mirror of
https://github.com/YunoHost-Apps/z-push_ynh.git
synced 2024-09-03 18:05:58 +02:00
230 lines
No EOL
9.1 KiB
PHP
230 lines
No EOL
9.1 KiB
PHP
<?php
|
|
/***********************************************
|
|
* File : provisioning.php
|
|
* Project : Z-Push
|
|
* Descr : Provides the PROVISIONING command
|
|
*
|
|
* Created : 16.02.2012
|
|
*
|
|
* Copyright 2007 - 2013 Zarafa Deutschland GmbH
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License, version 3,
|
|
* as published by the Free Software Foundation with the following additional
|
|
* term according to sec. 7:
|
|
*
|
|
* According to sec. 7 of the GNU Affero General Public License, version 3,
|
|
* the terms of the AGPL are supplemented with the following terms:
|
|
*
|
|
* "Zarafa" is a registered trademark of Zarafa B.V.
|
|
* "Z-Push" is a registered trademark of Zarafa Deutschland GmbH
|
|
* The licensing of the Program under the AGPL does not imply a trademark license.
|
|
* Therefore any rights, title and interest in our trademarks remain entirely with us.
|
|
*
|
|
* However, if you propagate an unmodified version of the Program you are
|
|
* allowed to use the term "Z-Push" to indicate that you distribute the Program.
|
|
* Furthermore you may use our trademarks where it is necessary to indicate
|
|
* the intended purpose of a product or service provided you use it in accordance
|
|
* with honest practices in industrial or commercial matters.
|
|
* If you want to propagate modified versions of the Program under the name "Z-Push",
|
|
* you may only do so if you have a written permission by Zarafa Deutschland GmbH
|
|
* (to acquire a permission please contact Zarafa at trademark@zarafa.com).
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
* Consult LICENSE file for details
|
|
************************************************/
|
|
|
|
class Provisioning extends RequestProcessor {
|
|
|
|
/**
|
|
* Handles the Provisioning command
|
|
*
|
|
* @param int $commandCode
|
|
*
|
|
* @access public
|
|
* @return boolean
|
|
*/
|
|
public function Handle($commandCode) {
|
|
$status = SYNC_PROVISION_STATUS_SUCCESS;
|
|
$policystatus = SYNC_PROVISION_POLICYSTATUS_SUCCESS;
|
|
|
|
$rwstatus = self::$deviceManager->GetProvisioningWipeStatus();
|
|
$rwstatusWiped = false;
|
|
|
|
// if this is a regular provisioning require that an authenticated remote user
|
|
if ($rwstatus < SYNC_PROVISION_RWSTATUS_PENDING) {
|
|
ZLog::Write(LOGLEVEL_DEBUG, "RequestProcessor::HandleProvision(): Forcing delayed Authentication");
|
|
self::Authenticate();
|
|
}
|
|
|
|
$phase2 = true;
|
|
|
|
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_PROVISION))
|
|
return false;
|
|
|
|
//handle android remote wipe.
|
|
if (self::$decoder->getElementStartTag(SYNC_PROVISION_REMOTEWIPE)) {
|
|
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_STATUS))
|
|
return false;
|
|
|
|
$instatus = self::$decoder->getElementContent();
|
|
|
|
if(!self::$decoder->getElementEndTag())
|
|
return false;
|
|
|
|
if(!self::$decoder->getElementEndTag())
|
|
return false;
|
|
|
|
$phase2 = false;
|
|
$rwstatusWiped = true;
|
|
}
|
|
else {
|
|
|
|
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_POLICIES))
|
|
return false;
|
|
|
|
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_POLICY))
|
|
return false;
|
|
|
|
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_POLICYTYPE))
|
|
return false;
|
|
|
|
$policytype = self::$decoder->getElementContent();
|
|
if ($policytype != 'MS-WAP-Provisioning-XML' && $policytype != 'MS-EAS-Provisioning-WBXML') {
|
|
$status = SYNC_PROVISION_STATUS_SERVERERROR;
|
|
}
|
|
if(!self::$decoder->getElementEndTag()) //policytype
|
|
return false;
|
|
|
|
if (self::$decoder->getElementStartTag(SYNC_PROVISION_POLICYKEY)) {
|
|
$devpolicykey = self::$decoder->getElementContent();
|
|
|
|
if(!self::$decoder->getElementEndTag())
|
|
return false;
|
|
|
|
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_STATUS))
|
|
return false;
|
|
|
|
$instatus = self::$decoder->getElementContent();
|
|
|
|
if(!self::$decoder->getElementEndTag())
|
|
return false;
|
|
|
|
$phase2 = false;
|
|
}
|
|
|
|
if(!self::$decoder->getElementEndTag()) //policy
|
|
return false;
|
|
|
|
if(!self::$decoder->getElementEndTag()) //policies
|
|
return false;
|
|
|
|
if (self::$decoder->getElementStartTag(SYNC_PROVISION_REMOTEWIPE)) {
|
|
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_STATUS))
|
|
return false;
|
|
|
|
$status = self::$decoder->getElementContent();
|
|
|
|
if(!self::$decoder->getElementEndTag())
|
|
return false;
|
|
|
|
if(!self::$decoder->getElementEndTag())
|
|
return false;
|
|
|
|
$rwstatusWiped = true;
|
|
}
|
|
}
|
|
if(!self::$decoder->getElementEndTag()) //provision
|
|
return false;
|
|
|
|
if (PROVISIONING !== true) {
|
|
ZLog::Write(LOGLEVEL_INFO, "No policies deployed to device");
|
|
$policystatus = SYNC_PROVISION_POLICYSTATUS_NOPOLICY;
|
|
}
|
|
|
|
self::$encoder->StartWBXML();
|
|
|
|
//set the new final policy key in the device manager
|
|
// START ADDED dw2412 Android provisioning fix
|
|
if (!$phase2) {
|
|
$policykey = self::$deviceManager->GenerateProvisioningPolicyKey();
|
|
self::$deviceManager->SetProvisioningPolicyKey($policykey);
|
|
self::$topCollector->AnnounceInformation("Policies deployed", true);
|
|
}
|
|
else {
|
|
// just create a temporary key (i.e. iPhone OS4 Beta does not like policykey 0 in response)
|
|
$policykey = self::$deviceManager->GenerateProvisioningPolicyKey();
|
|
}
|
|
// END ADDED dw2412 Android provisioning fix
|
|
|
|
self::$encoder->startTag(SYNC_PROVISION_PROVISION);
|
|
{
|
|
self::$encoder->startTag(SYNC_PROVISION_STATUS);
|
|
self::$encoder->content($status);
|
|
self::$encoder->endTag();
|
|
|
|
self::$encoder->startTag(SYNC_PROVISION_POLICIES);
|
|
self::$encoder->startTag(SYNC_PROVISION_POLICY);
|
|
|
|
if(isset($policytype)) {
|
|
self::$encoder->startTag(SYNC_PROVISION_POLICYTYPE);
|
|
self::$encoder->content($policytype);
|
|
self::$encoder->endTag();
|
|
}
|
|
|
|
self::$encoder->startTag(SYNC_PROVISION_STATUS);
|
|
self::$encoder->content($policystatus);
|
|
self::$encoder->endTag();
|
|
|
|
self::$encoder->startTag(SYNC_PROVISION_POLICYKEY);
|
|
self::$encoder->content($policykey);
|
|
self::$encoder->endTag();
|
|
|
|
if ($phase2 && $policystatus === SYNC_PROVISION_POLICYSTATUS_SUCCESS) {
|
|
self::$encoder->startTag(SYNC_PROVISION_DATA);
|
|
if ($policytype == 'MS-WAP-Provisioning-XML') {
|
|
self::$encoder->content('<wap-provisioningdoc><characteristic type="SecurityPolicy"><parm name="4131" value="1"/><parm name="4133" value="1"/></characteristic></wap-provisioningdoc>');
|
|
}
|
|
elseif ($policytype == 'MS-EAS-Provisioning-WBXML') {
|
|
self::$encoder->startTag(SYNC_PROVISION_EASPROVISIONDOC);
|
|
|
|
$prov = self::$deviceManager->GetProvisioningObject();
|
|
if (!$prov->Check())
|
|
throw new FatalException("Invalid policies!");
|
|
|
|
$prov->Encode(self::$encoder);
|
|
self::$encoder->endTag();
|
|
}
|
|
else {
|
|
ZLog::Write(LOGLEVEL_WARN, "Wrong policy type");
|
|
self::$topCollector->AnnounceInformation("Policytype not supported", true);
|
|
return false;
|
|
}
|
|
self::$topCollector->AnnounceInformation("Updated provisiong", true);
|
|
|
|
self::$encoder->endTag();//data
|
|
}
|
|
self::$encoder->endTag();//policy
|
|
self::$encoder->endTag(); //policies
|
|
}
|
|
|
|
//wipe data if a higher RWSTATUS is requested
|
|
if ($rwstatus > SYNC_PROVISION_RWSTATUS_OK && $policystatus === SYNC_PROVISION_POLICYSTATUS_SUCCESS) {
|
|
self::$encoder->startTag(SYNC_PROVISION_REMOTEWIPE, false, true);
|
|
self::$deviceManager->SetProvisioningWipeStatus(($rwstatusWiped)?SYNC_PROVISION_RWSTATUS_WIPED:SYNC_PROVISION_RWSTATUS_REQUESTED);
|
|
self::$topCollector->AnnounceInformation(sprintf("Remote wipe %s", ($rwstatusWiped)?"executed":"requested"), true);
|
|
}
|
|
|
|
self::$encoder->endTag();//provision
|
|
|
|
return true;
|
|
}
|
|
}
|
|
?>
|