]>
Commit | Line | Data |
---|---|---|
22149d17 IB |
1 | <?php |
2 | if (!isset($_SERVER["REMOTE_USER"])) { | |
3 | die("please login"); | |
4 | } | |
5 | $ldap_user = $_SERVER["REMOTE_USER"]; | |
6 | $ldap_host = getenv("TASKD_LDAP_HOST"); | |
7 | $ldap_dn = getenv('TASKD_LDAP_DN'); | |
8 | $ldap_password = getenv('TASKD_LDAP_PASSWORD'); | |
9 | $ldap_base = getenv('TASKD_LDAP_BASE'); | |
10 | $ldap_filter = getenv('TASKD_LDAP_FILTER'); | |
11 | $host = getenv('TASKD_HOST'); | |
12 | $vardir = getenv('TASKD_VARDIR'); | |
13 | ||
14 | $connect = ldap_connect($ldap_host); | |
15 | ldap_set_option($connect, LDAP_OPT_PROTOCOL_VERSION, 3); | |
16 | if (!$connect || !ldap_bind($connect, $ldap_dn, $ldap_password)) { | |
17 | die("impossible to connect to LDAP"); | |
18 | } | |
19 | ||
20 | $search_query = str_replace('%login%', ldap_escape($ldap_user), $ldap_filter); | |
21 | ||
22 | $search = ldap_search($connect, $ldap_base, $search_query); | |
23 | $info = ldap_get_entries($connect, $search); | |
24 | ||
25 | if (ldap_count_entries($connect, $search) != 1) { | |
26 | die("Impossible to find user in LDAP"); | |
27 | } | |
28 | ||
29 | $entries = []; | |
30 | foreach($info[0]["immaetaskid"] as $key => $value) { | |
31 | if ($key !== "count") { | |
32 | $entries[] = explode(":", $value); | |
33 | } | |
34 | } | |
35 | ||
36 | if (isset($_GET["file"])) { | |
37 | $basecert = $vardir . "/userkeys/" . $ldap_user; | |
38 | if (!file_exists($basecert . ".cert.pem")) { | |
39 | exec("taskserver-user-certs $ldap_user"); | |
40 | } | |
41 | $certificate = file_get_contents($basecert . ".cert.pem"); | |
42 | $cert_key = file_get_contents($basecert . ".key.pem"); | |
43 | $server_cert = file_get_contents($vardir . "/keys/server.cert"); | |
44 | ||
45 | $file = $_GET["file"]; | |
46 | switch($file) { | |
47 | case "ca.cert.pem": | |
48 | $content = $server_cert; | |
49 | $name = "ca.cert.pem"; | |
50 | $type = "application/x-x509-ca-cert"; | |
51 | break; | |
52 | case "cert.pem": | |
53 | $content = $certificate; | |
54 | $name = $ldap_user . ".cert.pem"; | |
55 | $type = "application/x-x509-ca-cert"; | |
56 | break; | |
57 | case "key.pem": | |
58 | $content = $cert_key; | |
59 | $name = $ldap_user . ".key.pem"; | |
60 | $type = "application/x-x509-ca-cert"; | |
61 | break; | |
62 | case "mirakel"; | |
63 | foreach ($entries as $entry) { | |
64 | list($org, $user, $key) = $entry; | |
65 | if ($key == $_GET["key"]) { break; } | |
66 | } | |
67 | $name = $user . ".mirakel"; | |
68 | $type = "text/plain"; | |
69 | $content = "username: $user | |
70 | org: $org | |
71 | user key: $key | |
72 | server: $host | |
73 | client.cert: | |
74 | $certificate | |
75 | Client.key: | |
76 | $cert_key | |
77 | ca.cert: | |
78 | $server_cert | |
79 | "; | |
80 | break; | |
81 | default: | |
82 | die("invalid file name"); | |
83 | break; | |
84 | } | |
85 | ||
86 | header("Content-Type: $type"); | |
87 | header('Content-Disposition: attachment; filename="' . $name . '"'); | |
88 | header('Content-Transfer-Encoding: binary'); | |
89 | header('Accept-Ranges: bytes'); | |
90 | header('Cache-Control: private'); | |
91 | header('Pragma: private'); | |
92 | echo $content; | |
93 | exit; | |
94 | } | |
95 | ?> | |
96 | <html> | |
97 | <header> | |
98 | <title>Taskwarrior configuration</title> | |
99 | </header> | |
100 | <body> | |
101 | <ul> | |
102 | <li><a href="?file=ca.cert.pem">ca.cert.pem</a></li> | |
103 | <li><a href="?file=cert.pem"><?php echo $ldap_user; ?>.cert.pem</a></li> | |
104 | <li><a href="?file=key.pem"><?php echo $ldap_user; ?>.key.pem</a></li> | |
105 | </ul> | |
106 | For command line interface, download the files, put them near your Taskwarrior | |
107 | configuration files, and add that to your Taskwarrior configuration: | |
108 | <pre> | |
109 | taskd.certificate=/path/to/<?php echo $ldap_user; ?>.cert.pem | |
110 | taskd.key=/path/to/<?php echo $ldap_user; ?>.key.pem | |
111 | taskd.server=<?php echo $host ."\n"; ?> | |
112 | <?php if (count($entries) > 1) { | |
113 | echo "# Chose one of them\n"; | |
114 | foreach($entries as $entry) { | |
115 | list($org, $user, $key) = $entry; | |
116 | echo "# taskd.credentials=$org/$user/$key\n"; | |
117 | } | |
118 | } else { ?> | |
119 | taskd.credentials=<?php echo $entries[0][0]; ?>/<?php echo $entries[0][1]; ?>/<?php echo $entries[0][2]; ?> | |
120 | <?php } ?> | |
121 | taskd.ca=/path/to/ca.cert.pem | |
122 | </pre> | |
123 | For Mirakel, download and import the file: | |
124 | <ul> | |
125 | <?php | |
126 | foreach ($entries as $entry) { | |
127 | list($org, $user, $key) = $entry; | |
128 | echo '<li><a href="?file=mirakel&key='.$key.'">' . $user . '.mirakel</a></li>'; | |
129 | } | |
130 | ?> | |
131 | </ul> | |
132 | For Android Taskwarrior app, see instructions <a href="https://bitbucket.org/kvorobyev/taskwarriorandroid/wiki/Configuration">here</a>. | |
133 | </body> | |
134 | </html> | |
135 |