Adding upstream version 2.11.4.upstream/2.11.4upstream

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

5 files changed, 1047 insertions, 0 deletions

diff --git a/modules/setup/library/Setup/Steps/AuthenticationStep.php b/modules/setup/library/Setup/Steps/AuthenticationStep.php
new file mode 100644
index 0000000..3c6c64a
--- /dev/null
+++ b/modules/setup/library/Setup/Steps/AuthenticationStep.php
@@ -0,0 +1,238 @@
+<?php
+/* Icinga Web 2 | (c) 2014 Icinga Development Team | GPLv2+ */
+
+namespace Icinga\Module\Setup\Steps;
+
+use Exception;
+use Icinga\Application\Config;
+use Icinga\Data\ConfigObject;
+use Icinga\Data\ResourceFactory;
+use Icinga\Exception\IcingaException;
+use Icinga\Authentication\User\DbUserBackend;
+use Icinga\Module\Setup\Step;
+
+class AuthenticationStep extends Step
+{
+    protected $data;
+
+    protected $dbError;
+
+    protected $authIniError;
+
+    protected $permIniError;
+
+    public function __construct(array $data)
+    {
+        $this->data = $data;
+    }
+
+    public function apply()
+    {
+        $success = $this->createAuthenticationIni();
+        if (isset($this->data['adminAccountData']['resourceConfig'])) {
+            $success &= $this->createAccount();
+        }
+
+        $success &= $this->createRolesIni();
+        return $success;
+    }
+
+    protected function createAuthenticationIni()
+    {
+        $config = array();
+        $backendConfig = $this->data['backendConfig'];
+        $backendName = $backendConfig['name'];
+        unset($backendConfig['name']);
+        $config[$backendName] = $backendConfig;
+        if (isset($this->data['resourceName'])) {
+            $config[$backendName]['resource'] = $this->data['resourceName'];
+        }
+
+        try {
+            Config::fromArray($config)
+                ->setConfigFile(Config::resolvePath('authentication.ini'))
+                ->saveIni();
+        } catch (Exception $e) {
+            $this->authIniError = $e;
+            return false;
+        }
+
+        $this->authIniError = false;
+        return true;
+    }
+
+    protected function createRolesIni()
+    {
+        if (isset($this->data['adminAccountData']['username'])) {
+            $config = array(
+                'users'         => $this->data['adminAccountData']['username'],
+                'permissions'   => '*'
+            );
+
+            if ($this->data['backendConfig']['backend'] === 'db') {
+                $config['groups'] = mt('setup', 'Administrators', 'setup.role.name');
+            }
+        } else { // isset($this->data['adminAccountData']['groupname'])
+            $config = array(
+                'groups'        => $this->data['adminAccountData']['groupname'],
+                'permissions'   => '*'
+            );
+        }
+
+        try {
+            Config::fromArray(array(mt('setup', 'Administrators', 'setup.role.name') => $config))
+                ->setConfigFile(Config::resolvePath('roles.ini'))
+                ->saveIni();
+        } catch (Exception $e) {
+            $this->permIniError = $e;
+            return false;
+        }
+
+        $this->permIniError = false;
+        return true;
+    }
+
+    protected function createAccount()
+    {
+        try {
+            $backend = new DbUserBackend(
+                ResourceFactory::createResource(new ConfigObject($this->data['adminAccountData']['resourceConfig']))
+            );
+
+            if ($backend->select()->where('user_name', $this->data['adminAccountData']['username'])->count() === 0) {
+                $backend->insert('user', array(
+                    'user_name' => $this->data['adminAccountData']['username'],
+                    'password'  => $this->data['adminAccountData']['password'],
+                    'is_active' => true
+                ));
+                $this->dbError = false;
+            }
+        } catch (Exception $e) {
+            $this->dbError = $e;
+            return false;
+        }
+
+        return true;
+    }
+
+    public function getSummary()
+    {
+        $pageTitle = '<h2>' . mt('setup', 'Authentication', 'setup.page.title') . '</h2>';
+        $backendTitle = '<h3>' . mt('setup', 'Authentication Backend', 'setup.page.title') . '</h3>';
+        $adminTitle = '<h3>' . mt('setup', 'Administration', 'setup.page.title') . '</h3>';
+
+        $authType = $this->data['backendConfig']['backend'];
+        $backendDesc = '<p>' . sprintf(
+            mt('setup', 'Users will authenticate using %s.', 'setup.summary.auth'),
+            $authType === 'db' ? mt('setup', 'a database', 'setup.summary.auth.type') : (
+                $authType === 'ldap' || $authType === 'msldap' ? 'LDAP' : (
+                    mt('setup', 'webserver authentication', 'setup.summary.auth.type')
+                )
+            )
+        ) . '</p>';
+
+        $backendHtml = ''
+            . '<table>'
+            . '<tbody>'
+            . '<tr>'
+            . '<td><strong>' . t('Backend Name') . '</strong></td>'
+            . '<td>' . $this->data['backendConfig']['name'] . '</td>'
+            . '</tr>'
+            . ($authType === 'ldap' || $authType === 'msldap' ? (
+                '<tr>'
+                . '<td><strong>' . mt('setup', 'User Object Class') . '</strong></td>'
+                . '<td>' . ($authType === 'msldap' ? 'user' : $this->data['backendConfig']['user_class']) . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . mt('setup', 'Custom Filter') . '</strong></td>'
+                . '<td>' . (trim($this->data['backendConfig']['filter']) ?: t('None', 'auth.ldap.filter')) . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . mt('setup', 'User Name Attribute') . '</strong></td>'
+                . '<td>' . ($authType === 'msldap'
+                    ? 'sAMAccountName'
+                    : $this->data['backendConfig']['user_name_attribute']) . '</td>'
+                . '</tr>'
+            ) : ($authType === 'external' ? (
+                '<tr>'
+                . '<td><strong>' . t('Filter Pattern') . '</strong></td>'
+                . '<td>' . $this->data['backendConfig']['strip_username_regexp'] . '</td>'
+                . '</tr>'
+            ) : ''))
+            . '</tbody>'
+            . '</table>';
+
+        if (isset($this->data['adminAccountData']['username'])) {
+            $adminHtml = '<p>' . (isset($this->data['adminAccountData']['resourceConfig']) ? sprintf(
+                mt('setup', 'Administrative rights will initially be granted to a new account called "%s".'),
+                $this->data['adminAccountData']['username']
+            ) : sprintf(
+                mt('setup', 'Administrative rights will initially be granted to an existing account called "%s".'),
+                $this->data['adminAccountData']['username']
+            )) . '</p>';
+        } else { // isset($this->data['adminAccountData']['groupname'])
+            $adminHtml = '<p>' . sprintf(
+                mt('setup', 'Administrative rights will initially be granted to members of the user group "%s".'),
+                $this->data['adminAccountData']['groupname']
+            ) . '</p>';
+        }
+
+        return $pageTitle . '<div class="topic">' . $backendDesc . $backendTitle . $backendHtml . '</div>'
+            . '<div class="topic">' . $adminTitle . $adminHtml . '</div>';
+    }
+
+    public function getReport()
+    {
+        $report = array();
+
+        if ($this->authIniError === false) {
+            $report[] = sprintf(
+                mt('setup', 'Authentication configuration has been successfully written to: %s'),
+                Config::resolvePath('authentication.ini')
+            );
+        } elseif ($this->authIniError !== null) {
+            $report[] = sprintf(
+                mt('setup', 'Authentication configuration could not be written to: %s. An error occured:'),
+                Config::resolvePath('authentication.ini')
+            );
+            $report[] = sprintf(mt('setup', 'ERROR: %s'), IcingaException::describe($this->authIniError));
+        }
+
+        if ($this->dbError === false) {
+            $report[] = sprintf(
+                mt('setup', 'Account "%s" has been successfully created.'),
+                $this->data['adminAccountData']['username']
+            );
+        } elseif ($this->dbError !== null) {
+            $report[] = sprintf(
+                mt('setup', 'Unable to create account "%s". An error occured:'),
+                $this->data['adminAccountData']['username']
+            );
+            $report[] = sprintf(mt('setup', 'ERROR: %s'), IcingaException::describe($this->dbError));
+        }
+
+        if ($this->permIniError === false) {
+            $report[] = isset($this->data['adminAccountData']['username']) ? sprintf(
+                mt('setup', 'Account "%s" has been successfully defined as initial administrator.'),
+                $this->data['adminAccountData']['username']
+            ) : sprintf(
+                mt('setup', 'The members of the user group "%s" were successfully defined as initial administrators.'),
+                $this->data['adminAccountData']['groupname']
+            );
+        } elseif ($this->permIniError !== null) {
+            $report[] = isset($this->data['adminAccountData']['username']) ? sprintf(
+                mt('setup', 'Unable to define account "%s" as initial administrator. An error occured:'),
+                $this->data['adminAccountData']['username']
+            ) : sprintf(
+                mt(
+                    'setup',
+                    'Unable to define the members of the user group "%s" as initial administrators. An error occured:'
+                ),
+                $this->data['adminAccountData']['groupname']
+            );
+            $report[] = sprintf(mt('setup', 'ERROR: %s'), IcingaException::describe($this->permIniError));
+        }
+
+        return $report;
+    }
+}
diff --git a/modules/setup/library/Setup/Steps/DatabaseStep.php b/modules/setup/library/Setup/Steps/DatabaseStep.php
new file mode 100644
index 0000000..32b2d15
--- /dev/null
+++ b/modules/setup/library/Setup/Steps/DatabaseStep.php
@@ -0,0 +1,266 @@
+<?php
+/* Icinga Web 2 | (c) 2014 Icinga Development Team | GPLv2+ */
+
+namespace Icinga\Module\Setup\Steps;
+
+use Exception;
+use PDOException;
+use Icinga\Exception\IcingaException;
+use Icinga\Module\Setup\Step;
+use Icinga\Module\Setup\Utils\DbTool;
+use Icinga\Module\Setup\Exception\SetupException;
+
+class DatabaseStep extends Step
+{
+    protected $data;
+
+    protected $error;
+
+    protected $messages;
+
+    public function __construct(array $data)
+    {
+        $this->data = $data;
+        $this->messages = array();
+    }
+
+    public function apply()
+    {
+        $resourceConfig = $this->data['resourceConfig'];
+        if (isset($this->data['adminName'])) {
+            $resourceConfig['username'] = $this->data['adminName'];
+            if (isset($this->data['adminPassword'])) {
+                $resourceConfig['password'] = $this->data['adminPassword'];
+            }
+        }
+
+        $db = new DbTool($resourceConfig);
+
+        try {
+            if ($resourceConfig['db'] === 'mysql') {
+                $this->setupMysqlDatabase($db);
+            } elseif ($resourceConfig['db'] === 'pgsql') {
+                $this->setupPgsqlDatabase($db);
+            }
+        } catch (Exception $e) {
+            $this->error = $e;
+            throw new SetupException();
+        }
+
+        $this->error = false;
+        return true;
+    }
+
+    protected function setupMysqlDatabase(DbTool $db)
+    {
+        try {
+            $db->connectToDb();
+            $this->log(
+                mt('setup', 'Successfully connected to existing database "%s"...'),
+                $this->data['resourceConfig']['dbname']
+            );
+        } catch (PDOException $_) {
+            $db->connectToHost();
+            $this->log(mt('setup', 'Creating new database "%s"...'), $this->data['resourceConfig']['dbname']);
+            $db->exec('CREATE DATABASE ' . $db->quoteIdentifier($this->data['resourceConfig']['dbname']));
+            $db->reconnect($this->data['resourceConfig']['dbname']);
+        }
+
+        if (array_search(reset($this->data['tables']), $db->listTables(), true) !== false) {
+            $this->log(mt('setup', 'Database schema already exists...'));
+        } else {
+            $this->log(mt('setup', 'Creating database schema...'));
+            $db->import($this->data['schemaPath'] . '/mysql.schema.sql');
+        }
+
+        if ($db->hasLogin($this->data['resourceConfig']['username'])) {
+            $this->log(mt('setup', 'Login "%s" already exists...'), $this->data['resourceConfig']['username']);
+        } else {
+            $this->log(mt('setup', 'Creating login "%s"...'), $this->data['resourceConfig']['username']);
+            $db->addLogin($this->data['resourceConfig']['username'], $this->data['resourceConfig']['password']);
+        }
+
+        $username = $this->data['resourceConfig']['username'];
+        if ($db->checkPrivileges($this->data['privileges'], $this->data['tables'], $username)) {
+            $this->log(
+                mt('setup', 'Required privileges were already granted to login "%s".'),
+                $this->data['resourceConfig']['username']
+            );
+        } else {
+            $this->log(
+                mt('setup', 'Granting required privileges to login "%s"...'),
+                $this->data['resourceConfig']['username']
+            );
+            $db->grantPrivileges(
+                $this->data['privileges'],
+                $this->data['tables'],
+                $this->data['resourceConfig']['username']
+            );
+        }
+    }
+
+    protected function setupPgsqlDatabase(DbTool $db)
+    {
+        try {
+            $db->connectToDb();
+            $this->log(
+                mt('setup', 'Successfully connected to existing database "%s"...'),
+                $this->data['resourceConfig']['dbname']
+            );
+        } catch (PDOException $_) {
+            $db->connectToHost();
+            $this->log(mt('setup', 'Creating new database "%s"...'), $this->data['resourceConfig']['dbname']);
+            $db->exec(sprintf(
+                "CREATE DATABASE %s WITH ENCODING 'UTF-8'",
+                $db->quoteIdentifier($this->data['resourceConfig']['dbname'])
+            ));
+            $db->reconnect($this->data['resourceConfig']['dbname']);
+        }
+
+        if (array_search(reset($this->data['tables']), $db->listTables(), true) !== false) {
+            $this->log(mt('setup', 'Database schema already exists...'));
+        } else {
+            $this->log(mt('setup', 'Creating database schema...'));
+            $db->import($this->data['schemaPath'] . '/pgsql.schema.sql');
+        }
+
+        if ($db->hasLogin($this->data['resourceConfig']['username'])) {
+            $this->log(mt('setup', 'Login "%s" already exists...'), $this->data['resourceConfig']['username']);
+        } else {
+            $this->log(mt('setup', 'Creating login "%s"...'), $this->data['resourceConfig']['username']);
+            $db->addLogin($this->data['resourceConfig']['username'], $this->data['resourceConfig']['password']);
+        }
+
+        $username = $this->data['resourceConfig']['username'];
+        if ($db->checkPrivileges($this->data['privileges'], $this->data['tables'], $username)) {
+            $this->log(
+                mt('setup', 'Required privileges were already granted to login "%s".'),
+                $this->data['resourceConfig']['username']
+            );
+        } else {
+            $this->log(
+                mt('setup', 'Granting required privileges to login "%s"...'),
+                $this->data['resourceConfig']['username']
+            );
+            $db->grantPrivileges(
+                $this->data['privileges'],
+                $this->data['tables'],
+                $this->data['resourceConfig']['username']
+            );
+        }
+    }
+
+    public function getSummary()
+    {
+        $resourceConfig = $this->data['resourceConfig'];
+        if (isset($this->data['adminName'])) {
+            $resourceConfig['username'] = $this->data['adminName'];
+            if (isset($this->data['adminPassword'])) {
+                $resourceConfig['password'] = $this->data['adminPassword'];
+            }
+        }
+
+        $db = new DbTool($resourceConfig);
+
+        try {
+            $db->connectToDb();
+            if (array_search(reset($this->data['tables']), $db->listTables(), true) === false) {
+                if ($resourceConfig['username'] !== $this->data['resourceConfig']['username']) {
+                    $message = sprintf(
+                        mt(
+                            'setup',
+                            'The database user "%s" will be used to setup the missing schema required by Icinga'
+                            . ' Web 2 in database "%s" and to grant access to it to a new login called "%s".'
+                        ),
+                        $resourceConfig['username'],
+                        $resourceConfig['dbname'],
+                        $this->data['resourceConfig']['username']
+                    );
+                } else {
+                    $message = sprintf(
+                        mt(
+                            'setup',
+                            'The database user "%s" will be used to setup the missing'
+                            . ' schema required by Icinga Web 2 in database "%s".'
+                        ),
+                        $resourceConfig['username'],
+                        $resourceConfig['dbname']
+                    );
+                }
+            } else {
+                $message = sprintf(
+                    mt('setup', 'The database "%s" already seems to be fully set up. No action required.'),
+                    $resourceConfig['dbname']
+                );
+            }
+        } catch (PDOException $_) {
+            try {
+                $db->connectToHost();
+                if ($resourceConfig['username'] !== $this->data['resourceConfig']['username']) {
+                    if ($db->hasLogin($this->data['resourceConfig']['username'])) {
+                        $message = sprintf(
+                            mt(
+                                'setup',
+                                'The database user "%s" will be used to create the missing database'
+                                . ' "%s" with the schema required by Icinga Web 2 and to grant'
+                                . ' access to it to an existing login called "%s".'
+                            ),
+                            $resourceConfig['username'],
+                            $resourceConfig['dbname'],
+                            $this->data['resourceConfig']['username']
+                        );
+                    } else {
+                        $message = sprintf(
+                            mt(
+                                'setup',
+                                'The database user "%s" will be used to create the missing database'
+                                . ' "%s" with the schema required by Icinga Web 2 and to grant'
+                                . ' access to it to a new login called "%s".'
+                            ),
+                            $resourceConfig['username'],
+                            $resourceConfig['dbname'],
+                            $this->data['resourceConfig']['username']
+                        );
+                    }
+                } else {
+                    $message = sprintf(
+                        mt(
+                            'setup',
+                            'The database user "%s" will be used to create the missing'
+                            . ' database "%s" with the schema required by Icinga Web 2.'
+                        ),
+                        $resourceConfig['username'],
+                        $resourceConfig['dbname']
+                    );
+                }
+            } catch (Exception $_) {
+                $message = mt(
+                    'setup',
+                    'No connection to database host possible. You\'ll need to setup the'
+                    . ' database with the schema required by Icinga Web 2 manually.'
+                );
+            }
+        }
+
+        return '<h2>' . mt('setup', 'Database Setup', 'setup.page.title') . '</h2><p>' . $message . '</p>';
+    }
+
+    public function getReport()
+    {
+        if ($this->error === false) {
+            $report = $this->messages;
+            $report[] = mt('setup', 'The database has been fully set up!');
+            return $report;
+        } elseif ($this->error !== null) {
+            $report = $this->messages;
+            $report[] = mt('setup', 'Failed to fully setup the database. An error occured:');
+            $report[] = sprintf(mt('setup', 'ERROR: %s'), IcingaException::describe($this->error));
+            return $report;
+        }
+    }
+
+    protected function log()
+    {
+        $this->messages[] = call_user_func_array('sprintf', func_get_args());
+    }
+}
diff --git a/modules/setup/library/Setup/Steps/GeneralConfigStep.php b/modules/setup/library/Setup/Steps/GeneralConfigStep.php
new file mode 100644
index 0000000..2c928f6
--- /dev/null
+++ b/modules/setup/library/Setup/Steps/GeneralConfigStep.php
@@ -0,0 +1,131 @@
+<?php
+/* Icinga Web 2 | (c) 2014 Icinga Development Team | GPLv2+ */
+
+namespace Icinga\Module\Setup\Steps;
+
+use Exception;
+use Icinga\Application\Logger;
+use Icinga\Application\Config;
+use Icinga\Exception\IcingaException;
+use Icinga\Module\Setup\Step;
+
+class GeneralConfigStep extends Step
+{
+    protected $data;
+
+    protected $error;
+
+    public function __construct(array $data)
+    {
+        $this->data = $data;
+    }
+
+    public function apply()
+    {
+        $config = array();
+        foreach ($this->data['generalConfig'] as $sectionAndPropertyName => $value) {
+            list($section, $property) = explode('_', $sectionAndPropertyName, 2);
+            $config[$section][$property] = $value;
+        }
+
+        $config['global']['config_resource'] = $this->data['resourceName'];
+
+        try {
+            Config::fromArray($config)
+                ->setConfigFile(Config::resolvePath('config.ini'))
+                ->saveIni();
+        } catch (Exception $e) {
+            $this->error = $e;
+            return false;
+        }
+
+        $this->error = false;
+        return true;
+    }
+
+    public function getSummary()
+    {
+        $pageTitle = '<h2>' . mt('setup', 'Application Configuration', 'setup.page.title') . '</h2>';
+        $generalTitle = '<h3>' . t('General', 'app.config') . '</h3>';
+        $loggingTitle = '<h3>' . t('Logging', 'app.config') . '</h3>';
+
+        $generalHtml = ''
+            . '<ul>'
+            . '<li>' . ($this->data['generalConfig']['global_show_stacktraces']
+                ? t('An exception\'s stacktrace is shown to every user by default.')
+                : t('An exception\'s stacktrace is hidden from every user by default.')
+            ) . '</li>'
+            . '<li>' . t('Preferences will be stored using a database.') . '</li>'
+            . '</ul>';
+
+        $type = $this->data['generalConfig']['logging_log'];
+        if ($type === 'none') {
+            $loggingHtml = '<p>' . mt('setup', 'Logging will be disabled.') . '</p>';
+        } else {
+            $level = $this->data['generalConfig']['logging_level'];
+
+            switch ($type) {
+                case 'php':
+                    $typeDescription = t('Webserver Log', 'app.config.logging.type');
+                    $typeSpecificHtml = '';
+                    break;
+
+                case 'syslog':
+                    $typeDescription = 'Syslog';
+                    $typeSpecificHtml = '<td><strong>' . t('Application Prefix') . '</strong></td>'
+                        . '<td>' . $this->data['generalConfig']['logging_application'] . '</td>';
+                    break;
+
+                case 'file':
+                    $typeDescription = t('File', 'app.config.logging.type');
+                    $typeSpecificHtml = '<td><strong>' . t('Filepath') . '</strong></td>'
+                        . '<td>' . $this->data['generalConfig']['logging_file'] . '</td>';
+                    break;
+            }
+
+            $loggingHtml = ''
+                . '<table>'
+                . '<tbody>'
+                . '<tr>'
+                . '<td><strong>' . t('Type', 'app.config.logging') . '</strong></td>'
+                . '<td>' . $typeDescription . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Level', 'app.config.logging') . '</strong></td>'
+                . '<td>' . ($level === Logger::$levels[Logger::ERROR] ? t('Error', 'app.config.logging.level') : (
+                    $level === Logger::$levels[Logger::WARNING] ? t('Warning', 'app.config.logging.level') : (
+                        $level === Logger::$levels[Logger::INFO] ? t('Information', 'app.config.logging.level') : (
+                            t('Debug', 'app.config.logging.level')
+                        )
+                    )
+                )) . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . $typeSpecificHtml
+                . '</tr>'
+                . '</tbody>'
+                . '</table>';
+        }
+
+        return $pageTitle . '<div class="topic">' . $generalTitle . $generalHtml . '</div>'
+            . '<div class="topic">' . $loggingTitle . $loggingHtml . '</div>';
+    }
+
+    public function getReport()
+    {
+        if ($this->error === false) {
+            return array(sprintf(
+                mt('setup', 'General configuration has been successfully written to: %s'),
+                Config::resolvePath('config.ini')
+            ));
+        } elseif ($this->error !== null) {
+            return array(
+                sprintf(
+                    mt('setup', 'General configuration could not be written to: %s. An error occured:'),
+                    Config::resolvePath('config.ini')
+                ),
+                sprintf(mt('setup', 'ERROR: %s'), IcingaException::describe($this->error))
+            );
+        }
+    }
+}
diff --git a/modules/setup/library/Setup/Steps/ResourceStep.php b/modules/setup/library/Setup/Steps/ResourceStep.php
new file mode 100644
index 0000000..d9daf3b
--- /dev/null
+++ b/modules/setup/library/Setup/Steps/ResourceStep.php
@@ -0,0 +1,199 @@
+<?php
+/* Icinga Web 2 | (c) 2014 Icinga Development Team | GPLv2+ */
+
+namespace Icinga\Module\Setup\Steps;
+
+use Exception;
+use Icinga\Application\Config;
+use Icinga\Exception\IcingaException;
+use Icinga\Module\Setup\Step;
+
+class ResourceStep extends Step
+{
+    protected $data;
+
+    protected $error;
+
+    public function __construct(array $data)
+    {
+        $this->data = $data;
+    }
+
+    public function apply()
+    {
+        $resourceConfig = array();
+        if (isset($this->data['dbResourceConfig'])) {
+            $dbConfig = $this->data['dbResourceConfig'];
+            $resourceName = $dbConfig['name'];
+            unset($dbConfig['name']);
+            $resourceConfig[$resourceName] = $dbConfig;
+        }
+
+        if (isset($this->data['ldapResourceConfig'])) {
+            $ldapConfig = $this->data['ldapResourceConfig'];
+            $resourceName = $ldapConfig['name'];
+            unset($ldapConfig['name']);
+            $resourceConfig[$resourceName] = $ldapConfig;
+        }
+
+        try {
+            Config::fromArray($resourceConfig)
+                ->setConfigFile(Config::resolvePath('resources.ini'))
+                ->saveIni();
+        } catch (Exception $e) {
+            $this->error = $e;
+            return false;
+        }
+
+        $this->error = false;
+        return true;
+    }
+
+    public function getSummary()
+    {
+        if (isset($this->data['dbResourceConfig']) && isset($this->data['ldapResourceConfig'])) {
+            $pageTitle = '<h2>' . mt('setup', 'Resources', 'setup.page.title') . '</h2>';
+        } else {
+            $pageTitle = '<h2>' . mt('setup', 'Resource', 'setup.page.title') . '</h2>';
+        }
+
+        if (isset($this->data['dbResourceConfig'])) {
+            $dbTitle = '<h3>' . mt('setup', 'Database', 'setup.page.title') . '</h3>';
+            $dbHtml = ''
+                . '<table>'
+                . '<tbody>'
+                . '<tr>'
+                . '<td><strong>' . t('Resource Name') . '</strong></td>'
+                . '<td>' . $this->data['dbResourceConfig']['name'] . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Database Type') . '</strong></td>'
+                . '<td>' . $this->data['dbResourceConfig']['db'] . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Host') . '</strong></td>'
+                . '<td>' . $this->data['dbResourceConfig']['host'] . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Port') . '</strong></td>'
+                . '<td>' . $this->data['dbResourceConfig']['port'] . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Database Name') . '</strong></td>'
+                . '<td>' . $this->data['dbResourceConfig']['dbname'] . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Username') . '</strong></td>'
+                . '<td>' . $this->data['dbResourceConfig']['username'] . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Password') . '</strong></td>'
+                . '<td>' . str_repeat('*', strlen($this->data['dbResourceConfig']['password'])) . '</td>'
+                . '</tr>';
+
+            if (defined('\PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT')
+                && isset($this->data['resourceConfig']['ssl_do_not_verify_server_cert'])
+                && $this->data['resourceConfig']['ssl_do_not_verify_server_cert']
+            ) {
+                $dbHtml .= ''
+                    . '<tr>'
+                    . '<td><strong>' . t('SSL Do Not Verify Server Certificate') . '</strong></td>'
+                    . '<td>' . $this->data['resourceConfig']['ssl_do_not_verify_server_cert'] . '</td>'
+                    . '</tr>';
+            }
+            if (isset($this->data['dbResourceConfig']['ssl_key']) && $this->data['dbResourceConfig']['ssl_key']) {
+                $dbHtml .= ''
+                    .'<tr>'
+                    . '<td><strong>' . t('SSL Key') . '</strong></td>'
+                    . '<td>' . $this->data['dbResourceConfig']['ssl_key'] . '</td>'
+                    . '</tr>';
+            }
+            if (isset($this->data['dbResourceConfig']['ssl_cert']) && $this->data['dbResourceConfig']['ssl_cert']) {
+                $dbHtml .= ''
+                    . '<tr>'
+                    . '<td><strong>' . t('SSL Cert') . '</strong></td>'
+                    . '<td>' . $this->data['dbResourceConfig']['ssl_cert'] . '</td>'
+                    . '</tr>';
+            }
+            if (isset($this->data['dbResourceConfig']['ssl_ca']) && $this->data['dbResourceConfig']['ssl_ca']) {
+                $dbHtml .= ''
+                    . '<tr>'
+                    . '<td><strong>' . t('CA') . '</strong></td>'
+                    . '<td>' . $this->data['dbResourceConfig']['ssl_ca'] . '</td>'
+                    . '</tr>';
+            }
+            if (isset($this->data['dbResourceConfig']['ssl_capath']) && $this->data['dbResourceConfig']['ssl_capath']) {
+                $dbHtml .= ''
+                    . '<tr>'
+                    . '<td><strong>' . t('CA Path') . '</strong></td>'
+                    . '<td>' . $this->data['dbResourceConfig']['ssl_capath'] . '</td>'
+                    . '</tr>';
+            }
+            if (isset($this->data['dbResourceConfig']['ssl_cipher']) && $this->data['dbResourceConfig']['ssl_cipher']) {
+                $dbHtml .= ''
+                    . '<tr>'
+                    . '<td><strong>' . t('Cipher') . '</strong></td>'
+                    . '<td>' . $this->data['dbResourceConfig']['ssl_cipher'] . '</td>'
+                    . '</tr>';
+            }
+
+            $dbHtml .= ''
+                . '</tbody>'
+                . '</table>';
+        }
+
+        if (isset($this->data['ldapResourceConfig'])) {
+            $ldapTitle = '<h3>LDAP</h3>';
+            $ldapHtml = ''
+                . '<table>'
+                . '<tbody>'
+                . '<tr>'
+                . '<td><strong>' . t('Resource Name') . '</strong></td>'
+                . '<td>' . $this->data['ldapResourceConfig']['name'] . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Host') . '</strong></td>'
+                . '<td>' . $this->data['ldapResourceConfig']['hostname'] . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Port') . '</strong></td>'
+                . '<td>' . $this->data['ldapResourceConfig']['port'] . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Root DN') . '</strong></td>'
+                . '<td>' . $this->data['ldapResourceConfig']['root_dn'] . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Bind DN') . '</strong></td>'
+                . '<td>' . $this->data['ldapResourceConfig']['bind_dn'] . '</td>'
+                . '</tr>'
+                . '<tr>'
+                . '<td><strong>' . t('Bind Password') . '</strong></td>'
+                . '<td>' . str_repeat('*', strlen($this->data['ldapResourceConfig']['bind_pw'])) . '</td>'
+                . '</tr>'
+                . '</tbody>'
+                . '</table>';
+        }
+
+        return $pageTitle . (isset($dbTitle) ? '<div class="topic">' . $dbTitle . $dbHtml . '</div>' : '')
+            . (isset($ldapTitle) ? '<div class="topic">' . $ldapTitle . $ldapHtml . '</div>' : '');
+    }
+
+    public function getReport()
+    {
+        if ($this->error === false) {
+            return array(sprintf(
+                mt('setup', 'Resource configuration has been successfully written to: %s'),
+                Config::resolvePath('resources.ini')
+            ));
+        } elseif ($this->error !== null) {
+            return array(
+                sprintf(
+                    mt('setup', 'Resource configuration could not be written to: %s. An error occured:'),
+                    Config::resolvePath('resources.ini')
+                ),
+                sprintf(mt('setup', 'ERROR: %s'), IcingaException::describe($this->error))
+            );
+        }
+    }
+}
diff --git a/modules/setup/library/Setup/Steps/UserGroupStep.php b/modules/setup/library/Setup/Steps/UserGroupStep.php
new file mode 100644
index 0000000..4aab676
--- /dev/null
+++ b/modules/setup/library/Setup/Steps/UserGroupStep.php
@@ -0,0 +1,213 @@
+<?php
+/* Icinga Web 2 | (c) 2015 Icinga Development Team | GPLv2+ */
+
+namespace Icinga\Module\Setup\Steps;
+
+use Exception;
+use Icinga\Application\Config;
+use Icinga\Authentication\UserGroup\DbUserGroupBackend;
+use Icinga\Data\ConfigObject;
+use Icinga\Data\ResourceFactory;
+use Icinga\Exception\IcingaException;
+use Icinga\Module\Setup\Step;
+
+class UserGroupStep extends Step
+{
+    protected $data;
+
+    protected $groupError;
+
+    protected $memberError;
+
+    protected $groupIniError;
+
+    public function __construct(array $data)
+    {
+        $this->data = $data;
+    }
+
+    public function apply()
+    {
+        $success = $this->createGroupsIni();
+        if (isset($this->data['resourceConfig'])) {
+            $success &= $this->createUserGroup();
+            if ($success) {
+                $success &= $this->createMembership();
+            }
+        }
+
+        return $success;
+    }
+
+    protected function createGroupsIni()
+    {
+        $config = array();
+        if (isset($this->data['groupConfig'])) {
+            $backendConfig = $this->data['groupConfig'];
+            $backendName = $backendConfig['name'];
+            unset($backendConfig['name']);
+            $config[$backendName] = $backendConfig;
+        } else {
+            $backendConfig = array(
+                'backend'   => $this->data['backendConfig']['backend'], // "db" or "msldap"
+                'resource'  => $this->data['resourceName']
+            );
+
+            if ($backendConfig['backend'] === 'msldap') {
+                $backendConfig['user_backend'] = $this->data['backendConfig']['name'];
+            }
+
+            $config[$this->data['backendConfig']['name']] = $backendConfig;
+        }
+
+        try {
+            Config::fromArray($config)
+                ->setConfigFile(Config::resolvePath('groups.ini'))
+                ->saveIni();
+        } catch (Exception $e) {
+            $this->groupIniError = $e;
+            return false;
+        }
+
+        $this->groupIniError = false;
+        return true;
+    }
+
+    protected function createUserGroup()
+    {
+        try {
+            $backend = new DbUserGroupBackend(
+                ResourceFactory::createResource(new ConfigObject($this->data['resourceConfig']))
+            );
+
+            $groupName = mt('setup', 'Administrators', 'setup.role.name');
+            if ($backend->select()->where('group_name', $groupName)->count() === 0) {
+                $backend->insert('group', array(
+                    'group_name'    => $groupName
+                ));
+                $this->groupError = false;
+            }
+        } catch (Exception $e) {
+            $this->groupError = $e;
+            return false;
+        }
+
+        return true;
+    }
+
+    protected function createMembership()
+    {
+        try {
+            $backend = new DbUserGroupBackend(
+                ResourceFactory::createResource(new ConfigObject($this->data['resourceConfig']))
+            );
+
+            $groupName = mt('setup', 'Administrators', 'setup.role.name');
+            $userName = $this->data['username'];
+            if ($backend
+                ->select()
+                ->from('group_membership')
+                ->where('group_name', $groupName)
+                ->where('user_name', $userName)
+                ->count() === 0
+            ) {
+                $backend->insert('group_membership', array(
+                    'group_name'    => $groupName,
+                    'user_name'     => $userName
+                ));
+                $this->memberError = false;
+            }
+        } catch (Exception $e) {
+            $this->memberError = $e;
+            return false;
+        }
+
+        return true;
+    }
+
+    public function getSummary()
+    {
+        if (! isset($this->data['groupConfig'])) {
+            return; // It's not necessary to show the user something he didn't configure..
+        }
+
+        $pageTitle = '<h2>' . mt('setup', 'User Groups', 'setup.page.title') . '</h2>';
+        $backendTitle = '<h3>' . mt('setup', 'User Group Backend', 'setup.page.title') . '</h3>';
+
+        $backendHtml = ''
+            . '<table>'
+            . '<tbody>'
+            . '<tr>'
+            . '<td><strong>' . t('Backend Name') . '</strong></td>'
+            . '<td>' . $this->data['groupConfig']['name'] . '</td>'
+            . '</tr>'
+            . '<tr>'
+            . '<td><strong>' . mt('setup', 'Group Object Class') . '</strong></td>'
+            . '<td>' . $this->data['groupConfig']['group_class'] . '</td>'
+            . '</tr>'
+            . '<tr>'
+            . '<td><strong>' . mt('setup', 'Custom Filter') . '</strong></td>'
+            . '<td>' . (trim($this->data['groupConfig']['group_filter']) ?: t('None', 'auth.ldap.filter')) . '</td>'
+            . '</tr>'
+            . '<tr>'
+            . '<td><strong>' . mt('setup', 'Group Name Attribute') . '</strong></td>'
+            . '<td>' . $this->data['groupConfig']['group_name_attribute'] . '</td>'
+            . '</tr>'
+            . '<tr>'
+            . '<td><strong>' . mt('setup', 'Group Member Attribute') . '</strong></td>'
+            . '<td>' . $this->data['groupConfig']['group_member_attribute'] . '</td>'
+            . '</tr>'
+            . '</tbody>'
+            . '</table>';
+
+        return $pageTitle . '<div class="topic">' . $backendTitle . $backendHtml . '</div>';
+    }
+
+    public function getReport()
+    {
+        $report = array();
+
+        if ($this->groupIniError === false) {
+            $report[] = sprintf(
+                mt('setup', 'User Group Backend configuration has been successfully written to: %s'),
+                Config::resolvePath('groups.ini')
+            );
+        } elseif ($this->groupIniError !== null) {
+            $report[] = sprintf(
+                mt('setup', 'User Group Backend configuration could not be written to: %s. An error occured:'),
+                Config::resolvePath('groups.ini')
+            );
+            $report[] = sprintf(mt('setup', 'ERROR: %s'), IcingaException::describe($this->groupIniError));
+        }
+
+        if ($this->groupError === false) {
+            $report[] = sprintf(
+                mt('setup', 'User Group "%s" has been successfully created.'),
+                mt('setup', 'Administrators', 'setup.role.name')
+            );
+        } elseif ($this->groupError !== null) {
+            $report[] = sprintf(
+                mt('setup', 'Unable to create user group "%s". An error occured:'),
+                mt('setup', 'Administrators', 'setup.role.name')
+            );
+            $report[] = sprintf(mt('setup', 'ERROR: %s'), IcingaException::describe($this->groupError));
+        }
+
+        if ($this->memberError === false) {
+            $report[] = sprintf(
+                mt('setup', 'Account "%s" has been successfully added as member to user group "%s".'),
+                $this->data['username'],
+                mt('setup', 'Administrators', 'setup.role.name')
+            );
+        } elseif ($this->memberError !== null) {
+            $report[] = sprintf(
+                mt('setup', 'Unable to add account "%s" as member to user group "%s". An error occured:'),
+                $this->data['username'],
+                mt('setup', 'Administrators', 'setup.role.name')
+            );
+            $report[] = sprintf(mt('setup', 'ERROR: %s'), IcingaException::describe($this->memberError));
+        }
+
+        return $report;
+    }
+}