parent
b6b7814e8b
commit
243dd19281
|
@ -0,0 +1,242 @@
|
|||
<?php
|
||||
// {{{ICINGA_LICENSE_HEADER}}}
|
||||
// {{{ICINGA_LICENSE_HEADER}}}
|
||||
|
||||
namespace Icinga\Form\Setup;
|
||||
|
||||
use Exception;
|
||||
use Zend_Config;
|
||||
use LogicException;
|
||||
use Icinga\Web\Form;
|
||||
use Icinga\Data\ResourceFactory;
|
||||
use Icinga\Authentication\Backend\DbUserBackend;
|
||||
use Icinga\Authentication\Backend\LdapUserBackend;
|
||||
|
||||
/**
|
||||
* Wizard page to define the initial administrative account
|
||||
*/
|
||||
class AdminAccountPage extends Form
|
||||
{
|
||||
/**
|
||||
* The resource configuration to use
|
||||
*
|
||||
* @var array
|
||||
*/
|
||||
protected $resourceConfig;
|
||||
|
||||
/**
|
||||
* The backend configuration to use
|
||||
*
|
||||
* @var array
|
||||
*/
|
||||
protected $backendConfig;
|
||||
|
||||
/**
|
||||
* Initialize this page
|
||||
*/
|
||||
public function init()
|
||||
{
|
||||
$this->setName('setup_admin_account');
|
||||
$this->setViewScript('form/setup-admin-account.phtml');
|
||||
}
|
||||
|
||||
/**
|
||||
* Set the resource configuration to use
|
||||
*
|
||||
* @param array $config
|
||||
*
|
||||
* @return self
|
||||
*/
|
||||
public function setResourceConfig(array $config)
|
||||
{
|
||||
$this->resourceConfig = $config;
|
||||
return $this;
|
||||
}
|
||||
|
||||
/**
|
||||
* Set the backend configuration to use
|
||||
*
|
||||
* @param array $config
|
||||
*
|
||||
* @return self
|
||||
*/
|
||||
public function setBackendConfig(array $config)
|
||||
{
|
||||
$this->backendConfig = $config;
|
||||
return $this;
|
||||
}
|
||||
|
||||
/**
|
||||
* @see Form::createElements()
|
||||
*/
|
||||
public function createElements(array $formData)
|
||||
{
|
||||
$choices = array();
|
||||
|
||||
if ($this->backendConfig['backend'] !== 'db') {
|
||||
$choices['by_name'] = t('By Name', 'setup.admin');
|
||||
$this->addElement(
|
||||
'text',
|
||||
'by_name',
|
||||
array(
|
||||
'required' => isset($formData['user_type']) && $formData['user_type'] === 'by_name',
|
||||
'value' => $this->getUsername(),
|
||||
'label' => t('Username'),
|
||||
'description' => t(
|
||||
'Define the initial administrative account by providing a username that reflects'
|
||||
. ' a user created later or one that is authenticated using external mechanisms'
|
||||
)
|
||||
)
|
||||
);
|
||||
}
|
||||
|
||||
if ($this->backendConfig['backend'] === 'db' || $this->backendConfig['backend'] === 'ldap') {
|
||||
$users = $this->fetchUsers();
|
||||
if (false === empty($users)) {
|
||||
$choices['existing_user'] = t('Existing User');
|
||||
$this->addElement(
|
||||
'select',
|
||||
'existing_user',
|
||||
array(
|
||||
'required' => isset($formData['user_type']) && $formData['user_type'] === 'existing_user',
|
||||
'label' => t('Username'),
|
||||
'description' => sprintf(
|
||||
t(
|
||||
'Choose a user reported by the %s backend as the initial administrative account',
|
||||
'setup.admin'
|
||||
),
|
||||
$this->backendConfig['backend'] === 'db' ? t('database', 'setup.admin.authbackend') : 'LDAP'
|
||||
),
|
||||
'multiOptions' => array_combine($users, $users)
|
||||
)
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
if ($this->backendConfig['backend'] === 'db') {
|
||||
$choices['new_user'] = t('New User');
|
||||
$required = isset($formData['user_type']) && $formData['user_type'] === 'new_user';
|
||||
$this->addElement(
|
||||
'text',
|
||||
'new_user',
|
||||
array(
|
||||
'required' => $required,
|
||||
'label' => t('Username'),
|
||||
'description' => t(
|
||||
'Enter the username to be used when creating an initial administrative account'
|
||||
)
|
||||
)
|
||||
);
|
||||
$this->addElement(
|
||||
'password',
|
||||
'new_user_password',
|
||||
array(
|
||||
'required' => $required,
|
||||
'label' => t('Password'),
|
||||
'description' => t('Enter the password to assign to the newly created account')
|
||||
)
|
||||
);
|
||||
$this->addElement(
|
||||
'password',
|
||||
'new_user_2ndpass',
|
||||
array(
|
||||
'required' => $required,
|
||||
'label' => t('Repeat password'),
|
||||
'description' => t('Please repeat the password given above to avoid typing errors'),
|
||||
'validators' => array(
|
||||
array('identical', false, array('new_user_password'))
|
||||
)
|
||||
)
|
||||
);
|
||||
}
|
||||
|
||||
if (count($choices) > 1) {
|
||||
$this->addElement(
|
||||
'radio',
|
||||
'user_type',
|
||||
array(
|
||||
'required' => true,
|
||||
'multiOptions' => $choices
|
||||
)
|
||||
);
|
||||
} else {
|
||||
$this->addElement(
|
||||
'hidden',
|
||||
'user_type',
|
||||
array(
|
||||
'required' => true,
|
||||
'value' => key($choices)
|
||||
)
|
||||
);
|
||||
}
|
||||
|
||||
$this->addElement(
|
||||
'note',
|
||||
'description',
|
||||
array(
|
||||
'value' => tp(
|
||||
'Now it\'s time to configure your first administrative account.'
|
||||
. ' Please follow the instructions below:',
|
||||
'Now it\'s time to configure your first administrative account.'
|
||||
. ' Below are several options you can choose from. Select one and follow its instructions:',
|
||||
count($choices)
|
||||
)
|
||||
)
|
||||
);
|
||||
}
|
||||
|
||||
/**
|
||||
* Return the name of the externally authenticated user
|
||||
*
|
||||
* @return string
|
||||
*/
|
||||
protected function getUsername()
|
||||
{
|
||||
if (false === isset($_SERVER['REMOTE_USER'])) {
|
||||
return '';
|
||||
}
|
||||
|
||||
$name = $_SERVER['REMOTE_USER'];
|
||||
if (isset($this->backendConfig['strip_username_regexp'])) {
|
||||
// No need to silence or log anything here because the pattern has
|
||||
// already been successfully compiled during backend configuration
|
||||
$name = preg_replace($this->backendConfig['strip_username_regexp'], '', $name);
|
||||
}
|
||||
|
||||
return $name;
|
||||
}
|
||||
|
||||
/**
|
||||
* Return the names of all users this backend currently provides
|
||||
*
|
||||
* @return array
|
||||
*
|
||||
* @throws LogicException In case the backend to fetch users from is not supported
|
||||
*/
|
||||
protected function fetchUsers()
|
||||
{
|
||||
if ($this->backendConfig['backend'] === 'db') {
|
||||
$backend = new DbUserBackend(ResourceFactory::createResource(new Zend_Config($this->resourceConfig)));
|
||||
} elseif ($this->backendConfig['backend'] === 'ldap') {
|
||||
$backend = new LdapUserBackend(
|
||||
ResourceFactory::createResource(new Zend_Config($this->resourceConfig)),
|
||||
$this->backendConfig['user_class'],
|
||||
$this->backendConfig['user_name_attribute']
|
||||
);
|
||||
} else {
|
||||
throw new LogicException(
|
||||
sprintf(
|
||||
'Tried to fetch users from an unsupported authentication backend: %s',
|
||||
$this->backendConfig['backend']
|
||||
)
|
||||
);
|
||||
}
|
||||
|
||||
try {
|
||||
return $backend->listUsers();
|
||||
} catch (Exception $e) {
|
||||
// No need to handle anything special here. Error means no users found.
|
||||
return array();
|
||||
}
|
||||
}
|
||||
}
|
|
@ -0,0 +1,65 @@
|
|||
<?php
|
||||
|
||||
use Icinga\Web\Wizard;
|
||||
|
||||
$radioElem = $form->getElement('user_type');
|
||||
$showRadioBoxes = strpos(strtolower(get_class($radioElem)), 'radio') !== false;
|
||||
|
||||
?>
|
||||
<form id="<?= $form->getName(); ?>" name="<?= $form->getName(); ?>" enctype="<?= $form->getEncType(); ?>" method="<?= $form->getMethod(); ?>">
|
||||
<?= $form->getElement('description'); ?>
|
||||
<?php if (($byNameElem = $form->getElement('by_name')) !== null): ?>
|
||||
<div>
|
||||
<div style="display: inline-block; width: 30.2em;">
|
||||
<?= $byNameElem; ?>
|
||||
</div>
|
||||
<?php if ($showRadioBoxes): ?>
|
||||
<div style="vertical-align: top; display: inline-block; padding: 0.4em 0.2em 0;">
|
||||
<label>
|
||||
<input type="radio" name="user_type" value="by_name">
|
||||
<?= $radioElem->getMultiOption('by_name'); ?>
|
||||
</label>
|
||||
</div>
|
||||
<?php endif ?>
|
||||
</div>
|
||||
<?php endif ?>
|
||||
<?php if (($existingUserElem = $form->getElement('existing_user')) !== null): ?>
|
||||
<div>
|
||||
<div style="display: inline-block; width: 30.2em;">
|
||||
<?= $existingUserElem; ?>
|
||||
</div>
|
||||
<?php if ($showRadioBoxes): ?>
|
||||
<div style="vertical-align: top; display: inline-block; padding: 0.4em 0.2em 0;">
|
||||
<label>
|
||||
<input type="radio" name="user_type" value="existing_user">
|
||||
<?= $radioElem->getMultiOption('existing_user'); ?>
|
||||
</label>
|
||||
</div>
|
||||
<?php endif ?>
|
||||
</div>
|
||||
<?php endif ?>
|
||||
<?php if (($newUserElem = $form->getElement('new_user')) !== null): ?>
|
||||
<div>
|
||||
<div style="display: inline-block; width: 30.2em;">
|
||||
<?= $newUserElem; ?>
|
||||
<?= $form->getElement('new_user_password'); ?>
|
||||
<?= $form->getElement('new_user_2ndpass'); ?>
|
||||
</div>
|
||||
<?php if ($showRadioBoxes): ?>
|
||||
<div style="vertical-align: top; display: inline-block; padding: 0.4em 0.2em 0;">
|
||||
<label>
|
||||
<input type="radio" name="user_type" value="new_user">
|
||||
<?= $radioElem->getMultiOption('new_user'); ?>
|
||||
</label>
|
||||
</div>
|
||||
<?php endif ?>
|
||||
</div>
|
||||
<?php endif ?>
|
||||
<?php if (false === $showRadioBoxes): ?>
|
||||
<?= $radioElem; ?>
|
||||
<?php endif ?>
|
||||
<?= $form->getElement($form->getTokenElementName()); ?>
|
||||
<?= $form->getElement($form->getUidElementName()); ?>
|
||||
<?= $form->getElement(Wizard::BTN_PREV); ?>
|
||||
<?= $form->getElement(Wizard::BTN_NEXT); ?>
|
||||
</form>
|
Loading…
Reference in New Issue