1 files changed, 135 insertions, 0 deletions
diff --git a/nixops/modules/task/www/index.php b/nixops/modules/task/www/index.php
new file mode 100644
index 0000000..829cdd0
--- /dev/null
+++ b/nixops/modules/task/www/index.php
@@ -0,0 +1,135 @@
+<?php
+if (!isset($_SERVER["REMOTE_USER"])) {
+  die("please login");
+}
+$ldap_user = $_SERVER["REMOTE_USER"];
+$ldap_host = getenv("TASKD_LDAP_HOST");
+$ldap_dn = getenv('TASKD_LDAP_DN');
+$ldap_password = getenv('TASKD_LDAP_PASSWORD');
+$ldap_base = getenv('TASKD_LDAP_BASE');
+$ldap_filter = getenv('TASKD_LDAP_FILTER');
+$host   = getenv('TASKD_HOST');
+$vardir = getenv('TASKD_VARDIR');
+$connect = ldap_connect($ldap_host);
+ldap_set_option($connect, LDAP_OPT_PROTOCOL_VERSION, 3);
+if (!$connect || !ldap_bind($connect, $ldap_dn, $ldap_password)) {
+  die("impossible to connect to LDAP");
+}
+$search_query = str_replace('%login%', ldap_escape($ldap_user), $ldap_filter);
+$search = ldap_search($connect, $ldap_base, $search_query);
+$info = ldap_get_entries($connect, $search);
+if (ldap_count_entries($connect, $search) != 1) {
+  die("Impossible to find user in LDAP");
+}
+$entries = [];
+foreach($info[0]["immaetaskid"] as $key => $value) {
+  if ($key !== "count") {
+    $entries[] = explode(":", $value);
+  }
+}
+if (isset($_GET["file"])) {
+  $basecert = $vardir . "/userkeys/" . $ldap_user;
+  if (!file_exists($basecert . ".cert.pem")) {
+    exec("taskserver-user-certs $ldap_user");
+  }
+  $certificate = file_get_contents($basecert . ".cert.pem");
+  $cert_key    = file_get_contents($basecert . ".key.pem");
+  $server_cert = file_get_contents($vardir . "/keys/server.cert");
+  $file = $_GET["file"];
+  switch($file) {
+  case "ca.cert.pem":
+    $content = $server_cert;
+    $name    = "ca.cert.pem";
+    $type    = "application/x-x509-ca-cert";
+    break;
+  case "cert.pem":
+    $content = $certificate;
+    $name    = $ldap_user . ".cert.pem";
+    $type    = "application/x-x509-ca-cert";
+    break;
+  case "key.pem":
+    $content = $cert_key;
+    $name    = $ldap_user . ".key.pem";
+    $type    = "application/x-x509-ca-cert";
+    break;
+  case "mirakel";
+    foreach ($entries as $entry) {
+      list($org, $user, $key) = $entry;
+      if ($key == $_GET["key"]) { break; }
+    }
+    $name    = $user . ".mirakel";
+    $type    = "text/plain";
+    $content = "username: $user
+org: $org
+user key: $key
+server: $host
+client.cert:
+$certificate
+Client.key:
+$cert_key
+ca.cert:
+$server_cert
+";
+    break;
+  default:
+    die("invalid file name");
+    break;
+  }
+  header("Content-Type: $type");
+  header('Content-Disposition: attachment; filename="' . $name . '"');
+  header('Content-Transfer-Encoding: binary');
+  header('Accept-Ranges: bytes');
+  header('Cache-Control: private');
+  header('Pragma: private');
+  echo $content;
+  exit;
+}
+?>
+<html>
+<header>
+  <title>Taskwarrior configuration</title>
+</header>
+<body>
+<ul>
+  <li><a href="?file=ca.cert.pem">ca.cert.pem</a></li>
+  <li><a href="?file=cert.pem"><?php echo $ldap_user; ?>.cert.pem</a></li>
+  <li><a href="?file=key.pem"><?php echo $ldap_user; ?>.key.pem</a></li>
+</ul>
+For command line interface, download the files, put them near your Taskwarrior
+configuration files, and add that to your Taskwarrior configuration:
+<pre>
+taskd.certificate=/path/to/<?php echo $ldap_user; ?>.cert.pem
+taskd.key=/path/to/<?php echo $ldap_user; ?>.key.pem
+taskd.server=<?php echo $host ."\n"; ?>
+<?php if (count($entries) > 1) {
+  echo "# Chose one of them\n";
+  foreach($entries as $entry) {
+    list($org, $user, $key) = $entry;
+    echo "# taskd.credentials=$org/$user/$key\n";
+  }
+} else { ?>
+taskd.credentials=<?php echo $entries[0][0]; ?>/<?php echo $entries[0][1]; ?>/<?php echo $entries[0][2]; ?>
+<?php } ?>
+taskd.ca=/path/to/ca.cert.pem
+</pre>
+For Mirakel, download and import the file:
+<ul>
+<?php
+foreach ($entries as $entry) {
+  list($org, $user, $key) = $entry;
+  echo '<li><a href="?file=mirakel&key='.$key.'">' . $user . '.mirakel</a></li>';
+}
+?>
+</ul>
+For Android Taskwarrior app, see instructions <a href="https://bitbucket.org/kvorobyev/taskwarriorandroid/wiki/Configuration">here</a>.
+</body>
+</html>

diff --git a/nixops/modules/task/www/index.php b/nixops/modules/task/www/index.php new file mode 100644 index 0000000..829cdd0 --- /dev/null +++ b/nixops/modules/task/www/index.php
@@ -0,0 +1,135 @@
	1	<?php
	2	if (!isset($_SERVER["REMOTE_USER"])) {
	3	die("please login");
	4	}
	5	$ldap_user = $_SERVER["REMOTE_USER"];
	6	$ldap_host = getenv("TASKD_LDAP_HOST");
	7	$ldap_dn = getenv('TASKD_LDAP_DN');
	8	$ldap_password = getenv('TASKD_LDAP_PASSWORD');
	9	$ldap_base = getenv('TASKD_LDAP_BASE');
	10	$ldap_filter = getenv('TASKD_LDAP_FILTER');
	11	$host = getenv('TASKD_HOST');
	12	$vardir = getenv('TASKD_VARDIR');
	13
	14	$connect = ldap_connect($ldap_host);
	15	ldap_set_option($connect, LDAP_OPT_PROTOCOL_VERSION, 3);
	16	if (!$connect \|\| !ldap_bind($connect, $ldap_dn, $ldap_password)) {
	17	die("impossible to connect to LDAP");
	18	}
	19
	20	$search_query = str_replace('%login%', ldap_escape($ldap_user), $ldap_filter);
	21
	22	$search = ldap_search($connect, $ldap_base, $search_query);
	23	$info = ldap_get_entries($connect, $search);
	24
	25	if (ldap_count_entries($connect, $search) != 1) {
	26	die("Impossible to find user in LDAP");
	27	}
	28
	29	$entries = [];
	30	foreach($info[0]["immaetaskid"] as $key => $value) {
	31	if ($key !== "count") {
	32	$entries[] = explode(":", $value);
	33	}
	34	}
	35
	36	if (isset($_GET["file"])) {
	37	$basecert = $vardir . "/userkeys/" . $ldap_user;
	38	if (!file_exists($basecert . ".cert.pem")) {
	39	exec("taskserver-user-certs $ldap_user");
	40	}
	41	$certificate = file_get_contents($basecert . ".cert.pem");
	42	$cert_key = file_get_contents($basecert . ".key.pem");
	43	$server_cert = file_get_contents($vardir . "/keys/server.cert");
	44
	45	$file = $_GET["file"];
	46	switch($file) {
	47	case "ca.cert.pem":
	48	$content = $server_cert;
	49	$name = "ca.cert.pem";
	50	$type = "application/x-x509-ca-cert";
	51	break;
	52	case "cert.pem":
	53	$content = $certificate;
	54	$name = $ldap_user . ".cert.pem";
	55	$type = "application/x-x509-ca-cert";
	56	break;
	57	case "key.pem":
	58	$content = $cert_key;
	59	$name = $ldap_user . ".key.pem";
	60	$type = "application/x-x509-ca-cert";
	61	break;
	62	case "mirakel";
	63	foreach ($entries as $entry) {
	64	list($org, $user, $key) = $entry;
	65	if ($key == $_GET["key"]) { break; }
	66	}
	67	$name = $user . ".mirakel";
	68	$type = "text/plain";
	69	$content = "username: $user
	70	org: $org
	71	user key: $key
	72	server: $host
	73	client.cert:
	74	$certificate
	75	Client.key:
	76	$cert_key
	77	ca.cert:
	78	$server_cert
	79	";
	80	break;
	81	default:
	82	die("invalid file name");
	83	break;
	84	}
	85
	86	header("Content-Type: $type");
	87	header('Content-Disposition: attachment; filename="' . $name . '"');
	88	header('Content-Transfer-Encoding: binary');
	89	header('Accept-Ranges: bytes');
	90	header('Cache-Control: private');
	91	header('Pragma: private');
	92	echo $content;
	93	exit;
	94	}
	95	?>
	96	<html>
	97	<header>
	98	<title>Taskwarrior configuration</title>
	99	</header>
	100	<body>
	101	<ul>
	102	<li><a href="?file=ca.cert.pem">ca.cert.pem</a></li>
	103	<li><a href="?file=cert.pem"><?php echo $ldap_user; ?>.cert.pem</a></li>
	104	<li><a href="?file=key.pem"><?php echo $ldap_user; ?>.key.pem</a></li>
	105	</ul>
	106	For command line interface, download the files, put them near your Taskwarrior
	107	configuration files, and add that to your Taskwarrior configuration:
	108	<pre>
	109	taskd.certificate=/path/to/<?php echo $ldap_user; ?>.cert.pem
	110	taskd.key=/path/to/<?php echo $ldap_user; ?>.key.pem
	111	taskd.server=<?php echo $host ."\n"; ?>
	112	<?php if (count($entries) > 1) {
	113	echo "# Chose one of them\n";
	114	foreach($entries as $entry) {
	115	list($org, $user, $key) = $entry;
	116	echo "# taskd.credentials=$org/$user/$key\n";
	117	}
	118	} else { ?>
	119	taskd.credentials=<?php echo $entries[0][0]; ?>/<?php echo $entries[0][1]; ?>/<?php echo $entries[0][2]; ?>
	120	<?php } ?>
	121	taskd.ca=/path/to/ca.cert.pem
	122	</pre>
	123	For Mirakel, download and import the file:
	124	<ul>
	125	<?php
	126	foreach ($entries as $entry) {
	127	list($org, $user, $key) = $entry;
	128	echo '<li><a href="?file=mirakel&key='.$key.'">' . $user . '.mirakel</a></li>';
	129	}
	130	?>
	131	</ul>
	132	For Android Taskwarrior app, see instructions <a href="https://bitbucket.org/kvorobyev/taskwarriorandroid/wiki/Configuration">here</a>.
	133	</body>
	134	</html>
	135