From f66ab8dae2f3d0418759f81a3a64dc9517a62449 Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Sun, 14 Apr 2024 15:17:31 +0200
Subject: Adding upstream version 1.10.2.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 .../PropertyModifier/PropertyModifierFromAdSid.php | 36 ++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 library/Director/PropertyModifier/PropertyModifierFromAdSid.php

(limited to 'library/Director/PropertyModifier/PropertyModifierFromAdSid.php')

diff --git a/library/Director/PropertyModifier/PropertyModifierFromAdSid.php b/library/Director/PropertyModifier/PropertyModifierFromAdSid.php
new file mode 100644
index 0000000..ee306e3
--- /dev/null
+++ b/library/Director/PropertyModifier/PropertyModifierFromAdSid.php
@@ -0,0 +1,36 @@
+<?php
+
+namespace Icinga\Module\Director\PropertyModifier;
+
+use Icinga\Module\Director\Hook\PropertyModifierHook;
+
+class PropertyModifierFromAdSid extends PropertyModifierHook
+{
+    public function getName()
+    {
+        return 'Decode a binary object SID (MSAD)';
+    }
+
+    public function transform($value)
+    {
+        if ($value === null) {
+            return null;
+        }
+
+        // Strongly inspired by
+        // http://www.chadsikorra.com/blog/decoding-and-encoding-active-directory-objectsid-php
+        //
+        // Not perfect yet, but should suffice for now. When improving this please also see:
+        // https://blogs.msdn.microsoft.com/oldnewthing/20040315-00/?p=40253
+
+        $sid = $value;
+        $sidHex = unpack('H*hex', $value);
+        $sidHex = $sidHex['hex'];
+        $subAuths = implode('-', unpack('H2/H2/n/N/V*', $sid));
+ 
+        $revLevel = hexdec(substr($sidHex, 0, 2));
+        $authIdent = hexdec(substr($sidHex, 4, 12));
+ 
+        return sprintf('S-%s-%s-%s', $revLevel, $authIdent, $subAuths);
+    }
+}
-- 
cgit v1.2.3