2024-10-31 20:18:37 +01:00
<!DOCTYPE html> < html lang = "fr" >
< head > < meta charset = "utf-8" >
< meta http-equiv = "X-UA-Compatible" content = "IE=edge" >
< meta name = "viewport" content = "width=device-width, initial-scale=1, user-scalable=no" > < title > OpenLDAP installation et configuration annuaire - YannStatic< / title >
< meta name = "description" content = "OpenLDAP Debian" >
< link rel = "canonical" href = "https://static.rnmkcy.eu/2019/10/05/OpenLDAP-installation-configuration-annuaire.html" > < link rel = "alternate" type = "application/rss+xml" title = "YannStatic" href = "/feed.xml" >
<!-- - include head/favicon.html - -->
< link rel = "shortcut icon" type = "image/png" href = "/assets/favicon/favicon.png" > < link rel = "stylesheet" href = "/assets/css/main.css" > < link rel = "stylesheet" href = "https://use.fontawesome.com/releases/v5.0.13/css/all.css" > <!-- start custom head snippets --> < link rel = "stylesheet" href = "/assets/css/expand.css" >
<!-- end custom head snippets --> < script > ( f u n c t i o n ( ) {
window.isArray = function(val) {
return Object.prototype.toString.call(val) === '[object Array]';
};
window.isString = function(val) {
return typeof val === 'string';
};
window.hasEvent = function(event) {
return 'on'.concat(event) in window.document;
};
window.isOverallScroller = function(node) {
return node === document.documentElement || node === document.body || node === window;
};
window.isFormElement = function(node) {
var tagName = node.tagName;
return tagName === 'INPUT' || tagName === 'SELECT' || tagName === 'TEXTAREA';
};
window.pageLoad = (function () {
var loaded = false, cbs = [];
window.addEventListener('load', function () {
var i;
loaded = true;
if (cbs.length > 0) {
for (i = 0; i < cbs.length ; i + + ) {
cbs[i]();
}
}
});
return {
then: function(cb) {
cb & & (loaded ? cb() : (cbs.push(cb)));
}
};
})();
})();
(function() {
window.throttle = function(func, wait) {
var args, result, thisArg, timeoutId, lastCalled = 0;
function trailingCall() {
lastCalled = new Date;
timeoutId = null;
result = func.apply(thisArg, args);
}
return function() {
var now = new Date,
remaining = wait - (now - lastCalled);
args = arguments;
thisArg = this;
if (remaining < = 0) {
clearTimeout(timeoutId);
timeoutId = null;
lastCalled = now;
result = func.apply(thisArg, args);
} else if (!timeoutId) {
timeoutId = setTimeout(trailingCall, remaining);
}
return result;
};
};
})();
(function() {
var Set = (function() {
var add = function(item) {
var i, data = this._data;
for (i = 0; i < data.length ; i + + ) {
if (data[i] === item) {
return;
}
}
this.size ++;
data.push(item);
return data;
};
var Set = function(data) {
this.size = 0;
this._data = [];
var i;
if (data.length > 0) {
for (i = 0; i < data.length ; i + + ) {
add.call(this, data[i]);
}
}
};
Set.prototype.add = add;
Set.prototype.get = function(index) { return this._data[index]; };
Set.prototype.has = function(item) {
var i, data = this._data;
for (i = 0; i < data.length ; i + + ) {
if (this.get(i) === item) {
return true;
}
}
return false;
};
Set.prototype.is = function(map) {
if (map._data.length !== this._data.length) { return false; }
var i, j, flag, tData = this._data, mData = map._data;
for (i = 0; i < tData.length ; i + + ) {
for (flag = false, j = 0; j < mData.length ; j + + ) {
if (tData[i] === mData[j]) {
flag = true;
break;
}
}
if (!flag) { return false; }
}
return true;
};
Set.prototype.values = function() {
return this._data;
};
return Set;
})();
window.Lazyload = (function(doc) {
var queue = {js: [], css: []}, sources = {js: {}, css: {}}, context = this;
var createNode = function(name, attrs) {
var node = doc.createElement(name), attr;
for (attr in attrs) {
if (attrs.hasOwnProperty(attr)) {
node.setAttribute(attr, attrs[attr]);
}
}
return node;
};
var end = function(type, url) {
var s, q, qi, cbs, i, j, cur, val, flag;
if (type === 'js' || type ==='css') {
s = sources[type], q = queue[type];
s[url] = true;
for (i = 0; i < q.length ; i + + ) {
cur = q[i];
if (cur.urls.has(url)) {
qi = cur, val = qi.urls.values();
qi & & (cbs = qi.callbacks);
for (flag = true, j = 0; j < val.length ; j + + ) {
cur = val[j];
if (!s[cur]) {
flag = false;
}
}
if (flag & & cbs & & cbs.length > 0) {
for (j = 0; j < cbs.length ; j + + ) {
cbs[j].call(context);
}
qi.load = true;
}
}
}
}
};
var load = function(type, urls, callback) {
var s, q, qi, node, i, cur,
_urls = typeof urls === 'string' ? new Set([urls]) : new Set(urls), val, url;
if (type === 'js' || type ==='css') {
s = sources[type], q = queue[type];
for (i = 0; i < q.length ; i + + ) {
cur = q[i];
if (_urls.is(cur.urls)) {
qi = cur;
break;
}
}
val = _urls.values();
if (qi) {
callback & & (qi.load || qi.callbacks.push(callback));
callback & & (qi.load & & callback());
} else {
q.push({
urls: _urls,
callbacks: callback ? [callback] : [],
load: false
});
for (i = 0; i < val.length ; i + + ) {
node = null, url = val[i];
if (s[url] === undefined) {
(type === 'js' ) & & (node = createNode('script', { src: url }));
(type === 'css') & & (node = createNode('link', { rel: 'stylesheet', href: url }));
if (node) {
node.onload = (function(type, url) {
return function() {
end(type, url);
};
})(type, url);
(doc.head || doc.body).appendChild(node);
s[url] = false;
}
}
}
}
}
};
return {
js: function(url, callback) {
load('js', url, callback);
},
css: function(url, callback) {
load('css', url, callback);
}
};
})(this.document);
})();
< / script > < script >
(function() {
var TEXT_VARIABLES = {
version: '2.2.6',
sources: {
font_awesome: 'https://use.fontawesome.com/releases/v5.0.13/css/all.css',
jquery: '/assets/js/jquery.min.js',
leancloud_js_sdk: '//cdn.jsdelivr.net/npm/leancloud-storage@3.13.2/dist/av-min.js',
chart: 'https://cdn.bootcss.com/Chart.js/2.7.2/Chart.bundle.min.js',
gitalk: {
js: 'https://cdn.bootcss.com/gitalk/1.2.2/gitalk.min.js',
css: 'https://cdn.bootcss.com/gitalk/1.2.2/gitalk.min.css'
},
valine: 'https://unpkg.com/valine/dist/Valine.min.js'
},
site: {
toc: {
selectors: 'h1,h2,h3'
}
},
paths: {
search_js: '/assets/search.js'
}
};
window.TEXT_VARIABLES = TEXT_VARIABLES;
})();
< / script >
< / head >
< body >
< div class = "root" data-is-touch = "false" >
< div class = "layout--page js-page-root" > <!-- --> < div class = "page__main js-page-main page__viewport hide-footer has-aside has-aside cell cell--auto" >
< div class = "page__main-inner" > < div class = "page__header d-print-none" > < header class = "header" > < div class = "main" >
< div class = "header__title" >
< div class = "header__brand" > < svg id = "svg" version = "1.1" xmlns = "http://www.w3.org/2000/svg" xmlns:xlink = "http://www.w3.org/1999/xlink" width = "400" height = "478.9473684210526" viewBox = "0, 0, 400,478.9473684210526" > < g id = "svgg" > < path id = "path0" d = "M308.400 56 . 805 C 306 . 970 56 . 966 , 303 . 280 57 . 385 , 300 . 200 57 . 738 C 290 . 906 58 . 803 , 278 . 299 59 . 676 , 269 . 200 59 . 887 L 260 . 600 60 . 085 259 . 400 61 . 171 C 258 . 010 62 . 428 , 256 . 198 63 . 600 , 255 . 645 63 . 600 C 255 . 070 63 . 600 , 252 . 887 65 . 897 , 252 . 598 66 . 806 C 252 . 460 67 . 243 , 252 . 206 67 . 600 , 252 . 034 67 . 600 C 251 . 397 67 . 600 , 247 . 206 71 . 509 , 247 . 202 72 . 107 C 247 . 201 72 . 275 , 246 . 390 73 . 190 , 245 . 400 74 . 138 C 243 . 961 75 . 517 , 243 . 598 76 . 137 , 243 . 592 77 . 231 C 243 . 579 79 . 293 , 241 . 785 83 . 966 , 240 . 470 85 . 364 C 239 . 176 86 . 740 , 238 . 522 88 . 365 , 237 . 991 91 . 521 C 237 . 631 93 . 665 , 236 . 114 97 . 200 , 235 . 554 97 . 200 C 234 . 938 97 . 200 , 232 . 737 102 . 354 , 232 . 450 104 . 472 C 232 . 158 106 . 625 , 230 . 879 109 . 226 , 229 . 535 110 . 400 C 228 . 933 110 . 926 , 228 . 171 113 . 162 , 226 . 434 119 . 500 C 226 . 178 120 . 435 , 225 . 795 121 . 200 , 225 . 584 121 . 200 C 225 . 373 121 . 200 , 225 . 200 121 . 476 , 225 . 200 121 . 813 C 225 . 200 122 . 149 , 224 . 885 122 . 541 , 224 . 500 122 . 683 C 223 . 606 123 . 013 , 223 . 214 123 . 593 , 223 . 204 124 . 600 C 223 . 183 126 . 555 , 220 . 763 132 . 911 , 219 . 410 134 . 562 C 218 . 443 135 . 742 , 217 . 876 136 . 956 , 217 . 599 138 . 440 C 217 . 041 141 . 424 , 215 . 177 146 . 434 , 214 . 532 146 . 681 C 214 . 240 146 . 794 , 214 . 000 147 . 055 , 214 . 000 147 . 261 C 214 . 000 147 . 467 , 213 . 550 148 . 086 , 213 . 000 148 . 636 C 212 . 450 149 . 186 , 212 . 000 149 . 893 , 212 . 000 150 . 208 C 212 . 000 151 . 386 , 208 . 441 154 . 450 , 207 . 597 153 . 998 C 206 . 319 153 . 315 , 204 . 913 150 . 379 , 204 . 633 147 . 811 C 204 . 365 145 . 357 , 202 . 848 142 . 147 , 201 . 759 141 . 729 C 200 . 967 141 . 425 , 199 . 200 137 . 451 , 199 . 200 135 . 974 C 199 . 200 134 . 629 , 198 . 435 133 . 224 , 196 . 660 131 . 311 C 195 . 363 129 . 913 , 194 . 572 128 . 123 , 193 . 870 125 . 000 C 193 . 623 123 . 900 , 193 . 236 122 . 793 , 193 . 010 122 . 540 C 190 . 863 120 . 133 , 190 . 147 118 . 880 , 188 . 978 115 . 481 C 188 . 100 112 . 928 , 187 . 151 111 . 003 , 186 . 254 109 . 955 C 185 . 358 108 . 908 , 184 . 518 107 . 204 , 183 . 847 105 . 073 C 183 . 280 103 . 273 , 182 . 497 101 . 329 , 182 . 108 100 . 753 C 181 . 719 100 . 177 , 180 . 904 98 . 997 , 180 . 298 98 . 131 C 179 . 693 97 . 265 , 178 . 939 95 . 576 , 178 . 624 94 . 378 C 178 . 041 92 . 159 , 177 . 125 90 . 326 , 175 . 023 87 . 168 C 174 . 375 86 . 196 , 173 . 619 84 . 539 , 173 . 342 83 . 486 C 172 . 800 81 . 429 , 171 . 529 79 . 567 , 170 . 131 78 . 785 C 169 . 654 78 . 517 , 168 . 697 77 . 511 , 168 . 006 76 . 549 C 167 . 316 75 . 587 , 166 . 594 74 . 800 , 166 . 402 74 . 800 C 166 . 210 74 . 800 , 164 . 869 73 . 633 , 163 . 421 72 . 206 C 160 . 103 68 . 936 , 161 . 107 69 . 109 , 146 . 550 69 . 301 C 133 . 437 69 . 474 , 128 . 581 70 . 162 , 126 . 618 72 . 124 C 126 . 248 72 . 495 , 125 . 462 72 . 904 , 124 . 872 73 . 033 C 124 . 282 73 . 163 , 123 . 088 73 . 536 , 122 . 219 73 . 863 C 121 . 349 74 . 191 , 119 . 028 74 . 638 , 117 . 061 74 . 858 C 113 . 514 75 . 254 , 109 . 970 76 . 350 , 108 . 782 77 . 419 C 107 . 652 78 . 436 , 100 . 146 80 . 400 , 97 . 388 80 . 400 C 95 . 775 80 . 400 , 93 . 167 81 . 360 , 91 . 200 82 . 679 C 90 . 430 83 . 195 , 89 . 113 83 . 804 , 88 . 274 84 . 031 C 85 . 875 84 . 681 , 78 . 799 90 . 910 , 74 . 400 96 . 243 L 73 . 400 97 . 456 73 . 455 106 . 028 C 73 . 526 117 . 055 , 74 . 527 121 . 238 , 77 . 820 124 . 263 C 78 . 919 125 . 273 , 80 . 400 127 . 902 , 80 . 400 128 . 842 C 80 . 400 129 . 202 , 81 . 075 130 . 256 , 81 . 900 131 . 186 C 83 . 563 133 . 059 , 85 . 497 136 . 346 , 86 . 039 138 . 216 C 86 . 233 138 . 886 , 87 . 203 140 . 207 , 88 . 196 141 . 153 C 89 . 188 142 . 098 , 90 . 000 143 . 104 , 90 . 000 143 . 388 C 90 . 000 144 . 337 , 92 . 129 148 . 594 , 92 . 869 149 . 123 C 93 . 271 149 . 410 , 93 . 600 149 . 831 , 93 . 600 150 . 059 C 93 . 600 150 . 286 , 93 . 932 150 . 771 , 94 . 337 151 . 136 C 94 . 743 151 . 501 , 95 . 598 153 . 004 , 96 . 237 154 . 475 C 96 . 877 155 . 947 , 97 . 760 157 . 351 , 98 . 200 157 . 596 C 98 . 640 157 . 841 , 99 . 900 159 . 943 , 101 . 000 162 . 267 C 102 . 207 164 . 817 , 103 . 327 166 . 644 , 103 . 825 166 . 876 C 104 . 278 167 . 087 , 105 . 065 168 . 101 , 105 . 573 169 . 130 C 107 . 658 173 . 348 , 108 . 097 174 . 093 , 110 . 006 176 . 647 C 111 . 103 178 . 114 , 112 . 000 179 . 725 , 112 . 000 180 . 227 C 112 . 000 181 . 048 , 113 . 425 183 . 163 , 114 . 678 184 . 200 C 115 . 295 184 . 711 , 117 . 396 188 . 733 , 117 . 720 190 . 022 C 117 . 855 190 . 562 , 118 . 603 191 . 633 , 119 . 381 192 . 402 C 120 . 160 193 . 171 , 121 . 496 195 . 258 , 122 . 351 197 . 039 C 123 . 206 198 . 820 , 124 . 167 200 . 378 , 124 . 487 200 . 501 C 124 . 807 200 . 624 , 125 . 953 202 . 496 , 127 . 034 204 . 662 C 128 . 114 206 . 828 , 129 . 676 209 . 299 , 130 . 505 210 . 153 C 131 . 333 211 . 007 , 132 . 124 212 . 177 , 132 . 262 212 . 753 C 132 . 618 214 . 239 , 134 . 291 217 . 048 , 136 . 288 219 . 5
" href="/">YannStatic< / a > < / div > <!-- <button class="button button - - secondary button - - circle search - button js - search - toggle"><i class="fas fa - search"></i></button> --> <!-- <li><button class="button button - - secondary button - - circle search - button js - search - toggle"><i class="fas fa - search"></i></button></li> -->
<!-- Champ de recherche -->
< div id = "searchbox" class = "search search--dark" style = "visibility: visible" >
< div class = "main" >
< div class = "search__header" > < / div >
< div class = "search-bar" >
< div class = "search-box js-search-box" >
< div class = "search-box__icon-search" > < i class = "fas fa-search" > < / i > < / div >
< input id = "search-input" type = "text" / >
<!-- <div class="search - box__icon - clear js - icon - clear">
< a > < i class = "fas fa-times" > < / i > < / a >
< / div > -->
< / div >
< / div >
< / div >
< / div >
<!-- Script pointing to search - script.js -->
< script > / * !
* Simple-Jekyll-Search
* Copyright 2015-2020, Christian Fei
* Licensed under the MIT License.
*/
(function(){
'use strict'
var _$Templater_7 = {
compile: compile,
setOptions: setOptions
}
const options = {}
options.pattern = /\{(.*?)\}/g
options.template = ''
options.middleware = function () {}
function setOptions (_options) {
options.pattern = _options.pattern || options.pattern
options.template = _options.template || options.template
if (typeof _options.middleware === 'function') {
options.middleware = _options.middleware
}
}
function compile (data) {
return options.template.replace(options.pattern, function (match, prop) {
const value = options.middleware(prop, data[prop], options.template)
if (typeof value !== 'undefined') {
return value
}
return data[prop] || match
})
}
'use strict';
function fuzzysearch (needle, haystack) {
var tlen = haystack.length;
var qlen = needle.length;
if (qlen > tlen) {
return false;
}
if (qlen === tlen) {
return needle === haystack;
}
outer: for (var i = 0, j = 0; i < qlen ; i + + ) {
var nch = needle.charCodeAt(i);
while (j < tlen ) {
if (haystack.charCodeAt(j++) === nch) {
continue outer;
}
}
return false;
}
return true;
}
var _$fuzzysearch_1 = fuzzysearch;
'use strict'
/* removed: const _$fuzzysearch_1 = require('fuzzysearch') */;
var _$FuzzySearchStrategy_5 = new FuzzySearchStrategy()
function FuzzySearchStrategy () {
this.matches = function (string, crit) {
return _$fuzzysearch_1(crit.toLowerCase(), string.toLowerCase())
}
}
'use strict'
var _$LiteralSearchStrategy_6 = new LiteralSearchStrategy()
function LiteralSearchStrategy () {
this.matches = function (str, crit) {
if (!str) return false
str = str.trim().toLowerCase()
crit = crit.trim().toLowerCase()
return crit.split(' ').filter(function (word) {
return str.indexOf(word) >= 0
}).length === crit.split(' ').length
}
}
'use strict'
var _$Repository_4 = {
put: put,
clear: clear,
search: search,
setOptions: __setOptions_4
}
/* removed: const _$FuzzySearchStrategy_5 = require('./SearchStrategies/FuzzySearchStrategy') */;
/* removed: const _$LiteralSearchStrategy_6 = require('./SearchStrategies/LiteralSearchStrategy') */;
function NoSort () {
return 0
}
const data = []
let opt = {}
opt.fuzzy = false
opt.limit = 10
opt.searchStrategy = opt.fuzzy ? _$FuzzySearchStrategy_5 : _$LiteralSearchStrategy_6
opt.sort = NoSort
opt.exclude = []
function put (data) {
if (isObject(data)) {
return addObject(data)
}
if (isArray(data)) {
return addArray(data)
}
return undefined
}
function clear () {
data.length = 0
return data
}
function isObject (obj) {
return Boolean(obj) & & Object.prototype.toString.call(obj) === '[object Object]'
}
function isArray (obj) {
return Boolean(obj) & & Object.prototype.toString.call(obj) === '[object Array]'
}
function addObject (_data) {
data.push(_data)
return data
}
function addArray (_data) {
const added = []
clear()
for (let i = 0, len = _data.length; i < len ; i + + ) {
if (isObject(_data[i])) {
added.push(addObject(_data[i]))
}
}
return added
}
function search (crit) {
if (!crit) {
return []
}
return findMatches(data, crit, opt.searchStrategy, opt).sort(opt.sort)
}
function __setOptions_4 (_opt) {
opt = _opt || {}
opt.fuzzy = _opt.fuzzy || false
opt.limit = _opt.limit || 10
opt.searchStrategy = _opt.fuzzy ? _$FuzzySearchStrategy_5 : _$LiteralSearchStrategy_6
opt.sort = _opt.sort || NoSort
opt.exclude = _opt.exclude || []
}
function findMatches (data, crit, strategy, opt) {
const matches = []
for (let i = 0; i < data.length & & matches . length < opt . limit ; i + + ) {
const match = findMatchesInObject(data[i], crit, strategy, opt)
if (match) {
matches.push(match)
}
}
return matches
}
function findMatchesInObject (obj, crit, strategy, opt) {
for (const key in obj) {
if (!isExcluded(obj[key], opt.exclude) & & strategy.matches(obj[key], crit)) {
return obj
}
}
}
function isExcluded (term, excludedTerms) {
for (let i = 0, len = excludedTerms.length; i < len ; i + + ) {
const excludedTerm = excludedTerms[i]
if (new RegExp(excludedTerm).test(term)) {
return true
}
}
return false
}
/* globals ActiveXObject:false */
'use strict'
var _$JSONLoader_2 = {
load: load
}
function load (location, callback) {
const xhr = getXHR()
xhr.open('GET', location, true)
xhr.onreadystatechange = createStateChangeListener(xhr, callback)
xhr.send()
}
function createStateChangeListener (xhr, callback) {
return function () {
if (xhr.readyState === 4 & & xhr.status === 200) {
try {
callback(null, JSON.parse(xhr.responseText))
} catch (err) {
callback(err, null)
}
}
}
}
function getXHR () {
return window.XMLHttpRequest ? new window.XMLHttpRequest() : new ActiveXObject('Microsoft.XMLHTTP')
}
'use strict'
var _$OptionsValidator_3 = function OptionsValidator (params) {
if (!validateParams(params)) {
throw new Error('-- OptionsValidator: required options missing')
}
if (!(this instanceof OptionsValidator)) {
return new OptionsValidator(params)
}
const requiredOptions = params.required
this.getRequiredOptions = function () {
return requiredOptions
}
this.validate = function (parameters) {
const errors = []
requiredOptions.forEach(function (requiredOptionName) {
if (typeof parameters[requiredOptionName] === 'undefined') {
errors.push(requiredOptionName)
}
})
return errors
}
function validateParams (params) {
if (!params) {
return false
}
return typeof params.required !== 'undefined' & & params.required instanceof Array
}
}
'use strict'
var _$utils_9 = {
merge: merge,
isJSON: isJSON
}
function merge (defaultParams, mergeParams) {
const mergedOptions = {}
for (const option in defaultParams) {
mergedOptions[option] = defaultParams[option]
if (typeof mergeParams[option] !== 'undefined') {
mergedOptions[option] = mergeParams[option]
}
}
return mergedOptions
}
function isJSON (json) {
try {
if (json instanceof Object & & JSON.parse(JSON.stringify(json))) {
return true
}
return false
} catch (err) {
return false
}
}
var _$src_8 = {};
(function (window) {
'use strict'
let options = {
searchInput: null,
resultsContainer: null,
json: [],
success: Function.prototype,
searchResultTemplate: '< li > < a href = "{url}" title = "{desc}" > {title}< / a > < / li > ',
templateMiddleware: Function.prototype,
sortMiddleware: function () {
return 0
},
noResultsText: 'No results found',
limit: 10,
fuzzy: false,
debounceTime: null,
exclude: []
}
let debounceTimerHandle
const debounce = function (func, delayMillis) {
if (delayMillis) {
clearTimeout(debounceTimerHandle)
debounceTimerHandle = setTimeout(func, delayMillis)
} else {
func.call()
}
}
const requiredOptions = ['searchInput', 'resultsContainer', 'json']
/* removed: const _$Templater_7 = require('./Templater') */;
/* removed: const _$Repository_4 = require('./Repository') */;
/* removed: const _$JSONLoader_2 = require('./JSONLoader') */;
const optionsValidator = _$OptionsValidator_3({
required: requiredOptions
})
/* removed: const _$utils_9 = require('./utils') */;
window.SimpleJekyllSearch = function (_options) {
const errors = optionsValidator.validate(_options)
if (errors.length > 0) {
throwError('You must specify the following required options: ' + requiredOptions)
}
options = _$utils_9.merge(options, _options)
_$Templater_7.setOptions({
template: options.searchResultTemplate,
middleware: options.templateMiddleware
})
_$Repository_4.setOptions({
fuzzy: options.fuzzy,
limit: options.limit,
sort: options.sortMiddleware,
exclude: options.exclude
})
if (_$utils_9.isJSON(options.json)) {
initWithJSON(options.json)
} else {
initWithURL(options.json)
}
const rv = {
search: search
}
typeof options.success === 'function' & & options.success.call(rv)
return rv
}
function initWithJSON (json) {
_$Repository_4.put(json)
registerInput()
}
function initWithURL (url) {
_$JSONLoader_2.load(url, function (err, json) {
if (err) {
throwError('failed to get JSON (' + url + ')')
}
initWithJSON(json)
})
}
function emptyResultsContainer () {
options.resultsContainer.innerHTML = ''
}
function appendToResultsContainer (text) {
options.resultsContainer.innerHTML += text
}
function registerInput () {
options.searchInput.addEventListener('input', function (e) {
if (isWhitelistedKey(e.which)) {
emptyResultsContainer()
debounce(function () { search(e.target.value) }, options.debounceTime)
}
})
}
function search (query) {
if (isValidQuery(query)) {
emptyResultsContainer()
render(_$Repository_4.search(query), query)
}
}
function render (results, query) {
const len = results.length
if (len === 0) {
return appendToResultsContainer(options.noResultsText)
}
for (let i = 0; i < len ; i + + ) {
results[i].query = query
appendToResultsContainer(_$Templater_7.compile(results[i]))
}
}
function isValidQuery (query) {
return query & & query.length > 0
}
function isWhitelistedKey (key) {
return [13, 16, 20, 37, 38, 39, 40, 91].indexOf(key) === -1
}
function throwError (message) {
throw new Error('SimpleJekyllSearch --- ' + message)
}
})(window)
}());
< / script >
<!-- Configuration -->
< script >
SimpleJekyllSearch({
searchInput: document.getElementById('search-input'),
resultsContainer: document.getElementById('results-container'),
json: '/search.json',
//searchResultTemplate: '< li > < a href = "https://static.rnmkcy.eu{url}" > {date} {title}< / a > < / li > '
searchResultTemplate: '< li > < a href = "{url}" > {date} {title}< / a > < / li > '
})
< / script >
<!-- Fin déclaration champ de recherche --> < / div > < nav class = "navigation" >
2024-11-28 11:42:23 +01:00
< ul > < li class = "navigation__item" > < a href = "/archive.html" > Etiquettes< / a > < / li > < li class = "navigation__item" > < a href = "/htmldoc.html" > Documents< / a > < / li > < li class = "navigation__item" > < a href = "/liens_ttrss.html" > Liens< / a > < / li > < li class = "navigation__item" > < a href = "/syntaxe-markdown.html" > Aide< / a > < / li > < / ul >
2024-10-31 20:18:37 +01:00
< / nav > < / div >
< / header >
< / div > < div class = "page__content" > < div class = "main" > < div class = "grid grid--reverse" >
< div class = "col-main cell cell--auto" > <!-- start custom main top snippet --> < div id = "results-container" class = "search-result js-search-result" > < / div > <!-- end custom main top snippet -->
< article itemscope itemtype = "http://schema.org/Article" > < div class = "article__header" > < header > < h1 style = "color:Tomato;" > OpenLDAP installation et configuration annuaire< / h1 > < / header > < / div > < meta itemprop = "headline" content = "OpenLDAP installation et configuration annuaire" > < div class = "article__info clearfix" > < ul class = "left-col menu" > < li >
2024-11-08 14:10:33 +01:00
< a class = "button button--secondary button--pill button--sm" style = "color:#00FFFF" href = "/archive.html?tag=debian" > debian< / a >
2024-10-31 20:18:37 +01:00
< / li > < / ul > < ul class = "right-col menu" > < li >
< i class = "far fa-calendar-alt" > < / i > < span title = "Création" style = "color:#FF00FF" > 5 oct. 2019< / span >
< span title = "Modification" style = "color:#00FF7F" > 10 oct. 2019< / span > < / li > < / ul > < / div > < meta itemprop = "datePublished" content = "2019-10-10T00:00:00+02:00" >
< meta itemprop = "keywords" content = "debian" > < div class = "js-article-content" >
< div class = "layout--article" > <!-- start custom article top snippet -->
< style >
#myBtn {
display: none;
position: fixed;
bottom: 10px;
right: 10px;
z-index: 99;
font-size: 12px;
font-weight: bold;
border: none;
outline: none;
background-color: white;
color: black;
cursor: pointer;
padding: 5px;
border-radius: 4px;
}
#myBtn:hover {
background-color: #555;
}
< / style >
< button onclick = "topFunction()" id = "myBtn" title = "Haut de page" > ⇧ < / button >
< script >
//Get the button
var mybutton = document.getElementById("myBtn");
// When the user scrolls down 20px from the top of the document, show the button
window.onscroll = function() {scrollFunction()};
function scrollFunction() {
if (document.body.scrollTop > 20 || document.documentElement.scrollTop > 20) {
mybutton.style.display = "block";
} else {
mybutton.style.display = "none";
}
}
// When the user clicks on the button, scroll to the top of the document
function topFunction() {
document.body.scrollTop = 0;
document.documentElement.scrollTop = 0;
}
< / script >
<!-- end custom article top snippet -->
< div class = "article__content" itemprop = "articleBody" > < details >
< summary > < b > Afficher/cacher Sommaire< / b > < / summary >
<!-- affichage sommaire -->
< div class = "toc-aside js-toc-root" > < / div >
< / details > < h1 id = "openldap-debian" > OpenLDAP Debian< / h1 >
< p > < img src = "/images/OpenLDAP-logo.png" alt = "" / > < / p >
< h2 id = "liens" > Liens< / h2 >
< ul >
< li > < a href = "https://www.vennedey.net/resources/0-Getting-started-with-OpenLDAP-on-Debian-8" > Getting started with OpenLDAP on Debian < / a > < / li >
< li > < a href = "https://www.vennedey.net/resources/2-LDAP-managed-mail-server-with-Postfix-and-Dovecot-for-multiple-domains" > LDAP managed mail server with Postfix and Dovecot for multiple domains< / a > < / li >
< li > < a href = "https://wiki.gandi.net/fr/hosting/using-linux/tutorials/debian/mail-server-ldap" > Installation d’ < / a > < / li >
< li >
< p > < a href = "https://computingforgeeks.com/how-to-install-and-configure-openldap-server-on-debian/" > How To Install and Configure OpenLDAP Server on Debian 10 (Buster)< / a > < / p >
< / li >
< li > < a href = "http://idum.fr/spip.php?article326" > Mise en place de OpenLDAP< / a > (< em > Le but de cet article est de vous faire découvrir OpenLDAP. En commençant par vous expliquer comment il fonctionne. Puis comment l’ ’ < br / >
Pour nous aider dans cette dernière partie, j’ ’ < / em > )< br / >
< a href = "/files/Mise en place de OpenLDAP.pdf" > Mise en place de OpenLDAP< / a > (Document au format PDF)< / li >
< / ul >
< h2 id = "openldap-serveur" > OpenLDAP Serveur< / h2 >
< p > < em > Les tests sont effectués sur le serveur cinay.eu< / em > < / p >
< ul >
< li > < a href = "404.html" > OVH VPS SSD 1 KVM OpenStack (1 vCore/2GoRam/20GoSSD) domaine cinay.eu + compilation OpenResty< / a > < / li >
< / ul >
< p > Avant de commencer l’ ’ < strong > /etc/hosts< / strong > < br / >
Relever l’ < code class = "language-plaintext highlighter-rouge" > ip a< / code > (ici notre adresse ip 192.168.0.45)< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > echo "192.168.0.45 ldap.cinay.eu" | sudo tee -a /etc/hosts
sudo hostnamectl set-hostname ldap.cinay.eu --static
< / code > < / pre > < / div > < / div >
< h3 id = "installation" > Installation< / h3 >
< blockquote >
< p > en mode su ou sudo< / p >
< / blockquote >
< p > L’ ’ ’ < br / >
Le premier élément précise que l’ < strong > slapd< / strong > se fait en mode non interactif et < code class = "language-plaintext highlighter-rouge" > -yq< / code > ajoute l’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > DEBIAN_FRONTEND=noninteractive apt-get -yq install slapd ldap-utils net-tools
< / code > < / pre > < / div > < / div >
< p > Pendant l’ ’ < / p >
< h3 id = "configuration-initiale" > Configuration initiale< / h3 >
< p > Créer un squelette de configuration pour < strong > slapd< / strong > < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > dpkg-reconfigure slapd
< / code > < / pre > < / div > < / div >
< p > Voulez-vous omettre la configuration d’ < br / >
Nom de domaine : xoyize.xyz< br / >
Nom d’
Mot de passe de l’ < br / >
Module de base de données à utiliser : MDB< br / >
Faut-il supprimer la base de données lors de la purge du paquet ? Non< br / >
Faut-il déplacer l’ < / p >
< h3 id = "tests-fonctionnels" > Tests fonctionnels< / h3 >
< p > Activer au démarrage et lancer < strong > slapd< / strong > .< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > systemctl enable slapd
systemctl start slapd
< / code > < / pre > < / div > < / div >
< p > Sur quel port du réseau écoute slapd< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > netstat -laputn | grep slapd
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 10204/slapd
tcp6 0 0 :::389 :::* LISTEN 10204/slapd
< / code > < / pre > < / div > < / div >
< p > Comme on peut le voir, < strong > slapd< / strong > attend les requêtes ldap sur le port TCP 389.< br / >
Avec quels arguments s’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > cat /var/run/slapd/slapd.args
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > /usr/sbin/slapd -h ldap:/// ldapi:/// -g openldap -u openldap -F /etc/ldap/slapd.d
< / code > < / pre > < / div > < / div >
< p > < strong > -h< / strong > → les modalités d’ < br / >
< strong > -g< / strong > et < strong > -u< / strong > → identité groupe et utilisateur sur lequel “tourne” le processus slapd< br / >
< strong > -F< / strong > → emplacement du ficher de configuration de slapd< / p >
< p > Afficher les données de l’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapsearch -x -H ldap://xoyize.xyz -b 'dc=xoyize,dc=xyz'
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > # extended LDIF
#
# LDAPv3
# base < dc=xoyize,dc=xyz> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#
# search result
search: 2
result: 32 No such object
# numResponses: 1
< / code > < / pre > < / div > < / div >
< p > < strong > -x< / strong > → nous utilisons un compte défini à l’ ’ < br / >
< strong > -H< / strong > → accès en ldap sur la machine xoyize.xyz< br / >
< strong > -b< / strong > → la racine à parcourir , ici ‘ ’ < / p >
< p > Définir un répertoire de configuration< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > sudo -s
mkdir -p /root/ldap/xoyize.xyz
cd /root/ldap/xoyize.xyz
< / code > < / pre > < / div > < / div >
< p > Créer un fichier /root/pwdldap et y mettre le mot de passe administrateur< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > echo -n "mdpadmin" > /root/pwdldap
chmod 600 /root/pwdldap
< / code > < / pre > < / div > < / div >
< p > Pour éviter la saisie du mot de passe on remplace l’ < strong > -W< / strong > par < strong > -y /root/pwdldap< / strong > < / p >
< h3 id = "peuplement-de-lannuaire" > Peuplement de l’ < / h3 >
< p > Peupler l’ < strong > OU< / strong > puis un compte système avec son groupe primaire.< br / >
Créer un fichier au format LDIF (LDAP Data Interchange Format)< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > cat > ou.ldif < < EOF
dn: ou=posixaccounts,dc=xoyize,dc=xyz
objectclass: OrganizationalUnit
dn: ou=posixgroups,dc=xoyize,dc=xyz
objectclass: OrganizationalUnit
EOF
< / code > < / pre > < / div > < / div >
< p > Nous avons les deux OU< / p >
< ul >
< li > < strong > posixaccounts< / strong > qui va contenir les comptes UNIX< / li >
< li > < strong > posixgroups< / strong > qui va contenir les groupes UNIX< / li >
< / ul >
< p > Ajouter à l’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapadd -x -H ldap://xoyize.xyz -D 'cn=admin,dc=xoyize,dc=xyz' -y /root/pwdldap -f ou.ldif
< / code > < / pre > < / div > < / div >
< p > < strong > -D< / strong > → précise quel compte on va utiliser pour se connecter à slapd (ici, l’ < br / >
< strong > -W< / strong > → pour la demande du mot de passe associé ou < strong > -y /root/pwdldap< / strong >
< strong > -f< / strong > → le fichier .ldif< / p >
< p > Ajouter le compte avec le groupe primaire (yanspm mp yansmm49450)< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > cat > userandupg.ldif < < EOF
dn: uid=yanspm, ou=posixaccounts,dc=xoyize,dc=xyz
uid: yanspm
sn: yanspm
homeDirectory: /home/yanspm
cn: yanspm
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
loginShell: /bin/bash
uidNumber: 6001
gidNumber: 6001
gecos: yan
mail: yanspm@cinay.xyz
userPassword: {SSHA}gzJOGEJ/fLvyp1g8zdOSGcJQZjSRukE5
dn: cn=yanspm,ou=posixgroups,dc=xoyize,dc=xyz
objectClass: posixGroup
objectClass: top
gidNumber: 6001
cn: yanspm
EOF
< / code > < / pre > < / div > < / div >
< p > Pour créer l’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > slappasswd
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > New password:
Re-enter new password:
{SSHA}gzJOGEJ/fLvyp1g8zdOSGcJQZjSRukE5
< / code > < / pre > < / div > < / div >
< p > Ajout des 2 objets< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapadd -x -H ldap://xoyize.xyz -D 'cn=admin,dc=xoyize,dc=xyz' -f userandupg.ldif -W
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > Enter LDAP Password:
adding new entry "uid=yanspm, ou=posixaccounts,dc=xoyize,dc=xyz"
adding new entry "cn=yanspm,ou=posixgroups,dc=xoyize,dc=xyz"
< / code > < / pre > < / div > < / div >
< h3 id = "sécuriser-avec-ssl" > Sécuriser avec SSL< / h3 >
< p > SSL, couche additionnelle à TCP qui chiffre les échanges.< br / >
On va activer ldaps et modifier les paramètres de lancement du service et générer un certificat.< / p >
< h4 id = "création-des-certificats" > Création des certificats< / h4 >
< p > Création du répertoire ssl< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > mkdir /etc/ldap/ssl & & cd /etc/ldap/ssl
< / code > < / pre > < / div > < / div >
< p > Générer certificat autosigné< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 3650 -nodes
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > Generating a RSA private key
.................................++++
..................................................++++
writing new private key to 'key.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:FR
State or Province Name (full name) [Some-State]:Pays de Loire
Locality Name (eg, city) []:SMM
Organization Name (eg, company) [Internet Widgits Pty Ltd]:home
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:xoyize.xyz
Email Address []:
< / code > < / pre > < / div > < / div >
< p > Le seul champ important : < strong > Common Name< / strong > < / p >
< p > Changer les permissions sur les 2 fichiers pour appartenir à l’ < em > openldap< / em > < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > chown openldap:openldap /etc/ldap/ssl/key.pem
chown openldap:openldap /etc/ldap/ssl/cert.pem
< / code > < / pre > < / div > < / div >
< p > Clé privée accessible par root uniquement< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > chmod 400 /etc/ldap/ssl/key.pem
< / code > < / pre > < / div > < / div >
< h4 id = "configuration-de-slapd" > Configuration de slapd< / h4 >
< p > Ajout de 2 directives pour trouver le couple clé/certificat< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > cat > cert.ldif < < EOF
dn: cn=config
changetype: modify
replace: olcTLSCACertificateFile
olcTLSCACertificateFile: /etc/ldap/ssl/cert.pem
-
replace: olcTLSCertificateFile
olcTLSCertificateFile: /etc/ldap/ssl/cert.pem
-
replace: olcTLSCertificateKeyFile
olcTLSCertificateKeyFile: /etc/ldap/ssl/key.pem
EOF
< / code > < / pre > < / div > < / div >
< p > Pour appliquer les modifications ,nous allons passer par le mode ldapi car il n’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapmodify -Y EXTERNAL -H ldapi:/// -f cert.ldif
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
create: 2019-10-05
modifying entry "cn=config"
< / code > < / pre > < / div > < / div >
< p > Argument < strong > -x< / strong > a disparu au profit de < strong > -Y EXTERNAL< / strong > pour une authentification via l’ < br / >
L’ < strong > -H< / strong > a pour valeur ldapi:/// qui pointe sur le socket UNIX géré par slapd< / p >
< p > Dernière étape, modifier le fichier < strong > /etc/default/slapd< / strong > pour lui indiquer qu’ ’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > nano /etc/default/slapd
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > SLAPD_SERVICES="ldap:/// ldapi:/// ldaps:///"
< / code > < / pre > < / div > < / div >
< p > Relancer slapd< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > systemctl restart slapd
< / code > < / pre > < / div > < / div >
< p > Vérification< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > netstat -laputn | grep slapd
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 23197/slapd
tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 23197/slapd
tcp6 0 0 :::636 :::* LISTEN 23197/slapd
tcp6 0 0 :::389 :::* LISTEN 23197/slapd
< / code > < / pre > < / div > < / div >
< p > Nous avons le service slapd en écoute SSL sur le port 636< / p >
< blockquote >
< p > < strong > ATTENTION , si parefeu , ouvrir en entrée le port TCP 636 IPV4/IPV6< / strong > < / p >
< / blockquote >
< h2 id = "openldap-php-sur-serveur" > OpenLDAP PHP sur serveur< / h2 >
< p > Installer le module< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > sudo apt install php7.3-ldpa
< / code > < / pre > < / div > < / div >
< p > Fichiers de test< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > /var/www/test.php
< / code > < / pre > < / div > < / div >
< div class = "language-php highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > < span class = "cp" > < ?php< / span >
< span class = "nv" > $baseDN< / span > < span class = "o" > =< / span > < span class = "s2" > "dc=ldap,dc=cinay,dc=eu"< / span > < span class = "p" > ;< / span >
< span class = "nv" > $ldapServer< / span > < span class = "o" > =< / span > < span class = "s2" > "ldap.cinay.eu"< / span > < span class = "p" > ;< / span >
< span class = "nv" > $ldapServerPort< / span > < span class = "o" > =< / span > < span class = "mi" > 389< / span > < span class = "p" > ;< / span >
< span class = "nv" > $rdn< / span > < span class = "o" > =< / span > < span class = "s2" > "admin"< / span > < span class = "p" > ;< / span >
< span class = "nv" > $mdp< / span > < span class = "o" > =< / span > < span class = "s2" > "f43z7C9TBwxX3h"< / span > < span class = "p" > ;< / span >
< span class = "nv" > $dn< / span > < span class = "o" > =< / span > < span class = "s1" > 'cn=admin,dc=ldap,dc=cinay,dc=eu'< / span > < span class = "p" > ;< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Connexion au serveur < br /> "< / span > < span class = "p" > ;< / span >
< span class = "nv" > $conn< / span > < span class = "o" > =< / span > < span class = "nb" > ldap_connect< / span > < span class = "p" > (< / span > < span class = "nv" > $ldapServer< / span > < span class = "p" > );< / span >
< span class = "c1" > // on teste : le serveur LDAP est-il trouvé ?< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "nv" > $conn< / span > < span class = "p" > )< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Le résultat de connexion est "< / span > < span class = "mf" > .< / span > < span class = "nv" > $conn< / span > < span class = "mf" > .< / span > < span class = "s2" > "< br /> "< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span > < span class = "k" > else< / span > < span class = "p" > {< / span >
< span class = "k" > die< / span > < span class = "p" > (< / span > < span class = "s2" > "connexion impossible au serveur LDAP"< / span > < span class = "p" > );< / span >
< span class = "p" > }< / span >
< span class = "c1" > // 2ème étape : on effectue une liaison au serveur, ici de type "anonyme"< / span >
< span class = "c1" > // pour une recherche permise par un accès en lecture seule< / span >
< span class = "c1" > // On dit qu'on utilise LDAP V3, sinon la V2 par défaut est utilisé< / span >
< span class = "c1" > // et le bind ne passe pas. < / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "nb" > ldap_set_option< / span > < span class = "p" > (< / span > < span class = "nv" > $conn< / span > < span class = "p" > ,< / span > < span class = "no" > LDAP_OPT_PROTOCOL_VERSION< / span > < span class = "p" > ,< / span > < span class = "mi" > 3< / span > < span class = "p" > ))< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Utilisation de LDAPv3 < br /> "< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span > < span class = "k" > else< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Impossible d'utiliser LDAP V3< br /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > exit< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "c1" > // Instruction de liaison. < / span >
< span class = "c1" > // Décommenter la ligne pour une connexion authentifiée< / span >
< span class = "c1" > // ou pour une connexion anonyme.< / span >
< span class = "c1" > // Connexion authentifiée< / span >
< span class = "k" > print< / span > < span class = "p" > (< / span > < span class = "s2" > "Connexion authentifiée ...< br /> "< / span > < span class = "p" > );< / span >
< span class = "nv" > $bindServerLDAP< / span > < span class = "o" > =< / span > < span class = "nb" > ldap_bind< / span > < span class = "p" > (< / span > < span class = "nv" > $conn< / span > < span class = "p" > ,< / span > < span class = "nv" > $dn< / span > < span class = "p" > ,< / span > < span class = "nv" > $mdp< / span > < span class = "p" > );< / span >
< span class = "c1" > // print ("Connexion anonyme...< br /> ");< / span >
< span class = "c1" > // $bindServerLDAP=ldap_bind($conn);< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Liaison au serveur : "< / span > < span class = "mf" > .< / span > < span class = "nb" > ldap_error< / span > < span class = "p" > (< / span > < span class = "nv" > $conn< / span > < span class = "p" > )< / span > < span class = "mf" > .< / span > < span class = "s2" > "< br /> "< / span > < span class = "p" > ;< / span >
< span class = "c1" > // en cas de succès de la liaison, renvoie Vrai< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "nv" > $bindServerLDAP< / span > < span class = "p" > )< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Le résultat de connexion est < / span > < span class = "nv" > $bindServerLDAP< / span > < span class = "s2" > < br /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > else< / span >
< span class = "k" > die< / span > < span class = "p" > (< / span > < span class = "s2" > "Liaison impossible au serveur ldap ..."< / span > < span class = "p" > );< / span >
< span class = "cm" > /* 3ème étape : on effectue une recherche anonyme, avec le dn de base,
* par exemple, sur tous les noms commençant par B
*/< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Recherche suivant le filtre (sn=y*) < br /> "< / span > < span class = "p" > ;< / span >
< span class = "nv" > $query< / span > < span class = "o" > =< / span > < span class = "s2" > "sn=y*"< / span > < span class = "p" > ;< / span >
< span class = "nv" > $result< / span > < span class = "o" > =< / span > < span class = "nb" > ldap_search< / span > < span class = "p" > (< / span > < span class = "nv" > $conn< / span > < span class = "p" > ,< / span > < span class = "nv" > $baseDN< / span > < span class = "p" > ,< / span > < span class = "nv" > $query< / span > < span class = "p" > );< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Le résultat de la recherche est < / span > < span class = "nv" > $result< / span > < span class = "s2" > < br /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Le nombre d'entrées retournées est "< / span > < span class = "mf" > .< / span > < span class = "nb" > ldap_count_entries< / span > < span class = "p" > (< / span > < span class = "nv" > $conn< / span > < span class = "p" > ,< / span > < span class = "nv" > $result< / span > < span class = "p" > )< / span > < span class = "mf" > .< / span > < span class = "s2" > "< p /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Lecture de ces entrées ....< p /> "< / span > < span class = "p" > ;< / span >
< span class = "nv" > $info< / span > < span class = "o" > =< / span > < span class = "nb" > ldap_get_entries< / span > < span class = "p" > (< / span > < span class = "nv" > $conn< / span > < span class = "p" > ,< / span > < span class = "nv" > $result< / span > < span class = "p" > );< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Données pour "< / span > < span class = "mf" > .< / span > < span class = "nv" > $info< / span > < span class = "p" > [< / span > < span class = "s2" > "count"< / span > < span class = "p" > ]< / span > < span class = "mf" > .< / span > < span class = "s2" > " entrées:< p /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > for< / span > < span class = "p" > (< / span > < span class = "nv" > $i< / span > < span class = "o" > =< / span > < span class = "mi" > 0< / span > < span class = "p" > ;< / span > < span class = "nv" > $i< / span > < span class = "o" > < < / span > < span class = "nv" > $info< / span > < span class = "p" > [< / span > < span class = "s2" > "count"< / span > < span class = "p" > ];< / span > < span class = "nv" > $i< / span > < span class = "o" > ++< / span > < span class = "p" > )< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "dn est : "< / span > < span class = "mf" > .< / span > < span class = "nv" > $info< / span > < span class = "p" > [< / span > < span class = "nv" > $i< / span > < span class = "p" > ][< / span > < span class = "s2" > "cn"< / span > < span class = "p" > ]< / span > < span class = "mf" > .< / span > < span class = "s2" > "< br /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > echo< / span > < span class = "s2" > "premiere entree cn : "< / span > < span class = "mf" > .< / span > < span class = "nv" > $info< / span > < span class = "p" > [< / span > < span class = "nv" > $i< / span > < span class = "p" > ][< / span > < span class = "s2" > "cn"< / span > < span class = "p" > ][< / span > < span class = "mi" > 0< / span > < span class = "p" > ]< / span > < span class = "mf" > .< / span > < span class = "s2" > "< br /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > echo< / span > < span class = "s2" > "premier email : "< / span > < span class = "mf" > .< / span > < span class = "nv" > $info< / span > < span class = "p" > [< / span > < span class = "nv" > $i< / span > < span class = "p" > ][< / span > < span class = "s2" > "mail"< / span > < span class = "p" > ][< / span > < span class = "mi" > 0< / span > < span class = "p" > ]< / span > < span class = "mf" > .< / span > < span class = "s2" > "< p /> "< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "c1" > // Test utilisateur mot de passe< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "nv" > $bindServerLDAP< / span > < span class = "o" > =< / span > < span class = "o" > @< / span > < span class = "nb" > ldap_bind< / span > < span class = "p" > (< / span > < span class = "nv" > $conn< / span > < span class = "p" > ,< / span > < span class = "s2" > "uid=yanspm,ou=posixaccounts,dc=ldap,dc=cinay,dc=eu"< / span > < span class = "p" > ,< / span > < span class = "s2" > "yansmm49450"< / span > < span class = "p" > ))< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "OK Test utilisateur mot de passe < br /> "< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span > < span class = "k" > else< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "ERROR Test utilisateur mot de passe < br /> "< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Fermeture de la connexion"< / span > < span class = "p" > ;< / span >
< span class = "nb" > ldap_close< / span > < span class = "p" > (< / span > < span class = "nv" > $conn< / span > < span class = "p" > );< / span >
< span class = "cp" > ?> < / span >
< / code > < / pre > < / div > < / div >
< p > Résultat< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > Connexion au serveur
Le résultat de connexion est Resource id #2
Utilisation de LDAPv3
Connexion authentifiée ...
Liaison au serveur : Success
Le résultat de connexion est 1
Recherche suivant le filtre (sn=y*)
Le résultat de la recherche est Resource id #3
Le nombre d'entrées retournées est 1
Lecture de ces entrées ....
Données pour 1 entrées:
dn est : Array
premiere entree cn : yanspm
premier email : yanspm@cinay.xyz
OK Test utilisateur mot de passe
Fermeture de la connexion
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > /var/www/test1.php
< / code > < / pre > < / div > < / div >
< div class = "language-php highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > < span class = "cp" > < ?php< / span >
< span class = "c1" > //pour les tests< / span >
< span class = "nv" > $user< / span > < span class = "o" > =< / span > < span class = "s2" > "yanspm"< / span > < span class = "p" > ;< / span >
< span class = "nv" > $password< / span > < span class = "o" > =< / span > < span class = "s2" > "yansmm49450"< / span > < span class = "p" > ;< / span >
< span class = "c1" > // annuaire ldap< / span >
< span class = "nv" > $ldap_host< / span > < span class = "o" > =< / span > < span class = "s2" > "ldap.cinay.eu"< / span > < span class = "p" > ;< / span >
< span class = "c1" > // connexion annuaire< / span >
< span class = "nv" > $ldap< / span > < span class = "o" > =< / span > < span class = "nb" > ldap_connect< / span > < span class = "p" > (< / span > < span class = "nv" > $ldap_host< / span > < span class = "p" > );< / span >
< span class = "c1" > // on teste : le serveur LDAP est-il trouvé ?< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "o" > !< / span > < span class = "nv" > $ldap< / span > < span class = "p" > )< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Erreur connexion ...< br /> "< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "c1" > // configure ldap params< / span >
< span class = "nb" > ldap_set_option< / span > < span class = "p" > (< / span > < span class = "nv" > $ldap< / span > < span class = "p" > ,< / span > < span class = "no" > LDAP_OPT_PROTOCOL_VERSION< / span > < span class = "p" > ,< / span > < span class = "mi" > 3< / span > < span class = "p" > );< / span >
< span class = "k" > print< / span > < span class = "p" > (< / span > < span class = "s2" > "Connexion anonyme...< br /> "< / span > < span class = "p" > );< / span >
< span class = "nv" > $bindServerLDAP< / span > < span class = "o" > =< / span > < span class = "nb" > ldap_bind< / span > < span class = "p" > (< / span > < span class = "nv" > $ldap< / span > < span class = "p" > );< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Liaison au serveur : "< / span > < span class = "mf" > .< / span > < span class = "nb" > ldap_error< / span > < span class = "p" > (< / span > < span class = "nv" > $conn< / span > < span class = "p" > )< / span > < span class = "mf" > .< / span > < span class = "s2" > "< br /> "< / span > < span class = "p" > ;< / span >
< span class = "c1" > // en cas de succès de la liaison, renvoie Vrai< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "nv" > $bindServerLDAP< / span > < span class = "p" > )< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Le résultat de connexion est < / span > < span class = "nv" > $bindServerLDAP< / span > < span class = "s2" > < br /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > else< / span >
< span class = "k" > die< / span > < span class = "p" > (< / span > < span class = "s2" > "Liaison impossible au serveur ldap ..."< / span > < span class = "p" > );< / span >
< span class = "c1" > // Test utilisateur mot de passe< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "nv" > $bindServerLDAP< / span > < span class = "o" > =< / span > < span class = "o" > @< / span > < span class = "nb" > ldap_bind< / span > < span class = "p" > (< / span > < span class = "nv" > $ldap< / span > < span class = "p" > ,< / span > < span class = "s2" > "uid="< / span > < span class = "mf" > .< / span > < span class = "nv" > $user< / span > < span class = "mf" > .< / span > < span class = "s2" > ",ou=posixaccounts,dc=ldap,dc=cinay,dc=eu"< / span > < span class = "p" > ,< / span > < span class = "nv" > $password< / span > < span class = "p" > ))< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "OK Test utilisateur mot de passe < br /> "< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span > < span class = "k" > else< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "ERROR Test utilisateur mot de passe < br /> "< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "cp" > ?> < / span >
< / code > < / pre > < / div > < / div >
< p > Page authentification< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > /var/www/authenticate.php
< / code > < / pre > < / div > < / div >
< div class = "language-php highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > < span class = "cp" > < ?php< / span >
< span class = "k" > function< / span > < span class = "n" > authenticate< / span > < span class = "p" > (< / span > < span class = "nv" > $user< / span > < span class = "p" > ,< / span > < span class = "nv" > $password< / span > < span class = "p" > )< / span > < span class = "p" > {< / span >
< span class = "c1" > //pour les tests< / span >
< span class = "c1" > //$user = "yanspm";< / span >
< span class = "c1" > //$password="yansmm49450";< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "k" > empty< / span > < span class = "p" > (< / span > < span class = "nv" > $user< / span > < span class = "p" > )< / span > < span class = "o" > ||< / span > < span class = "k" > empty< / span > < span class = "p" > (< / span > < span class = "nv" > $password< / span > < span class = "p" > ))< / span > < span class = "k" > return< / span > < span class = "kc" > false< / span > < span class = "p" > ;< / span >
< span class = "c1" > // annuaire ldap< / span >
< span class = "nv" > $ldap_host< / span > < span class = "o" > =< / span > < span class = "s2" > "ldap.cinay.eu"< / span > < span class = "p" > ;< / span >
< span class = "c1" > // connexion annuaire< / span >
< span class = "nv" > $ldap< / span > < span class = "o" > =< / span > < span class = "nb" > ldap_connect< / span > < span class = "p" > (< / span > < span class = "nv" > $ldap_host< / span > < span class = "p" > );< / span >
< span class = "c1" > // on teste : le serveur LDAP est-il trouvé ?< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "o" > !< / span > < span class = "nv" > $ldap< / span > < span class = "p" > )< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Erreur connexion ...< br /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > return< / span > < span class = "kc" > false< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "c1" > // configure ldap params< / span >
< span class = "nb" > ldap_set_option< / span > < span class = "p" > (< / span > < span class = "nv" > $ldap< / span > < span class = "p" > ,< / span > < span class = "no" > LDAP_OPT_PROTOCOL_VERSION< / span > < span class = "p" > ,< / span > < span class = "mi" > 3< / span > < span class = "p" > );< / span >
< span class = "k" > print< / span > < span class = "p" > (< / span > < span class = "s2" > "Connexion anonyme...< br /> "< / span > < span class = "p" > );< / span >
< span class = "nv" > $bindServerLDAP< / span > < span class = "o" > =< / span > < span class = "nb" > ldap_bind< / span > < span class = "p" > (< / span > < span class = "nv" > $ldap< / span > < span class = "p" > );< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Liaison au serveur : "< / span > < span class = "mf" > .< / span > < span class = "nb" > ldap_error< / span > < span class = "p" > (< / span > < span class = "nv" > $conn< / span > < span class = "p" > )< / span > < span class = "mf" > .< / span > < span class = "s2" > "< br /> "< / span > < span class = "p" > ;< / span >
< span class = "c1" > // en cas de succès de la liaison, renvoie Vrai< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "nv" > $bindServerLDAP< / span > < span class = "p" > )< / span >
< span class = "k" > echo< / span > < span class = "s2" > "Le résultat de connexion est < / span > < span class = "nv" > $bindServerLDAP< / span > < span class = "s2" > < br /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > else< / span >
< span class = "c1" > //die("Liaison impossible au serveur ldap ...");< / span >
< span class = "k" > return< / span > < span class = "kc" > false< / span > < span class = "p" > ;< / span >
< span class = "c1" > // Test utilisateur mot de passe< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "nv" > $bindServerLDAP< / span > < span class = "o" > =< / span > < span class = "o" > @< / span > < span class = "nb" > ldap_bind< / span > < span class = "p" > (< / span > < span class = "nv" > $ldap< / span > < span class = "p" > ,< / span > < span class = "s2" > "uid="< / span > < span class = "mf" > .< / span > < span class = "nv" > $user< / span > < span class = "mf" > .< / span > < span class = "s2" > ",ou=posixaccounts,dc=ldap,dc=cinay,dc=eu"< / span > < span class = "p" > ,< / span > < span class = "nv" > $password< / span > < span class = "p" > ))< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "OK Test utilisateur mot de passe < br /> "< / span > < span class = "p" > ;< / span >
< span class = "nv" > $access< / span > < span class = "o" > =< / span > < span class = "mi" > 1< / span > < span class = "p" > ;< / span >
< span class = "c1" > // establish session variables< / span >
< span class = "nv" > $_SESSION< / span > < span class = "p" > [< / span > < span class = "s1" > 'user'< / span > < span class = "p" > ]< / span > < span class = "o" > =< / span > < span class = "nv" > $user< / span > < span class = "p" > ;< / span >
< span class = "nv" > $_SESSION< / span > < span class = "p" > [< / span > < span class = "s1" > 'access'< / span > < span class = "p" > ]< / span > < span class = "o" > =< / span > < span class = "nv" > $access< / span > < span class = "p" > ;< / span >
< span class = "k" > echo< / span > < span class = "s2" > "variables ajustées < br /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > return< / span > < span class = "kc" > true< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span > < span class = "k" > else< / span > < span class = "p" > {< / span >
< span class = "k" > echo< / span > < span class = "s2" > "ERROR Test utilisateur mot de passe < br /> "< / span > < span class = "p" > ;< / span >
< span class = "k" > return< / span > < span class = "kc" > false< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "p" > }< / span >
< span class = "cp" > ?> < / span >
< / code > < / pre > < / div > < / div >
< p > Page protection< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > /var/www/protected.php
< / code > < / pre > < / div > < / div >
< div class = "language-php highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code >
< span class = "cp" > < ?php< / span >
< span class = "c1" > // initialize session< / span >
< span class = "nb" > session_start< / span > < span class = "p" > ();< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "o" > !< / span > < span class = "k" > isset< / span > < span class = "p" > (< / span > < span class = "nv" > $_SESSION< / span > < span class = "p" > [< / span > < span class = "s1" > 'user'< / span > < span class = "p" > ]))< / span > < span class = "p" > {< / span >
< span class = "c1" > // user is not logged in, do something like redirect to login.php< / span >
< span class = "nb" > header< / span > < span class = "p" > (< / span > < span class = "s2" > "Location: login.php"< / span > < span class = "p" > );< / span >
< span class = "k" > die< / span > < span class = "p" > ();< / span >
< span class = "p" > }< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "nv" > $_SESSION< / span > < span class = "p" > [< / span > < span class = "s1" > 'access'< / span > < span class = "p" > ]< / span > < span class = "o" > !=< / span > < span class = "mi" > 1< / span > < span class = "p" > )< / span > < span class = "p" > {< / span >
< span class = "c1" > // another example...< / span >
< span class = "c1" > // user is logged in but not a manager, let's stop him< / span >
< span class = "k" > die< / span > < span class = "p" > (< / span > < span class = "s2" > "Access Denied"< / span > < span class = "p" > );< / span >
< span class = "p" > }< / span >
< span class = "cp" > ?> < / span >
< span class = "nt" > < p> < / span > Welcome < span class = "cp" > < ?=< / span > < span class = "nv" > $_SESSION< / span > < span class = "p" > [< / span > < span class = "s1" > 'user'< / span > < span class = "p" > ]< / span > < span class = "cp" > ?> < / span > !< span class = "nt" > < /p> < / span >
< span class = "nt" > < p> < strong> < / span > Secret Protected Content Here!< span class = "nt" > < /strong> < /p> < / span >
< span class = "nt" > < p> < / span > Ceci est un test...< span class = "nt" > < /p> < / span >
// < span class = "nt" > < p> < a< / span > < span class = "na" > href=< / span > < span class = "s" > "login.php?out=1"< / span > < span class = "nt" > > < / span > Logout< span class = "nt" > < /a> < /p> < / span >
< span class = "nt" > < p> < a< / span > < span class = "na" > href=< / span > < span class = "s" > "index.php?out=1"< / span > < span class = "nt" > > < / span > Logout< span class = "nt" > < /a> < /p> < / span >
< / code > < / pre > < / div > < / div >
< p > Page de connexion< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > /var/www/index.php
< / code > < / pre > < / div > < / div >
< div class = "language-php highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > < span class = "cp" > < ?php< / span >
< span class = "c1" > // initialize session< / span >
< span class = "nb" > session_start< / span > < span class = "p" > ();< / span >
< span class = "k" > include< / span > < span class = "p" > (< / span > < span class = "s2" > "authenticate.php"< / span > < span class = "p" > );< / span >
< span class = "c1" > // check to see if user is logging out< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "k" > isset< / span > < span class = "p" > (< / span > < span class = "nv" > $_GET< / span > < span class = "p" > [< / span > < span class = "s1" > 'out'< / span > < span class = "p" > ]))< / span > < span class = "p" > {< / span >
< span class = "c1" > // destroy session< / span >
< span class = "nb" > session_unset< / span > < span class = "p" > ();< / span >
< span class = "nv" > $_SESSION< / span > < span class = "o" > =< / span > < span class = "k" > array< / span > < span class = "p" > ();< / span >
< span class = "k" > unset< / span > < span class = "p" > (< / span > < span class = "nv" > $_SESSION< / span > < span class = "p" > [< / span > < span class = "s1" > 'user'< / span > < span class = "p" > ],< / span > < span class = "nv" > $_SESSION< / span > < span class = "p" > [< / span > < span class = "s1" > 'access'< / span > < span class = "p" > ]);< / span >
< span class = "nb" > session_destroy< / span > < span class = "p" > ();< / span >
< span class = "p" > }< / span >
< span class = "c1" > // check to see if login form has been submitted< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "k" > isset< / span > < span class = "p" > (< / span > < span class = "nv" > $_POST< / span > < span class = "p" > [< / span > < span class = "s1" > 'userLogin'< / span > < span class = "p" > ])){< / span >
< span class = "c1" > // run information through authenticator< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "nf" > authenticate< / span > < span class = "p" > (< / span > < span class = "nv" > $_POST< / span > < span class = "p" > [< / span > < span class = "s1" > 'userLogin'< / span > < span class = "p" > ],< / span > < span class = "nv" > $_POST< / span > < span class = "p" > [< / span > < span class = "s1" > 'userPassword'< / span > < span class = "p" > ]))< / span >
< span class = "p" > {< / span >
< span class = "c1" > // authentication passed< / span >
< span class = "nb" > header< / span > < span class = "p" > (< / span > < span class = "s2" > "Location: protected.php"< / span > < span class = "p" > );< / span >
< span class = "k" > die< / span > < span class = "p" > ();< / span >
< span class = "p" > }< / span > < span class = "k" > else< / span > < span class = "p" > {< / span >
< span class = "c1" > // authentication failed< / span >
< span class = "nv" > $error< / span > < span class = "o" > =< / span > < span class = "mi" > 1< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "p" > }< / span >
< span class = "c1" > // output error to user< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "k" > isset< / span > < span class = "p" > (< / span > < span class = "nv" > $error< / span > < span class = "p" > ))< / span > < span class = "k" > echo< / span > < span class = "s2" > "Login failed: Incorrect user name, password, or rights< br /> "< / span > < span class = "p" > ;< / span >
< span class = "c1" > // output logout success< / span >
< span class = "k" > if< / span > < span class = "p" > (< / span > < span class = "k" > isset< / span > < span class = "p" > (< / span > < span class = "nv" > $_GET< / span > < span class = "p" > [< / span > < span class = "s1" > 'out'< / span > < span class = "p" > ]))< / span > < span class = "k" > echo< / span > < span class = "s2" > "Logout successful"< / span > < span class = "p" > ;< / span >
< span class = "cp" > ?> < / span >
< span class = "cp" > < !DOCTYPE html> < / span >
< span class = "nt" > < html> < / span >
< span class = "nt" > < head> < / span >
< span class = "nt" > < meta< / span > < span class = "na" > name=< / span > < span class = "s" > "viewport"< / span > < span class = "na" > content=< / span > < span class = "s" > "width=device-width, initial-scale=1"< / span > < span class = "nt" > > < / span >
< span class = "nt" > < style> < / span >
< span class = "nt" > body< / span > < span class = "p" > {< / span > < span class = "nl" > font-family< / span > < span class = "p" > :< / span > < span class = "n" > Arial< / span > < span class = "p" > ,< / span > < span class = "n" > Helvetica< / span > < span class = "p" > ,< / span > < span class = "nb" > sans-serif< / span > < span class = "p" > ;}< / span >
< span class = "c" > /* Full-width input fields */< / span >
< span class = "nt" > input< / span > < span class = "o" > [< / span > < span class = "nt" > type< / span > < span class = "o" > =< / span > < span class = "nt" > text< / span > < span class = "o" > ],< / span > < span class = "nt" > input< / span > < span class = "o" > [< / span > < span class = "nt" > type< / span > < span class = "o" > =< / span > < span class = "nt" > password< / span > < span class = "o" > ]< / span > < span class = "p" > {< / span >
< span class = "nl" > width< / span > < span class = "p" > :< / span > < span class = "m" > 100%< / span > < span class = "p" > ;< / span >
< span class = "nl" > padding< / span > < span class = "p" > :< / span > < span class = "m" > 12px< / span > < span class = "m" > 20px< / span > < span class = "p" > ;< / span >
< span class = "nl" > margin< / span > < span class = "p" > :< / span > < span class = "m" > 8px< / span > < span class = "m" > 0< / span > < span class = "p" > ;< / span >
< span class = "nl" > display< / span > < span class = "p" > :< / span > < span class = "n" > inline-block< / span > < span class = "p" > ;< / span >
< span class = "nl" > border< / span > < span class = "p" > :< / span > < span class = "m" > 1px< / span > < span class = "nb" > solid< / span > < span class = "m" > #ccc< / span > < span class = "p" > ;< / span >
< span class = "nl" > box-sizing< / span > < span class = "p" > :< / span > < span class = "n" > border-box< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "c" > /* Set a style for all buttons */< / span >
< span class = "nt" > button< / span > < span class = "p" > {< / span >
< span class = "nl" > background-color< / span > < span class = "p" > :< / span > < span class = "m" > #4CAF50< / span > < span class = "p" > ;< / span >
< span class = "nl" > color< / span > < span class = "p" > :< / span > < span class = "no" > white< / span > < span class = "p" > ;< / span >
< span class = "nl" > padding< / span > < span class = "p" > :< / span > < span class = "m" > 14px< / span > < span class = "m" > 20px< / span > < span class = "p" > ;< / span >
< span class = "nl" > margin< / span > < span class = "p" > :< / span > < span class = "m" > 8px< / span > < span class = "m" > 0< / span > < span class = "p" > ;< / span >
< span class = "nl" > border< / span > < span class = "p" > :< / span > < span class = "nb" > none< / span > < span class = "p" > ;< / span >
< span class = "nl" > cursor< / span > < span class = "p" > :< / span > < span class = "nb" > pointer< / span > < span class = "p" > ;< / span >
< span class = "nl" > width< / span > < span class = "p" > :< / span > < span class = "m" > 100%< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "nt" > button< / span > < span class = "nd" > :hover< / span > < span class = "p" > {< / span >
< span class = "nl" > opacity< / span > < span class = "p" > :< / span > < span class = "m" > 0.8< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "c" > /* Extra styles for the cancel button */< / span >
< span class = "nc" > .cancelbtn< / span > < span class = "p" > {< / span >
< span class = "nl" > width< / span > < span class = "p" > :< / span > < span class = "nb" > auto< / span > < span class = "p" > ;< / span >
< span class = "nl" > padding< / span > < span class = "p" > :< / span > < span class = "m" > 10px< / span > < span class = "m" > 18px< / span > < span class = "p" > ;< / span >
< span class = "nl" > background-color< / span > < span class = "p" > :< / span > < span class = "m" > #f44336< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "c" > /* Center the image and position the close button */< / span >
< span class = "nc" > .imgcontainer< / span > < span class = "p" > {< / span >
< span class = "nl" > text-align< / span > < span class = "p" > :< / span > < span class = "nb" > center< / span > < span class = "p" > ;< / span >
< span class = "nl" > margin< / span > < span class = "p" > :< / span > < span class = "m" > 24px< / span > < span class = "m" > 0< / span > < span class = "m" > 12px< / span > < span class = "m" > 0< / span > < span class = "p" > ;< / span >
< span class = "nl" > position< / span > < span class = "p" > :< / span > < span class = "nb" > relative< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "nt" > img< / span > < span class = "nc" > .avatar< / span > < span class = "p" > {< / span >
< span class = "nl" > width< / span > < span class = "p" > :< / span > < span class = "m" > 40%< / span > < span class = "p" > ;< / span >
< span class = "nl" > border-radius< / span > < span class = "p" > :< / span > < span class = "m" > 50%< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "nc" > .container< / span > < span class = "p" > {< / span >
< span class = "nl" > padding< / span > < span class = "p" > :< / span > < span class = "m" > 16px< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "nt" > span< / span > < span class = "nc" > .psw< / span > < span class = "p" > {< / span >
< span class = "nl" > float< / span > < span class = "p" > :< / span > < span class = "nb" > right< / span > < span class = "p" > ;< / span >
< span class = "nl" > padding-top< / span > < span class = "p" > :< / span > < span class = "m" > 16px< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "c" > /* The Modal (background) */< / span >
< span class = "nc" > .modal< / span > < span class = "p" > {< / span >
< span class = "nl" > display< / span > < span class = "p" > :< / span > < span class = "nb" > none< / span > < span class = "p" > ;< / span > < span class = "c" > /* Hidden by default */< / span >
< span class = "nl" > position< / span > < span class = "p" > :< / span > < span class = "nb" > fixed< / span > < span class = "p" > ;< / span > < span class = "c" > /* Stay in place */< / span >
< span class = "nl" > z-index< / span > < span class = "p" > :< / span > < span class = "m" > 1< / span > < span class = "p" > ;< / span > < span class = "c" > /* Sit on top */< / span >
< span class = "nl" > left< / span > < span class = "p" > :< / span > < span class = "m" > 0< / span > < span class = "p" > ;< / span >
< span class = "nl" > top< / span > < span class = "p" > :< / span > < span class = "m" > 0< / span > < span class = "p" > ;< / span >
< span class = "nl" > width< / span > < span class = "p" > :< / span > < span class = "m" > 100%< / span > < span class = "p" > ;< / span > < span class = "c" > /* Full width */< / span >
< span class = "nl" > height< / span > < span class = "p" > :< / span > < span class = "m" > 100%< / span > < span class = "p" > ;< / span > < span class = "c" > /* Full height */< / span >
< span class = "nl" > overflow< / span > < span class = "p" > :< / span > < span class = "nb" > auto< / span > < span class = "p" > ;< / span > < span class = "c" > /* Enable scroll if needed */< / span >
< span class = "nl" > background-color< / span > < span class = "p" > :< / span > < span class = "nb" > rgb< / span > < span class = "p" > (< / span > < span class = "m" > 0< / span > < span class = "p" > ,< / span > < span class = "m" > 0< / span > < span class = "p" > ,< / span > < span class = "m" > 0< / span > < span class = "p" > );< / span > < span class = "c" > /* Fallback color */< / span >
< span class = "nl" > background-color< / span > < span class = "p" > :< / span > < span class = "n" > rgba< / span > < span class = "p" > (< / span > < span class = "m" > 0< / span > < span class = "p" > ,< / span > < span class = "m" > 0< / span > < span class = "p" > ,< / span > < span class = "m" > 0< / span > < span class = "p" > ,< / span > < span class = "m" > 0.4< / span > < span class = "p" > );< / span > < span class = "c" > /* Black w/ opacity */< / span >
< span class = "nl" > padding-top< / span > < span class = "p" > :< / span > < span class = "m" > 60px< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "c" > /* Modal Content/Box */< / span >
< span class = "nc" > .modal-content< / span > < span class = "p" > {< / span >
< span class = "nl" > background-color< / span > < span class = "p" > :< / span > < span class = "m" > #fefefe< / span > < span class = "p" > ;< / span >
< span class = "nl" > margin< / span > < span class = "p" > :< / span > < span class = "m" > 5%< / span > < span class = "nb" > auto< / span > < span class = "m" > 15%< / span > < span class = "nb" > auto< / span > < span class = "p" > ;< / span > < span class = "c" > /* 5% from the top, 15% from the bottom and centered */< / span >
< span class = "nl" > border< / span > < span class = "p" > :< / span > < span class = "m" > 1px< / span > < span class = "nb" > solid< / span > < span class = "m" > #888< / span > < span class = "p" > ;< / span >
< span class = "nl" > width< / span > < span class = "p" > :< / span > < span class = "m" > 40%< / span > < span class = "p" > ;< / span > < span class = "c" > /* Could be more or less, depending on screen size */< / span >
< span class = "p" > }< / span >
< span class = "c" > /* The Close Button (x) */< / span >
< span class = "nc" > .close< / span > < span class = "p" > {< / span >
< span class = "nl" > position< / span > < span class = "p" > :< / span > < span class = "nb" > absolute< / span > < span class = "p" > ;< / span >
< span class = "nl" > right< / span > < span class = "p" > :< / span > < span class = "m" > 25px< / span > < span class = "p" > ;< / span >
< span class = "nl" > top< / span > < span class = "p" > :< / span > < span class = "m" > 0< / span > < span class = "p" > ;< / span >
< span class = "nl" > color< / span > < span class = "p" > :< / span > < span class = "m" > #000< / span > < span class = "p" > ;< / span >
< span class = "nl" > font-size< / span > < span class = "p" > :< / span > < span class = "m" > 35px< / span > < span class = "p" > ;< / span >
< span class = "nl" > font-weight< / span > < span class = "p" > :< / span > < span class = "nb" > bold< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "nc" > .close< / span > < span class = "nd" > :hover< / span > < span class = "o" > ,< / span >
< span class = "nc" > .close< / span > < span class = "nd" > :focus< / span > < span class = "p" > {< / span >
< span class = "nl" > color< / span > < span class = "p" > :< / span > < span class = "no" > red< / span > < span class = "p" > ;< / span >
< span class = "nl" > cursor< / span > < span class = "p" > :< / span > < span class = "nb" > pointer< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "c" > /* Add Zoom Animation */< / span >
< span class = "nc" > .animate< / span > < span class = "p" > {< / span >
< span class = "nl" > -webkit-animation< / span > < span class = "p" > :< / span > < span class = "n" > animatezoom< / span > < span class = "m" > 0.6s< / span > < span class = "p" > ;< / span >
< span class = "nl" > animation< / span > < span class = "p" > :< / span > < span class = "n" > animatezoom< / span > < span class = "m" > 0.6s< / span >
< span class = "p" > }< / span >
< span class = "k" > @-webkit-keyframes< / span > < span class = "n" > animatezoom< / span > < span class = "p" > {< / span >
< span class = "nt" > from< / span > < span class = "p" > {< / span > < span class = "nl" > -webkit-transform< / span > < span class = "p" > :< / span > < span class = "n" > scale< / span > < span class = "p" > (< / span > < span class = "m" > 0< / span > < span class = "p" > )}< / span >
< span class = "nt" > to< / span > < span class = "p" > {< / span > < span class = "nl" > -webkit-transform< / span > < span class = "p" > :< / span > < span class = "n" > scale< / span > < span class = "p" > (< / span > < span class = "m" > 1< / span > < span class = "p" > )}< / span >
< span class = "p" > }< / span >
< span class = "k" > @keyframes< / span > < span class = "n" > animatezoom< / span > < span class = "p" > {< / span >
< span class = "nt" > from< / span > < span class = "p" > {< / span > < span class = "nl" > transform< / span > < span class = "p" > :< / span > < span class = "n" > scale< / span > < span class = "p" > (< / span > < span class = "m" > 0< / span > < span class = "p" > )}< / span >
< span class = "nt" > to< / span > < span class = "p" > {< / span > < span class = "nl" > transform< / span > < span class = "p" > :< / span > < span class = "n" > scale< / span > < span class = "p" > (< / span > < span class = "m" > 1< / span > < span class = "p" > )}< / span >
< span class = "p" > }< / span >
< span class = "c" > /* Change styles for span and cancel button on extra small screens */< / span >
< span class = "k" > @media< / span > < span class = "n" > screen< / span > < span class = "n" > and< / span > < span class = "p" > (< / span > < span class = "n" > max-width< / span > < span class = "p" > :< / span > < span class = "m" > 300px< / span > < span class = "p" > )< / span > < span class = "p" > {< / span >
< span class = "nt" > span< / span > < span class = "nc" > .psw< / span > < span class = "p" > {< / span >
< span class = "nl" > display< / span > < span class = "p" > :< / span > < span class = "nb" > block< / span > < span class = "p" > ;< / span >
< span class = "nl" > float< / span > < span class = "p" > :< / span > < span class = "nb" > none< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "nc" > .cancelbtn< / span > < span class = "p" > {< / span >
< span class = "nl" > width< / span > < span class = "p" > :< / span > < span class = "m" > 100%< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "p" > }< / span >
< span class = "nt" > < /style> < / span >
< span class = "nt" > < /head> < / span >
< span class = "nt" > < body> < / span >
< span class = "nt" > < h2> < / span > Modal Login Form< span class = "nt" > < /h2> < / span >
< span class = "nt" > < button< / span > < span class = "na" > onclick=< / span > < span class = "s" > "document.getElementById('id01').style.display='block'"< / span > < span class = "na" > style=< / span > < span class = "s" > "width:auto;"< / span > < span class = "nt" > > < / span > Login< span class = "nt" > < /button> < / span >
< span class = "nt" > < div< / span > < span class = "na" > id=< / span > < span class = "s" > "id01"< / span > < span class = "na" > class=< / span > < span class = "s" > "modal"< / span > < span class = "nt" > > < / span >
< span class = "nt" > < form< / span > < span class = "na" > class=< / span > < span class = "s" > "modal-content animate"< / span > < span class = "na" > method=< / span > < span class = "s" > "post"< / span > < span class = "nt" > > < / span >
< span class = "nt" > < div< / span > < span class = "na" > class=< / span > < span class = "s" > "imgcontainer"< / span > < span class = "nt" > > < / span >
< span class = "nt" > < span< / span > < span class = "na" > onclick=< / span > < span class = "s" > "document.getElementById('id01').style.display='none'"< / span > < span class = "na" > class=< / span > < span class = "s" > "close"< / span > < span class = "na" > title=< / span > < span class = "s" > "Close Modal"< / span > < span class = "nt" > > < / span > < span class = "ni" > & times;< / span > < span class = "nt" > < /span> < / span >
< span class = "nt" > < img< / span > < span class = "na" > src=< / span > < span class = "s" > "img_avatar2.png"< / span > < span class = "na" > alt=< / span > < span class = "s" > "Avatar"< / span > < span class = "na" > class=< / span > < span class = "s" > "avatar"< / span > < span class = "nt" > > < / span >
< span class = "nt" > < /div> < / span >
< span class = "nt" > < div< / span > < span class = "na" > class=< / span > < span class = "s" > "container"< / span > < span class = "nt" > > < / span >
< span class = "nt" > < label< / span > < span class = "na" > for=< / span > < span class = "s" > "uname"< / span > < span class = "nt" > > < b> < / span > Username< span class = "nt" > < /b> < /label> < / span >
< span class = "nt" > < input< / span > < span class = "na" > type=< / span > < span class = "s" > "text"< / span > < span class = "na" > placeholder=< / span > < span class = "s" > "Enter Username"< / span > < span class = "na" > name=< / span > < span class = "s" > "userLogin"< / span > < span class = "na" > required< / span > < span class = "nt" > > < / span >
< span class = "nt" > < label< / span > < span class = "na" > for=< / span > < span class = "s" > "psw"< / span > < span class = "nt" > > < b> < / span > Password< span class = "nt" > < /b> < /label> < / span >
< span class = "nt" > < input< / span > < span class = "na" > type=< / span > < span class = "s" > "password"< / span > < span class = "na" > placeholder=< / span > < span class = "s" > "Enter Password"< / span > < span class = "na" > name=< / span > < span class = "s" > "userPassword"< / span > < span class = "na" > required< / span > < span class = "nt" > > < / span >
< span class = "nt" > < button< / span > < span class = "na" > type=< / span > < span class = "s" > "submit"< / span > < span class = "nt" > > < / span > Login< span class = "nt" > < /button> < / span >
< span class = "nt" > < label> < / span >
< span class = "nt" > < input< / span > < span class = "na" > type=< / span > < span class = "s" > "checkbox"< / span > < span class = "na" > checked=< / span > < span class = "s" > "checked"< / span > < span class = "na" > name=< / span > < span class = "s" > "remember"< / span > < span class = "nt" > > < / span > Remember me
< span class = "nt" > < /label> < / span >
< span class = "nt" > < /div> < / span >
< span class = "nt" > < div< / span > < span class = "na" > class=< / span > < span class = "s" > "container"< / span > < span class = "na" > style=< / span > < span class = "s" > "background-color:#f1f1f1"< / span > < span class = "nt" > > < / span >
< span class = "nt" > < button< / span > < span class = "na" > type=< / span > < span class = "s" > "button"< / span > < span class = "na" > onclick=< / span > < span class = "s" > "document.getElementById('id01').style.display='none'"< / span > < span class = "na" > class=< / span > < span class = "s" > "cancelbtn"< / span > < span class = "nt" > > < / span > Cancel< span class = "nt" > < /button> < / span >
< span class = "nt" > < span< / span > < span class = "na" > class=< / span > < span class = "s" > "psw"< / span > < span class = "nt" > > < / span > Forgot < span class = "nt" > < a< / span > < span class = "na" > href=< / span > < span class = "s" > "#"< / span > < span class = "nt" > > < / span > password?< span class = "nt" > < /a> < /span> < / span >
< span class = "nt" > < /div> < / span >
< span class = "nt" > < /form> < / span >
< span class = "nt" > < /div> < / span >
< span class = "nt" > < script> < / span >
< span class = "c1" > // Get the modal< / span >
< span class = "kd" > var< / span > < span class = "nx" > modal< / span > < span class = "o" > =< / span > < span class = "nb" > document< / span > < span class = "p" > .< / span > < span class = "nf" > getElementById< / span > < span class = "p" > (< / span > < span class = "dl" > '< / span > < span class = "s1" > id01< / span > < span class = "dl" > '< / span > < span class = "p" > );< / span >
< span class = "c1" > // When the user clicks anywhere outside of the modal, close it< / span >
< span class = "nb" > window< / span > < span class = "p" > .< / span > < span class = "nx" > onclick< / span > < span class = "o" > =< / span > < span class = "kd" > function< / span > < span class = "p" > (< / span > < span class = "nx" > event< / span > < span class = "p" > )< / span > < span class = "p" > {< / span >
< span class = "k" > if < / span > < span class = "p" > (< / span > < span class = "nx" > event< / span > < span class = "p" > .< / span > < span class = "nx" > target< / span > < span class = "o" > ==< / span > < span class = "nx" > modal< / span > < span class = "p" > )< / span > < span class = "p" > {< / span >
< span class = "nx" > modal< / span > < span class = "p" > .< / span > < span class = "nx" > style< / span > < span class = "p" > .< / span > < span class = "nx" > display< / span > < span class = "o" > =< / span > < span class = "dl" > "< / span > < span class = "s2" > none< / span > < span class = "dl" > "< / span > < span class = "p" > ;< / span >
< span class = "p" > }< / span >
< span class = "p" > }< / span >
< span class = "nt" > < /script> < / span >
< span class = "nt" > < /body> < / span >
< span class = "nt" > < /html> < / span >
< / code > < / pre > < / div > < / div >
< h2 id = "openldap-client" > OpenLDAP Client< / h2 >
< h3 id = "configuration-du-client" > Configuration du client< / h3 >
< p > < strong > Machine debian stretch sur virtualbox/PC1< / strong > < br / >
machine : dbs< / p >
< p > Accès ssh< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ssh dbsuser@192.168.0.47 -p 22 -i /home/yannick/.ssh/vbox-dbs-ed25519
< / code > < / pre > < / div > < / div >
< ol >
< li > Raccorder le client au serveur LDAP et vérifier la consultation de l’ < / li >
< li > Installer la partie cliente pour augmenter la base des comptes locaux avec celle contenue dans la base LDAP< / li >
< / ol >
< h4 id = "raccordement-au-ldap" > Raccordement au ldap< / h4 >
< p > < strong > Toutes les commandes en mode su ou sudo< / strong > < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > sudo -s
< / code > < / pre > < / div > < / div >
< p > Installer les outils ldap< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > apt install ldap-utils
< / code > < / pre > < / div > < / div >
< p > Vérifier la connexion au port SSL 636 du serveur< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > openssl s_client -connect ldap.cinay.eu:636 -showcerts
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > CONNECTED(00000003)
depth=0 C = FR, ST = Pays de Loire, L = SMM, O = home, CN = ldap.cinay.eu
verify error:num=18:self signed certificate
verify return:1
depth=0 C = FR, ST = Pays de Loire, L = SMM, O = home, CN = ldap.cinay.eu
verify return:1
---
Certificate chain
0 s:C = FR, ST = Pays de Loire, L = SMM, O = home, CN = ldap.cinay.eu
i:C = FR, ST = Pays de Loire, L = SMM, O = home, CN = ldap.cinay.eu
-----BEGIN CERTIFICATE-----
MIIFlTCCA32gAwIBAgIUeXV2oJaFi7zIHu7AZGAwqFbPOm8wDQYJKoZIhvcNAQEL
[...]
< / code > < / pre > < / div > < / div >
< p > Création du dossier ssl< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > mkdir /etc/ldap/ssl
< / code > < / pre > < / div > < / div >
< p > Récupérer le certificat < strong > cert.pem< / strong > du serveur pour que le client puisse valider qu’ ’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > cat > /etc/ldap/ssl/cert.pem
< / code > < / pre > < / div > < / div >
< p > Copier/coller le contenu du fichier < strong > cert.pem< / strong > du serveur < strong > ldap.cinay.eu< / strong > dans ce terminal, et presser [Ctrl]+[D] pour valider.< / p >
< p > Configurer le fichier < strong > /etc/ldap/ldap.conf< / strong > pour y insérer les informations de connexion au serveur LDAP< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > #
# LDAP Defaults
#
# See ldap.conf(5) for details
# This file should be world readable but not world writable.
BASE dc=ldap,dc=cinay,dc=eu
URI ldaps://ldap.cinay.eu
# TLS certificates (needed for GnuTLS)
TLS_CACERT /etc/ldap/ssl/cert.pem
< / code > < / pre > < / div > < / div >
< p > Les paramètres< / p >
< ul >
< li > < strong > BASE< / strong > → synonyme de l’ < strong > -b< / strong > des commandes clientes ldap< / li >
< li > < strong > URI< / strong > → synonyme de l’ < strong > -H< / strong > < / li >
< li > < strong > TLS_CACERT< / strong > → Emplacement du certificat< / li >
< / ul >
< p > Test depuis le client< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapsearch -x
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > # extended LDIF
#
# LDAPv3
# base < dc=ldap,dc=cinay,dc=eu> (default) with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#
# ldap.cinay.eu
dn: dc=ldap,dc=cinay,dc=eu
objectClass: top
objectClass: dcObject
objectClass: organization
o: ldap.cinay.eu
dc: ldap
# admin, ldap.cinay.eu
dn: cn=admin,dc=ldap,dc=cinay,dc=eu
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
# posixaccounts, ldap.cinay.eu
dn: ou=posixaccounts,dc=ldap,dc=cinay,dc=eu
objectClass: organizationalUnit
ou: posixaccounts
# posixgroups, ldap.cinay.eu
dn: ou=posixgroups,dc=ldap,dc=cinay,dc=eu
objectClass: organizationalUnit
ou: posixgroups
# yanspm, posixaccounts, ldap.cinay.eu
dn: uid=yanspm,ou=posixaccounts,dc=ldap,dc=cinay,dc=eu
uid: yanspm
sn: yanspm
homeDirectory: /home/yanspm
cn: yanspm
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
loginShell: /bin/bash
uidNumber: 6001
gidNumber: 6001
gecos: yan
mail: yanspm@cinay.xyz
# yanspm, posixgroups, ldap.cinay.eu
dn: cn=yanspm,ou=posixgroups,dc=ldap,dc=cinay,dc=eu
objectClass: posixGroup
objectClass: top
gidNumber: 6001
cn: yanspm
# search result
search: 2
result: 0 Success
# numResponses: 7
# numEntries: 6
< / code > < / pre > < / div > < / div >
< p > La commande renvoie les 6 entrées de l’ < br / >
racine + 2 OU + admin de la racine + compte + groupe< / p >
< h3 id = "complétion-des-comptes-locaux-avec-ldap" > Complétion des comptes locaux avec LDAP< / h3 >
< p > Le programme NSS (Name Switching Service) gère les bases de compte Linux.< br / >
Il s’ < br / >
SSSD présente à NSS les comptes stockés dans LDAP< / p >
< p > En premier , installer SSSD< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > apt install sssd
< / code > < / pre > < / div > < / div >
< p > Suite à cette installation , vue sur le fichier de configuration NSS< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > cat /etc/nsswitch.conf
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > # /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.
passwd: compat sss
group: compat sss
shadow: compat sss
[...]
< / code > < / pre > < / div > < / div >
< p > On voit que le programme NSS va interroger le service SSSD (sss), cela concerne les bases < em > passwd< / em > , < em > group< / em > et < em > shadow< / em > < / p >
< p > Configurer le service SSSD avec les information de notre serveur LDAP avec le fichier < strong > /etc/sssd/sssd.conf< / strong > < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > nano /etc/sssd/sssd.conf
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > [sssd]
services = nss, pam
domains = LOCAL, LDAP
[domain/LDAP]
description = LOCAL Users domain
id_provider = local
enumerate = True
[domain/LDAP]
id_provider = ldap
auth_provider = ldap
ldap_schema = rfc2307
ldap_uri = ldaps://ldap.cinay.eu
ldap_search_base = dc=ldap,dc=cinay,dc=eu
enumerate = True
ldap_tls_cacert = /etc/ldap/ssl/cert.pem
< / code > < / pre > < / div > < / div >
< ul >
< li > La ligne < strong > services< / strong > nous informe que SSSD sera utilisé pour la gestion des comptes (< em > nss< / em > ) et l’ < em > pam< / em > )< / li >
< li > La ligne < strong > domains< / strong > prend 2 valeurs :
< ul >
< li > < strong > LOCAL< / strong > correspond aux comptes locaux de la machine (< strong > /etc/passwd,/etc/group et/etc/shadow< / strong > )< / li >
< li > < strong > LDAP< / strong > corresopn aux comptes stockés dans LDAP< / li >
< / ul >
< / li >
< li > Section < strong > [domain/LDAP]< / strong > : Nous retrouvons les paramètres de configuration du < strong > ldap.conf< / strong > , la spécification du protocole LDAP comme méthode d’ < strong > id_provider< / strong > ) et “credentials” d’ < strong > auth_provider< / strong > )< / li >
< / ul >
< p > Relancer le service (il est validé lors de l’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > systemctl restart sssd
< / code > < / pre > < / div > < / div >
< p > Vérification< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > getent passwd |grep "yanspm"
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > yanspm:*:6001:6001:yan:/home/yanspm:/bin/bash
< / code > < / pre > < / div > < / div >
< p > La commande < code class = "language-plaintext highlighter-rouge" > getent< / code > prend comme paramètre une base NSS (passwd,group ou shadow) et en affiche le contenu< br / >
Nous affichons la base < em > passwd< / em > qui contient bien le compte LDAP yanspm< / p >
< p > Créer un < strong > home< / strong > pour l’ < em > yanspm< / em > < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > mkdir /home/yanspm
< / code > < / pre > < / div > < / div >
< p > Les droits< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > chown yanspm:yanspm /home/yanspm
chmod 750 /home/yanspm
< / code > < / pre > < / div > < / div >
< p > On se déconnecte du client< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > logout
< / code > < / pre > < / div > < / div >
< p > On s’ ’ < em > yanspm< / em > créer dans LDAP et on vérifie< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > id
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > yanspm:*:6001:6001:yan:/home/yanspm:/bin/bash
< / code > < / pre > < / div > < / div >
< h1 id = "annuaire-ldap-debian-buster" > Annuaire LDAP Debian Buster< / h1 >
< ul >
< li > < a href = "/2019/10/05/OpenLDAP-installation-configuration-annuaire.html" > OpenLDAP installation et configuration annuaire< / a > < / li >
< li > < a href = "https://computingforgeeks.com/how-to-install-and-configure-openldap-server-on-debian/" > How To Install and Configure OpenLDAP Server on Debian 10 (Buster)< / a > < / li >
< li > < a href = "https://computingforgeeks.com/how-to-configure-ubuntu-18-04-ubuntu-16-04-lts-as-ldap-client/" > How to configure LDAP Client< / a > < / li >
< li > < a href = "https://computingforgeeks.com/secure-ldap-server-with-ssl-tls-on-ubuntu/" > Secure LDAP Server with SSL/TLS< / a > < / li >
< / ul >
< p > Avant de commencer l’ ’ < strong > /etc/hosts< / strong > < br / >
Relever l’ < code class = "language-plaintext highlighter-rouge" > ip a< / code > (ici notre adresse ip 192.168.0.45)< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > echo "192.168.0.45 ldap.xoyize.xyz" | sudo tee -a /etc/hosts
sudo hostnamectl set-hostname ldap.xoyize.xyz --static
< / code > < / pre > < / div > < / div >
< h3 id = "installation--configuration-et-tests-openldap" > Installation , configuration et tests openLDAP< / h3 >
< p > < strong > Installation et configuration< / strong > < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > DEBIAN_FRONTEND=noninteractive apt-get -yq install slapd ldap-utils net-tools
dpkg-reconfigure slapd
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > Voulez-vous omettre la configuration d’
Nom de domaine : xoyize.xyz
Nom d’
Mot de passe de l’
Module de base de données à utiliser : MDB
Faut-il supprimer la base de données lors de la purge du paquet ? Non
Faut-il déplacer l’
< / code > < / pre > < / div > < / div >
< p > < strong > ATTENTION ATTENTION ATTENTION< / strong > < br / >
DEBIAN 10 (Buster) avec la saisie nom de domaine ldap.xoyize.xyz donnera dc=xoyize,dc=xyz , la base LDAP sera ERRONEE < br / >
DEBIAN 9 (Stretch) avec la saisie nom de domaine ldap.xoyize.xyz donnera dc=ldap,dc=xoyize,dc=xyz< / p >
< blockquote >
< p > Dans la saisie < strong > Nom de domaine + entité< / strong > , NE PAS METTRE < strong > ldap.< / strong > ,SEULEMENT < strong > xoyize.xyz< / strong > < / p >
< / blockquote >
< p > < strong > Tests< / strong > < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > systemctl enable slapd # activation
systemctl start slapd # exécution
< / code > < / pre > < / div > < / div >
< p > Ecoute< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > netstat -laputn | grep slapd
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 10204/slapd
tcp6 0 0 :::389 :::* LISTEN 10204/slapd
< / code > < / pre > < / div > < / div >
< p > Avec quels arguments s’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > cat /var/run/slapd/slapd.args
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > /usr/sbin/slapd -h ldap:/// ldapi:/// -g openldap -u openldap -F /etc/ldap/slapd.d
< / code > < / pre > < / div > < / div >
< p > < strong > -h< / strong > → les modalités d’ < br / >
< strong > -g< / strong > et < strong > -u< / strong > → identité groupe et utilisateur sur lequel “tourne” le processus slapd< br / >
< strong > -F< / strong > → emplacement du ficher de configuration de slapd< / p >
< p > Afficher les données de l’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapsearch -x -H ldap://ldap.xoyize.xyz -b 'dc=xoyize,dc=xyz'
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > # extended LDIF
#
# LDAPv3
# base < dc=xoyize,dc=xyz> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#
# search result
search: 2
result: 32 No such object
matchedDN: dc=xoyize,dc=xyz
# numResponses: 1
root@ldap:/home/admbust# ldapsearch -x -H ldap://ldap.xoyize.xyz -b 'dc=xoyize,dc=xyz'
# extended LDIF
#
# LDAPv3
# base < dc=xoyize,dc=xyz> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#
# xoyize.xyz
dn: dc=xoyize,dc=xyz
objectClass: top
objectClass: dcObject
objectClass: organization
o: xoyize.xyz
dc: xoyize
# admin, xoyize.xyz
dn: cn=admin,dc=xoyize,dc=xyz
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
# search result
search: 2
result: 0 Success
# numResponses: 3
# numEntries: 2
< / code > < / pre > < / div > < / div >
< h3 id = "peuplement-de-lannuaire-1" > Peuplement de l’ < / h3 >
< p > Peupler l’ < strong > OU< / strong > puis un compte système avec son groupe primaire.< br / >
Créer un fichier au format LDIF (LDAP Data Interchange Format)< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > cat > ou.ldif < < EOF
dn: ou=posixaccounts,dc=xoyize,dc=xyz
objectclass: OrganizationalUnit
dn: ou=posixgroups,dc=xoyize,dc=xyz
objectclass: OrganizationalUnit
EOF
< / code > < / pre > < / div > < / div >
< p > Ajouter à l’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapadd -x -H ldap://ldap.xoyize.xyz -D 'cn=admin,dc=xoyize,dc=xyz' -f ou.ldif -W
< / code > < / pre > < / div > < / div >
< p > Ajouter le compte (utilisateur mot de passe) avec le groupe primaire< br / >
Pour créer l’ < code class = "language-plaintext highlighter-rouge" > slappasswd< / code > < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > cat > userandupg.ldif < < EOF
dn: uid=yannick, ou=posixaccounts,dc=xoyize,dc=xyz
uid: yannick
sn: yannick
homeDirectory: /home/yannick
cn: yannick
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
loginShell: /bin/bash
uidNumber: 6001
gidNumber: 6001
gecos: yan
mail: yannick@cinay.xyz
userPassword: {SSHA}NGdnkYoutO+bSUVDV1X+H6WvBBi4Cv17
dn: cn=yannick,ou=posixgroups,dc=xoyize,dc=xyz
objectClass: posixGroup
objectClass: top
gidNumber: 6001
cn: yannick
EOF
< / code > < / pre > < / div > < / div >
< p > Ajout des 2 objets< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapadd -x -H ldap://ldap.xoyize.xyz -D 'cn=admin,dc=xoyize,dc=xyz' -f userandupg.ldif -W
< / code > < / pre > < / div > < / div >
< p > Supprimer les .ldif< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > rm *.ldif
< / code > < / pre > < / div > < / div >
< h3 id = "sécurisation-ssl" > Sécurisation SSL< / h3 >
< p > SSL, couche additionnelle à TCP qui chiffre les échanges.< br / >
On va activer ldaps et modifier les paramètres de lancement du service et générer un certificat.< / p >
< p > < strong > Création des certificats< / strong > < br / >
Création du répertoire ssl et génération certificat autosigné (validité 10ans)< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > mkdir -p /etc/ldap/ssl & & cd /etc/ldap/ssl
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 3650 -nodes
< / code > < / pre > < / div > < / div >
< p > Le champ < strong > Common Name< / strong > est le plus important< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > Common Name (e.g. server FQDN or YOUR name) []:ldap.xoyize.xyz
< / code > < / pre > < / div > < / div >
< p > Changer les permissions sur les 2 fichiers (utilisateur < em > openldap< / em > ) , clé privée accessible par root uniquement< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > chown openldap:openldap /etc/ldap/ssl/key.pem
chown openldap:openldap /etc/ldap/ssl/cert.pem
chmod 400 /etc/ldap/ssl/key.pem
< / code > < / pre > < / div > < / div >
< p > < strong > Configuration de slapd< / strong > < br / >
Ajout de 2 directives pour trouver le couple clé/certificat< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > cat > cert.ldif < < EOF
dn: cn=config
changetype: modify
replace: olcTLSCACertificateFile
olcTLSCACertificateFile: /etc/ldap/ssl/cert.pem
-
replace: olcTLSCertificateFile
olcTLSCertificateFile: /etc/ldap/ssl/cert.pem
-
replace: olcTLSCertificateKeyFile
olcTLSCertificateKeyFile: /etc/ldap/ssl/key.pem
EOF
< / code > < / pre > < / div > < / div >
< p > Pour appliquer les modifications ,nous allons passer par le mode ldapi car il n’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapmodify -Y EXTERNAL -H ldapi:/// -f cert.ldif # pas de mot de passe
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
create: 2019-10-05
modifying entry "cn=config"
< / code > < / pre > < / div > < / div >
< p > create: 2019-10-05
modifier le fichier < strong > /etc/default/slapd< / strong > pour lui indiquer qu’ ’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > nano /etc/default/slapd
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > SLAPD_SERVICES="ldap:/// ldapi:/// ldaps:///"
< / code > < / pre > < / div > < / div >
< p > Relancer slapd et vérifier< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > systemctl restart slapd & & netstat -laputn | grep slapd
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 10678/slapd
tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 10678/slapd
tcp6 0 0 :::636 :::* LISTEN 10678/slapd
tcp6 0 0 :::389 :::* LISTEN 10678/slapd
< / code > < / pre > < / div > < / div >
< p > Le service slapd est en écoute SSL sur le port 636< / p >
< h3 id = "modifier-le-mot-de-passe-admin" > Modifier le mot de passe admin< / h3 >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapsearch -LLLL -Y EXTERNAL -H ldapi://// -b cn=config olcRootDN=cn=admin,dc=xoyize,dc=xyz dn olcRootDN oulcRootPW
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
dn: olcDatabase={1}mdb,cn=config
olcRootDN: cn=admin,dc=xoyize,dc=xyz
olcRootPW: {SSHA}5HDG17qV4Z6/YaLCCnrM5YTt3kFxgEAB
< / code > < / pre > < / div > < / div >
< p > Il y a deux informations intéressantes que nous connaissons maintenant :< / p >
< ul >
< li > il faut modifier l’ < / li >
< li > le mot de passe courant est haché avec SSHA algorythm.< / li >
< li > Nous devons donc générer notre nouveau mot de passe avec la même algorythme en utilisant la commande slappasswd en utilisant la syntaxe< / li >
< / ul >
< p > < code class = "language-plaintext highlighter-rouge" > slappasswd -h < the hashing scheme we want to use - for example {SHA}> < / code > < / p >
< p > Le système nous demandera alors deux fois le nouveau mot de passe à utiliser et affichera finalement la valeur de hachage qui nous intéresse (exemple ci-dessous avec mot de passe = mot de passe).< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > slappasswd -h {SSHA} New password
Re-enter new password:
{SSHA}3BtYMALVeaFu44ZYLEjK7k4Pj
< / code > < / pre > < / div > < / div >
< p > Ensuite, nous allons procéder à la modification de l’ ’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapmodify -Y EXTERNAL -H ldapi:///
< / code > < / pre > < / div > < / div >
< p > Le système démarre le mode d’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
< / code > < / pre > < / div > < / div >
< p > Tout d’ ’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > dn : olcDatabase={1}mdb,cn=config
< / code > < / pre > < / div > < / div >
< p > Ensuite, nous tapons le paramètre que nous voulons modifier :< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > remplacer : olcRootPW
< / code > < / pre > < / div > < / div >
< p > Troisièmement, nous tapons le nouveau mot de passe généré ci-dessus (copier-coller est BEAUCOUP moins sujet aux erreurs que la saisie manuelle à ce point)< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > olcRootPW : {SSHA}3BtYMALVeaFu44ZYLEjK7k4Pj
< / code > < / pre > < / div > < / div >
< p > Appuyez sur Entrée une autre fois pour valider la modification et la ligne suivante apparaîtra :< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > modification de l'entrée "olcDatabase={1}mdb,cn=config".
< / code > < / pre > < / div > < / div >
< p > Ensuite, vous pouvez quitter le mode d’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > systemctl restart slapd
< / code > < / pre > < / div > < / div >
< p > et connectez-vous maintenant avec le nouveau mot de passe défini.< / p >
< h3 id = "openldap-php-sur-serveur-1" > OpenLDAP PHP sur serveur< / h3 >
< p > Installer le module< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > sudo apt install php7.3-ldap
< / code > < / pre > < / div > < / div >
< p > Fichiers de test < strong > /var/www/default-www/test.php< / strong > < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > sudo nano /var/www/default-www/test.php
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > < ?php
$baseDN = "dc=xoyize,dc=xyz";
$ldapServer = "ldap.xoyize.xyz";
$ldapServerPort = 389;
$dn = 'cn=admin,dc=xoyize,dc=xyz';
echo "Connexion au serveur < br /> ";
$conn=ldap_connect($ldapServer);
// on teste : le serveur LDAP est-il trouvé ?
if ($conn) {
echo "Le résultat de connexion est ".$conn ."< br /> ";
} else {
die("connexion impossible au serveur LDAP");
}
// 2ème étape : on effectue une liaison au serveur, ici de type "anonyme"
// pour une recherche permise par un accès en lecture seule
// On dit qu'on utilise LDAP V3, sinon la V2 par défaut est utilisé
// et le bind ne passe pas.
if (ldap_set_option($conn, LDAP_OPT_PROTOCOL_VERSION, 3)) {
echo "Utilisation de LDAPv3 < br /> ";
} else {
echo "Impossible d'utiliser LDAP V3< br /> ";
exit;
}
// Instruction de liaison.
// Connexion anonyme
print ("Connexion anonyme...< br /> ");
$bindServerLDAP=ldap_bind($conn);
echo "Liaison au serveur : ". ldap_error($conn)."< br /> ";
// en cas de succès de la liaison, renvoie Vrai
if ($bindServerLDAP)
echo "Le résultat de connexion est $bindServerLDAP < br /> ";
else
die("Liaison impossible au serveur ldap ...");
/* 3ème étape : on effectue une recherche anonyme, avec le dn de base,
* par exemple, sur tous les noms commençant par B
*/
echo "Recherche suivant le filtre (sn=y*) < br /> ";
$query = "sn=y*";
$result=ldap_search($conn, $baseDN, $query);
echo "Le résultat de la recherche est $result < br /> ";
echo "Le nombre d'entrées retournées est ".ldap_count_entries($conn,$result)."< p /> ";
echo "Lecture de ces entrées ....< p /> ";
$info = ldap_get_entries($conn, $result);
echo "Données pour ".$info["count"]." entrées:< p /> ";
for ($i=0; $i < $info["count"]; $i++) {
echo "dn est : ". $info[$i]["cn"] ."< br /> ";
echo "premiere entree cn : ". $info[$i]["cn"][0] ."< br /> ";
echo "premier email : ". $info[$i]["mail"][0] ."< p /> ";
}
// Test utilisateur mot de passe
if($bindServerLDAP = @ldap_bind($conn, "uid=yannick,ou=posixaccounts,dc=xoyize,dc=xyz", "khtus44sf46")) {
echo "OK Test utilisateur mot de passe < br /> ";
} else {
echo "ERROR Test utilisateur mot de passe < br /> ";
}
echo "Fermeture de la connexion";
ldap_close($conn);
?>
< / code > < / pre > < / div > < / div >
< p > Attribut fichier< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > sudo chown $USER:www-data /var/www/default-www/test.php
chmod +x /var/www/default-www/test.php
< / code > < / pre > < / div > < / div >
< p > Test sur le lien https://xoyize.xyz/test.php< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > Connexion au serveur
Le résultat de connexion est Resource id #2
Utilisation de LDAPv3
Connexion anonyme...
Liaison au serveur : Success
Le résultat de connexion est 1
Recherche suivant le filtre (sn=y*)
Le résultat de la recherche est Resource id #3
Le nombre d'entrées retournées est 1
Lecture de ces entrées ....
Données pour 1 entrées:
dn est : Array
premiere entree cn : yannick
premier email : yannick@cinay.xyz
OK Test utilisateur mot de passe
Fermeture de la connexion
< / code > < / pre > < / div > < / div >
< p > Une fois la vérification effectuée , supprimer le fichier < strong > test.php< / strong > < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > sudo rm /var/www/default-www/test.php
< / code > < / pre > < / div > < / div >
< h2 id = "phpldapadmin" > PhpLdapAdmin< / h2 >
< h3 id = "pré-requis" > Pré-requis< / h3 >
< p > Pour pouvoir utiliser phpLDAPadmin, vous aurez besoin des éléments suivants :< / p >
< ul >
< li > Un serveur LDAP en cours d’
phpLDAPadmin a été développé pour gérer un serveur OpenLDAP, mais il devrait également fonctionner avec d’ ’ < / li >
< / ul >
< p > Votre serveur LDAP doit également fournir l’ < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > ldapsearch -xh HOST -b ''' -s base subschemaSubentry
< / code > < / pre > < / div > < / div >
< ul >
< li > Un serveur web (Nginx, Apache, IIS, etc.).< / li >
< li > Votre serveur web configuré pour utiliser PHP v5 ou + . PHP doit être configuré avec :
< ul >
< li > Support PCRE< / li >
< li > Prise en charge des SESSION< / li >
< li > Support GETTEXT< / li >
< li > Support LDAP< / li >
< li > Support XML< / li >
< / ul >
< / li >
< / ul >
< h3 id = "installation-1" > Installation< / h3 >
< ol >
< li > Installez et configurez votre serveur LDAP favori quelque part sur votre réseau. (Ou, obtenez vos détails LDAP auprès de votre administrateur LDAP.)< / li >
< li > Assurez-vous d’ < / li >
< li > git phpldapadmin version 1.25< / li >
< li > Décompressez l’ < / li >
< li > Placez le répertoire’ ’ < / li >
< li > Copiez’ ’ ’ ’ < br / >
< code class = "language-plaintext highlighter-rouge" > sudo cp /var/www/phpldapadmin/config/config.php.example /var/www/phpldapadmin/config/config.php< / code > < / li >
< li > Ensuite, pointez votre navigateur vers le répertoire phpldapadmin → https://lm.xoyize.xyz< / li >
< / ol >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > git clone https://github.com/leenooks/phpLDAPadmin.git
sudo mv phpLDAPadmin /var/www/phpldapadmin
sudo chown www-data:www-data -R /var/www/phpldapadmin/
sudo cp /var/www/phpldapadmin/config/config.php.example /var/www/phpldapadmin/config/config.php
< / code > < / pre > < / div > < / div >
< h3 id = "configuration-nginx" > configuration nginx< / h3 >
< p > Fichier de configuration nginx < strong > /etc/nginx/conf.d/lm.xoyize.xyz.conf< / strong > < / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > sudo nano /etc/nginx/conf.d/lm.xoyize.xyz.conf
< / code > < / pre > < / div > < / div >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > server {
listen 80;
listen [::]:80;
## redirect http to https ##
server_name lm.xoyize.xyz;
return 301 https://$server_name$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name lm.xoyize.xyz;
include ssl_params;
include header_params;
# Diffie-Hellmann
# Uncomment the following directive after DH generation
# > openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048
# ssl_dhparam /etc/ssl/private/dh2048.pem;
root /var/www/phpldapadmin;
index index.php;
location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/run/php/php7.3-fpm.sock; # PHP7.3
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $request_filename;
}
access_log /var/log/nginx/lm.xoyize.xyz-access.log;
error_log /var/log/nginx/lm.xoyize.xyz-error.log;
}
< / code > < / pre > < / div > < / div >
< p > Vérification et rechargement nginx< / p >
< div class = "language-plaintext highlighter-rouge" > < div class = "highlight" > < pre class = "highlight" > < code > sudo nginx -t
sudo systemctl reload nginx
< / code > < / pre > < / div > < / div >
< p > Accès https://lm.xoyize.xyz< / p >
< p > < img src = "/images/phpldapadmin01.png" alt = "" width = "400" / > < / p >
< p > Accès par le lien https://lm.xoyize.xyz< / p >
< / div >
< div class = "d-print-none" > < footer class = "article__footer" > < meta itemprop = "dateModified" content = "2019-10-05T00:00:00+02:00" > <!-- start custom article footer snippet -->
<!-- end custom article footer snippet -->
<!--
< div align = "right" > < a type = "application/rss+xml" href = "/feed.xml" title = "S'abonner" > < i class = "fa fa-rss fa-2x" > < / i > < / a >
  < / div >
-->
< / footer >
< div class = "article__section-navigator clearfix" > < div class = "previous" > < span > PRÉCÉDENT< / span > < a href = "/2019/09/26/PHP-connexion-et-administration-annuaire-LDAP.html" > PHP connexion et administration annuaire LDAP< / a > < / div > < div class = "next" > < span > SUIVANT< / span > < a href = "/2019/10/08/Configuration_nginx_ssl_(tls1.2-tls1.3)_Diffie-Hellman_Headers_OCSP.html" > Configuration nginx , ssl (tls1.2 tls1.3) , Diffie Hellman ,Headers et OCSP< / a > < / div > < / div > < / div >
< / div >
< script > ( f u n c t i o n ( ) {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
$(function() {
var $this ,$scroll;
var $articleContent = $('.js-article-content');
var hasSidebar = $('.js-page-root').hasClass('layout--page--sidebar');
var scroll = hasSidebar ? '.js-page-main' : 'html, body';
$scroll = $(scroll);
$articleContent.find('.highlight').each(function() {
$this = $(this);
$this.attr('data-lang', $this.find('code').attr('data-lang'));
});
$articleContent.find('h1[id], h2[id], h3[id], h4[id], h5[id], h6[id]').each(function() {
$this = $(this);
$this.append($('< a class = "anchor d-print-none" aria-hidden = "true" > < / a > ').html('< i class = "fas fa-anchor" > < / i > '));
});
$articleContent.on('click', '.anchor', function() {
$scroll.scrollToAnchor('#' + $(this).parent().attr('id'), 400);
});
});
});
})();
< / script >
< / div > < section class = "page__comments d-print-none" > < / section > < / article > <!-- start custom main bottom snippet -->
<!-- end custom main bottom snippet -->
< / div >
< / div > < / div > < / div > < / div >
< / div > < script > ( f u n c t i o n ( ) {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
var $body = $('body'), $window = $(window);
var $pageRoot = $('.js-page-root'), $pageMain = $('.js-page-main');
var activeCount = 0;
function modal(options) {
var $root = this, visible, onChange, hideWhenWindowScroll = false;
var scrollTop;
function setOptions(options) {
var _options = options || {};
visible = _options.initialVisible === undefined ? false : show;
onChange = _options.onChange;
hideWhenWindowScroll = _options.hideWhenWindowScroll;
}
function init() {
setState(visible);
}
function setState(isShow) {
if (isShow === visible) {
return;
}
visible = isShow;
if (visible) {
activeCount++;
scrollTop = $(window).scrollTop() || $pageMain.scrollTop();
$root.addClass('modal--show');
$pageMain.scrollTop(scrollTop);
activeCount === 1 & & ($pageRoot.addClass('show-modal'), $body.addClass('of-hidden'));
hideWhenWindowScroll & & window.hasEvent('touchstart') & & $window.on('scroll', hide);
$window.on('keyup', handleKeyup);
} else {
activeCount > 0 & & activeCount--;
$root.removeClass('modal--show');
$window.scrollTop(scrollTop);
activeCount === 0 & & ($pageRoot.removeClass('show-modal'), $body.removeClass('of-hidden'));
hideWhenWindowScroll & & window.hasEvent('touchstart') & & $window.off('scroll', hide);
$window.off('keyup', handleKeyup);
}
onChange & & onChange(visible);
}
function show() {
setState(true);
}
function hide() {
setState(false);
}
function handleKeyup(e) {
// Char Code: 27 ESC
if (e.which === 27) {
hide();
}
}
setOptions(options);
init();
return {
show: show,
hide: hide,
$el: $root
};
}
$.fn.modal = modal;
});
})();
< / script > < div class = "modal modal--overflow page__search-modal d-print-none js-page-search-modal" > < script >
(function () {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
// search panel
var search = (window.search || (window.search = {}));
var useDefaultSearchBox = window.useDefaultSearchBox === undefined ?
true : window.useDefaultSearchBox ;
var $searchModal = $('.js-page-search-modal');
var $searchToggle = $('.js-search-toggle');
var searchModal = $searchModal.modal({ onChange: handleModalChange, hideWhenWindowScroll: true });
var modalVisible = false;
search.searchModal = searchModal;
var $searchBox = null;
var $searchInput = null;
var $searchClear = null;
function getModalVisible() {
return modalVisible;
}
search.getModalVisible = getModalVisible;
function handleModalChange(visible) {
modalVisible = visible;
if (visible) {
search.onShow & & search.onShow();
useDefaultSearchBox & & $searchInput[0] & & $searchInput[0].focus();
} else {
search.onShow & & search.onHide();
useDefaultSearchBox & & $searchInput[0] & & $searchInput[0].blur();
setTimeout(function() {
useDefaultSearchBox & & ($searchInput.val(''), $searchBox.removeClass('not-empty'));
search.clear & & search.clear();
window.pageAsideAffix & & window.pageAsideAffix.refresh();
}, 400);
}
}
$searchToggle.on('click', function() {
modalVisible ? searchModal.hide() : searchModal.show();
});
// Char Code: 83 S, 191 /
$(window).on('keyup', function(e) {
if (!modalVisible & & !window.isFormElement(e.target || e.srcElement) & & (e.which === 83 || e.which === 191)) {
modalVisible || searchModal.show();
}
});
if (useDefaultSearchBox) {
$searchBox = $('.js-search-box');
$searchInput = $searchBox.children('input');
$searchClear = $searchBox.children('.js-icon-clear');
search.getSearchInput = function() {
return $searchInput.get(0);
};
search.getVal = function() {
return $searchInput.val();
};
search.setVal = function(val) {
$searchInput.val(val);
};
$searchInput.on('focus', function() {
$(this).addClass('focus');
});
$searchInput.on('blur', function() {
$(this).removeClass('focus');
});
$searchInput.on('input', window.throttle(function() {
var val = $(this).val();
if (val === '' || typeof val !== 'string') {
search.clear & & search.clear();
} else {
$searchBox.addClass('not-empty');
search.onInputNotEmpty & & search.onInputNotEmpty(val);
}
}, 400));
$searchClear.on('click', function() {
$searchInput.val(''); $searchBox.removeClass('not-empty');
search.clear & & search.clear();
});
}
});
})();
< / script > < div class = "search search--dark" >
< div class = "main" >
< div class = "search__header" > Recherche< / div >
< div class = "search-bar" >
< div class = "search-box js-search-box" >
< div class = "search-box__icon-search" > < i class = "fas fa-search" > < / i > < / div >
< input id = "search-input" type = "text" / >
< div class = "search-box__icon-clear js-icon-clear" >
< a > < i class = "fas fa-times" > < / i > < / a >
< / div >
< / div >
< button class = "button button--theme-dark button--pill search__cancel js-search-toggle" >
Annuler< / button >
< / div >
< div id = "results-container" class = "search-result js-search-result" > < / div >
< / div >
< / div >
<!-- Script pointing to search - script.js -->
< script > / * !
* Simple-Jekyll-Search
* Copyright 2015-2020, Christian Fei
* Licensed under the MIT License.
*/
(function(){
'use strict'
var _$Templater_7 = {
compile: compile,
setOptions: setOptions
}
const options = {}
options.pattern = /\{(.*?)\}/g
options.template = ''
options.middleware = function () {}
function setOptions (_options) {
options.pattern = _options.pattern || options.pattern
options.template = _options.template || options.template
if (typeof _options.middleware === 'function') {
options.middleware = _options.middleware
}
}
function compile (data) {
return options.template.replace(options.pattern, function (match, prop) {
const value = options.middleware(prop, data[prop], options.template)
if (typeof value !== 'undefined') {
return value
}
return data[prop] || match
})
}
'use strict';
function fuzzysearch (needle, haystack) {
var tlen = haystack.length;
var qlen = needle.length;
if (qlen > tlen) {
return false;
}
if (qlen === tlen) {
return needle === haystack;
}
outer: for (var i = 0, j = 0; i < qlen ; i + + ) {
var nch = needle.charCodeAt(i);
while (j < tlen ) {
if (haystack.charCodeAt(j++) === nch) {
continue outer;
}
}
return false;
}
return true;
}
var _$fuzzysearch_1 = fuzzysearch;
'use strict'
/* removed: const _$fuzzysearch_1 = require('fuzzysearch') */;
var _$FuzzySearchStrategy_5 = new FuzzySearchStrategy()
function FuzzySearchStrategy () {
this.matches = function (string, crit) {
return _$fuzzysearch_1(crit.toLowerCase(), string.toLowerCase())
}
}
'use strict'
var _$LiteralSearchStrategy_6 = new LiteralSearchStrategy()
function LiteralSearchStrategy () {
this.matches = function (str, crit) {
if (!str) return false
str = str.trim().toLowerCase()
crit = crit.trim().toLowerCase()
return crit.split(' ').filter(function (word) {
return str.indexOf(word) >= 0
}).length === crit.split(' ').length
}
}
'use strict'
var _$Repository_4 = {
put: put,
clear: clear,
search: search,
setOptions: __setOptions_4
}
/* removed: const _$FuzzySearchStrategy_5 = require('./SearchStrategies/FuzzySearchStrategy') */;
/* removed: const _$LiteralSearchStrategy_6 = require('./SearchStrategies/LiteralSearchStrategy') */;
function NoSort () {
return 0
}
const data = []
let opt = {}
opt.fuzzy = false
opt.limit = 10
opt.searchStrategy = opt.fuzzy ? _$FuzzySearchStrategy_5 : _$LiteralSearchStrategy_6
opt.sort = NoSort
opt.exclude = []
function put (data) {
if (isObject(data)) {
return addObject(data)
}
if (isArray(data)) {
return addArray(data)
}
return undefined
}
function clear () {
data.length = 0
return data
}
function isObject (obj) {
return Boolean(obj) & & Object.prototype.toString.call(obj) === '[object Object]'
}
function isArray (obj) {
return Boolean(obj) & & Object.prototype.toString.call(obj) === '[object Array]'
}
function addObject (_data) {
data.push(_data)
return data
}
function addArray (_data) {
const added = []
clear()
for (let i = 0, len = _data.length; i < len ; i + + ) {
if (isObject(_data[i])) {
added.push(addObject(_data[i]))
}
}
return added
}
function search (crit) {
if (!crit) {
return []
}
return findMatches(data, crit, opt.searchStrategy, opt).sort(opt.sort)
}
function __setOptions_4 (_opt) {
opt = _opt || {}
opt.fuzzy = _opt.fuzzy || false
opt.limit = _opt.limit || 10
opt.searchStrategy = _opt.fuzzy ? _$FuzzySearchStrategy_5 : _$LiteralSearchStrategy_6
opt.sort = _opt.sort || NoSort
opt.exclude = _opt.exclude || []
}
function findMatches (data, crit, strategy, opt) {
const matches = []
for (let i = 0; i < data.length & & matches . length < opt . limit ; i + + ) {
const match = findMatchesInObject(data[i], crit, strategy, opt)
if (match) {
matches.push(match)
}
}
return matches
}
function findMatchesInObject (obj, crit, strategy, opt) {
for (const key in obj) {
if (!isExcluded(obj[key], opt.exclude) & & strategy.matches(obj[key], crit)) {
return obj
}
}
}
function isExcluded (term, excludedTerms) {
for (let i = 0, len = excludedTerms.length; i < len ; i + + ) {
const excludedTerm = excludedTerms[i]
if (new RegExp(excludedTerm).test(term)) {
return true
}
}
return false
}
/* globals ActiveXObject:false */
'use strict'
var _$JSONLoader_2 = {
load: load
}
function load (location, callback) {
const xhr = getXHR()
xhr.open('GET', location, true)
xhr.onreadystatechange = createStateChangeListener(xhr, callback)
xhr.send()
}
function createStateChangeListener (xhr, callback) {
return function () {
if (xhr.readyState === 4 & & xhr.status === 200) {
try {
callback(null, JSON.parse(xhr.responseText))
} catch (err) {
callback(err, null)
}
}
}
}
function getXHR () {
return window.XMLHttpRequest ? new window.XMLHttpRequest() : new ActiveXObject('Microsoft.XMLHTTP')
}
'use strict'
var _$OptionsValidator_3 = function OptionsValidator (params) {
if (!validateParams(params)) {
throw new Error('-- OptionsValidator: required options missing')
}
if (!(this instanceof OptionsValidator)) {
return new OptionsValidator(params)
}
const requiredOptions = params.required
this.getRequiredOptions = function () {
return requiredOptions
}
this.validate = function (parameters) {
const errors = []
requiredOptions.forEach(function (requiredOptionName) {
if (typeof parameters[requiredOptionName] === 'undefined') {
errors.push(requiredOptionName)
}
})
return errors
}
function validateParams (params) {
if (!params) {
return false
}
return typeof params.required !== 'undefined' & & params.required instanceof Array
}
}
'use strict'
var _$utils_9 = {
merge: merge,
isJSON: isJSON
}
function merge (defaultParams, mergeParams) {
const mergedOptions = {}
for (const option in defaultParams) {
mergedOptions[option] = defaultParams[option]
if (typeof mergeParams[option] !== 'undefined') {
mergedOptions[option] = mergeParams[option]
}
}
return mergedOptions
}
function isJSON (json) {
try {
if (json instanceof Object & & JSON.parse(JSON.stringify(json))) {
return true
}
return false
} catch (err) {
return false
}
}
var _$src_8 = {};
(function (window) {
'use strict'
let options = {
searchInput: null,
resultsContainer: null,
json: [],
success: Function.prototype,
searchResultTemplate: '< li > < a href = "{url}" title = "{desc}" > {title}< / a > < / li > ',
templateMiddleware: Function.prototype,
sortMiddleware: function () {
return 0
},
noResultsText: 'No results found',
limit: 10,
fuzzy: false,
debounceTime: null,
exclude: []
}
let debounceTimerHandle
const debounce = function (func, delayMillis) {
if (delayMillis) {
clearTimeout(debounceTimerHandle)
debounceTimerHandle = setTimeout(func, delayMillis)
} else {
func.call()
}
}
const requiredOptions = ['searchInput', 'resultsContainer', 'json']
/* removed: const _$Templater_7 = require('./Templater') */;
/* removed: const _$Repository_4 = require('./Repository') */;
/* removed: const _$JSONLoader_2 = require('./JSONLoader') */;
const optionsValidator = _$OptionsValidator_3({
required: requiredOptions
})
/* removed: const _$utils_9 = require('./utils') */;
window.SimpleJekyllSearch = function (_options) {
const errors = optionsValidator.validate(_options)
if (errors.length > 0) {
throwError('You must specify the following required options: ' + requiredOptions)
}
options = _$utils_9.merge(options, _options)
_$Templater_7.setOptions({
template: options.searchResultTemplate,
middleware: options.templateMiddleware
})
_$Repository_4.setOptions({
fuzzy: options.fuzzy,
limit: options.limit,
sort: options.sortMiddleware,
exclude: options.exclude
})
if (_$utils_9.isJSON(options.json)) {
initWithJSON(options.json)
} else {
initWithURL(options.json)
}
const rv = {
search: search
}
typeof options.success === 'function' & & options.success.call(rv)
return rv
}
function initWithJSON (json) {
_$Repository_4.put(json)
registerInput()
}
function initWithURL (url) {
_$JSONLoader_2.load(url, function (err, json) {
if (err) {
throwError('failed to get JSON (' + url + ')')
}
initWithJSON(json)
})
}
function emptyResultsContainer () {
options.resultsContainer.innerHTML = ''
}
function appendToResultsContainer (text) {
options.resultsContainer.innerHTML += text
}
function registerInput () {
options.searchInput.addEventListener('input', function (e) {
if (isWhitelistedKey(e.which)) {
emptyResultsContainer()
debounce(function () { search(e.target.value) }, options.debounceTime)
}
})
}
function search (query) {
if (isValidQuery(query)) {
emptyResultsContainer()
render(_$Repository_4.search(query), query)
}
}
function render (results, query) {
const len = results.length
if (len === 0) {
return appendToResultsContainer(options.noResultsText)
}
for (let i = 0; i < len ; i + + ) {
results[i].query = query
appendToResultsContainer(_$Templater_7.compile(results[i]))
}
}
function isValidQuery (query) {
return query & & query.length > 0
}
function isWhitelistedKey (key) {
return [13, 16, 20, 37, 38, 39, 40, 91].indexOf(key) === -1
}
function throwError (message) {
throw new Error('SimpleJekyllSearch --- ' + message)
}
})(window)
}());
< / script >
<!-- Configuration -->
< script >
SimpleJekyllSearch({
searchInput: document.getElementById('search-input'),
resultsContainer: document.getElementById('results-container'),
noResultsText: '< p > Aucun résultat!< / p > ',
json: '/search.json',
searchResultTemplate: '< li > < a href = "{url}" > {date} {title}< / a > (Création {create})< / li > '
})
< / script >
< / div > < / div >
< script > ( f u n c t i o n ( ) {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
function scrollToAnchor(anchor, duration, callback) {
var $root = this;
$root.animate({ scrollTop: $(anchor).position().top }, duration, function() {
window.history.replaceState(null, '', window.location.href.split('#')[0] + anchor);
callback & & callback();
});
}
$.fn.scrollToAnchor = scrollToAnchor;
});
})();
(function() {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
function affix(options) {
var $root = this, $window = $(window), $scrollTarget, $scroll,
offsetBottom = 0, scrollTarget = window, scroll = window.document, disabled = false, isOverallScroller = true,
rootTop, rootLeft, rootHeight, scrollBottom, rootBottomTop,
hasInit = false, curState;
function setOptions(options) {
var _options = options || {};
_options.offsetBottom & & (offsetBottom = _options.offsetBottom);
_options.scrollTarget & & (scrollTarget = _options.scrollTarget);
_options.scroll & & (scroll = _options.scroll);
_options.disabled !== undefined & & (disabled = _options.disabled);
$scrollTarget = $(scrollTarget);
isOverallScroller = window.isOverallScroller($scrollTarget[0]);
$scroll = $(scroll);
}
function preCalc() {
top();
rootHeight = $root.outerHeight();
rootTop = $root.offset().top + (isOverallScroller ? 0 : $scrollTarget.scrollTop());
rootLeft = $root.offset().left;
}
function calc(needPreCalc) {
needPreCalc & & preCalc();
scrollBottom = $scroll.outerHeight() - offsetBottom - rootHeight;
rootBottomTop = scrollBottom - rootTop;
}
function top() {
if (curState !== 'top') {
$root.removeClass('fixed').css({
left: 0,
top: 0
});
curState = 'top';
}
}
function fixed() {
if (curState !== 'fixed') {
$root.addClass('fixed').css({
left: rootLeft + 'px',
top: 0
});
curState = 'fixed';
}
}
function bottom() {
if (curState !== 'bottom') {
$root.removeClass('fixed').css({
left: 0,
top: rootBottomTop + 'px'
});
curState = 'bottom';
}
}
function setState() {
var scrollTop = $scrollTarget.scrollTop();
if (scrollTop >= rootTop & & scrollTop < = scrollBottom) {
fixed();
} else if (scrollTop < rootTop ) {
top();
} else {
bottom();
}
}
function init() {
if(!hasInit) {
var interval, timeout;
calc(true); setState();
// run calc every 100 millisecond
interval = setInterval(function() {
calc();
}, 100);
timeout = setTimeout(function() {
clearInterval(interval);
}, 45000);
window.pageLoad.then(function() {
setTimeout(function() {
clearInterval(interval);
clearTimeout(timeout);
}, 3000);
});
$scrollTarget.on('scroll', function() {
disabled || setState();
});
$window.on('resize', function() {
disabled || (calc(true), setState());
});
hasInit = true;
}
}
setOptions(options);
if (!disabled) {
init();
}
$window.on('resize', window.throttle(function() {
init();
}, 200));
return {
setOptions: setOptions,
refresh: function() {
calc(true, { animation: false }); setState();
}
};
}
$.fn.affix = affix;
});
})();
(function() {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
function toc(options) {
var $root = this, $window = $(window), $scrollTarget, $scroller, $tocUl = $('< ul class = "toc toc--ellipsis" > < / ul > '), $tocLi, $headings, $activeLast, $activeCur,
selectors = 'h1,h2,h3', container = 'body', scrollTarget = window, scroller = 'html, body', disabled = false,
headingsPos, scrolling = false, hasRendered = false, hasInit = false;
function setOptions(options) {
var _options = options || {};
_options.selectors & & (selectors = _options.selectors);
_options.container & & (container = _options.container);
_options.scrollTarget & & (scrollTarget = _options.scrollTarget);
_options.scroller & & (scroller = _options.scroller);
_options.disabled !== undefined & & (disabled = _options.disabled);
$headings = $(container).find(selectors).filter('[id]');
$scrollTarget = $(scrollTarget);
$scroller = $(scroller);
}
function calc() {
headingsPos = [];
$headings.each(function() {
headingsPos.push(Math.floor($(this).position().top));
});
}
function setState(element, disabled) {
var scrollTop = $scrollTarget.scrollTop(), i;
if (disabled || !headingsPos || headingsPos.length < 1 ) { return ; }
if (element) {
$activeCur = element;
} else {
for (i = 0; i < headingsPos.length ; i + + ) {
if (scrollTop >= headingsPos[i]) {
$activeCur = $tocLi.eq(i);
} else {
$activeCur || ($activeCur = $tocLi.eq(i));
break;
}
}
}
$activeLast & & $activeLast.removeClass('active');
($activeLast = $activeCur).addClass('active');
}
function render() {
if(!hasRendered) {
$root.append($tocUl);
$headings.each(function() {
var $this = $(this);
$tocUl.append($('< li > < / li > ').addClass('toc-' + $this.prop('tagName').toLowerCase())
.append($('< a > < / a > ').text($this.text()).attr('href', '#' + $this.prop('id'))));
});
$tocLi = $tocUl.children('li');
$tocUl.on('click', 'a', function(e) {
e.preventDefault();
var $this = $(this);
scrolling = true;
setState($this.parent());
$scroller.scrollToAnchor($this.attr('href'), 400, function() {
scrolling = false;
});
});
}
hasRendered = true;
}
function init() {
var interval, timeout;
if(!hasInit) {
render(); calc(); setState(null, scrolling);
// run calc every 100 millisecond
interval = setInterval(function() {
calc();
}, 100);
timeout = setTimeout(function() {
clearInterval(interval);
}, 45000);
window.pageLoad.then(function() {
setTimeout(function() {
clearInterval(interval);
clearTimeout(timeout);
}, 3000);
});
$scrollTarget.on('scroll', function() {
disabled || setState(null, scrolling);
});
$window.on('resize', window.throttle(function() {
if (!disabled) {
render(); calc(); setState(null, scrolling);
}
}, 100));
}
hasInit = true;
}
setOptions(options);
if (!disabled) {
init();
}
$window.on('resize', window.throttle(function() {
init();
}, 200));
return {
setOptions: setOptions
};
}
$.fn.toc = toc;
});
})();
/*(function () {
})();*/
< / script > < script >
/* toc must before affix, since affix need to konw toc' height. */(function() {
var SOURCES = window.TEXT_VARIABLES.sources;
var TOC_SELECTOR = window.TEXT_VARIABLES.site.toc.selectors;
window.Lazyload.js(SOURCES.jquery, function() {
var $window = $(window);
var $articleContent = $('.js-article-content');
var $tocRoot = $('.js-toc-root'), $col2 = $('.js-col-aside');
var toc;
var tocDisabled = false;
var hasSidebar = $('.js-page-root').hasClass('layout--page--sidebar');
var hasToc = $articleContent.find(TOC_SELECTOR).length > 0;
function disabled() {
return $col2.css('display') === 'none' || !hasToc;
}
tocDisabled = disabled();
toc = $tocRoot.toc({
selectors: TOC_SELECTOR,
container: $articleContent,
scrollTarget: hasSidebar ? '.js-page-main' : null,
scroller: hasSidebar ? '.js-page-main' : null,
disabled: tocDisabled
});
$window.on('resize', window.throttle(function() {
tocDisabled = disabled();
toc & & toc.setOptions({
disabled: tocDisabled
});
}, 100));
});
})();
(function() {
var SOURCES = window.TEXT_VARIABLES.sources;
window.Lazyload.js(SOURCES.jquery, function() {
var $window = $(window), $pageFooter = $('.js-page-footer');
var $pageAside = $('.js-page-aside');
var affix;
var tocDisabled = false;
var hasSidebar = $('.js-page-root').hasClass('layout--page--sidebar');
affix = $pageAside.affix({
offsetBottom: $pageFooter.outerHeight(),
scrollTarget: hasSidebar ? '.js-page-main' : null,
scroller: hasSidebar ? '.js-page-main' : null,
scroll: hasSidebar ? $('.js-page-main').children() : null,
disabled: tocDisabled
});
$window.on('resize', window.throttle(function() {
affix & & affix.setOptions({
disabled: tocDisabled
});
}, 100));
window.pageAsideAffix = affix;
});
})();
< / script > <!-- -->
< / div >
< script > ( f u n c t i o n ( ) {
var $root = document.getElementsByClassName('root')[0];
if (window.hasEvent('touchstart')) {
$root.dataset.isTouch = true;
document.addEventListener('touchstart', function(){}, false);
}
})();
< / script >
< / body >
< / html >
