From 25949ae76cf7a37ba0d5aaf7ec93471ba1bd0c5c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Tue, 16 Jul 2024 12:01:48 +0200
Subject: [PATCH] Start Directory interface

---
 src/Ltb/Directory.php                 |  8 +++++++
 src/Ltb/Directory/ActiveDirectory.php | 17 ++++++++++++++
 src/Ltb/Directory/OpenLDAP.php        | 33 +++++++++++++++++++++++++++
 3 files changed, 58 insertions(+)
 create mode 100644 src/Ltb/Directory.php
 create mode 100644 src/Ltb/Directory/ActiveDirectory.php
 create mode 100644 src/Ltb/Directory/OpenLDAP.php

diff --git a/src/Ltb/Directory.php b/src/Ltb/Directory.php
new file mode 100644
index 0000000..65879a1
--- /dev/null
+++ b/src/Ltb/Directory.php
@@ -0,0 +1,8 @@
+<?php
+
+namespace Ltb;
+
+interface Directory
+{
+    public function isLocked($entry, $ppolicy);
+}
diff --git a/src/Ltb/Directory/ActiveDirectory.php b/src/Ltb/Directory/ActiveDirectory.php
new file mode 100644
index 0000000..5f4e7b7
--- /dev/null
+++ b/src/Ltb/Directory/ActiveDirectory.php
@@ -0,0 +1,17 @@
+<?php
+
+namespace Ltb\Directory;
+
+class ActiveDirectory implements Directory
+{
+    public function isLocked($entry, $ppolicy) {
+
+        $isLocked = false;
+
+        $userAccountControl = $entry[0]['useraccountcontrol'][0];
+
+        if ($userAccountControl & 2) { $isLocked = true; }
+
+        return $isLocked;
+    }
+}
diff --git a/src/Ltb/Directory/OpenLDAP.php b/src/Ltb/Directory/OpenLDAP.php
new file mode 100644
index 0000000..83f5e55
--- /dev/null
+++ b/src/Ltb/Directory/OpenLDAP.php
@@ -0,0 +1,33 @@
+<?php
+
+namespace Ltb\Directory;
+
+class OpenLDAP implements Directory
+{
+    public function isLocked($entry, $ppolicy) {
+
+        $ppolicy_entry = $policy;
+        $isLocked = false;
+
+        $pwdLockout = strtolower($ppolicy_entry[0]['pwdlockout'][0]) == "true" ? true : false;
+        $pwdLockoutDuration = $ppolicy_entry[0]['pwdlockoutduration'][0];
+        $pwdAccountLockedTime = $entry[0]['pwdaccountlockedtime'][0];
+
+        if ( $pwdAccountLockedTime === "000001010000Z" ) {
+            $isLocked = true;
+        } else if (isset($pwdAccountLockedTime)) {
+            if (isset($pwdLockoutDuration) and ($pwdLockoutDuration > 0)) {
+                // $lockDate = ldapDate2phpDate($pwdAccountLockedTime);
+                $lockdate = time() // TODO add Date functions in LTB-LDAP
+                $unlockDate = date_add( $lockDate, new DateInterval('PT'.$pwdLockoutDuration.'S'));
+                if ( time() <= $unlockDate->getTimestamp() ) {
+                    $isLocked = true;
+                }
+            } else {
+                $isLocked = true;
+            }
+        }
+
+        return $isLocked;
+    }
+}