pastebin - collaborative debugging

pastebin is a collaborative debugging tool allowing you to share and modify code snippets while chatting on IRC, IM or a message board.

This site is developed to XHTML and CSS2 W3C standards. If you see this paragraph, your browser does not support those standards and you need to upgrade. Visit WaSP for a variety of options.

PHP ZTDev Pastebin View Help

Posted by mcutting on Fri 1st May 10:46 (modification of post by view diff)
download | new post

  1. <?php
  2.  
  3.         /********************
  4.        
  5.         A highly verbose PHP script to import new Active Directory users into Zentrack via LDAP
  6.         Adds new user accounts into Zentrack's database users table (zentrack_users)
  7.         Updates existing user accounts / Removes accounts that no longer exist
  8.        
  9.         ********************/
  10.  
  11.         // AD/LDAP settings
  12.         // AD USER SHOULD BE AN ACCOUNT THAT HAS RIGHTS TO READ FROM ACTIVE DIRECTORY
  13.        
  14.         // ENTER THE ADDRESS OF YOUR LDAP SERVER HERE
  15.   $dc = "ldap://";
  16.   // ENTER THE FULL AD PATH OF YOUR USER HERE
  17.         $user = "";
  18.         // ENTER THE PASSWORD OF YOUR AD USER HERE
  19.         $pw = "";
  20.         //ENTER THE FULL DN FOR YOUR DOMAIN, EXAMPLE dc=microsoft,dc=com
  21.         $dn = "";
  22.         // ENTER ATTRIBUTES THAT YOU WISH TO PULL FROM AD, FOR EXAMPLE "displayname" AND "givenname" ETC
  23.         $attributes = array ("cn", "samaccountname", "displayname", "givenname", "sn", "mail");
  24.         // ENTER FILTER ATTRIBUTES HERE, FOR EXAMPLE "person" AND "telephoneNumber"
  25.         $filter = "(&(objectClass=person)(objectCategory=person)(telephoneNumber=*)(mail=*youremail.com)(cn=*))";
  26.  
  27.         // MySQL settings
  28.         $mysql_server = "localhost";
  29.         $mysql_user = "";
  30.         $mysql_password = "";
  31.         $mysql_database = "zentrack";
  32.  
  33.  
  34. /*     
  35. The following allow us to define users in the local db that should not be deleted. 
  36. The second variable defines a string for the zentrack_users table 'notes' field
  37. that you can use to prevent deleteing users in addition to the local admin specified in adminexempt. 
  38. To use this go into your Zentrack instance, click admin, then go to the edit users page and enter the exact same text as 'otherexempt'
  39. in the NOTES field for any users AFTER they are populated into the DB. 
  40. You could also modify the code below to use this field to prevent updates as well.
  42. If you don't want to keep any non-AD users just set these to a empty strings.
  43. */
  44.         $adminexempt = "Administrator";     // will be compared against the login field of zentrack_users
  45.         $otherexempt = "DO NOT DELETE";   // will be compared against the notes field of zentrack_users
  46.  
  47. // Begin code to do the import/update
  48.        
  49.         echo "<HTML>\n<HEAD><TITLE>Active Directory >> Zentrack Import</TITLE></HEAD>\n<BODY>\n";
  50.         echo "<b>Active Directory >> Zentrack Users Database Import Tool</b> <BR><BR>\n";
  51.   echo "Run on: " . date(DATE_RFC822) . "<BR><BR>\n";
  52.  
  53.         // Query AD for user accounts
  54.         $ad = ldap_connect($dc) or die("Couldn't connect to AD!");
  55.         echo "Connected to AD via LDAP<br>\n";
  56.  
  57.         // Required for AD/Server 2003?
  58.         ldap_set_option($ad, LDAP_OPT_PROTOCOL_VERSION, 3);
  59.   ldap_set_option($ldapconn, LDAP_OPT_REFERRALS, 0);
  60.  
  61.         $bd = ldap_bind($ad,$user,$pw) or die("Couldn't bind to AD!");
  62.         echo "Bound to AD via LDAP<br>\n";
  63.  
  64.         // Recursive Query:
  65.         $ldapResults = ldap_search($ad, $dn, $filter, $attributes);
  66.  
  67.         // Same-Level Query:
  68.         // Uncomment the following line and comment out the line above to search only the same OU level
  69.         // $ldapResults = ldap_list($ad, $dn, $filter, $attributes);
  70.  
  71.         $entries = ldap_get_entries($ad, $ldapResults);
  72.         echo "Found ".$entries["count"]." entries in AD via LDAP Search<br>\n";
  73.  
  74.         // Match AD users accounts to MySQL user table
  75.         $db = mysql_connect($mysql_server,$mysql_user,$mysql_password);
  76.         if (!$db) {
  77.                 die('Could not connect: ' . mysql_error());
  78.         }
  79.         echo "Connected to MySQL server ".$mysql_server."<br>\n";
  80.  
  81.         mysql_select_db($mysql_database, $db);
  82.  
  83.         // begin loop through the DB usernames and if they aren't in AD delete them
  84.         $sql = "SELECT login,notes FROM zentrack_users";
  85.         $result = mysql_query($sql, $db);
  86.                 if (!$result)
  87.                 {
  88.                         $message  = 'Invalid query: ' . mysql_error($db) . "<br>";
  89.                         $message .= 'Whole query: ' . $sql  . "<BR>";
  90.                         die($message);
  91.                 }
  92.  
  93.         $deletedcount = 0;
  94.         $totalrows = mysql_num_rows($result);
  95.  
  96.         echo "Found " . $totalrows . " entries in DB via SQL Search<br>\n";
  97.        
  98.         echo "<br>";
  99.        
  100.         while ($row = mysql_fetch_array($result))
  101.                 {
  102.                 $namearray[] = strtolower($row['login']);
  103.                 $otherarray[] = $row['notes'];
  104.                 }
  105.  
  106.         for ($j=0; $j<($totalrows); $j++)
  107.                 {
  108.                 $inAD = false;
  109.                 $exemptuser = false;
  110.                 if ($namearray[$j] == $adminexempt)
  111.                         {
  112.                         echo "<br>Admin User : " . $namearray[$j] . "<br>\n";
  113.                         $exemptuser = true;
  114.                         }
  115.                 if (($otherarray[$j] == $otherexempt) && (!$exemptuser))
  116.                         {
  117.                         echo "<b>Exempt User: </b> : " . $namearray[$j] . "<BR>\n";
  118.                                         $exemptuser = true;
  119.                         }
  120.                 if (!$exemptuser)
  121.                         {
  122.                         for ($i=0; $i<$entries["count"]; $i++)
  123.                                 {
  124.                                 if ($namearray[$j] == strtolower($entries[$i]["samaccountname"][0]))
  125.                                         {
  126.                                         $i=$entries["count"];
  127.                                         $inAD=true;                         
  128.                                         }
  129.                                 }
  130.                         if (!($inAD))
  131.                                 {
  132.                                 DeleteUser( $j, $db, $namearray[$j]);
  133.                                 ++$deletedcount;
  134.                                 }
  135.                         }
  136.                 }
  137.         // end loop through the DB usernames and if they aren't in AD delete them
  138.                        
  139.         $usersadded=0;
  140.         $usersupdated=0;
  141.  
  142.         echo "<BR>\n"; 
  143.  
  144.         for ($i=0; $i<$entries["count"]; $i++)
  145.                 {
  146.                 // look up AD user account in MySQL database
  147.                 // add to database if user does not exist in database already
  148.                 // update all user DB fields if they are already in the database so the DB matches AD
  149.                 // PLEASE NOTE:  All "index" values must be in lower-case!  This is a PHP array handling quirk?
  150.  
  151.                 $username = $entries[$i]["samaccountname"][0];
  152.  
  153.                 if (DatabaseLookup($username, $db))
  154.                         {
  155. //                  echo $i." : AD user: ".$username." found in database<br>\n";
  156.                         if (UpdateUser( $i, $db,
  157.                                 $entries[$i]["givenname"][0],
  158.                                 $entries[$i]["sn"][0],
  159.                                 $entries[$i]["samaccountname"][0],
  160.                                 $entries[$i]["mail"][0]))
  161.  
  162.                                 {
  163.                                 ++$usersupdated;
  164.                                 }
  165.                         }
  166.                 else
  167.                         {
  168. //          echo $i." : AD user: ".$username." <b><i>not</i></b> found in database<br>\n";
  169.                 AddUser( $i, $db,
  170.                                 $entries[$i]["givenname"][0],
  171.                                 $entries[$i]["sn"][0],
  172.                                 $entries[$i]["samaccountname"][0],
  173.               $entries[$i]["mail"][0]);
  174.  
  175.                         ++$usersadded; 
  176.                         }
  177.         }
  178.        
  179.         echo "<br>";
  180.        
  181.         if (($deletedcount>0)||($usersadded>0)||($usersupdated>0)) { echo "<BR>\n"; }
  182.         echo "Number of users deleted : " . $deletedcount . "<BR>\n";
  183.         echo "Number of users added : " . $usersadded . "<br>\n";
  184.         echo "Number of users updated : " . $usersupdated . "<br>\n";
  185.         echo "</BODY></HTML>\n";
  186.  
  187.         ldap_unbind($ad);
  188.         mysql_close($db);
  189.  
  190. //
  191. // DatabaseLookup - Check for match between AD account and Users table in MySQL
  192. //
  193. function DatabaseLookup( $cn, $db ) {
  194.         // check for match against mysql database
  195.         $sql = "SELECT login FROM zentrack_users WHERE login = '".mysql_real_escape_string($cn)."'";
  196.  
  197.         $result = mysql_query($sql, $db);
  198.         if (!$result) {
  199.                 $message  = 'Invalid query: ' . mysql_error($db) . "<br>";
  200.                 $message .= 'Whole query: ' . $sql . "<BR>";
  201.                 die($message);
  202.         }
  203.         if (mysql_error($db) != "")
  204.                 {
  205.                 echo mysql_error($db) . "<BR>";
  206.                 }
  207.         if (mysql_errno($db) != 0)
  208.                 {
  209.                 echo mysql_errno($db) . "<BR>";
  210.                 }
  211.         $num_rows = mysql_num_rows($result);
  212.         return ($num_rows > 0);
  213. }
  214.  
  215.  
  216.  
  217. // AddUser - Adds record to MySQL Zentrack Users table
  218.  
  219. function AddUser ($i, $db, $fname, $lname, $uname, $email_add) {
  220.         $sql =
  221.         "INSERT INTO zentrack_users (fname, lname, login, initials, access_level, email) VALUES (" .
  222.                 " '" . mysql_real_escape_string($fname) . "', " .
  223.                 " '" . mysql_real_escape_string($lname) . "', " .
  224.                 " '" . mysql_real_escape_string(strtolower($uname)) . "', " .
  225.                 " '" . mysql_real_escape_string(strtolower($uname)) . "', " .
  226.                 " '" . mysql_real_escape_string('2') . "', " .
  227.                 " '" . mysql_real_escape_string(strtolower($email_add)) . "')";
  228.  
  229.         $result = mysql_query($sql, $db);
  230.         if (mysql_error($db) != "")
  231.                 {
  232.                 echo mysql_error($db) . "<BR>";
  233.                 }
  234.         if (mysql_errno($db) != 0)
  235.                 {
  236.                 echo mysql_errno($db) . "<BR>";
  237.                 }
  238.         if (mysql_affected_rows()>0)
  239.                 {
  240.                 echo "LDAP user " . $i . " : " . $sql . "<br>\n" ;
  241.                 }
  242.         //echo $i . " : INSERT effected <b>" .mysql_affected_rows(). " rows</b><br>\n";
  243. }
  244.  
  245.  
  246. // UpdateUser - Updates record in MySQL Zentrack Users table
  247.  
  248. function UpdateUser ($i, $db, $fname, $lname, $uname, $email_add) {
  249.         $sql =
  250.                 "UPDATE zentrack_users SET
  251.                 fname='" . mysql_real_escape_string($fname) . "',
  252.                 lname='" . mysql_real_escape_string($lname) . "',
  253.                 email='" . mysql_real_escape_string($email_add) . "',
  254.                 initials='" . mysql_real_escape_string(strtolower($uname)) . "'
  255.                 WHERE login='" . mysql_real_escape_string($uname) . "'";
  256.  
  257.         $result = mysql_query($sql, $db);
  258.         if (mysql_error($db) != "")
  259.                 {
  260.                 echo mysql_error($db) . "<BR>";
  261.                 }
  262.         if (mysql_errno($db) != 0)
  263.                 {
  264.                 echo mysql_errno($db) . "<BR>";
  265.                 }
  266.         if (mysql_affected_rows()>0)
  267.                 {
  268.                 echo "LDAP user " . $i . " : " . $sql . "<br>\n" ;
  269.                 return true;
  270.                 }
  271.         //echo $i . " : Update effected <b>" .mysql_affected_rows(). " rows</b><br>\n";
  272. }
  273.  
  274.  
  275.  
  276. // DeleteUser - Deletes records from the MySQL Zentrack Users table
  277.  
  278. function DeleteUser ($i, $db, $uname) {
  279.         $sql = "DELETE FROM zentrack_users WHERE login = '" . $uname . "'";
  280.         $result = mysql_query($sql, $db);
  281.         if (mysql_error($db) != "")
  282.                 {
  283.                 echo mysql_error($db) . "<BR>";
  284.                 }
  285.         if (mysql_errno($db) != 0)
  286.                 {
  287.                 echo mysql_errno($db) . "<BR>";
  288.                 }
  289.         if (mysql_affected_rows()>0)
  290.                 {
  291.                 echo "LDAP user " . $i . " : " . $sql . "<br>\n" ;
  292.                 }
  293.         //echo $i . " : Delete effected <b>" .mysql_affected_rows(). " rows</b><br>\n";
  294. }
  295.        
  296. ?>

Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.

Syntax highlighting:

To highlight particular lines, prefix each line with @@


Remember me