LDAP status module that checks multiple LDAPs for connectivity

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1158 44740490-163a-0410-bde0-09ae8108e29a

modules/ldapstatus/templates/default/ldapstatus.php

+<?php
+$this->data['header'] = 'LDAP status page';
+$this->includeAtTemplateBase('includes/header.php');
+
+
+?>
+<div id="content">
+
+<h2>LDAP test</h2>
+
+<table style="width: 100%">
+	<tr>
+	<th>Name of institusion</th>
+	<th>Conf</th>
+	<th>Meta</th>
+	<th>Ping</th>
+	<th>Admin bind()</th>
+	<th>Search bogus</th>
+	<th>Search test</th>
+	<th>Bind test</th>
+	<th>GetAttr test</th>
+	</tr>
+
+<?php
+
+function showRes($key, $res, $template) {
+	echo('<td>');
+	if (array_key_exists($key, $res)) {
+		if ($res[$key][0]) {
+			echo '<img src="/' . $template->data['baseurlpath'] . 'resources/icons/accept.png" ' .
+				'alt="' . htmlspecialchars($res[$key][1]) .  '" 
+				title="' . htmlspecialchars($res[$key][1]) .  '" 
+				/>';
+		} else {
+			echo '<img src="/' . $template->data['baseurlpath'] . 'resources/icons/delete.png" ' .
+				'alt="' . htmlspecialchars($res[$key][1]) .  '" 
+				title="' . htmlspecialchars($res[$key][1]) .  '" 
+				/>';
+		}
+	} else {
+		echo('<span style="color: #eee;">NA</span>');
+	}
+	echo('</td>');
+}
+
+
+foreach($this->data['results'] as $orgkey => $res) {
+	echo('<tr>');
+#	print_r($this->data['orgconfig']); exit;
+	echo('<td>' . htmlspecialchars($this->getTranslation($this->data['orgconfig'][$orgkey]['description'])) . '</td>');
+	showRes('config',  $res, $this);
+	showRes('configMeta',  $res, $this);
+	showRes('ping',  $res, $this);
+	showRes('adminUser',  $res, $this);
+	showRes('ldapSearchBogus',  $res, $this);
+	showRes('ldapSearchTestUser',  $res, $this);
+	showRes('ldapBindTestUser',  $res, $this);
+	showRes('ldapGetAttributesTestUser',  $res, $this);
+	echo('</tr>');
+}
+?>
+</table>
+<?php $this->includeAtTemplateBase('includes/footer.php'); ?>
\ No newline at end of file

modules/ldapstatus/www/index.php

+<?php
+
+
+$config = SimpleSAML_Configuration::getInstance();
+$ldapconfig = $config->copyFromBase('loginfeide', 'config-login-feide.php');
+
+
+$orgs = $ldapconfig->getValue('orgldapconfig');
+
+#echo '<pre>'; print_r($orgs); exit;
+
+function checkConfig($conf, $req) {
+	$err = array();
+	foreach($req AS $r) {
+		if (!array_key_exists($r, $conf)) $err[] = $r;
+	}
+	if (count($err) > 0) {
+		return array(FALSE, 'Missing: ' . join(', ', $err));
+	}
+	return array(TRUE, NULL);	
+}
+
+$results = array();
+
+foreach ($orgs AS $orgkey => $orgconfig) {
+
+	$results[$orgkey] = array();
+	
+
+	$results[$orgkey]['config'] = checkConfig($orgconfig, array('description', 'searchbase', 'hostname', 'attributes'));
+	$results[$orgkey]['configMeta'] = checkConfig($orgconfig, array('enable_tls', 'testUser', 'testPassword', 'contactMail', 'contactURL'));
+	
+	$url = parse_url($orgconfig['hostname']);
+// print_r($orgconfig['hostname']);
+// print_r($url); exit;
+	$pingreturn = NULL;
+	$pingoutput = NULL;
+	exec('ping -o -t 1 -c 1 ' . escapeshellcmd($url['host']), $pingoutput, $pingreturn);
+#	echo $pingreturn; exit;
+	if ($pingreturn == '0') {
+		$results[$orgkey]['ping'] = array(TRUE,join("\r\n", $pingoutput));
+	} else {
+		$results[$orgkey]['ping'] = array(FALSE,join("\r\n", $pingoutput));
+		continue;
+	}
+	
+	#continue;
+	
+	// LDAP Connect
+	try {
+		$ldap = new SimpleSAML_Auth_LDAP($orgconfig['hostname'], $orgconfig['enable_tls']);
+		$results[$orgkey]['connect'] = array(TRUE,NULL);
+	} catch (Exception $e) {
+		$results[$orgkey]['connect'] = array(FALSE,$e->getMessage());
+		continue;
+	}
+
+	// Bind as admin user
+	if (isset($orgconfig['adminUser'])) {
+		try {
+			$ldap->bind($orgconfig['adminUser'], $orgconfig['adminPassword']);
+			$results[$orgkey]['adminBind'] = array(TRUE,NULL);
+		} catch (Exception $e) {
+			$results[$orgkey]['adminBind'] = array(FALSE,$e->getMessage());
+			continue;
+		}
+	}
+	
+	
+	$eppn = 'test@feide.no';
+	// Search for bogus user
+	try {
+		$dn = $ldap->searchfordn($orgconfig['searchbase'], 'eduPersonPrincipalName', $eppn, TRUE);
+		$results[$orgkey]['ldapSearchBogus'] = array(TRUE,NULL);
+	} catch (Exception $e) {
+		$results[$orgkey]['ldapSearchBogus'] = array(FALSE,$e->getMessage());
+		continue;
+	}
+
+
+	// If test user is available
+	if (array_key_exists('testUser', $orgconfig)) {
+
+		// Try to search for DN of test account
+		try {
+			$dn = $ldap->searchfordn($orgconfig['searchbase'], 'eduPersonPrincipalName', $eppn);
+			$results[$orgkey]['ldapSearchTestUser'] = array(TRUE,NULL);
+		} catch (Exception $e) {
+			$results[$orgkey]['ldapSearchTestUser'] = array(FALSE,$e->getMessage());
+			continue;
+		}
+		
+		if ($ldap->bind($orgconfig['testUser'], $orgconfig['testPassword'])) {
+			$results[$orgkey]['ldapBindTestUser'] = array(TRUE,NULL);
+			
+		} else {
+			$results[$orgkey]['ldapBindTestUser'] = array(FALSE,NULL);
+			continue;
+		}
+
+		try {
+			$attributes = $ldap->getAttributes($dn, $orgconfig['attributes'], $ldapconfig->getValue('attributesize.max', NULL));
+			$results[$orgkey]['ldapGetAttributesTestUser'] = array(TRUE,NULL);
+		} catch(Exception $e) {
+			$results[$orgkey]['ldapGetAttributesTestUser'] = array(FALSE,$e->getMessage());
+		}
+	}
+}
+#echo '<pre>'; print_r($results); exit;
+
+$t = new SimpleSAML_XHTML_Template($config, 'ldapstatus:ldapstatus.php');
+$t->data['results'] = $results;
+$t->data['orgconfig'] = $orgs;
+$t->show();
+exit;
+
+?>