sysPass/lib/SP/Services/Ldap/LdapCheckService.php

<?php
/**
 * sysPass
 *
 * @author    nuxsmin
 * @link      https://syspass.org
 * @copyright 2012-2018, Rubén Domínguez nuxsmin@$syspass.org
 *
 * This file is part of sysPass.
 *
 * sysPass is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * sysPass is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 *  along with sysPass.  If not, see <http://www.gnu.org/licenses/>.
 */

namespace SP\Services\Ldap;

use SP\Providers\Auth\Ldap\Ldap;
use SP\Providers\Auth\Ldap\LdapConnection;
use SP\Providers\Auth\Ldap\LdapException;
use SP\Providers\Auth\Ldap\LdapMsAds;
use SP\Providers\Auth\Ldap\LdapParams;
use SP\Providers\Auth\Ldap\LdapStd;
use SP\Services\Service;

/**
 * Class LdapCheckService
 *
 * @package SP\Services\Ldap
 */
final class LdapCheckService extends Service
{
    /**
     * @var Ldap
     */
    protected $ldap;

    /**
     * @param LdapParams $ldapParams
     *
     * @throws LdapException
     */
    public function checkConnection(LdapParams $ldapParams)
    {
        $ldapConnection = new LdapConnection($ldapParams, $this->eventDispatcher, true);
        $ldapConnection->checkConnection();

        if ($ldapParams->isAds()) {
            $this->ldap = new LdapMsAds($ldapConnection, $this->eventDispatcher);
        } else {
            $this->ldap = new LdapStd($ldapConnection, $this->eventDispatcher);
        }
    }

    /**
     * @param bool $includeGroups
     *
     * @return array
     * @throws LdapException
     */
    public function getObjects($includeGroups = true)
    {
        $ldapActions = $this->ldap->getLdapActions();

        $data = ['count' => 0, 'results' => []];

        $data['results'][] = [
            'icon' => 'person',
            'items' => $this->ldapResultsMapper(
                $ldapActions->getObjects(
                    $this->ldap->getGroupMembershipFilter(), ['dn']))
        ];

        if ($includeGroups) {
            $data['results'][] = [
                'icon' => 'group',
                'items' => $this->ldapResultsMapper(
                    $ldapActions->getObjects(
                        $this->ldap->getGroupObjectFilter(), ['dn']))
            ];
        }

        array_walk($data['results'], function ($value) use (&$data) {
            $data['count'] += count($value['items']);
        });

        return $data;
    }

    /**
     * Obtener los datos de una búsqueda de LDAP de un atributo
     *
     * @param array  $data
     * @param string $attribute
     *
     * @return array
     */
    public function ldapResultsMapper($data, $attribute = 'dn')
    {
        $out = [];

        foreach ($data as $result) {
            if (is_array($result)) {
                foreach ($result as $ldapAttribute => $value) {
                    if (strtolower($ldapAttribute) === $attribute) {
                        $out[] = $value;
                    }
                }
            }
        }

        return $out;
    }

    /**
     * @param $filter
     *
     * @return array
     * @throws LdapException
     */
    public function getObjectsByFilter($filter)
    {
        $objects = $this->ldapResultsMapper(
            $this->ldap->getLdapActions()->getObjects($filter, ['dn']));

        return [
            'count' => count($objects),
            'results' => [
                [
                    'icon' => '',
                    'items' => $objects
                ]
            ]
        ];
    }
}