| Server IP : 80.87.202.40 / Your IP : 216.73.216.169 Web Server : Apache System : Linux rospirotorg.ru 5.14.0-539.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Dec 5 22:26:13 UTC 2024 x86_64 User : bitrix ( 600) PHP Version : 8.2.27 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/bitrix/ext_www/cvetdv.ru/bitrix/modules/ldap/admin/ |
Upload File : |
<?php
/*
##############################################
# Bitrix: SiteManager #
# Copyright (c) 2002-2024 Bitrix #
# https://www.bitrixsoft.com #
# mailto:admin@bitrixsoft.com #
##############################################
*/
use Bitrix\Ldap\EncryptionType;
/**
* @global CMain $APPLICATION
* @global CDatabase $DB
*/
require_once($_SERVER["DOCUMENT_ROOT"]."/bitrix/modules/main/include/prolog_admin_before.php");
\Bitrix\Main\Loader::includeModule('ldap');
require_once($_SERVER["DOCUMENT_ROOT"].BX_ROOT."/modules/ldap/prolog.php");
$MOD_RIGHT = $APPLICATION->GetGroupRight("ldap");
if($MOD_RIGHT<"R") $APPLICATION->AuthForm(GetMessage("ACCESS_DENIED"));
IncludeModuleLangFile(__FILE__);
if (!extension_loaded('ldap'))
{
require($_SERVER["DOCUMENT_ROOT"]."/bitrix/modules/main/include/prolog_admin_after.php");
ShowError(GetMessage("LDAP_EXT_NO_LOADED"));
require($_SERVER["DOCUMENT_ROOT"]."/bitrix/modules/main/include/epilog_admin.php");
}
$message = null;
$ID = intval($_REQUEST['ID'] ?? 0);
$defaultMaxPageSizeAD = 1000;
$arSyncFields = CLdapUtil::GetSynFields();
$bPostback = false;
$arUserFieldMap = Array();
if(is_array($_REQUEST["MAP"]))
{
foreach($_REQUEST["MAP"] as $v)
{
if($v["USER"] <> '' && is_array($arSyncFields[$v["USER"]]) && $v["LDAP"] <> '')
{
$arUserFieldMap[$v["USER"]] = $v["LDAP"];
}
}
}
if($_SERVER['REQUEST_METHOD'] == "POST")
{
// add not imported groups from select box
$noimportGroups = array();
if (array_key_exists("LDAP_NOIMP_GROUPS",$_REQUEST))
{
// make a hash map of groups to determine later easily which groups are selected in the select box
// it also eliminates duplicating groups
foreach ($_REQUEST['LDAP_NOIMP_GROUPS'] as $ldapGroupId)
$noimportGroups[md5($ldapGroupId)] = $ldapGroupId;
}
}
if($_SERVER['REQUEST_METHOD'] == "POST" && ($save <> '' || $apply <> '') && $MOD_RIGHT=="W" && check_bitrix_sessid())
{
$bPostback = true;
$arGroups = false;
// read AD to portal group correspondence
if(is_array($_REQUEST['LDAP_GROUP']))
{
if (!$arGroups)
{
$arGroups = Array();
}
foreach($_REQUEST['LDAP_GROUP'] as $t_id=>$arGroup)
{
if($arGroup['LDAP_GROUP_ID'] <> '' && $arGroup['GROUP_ID']>0 && $arGroup['DEL_GROUP']!='Y')
{
if ($arGroup['GROUP_ID'] == 2)
continue;
$arGroups[] = $arGroup;
}
}
}
if (array_key_exists("LDAP_NOIMP_GROUPS",$_REQUEST))
{
if (!$arGroups)
$arGroups = Array();
// add groups, which import is forbidden, to common mapping with an id of -1
foreach ($noimportGroups as $ldapGroupId)
$arGroups[] = array("LDAP_GROUP_ID"=>$ldapGroupId,"GROUP_ID"=>-1);
}
$arFields = Array(
"NAME" => $_REQUEST['NAME'],
"DESCRIPTION" => $_REQUEST['DESCRIPTION'],
"CODE" => $_REQUEST['CODE'],
"SERVER" => $_REQUEST['SERVER'],
"PORT" => $_REQUEST['PORT'],
"CONVERT_UTF8" => $_REQUEST['CONVERT_UTF8'],
"ADMIN_LOGIN" => $_REQUEST['ADMIN_LOGIN'],
"ACTIVE" => $_REQUEST['ACTIVE'],
"BASE_DN" => $_REQUEST['BASE_DN'],
"GROUP_FILTER" => $_REQUEST['GROUP_FILTER'],
"GROUP_ID_ATTR" => $_REQUEST['GROUP_ID_ATTR'],
"GROUP_NAME_ATTR" => $_REQUEST['GROUP_NAME_ATTR'],
"GROUP_MEMBERS_ATTR" => $_REQUEST['GROUP_MEMBERS_ATTR'],
"USER_FILTER" => $_REQUEST['USER_FILTER'],
"USER_ID_ATTR" => $_REQUEST['USER_ID_ATTR'],
"USER_NAME_ATTR" => $_REQUEST['USER_NAME_ATTR'],
"USER_LAST_NAME_ATTR" => $_REQUEST['USER_LAST_NAME_ATTR'],
"USER_EMAIL_ATTR" => $_REQUEST['USER_EMAIL_ATTR'],
"USER_GROUP_ATTR" => $_REQUEST['USER_GROUP_ATTR'],
"USER_GROUP_ACCESSORY" => $_REQUEST['USER_GROUP_ACCESSORY'],
"SYNC_PERIOD" => $_REQUEST['SYNC_PERIOD'],
"SYNC" => $_REQUEST['SYNC'],
"SYNC_ATTR" => $_REQUEST['SYNC_ATTR'],
"USER_DEPARTMENT_ATTR" => $_REQUEST['USER_DEPARTMENT_ATTR'],
"USER_MANAGER_ATTR" => $_REQUEST['USER_MANAGER_ATTR'],
"IMPORT_STRUCT" => $_REQUEST['IMPORT_STRUCT'],
"STRUCT_HAVE_DEFAULT" => $_REQUEST['STRUCT_HAVE_DEFAULT'],
"SET_DEPARTMENT_HEAD" => $_REQUEST['SET_DEPARTMENT_HEAD'],
"ROOT_DEPARTMENT" => $_REQUEST['ROOT_DEPARTMENT'],
"DEFAULT_DEPARTMENT_NAME" => $_REQUEST['DEFAULT_DEPARTMENT_NAME'],
"FIELD_MAP" => $arUserFieldMap,
"MAX_PAGE_SIZE" => $_REQUEST['MAX_PAGE_SIZE'],
"LDAP_OPT_TIMELIMIT" => $_REQUEST['LDAP_OPT_TIMELIMIT'],
"LDAP_OPT_TIMEOUT" => $_REQUEST['LDAP_OPT_TIMEOUT'],
"LDAP_OPT_NETWORK_TIMEOUT" => $_REQUEST['LDAP_OPT_NETWORK_TIMEOUT'],
"SYNC_USER_ADD" => $_REQUEST['SYNC_USER_ADD'],
"CONNECTION_TYPE" => $_REQUEST['CONNECTION_TYPE']
);
if (is_array($arGroups))
{
$arFields['GROUPS'] = $arGroups;
}
if (!empty($_REQUEST['ADMIN_PASSWORD']))
{
$arFields['ADMIN_PASSWORD'] = $_REQUEST['ADMIN_PASSWORD'];
}
// apply form to server config
if($ID>0)
{
$res = CLdapServer::Update($ID, $arFields);
}
else
{
$ID = CLdapServer::Add($arFields);
$res = ($ID>0);
}
if($res)
{
if($save <> '')
{
if(str_starts_with($_REQUEST['back_url'], '/'))
LocalRedirect($_REQUEST['back_url'].'&ldapServer='.$ID);
else
LocalRedirect("ldap_server_admin.php?lang=".LANG);
}
else
LocalRedirect($APPLICATION->GetCurPage()."?lang=".LANG."&ID=".$ID."&tabControl_active_tab=".urlencode($_REQUEST['tabControl_active_tab'] ?? ''));
}
else
{
if($e = $APPLICATION->GetException())
$message = new CAdminMessage(GetMessage("LDAP_SAVING_ERROR"), $e);
}
}
if($_REQUEST['check_server'] <> '' || $_REQUEST['refresh_groups'] <> '' || $_REQUEST['more_groups'] <> '')
$bPostback = true;
$ldp = false;
$str_ACTIVE="Y";
$str_IMPORT_STRUCT="Y";
$str_STRUCT_HAVE_DEFAULT = "Y";
$str_SET_DEPARTMENT_HEAD = "Y";
$str_DEFAULT_DEPARTMENT_NAME = (GetMessage('LDAP_DEFAULT_DEPARTMENT')!=''? GetMessage('LDAP_DEFAULT_DEPARTMENT') : 'My company');
$str_PORT = (string)EncryptionType::None->port();
$arGroups = Array();
ClearVars("str_");
if($ID>0)
{
$ld = CLdapServer::GetByID($ID);
if(!($arFields = $ld->ExtractFields("str_")))
{
$ID = 0;
}
else
{
if($MOD_RIGHT<"W")
$str_ADMIN_PASSWORD = "";
$ldp = new CLDAP([
"SERVER" => $arFields['SERVER'],
"PORT" => $arFields['PORT'],
"ADMIN_LOGIN" => $arFields['ADMIN_LOGIN'],
"ADMIN_PASSWORD"=> $arFields['ADMIN_PASSWORD'],
"BASE_DN" => $arFields['BASE_DN'],
"GROUP_FILTER" => $arFields['GROUP_FILTER'],
"GROUP_ID_ATTR" => $arFields['GROUP_ID_ATTR'],
"GROUP_NAME_ATTR"=> $arFields['GROUP_NAME_ATTR'],
"GROUP_MEMBERS_ATTR"=> $arFields['GROUP_MEMBERS_ATTR'],
"CONVERT_UTF8" => $arFields['CONVERT_UTF8'],
"USER_FILTER" => $arFields['USER_FILTER'],
"USER_GROUP_ATTR"=> $arFields['USER_GROUP_ATTR'],
"USER_GROUP_ACCESSORY"=> $arFields['USER_GROUP_ACCESSORY'],
"USER_DEPARTMENT_ATTR" => $arFields['USER_DEPARTMENT_ATTR'],
"USER_MANAGER_ATTR" => $arFields['USER_MANAGER_ATTR'],
"MAX_PAGE_SIZE" => $arFields['MAX_PAGE_SIZE'],
"LDAP_OPT_TIMELIMIT" => $arFields['LDAP_OPT_TIMELIMIT'],
"LDAP_OPT_TIMEOUT" => $arFields['LDAP_OPT_TIMEOUT'],
"LDAP_OPT_NETWORK_TIMEOUT" => $arFields['LDAP_OPT_NETWORK_TIMEOUT'],
"CONNECTION_TYPE" => $arFields['CONNECTION_TYPE'],
]);
$ldp->Connect();
$db_groups = CLdapServer::GetGroupMap($ID);
while($arGroup = $db_groups->Fetch())
$arGroups[$arGroup['GROUP_ID'].' '.md5($arGroup['LDAP_GROUP_ID'])] = $arGroup;
if (!isset($noimportGroups))
{
$noimportGroups = Array();
$db_groups = CLdapServer::GetGroupBan($ID);
while($arGroup = $db_groups->Fetch())
$noimportGroups[md5($arGroup['LDAP_GROUP_ID'])] = $arGroup['LDAP_GROUP_ID'];
}
if(!$bPostback)
$arUserFieldMap = $arFields["FIELD_MAP"];
}
}
//if(strlen($Add)<=0)
$DB->InitTableVarsForEdit("b_ldap_server", "", "str_");
if(is_array($_REQUEST['LDAP_GROUP']))
{
foreach($_REQUEST['LDAP_GROUP'] as $t_id=>$arGroup)
{
if($arGroup['LDAP_GROUP_ID'] <> '' || $arGroup['GROUP_ID']>0)
$arGroups[$t_id] = $arGroup;
}
}
$arGroups[md5(uniqid(rand(), true))] = Array();
$arGroups[md5(uniqid(rand(), true))] = Array();
$arGroups[md5(uniqid(rand(), true))] = Array();
$sDocTitle = ($ID>0) ? GetMessage("LDAP_EDIT_TITLE", array('#ID#' => $ID)) : GetMessage("LDAP_EDIT_TITLE_NEW");
$APPLICATION->SetTitle($sDocTitle);
/***************************************************************************
HTML form
****************************************************************************/
require($_SERVER["DOCUMENT_ROOT"].BX_ROOT."/modules/main/include/prolog_admin_after.php");
$aMenu = array(
array(
"ICON" => "btn_list",
"TEXT"=>GetMessage("MAIN_ADMIN_MENU_LIST"),
"TITLE"=>GetMessage("LDAP_EDIT_LIST"),
"LINK"=>"ldap_server_admin.php?lang=".LANG
)
);
if($ID>0)
{
$aMenu[] = array(
"ICON" => "btn_new",
"TEXT"=>GetMessage("MAIN_ADMIN_MENU_CREATE"),
"TITLE"=>GetMessage("LDAP_EDIT_NEW"),
"LINK"=>"ldap_server_edit.php?lang=".LANG
);
if ($MOD_RIGHT=="W")
{
$aMenu[] = array(
"ICON" => "btn_delete",
"TEXT"=>GetMessage("MAIN_ADMIN_MENU_DELETE"),
"TITLE"=>GetMessage("LDAP_EDIT_DEL"),
"LINK"=>"javascript:if(confirm('".GetMessage("LDAP_EDIT_DEL_CONF")."'))window.location='ldap_server_admin.php?action=delete&ID=".$ID."&lang=".LANG."&".bitrix_sessid_get()."';",
);
}
}
$context = new CAdminContextMenu($aMenu);
$context->Show();
if($SERVER <> '')
{
$ADMIN_PASSWORD = '';
if ($bPostback)
{
$ADMIN_PASSWORD = $_REQUEST['ADMIN_PASSWORD'] ?? '';
}
elseif (isset($arFields['ADMIN_PASSWORD']))
{
$ADMIN_PASSWORD = $arFields['ADMIN_PASSWORD'];
}
$ldp = new CLDAP([
"SERVER" => $SERVER,
"PORT" => $PORT,
"BASE_DN" => $BASE_DN,
"ADMIN_LOGIN" => $ADMIN_LOGIN,
"ADMIN_PASSWORD"=> $ADMIN_PASSWORD,
"CONVERT_UTF8" => $CONVERT_UTF8,
"GROUP_FILTER" => $GROUP_FILTER,
"GROUP_ID_ATTR" => $GROUP_ID_ATTR,
"GROUP_NAME_ATTR"=> $GROUP_NAME_ATTR,
"GROUP_MEMBERS_ATTR"=> $GROUP_MEMBERS_ATTR,
"USER_FILTER" => $USER_FILTER,
"USER_GROUP_ATTR"=> $USER_GROUP_ATTR,
"USER_GROUP_ACCESSORY"=> $USER_GROUP_ACCESSORY,
"MAX_PAGE_SIZE" => $MAX_PAGE_SIZE,
"LDAP_OPT_TIMELIMIT" => $LDAP_OPT_TIMELIMIT,
"LDAP_OPT_TIMEOUT" => $LDAP_OPT_TIMEOUT,
"LDAP_OPT_NETWORK_TIMEOUT" => $LDAP_OPT_NETWORK_TIMEOUT,
//"USER_DEPARTMENT_ATTR" => $USER_DEPARTMENT_ATTR,
//"USER_MANAGER_ATTR" => $USER_MANAGER_ATTR,
"CONNECTION_TYPE" => $CONNECTION_TYPE
]);
}
if($bPostback)
{
if(!$ldp || !$ldp->Connect())
{
$errorDetails = '';
if($e = $APPLICATION->GetException())
$errorDetails = $e->GetString();
$message = new CAdminMessage(
Array(
"MESSAGE" => GetMessage("LDAP_ERROR"),
"DETAILS" => GetMessage("LDAP_EDIT_ERR_CON")."\n".$errorDetails,
"TYPE"=>"ERROR"
)
);
}
elseif(!$ldp->BindAdmin())
{
$errorDetails = '';
if($e = $APPLICATION->GetException())
$errorDetails = $e->GetString();
$message = new CAdminMessage(
Array(
"MESSAGE" => GetMessage("LDAP_ERROR"),
"DETAILS" => GetMessage("LDAP_EDIT_ERR_AUT")."\n".$errorDetails,
"TYPE"=>"ERROR"
)
);
}
elseif($_REQUEST['check_server'] != '')
{
$message = new CAdminMessage(Array("MESSAGE" => GetMessage("LDAP_EDIT_OK_CON"), "TYPE"=>"OK"));
}
}
$aTabs = array(
array("DIV" => "edit1", "TAB" => GetMessage("LDAP_EDIT_TAB1"), "ICON"=>"main_user_edit", "TITLE"=>GetMessage("LDAP_EDIT_TAB1_TITLE")),
array("DIV" => "edit2", "TAB" => GetMessage("LDAP_EDIT_TAB11"), "ICON"=>"main_user_edit", "TITLE"=>GetMessage("LDAP_EDIT_TAB11_TITLE")),
array("DIV" => "edit3", "TAB" => GetMessage("LDAP_EDIT_TAB2"), "ICON"=>"main_user_edit", "TITLE"=>GetMessage("LDAP_EDIT_USER_MAP")),
array("DIV" => "edit4", "TAB" => GetMessage("LDAP_EDIT_TAB4"), "ICON"=>"main_user_edit", "TITLE"=>GetMessage("LDAP_EDIT_TAB4_TITLE")),
);
$tabControl = new CAdminTabControl("tabControl", $aTabs);
if ($message)
{
echo $message->Show();
}
else
{
if($ID<=0 && !$bPostback)
{
?>
<script>
setTimeout("OutLDSDefParams('AD')", 500);
</script>
<?
}
}
?>
<form method="POST" action="<?echo $APPLICATION->GetCurPage()?>?lang=<?=LANG?>&ID=<?=$ID?>" name="form1">
<?=bitrix_sessid_post()?>
<?echo GetFilterHiddens("find_");?>
<?if($_REQUEST['back_url']):?>
<input type="hidden" name="back_url" value="<?=htmlspecialcharsbx($_REQUEST['back_url'])?>">
<?endif?>
<?$tabControl->Begin();?>
<?$tabControl->BeginNextTab();?>
<?if($ID>0):?>
<tr>
<td><?echo GetMessage("LDAP_EDIT_ID")?></td>
<td><?echo $str_ID?></td>
</tr>
<?endif?>
<?if($str_TIMESTAMP_X <> ''):?>
<tr>
<td><?echo GetMessage("LDAP_EDIT_TSTAMP")?></td>
<td><?echo $str_TIMESTAMP_X?></td>
</tr>
<?endif;?>
<tr>
<td width="40%"><?echo GetMessage("LDAP_EDIT_ACT")?></td>
<td width="60%"><input type="hidden" name="ACTIVE" value="N"><input type="checkbox" name="ACTIVE" value="Y"<?if($str_ACTIVE=="Y")echo " checked"?>></td>
</tr>
<tr class="adm-detail-required-field">
<td><?echo GetMessage("LDAP_EDIT_NAME")?></td>
<td><input type="text" name="NAME" size="53" maxlength="255" value="<?=$str_NAME?>"></td>
</tr>
<tr>
<td class="adm-detail-valign-top"><?echo GetMessage("LDAP_EDIT_DESC")?></td>
<td><textarea class="typearea" name="DESCRIPTION" cols="40" rows="5"><?echo $str_DESCRIPTION?></textarea></td>
</tr>
<tr>
<td>
<?=GetMessage("LDAP_EDIT_CODE")?>
</td>
<td><input type="text" name="CODE" size="42" maxlength="255" value="<?=$str_CODE?>"></td>
</tr>
<tr>
<td>
<?=GetMessage("LDAP_EDIT_CODE_USER")?></td>
<td>
<?
$ntlmVarname = COption::GetOptionString('ldap', 'ntlm_varname', 'REMOTE_USER');
if (array_key_exists($ntlmVarname,$_SERVER) && trim($_SERVER[$ntlmVarname])!='')
echo htmlspecialcharsbx($_SERVER[$ntlmVarname]);
else
echo GetMessage("LDAP_EDIT_CODE_ABS");
?>
</td>
</tr>
<tr class="adm-detail-required-field">
<td><?echo GetMessage("LDAP_EDIT_SERV_PORT")?></td>
<td>
<?php
$encryptionType = EncryptionType::tryFrom((int)$str_CONNECTION_TYPE) ?? EncryptionType::None;
?>
<input
type="text"
name="SERVER"
id="adm-ldap-srv-edit-server"
size="42"
maxlength="255"
value="<?= (empty($str_SERVER) ? $encryptionType->scheme() . '://' : $str_SERVER); ?>">:
<input
type="text"
name="PORT"
id="adm-ldap-srv-edit-port"
size="4"
maxlength="5"
value="<?= (int)$str_PORT > 0 ? (int)$str_PORT : $encryptionType->port(); ?>">
</td>
</tr>
<tr>
<td><?=GetMessage("LDAP_EDIT_CONNECTION_TYPE")?></td>
<td>
<select name="CONNECTION_TYPE" id="adm-ldap-srv-edit-conn-type" onchange="onLdapSrvEditConnType();">
<option value="<?= EncryptionType::None->value; ?>"<?= $encryptionType === EncryptionType::None ? ' selected' : ''; ?>><?=GetMessage("LDAP_EDIT_NO_CRYPT")?></option>
<option value="<?= EncryptionType::Ssl->value; ?>"<?= $encryptionType === EncryptionType::Ssl ? ' selected' : ''; ?>>SSL</option>
<option value="<?= EncryptionType::Tls->value; ?>"<?= $encryptionType === EncryptionType::Tls ? ' selected' : ''; ?>>TLS</option>
</select>
<script>
function onLdapSrvEditConnType()
{
const type = BX('adm-ldap-srv-edit-conn-type');
const server = BX('adm-ldap-srv-edit-server');
const port = BX('adm-ldap-srv-edit-port');
const typeValue = (type.selectedIndex > -1)
? type.options[type.selectedIndex].value
: '<?= EncryptionType::None->value; ?>';
if (typeValue === '<?= EncryptionType::Ssl->value; ?>')
{
port.value = <?= EncryptionType::Ssl->port(); ?>;
server.value = setLdapScheme(server.value, '<?= EncryptionType::Ssl->scheme(); ?>');
}
else
{
port.value = <?= EncryptionType::None->port(); ?>;
server.value = setLdapScheme(server.value, '<?= EncryptionType::None->scheme(); ?>');
}
}
function setLdapScheme(address, scheme)
{
if (address.search('://') > -1)
{
return address.replace(/(.*):\/\/(.*)/, scheme + '://$2');
}
return scheme + '://' + address;
}
</script>
</td>
</tr>
<tr class="adm-detail-required-field">
<td><?echo GetMessage("LDAP_EDIT_ADM_LOGIN")?></td>
<td><input type="text" name="ADMIN_LOGIN" size="53" maxlength="255" value="<?=$str_ADMIN_LOGIN?>"></td>
</tr>
<?php if ($ID > 0):?>
<tr>
<td><?= GetMessage('LDAP_EDIT_NEW_PASS') ?></td>
<td>
<input type="password" name="ADMIN_PASSWORD" size="53" maxlength="255" value="<?= htmlspecialcharsbx($_REQUEST['ADMIN_PASSWORD'] ?? '')?>">
</td>
</tr>
<?php else:?>
<tr class="adm-detail-required-field">
<td><?=GetMessage("LDAP_EDIT_ADM_PASS")?></td>
<td>
<input type="password" name="ADMIN_PASSWORD" size="53" maxlength="255" value="<?= htmlspecialcharsbx($_REQUEST['ADMIN_PASSWORD'] ?? '')?>">
</td>
</tr>
<?php endif;?>
<tr>
<td> </td>
<td><input type="submit" name="check_server" value="<?=GetMessage("LDAP_EDIT_CHECK_CONNECTION")?>" class="button"></td>
</tr>
<tr class="adm-detail-required-field">
<td><?= GetMessage("LDAP_EDIT_BASE_DN"); ?></td>
<td>
<?php
if ($ldp):
$rootDseList = $ldp->RootDSE();
$rootDseCount = count($rootDseList);
if ($rootDseCount > 0):
?>
<select name="" onChange="document.getElementById('BASE_DN').value = this.value">
<option value=""> </option>
<?php for($i = 0; $i < $rootDseCount; $i++):?>
<option
value="<?=htmlspecialcharsbx($rootDseList[$i]);?>"
title="<?=htmlspecialcharsbx($rootDseList[$i]);?>">
<?=htmlspecialcharsbx($rootDseList[$i]);?>
</option>
<?php endfor;?>
</select>
<?php
endif;
endif;
?>
<input type="text" name="BASE_DN" id="BASE_DN" size="53" maxlength="255" value="<?=$str_BASE_DN?>">
</td>
</tr>
<tr>
<td><?echo GetMessage("LDAP_EDIT_LDAP_OPT_TIMELIMIT")?></td>
<td>
<input type="text" name="LDAP_OPT_TIMELIMIT" id="LDAP_OPT_TIMELIMIT" size="15" maxlength="255" value="<?=(intval($str_LDAP_OPT_TIMELIMIT) > 0 ? intval($str_LDAP_OPT_TIMELIMIT) : 100)?>">
</td>
</tr>
<tr>
<td><?echo GetMessage("LDAP_EDIT_LDAP_OPT_TIMEOUT")?></td>
<td>
<input type="text" name="LDAP_OPT_TIMEOUT" id="LDAP_OPT_TIMEOUT" size="15" maxlength="255" value="<?=(intval($str_LDAP_OPT_TIMEOUT) > 0 ? intval($str_LDAP_OPT_TIMEOUT) : 5)?>">
</td>
</tr>
<tr>
<td><?echo GetMessage("LDAP_EDIT_LDAP_OPT_NETWORK_TIMEOUT")?></td>
<td>
<input type="text" name="LDAP_OPT_NETWORK_TIMEOUT" id="LDAP_OPT_NETWORK_TIMEOUT" size="15" maxlength="255" value="<?=(intval($str_LDAP_OPT_NETWORK_TIMEOUT) > 0 ? intval($str_LDAP_OPT_NETWORK_TIMEOUT) : 5)?>">
</td>
</tr>
<?if(CLdapUtil::isLdapPaginationAviable()):?>
<tr>
<td><?echo GetMessage("LDAP_EDIT_MAX_PAGE_SIZE")?></td>
<td>
<input type="text" name="MAX_PAGE_SIZE" id="MAX_PAGE_SIZE" size="15" maxlength="255" value="<?=(intval($str_MAX_PAGE_SIZE) > 0 ? intval($str_MAX_PAGE_SIZE) : $defaultMaxPageSizeAD)?>">
</td>
</tr>
<?endif;?>
<?$tabControl->BeginNextTab();?>
<script>
function OutLDSDefParams(t)
{
if(t=='AD')
{
document.getElementById('GROUP_FILTER').value = '(objectCategory=group)';
document.getElementById('GROUP_ID_ATTR').value = 'dn';
document.getElementById('CONVERT_UTF8').checked = true;
document.getElementById('GROUP_NAME_ATTR').value = 'sAMAccountName';
document.getElementById('GROUP_MEMBERS_ATTR').value = 'member';
document.getElementById('USER_FILTER').value = '(&(objectClass=user)(objectCategory=PERSON))';
document.getElementById('USER_ID_ATTR').value = 'samaccountname';
//document.getElementById('USER_NAME_ATTR').value = 'givenName';
//document.getElementById('USER_LAST_NAME_ATTR').value = 'sn';
//document.getElementById('USER_EMAIL_ATTR').value = 'mail';
document.getElementById('USER_GROUP_ACCESSORY').checked = false;
document.getElementById('USER_GROUP_ATTR').value = 'memberof';
document.getElementById('USER_DEPARTMENT_ATTR').value = 'department';
document.getElementById('USER_MANAGER_ATTR').value = 'manager';
document.getElementById('SYNC_ATTR').value = 'whenChanged';
__UFAdd("ACTIVE");
__UFAdd("NAME");
__UFAdd("LAST_NAME");
__UFAdd("EMAIL");
}
else
{
document.getElementById('GROUP_FILTER').value = '(objectClass=posixGroup)';
document.getElementById('GROUP_ID_ATTR').value = 'gidNumber';
document.getElementById('CONVERT_UTF8').checked = false;
document.getElementById('GROUP_NAME_ATTR').value = 'cn';
document.getElementById('GROUP_MEMBERS_ATTR').value = 'memberUid';
document.getElementById('USER_FILTER').value = '(objectClass=posixAccount)';
document.getElementById('USER_ID_ATTR').value = 'uid';
//document.getElementById('USER_NAME_ATTR').value = 'cn';
//document.getElementById('USER_LAST_NAME_ATTR').value = 'sn';
//document.getElementById('USER_EMAIL_ATTR').value = 'email';
document.getElementById('USER_GROUP_ACCESSORY').checked = false;
document.getElementById('USER_GROUP_ATTR').value = 'gidNumber';
document.getElementById('USER_DEPARTMENT_ATTR').value = 'department';
document.getElementById('USER_MANAGER_ATTR').value = 'manager';
__UFAdd("NAME", true);
__UFAdd("LAST_NAME", true);
__UFAdd("EMAIL", true);
}
return false;
}
</script>
<tr class="heading">
<td align="center" colspan="2"><b><?echo GetMessage("LDAP_EDIT_PARAMS")?></b> (<a href="javascript:void(0)" onClick="return OutLDSDefParams('AD')" title="<?echo GetMessage("LDAP_EDIT_PARAMS_AD")?>">AD</a> \ <a href="javascript:void(0)" onClick="return OutLDSDefParams('LDAP')" title="<?echo GetMessage("LDAP_EDIT_PARAMS_LDAP")?>">LDAP</a>)</td>
</tr>
<tr>
<td width="40%"><?echo GetMessage("LDAP_EDIT_CONVERT_UTF8")?></td>
<td width="60%"><input type="checkbox" id="CONVERT_UTF8" name="CONVERT_UTF8" value="Y"<?if($str_CONVERT_UTF8=="Y")echo " checked"?>></td>
</tr>
<tr class="adm-detail-required-field">
<td><?echo GetMessage("LDAP_EDIT_GROUP_FILTER")?></td>
<td><textarea id="GROUP_FILTER" name="GROUP_FILTER" cols="50" rows="4"><?=$str_GROUP_FILTER?></textarea></td>
</tr>
<tr class="adm-detail-required-field">
<td><?echo GetMessage("LDAP_EDIT_GROUP_ATTR")?></td>
<td><input type="text" id="GROUP_ID_ATTR" name="GROUP_ID_ATTR" size="30" maxlength="255" value="<?=$str_GROUP_ID_ATTR?>"></td>
</tr>
<tr>
<td><?echo GetMessage("LDAP_EDIT_GROUP_NAME")?></td>
<td><input type="text" id="GROUP_NAME_ATTR" name="GROUP_NAME_ATTR" size="30" maxlength="255" value="<?=$str_GROUP_NAME_ATTR?>"></td>
</tr>
<tr>
<td><?echo GetMessage("LDAP_EDIT_GROUP_MEMBERS")?></td>
<td><input type="text" id="GROUP_MEMBERS_ATTR" name="GROUP_MEMBERS_ATTR" size="30" maxlength="255" value="<?=$str_GROUP_MEMBERS_ATTR?>"></td>
</tr>
<tr class="adm-detail-required-field">
<td><?echo GetMessage("LDAP_EDIT_USER_FILTER")?></td>
<td><textarea id="USER_FILTER" name="USER_FILTER" cols="50" rows="4"><?=$str_USER_FILTER?></textarea></td>
</tr>
<tr class="adm-detail-required-field">
<td><?echo GetMessage("LDAP_EDIT_USER_ATTR")?></td>
<td><input type="text" id="USER_ID_ATTR" name="USER_ID_ATTR" size="30" maxlength="255" value="<?=$str_USER_ID_ATTR?>"></td>
</tr>
<!--
<tr>
<td><?echo GetMessage("LDAP_EDIT_USER_NAME")?></td>
<td><input type="text" id="USER_NAME_ATTR" name="USER_NAME_ATTR" size="30" maxlength="255" value="<?=$str_USER_NAME_ATTR?>"></td>
</tr>
<tr>
<td><?echo GetMessage("LDAP_EDIT_USER_SNAME")?></td>
<td><input type="text" id="USER_LAST_NAME_ATTR" name="USER_LAST_NAME_ATTR" size="30" maxlength="255" value="<?=$str_USER_LAST_NAME_ATTR?>"></td>
</tr>
<tr>
<td><?echo GetMessage("LDAP_EDIT_USER_EMAIL")?></td>
<td><input type="text" id="USER_EMAIL_ATTR" name="USER_EMAIL_ATTR" size="30" maxlength="255" value="<?=$str_USER_EMAIL_ATTR?>"></td>
</tr>
-->
<tr>
<td><?echo GetMessage("LDAP_EDIT_USER_MEMBER")?></td>
<td><input type="text" id="USER_GROUP_ATTR" name="USER_GROUP_ATTR" size="30" maxlength="255" value="<?=$str_USER_GROUP_ATTR?>"></td>
</tr>
<tr>
<td><?echo GetMessage("LDAP_EDIT_USER_GROUP_ACCESSORY")?></td>
<td><input type="checkbox" id="USER_GROUP_ACCESSORY" name="USER_GROUP_ACCESSORY" value="Y" <?if($str_USER_GROUP_ACCESSORY=="Y")echo " checked"?>></td>
</tr>
<tr>
<td><?echo GetMessage("LDAP_EDIT_USER_DEPARTMENT")?></td>
<td><input type="text" id="USER_DEPARTMENT_ATTR" name="USER_DEPARTMENT_ATTR" size="30" maxlength="255" value="<?=$str_USER_DEPARTMENT_ATTR?>"></td>
</tr>
<tr>
<td><?echo GetMessage("LDAP_EDIT_USER_MANAGER")?></td>
<td><input type="text" id="USER_MANAGER_ATTR" name="USER_MANAGER_ATTR" size="30" maxlength="255" value="<?=$str_USER_MANAGER_ATTR?>"></td>
</tr>
<tr class="heading">
<td align="center" colspan="2"><b><?echo GetMessage("LDAP_EDIT_USER_FIELDS")?></b> <a href="#notes" style="text-decoration:none;"><span class="required">**</span></a><br></td>
</tr>
<?
$nm=-1;
foreach($arUserFieldMap as $userField=>$ldapField):
if ($userField=='UF_DEPARTMENT' && IsModuleInstalled('intranet') /* also checking IsModuleInstalled('intranet'), because user can create his own UF_DEPARTMENT field in non-intranet version? */)
{
continue;
}
$nm++;
?>
<tr id="maprow<?=$nm?>">
<td>
<select name="MAP[<?=$nm?>][USER]" id="MAP[<?=$nm?>][USER]" onchange="__UFChange(<?=$nm?>)" style="width:200px">
<option value=""></option>
<?foreach($arSyncFields as $k=>$p):
if ($k=='UF_DEPARTMENT' && IsModuleInstalled('intranet'))
{
continue;
};?>
<option value="<?=htmlspecialcharsbx($k)?>" title="<?=htmlspecialcharsbx($p["NAME"])?>" <?if($k == $userField)echo " selected"?>><?=htmlspecialcharsbx($p["NAME"])?></option>
<?endforeach?>
</select> :
</td>
<td><input type="text" name="MAP[<?=$nm?>][LDAP]" id="MAP[<?=$nm?>][LDAP]" value="<?=htmlspecialcharsbx($ldapField)?>"> <a href="javascript:void(0);" onclick="__UFDel(<?=$nm?>);"><?echo GetMessage("LDAP_EDIT_USER_FIELDS_DEL")?></a></td>
</tr>
<?endforeach;?>
<tr id="lastmaprow">
<td></td>
<td><a href="javascript:void(0)" onClick="__UFAdd();"><?echo GetMessage("LDAP_EDIT_USER_FIELDS_ADD")?></a></td>
</tr>
<script>
var nm = <?=$nm?>;
var arMas = {'_': '' <?foreach($arSyncFields as $k=>$p):?>, '<?=Cutil::JSEscape($k)?>': '<?=Cutil::JSEscape($p["AD"])?>'<?endforeach;?>};
var arMasLdap = {'_': '' <?foreach($arSyncFields as $k=>$p):?>, '<?=Cutil::JSEscape($k)?>': '<?=Cutil::JSEscape($p["LDAP"])?>'<?endforeach;?>};
var arMasName = {'_': '' <?foreach($arSyncFields as $k=>$p):?>, '<?=Cutil::JSEscape($k)?>': '<?=Cutil::JSEscape($p["NAME"])?>'<?endforeach;?>};
function __UFChange(id)
{
var oSelect = document.getElementById("MAP["+id+"][USER]");
var oInput = document.getElementById("MAP["+id+"][LDAP]");
var name = oSelect.value;
oInput.value = arMas[name];
}
function __UFDel(id)
{
var oTR = document.getElementById("maprow"+id);
var oTable = oTR.parentNode;
while(oTable.tagName.toLowerCase()!='table')
oTable = oTable.parentNode;
oTable.deleteRow(oTR.rowIndex);
}
function __UFAdd(id, ldap)
{
var val = '';
var oSelect;
if(id)
{
if(ldap)
{
if(arMasLdap[id])
val = arMasLdap[id];
}
else
{
if(arMas[id])
val = arMas[id];
}
var i;
for(i=0; i<=nm; i++)
{
oSelect = document.getElementById("MAP["+i+"][USER]");
if(oSelect && oSelect.value == id)
{
document.getElementById("MAP["+i+"][LDAP]").value = val;
return;
}
}
}
var oTR = document.getElementById("lastmaprow");
nm++;
var oTable = oTR.parentNode;
while(oTable.tagName.toLowerCase()!='table')
oTable = oTable.parentNode;
oTR = oTable.insertRow(oTR.rowIndex);
oTR.vAlign = "top";
oTR.id = "maprow"+nm;
var oTD = oTR.insertCell(-1);
oTD.align = "right";
var k, tdText = '<select name="MAP['+nm+'][USER]" id="MAP['+nm+'][USER]" onchange="__UFChange('+nm+')" style="width:200px">';
for(k in arMasName)
{
tdText = tdText + '<option value="'+k+'" ';
if(id == k)
tdText = tdText + ' selected';
tdText = tdText + '>'+arMasName[k]+'</option>';
}
tdText = tdText + '</select> : ';
oTD.innerHTML = tdText;
oTD = oTR.insertCell(-1);
oTD.innerHTML = '<input type="text" name="MAP['+nm+'][LDAP]" id="MAP['+nm+'][LDAP]" value="'+val+'"> <a href="javascript:void(0);" onclick="__UFDel('+nm+')"><?echo GetMessage("LDAP_EDIT_USER_FIELDS_DEL")?></a>';
}
</script>
<?
if (IsModuleInstalled('intranet'))
{
$importEnabled = ($str_IMPORT_STRUCT=="Y");
?>
<script>
function __importStateSwitch(disabled)
{
document.getElementById('ROOT_DEPARTMENT').disabled = disabled;
document.getElementById('STRUCT_HAVE_DEFAULT').disabled = disabled;
document.getElementById('DEFAULT_DEPARTMENT_NAME').disabled = disabled;
document.getElementById('SET_DEPARTMENT_HEAD').disabled = disabled;
}
</script>
<tr class="heading">
<td align="center" colspan="2"><b><?echo GetMessage("LDAP_EDIT_STRUCTURE")?></b><br/></td>
</tr>
<tr>
<td>
<?=GetMessage("LDAP_EDIT_IMPORT_STRUCT")?>: </td>
<td>
<input onClick="__importStateSwitch(!this.checked);" type="checkbox" id="IMPORT_STRUCT" name="IMPORT_STRUCT" value="Y"<?if($importEnabled)echo " checked"?>>
</td>
</tr>
<?
$l = CLdapUtil::getDepartmentListFromSystem();
if ($l !== false) {
?>
<tr>
<td> <?=GetMessage("LDAP_EDIT_STRUCT_ROOT")?>: </td>
<td>
<select name="ROOT_DEPARTMENT" id="ROOT_DEPARTMENT" <? if (!$importEnabled) echo 'disabled="1" '?> style="width: 270px">
<option value="-1" <?if($str_ROOT_DEPARTMENT==-1) echo 'selected="1"'; ?>><?=GetMessage('LDAP_EDIT_DEPT_NOT_SET')?></option>
<?
while($arDepartment = $l->GetNext()):
?><option value="<?=$arDepartment["ID"]?>" title="<?echo str_repeat(" . ", $arDepartment["DEPTH_LEVEL"])?><?echo $arDepartment["NAME"]?>" <? if ($arDepartment["ID"]==$str_ROOT_DEPARTMENT) echo 'selected="1"'; ?>><?echo str_repeat(" . ", $arDepartment["DEPTH_LEVEL"])?><?echo $arDepartment["NAME"]?></option><?
endwhile;
?>
</select>
</td>
</tr>
<? } ?>
<tr>
<td>
<?=GetMessage("LDAP_EDIT_STRUCT_HAVE_DEFAULT")?>: </td>
<td>
<input type="checkbox" id="STRUCT_HAVE_DEFAULT" name="STRUCT_HAVE_DEFAULT" <? if (!$importEnabled) echo 'disabled="1" '?>value="Y"<?if($str_STRUCT_HAVE_DEFAULT && $str_STRUCT_HAVE_DEFAULT=='Y')echo " checked"?>>
</td>
</tr>
<tr>
<td>
<?=GetMessage("LDAP_EDIT_SET_DEPARTMENT_HEAD")?>: </td>
<td>
<input type="checkbox" id="SET_DEPARTMENT_HEAD" name="SET_DEPARTMENT_HEAD"<?=(!$importEnabled ? ' disabled="1" ' : '')?>value="Y"<?=($str_SET_DEPARTMENT_HEAD != 'N' ? " checked" : "")?>>
</td>
</tr>
<tr>
<td>
<?=GetMessage("LDAP_EDIT_STRUCT_DEFAULT_VAL")?>: </td>
<td>
<input type="text" name="DEFAULT_DEPARTMENT_NAME" id="DEFAULT_DEPARTMENT_NAME" size="40" maxlength="255" <? if (!$importEnabled) echo 'disabled="1" '?>value="<?=$str_DEFAULT_DEPARTMENT_NAME?>">
</td>
</tr>
<?
}
?>
<?$tabControl->BeginNextTab();?>
<?
$arLDAPGroups = false;
if($ldp && ($gr_res = $ldp->GetGroupList()))
{
$arLDAPGroups = Array();
while($ar_group = $gr_res->GetNext())
{
$arLDAPGroups[$ar_group['ID']] = (is_set($ar_group, 'NAME') ? $ar_group['NAME'] : $ar_group['ID']);
}
uasort(
$arLDAPGroups,
function ($a, $b) {
$a = strtoupper($a);
$b = strtoupper($b);
if ($a == $b)
{
return 0;
}
return ($a > $b ? 1 : -1);
}
);
}
if(!is_array($arLDAPGroups) || count($arLDAPGroups)<=0):?>
<script>
function CheckNAttr()
{
if(document.getElementById("GROUP_FILTER").value.length<=0 ||
document.getElementById("GROUP_ID_ATTR").value.length<=0 ||
document.getElementById("GROUP_NAME_ATTR").value.length<=0
)
{
alert('<?=GetMessage("LDAP_EDIT_WARN")?>');
return false;
}
return true;
}
</script>
<tr>
<td align="center" colspan="2"><?echo GetMessage("LDAP_SERV_EDIT_LIST_EMPTY")?></td>
</tr>
<tr>
<td align="center" colspan="2"><input type="submit" name="refresh_groups" value="<?echo GetMessage("LDAP_EDIT_REFRESH")?>" class="button" onClick="return CheckNAttr();"></td>
</tr>
<?else:?>
<tr>
<td colspan="2" align="center">
<table class="internal" cellspacing="0" cellpadding="0">
<tr class="heading">
<td><?echo GetMessage("LDAP_EDIT_GROUP_REM")?></td>
<td><?echo GetMessage("LDAP_EDIT_GROUP_LOC")?></td>
<td><?echo GetMessage("LDAP_EDIT_GROUP_MAP_DEL")?></td>
</tr>
<?foreach($arGroups as $t_id=>$arGroup):?>
<tr>
<td>
<select name="LDAP_GROUP[<?=htmlspecialcharsbx($t_id)?>][LDAP_GROUP_ID]" style="width:360px;">
<option value=""></option>
<?foreach($arLDAPGroups as $gid => $gname):?>
<option value="<?=$gid?>" title="<?=$gname?>" <?if(htmlspecialcharsEx($arGroup['LDAP_GROUP_ID'])==$gid)echo ' selected'?>><?=$gname?></option>
<?endforeach?>
</select>
</td>
<td>
<?$dbgr = CGroup::GetList("sort", "asc");?>
<select name="LDAP_GROUP[<?=htmlspecialcharsbx($t_id)?>][GROUP_ID]" style="width:360px;">
<option value=""></option>
<?while($argr = $dbgr->GetNext()):
if ($argr['ID'] == 2)
continue;
?>
<option value="<?=$argr['ID']?>" title="<?=$argr['NAME']?> [<?=$argr['ID']?>]" <?if($arGroup['GROUP_ID']==$argr['ID'])echo ' selected'?>><?=$argr['NAME']?> [<?=$argr['ID']?>]</option>
<?endwhile?>
</select>
</td>
<td align="center">
<?if($arGroup['LDAP_GROUP_ID'] <> '' || $arGroup['GROUP_ID']>0):?>
<input type="checkbox" name="LDAP_GROUP[<?=htmlspecialcharsbx($t_id)?>][DEL_GROUP]" value="Y" <?if($arGroup['DEL_GROUP']=='Y')echo ' checked'?>>
<?endif;?>
</td>
</tr>
<?endforeach?>
<tr>
<td colspan="3"><input type="submit" name="more_groups" value="<?echo GetMessage("LDAP_EDIT_GROUP_MAP_MORE")?>"></td>
</tr>
</table>
</td>
</tr>
<tr>
<td colspan="2" align="center">
<table class="internal" cellspacing="0" cellpadding="0">
<tr class="heading">
<td><?echo GetMessage("LDAP_EDIT_GROUP_NOIMPORT")?>:</td>
</tr>
<tr>
<td>
<select size="8" name="LDAP_NOIMP_GROUPS[]" style="width:360px;" multiple="">
<?foreach($arLDAPGroups as $gid=>$gname):?>
<option value="<?=$gid?>" title="<?=$gname?>" <?if(array_key_exists(md5(htmlspecialcharsback($gid)),$noimportGroups)) echo ' selected'?>><?=$gname?></option>
<?endforeach?>
</select>
</td>
</tr>
</table>
</td>
</tr>
<?endif;?>
<?$tabControl->BeginNextTab();?>
<script>
function _SCh(c)
{
document.getElementById('SYNC_PERIOD').disabled = !c;
if(document.getElementById('SYNC_PERIOD').value.length<=0)
document.getElementById('SYNC_PERIOD').value = '24';
document.getElementById('sc2').disabled = !c;
document.getElementById('sc3').disabled = !c;
}
</script>
<?
if($str_SYNC=="Y")
$dis ='';
else
$dis = ' disabled';
?>
<?if($str_SYNC_LAST <> ''):?>
<tr>
<td><?echo GetMessage("LDAP_EDIT_LAST_SYNC")?></td>
<td><?=$str_SYNC_LAST?></td>
</tr>
<?endif?>
<tr>
<td width="40%"><label for="SYNC_USER_ADD"><?echo GetMessage("LDAP_EDIT_SYNC_USER_ADD")?></label></td>
<td width="60%"><input type="checkbox" id="SYNC_USER_ADD" name="SYNC_USER_ADD" value="Y" <?if($str_SYNC_USER_ADD=="Y")echo ' checked'?>></td>
</tr>
<tr>
<td width="40%"><label for="SYNC"><?echo GetMessage("LDAP_EDIT_SYNC")?></label></td>
<td width="60%"><input type="checkbox" id="SYNC" name="SYNC" value="Y" <?if($str_SYNC=="Y")echo ' checked'?> onclick="_SCh(this.checked);"></td>
</tr>
<tr id="sc3"<?=$dis?>>
<td id="sc2"<?=$dis?>><?echo GetMessage("LDAP_EDIT_SYNC_PERIOD")?></td>
<td><input type="text" id="SYNC_PERIOD" name="SYNC_PERIOD" size="10" maxlength="18" value="<?=$str_SYNC_PERIOD?>"<?=$dis?>> <?echo GetMessage("LDAP_EDIT_SYNC_PERIOD_H")?></td>
</tr>
<tr>
<td><?echo GetMessage("LDAP_EDIT_SYNC_ATTR")?></td>
<td><input type="text" id="SYNC_ATTR" name="SYNC_ATTR" size="20" maxlength="255" value="<?=$str_SYNC_ATTR?>"></td>
</tr>
<?
$tabControl->Buttons(Array("disabled"=> $MOD_RIGHT<"W" ,"back_url" =>"ldap_server_admin.php?lang=".LANG.GetFilterParams("filter_", false)));
$tabControl->End();?>
</form>
<?$tabControl->ShowWarnings("form1", $message);?>
<a name="notes" ></a>
<?echo BeginNote();?>
<span class="required">**</span> <?echo GetMessage("LDAP_EDIT_SYNC_NOTES")?>
<?echo EndNote();?>
<?require($_SERVER["DOCUMENT_ROOT"].BX_ROOT."/modules/main/include/epilog_admin.php");?>