ldap_servers.settings.inc in Lightweight Directory Access Protocol (LDAP) 7.2

Admin interface for general ldap api settings.

File

ldap_servers/ldap_servers.settings.inc

<?php

/**
 * @file
 * Admin interface for general ldap api settings.
 */

/**
 *
 */
function ldap_servers_settings() {
  ldap_servers_module_load_include('inc', 'ldap_servers', 'ldap_servers.functions');
  if (!ldap_servers_ldap_extension_loaded()) {
    drupal_set_message(t('PHP LDAP Extension is not loaded.'), "warning");
  }
  $form['#title'] = "Configure LDAP Preferences";
  $options = ldap_servers_encrypt_types();

  /**  when this is changed, need to decrypt and possibly encrypt pwd in newly selected format
   *   ... thus default needs to be "No Encryption" to avoid confusion.
   */
  $form['previous_encryption'] = [
    '#type' => 'hidden',
    '#default_value' => variable_get('ldap_servers_encryption', LDAP_SERVERS_ENC_TYPE_CLEARTEXT),
  ];
  $form['encryption'] = [
    '#type' => 'fieldset',
    '#title' => t('Encryption'),
  ];
  $form['encryption']['ldap_servers_encryption'] = [
    '#type' => 'select',
    '#options' => $options,
    '#title' => t('Obfuscate LDAP Passwords?'),
    '#default_value' => variable_get('ldap_servers_encryption', LDAP_SERVERS_ENC_TYPE_CLEARTEXT),
    '#description' => t('With obfuscation enabled, passwords will be stored in encrypted form and decrypted with the site hash.'),
  ];

  // Disable the form field and explain this to the user.
  if (count($options) == 1) {
    $form['encryption']['ldap_servers_encryption']['#disabled'] = TRUE;
    $form['encryption']['ldap_servers_encryption']['#description'] = ' <strong>' . t('Obfuscation is not supported on this web server.') . '</strong>';
  }
  $form = system_settings_form($form);

  // Needs to be first.
  array_unshift($form['#submit'], 'ldap_servers_settings_submit');
  return $form;
}

/**
 *
 */
function ldap_servers_settings_submit($form, &$form_state) {
  if ($form_state['submitted']) {
    $new_encyption = $form_state['values']['ldap_servers_encryption'];
    $old_encyption = $form_state['values']['previous_encryption'];

    // Use db instead of functions to avoid classes encryption and decryption.
    if ($new_encyption != $old_encyption) {
      $servers = db_query("SELECT sid, bindpw FROM {ldap_servers} WHERE bindpw is not NULL AND bindpw <> ''")
        ->fetchAllAssoc('sid');
      foreach ($servers as $sid => $server) {
        if ($server->bindpw != '') {
          $decrypted_bind_pwd = ldap_servers_decrypt($server->bindpw, $old_encyption);
          $rencrypted = ldap_servers_encrypt($decrypted_bind_pwd, $new_encyption);
        }
        else {
          $rencrypted = '';
        }
        db_query("UPDATE {ldap_servers} SET bindpw = :bindpw WHERE sid = :sid", [
          ':bindpw' => $rencrypted,
          ':sid' => $sid,
        ]);
      }
    }
  }
}

Functions

Name	Description
ldap_servers_settings
ldap_servers_settings_submit