setAction('system_authservers.php?act=edit');
$form->addGlobal(new Form_Input(
'userid',
null,
'hidden',
$id
));
$section = new Form_Section('Server Settings');
$section->addInput($input = new Form_Input(
'name',
'*Descriptive name',
'text',
$pconfig['name']
));
$section->addInput($input = new Form_Select(
'type',
'*Type',
$pconfig['type'],
$auth_server_types
))->toggles();
$form->add($section);
// ==== LDAP settings =========================================================
$section = new Form_Section('LDAP Server Settings');
$section->addClass('toggle-ldap collapse');
if (!isset($pconfig['type']) || $pconfig['type'] == 'ldap')
$section->addClass('in');
$section->addInput(new Form_Input(
'ldap_host',
'*Hostname or IP address',
'text',
$pconfig['ldap_host']
))->setHelp('NOTE: When using SSL or STARTTLS, this hostname MUST match the Common Name '.
'(CN) of the LDAP server\'s SSL Certificate.');
$section->addInput(new Form_Input(
'ldap_port',
'*Port value',
'number',
$pconfig['ldap_port']
));
$section->addInput(new Form_Select(
'ldap_urltype',
'*Transport',
$pconfig['ldap_urltype'],
array_combine(array_keys($ldap_urltypes), array_keys($ldap_urltypes))
));
if (empty($a_ca))
{
$section->addInput(new Form_StaticText(
'Peer Certificate Authority',
'No Certificate Authorities defined. Create one under System > Cert. Manager.'
));
}
else
{
$ldapCaRef = array( 'global' => 'Global Root CA List' );
foreach ($a_ca as $ca)
$ldapCaRef[ $ca['refid'] ] = $ca['descr'];
$section->addInput(new Form_Select(
'ldap_caref',
'Peer Certificate Authority',
$pconfig['ldap_caref'],
$ldapCaRef
))->setHelp('This option is used if \'SSL Encrypted\' '.
'or \'TCP - STARTTLS\' options are chosen. '.
'It must match with the CA in the AD otherwise problems will arise.');
}
$section->addInput(new Form_Select(
'ldap_protver',
'*Protocol version',
$pconfig['ldap_protver'],
array_combine($ldap_protvers, $ldap_protvers)
));
$section->addInput(new Form_Input(
'ldap_timeout',
'Server Timeout',
'number',
$pconfig['ldap_timeout'],
['placeholder' => 25]
))->setHelp('Timeout for LDAP operations (seconds)');
$group = new Form_Group('Search scope');
$SSF = new Form_Select(
'ldap_scope',
'*Level',
$pconfig['ldap_scope'],
$ldap_scopes
);
$SSB = new Form_Input(
'ldap_basedn',
'Base DN',
'text',
$pconfig['ldap_basedn']
);
$section->addInput(new Form_StaticText(
'Search scope',
'Level ' . $SSF . ' ' . 'Base DN' . $SSB
));
$group = new Form_Group('*Authentication containers');
$group->add(new Form_Input(
'ldapauthcontainers',
'Containers',
'text',
$pconfig['ldap_authcn']
))->setHelp('Note: Semi-Colon separated. This will be prepended to the search '.
'base dn above or the full container path can be specified containing a dc= '.
'component.%1$sExample: CN=Users;DC=example,DC=com or OU=Staff;OU=Freelancers', ' ');
$group->add(new Form_Button(
'Select',
'Select a container',
null,
'fa-search'
))->setAttribute('type','button')->addClass('btn-info');
$section->add($group);
$section->addInput(new Form_Checkbox(
'ldap_extended_enabled',
'Extended query',
'Enable extended query',
$pconfig['ldap_extended_enabled']
));
$group = new Form_Group('Query');
$group->addClass('extended');
$group->add(new Form_Input(
'ldap_extended_query',
'Query',
'text',
$pconfig['ldap_extended_query']
))->setHelp('Example: memberOf=CN=Groupname,OU=MyGroups,DC=example,DC=com');
$section->add($group);
$section->addInput(new Form_Checkbox(
'ldap_anon',
'Bind anonymous',
'Use anonymous binds to resolve distinguished names',
$pconfig['ldap_anon']
));
$group = new Form_Group('*Bind credentials');
$group->addClass('ldapanon');
$group->add(new Form_Input(
'ldap_binddn',
'User DN:',
'text',
$pconfig['ldap_binddn']
));
$group->add(new Form_Input(
'ldap_bindpw',
'Password',
'password',
$pconfig['ldap_bindpw']
));
$section->add($group);
if (!isset($id)) {
$template_list = array();
foreach ($ldap_templates as $option => $template) {
$template_list[$option] = $template['desc'];
}
$section->addInput(new Form_Select(
'ldap_tmpltype',
'Initial Template',
$pconfig['ldap_template'],
$template_list
));
}
$section->addInput(new Form_Input(
'ldap_attr_user',
'*User naming attribute',
'text',
$pconfig['ldap_attr_user']
));
$section->addInput(new Form_Input(
'ldap_attr_group',
'*Group naming attribute',
'text',
$pconfig['ldap_attr_group']
));
$section->addInput(new Form_Input(
'ldap_attr_member',
'*Group member attribute',
'text',
$pconfig['ldap_attr_member']
));
$section->addInput(new Form_Checkbox(
'ldap_rfc2307',
'RFC 2307 Groups',
'LDAP Server uses RFC 2307 style group membership',
$pconfig['ldap_rfc2307']
))->setHelp('RFC 2307 style group membership has members listed on the group '.
'object rather than using groups listed on user object. Leave unchecked '.
'for Active Directory style group membership (RFC 2307bis).');
$section->addInput(new Form_Input(
'ldap_attr_groupobj',
'Group Object Class',
'text',
$pconfig['ldap_attr_groupobj'],
['placeholder' => 'posixGroup']
))->setHelp('Object class used for groups in RFC2307 mode. '.
'Typically "posixGroup" or "group".');
$section->addInput(new Form_Checkbox(
'ldap_utf8',
'UTF8 Encode',
'UTF8 encode LDAP parameters before sending them to the server.',
$pconfig['ldap_utf8']
))->setHelp('Required to support international characters, but may not be '.
'supported by every LDAP server.');
$section->addInput(new Form_Checkbox(
'ldap_nostrip_at',
'Username Alterations',
'Do not strip away parts of the username after the @ symbol',
$pconfig['ldap_nostrip_at']
))->setHelp('e.g. user@host becomes user when unchecked.');
$form->add($section);
// ==== RADIUS section ========================================================
$section = new Form_Section('RADIUS Server Settings');
$section->addClass('toggle-radius collapse');
$section->addInput(new Form_Select(
'radius_protocol',
'*Protocol',
$pconfig['radius_protocol'],
$radius_protocol
));
$section->addInput(new Form_Input(
'radius_host',
'*Hostname or IP address',
'text',
$pconfig['radius_host']
));
$section->addInput(new Form_Input(
'radius_secret',
'*Shared Secret',
'password',
$pconfig['radius_secret']
));
$section->addInput(new Form_Select(
'radius_srvcs',
'*Services offered',
$pconfig['radius_srvcs'],
$radius_srvcs
));
$section->addInput(new Form_Input(
'radius_auth_port',
'Authentication port',
'number',
$pconfig['radius_auth_port']
));
$section->addInput(new Form_Input(
'radius_acct_port',
'Accounting port',
'number',
$pconfig['radius_acct_port']
));
$section->addInput(new Form_Input(
'radius_timeout',
'Authentication Timeout',
'number',
$pconfig['radius_timeout']
))->setHelp('This value controls how long, in seconds, that the RADIUS '.
'server may take to respond to an authentication request. If left blank, the '.
'default value is 5 seconds. NOTE: If using an interactive two-factor '.
'authentication system, increase this timeout to account for how long it will '.
'take the user to receive and enter a token.');
$section->addInput(new Form_Select(
'radius_nasip_attribute',
'RADIUS NAS IP Attribute',
$pconfig['radius_nasip_attribute'],
build_radiusnas_list()
))->setHelp('Enter the IP to use for the "NAS-IP-Address" attribute during RADIUS Acccess-Requests. '.
'Please note that this choice won\'t change the interface used for contacting the RADIUS server.');
if (isset($id) && $a_server[$id])
{
$section->addInput(new Form_Input(
'id',
null,
'hidden',
$id
));
}
$form->add($section);
// Create a largely empty modal to show the available containers. We will populate it via AJAX later
$modal = new Modal("LDAP containers", "containers", true);
$form->add($modal);
print $form;
?>