'Below are several options you can choose from for how to define the desired account.'
|
|
|
|
));
|
|
|
|
$this->addElement(
|
|
|
|
'select',
|
|
|
|
'user_type',
|
|
|
|
array(
|
|
|
|
'required' => true,
|
|
|
|
'autosubmit' => true,
|
|
|
|
'label' => $this->translate('Type Of Definition'),
|
|
|
|
'multiOptions' => $choices,
|
|
|
|
'value' => $choice
|
|
|
|
)
|
|
|
|
);
|
|
|
|
} else {
|
|
|
|
$this->addElement(
|
|
|
|
'hidden',
|
|
|
|
'user_type',
|
|
|
|
array(
|
|
|
|
'required' => true,
|
|
|
|
'value' => key($choices)
|
|
|
|
)
|
|
|
|
);
|
|
|
|
}
|
|
|
|
|
|
|
|
if ($choice === 'by_name') {
|
2014-09-29 12:29:36 +02:00
|
|
|
$this->addElement(
|
|
|
|
'text',
|
|
|
|
'by_name',
|
|
|
|
array(
|
2015-06-30 10:58:17 +02:00
|
|
|
'required' => true,
|
2014-09-29 12:29:36 +02:00
|
|
|
'value' => $this->getUsername(),
|
2015-01-19 11:07:39 +01:00
|
|
|
'label' => $this->translate('Username'),
|
|
|
|
'description' => $this->translate(
|
2014-09-29 12:29:36 +02:00
|
|
|
'Define the initial administrative account by providing a username that reflects'
|
|
|
|
. ' a user created later or one that is authenticated using external mechanisms'
|
|
|
|
)
|
|
|
|
)
|
|
|
|
);
|
|
|
|
}
|
|
|
|
|
2015-06-30 10:58:17 +02:00
|
|
|
if ($choice === 'existing_user') {
|
|
|
|
$this->addElement(
|
|
|
|
'select',
|
|
|
|
'existing_user',
|
|
|
|
array(
|
|
|
|
'required' => true,
|
|
|
|
'label' => $this->translate('Username'),
|
|
|
|
'description' => sprintf(
|
|
|
|
$this->translate(
|
|
|
|
'Choose a user reported by the %s backend as the initial administrative account',
|
|
|
|
'setup.admin'
|
2014-09-29 12:29:36 +02:00
|
|
|
),
|
2015-06-30 10:58:17 +02:00
|
|
|
$this->backendConfig['backend'] === 'db'
|
|
|
|
? $this->translate('database', 'setup.admin.authbackend')
|
|
|
|
: 'LDAP'
|
|
|
|
),
|
|
|
|
'multiOptions' => array_combine($users, $users)
|
|
|
|
)
|
|
|
|
);
|
2014-09-29 12:29:36 +02:00
|
|
|
}
|
|
|
|
|
2015-06-30 10:58:17 +02:00
|
|
|
if ($choice === 'new_user') {
|
2014-09-29 12:29:36 +02:00
|
|
|
$this->addElement(
|
|
|
|
'text',
|
|
|
|
'new_user',
|
|
|
|
array(
|
2015-06-30 10:58:17 +02:00
|
|
|
'required' => true,
|
2015-01-19 11:07:39 +01:00
|
|
|
'label' => $this->translate('Username'),
|
|
|
|
'description' => $this->translate(
|
2014-09-29 12:29:36 +02:00
|
|
|
'Enter the username to be used when creating an initial administrative account'
|
|
|
|
)
|
|
|
|
)
|
|
|
|
);
|
|
|
|
$this->addElement(
|
|
|
|
'password',
|
|
|
|
'new_user_password',
|
|
|
|
array(
|
2015-06-30 10:58:17 +02:00
|
|
|
'required' => true,
|
2015-01-19 11:07:39 +01:00
|
|
|
'label' => $this->translate('Password'),
|
|
|
|
'description' => $this->translate('Enter the password to assign to the newly created account')
|
2014-09-29 12:29:36 +02:00
|
|
|
)
|
|
|
|
);
|
|
|
|
$this->addElement(
|
|
|
|
'password',
|
|
|
|
'new_user_2ndpass',
|
|
|
|
array(
|
2015-06-30 10:58:17 +02:00
|
|
|
'required' => true,
|
2015-01-19 11:07:39 +01:00
|
|
|
'label' => $this->translate('Repeat password'),
|
2015-06-30 10:58:17 +02:00
|
|
|
'description' => $this->translate(
|
|
|
|
'Please repeat the password given above to avoid typing errors'
|
|
|
|
),
|
2014-09-29 12:29:36 +02:00
|
|
|
'validators' => array(
|
|
|
|
array('identical', false, array('new_user_password'))
|
|
|
|
)
|
|
|
|
)
|
|
|
|
);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2014-10-08 10:38:04 +02:00
|
|
|
/**
|
|
|
|
* Validate the given request data and ensure that any new user does not already exist
|
|
|
|
*
|
|
|
|
* @param array $data The request data to validate
|
|
|
|
*
|
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
public function isValid($data)
|
|
|
|
{
|
|
|
|
if (false === parent::isValid($data)) {
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
2015-06-30 09:20:52 +02:00
|
|
|
if ($data['user_type'] === 'new_user' && !$this->hasUser($data['new_user'])) {
|
2015-01-19 11:07:39 +01:00
|
|
|
$this->getElement('new_user')->addError($this->translate('Username already exists.'));
|
2014-10-08 10:38:04 +02:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
2014-09-29 12:29:36 +02:00
|
|
|
/**
|
|
|
|
* Return the name of the externally authenticated user
|
|
|
|
*
|
|
|
|
* @return string
|
|
|
|
*/
|
|
|
|
protected function getUsername()
|
|
|
|
{
|
|
|
|
if (false === isset($_SERVER['REMOTE_USER'])) {
|
|
|
|
return '';
|
|
|
|
}
|
|
|
|
|
|
|
|
$name = $_SERVER['REMOTE_USER'];
|
2014-10-20 15:14:14 +02:00
|
|
|
if (isset($this->backendConfig['strip_username_regexp']) && $this->backendConfig['strip_username_regexp']) {
|
2014-09-29 12:29:36 +02:00
|
|
|
// No need to silence or log anything here because the pattern has
|
|
|
|
// already been successfully compiled during backend configuration
|
|
|
|
$name = preg_replace($this->backendConfig['strip_username_regexp'], '', $name);
|
|
|
|
}
|
|
|
|
|
|
|
|
return $name;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2015-06-30 09:20:52 +02:00
|
|
|
* Return the names of all users the backend currently provides
|
2014-09-29 12:29:36 +02:00
|
|
|
*
|
|
|
|
* @return array
|
|
|
|
*/
|
|
|
|
protected function fetchUsers()
|
|
|
|
{
|
|
|
|
try {
|
2015-06-30 09:20:52 +02:00
|
|
|
return $this->createBackend()->select(array('user_name'))->order('user_name', 'asc', true)->fetchColumn();
|
2015-05-04 12:21:17 +02:00
|
|
|
} catch (Exception $_) {
|
2014-09-29 12:29:36 +02:00
|
|
|
// No need to handle anything special here. Error means no users found.
|
|
|
|
return array();
|
|
|
|
}
|
|
|
|
}
|
2015-06-30 09:20:52 +02:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Return whether the backend provides a user with the given name
|
|
|
|
*
|
|
|
|
* @param string $username
|
|
|
|
*
|
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
protected function hasUser($username)
|
|
|
|
{
|
|
|
|
return $this->createBackend()->select()->where('user_name', $username)->count() > 1;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Create and return the backend
|
|
|
|
*
|
|
|
|
* @return DbUserBackend|LdapUserBackend
|
|
|
|
*/
|
|
|
|
protected function createBackend()
|
|
|
|
{
|
|
|
|
$config = new ConfigObject($this->backendConfig);
|
|
|
|
$config->resource = $this->resourceConfig;
|
|
|
|
return UserBackend::create(null, $config);
|
|
|
|
}
|
2014-09-29 12:29:36 +02:00
|
|
|
}
|