setAction('system_authservers.php?act=edit');
$form->addGlobal(new Form_Input(
'userid',
null,
'hidden',
$id
));
$section = new Form_Section('Server settings');
$section->addInput($input = new Form_Input(
'name',
'Descriptive name',
'text',
$pconfig['name']
));
if ($act == 'edit')
$input->setReadonly();
$section->addInput($input = new Form_Select(
'type',
'Type',
$pconfig['type'],
$auth_server_types
))->toggles('.toggle-type');
if ($act == 'edit')
$input->setDisabled();
$form->add($section);
$section = new Form_Section('LDAP Server Settings');
$section->addClass('toggle-type collapse');
if (!isset($pconfig['type']) || $pconfig['type'] == 'ldap')
$section->addClass('in');
$section->addInput(new Form_Input(
'ldap_host',
'Hostname or IP address',
'text',
$pconfig['ldap_host']
))->setHelp('NOTE: When using SSL, this hostname MUST match the Common Name '.
'(CN) of the LDAP server"s SSL Certificate.');
$section->addInput(new Form_Input(
'ldap_port',
'Port value',
'number',
$pconfig['ldap_port']
));
$section->addInput(new Form_Select(
'ldap_urltype',
'Transport',
$pconfig['ldap_urltype'],
array_combine(array_keys($ldap_urltypes), array_keys($ldap_urltypes))
));
if (empty($a_ca))
{
$section->addInput(new Form_StaticText(
'Peer Certificate Authority',
'No Certificate Authorities defined. Create one under System > Cert Manager.'
));
}
else
{
$ldapCaRef = [];
foreach ($a_ca as $ca)
$ldapCaRef[ $ca['refid'] ] = $ca['descr'];
$section->addInput(new Form_Select(
'ldap_caref',
'Peer Certificate Authority',
$pconfig['ldap_caref'],
$ldapCaRef
))->setHelp('This option is used if \'SSL Encrypted\' option is choosen. '.
'It must match with the CA in the AD otherwise problems will arise.');
}
$section->addInput(new Form_Select(
'ldap_protver',
'Protocol version',
$pconfig['ldap_protver'],
array_combine($ldap_protvers, $ldap_protvers)
));
$group = new Form_Group('Search scope');
$group->add(new Form_Select(
'ldap_scope',
'Level',
$pconfig['ldap_scope'],
$ldap_scopes
));
$group->add(new Form_Input(
'ldap_basedn',
'Base DN',
'text',
$pconfig['ldap_basedn']
));
$section->add($group);
$group = new Form_Group('Authentication containers');
$group->add(new Form_Input(
'ldapauthcontainers',
'Containers',
'text',
$pconfig['ldap_authcn']
))->setHelp('Note: Semi-Colon separated. This will be prepended to the search '.
'base dn above or you can specify full container path containing a dc= '.
'component. Example: CN=Users;DC=example,DC=com or OU=Staff;OU=Freelancers');
#FIXME
$group->add(new Form_Button(
'Select',
'Select a container',
'/system_usermanager_settings_ldapacpicker.php?port=389&host=192.168.1.1&scope=one&basedn=CN=pfsense&binddn=&bindpw=&urltype=TCP%20-%20Standard&proto=3&authcn=OU=Staff&cert='
));
$section->add($group);
$section->addInput(new Form_Checkbox(
'ldap_extended_enabled',
'Extended query',
'Enable extended query',
$pconfig['ldap_extended_enabled']
))->toggles('.toggle-extended');
$group = new Form_Group('Query');
$group->addClass('toggle-extended collapse');
$group->add(new Form_Input(
'ldap_extended_query',
'Query',
'text',
$pconfig['ldap_extended_query']
))->setHelp('Example: &(objectClass=inetOrgPerson)(mail=*@example.com)');
$section->add($group);
$section->addInput(new Form_Checkbox(
'ldap_anon',
'Bind anonymous',
'Use anonymous binds to resolve distinguished names',
$pconfig['ldap_anon']
))->toggles('.toggle-anon');
$group = new Form_Group('Bind credentials');
$group->addClass('toggle-anon collapse');
$group->add(new Form_Input(
'ldap_binddn',
'User DN:',
'text',
$pconfig['ldap_binddn']
));
$group->add(new Form_Input(
'ldap_bindpw',
'Password',
'text',
$pconfig['ldap_bindpw']
));
$section->add($group);
if ($act == 'add')
{
$ldap_templates = array_map($ldap_templates, function($t){ return $t['desc']; });
$section->addInput(new Form_Select(
'ldap_tmpltype',
'Initial Template',
$pconfig['ldap_template'],
$ldap_templates
));
}
$section->addInput(new Form_Input(
'ldap_attr_user',
'User naming attribute',
'text',
$pconfig['ldap_attr_user']
));
$section->addInput(new Form_Input(
'ldap_attr_group',
'Group naming attribute',
'text',
$pconfig['ldap_attr_group']
));
$section->addInput(new Form_Input(
'ldap_attr_member',
'Group member attribute',
'text',
$pconfig['ldap_attr_member']
));
$section->addInput(new Form_Checkbox(
'ldap_utf8',
'UTF8 Encode',
'UTF8 encode LDAP parameters before sending them to the server.',
$pconfig['ldap_utf8']
))->setHelp('Required to support international characters, but may not be '.
'supported by every LDAP server.');
$section->addInput(new Form_Checkbox(
'ldap_nostrip_at',
'Username Alterations',
'Do not strip away parts of the username after the @ symbol',
$pconfig['ldap_nostrip_at']
))->setHelp('e.g. user@host becomes user when unchecked.');
$form->add($section);
$section = new Form_Section('Radius Server Settings');
$section->addClass('toggle-type collapse');
$section->addInput(new Form_Input(
'radius_host',
'Hostname or IP address',
'text',
$pconfig['radius_host']
));
$section->addInput(new Form_Input(
'radius_secret',
'Shared Secret',
'text',
$pconfig['radius_secret']
));
$section->addInput(new Form_Select(
'radius_srvcs',
'Services offered',
$pconfig['radius_srvcs'],
$radius_srvcs
));
$section->addInput(new Form_Input(
'radius_auth_port',
'Authentication port value',
'number',
$pconfig['radius_secret']
));
$section->addInput(new Form_Input(
'radius_acct_port',
'Authentication Timeout',
'number',
$pconfig['radius_acct_port']
));
$section->addInput(new Form_Input(
'radius_timeout',
'Authentication Timeout',
'number',
$pconfig['radius_timeout']
))->setHelp('This value controls how long, in seconds, that the RADIUS '.
'server may take to respond to an authentication request. If left blank, the '.
'default value is 5 seconds. NOTE: If you are using an interactive two-factor '.
'authentication system, increase this timeout to account for how long it will '.
'take the user to receive and enter a token.');
if (isset($id) && $a_server[$id])
{
$section->addInput(new Form_Input(
'id',
null,
'hidden',
$id
));
}
$form->add($section);
print $form;
include("foot.inc");