mirror of
https://github.com/Icinga/icingaweb2.git
synced 2025-07-31 01:34:09 +02:00
Johannes Meyer
parent
b6b7814e8b
commit
243dd19281
242
application/forms/Setup/AdminAccountPage.php
Normal file
242
application/forms/Setup/AdminAccountPage.php
Normal file
@ -0,0 +1,242 @@
|
|||||||
|
<?php
|
||||||
|
// {{{ICINGA_LICENSE_HEADER}}}
|
||||||
|
// {{{ICINGA_LICENSE_HEADER}}}
|
||||||
|
|
||||||
|
namespace Icinga\Form\Setup;
|
||||||
|
|
||||||
|
use Exception;
|
||||||
|
use Zend_Config;
|
||||||
|
use LogicException;
|
||||||
|
use Icinga\Web\Form;
|
||||||
|
use Icinga\Data\ResourceFactory;
|
||||||
|
use Icinga\Authentication\Backend\DbUserBackend;
|
||||||
|
use Icinga\Authentication\Backend\LdapUserBackend;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Wizard page to define the initial administrative account
|
||||||
|
*/
|
||||||
|
class AdminAccountPage extends Form
|
||||||
|
{
|
||||||
|
/**
|
||||||
|
* The resource configuration to use
|
||||||
|
*
|
||||||
|
* @var array
|
||||||
|
*/
|
||||||
|
protected $resourceConfig;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* The backend configuration to use
|
||||||
|
*
|
||||||
|
* @var array
|
||||||
|
*/
|
||||||
|
protected $backendConfig;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Initialize this page
|
||||||
|
*/
|
||||||
|
public function init()
|
||||||
|
{
|
||||||
|
$this->setName('setup_admin_account');
|
||||||
|
$this->setViewScript('form/setup-admin-account.phtml');
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Set the resource configuration to use
|
||||||
|
*
|
||||||
|
* @param array $config
|
||||||
|
*
|
||||||
|
* @return self
|
||||||
|
*/
|
||||||
|
public function setResourceConfig(array $config)
|
||||||
|
{
|
||||||
|
$this->resourceConfig = $config;
|
||||||
|
return $this;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Set the backend configuration to use
|
||||||
|
*
|
||||||
|
* @param array $config
|
||||||
|
*
|
||||||
|
* @return self
|
||||||
|
*/
|
||||||
|
public function setBackendConfig(array $config)
|
||||||
|
{
|
||||||
|
$this->backendConfig = $config;
|
||||||
|
return $this;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* @see Form::createElements()
|
||||||
|
*/
|
||||||
|
public function createElements(array $formData)
|
||||||
|
{
|
||||||
|
$choices = array();
|
||||||
|
|
||||||
|
if ($this->backendConfig['backend'] !== 'db') {
|
||||||
|
$choices['by_name'] = t('By Name', 'setup.admin');
|
||||||
|
$this->addElement(
|
||||||
|
'text',
|
||||||
|
'by_name',
|
||||||
|
array(
|
||||||
|
'required' => isset($formData['user_type']) && $formData['user_type'] === 'by_name',
|
||||||
|
'value' => $this->getUsername(),
|
||||||
|
'label' => t('Username'),
|
||||||
|
'description' => t(
|
||||||
|
'Define the initial administrative account by providing a username that reflects'
|
||||||
|
. ' a user created later or one that is authenticated using external mechanisms'
|
||||||
|
)
|
||||||
|
)
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($this->backendConfig['backend'] === 'db' || $this->backendConfig['backend'] === 'ldap') {
|
||||||
|
$users = $this->fetchUsers();
|
||||||
|
if (false === empty($users)) {
|
||||||
|
$choices['existing_user'] = t('Existing User');
|
||||||
|
$this->addElement(
|
||||||
|
'select',
|
||||||
|
'existing_user',
|
||||||
|
array(
|
||||||
|
'required' => isset($formData['user_type']) && $formData['user_type'] === 'existing_user',
|
||||||
|
'label' => t('Username'),
|
||||||
|
'description' => sprintf(
|
||||||
|
t(
|
||||||
|
'Choose a user reported by the %s backend as the initial administrative account',
|
||||||
|
'setup.admin'
|
||||||
|
),
|
||||||
|
$this->backendConfig['backend'] === 'db' ? t('database', 'setup.admin.authbackend') : 'LDAP'
|
||||||
|
),
|
||||||
|
'multiOptions' => array_combine($users, $users)
|
||||||
|
)
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($this->backendConfig['backend'] === 'db') {
|
||||||
|
$choices['new_user'] = t('New User');
|
||||||
|
$required = isset($formData['user_type']) && $formData['user_type'] === 'new_user';
|
||||||
|
$this->addElement(
|
||||||
|
'text',
|
||||||
|
'new_user',
|
||||||
|
array(
|
||||||
|
'required' => $required,
|
||||||
|
'label' => t('Username'),
|
||||||
|
'description' => t(
|
||||||
|
'Enter the username to be used when creating an initial administrative account'
|
||||||
|
)
|
||||||
|
)
|
||||||
|
);
|
||||||
|
$this->addElement(
|
||||||
|
'password',
|
||||||
|
'new_user_password',
|
||||||
|
array(
|
||||||
|
'required' => $required,
|
||||||
|
'label' => t('Password'),
|
||||||
|
'description' => t('Enter the password to assign to the newly created account')
|
||||||
|
)
|
||||||
|
);
|
||||||
|
$this->addElement(
|
||||||
|
'password',
|
||||||
|
'new_user_2ndpass',
|
||||||
|
array(
|
||||||
|
'required' => $required,
|
||||||
|
'label' => t('Repeat password'),
|
||||||
|
'description' => t('Please repeat the password given above to avoid typing errors'),
|
||||||
|
'validators' => array(
|
||||||
|
array('identical', false, array('new_user_password'))
|
||||||
|
)
|
||||||
|
)
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (count($choices) > 1) {
|
||||||
|
$this->addElement(
|
||||||
|
'radio',
|
||||||
|
'user_type',
|
||||||
|
array(
|
||||||
|
'required' => true,
|
||||||
|
'multiOptions' => $choices
|
||||||
|
)
|
||||||
|
);
|
||||||
|
} else {
|
||||||
|
$this->addElement(
|
||||||
|
'hidden',
|
||||||
|
'user_type',
|
||||||
|
array(
|
||||||
|
'required' => true,
|
||||||
|
'value' => key($choices)
|
||||||
|
)
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
$this->addElement(
|
||||||
|
'note',
|
||||||
|
'description',
|
||||||
|
array(
|
||||||
|
'value' => tp(
|
||||||
|
'Now it\'s time to configure your first administrative account.'
|
||||||
|
. ' Please follow the instructions below:',
|
||||||
|
'Now it\'s time to configure your first administrative account.'
|
||||||
|
. ' Below are several options you can choose from. Select one and follow its instructions:',
|
||||||
|
count($choices)
|
||||||
|
)
|
||||||
|
)
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Return the name of the externally authenticated user
|
||||||
|
*
|
||||||
|
* @return string
|
||||||
|
*/
|
||||||
|
protected function getUsername()
|
||||||
|
{
|
||||||
|
if (false === isset($_SERVER['REMOTE_USER'])) {
|
||||||
|
return '';
|
||||||
|
}
|
||||||
|
|
||||||
|
$name = $_SERVER['REMOTE_USER'];
|
||||||
|
if (isset($this->backendConfig['strip_username_regexp'])) {
|
||||||
|
// No need to silence or log anything here because the pattern has
|
||||||
|
// already been successfully compiled during backend configuration
|
||||||
|
$name = preg_replace($this->backendConfig['strip_username_regexp'], '', $name);
|
||||||
|
}
|
||||||
|
|
||||||
|
return $name;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Return the names of all users this backend currently provides
|
||||||
|
*
|
||||||
|
* @return array
|
||||||
|
*
|
||||||
|
* @throws LogicException In case the backend to fetch users from is not supported
|
||||||
|
*/
|
||||||
|
protected function fetchUsers()
|
||||||
|
{
|
||||||
|
if ($this->backendConfig['backend'] === 'db') {
|
||||||
|
$backend = new DbUserBackend(ResourceFactory::createResource(new Zend_Config($this->resourceConfig)));
|
||||||
|
} elseif ($this->backendConfig['backend'] === 'ldap') {
|
||||||
|
$backend = new LdapUserBackend(
|
||||||
|
ResourceFactory::createResource(new Zend_Config($this->resourceConfig)),
|
||||||
|
$this->backendConfig['user_class'],
|
||||||
|
$this->backendConfig['user_name_attribute']
|
||||||
|
);
|
||||||
|
} else {
|
||||||
|
throw new LogicException(
|
||||||
|
sprintf(
|
||||||
|
'Tried to fetch users from an unsupported authentication backend: %s',
|
||||||
|
$this->backendConfig['backend']
|
||||||
|
)
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
try {
|
||||||
|
return $backend->listUsers();
|
||||||
|
} catch (Exception $e) {
|
||||||
|
// No need to handle anything special here. Error means no users found.
|
||||||
|
return array();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
65
application/views/scripts/form/setup-admin-account.phtml
Normal file
65
application/views/scripts/form/setup-admin-account.phtml
Normal file
@ -0,0 +1,65 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
use Icinga\Web\Wizard;
|
||||||
|
|
||||||
|
$radioElem = $form->getElement('user_type');
|
||||||
|
$showRadioBoxes = strpos(strtolower(get_class($radioElem)), 'radio') !== false;
|
||||||
|
|
||||||
|
?>
|
||||||
|
<form id="<?= $form->getName(); ?>" name="<?= $form->getName(); ?>" enctype="<?= $form->getEncType(); ?>" method="<?= $form->getMethod(); ?>">
|
||||||
|
<?= $form->getElement('description'); ?>
|
||||||
|
<?php if (($byNameElem = $form->getElement('by_name')) !== null): ?>
|
||||||
|
<div>
|
||||||
|
<div style="display: inline-block; width: 30.2em;">
|
||||||
|
<?= $byNameElem; ?>
|
||||||
|
</div>
|
||||||
|
<?php if ($showRadioBoxes): ?>
|
||||||
|
<div style="vertical-align: top; display: inline-block; padding: 0.4em 0.2em 0;">
|
||||||
|
<label>
|
||||||
|
<input type="radio" name="user_type" value="by_name">
|
||||||
|
<?= $radioElem->getMultiOption('by_name'); ?>
|
||||||
|
</label>
|
||||||
|
</div>
|
||||||
|
<?php endif ?>
|
||||||
|
</div>
|
||||||
|
<?php endif ?>
|
||||||
|
<?php if (($existingUserElem = $form->getElement('existing_user')) !== null): ?>
|
||||||
|
<div>
|
||||||
|
<div style="display: inline-block; width: 30.2em;">
|
||||||
|
<?= $existingUserElem; ?>
|
||||||
|
</div>
|
||||||
|
<?php if ($showRadioBoxes): ?>
|
||||||
|
<div style="vertical-align: top; display: inline-block; padding: 0.4em 0.2em 0;">
|
||||||
|
<label>
|
||||||
|
<input type="radio" name="user_type" value="existing_user">
|
||||||
|
<?= $radioElem->getMultiOption('existing_user'); ?>
|
||||||
|
</label>
|
||||||
|
</div>
|
||||||
|
<?php endif ?>
|
||||||
|
</div>
|
||||||
|
<?php endif ?>
|
||||||
|
<?php if (($newUserElem = $form->getElement('new_user')) !== null): ?>
|
||||||
|
<div>
|
||||||
|
<div style="display: inline-block; width: 30.2em;">
|
||||||
|
<?= $newUserElem; ?>
|
||||||
|
<?= $form->getElement('new_user_password'); ?>
|
||||||
|
<?= $form->getElement('new_user_2ndpass'); ?>
|
||||||
|
</div>
|
||||||
|
<?php if ($showRadioBoxes): ?>
|
||||||
|
<div style="vertical-align: top; display: inline-block; padding: 0.4em 0.2em 0;">
|
||||||
|
<label>
|
||||||
|
<input type="radio" name="user_type" value="new_user">
|
||||||
|
<?= $radioElem->getMultiOption('new_user'); ?>
|
||||||
|
</label>
|
||||||
|
</div>
|
||||||
|
<?php endif ?>
|
||||||
|
</div>
|
||||||
|
<?php endif ?>
|
||||||
|
<?php if (false === $showRadioBoxes): ?>
|
||||||
|
<?= $radioElem; ?>
|
||||||
|
<?php endif ?>
|
||||||
|
<?= $form->getElement($form->getTokenElementName()); ?>
|
||||||
|
<?= $form->getElement($form->getUidElementName()); ?>
|
||||||
|
<?= $form->getElement(Wizard::BTN_PREV); ?>
|
||||||
|
<?= $form->getElement(Wizard::BTN_NEXT); ?>
|
||||||
|
</form>
|
||||||
Loading…
x
Reference in New Issue
Block a user