TASK-207 Merge for ldap and ldapAdvanced

workflow/engine/classes/AuthSources.php

@@ -0,0 +1,727 @@
+<?php
+
+use ProcessMaker\Model\RbacAuthenticationSource;
+use Illuminate\Support\Facades\Log;
+use Illuminate\Support\Facades\Cache;
+
+class AuthSources
+{
+    private $authSourceUid;
+
+    private $arrayObjectClassFilter = [
+        "user" => "|(objectclass=inetorgperson)(objectclass=organizationalperson)(objectclass=person)(objectclass=user)",
+        "group" => "|(objectclass=posixgroup)(objectclass=group)(objectclass=groupofuniquenames)",
+        "department" => "|(objectclass=organizationalunit)"
+    ];
+    private $arrayAttributes = [
+        "ldap" => ["uid" => "uid", "member" => "memberuid"], //OpenLDAP
+        "ad" => ["uid" => "samaccountname", "member" => "member"], //Active Directory
+        "ds" => ["uid" => "uid", "member" => "uniquemember"] //389 DS
+    ];
+
+    private $arrayAttributesForUser = ["dn", "uid", "samaccountname", "givenname", "sn", "cn", "mail", "userprincipalname", "useraccountcontrol", "accountexpires", "manager"];
+
+    public function getListAuthSources($userUid, $start = 0, $limit = 0, $orderBy = '', $ascending = '' , $filter = '') {
+        try {
+            if ($limit == 0) {
+                $limit = $this->getConfigurationUser($userUid);
+            }
+
+            global $RBAC;
+            $criterias = $RBAC->getAuthenticationSources($start, $limit, $filter);
+            $dataSourceAuthentication = AuthenticationSourcePeer::doSelectRS($criterias['COUNTER']);
+            $dataSourceAuthentication->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+            $dataSourceAuthentication->next();
+            $row = $dataSourceAuthentication->getRow();
+            $total_sources = $row['CNT'];
+
+            if (!empty($orderBy) && ($ascending !== '') && defined("AuthenticationSourcePeer::" . $orderBy)) {
+                if ($ascending === '1') {
+                    $criterias['LIST']->addAscendingOrderByColumn(constant("AuthenticationSourcePeer::" . $orderBy));
+                }
+                if ($ascending === '0') {
+                    $criterias['LIST']->addDescendingOrderByColumn(constant("AuthenticationSourcePeer::" . $orderBy));
+                }
+            } else {
+                $criterias['LIST']->addAscendingOrderByColumn(AuthenticationSourcePeer::AUTH_SOURCE_NAME);
+            }
+            $dataset = AuthenticationSourcePeer::doSelectRS($criterias['LIST']);
+            $dataset->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+
+            global $RBAC;
+            $auth = $RBAC->getAllUsersByAuthSource();
+
+            $sources = [];
+            while ($dataset->next()) {
+                $row = $dataset->getRow();
+                $values = explode("_", $row["AUTH_SOURCE_PASSWORD"]);
+                foreach ($values as $value) {
+                    if ($value == "2NnV3ujj3w") {
+                        $row["AUTH_SOURCE_PASSWORD"] = G::decrypt($values[0], $row["AUTH_SOURCE_SERVER_NAME"]);
+                    }
+                }
+                $label = G::LoadTranslation('ID_DISABLE');
+                if ($row['AUTH_SOURCE_ENABLED_TLS'] === "1") {
+                    $label = G::LoadTranslation('ID_ENABLE');
+                }
+                $row['AUTH_SOURCE_ENABLED_TLS_LABEL'] = $label;
+                //additional information
+                $authSourceData = unserialize($row['AUTH_SOURCE_DATA']);
+                if (is_array($authSourceData)) {
+                    $row = array_merge($row, $authSourceData);
+                }
+                $sources[] = $row;
+                $index = sizeof($sources) - 1;
+                $sources[$index]['CURRENT_USERS'] = isset($auth[$sources[$index]['AUTH_SOURCE_UID']]) ? $auth[$sources[$index]['AUTH_SOURCE_UID']] : 0;
+            }
+            $response = [
+                'success' => true,
+                'sources' => $sources,
+                'total_sources' => $total_sources
+            ];
+            return $response;
+        } catch (Exception $exception) {
+            return ['success' => false, 'message' => $exception->getMessage()];
+        }
+    }
+
+    public function removeAuthSource($authSourceUid) {
+        try {
+            global $RBAC;
+            $RBAC->removeAuthSource($authSourceUid);
+            return ['success' => true];
+        } catch (Exception $exception) {
+            return ['success' => false, 'message' => $exception->getMessage()];
+        }
+    }
+    
+    public function verifyAuthSourceName($authSourceName) {
+        try {
+            $authenticationSource = RbacAuthenticationSource::query()
+                ->select(['AUTH_SOURCE_UID', 'AUTH_SOURCE_NAME'])
+                ->where('AUTH_SOURCE_NAME', '=', $authSourceName)
+                ->first();
+            $row = false;
+            $suggestName = '';
+            if (!empty($authenticationSource)) {
+                $row = $authenticationSource;
+                $lastAuthenticationSource = RbacAuthenticationSource::query()
+                    ->select(['AUTH_SOURCE_NAME'])
+                    ->where('AUTH_SOURCE_NAME', 'LIKE', "%{$authSourceName}%")
+                    ->orderBy('AUTH_SOURCE_NAME', 'desc')
+                    ->first();
+                if (!empty($lastAuthenticationSource)) {
+                    $name = $lastAuthenticationSource->AUTH_SOURCE_NAME;
+                    //get suggest name
+                    $pieces = explode( ' ', $name);
+                    $last = array_pop($pieces);
+                    $number = trim($last, "()");
+                    if ("({$number})" === $last) {
+                        $number = intval($number) + 1;
+                        $suggestName = implode('', $pieces) . " ({$number})";
+                    } else {
+                        $suggestName = $name . " (1)";
+                    }
+                }
+            }
+            return ['success' => true, 'row' => $row, 'suggestName' => $suggestName];
+        } catch (Exception $exception) {
+            return ['success' => false, 'message' => $exception->getMessage()];
+        }
+    }
+
+    public function testConnection($authSourceData) {
+        try {
+            $authSourceConnectionData = $this->ldapConnection($authSourceData);
+
+            $response = ['success' => true, 'status' => 'OK'];
+            if ($authSourceConnectionData['startTLS'] === false) {
+                $response["message"] = G::LoadTranslation("ID_TLS_CERTIFICATE_IS_NOT_INSTALLED_IN_THE_SERVER");
+            }
+            return $response;
+        } catch (Exception $exception) {
+            return ['success' => false, 'message' => $exception->getMessage()];
+        }
+    }
+
+    public function saveAuthSource($authSourceData) {
+        try {
+            global $RBAC;
+            $arrayAuthenticationSourceData = $authSourceData;
+            $arrayAuthenticationSourceData['AUTH_SOURCE_VERSION'] = 3;
+
+            $ldapconection = $this->ldapConnection($arrayAuthenticationSourceData);
+            $authSourceData['AUTH_SOURCE_DATA']['LDAP_PAGE_SIZE_LIMIT'] = $this->getPageSizeLimit(
+                $ldapconection['connection'],
+                $arrayAuthenticationSourceData['AUTH_SOURCE_BASE_DN']
+            );
+
+            $authSourceData['AUTH_SOURCE_DATA']['LDAP_PAGE_SIZE_LIMIT'] = $this->getPageSizeLimit(false);
+
+            if ($authSourceData['AUTH_SOURCE_UID'] == '') {
+                $RBAC->createAuthSource($authSourceData);
+            } else {
+                $RBAC->updateAuthSource($authSourceData);
+            }
+            return ['success' => true];
+        } catch (Exception $exception) {
+            return ['success' => false, 'message' => $exception->getMessage()];
+        }
+    }
+
+    public function searchUsers($authSourceUid, $filters) {
+        try {
+            $listUsers = array();
+
+            $criteria = new Criteria("workflow");
+
+            $criteria->addSelectColumn(UsersPeer::USR_USERNAME);
+            $criteria->addSelectColumn(RbacUsersPeer::UID_AUTH_SOURCE);
+            $criteria->addJoin(UsersPeer::USR_UID, RbacUsersPeer::USR_UID);
+            $criteria->add(UsersPeer::USR_STATUS, "CLOSED", Criteria::NOT_EQUAL);
+
+            $rsCriteria = UsersPeer::doSelectRS($criteria);
+            $rsCriteria->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+
+            while ($rsCriteria->next()) {
+                $row = $rsCriteria->getRow();
+                $listUsers[strtolower($row["USR_USERNAME"])] = $row['UID_AUTH_SOURCE'];
+            }
+
+            //Get data
+            $arrayData = array();
+
+            $this->authSourceUid = $authSourceUid;
+            $result = $this->searchUsersLdap($filters['text'], $filters['start'], $filters['limit']);
+            /*
+            $ldapAdvanced = new LdapAdvanced();
+            $ldapAdvanced->sAuthSource = $authSourceUid;
+            $result = $ldapAdvanced->searchUsers($filters['text'], $filters['start'], $filters['limit']);
+            */
+
+            foreach ($result['data'] as $value) {
+                $listUsersData = $value;
+
+                if (!isset($listUsers[strtolower($listUsersData['sUsername'])])) {
+                    $listUsersData['STATUS'] = G::LoadTranslation('ID_NOT_IMPORTED');
+                    $listUsersData['IMPORT'] = 1;
+                } elseif ($authSourceUid === $listUsers[strtolower($listUsersData['sUsername'])]) {
+                    $listUsersData['STATUS'] = G::LoadTranslation('ID_IMPORTED');
+                    $listUsersData['IMPORT'] = 0;
+                } else {
+                    $listUsersData['STATUS'] = G::LoadTranslation('ID_CANNOT_IMPORT');
+                    $listUsersData['IMPORT'] = 0;
+                }
+
+                $arrayData[] = $listUsersData;
+            }
+
+            return ['success' => true, 'status' => 'OK', 'resultTotal' => $result['numRecTotal'], 'resultRoot' => $arrayData];
+        } catch (Exception $exception) {
+            return ['success' => false, 'message' => $exception->getMessage()];
+        }
+    }
+
+    public function importUsers($authSourceUid, $usersImport) {
+        try {
+            global $RBAC;
+            $aFields = $RBAC->getAuthSource($authSourceUid);
+            $aAttributes = array();
+
+            if (isset($aFields['AUTH_SOURCE_DATA']['AUTH_SOURCE_GRID_ATTRIBUTE'])) {
+                $aAttributes = $aFields['AUTH_SOURCE_DATA']['AUTH_SOURCE_GRID_ATTRIBUTE'];
+            }
+
+            $usersCreated = '';
+            $countUsers = 0;
+            foreach ($usersImport as $sUser) {
+                $aUser = (array) $sUser;
+                $matches = array();
+                $aData = array();
+                $aData['USR_USERNAME'] = str_replace("*", "'", $aUser['sUsername']);
+                $aData["USR_PASSWORD"] = "00000000000000000000000000000000";
+                // note added by gustavo gustavo-at-colosa.com
+                // asign the FirstName and LastName variables
+                // add replace to change D*Souza to D'Souza by krlos
+                $aData['USR_FIRSTNAME'] = str_replace("*", "'", $aUser['sFirstname']);
+                $aData['USR_FIRSTNAME'] = ($aData['USR_FIRSTNAME'] == '') ? $aData['USR_USERNAME'] : $aData['USR_FIRSTNAME'];
+                $aData['USR_LASTNAME'] = str_replace("*", "'", $aUser['sLastname']);
+                $aData['USR_EMAIL'] = $aUser['sEmail'];
+                $aData['USR_DUE_DATE'] = date('Y-m-d', mktime(0, 0, 0, date('m'), date('d'), date('Y') + 2));
+                $aData['USR_CREATE_DATE'] = date('Y-m-d H:i:s');
+                $aData['USR_UPDATE_DATE'] = date('Y-m-d H:i:s');
+                $aData['USR_BIRTHDAY'] = date('Y-m-d');
+                $aData['USR_STATUS'] = (isset($aUser['USR_STATUS'])) ? (($aUser['USR_STATUS'] == 'ACTIVE') ? 1 : 0) : 1;
+                $aData['USR_AUTH_TYPE'] = strtolower($aFields['AUTH_SOURCE_PROVIDER']);
+                $aData['UID_AUTH_SOURCE'] = $aFields['AUTH_SOURCE_UID'];
+                // validating with regexp if there are some missing * inside the DN string
+                // if it's so the is changed to the ' character
+                preg_match('/[a-zA-Z]\*[a-zA-Z]/', $aUser['sDN'], $matches);
+
+                foreach ($matches as $key => $match) {
+                    $newMatch = str_replace('*', '\'', $match);
+                    $aUser['sDN'] = str_replace($match, $newMatch, $aUser['sDN']);
+                }
+                $aData['USR_AUTH_USER_DN'] = $aUser['sDN'];
+                
+                $usrRole = 'LURANA_OPERATOR';
+                if (!empty($aFields['AUTH_SOURCE_DATA']['USR_ROLE'])) {
+                    //$usrRole = $aFields['AUTH_SOURCE_DATA']['USR_ROLE'];
+                }
+
+                $sUserUID = $RBAC->createUser($aData, $usrRole, $aFields['AUTH_SOURCE_NAME']);
+                $usersCreated .= $aData['USR_USERNAME'] . ' ';
+                $countUsers++;
+
+                $aData['USR_STATUS'] = (isset($aUser['USR_STATUS'])) ? $aUser['USR_STATUS'] : 'ACTIVE';
+                $aData['USR_UID'] = $sUserUID;
+                $aData['USR_ROLE'] = $usrRole;
+
+                $calendarObj = new Calendar();
+                $calendarObj->assignCalendarTo($sUserUID, '00000000000000000000000000000001', 'USER');
+
+                if (count($aAttributes)) {
+                    foreach ($aAttributes as $value) {
+                        if (isset($aUser[$value['attributeUser']])) {
+                            $aData[$value['attributeUser']] = str_replace("*", "'", $aUser[$value['attributeUser']]);
+                            if ($value['attributeUser'] == 'USR_STATUS') {
+                                $evalValue = $aData[$value['attributeUser']];
+                                $statusValue = $aData['USR_STATUS'];
+                                $aData[$value['attributeUser']] = $statusValue;
+                            }
+                        }
+                    }
+                }
+                $oUser = new Users();
+                $oUser->create($aData);
+            }
+            return ['success' => true];
+        } catch (Exception $exception) {
+            return ['success' => false, 'message' => $exception->getMessage()];
+        }
+    }
+
+    ///=====================================================================================
+    ///====   PRIVATE FUNCTIONS
+    ///=====================================================================================
+
+    private function getPageSizeLimit($ldapcnn, $baseDn = '')
+    {
+        try {
+            $limit = 1000;
+
+            if ($ldapcnn === false) {
+                return $limit;
+            }
+
+            $searchResult = @ldap_search($ldapcnn, $baseDn, '(|(objectclass=*))', ['dn']);
+            $context = [
+                'baseDN' => $baseDn,
+                'filter' => '(|(objectclass=*))',
+                'attributes' => ['dn']
+            ];
+            $this->stdLog($ldapcnn, 'ldap_search', $context);
+
+            if ($searchResult) {
+                $countEntries = ldap_count_entries($ldapcnn, $searchResult);
+                $this->stdLog($ldapcnn, 'ldap_count_entries');
+
+                if ($countEntries > 0) {
+                    $limit = ($countEntries > $limit) ? $limit : $countEntries;
+                }
+            }
+
+            return $limit;
+        } catch (Exception $e) {
+            throw $e;
+        }
+    }
+
+    private function searchUsersLdap($keyword, $start = null, $limit = null) {
+        $arrayUser = [];
+        $totalUser = 0;
+        $countUser = 0;
+
+        $paged = !is_null($start) && !is_null($limit);
+
+        $rbac = RBAC::getSingleton();
+
+        if (is_null($rbac->authSourcesObj)) {
+            $rbac->authSourcesObj = new AuthenticationSource();
+        }
+
+        $arrayAuthenticationSourceData = $rbac->authSourcesObj->load($this->authSourceUid);
+        $attributeUserSet = [];
+        $attributeSetAdd = [];
+
+        if (
+            isset($arrayAuthenticationSourceData['AUTH_SOURCE_DATA']['AUTH_SOURCE_GRID_ATTRIBUTE']) && !empty($arrayAuthenticationSourceData['AUTH_SOURCE_DATA']['AUTH_SOURCE_GRID_ATTRIBUTE'])
+        ) {
+            foreach ($arrayAuthenticationSourceData['AUTH_SOURCE_DATA']['AUTH_SOURCE_GRID_ATTRIBUTE'] as $value) {
+                $attributeSetAdd[] = $value['attributeLdap'];
+                $attributeUserSet[$value['attributeUser']] = $value['attributeLdap'];
+            }
+        }
+
+        $ldapcnn = $this->ldapConnection($arrayAuthenticationSourceData);
+        $ldapcnn = $ldapcnn['connection'];
+
+        //Get Users
+        if (!isset($arrayAuthenticationSourceData['AUTH_SOURCE_DATA']['AUTH_SOURCE_USERS_FILTER'])) {
+            $arrayAuthenticationSourceData['AUTH_SOURCE_DATA']['AUTH_SOURCE_USERS_FILTER'] = '';
+        }
+
+        $uidUserIdentifier = (isset($arrayAuthenticationSourceData['AUTH_SOURCE_DATA']['AUTH_SOURCE_IDENTIFIER_FOR_USER'])) ? $arrayAuthenticationSourceData['AUTH_SOURCE_DATA']['AUTH_SOURCE_IDENTIFIER_FOR_USER'] : 'uid';
+        $filterUsers = trim($arrayAuthenticationSourceData['AUTH_SOURCE_DATA']['AUTH_SOURCE_USERS_FILTER']);
+        $filter = ($filterUsers != '') ? $filterUsers : '(' . $this->arrayObjectClassFilter['user'] . ')';
+        $filter = "(&$filter(|(dn=$keyword)(uid=$keyword)(samaccountname=$keyword)(givenname=$keyword)(sn=$keyword)(cn=$keyword)(mail=$keyword)(userprincipalname=$keyword)))";
+        $oSearch = @ldap_search($ldapcnn, $arrayAuthenticationSourceData['AUTH_SOURCE_BASE_DN'], $filter, array_merge($this->arrayAttributesForUser, $attributeSetAdd));
+        $context = [
+            'baseDN' => $arrayAuthenticationSourceData['AUTH_SOURCE_BASE_DN'],
+            'filter' => $filter,
+            'attribute' => array_merge($this->arrayAttributesForUser, $attributeSetAdd)
+        ];
+        $this->stdLog($ldapcnn, 'ldap_search', $context);
+
+        if ($oError = ldap_errno($ldapcnn)) {
+            $this->log($ldapcnn, 'Error in Search users');
+        } else {
+            if ($oSearch) {
+                $entries = ldap_count_entries($ldapcnn, $oSearch);
+                $this->stdLog($ldapcnn, 'ldap_count_entries');
+                $totalUser = $entries;
+
+                if ($entries > 0) {
+                    $oEntry = ldap_first_entry($ldapcnn, $oSearch);
+                    $this->stdLog($ldapcnn, 'ldap_first_entry');
+                    $countEntries = 0;
+                    $flagNextRecord = true;
+
+                    do {
+                        $aAttr = $this->ldapGetAttributes($ldapcnn, $oEntry);
+                        $sUsername = (isset($aAttr[$uidUserIdentifier])) ? $aAttr[$uidUserIdentifier] : '';
+
+                        if ((is_array($sUsername) && !empty($sUsername)) || trim($sUsername) != '') {
+                            $countUser++;
+
+                            /* Active Directory userAccountControl Values
+                              Normal Day to Day Values:
+                              512 - Enable Account
+                              514 - Disable account
+                              544 - Account Enabled - Require user to change password at first logon
+                              4096 - Workstation/server
+                              66048 - Enabled, password never expires
+                              66050 - Disabled, password never expires
+                              262656 - Smart Card Logon Required
+                              532480 - Domain controller
+                              1 - script
+                              2 - accountdisable
+                              8 - homedir_required
+                              16 - lockout
+                              32 - passwd_notreqd
+                              64 - passwd_cant_change
+                              128 - encrypted_text_pwd_allowed
+                              256 - temp_duplicate_account
+                              512 - normal_account
+                              2048 - interdomain_trust_account
+                              4096 - workstation_trust_account
+                              8192 - server_trust_account
+                              65536 - dont_expire_password
+                              131072 - mns_logon_account
+                              262144 - smartcard_required
+                              524288 - trusted_for_delegation
+                              1048576 - not_delegated
+                              2097152 - use_des_key_only
+                              4194304 - dont_req_preauth
+                              8388608 - password_expired
+                              16777216 - trusted_to_auth_for_delegation
+                             */
+                            $userCountControl = '';
+                            //Active Directory, openLdap
+                            if (isset($aAttr['useraccountcontrol'])) {
+                                switch ($aAttr['useraccountcontrol']) {
+                                    case '512':
+                                    case '544':
+                                    case '66048':
+                                    case '66080':
+                                        $userCountControl = 'ACTIVE';
+                                        break;
+                                    case '514':
+                                    case '546':
+                                    case '66050':
+                                    case '66082':
+                                    case '2':
+                                    case '16':
+                                    case '8388608':
+                                    default:
+                                        $userCountControl = 'INACTIVE';
+                                        break;
+                                }
+                            }
+                            //apache ldap
+                            if (isset($aAttr['status'])) {
+                                $userCountControl = strtoupper($aAttr['status']);
+                            }
+                            $aUserAttributes = [];
+                            foreach ($attributeUserSet as $key => $value) {
+                                if ($key == 'USR_STATUS') {
+                                    $aUserAttributes[$key] = ($userCountControl != '') ? $userCountControl : 'ACTIVE';
+                                } elseif (isset($aAttr[$value])) {
+                                    $aUserAttributes[$key] = $aAttr[$value];
+                                }
+                            }
+
+                            if ($paged) {
+                                if ($countUser - 1 <= $start + $limit - 1) {
+                                    if ($start <= $countUser - 1) {
+                                        $arrayUser[] = array_merge($this->getUserDataFromAttribute($sUsername, $aAttr), $aUserAttributes);
+                                    }
+                                } else {
+                                    $flagNextRecord = false;
+                                }
+                            } else {
+                                $arrayUser[] = array_merge($this->getUserDataFromAttribute($sUsername, $aAttr), $aUserAttributes);
+                            }
+
+                            $countEntries++;
+                        }
+                    } while (($oEntry = ldap_next_entry($ldapcnn, $oEntry)) && $flagNextRecord);
+                }
+            }
+        }
+
+        return ($paged) ? ['numRecTotal' => $totalUser, 'data' => $arrayUser] : $arrayUser;
+    }
+
+    private function getUserDataFromAttribute($username, array $arrayAttributes)
+    {
+        try {
+            $keyMail = (isset($arrayAttributes['mail'])) ? 'mail' : ((isset($arrayAttributes['userprincipalname'])) ? 'userprincipalname' : 'nomail');
+
+            return [
+                'sUsername' => trim((is_array($username)) ? $username[0] : $username),
+                'sPassword' => trim((isset($arrayAttributes['userpassword'])) ? ((is_array($arrayAttributes['userpassword'])) ? $arrayAttributes['userpassword'][0] : $arrayAttributes['userpassword']) : ''),
+                'sFullname' => trim((isset($arrayAttributes['cn'])) ? ((is_array($arrayAttributes['cn'])) ? $arrayAttributes['cn'][0] : $arrayAttributes['cn']) : ''),
+                'sFirstname' => trim((isset($arrayAttributes['givenname'])) ? ((is_array($arrayAttributes['givenname'])) ? $arrayAttributes['givenname'][0] : $arrayAttributes['givenname']) : ''),
+                'sLastname' => trim((isset($arrayAttributes['sn'])) ? ((is_array($arrayAttributes['sn'])) ? $arrayAttributes['sn'][0] : $arrayAttributes['sn']) : ''),
+                'sEmail' => trim((isset($arrayAttributes[$keyMail])) ? ((is_array($arrayAttributes[$keyMail])) ? $arrayAttributes[$keyMail][0] : $arrayAttributes[$keyMail]) : ''),
+                'sDN' => trim($arrayAttributes['dn']),
+                'sManagerDN' => trim((isset($arrayAttributes['manager'])) ? ((is_array($arrayAttributes['manager'])) ? $arrayAttributes['manager'][0] : $arrayAttributes['manager']) : '')
+            ];
+        } catch (Exception $e) {
+            throw $e;
+        }
+    }
+
+    private function ldapGetAttributes($ldapcnn, $entry)
+    {
+        try {
+            $arrayAttributes = [];
+
+            $arrayAttributes['dn'] = ldap_get_dn($ldapcnn, $entry);
+            $this->stdLog($ldapcnn, 'ldap_get_dn');
+
+            $arrayAux = ldap_get_attributes($ldapcnn, $entry);
+            $this->stdLog($ldapcnn, 'ldap_get_attributes');
+
+            for ($i = 0; $i <= $arrayAux['count'] - 1; $i++) {
+                $key = strtolower($arrayAux[$i]);
+
+                switch ($arrayAux[$arrayAux[$i]]['count']) {
+                    case 0:
+                        $arrayAttributes[$key] = '';
+                        break;
+                    case 1:
+                        $arrayAttributes[$key] = $arrayAux[$arrayAux[$i]][0];
+                        break;
+                    default:
+                        $arrayAttributes[$key] = $arrayAux[$arrayAux[$i]];
+
+                        unset($arrayAttributes[$key]['count']);
+                        break;
+                }
+            }
+
+            if (!isset($arrayAttributes['mail']) && isset($arrayAttributes['userprincipalname'])) {
+                $arrayAttributes['mail'] = $arrayAttributes['userprincipalname'];
+            }
+
+            return $arrayAttributes;
+        } catch (Exception $e) {
+            throw $e;
+        }
+    }
+
+    private function ldapConnection($authSourceData) {
+        $pass = explode('_', $authSourceData['AUTH_SOURCE_PASSWORD']);
+
+        // Removing sensitive data
+        $loggableAuthSource = $authSourceData;
+        unset($loggableAuthSource['AUTH_SOURCE_PASSWORD']);
+
+        foreach ($pass as $index => $value) {
+            if ($value == '2NnV3ujj3w') {
+                $authSourceData['AUTH_SOURCE_PASSWORD'] = G::decrypt($pass[0], $authSourceData['AUTH_SOURCE_SERVER_NAME']);
+            }
+        }
+
+        $ldapcnn = ldap_connect($authSourceData['AUTH_SOURCE_SERVER_NAME'], $authSourceData['AUTH_SOURCE_PORT']);
+        $this->stdLog($ldapcnn, 'ldap_connect', $loggableAuthSource);
+
+        $ldapServer = $authSourceData['AUTH_SOURCE_SERVER_NAME'] . ':' . $authSourceData['AUTH_SOURCE_PORT'];
+
+        ldap_set_option($ldapcnn, LDAP_OPT_PROTOCOL_VERSION, 3);
+        $this->stdLog($ldapcnn, 'ldap_set_option', $loggableAuthSource);
+        ldap_set_option($ldapcnn, LDAP_OPT_REFERRALS, 0);
+        $this->stdLog($ldapcnn, 'ldap_set_option', $loggableAuthSource);
+
+        $resultLDAPStartTLS = true;
+        if (isset($authSourceData['AUTH_SOURCE_ENABLED_TLS']) && $authSourceData['AUTH_SOURCE_ENABLED_TLS']) {
+            $resultLDAPStartTLS = @ldap_start_tls($ldapcnn);
+            $this->stdLog($ldapcnn, 'ldap_start_tls', $loggableAuthSource);
+            $ldapServer = 'TLS ' . $ldapServer;
+        }
+
+        if ($authSourceData['AUTH_ANONYMOUS'] == '1') {
+            $bBind = ldap_bind($ldapcnn);
+            $this->log($ldapcnn, 'bind $ldapServer like anonymous user');
+        } else {
+            $bBind = ldap_bind($ldapcnn, $authSourceData['AUTH_SOURCE_SEARCH_USER'], $authSourceData['AUTH_SOURCE_PASSWORD']);
+            $this->log($ldapcnn, 'bind $ldapServer with user ' . $loggableAuthSource['AUTH_SOURCE_SEARCH_USER']);
+        }
+        $this->stdLog($ldapcnn, 'ldap_bind', $loggableAuthSource);
+        $this->getDiagnosticMessage($ldapcnn);
+        if (!$bBind) {
+            $message = 'Unable to bind to server: ' . $ldapServer . 'LDAP-Errno: ' . ldap_errno($ldapcnn) . ' : ' . ldap_error($ldapcnn) . " \n";
+            throw new Exception($message);
+        }
+
+        return ['connection' =>$ldapcnn, 'startTLS' => $resultLDAPStartTLS];
+    }
+
+    private function getDiagnosticMessage($linkIdentifier)
+    {
+        //specific message
+        $keysError = [
+            [
+                'key' => 'USER_NOT_FOUND',
+                'code' => 525,
+                'message' => G::LoadTranslation('ID_LDAP_USER_NOT_FOUND_INVALID'),
+            ], [
+                'key' => 'NOT_PERMITTED_TO_LOGON_AT_THIS_TIME',
+                'code' => 530,
+                'message' => G::LoadTranslation('ID_LDAP_NOT_PERMITTED_TO_LOGON_AT_THIS_TIME'),
+            ], [
+                'key' => 'RESTRICTED_TO_SPECIFIC_MACHINES',
+                'code' => 531,
+                'message' => G::LoadTranslation('ID_LDAP_RESTRICTED_TO_SPECIFIC_MACHINES'),
+            ], [
+                'key' => 'PASSWORD_EXPIRED',
+                'code' => 532,
+                'message' => G::LoadTranslation('ID_LDAP_PASSWORD_EXPIRED'),
+            ], [
+                'key' => 'ACCOUNT_DISABLED',
+                'code' => 533,
+                'message' => G::LoadTranslation('ID_LDAP_ACCOUNT_DISABLED'),
+            ], [
+                'key' => 'ACCOUNT_EXPIRED',
+                'code' => 701,
+                'message' => G::LoadTranslation('ID_LDAP_ACCOUNT_EXPIRED'),
+            ], [
+                'key' => 'USER_MUST_RESET_PASSWORD',
+                'code' => 773,
+                'message' => G::LoadTranslation('ID_LDAP_USER_MUST_RESET_PASSWORD'),
+            ]
+        ];
+        $message = '';
+        ldap_get_option($linkIdentifier, LDAP_OPT_DIAGNOSTIC_MESSAGE, $messageError);
+        $this->stdLog($linkIdentifier, 'ldap_get_option', ['error' => $messageError]);
+        foreach ($keysError as $key => $value) {
+            if (strpos($messageError, (string) $value['code']) !== false) {
+                $message = $value['message'];
+                break;
+            }
+        }
+        //standard message
+        if (empty($message)) {
+            $errorNumber = ldap_errno($linkIdentifier);
+            $message = ldap_err2str($errorNumber) . '.';
+        }
+        if (empty($message)) {
+            $message = G::LoadTranslation('ID_LDAP_ERROR_CONNECTION');
+        }
+        Cache::put('ldapMessageError', $message, 120); //laravel 8.x the time parameter is in seconds.
+        $this->log($linkIdentifier, $messageError);
+    }
+
+    private function log($link, $text)
+    {
+        $logFile = PATH_DATA . 'logs/ldapAdvanced.log';
+
+        // Validate log file exists and is writable
+        if (!file_exists($logFile)) {
+            error_log('Log file does not exist: ' . $logFile);
+            throw new Exception('Log file does not exist: ' . $logFile);
+        }
+
+        if (!is_writable($logFile)) {
+            error_log('Log file is not writable: ' . $logFile);
+            throw new Exception('Log file is not writable: ' . $logFile);
+        }
+
+        $fpt = fopen($logFile, 'a');
+        $ldapErrorMsg = '';
+        $ldapErrorNr = 0;
+
+        if ($link != null) {
+            $ldapErrorNr = ldap_errno($link);
+
+            if ($ldapErrorNr != 0) {
+                $ldapErrorMsg = ldap_error($link);
+                $text = $ldapErrorMsg . ' : ' . $text;
+            }
+        }
+
+        // Log format: date hour ipaddress workspace ldapErrorNr
+        fwrite($fpt, sprintf("%s %s %s %s %s \n", date('Y-m-d H:i:s'), getenv('REMOTE_ADDR'), config('system.workspace'), $ldapErrorNr, $text));
+        fclose($fpt);
+    }
+
+    private function stdLog($link, $message = "", $context = [], $level = "info")
+    {
+        try {
+            if (empty($link)) {
+                switch ($level) {
+                    case "error":
+                        Log::channel(':ldapAdvanced')->error($message, Bootstrap::context($context));
+                        break;
+                    case "info":
+                    default:
+                        Log::channel(':ldapAdvanced')->info($message, Bootstrap::context($context));
+                        break;
+                }
+                return;
+            }
+            $code = ldap_errno($link);
+            $detail = ldap_err2str($code);
+            $context["detail"] = $detail;
+            if ($code === 0) {
+                Log::channel(':ldapAdvanced')->info($message, Bootstrap::context($context));
+            } else {
+                Log::channel(':ldapAdvanced')->error($message, Bootstrap::context($context));
+            }
+        } catch (Exception $exception) {
+            return ['success' => false, 'message' => $exception->getMessage()];
+        }
+    }
+
+    private function getConfigurationUser($userUid) {
+        try {
+            $configurations = new Configurations();
+            $configurationData = $configurations->getConfiguration('authSourcesList', 'pageSize', '', $userUid);
+            return $configurationData['pageSize'] ?? 20;
+        } catch (Exception $exception) {
+            return ['success' => false, 'message' => $exception->getMessage()];
+        }
+    }
+}

workflow/engine/classes/LdapAdvanced.php

@@ -443,28 +443,35 @@ class LdapAdvanced
      */
     public function log($link, $text)
     {
-        $logFile = PATH_DATA . "log/ldapAdvanced.log";
+        $logFile = PATH_DATA . 'logs/ldapAdvanced.log';
 
-        if (!file_exists($logFile) || is_writable($logFile)) {
+        // Validate log file exists and is writable
-            $fpt = fopen($logFile, "a");
+        if (!file_exists($logFile)) {
-            $ldapErrorMsg = "";
+            error_log("Log file does not exist: $logFile");
-            $ldapErrorNr = 0;
+            throw new Exception("Log file does not exist: $logFile");
-
-            if ($link != null) {
-                $ldapErrorNr = ldap_errno($link);
-
-                if ($ldapErrorNr != 0) {
-                    $ldapErrorMsg = ldap_error($link);
-                    $text = $ldapErrorMsg . " : " . $text;
-                }
-            }
-
-            // Log format: date hour ipaddress workspace ldapErrorNr
-            fwrite($fpt, sprintf("%s %s %s %s %s \n", date("Y-m-d H:i:s"), getenv("REMOTE_ADDR"), config("system.workspace"), $ldapErrorNr, $text));
-            fclose($fpt);
-        } else {
-            error_log("file $logFile is not writable ");
         }
+
+        if (!is_writable($logFile)) {
+            error_log("Log file is not writable: $logFile");
+            throw new Exception("Log file is not writable: $logFile");
+        }
+
+        $fpt = fopen($logFile, "a");
+        $ldapErrorMsg = "";
+        $ldapErrorNr = 0;
+
+        if ($link != null) {
+            $ldapErrorNr = ldap_errno($link);
+
+            if ($ldapErrorNr != 0) {
+                $ldapErrorMsg = ldap_error($link);
+                $text = $ldapErrorMsg . " : " . $text;
+            }
+        }
+
+        // Log format: date hour ipaddress workspace ldapErrorNr
+        fwrite($fpt, sprintf("%s %s %s %s %s \n", date("Y-m-d H:i:s"), getenv("REMOTE_ADDR"), config("system.workspace"), $ldapErrorNr, $text));
+        fclose($fpt);
     }
 
     /**
@@ -1638,7 +1645,7 @@ class LdapAdvanced
                 $attributes = $authSource['AUTH_SOURCE_DATA']['AUTH_SOURCE_GRID_ATTRIBUTE'];
             }
 
-            $usrRole = 'PROCESSMAKER_OPERATOR';
+            $usrRole = 'LURANA_OPERATOR';
             if (!empty($authSource['AUTH_SOURCE_DATA']['USR_ROLE'])) {
                 $usrRole = $authSource['AUTH_SOURCE_DATA']['USR_ROLE'];
             }
@@ -2272,7 +2279,7 @@ class LdapAdvanced
         $sLastname = $user['sLastname'];
         $sEmail = $user['sEmail'];
         $sDn = $user['sDN'];
-        $usrRole = empty($user['usrRole']) ? 'PROCESSMAKER_OPERATOR' : $user['usrRole'];
+        $usrRole = empty($user['usrRole']) ? 'LURANA_OPERATOR' : $user['usrRole'];
 
         $data = [];
         $data['USR_USERNAME'] = $sUsername;

workflow/engine/methods/authSources/authSourcesProxy.php

@@ -0,0 +1,162 @@
+<?php
+use ProcessMaker\Model\RbacAuthenticationSource;
+require_once 'classes/AuthSources.php';
+try {
+    if (isset($_REQUEST['action']) === false) {
+        throw new Exception('No action was sent');
+    }
+
+    if (isset($_SESSION['USER_LOGGED']) === false) {
+        throw new Exception('There is no logged in user');
+    }
+
+    $action = $_REQUEST['action'];
+    $userUid = $_SESSION['USER_LOGGED'];
+    $responseProxy = ['success' => true];
+
+    switch ($action) {
+        case 'authSourcesList':
+            $start = $_REQUEST['start'] ?? 0;
+            $limit = $_REQUEST['limit'] ?? $limit_size;
+            $filter = $_REQUEST['textFilter'] ?? '';
+            $orderBy =  $_REQUEST['orderBy'] ?? '';
+            $ascending = $_REQUEST['ascending'] ?? '';
+
+            $authSources = new AuthSources();
+            $responseProxy = $authSources->getListAuthSources($userUid, $start, $limit, $orderBy, $ascending, $filter);
+            break;
+        case 'authSourcesDelete':
+            if (!isset($_REQUEST['auth_uid'])) {
+                throw new Exception('No auth source UID was sent');
+            }
+            $authSourceUid = $_REQUEST['auth_uid'];
+            $authSources = new AuthSources();
+            $responseProxy = $authSources->removeAuthSource($authSourceUid);
+            break;
+        case 'authSourcesVerifyName':
+            if (empty($_REQUEST['AUTH_SOURCE_NAME'])) {
+                throw new Exception('No auth source UID was sent');
+            }
+
+            $authSourceName = $_REQUEST['AUTH_SOURCE_NAME'];
+            $authSources = new AuthSources();
+            $responseProxy = $authSources->verifyAuthSourceName($authSourceName);
+            break;
+        case 'authSourcesTestConnection':
+            if ($_REQUEST['AUTH_ANONYMOUS'] == '1') {
+                $_REQUEST['AUTH_SOURCE_SEARCH_USER'] = '';
+                $_REQUEST['AUTH_SOURCE_PASSWORD'] = '';
+            }
+
+            $authSourceData = $_REQUEST;
+            $authSourceData['AUTH_SOURCE_VERSION'] = 3;
+
+            $authSources = new AuthSources();
+            $responseProxy = $authSources->testConnection($authSourceData);
+            break;
+        case 'authSourcesSave':
+            $temporalData = $_REQUEST;
+
+            if (isset($temporalData['AUTH_SOURCE_SHOWGRID-checkbox'])) {
+                if ($temporalData['AUTH_SOURCE_SHOWGRID-checkbox'] == 'on') {
+                    $temporalData['AUTH_SOURCE_SHOWGRID'] = 'on';
+                    $attributes = G::json_decode($temporalData['AUTH_SOURCE_GRID_TEXT']);
+                    $con = 1;
+                    foreach ($attributes as $value) {
+                        $temporalData['AUTH_SOURCE_GRID_ATTRIBUTE'][$con] = (array)$value;
+                        $con++;
+                    }
+                }
+                unset($temporalData['AUTH_SOURCE_SHOWGRID-checkbox']);
+            }
+
+            if ($temporalData['AUTH_ANONYMOUS'] == '1') {
+                $temporalData['AUTH_SOURCE_SEARCH_USER'] = '';
+                $temporalData['AUTH_SOURCE_PASSWORD'] = '';
+            }
+
+            unset($temporalData['AUTH_SOURCE_GRID_TEXT']);
+            unset($temporalData['DELETE1']);
+            unset($temporalData['DELETE2']);
+            unset($temporalData['AUTH_SOURCE_ATTRIBUTE_IDS']);
+            unset($temporalData['AUTH_SOURCE_SHOWGRID_FLAG']);
+            unset($temporalData['AUTH_SOURCE_GRID_TEXT']);
+
+            $commonFields = array('AUTH_SOURCE_UID', 'AUTH_SOURCE_NAME', 'AUTH_SOURCE_PROVIDER', 'AUTH_SOURCE_SERVER_NAME', 'AUTH_SOURCE_PORT', 'AUTH_SOURCE_ENABLED_TLS', 'AUTH_ANONYMOUS', 'AUTH_SOURCE_SEARCH_USER', 'AUTH_SOURCE_PASSWORD', 'AUTH_SOURCE_VERSION', 'AUTH_SOURCE_BASE_DN', 'AUTH_SOURCE_OBJECT_CLASSES', 'AUTH_SOURCE_ATTRIBUTES');
+
+            $authSourceData = $authSourceExtraData = array();
+            foreach ($temporalData as $sField => $sValue) {
+                if (in_array($sField, $commonFields)) {
+                    $authSourceData[$sField] = $sValue;
+                } else {
+                    $authSourceExtraData[$sField] = $sValue;
+                }
+            }
+
+            if (!isset($authSourceExtraData['AUTH_SOURCE_SHOWGRID']) || $authSourceExtraData['AUTH_SOURCE_SHOWGRID'] == 'off') {
+                unset($authSourceExtraData['AUTH_SOURCE_GRID_ATTRIBUTE']);
+                unset($authSourceExtraData['AUTH_SOURCE_SHOWGRID']);
+            }
+
+            $authSourceData['AUTH_SOURCE_DATA'] = $authSourceExtraData;
+
+            $authSources = new AuthSources();
+            $responseProxy = $authSources->saveAuthSource($authSourceData);
+            break;
+        case 'authSourcesImportSearchUsers':
+            if (!isset($_REQUEST['sUID'])) {
+                throw new Exception('No auth source UID was sent');
+            }
+
+            $authSourceUid = $_POST['sUID'];
+            $filters = [
+                'start'=> $_POST['start'] ?? 0,
+                'limit'=> $_POST['limit'] ?? ($_POST["pageSize"] ?? 10),
+                'text'=> $_POST['sKeyword'] ?? ''
+            ];
+
+            $authSources = new AuthSources();
+            $responseProxy = $authSources->searchUsers($authSourceUid, $filters);
+            break;
+        case 'authSourcesImportUsers':
+            if (!isset($_REQUEST['UsersImport'])) {
+                throw new Exception('There are no users to import');
+            }
+
+            if (!isset($_REQUEST['AUTH_SOURCE_UID'])) {
+                throw new Exception('The auth source UID was not sent');
+            }
+
+            $authSourceUid = $_REQUEST['AUTH_SOURCE_UID'];
+            $usersImport = $_REQUEST['UsersImport'];
+            $usersImport = json_decode($usersImport, true);
+
+            $authSources = new AuthSources();
+            $responseProxy = $authSources->importUsers($authSourceUid, $usersImport);
+            break;
+        case 'authSourcesImportLoadDepartment':
+            $responseProxy['success'] = true;
+            break;
+        case 'authSourcesImportSaveDepartment':
+            $responseProxy['success'] = true;
+            break;
+        case 'authSourcesImportLoadGroup':
+            $responseProxy['success'] = true;
+            break;
+        case 'authSourcesImportSaveGroup':
+            $responseProxy['success'] = true;
+            break;
+        default:
+            throw new Exception('The action "' . $action . '" is not allowed');
+            break;
+    }
+
+    header('Content-Type: application/json');
+    echo json_encode($responseProxy, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+} catch (Exception $exception) {
+    $responseProxy['success'] = false;
+    $responseProxy['message'] = $exception->getMessage();
+
+    header('Content-Type: application/json');
+    echo json_encode($responseProxy, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+}

workflow/engine/methods/authSources/ldapAdvancedProxy.php

@@ -306,6 +306,7 @@ switch ($function) {
             // asign the FirstName and LastName variables
             // add replace to change D*Souza to D'Souza by krlos
             $aData['USR_FIRSTNAME'] = str_replace("*", "'", $aUser['sFirstname']);
+            $aData['USR_FIRSTNAME'] = ($aData['USR_FIRSTNAME'] == '') ? $aData['USR_USERNAME'] : $aData['USR_FIRSTNAME'];
             $aData['USR_LASTNAME'] = str_replace("*", "'", $aUser['sLastname']);
             $aData['USR_EMAIL'] = $aUser['sEmail'];
             $aData['USR_DUE_DATE'] = date('Y-m-d', mktime(0, 0, 0, date('m'), date('d'), date('Y') + 2));
@@ -325,16 +326,18 @@ switch ($function) {
             }
             $aData['USR_AUTH_USER_DN'] = $aUser['sDN'];
             
-            $usrRole = 'PROCESSMAKER_OPERATOR';
+            $usrRole = 'LURANA_OPERATOR';
             if (!empty($aFields['AUTH_SOURCE_DATA']['USR_ROLE'])) {
-                $usrRole = $aFields['AUTH_SOURCE_DATA']['USR_ROLE'];
+                //$usrRole = $aFields['AUTH_SOURCE_DATA']['USR_ROLE'];
             }
 
             try {
+                //dd($aData, $usrRole, $aFields['AUTH_SOURCE_NAME']);
                 $sUserUID = $RBAC->createUser($aData, $usrRole, $aFields['AUTH_SOURCE_NAME']);
                 $usersCreated .= $aData['USR_USERNAME'] . ' ';
                 $countUsers++;
             } catch (Exception $oError) {
+                dd($oError);
                 $G_PUBLISH = new Publisher();
                 $G_PUBLISH->AddContent('xmlform', 'xmlform', 'login/showMessage', '', array('MESSAGE' => $oError->getMessage()));
                 G::RenderPage("publish", "blank");
@@ -397,7 +400,7 @@ switch ($function) {
 
             $resultLDAPStartTLS = true;
             $ldapcnn = $ldapAdvanced->ldapConnection($arrayAuthenticationSourceData, $resultLDAPStartTLS);
-
+            
             //Response
             $response["status"] = "OK";
             if ($resultLDAPStartTLS === false) {

workflow/engine/methods/authenticationSources/src/App.vue

@@ -102,16 +102,17 @@
 
             saveNewConnection(form) {
                 let formData = this.$refs.newConnection.formToFormData(form);
-                axios.post(this.$root.baseUrl() + "authSources/ldapAdvancedProxy.php?functionAccion=ldapSave", formData)
+                //axios.post(this.$root.baseUrl() + "authSources/ldapAdvancedProxy.php?functionAccion=ldapSave", formData)
-                        .then(response => {
+                axios.post(this.$root.baseUrl() + "authSources/authSourcesProxy?action=authSourcesSave", formData)
-                            response;
+                    .then(response => {
-                            this.$refs.authenticationSources.refresh();
+                        response;
-                        })
+                        this.$refs.authenticationSources.refresh();
-                        .catch(error => {
+                    })
-                            error;
+                    .catch(error => {
-                        })
+                        error;
-                        .finally(() => {
+                    })
-                        });
+                    .finally(() => {
+                    });
                 this.showView('authenticationSources');
             },
 

workflow/engine/methods/authenticationSources/src/components/authenticationSources.vue

@@ -98,7 +98,8 @@
         },
         data() {
             return {
-                baseUrl: this.$root.baseUrl() + "authSources/authSources_Ajax?action=authSourcesList",
+                //baseUrl: this.$root.baseUrl() + "authSources/authSources_Ajax?action=authSourcesList",
+                baseUrl: this.$root.baseUrl() + "authSources/authSourcesProxy?action=authSourcesList",
                 columns: [
                     "AUTH_SOURCE_NAME",
                     "AUTH_SOURCE_PROVIDER",
@@ -193,9 +194,11 @@
                         return;
                     }
                     let formData = new FormData();
-                    formData.append("action", "deleteAuthSource");
+                    //formData.append("action", "deleteAuthSource");
+                    formData.append("action", "authSourcesDelete");
                     formData.append("auth_uid", row.AUTH_SOURCE_UID);
-                    axios.post(this.$root.baseUrl() + "authSources/authSources_Ajax", formData)
+                    //axios.post(this.$root.baseUrl() + "authSources/authSources_Ajax", formData)
+                    axios.post(this.$root.baseUrl() + "authSources/authSourcesProxy", formData)
                             .then(response => {
                                 response;
                                 this.refresh();

workflow/engine/methods/authenticationSources/src/components/formAuthenticationSources.vue

@@ -4,8 +4,8 @@
             <b-container fluid>
                 <b-row>
                     <b-col>
-                        <b-form-group :label="$root.translation('ID_AVAILABLE_AUTHENTICATION_SOURCES')" description="">
+                        <b-form-group v-show=false :label="$root.translation('ID_AVAILABLE_AUTHENTICATION_SOURCES')" description="">
-                            <b-form-select v-model="form.availableAuthenticationSource"
+                            <b-form-select v-show=false v-model="form.availableAuthenticationSource"
                                            :options="availableAuthenticationSources"/>
                         </b-form-group>
                         <b-form-group :label="$root.translation('ID_NAME')">
@@ -380,12 +380,14 @@
             test(form) {
                 let formDataForName = new FormData();
                 formDataForName.append("AUTH_SOURCE_NAME", form.name);
-                axios.post(this.$root.baseUrl() + "authSources/ldapAdvancedProxy.php?functionAccion=ldapVerifyName", formDataForName)
+                //axios.post(this.$root.baseUrl() + "authSources/ldapAdvancedProxy.php?functionAccion=ldapVerifyName", formDataForName)
+                axios.post(this.$root.baseUrl() + "authSources/authSourcesProxy.php?action=authSourcesVerifyName", formDataForName)
                         .then(response => {
                             //the name is valid
                             if (response.data.row === false || (this.form.uid !== "" && typeof this.form.uid === "string")) {
                                 let formData = this.formToFormData(form);
-                                axios.post(this.$root.baseUrl() + "authSources/ldapAdvancedProxy.php?functionAccion=ldapTestConnection", formData)
+                                //axios.post(this.$root.baseUrl() + "authSources/ldapAdvancedProxy.php?functionAccion=ldapTestConnection", formData)
+                                axios.post(this.$root.baseUrl() + "authSources/authSourcesProxy?action=authSourcesTestConnection", formData)
                                         .then(response => {
                                             //test is successful
                                             if (response.data.status === "OK") {

workflow/engine/methods/authenticationSources/src/components/formUploadSource.vue

@@ -141,7 +141,8 @@
                     //validation name
                     let formData = new FormData();
                     formData.append("AUTH_SOURCE_NAME", this.fileContent.AUTH_SOURCE_NAME);
-                    axios.post(this.$root.baseUrl() + "authSources/ldapAdvancedProxy.php?functionAccion=ldapVerifyName", formData)
+                    //axios.post(this.$root.baseUrl() + "authSources/ldapAdvancedProxy.php?functionAccion=ldapVerifyName", formData)
+                    axios.post(this.$root.baseUrl() + "authSources/authSourcesProxy.php?action=authSourcesVerifyName", formData)
                             .then(response => {
                                 this.newName = response.data.row === false;
                                 this.validationResult = response.data;

workflow/engine/templates/ldapAdvanced/ldapAdvancedSearch.js

@@ -89,7 +89,7 @@ Ext.onReady(function() {
     var storeGridSearch = new Ext.data.JsonStore({
         proxy: new Ext.data.HttpProxy({
             method: 'POST',
-            url: 'ldapAdvancedProxy.php',
+            url: 'authSourcesProxy.php',
             timeout: 240000
         }),
         autoDestroy: true,
@@ -112,7 +112,7 @@ Ext.onReady(function() {
             beforeload: function (store, opt)
             {
                 this.baseParams = {
-                    functionAccion: "searchUsers",
+                    action: "authSourcesImportSearchUsers",
                     sUID: Fields.AUTH_SOURCE_UID,
                     sKeyword: searchUsersText.getValue(),
                     pageSize: pageSize
@@ -174,10 +174,10 @@ Ext.onReady(function() {
                                 Ext.Ajax.request({
                                     params: {
                                         'UsersImport': Ext.encode(usersSelect),
-                                        'functionAccion': 'importUsers',
+                                        'action': 'authSourcesImportUsers',
                                         'AUTH_SOURCE_UID': Fields.AUTH_SOURCE_UID
                                     },
-                                    url : 'ldapAdvancedProxy.php',
+                                    url : 'authSourcesProxy.php',
                                     success: function (returnData) {
                                         var resp = Ext.decode(returnData.responseText);
                                         Ext.MessageBox.hide();

workflow/public_html/lib/authenticationSources/index.html

@@ -1 +1 @@
-<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/lib/authenticationSources/favicon.ico"><title>authenticationSources</title><script src="/js/ext/translation.en.js"></script><script>var pageSize=10;</script><link href="/lib/authenticationSources/css/app.a1f82e8b.css" rel="preload" as="style"><link href="/lib/authenticationSources/css/chunk-vendors.2d065fb2.css" rel="preload" as="style"><link href="/lib/authenticationSources/js/app.d1165b72.js" rel="preload" as="script"><link href="/lib/authenticationSources/js/chunk-vendors.94a2becd.js" rel="preload" as="script"><link href="/lib/authenticationSources/css/chunk-vendors.2d065fb2.css" rel="stylesheet"><link href="/lib/authenticationSources/css/app.a1f82e8b.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but authenticationSources doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div><script src="/lib/authenticationSources/js/chunk-vendors.94a2becd.js"></script><script src="/lib/authenticationSources/js/app.d1165b72.js"></script></body></html>
+<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/lib/authenticationSources/favicon.ico"><title>authenticationSources</title><script src="/js/ext/translation.en.js"></script><script>var pageSize=10;</script><link href="/lib/authenticationSources/css/app.a1f82e8b.css" rel="preload" as="style"><link href="/lib/authenticationSources/css/chunk-vendors.26dc108e.css" rel="preload" as="style"><link href="/lib/authenticationSources/js/app.4050fbb5.js" rel="preload" as="script"><link href="/lib/authenticationSources/js/chunk-vendors.9b74053c.js" rel="preload" as="script"><link href="/lib/authenticationSources/css/chunk-vendors.26dc108e.css" rel="stylesheet"><link href="/lib/authenticationSources/css/app.a1f82e8b.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but authenticationSources doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div><script src="/lib/authenticationSources/js/chunk-vendors.9b74053c.js"></script><script src="/lib/authenticationSources/js/app.4050fbb5.js"></script></body></html>