22 | What is account merging? 23 |
24 |If a user has multiple existing accounts (on different services), 25 | then you probably want them to appear on the same page on Auth. 26 | This means that you can reset the login details, account 27 | information, and group membership details in one place.
28 |This utility exists to help you merge together multiple 29 | AccountOwner pages. To do this, they must not contain accounts on 30 | the same service!
31 |Accounts can only be merged if they are in the same Organization 48 | Unit, in no groups at all, and have the same name. The form below 49 | will help you find the accounts, and the 'Prepare' button will make 50 | these changes.
51 |After the Queue has emptied, you can then merge the accounts 52 | together, and add the new AccountOwner back to the correct User 53 | Groups!
54 | 55 || Select new: | 58 |60 | | 61 |
| Selected: | 65 |".web::escapeHTML($data['owners']).""; ?> 66 | | 67 |
| 72 | | |
9 | What does this do? 10 |
11 |A brief description of the utility and its purpose. You may wish 12 | to use a definition list if there is special jargon involved:
13 |The "Hello World" feature says hello to the world
36 | 37 | "; ?> 38 |24 | What does this do? 25 |
26 |This utility is for batch resetting passwords for an entire group. Each member has their password reset and output in an excel/csv compatible format. 27 | 28 | This utility only resets the passwords of the direct members of the defined group and not that of members of any subgroups. 29 | 30 |
31 |20 | What does this do? 21 |
22 |This utility is responsible for sorting students into homerooms, 23 | and creating accounts automatically.
24 |It relies on correct data in the SAS student database.
25 |This will look for changes in SAS, but will not modify anything. 85 | It is a simple way to check that the plugin is set up correctly.
86 | Check 87 | 88 |This will look for changes in SAS, and update them in the 93 | AuthQueue.
94 | Update now 95 | 96 |".htmlentities($error)."
"; 47 | 48 | die(); 49 | } 50 | 51 | static public function redirect($to) { 52 | /* Run queue first if necessary */ 53 | ActionQueue_api::start(); 54 | 55 | /* Now redirect */ 56 | global $config; 57 | header('location: ' . $to); 58 | exit(0); 59 | } 60 | 61 | static public function constructURL($controller, $action, $arg, $fmt) { 62 | $config = self::$config; 63 | $part = array(); 64 | 65 | if(count($arg) == 1 && $action == $config['default']['action']) { 66 | /* We can abbreviate if there is only one argument and we are using the default view */ 67 | if($controller != $config['default']['controller'] ) { 68 | /* The controller isn't default, need to add that */ 69 | array_push($part, urlencode($arg[0])); 70 | array_unshift($part, urlencode($controller)); 71 | } else { 72 | /* default controller and action. Check for default args */ 73 | if($arg[0] != $config['default']['arg'][0]) { 74 | array_push($part, urlencode($arg[0])); 75 | } 76 | } 77 | } else { 78 | /* urlencode all arguments */ 79 | foreach($arg as $a) { 80 | array_push($part, urlencode($a)); 81 | } 82 | 83 | /* Nothing is default: add controller and view */ 84 | array_unshift($part, urlencode($controller), urlencode($action)); 85 | } 86 | 87 | /* Only add format suffix if the format is non-default (ie, strip .html) */ 88 | $fmt_suff = (($fmt != $config['default']['format'])? "." . urlencode($fmt) : ""); 89 | return $config['webroot'] . implode("/", $part) . $fmt_suff; 90 | } 91 | 92 | public static function escapeHTML($inp) { 93 | return htmlentities($inp, null, 'UTF-8'); 94 | } 95 | } 96 | 97 | ?> 98 | -------------------------------------------------------------------------------- /lib/web/controller/Account_controller.php: -------------------------------------------------------------------------------- 1 | "Ou"); 21 | try { 22 | $data['Account'] = Account_api::get($account_id); 23 | } catch(Exception $e) { 24 | $data['error'] = '404'; 25 | } 26 | 27 | try { 28 | if(isset($_POST['action'])) { 29 | $action = $_POST['action']; 30 | switch($action) { 31 | case "delete": 32 | $owner_id = $data['Account'] -> owner_id; 33 | Account_api::delete($data['Account'] -> account_id); 34 | Web::redirect(Web::constructURL("AccountOwner", "view", array($owner_id), "html")); 35 | break; 36 | case "disable": 37 | $data['Account'] = Account_api::disable($data['Account'] -> account_id); 38 | break; 39 | case "enable": 40 | $data['Account'] = Account_api::enable($data['Account'] -> account_id); 41 | break; 42 | } 43 | } 44 | } catch(Exception $e) { 45 | $data['message'] = $e -> getMessage(); 46 | } 47 | 48 | return $data; 49 | } 50 | 51 | public static function create($owner_id) { 52 | $data = array('current' => "Ou"); 53 | try { 54 | $data['AccountOwner'] = AccountOwner_api::get($owner_id); 55 | $data['ListDomain'] = ListDomain_model::list_by_domain_enabled('1'); 56 | foreach($data['ListDomain'] as $key => $domain) { 57 | $domain -> populate_list_ListServiceDomain(); 58 | } 59 | 60 | if(isset($_POST['account_login']) && isset($_POST['domain_id'])) { 61 | try { 62 | /* Get basic data */ 63 | $domain_id = $_POST['domain_id']; 64 | if($domain_id == "" || !isset($_POST['services-'. $_POST['domain_id']])) { 65 | throw new Exception("Please select a domain for the account"); 66 | } 67 | $account_login = $_POST['account_login']; 68 | $service_id = $_POST['services-'. $domain_id]; 69 | if($service_id == "") { 70 | throw new Exception("Please select a service for the account"); 71 | } 72 | 73 | /* Attempt to create the account */ 74 | Account_api::create($owner_id, $account_login, $domain_id, $service_id); 75 | Web::redirect(Web::constructURL("AccountOwner", "view", array((int)$data['AccountOwner'] -> owner_id), "html")); 76 | } catch(Exception $e) { 77 | $data['message'] = $e -> getMessage(); 78 | } 79 | } 80 | } catch(Exception $e) { 81 | $data['error'] = '404'; 82 | } 83 | return $data; 84 | } 85 | 86 | public static function search($term) { 87 | if(isset($_POST['term'])) { 88 | $term = $_POST['term']; 89 | } 90 | $results = Account_model::search($term); 91 | return Array("current" => "Ou", "Accounts" => $results); 92 | } 93 | 94 | public static function rename($account_id) { 95 | $data = array('current' => "Ou"); 96 | try { 97 | $data['Account'] = Account_api::get($account_id); 98 | } catch(Exception $e) { 99 | $data['error'] = '404'; 100 | } 101 | 102 | if(isset($_POST['account_login'])) { 103 | try { 104 | $account_login = $_POST['account_login']; 105 | Account_api::rename($data['Account'] -> account_id, $account_login); 106 | Web::redirect(Web::constructURL("Account", "view", array($data['Account'] -> account_id), "html")); 107 | } catch(Exception $e) { 108 | $data['message'] = $e -> getMessage(); 109 | } 110 | } 111 | return $data; 112 | } 113 | } 114 | ?> -------------------------------------------------------------------------------- /lib/web/controller/ActionQueue_controller.php: -------------------------------------------------------------------------------- 1 | "ActionQueue", "AQ" => ActionQueue_api::getOverview()); 16 | } 17 | 18 | public static function log() { 19 | return array("current" => "ActionQueue", "Log" => ActionQueue_api::getLog(500)); 20 | } 21 | } -------------------------------------------------------------------------------- /lib/web/controller/Ou_controller.php: -------------------------------------------------------------------------------- 1 | 'Ou'); 18 | $root = Ou_api::getHierarchy(); 19 | $data['Ou_root'] = $root; 20 | 21 | /* Account for unknown ID of root */ 22 | if($ou_id == null) { 23 | $ou_id = $root -> ou_id; 24 | } 25 | 26 | try { 27 | $data['Ou'] = Ou_api::get($ou_id); 28 | } catch(Exception $e) { 29 | $data['error'] = "404"; 30 | return $data; 31 | } 32 | 33 | if(isset($_POST['action'])) { 34 | if($_POST['action'] == "delete") { 35 | try { 36 | Ou_api::delete($ou_id); 37 | Web::redirect(Web::constructURL("Ou", "view", array($data['Ou'] -> ou_parent_id), "html")); 38 | return $data; 39 | } catch(Exception $e) { 40 | $data['message'] = $e -> getMessage(); 41 | } 42 | } 43 | } 44 | return $data; 45 | } 46 | 47 | public static function create($ou_id = null) { 48 | /* Verify that correct arguments were passed */ 49 | $data = array('current' => 'Ou'); 50 | if($ou_id == null) { 51 | $data['error'] = '404'; 52 | return $data; 53 | } 54 | 55 | /* Verify parent exists */ 56 | if(!$parent = Ou_model::get($ou_id)) { 57 | return $data; 58 | } 59 | $data['Parent'] = $parent; 60 | 61 | if(isset($_POST['ou_name'])) { 62 | $ou_name = $_POST['ou_name']; 63 | try { 64 | $ou = ou_api::create($ou_name, $parent -> ou_id); 65 | Web::redirect(Web::constructURL("Ou", "view", array($ou -> ou_parent_id), "html")); 66 | } catch(Exception $e) { 67 | $data['message'] = $e -> getMessage(); 68 | } 69 | } 70 | return $data; 71 | } 72 | 73 | public static function rename($ou_id = null) { 74 | $data = array('current' => 'Ou'); 75 | $root = Ou_api::getHierarchy(); 76 | $data['Ou_root'] = $root; 77 | 78 | if($ou_id == null || $ou_id == $root -> ou_id) { 79 | /* Root cannot be renamed! */ 80 | $data['error'] = "404"; 81 | return $data; 82 | } 83 | 84 | try { 85 | $data['Ou'] = Ou_api::get($ou_id); 86 | } catch(Exception $e) { 87 | $data['error'] = "404"; 88 | return $data; 89 | } 90 | 91 | if(isset($_POST['ou_name'])) { 92 | try { 93 | Ou_api::rename($data['Ou'] -> ou_id, $_POST['ou_name']); 94 | Web::redirect(Web::constructURL("Ou", "view", array($data['Ou'] -> ou_id), "html")); 95 | } catch(Exception $e) { 96 | $data['message'] = $e -> getMessage(); 97 | } 98 | } 99 | 100 | return $data; 101 | } 102 | 103 | public static function move($ou_id = null) { 104 | $data = array('current' => 'Ou'); 105 | $root = Ou_api::getHierarchy(); 106 | $data['Ou_root'] = $root; 107 | 108 | if($ou_id == null || $ou_id == $root -> ou_id) { 109 | /* Root cannot be moved! */ 110 | $data['error'] = "404"; 111 | return $data; 112 | } 113 | 114 | try { 115 | $data['Ou'] = Ou_api::get($ou_id); 116 | } catch(Exception $e) { 117 | $data['error'] = "404"; 118 | } 119 | 120 | if(isset($_POST['ou_id']) && isset($_POST['ou_parent_id'])) { 121 | $ou_id = (int)$_POST['ou_id']; 122 | $ou_parent_id = (int)$_POST['ou_parent_id']; 123 | try { 124 | Ou_api::move($ou_id, $ou_parent_id); 125 | Web::redirect(Web::constructURL("Ou", "view", array($ou_parent_id), "html")); 126 | } catch(Exception $e) { 127 | $data['message'] = $e -> getMessage(); 128 | } 129 | } 130 | return $data; 131 | } 132 | } -------------------------------------------------------------------------------- /lib/web/controller/Page_controller.php: -------------------------------------------------------------------------------- 1 | 'Dashboard'); 18 | if(isset($_POST['owner_id']) && isset($_POST['uname'])) { 19 | /* Selected a user */ 20 | $owner_id = $_POST['owner_id']; 21 | $uname = $_POST['uname']; 22 | try { 23 | if($owner_id == "") { 24 | /* Lookup */ 25 | $owner = AccountOwner_api::searchLogin($uname); 26 | } else { 27 | $owner = AccountOwner_api::get($owner_id); 28 | } 29 | Web::redirect(Web::constructURL("AccountOwner", "view", array($owner -> owner_id), "html")); 30 | } catch(Exception $e) { 31 | $data['message'] = $e -> getMessage(); 32 | } 33 | } else if(isset($_POST['group_cn']) && isset($_POST['gname'])) { 34 | /* Selected a group */ 35 | $group_cn = $_POST['group_cn']; 36 | $gname = $_POST['gname']; 37 | try { 38 | if($group_cn == "") { 39 | $group = UserGroup_api::get_by_group_cn($gname); 40 | } else { 41 | $group = UserGroup_api::get_by_group_cn($group_cn); 42 | } 43 | Web::redirect(Web::constructURL("UserGroup", "view", array($group -> group_id), "html")); 44 | } catch(Exception $e) { 45 | $data['message'] = $e -> getMessage(); 46 | } 47 | } 48 | 49 | if(isset($_POST['selected'])) { 50 | $data['selected'] = $_POST['selected']; 51 | } 52 | 53 | return $data; 54 | } 55 | 56 | public static function logout() { 57 | if(isset($_SESSION)) { 58 | session_destroy(); 59 | } 60 | Web::redirect(Web::constructURL('Page', 'view', array(''), 'html')); 61 | exit(0); 62 | } 63 | } 64 | 65 | ?> 66 | -------------------------------------------------------------------------------- /lib/web/controller/Utility_controller.php: -------------------------------------------------------------------------------- 1 | 'Utility', 'util' => Auth::getConfig('Util')); 12 | } 13 | } 14 | ?> -------------------------------------------------------------------------------- /lib/web/login/form/account.inc: -------------------------------------------------------------------------------- 1 || Services | 44 |||
|---|---|---|
| Service | 47 |Login | 48 |Domain | 49 |
| ".web::escapeHTML($account -> Service -> service_name)." | "; 54 | echo "".web::escapeHTML($account -> account_login)." | "; 55 | echo "".web::escapeHTML($account -> account_domain)." | "; 56 | echo "
Changing a login name will affect the user's ability to log in! Not only will they have to use a different username, but it will seriously break their windows profiles, and will confuse some email clients. This should only be done if absolutely necessary
16 |To correct Windows user profiles, you will need to edit the logon name stored in the registry.
17 |If you add a user here, then they will be given the permissions 11 | of the group, and receive emails which are sent to the group.
12 |You can relocate a user to a different Organzational Unit for 29 | housekeeping. This will not affect email distribution, but some 30 | basic permissions (such as the ability to log in or connect to the 31 | wifi) will be changed if you move a user between the top-level 32 | units.
33 |What does this reset?
26 |This resets the password for each of the services that this user has an account on. The password must meet the constraints for all of those services in order to be valid.
27 |If you are trying to log in to something specific, then after this is set, you may wish to check the "Action Queue" to see whether the change has been applied to that service.
28 |Changing a user's name will update their full-name, as it is displayed in different places.
17 | 18 |Changing the user's login for a specific account (much more disruptive) is done by clicking on the account.
19 |9 | What is the ActionQueue? 10 |
11 |Because this system manages multiple back-end account-keeping 12 | systems, it would be really slow to use if you had to wait for it 13 | all the time!
14 |While you are working, Auth puts together a "Todo" list with all 15 | the things you've changed, and applies the changes in its own time.
16 |You can find all sorts of extra detail in the ActionQueue log file."?> 17 |
The ActionQueue is empty.
Items are shown in approximate execution order:
"; 28 | echo "| Action | Service | Domain | Target | Date | Attempts |
|---|---|---|---|---|---|
| " . Web::escapeHTML($aq -> action_type) . " | " . 33 | "" . Web::escapeHTML($aq -> Service -> service_name) . " | " . 34 | "" . Web::escapeHTML($aq -> ListDomain -> domain_name) . " | " . 35 | "" . Web::escapeHTML($aq -> aq_target) . " | " . 36 | "" . Web::escapeHTML($aq -> aq_date) . " | " . 37 | "" . Web::escapeHTML($aq -> aq_attempts) . " | " . 38 | "
An OU is a container where 16 | accounts and groups are kept. Unlike groups, a user can only be in 17 | one OU at a time.
18 |Moving an organizational unit puts it under a different container. This could mean that it gets very different permissions to what it had before!
30 |Changing the unit name affects every object in the organizational unit! If you rename a large unit, then you can expect issues to arise with authentication.
16 |You should only rename a unit if its current name is incorrect.
17 |You do not have permission to access this page.
3 | -------------------------------------------------------------------------------- /lib/web/view/layout/Page/404.inc: -------------------------------------------------------------------------------- 1 |Weasles have eaten our network admin system.
4 |Your request cannot be processed.
3 | -------------------------------------------------------------------------------- /lib/web/view/layout/Page/home.inc: -------------------------------------------------------------------------------- 1 | 4 | 5 | 6 |When you add a group here, everybody in that group will receive 11 | emails and inherit the permissions associated with the parent 12 | group.
13 |When you add this group to a parent group, everybody here will 11 | receive emails and inherit the permissions associated with the 12 | parent group, in addition to whatever they already have.
13 |Adding a user here will give them the permissions of the group, and will cause them to receive group emails
11 |A group is a collection of users, used for security purposes. A user account can be in many different groups, and will receive email messages sent to the group address.
21 |You can re-locate a group to a different organizational group for 30 | housekeeping. This will not affect distribution of email.
31 |Changing a group alias will affect email routing, but all users will stay in the group. Note that aliases are limited to alphanumeric characters for technical reasons.
16 |What are utilities?
9 |Utilities are simply special pages which add to the functionality of Auth.
10 |They can be written to contain extra logic for managing users in different ways, or for automating some tasks.
11 |"; 24 | } else { 25 | echo "