new_user_identity.php

<?php
/**
 * New user identity
 *
 * Populates a new user's default identity from LDAP on their first visit.
 *
 * This plugin requires that a working public_ldap directory be configured.
 *
 * @author Kris Steinhoff
 * @license GNU GPLv3+
 */
class new_user_identity extends rcube_plugin
{
    public $task = 'login';

    private $rc;
    private $ldap;

    function init()
    {
        $this->rc = rcmail::get_instance();
        $this->add_hook('user_create', array($this, 'lookup_user_name'));
        $this->add_hook('login_after', array($this, 'login_after'));
    }

    function lookup_user_name($args)
    {

        if ($this->init_ldap($args['host'], $args['user'])) {
            $results = $this->ldap->search('*', $args['user'], true);

            if (count($results->records) == 1) {

                $user_name  = is_array($results->records[0]['name']) ? $results->records[0]['name'][0] : $results->records[0]['name'];
                $user_email = is_array($results->records[0]['email']) ? $results->records[0]['email'][0] : $results->records[0]['email'];
                $user_phone = is_array($results->records[0]['phone:work']) ? $results->records[0]['phone:work'][0] : $results->records[0]['phone:work'];
                $user_title = is_array($results->records[0]['title']) ? $results->records[0]['title'][0] : $results->records[0]['title'];

                $args['user_name']  = $user_name;
                $args['phone']  = $user_phone;
                $args['title']  = $user_title;
                $args['email_list'] = array();

                if (!$args['user_email'] && strpos($user_email, '@')) {
                    $args['user_email'] = rcube_utils::idn_to_ascii($user_email);
                }

                foreach (array_keys($results[0]) as $key) {
                    if (!preg_match('/^email($|:)/', $key)) {
                        continue;
                    }

                    foreach ((array) $results->records[0][$key] as $alias) {
                        if (strpos($alias, '@')) {
                            $args['email_list'][] = rcube_utils::idn_to_ascii($alias);
                        }
                    }
                }

            }
        }	
        return $args;
    }

    function login_after($args)
    {
        $this->load_config();
		
        if ($this->ldap || !$this->rc->config->get('new_user_identity_onlogin')) {
            return $args;
        }

        $identities = $this->rc->user->list_emails();
        $ldap_entry = $this->lookup_user_name(array(
                'user' => $this->rc->user->data['username'],
                'host' => $this->rc->user->data['mail_host'],
        ));
 
        foreach ((array) $ldap_entry['email_list'] as $email) {
			
            //Скипаем цикл если имя и почта в идентити совпадают с лдаповскими
            $loop = 1;
            foreach ($identities as $identity) {
                //Удаляем лишнии идентити если их вдруг больше одной
                if ($loop > 1) {
                    $this->rc->user->delete_identity($identity['identity_id']);
                }
                if ($identity['email'] == $email && $identity['name'] == $ldap_entry['user_name']) {
                    continue 2;
                }
                $loop++;
            }
			
			//Обновляем идентити если она уже существует, но в ней либо имя либо почта не те
			foreach ($identities as $identity) {
                if ($identity['email'] != $email || $identity['name'] != $ldap_entry['user_name']) {
                    $plugin = $this->rc->plugins->exec_hook('identity_update', array(
                        'login'  => true,
                        'record' => array(
                            'user_id'  => $this->rc->user->ID,
                            'standard' => 0,
                            'email'    => $email,
                            'name'     => $ldap_entry['user_name'],
                            'signature'     => $ldap_entry['phone'].$ldap_entry['title'],
                        ),
                    ));
                    
                    if (!$plugin['abort'] && $plugin['record']['email']) {
                        $this->rc->user->update_identity($identity['identity_id'] ,$plugin['record']);
                    }
                }
            }

            //Если профилей вобще нет то нужно создать новый
            if (count($identities) == 0) {
                $plugin = $this->rc->plugins->exec_hook('identity_create', array(
                    'login'  => true,
                    'record' => array(
                        'user_id'  => $this->rc->user->ID,
                        'standard' => 0,
                        'email'    => $email,
                        'name'     => $ldap_entry['user_name'],
                        'signature'     => $ldap_entry['phone'].$ldap_entry['title'],
                    ),
                ));
                
                if (!$plugin['abort'] && $plugin['record']['email']) {
                    $this->rc->user->insert_identity($plugin['record']);
                }
            }
        }
        return $args;
    }

    private function init_ldap($host, $user)
    {
        if ($this->ldap) {
            return $this->ldap->ready;
        }

        $this->load_config();

        $addressbook = $this->rc->config->get('new_user_identity_addressbook');
        $ldap_config = (array)$this->rc->config->get('ldap_public');
        $match       = $this->rc->config->get('new_user_identity_match');

        if (empty($addressbook) || empty($match) || empty($ldap_config[$addressbook])) {
            return false;
        }

        $debug  = $this->rc->config->get('ldap_debug');
        $domain = $this->rc->config->mail_domain($host);
        $props  = $ldap_config[$addressbook];

        // Set 'username' prop for correct variables substitution (#6419)
        $props['username'] = $user;
        if (!strpos($user, '@')) {
            $props['username'] .= '@' . $domain;
        }

        $this->ldap = new new_user_identity_ldap_backend($props, $debug, $domain, $match);

        return $this->ldap->ready;
    }
}

class new_user_identity_ldap_backend extends rcube_ldap
{
    function __construct($p, $debug, $mail_domain, $search)
    {
        parent::__construct($p, $debug, $mail_domain);
        $this->prop['search_fields'] = (array)$search;
    }
}