1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
|
<?php
/***********************************************
* File : provisioning.php
* Project : Z-Push
* Descr : Provides the PROVISIONING command
*
* Created : 16.02.2012
*
* Copyright 2007 - 2012 Zarafa Deutschland GmbH
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License, version 3,
* as published by the Free Software Foundation with the following additional
* term according to sec. 7:
*
* According to sec. 7 of the GNU Affero General Public License, version 3,
* the terms of the AGPL are supplemented with the following terms:
*
* "Zarafa" is a registered trademark of Zarafa B.V.
* "Z-Push" is a registered trademark of Zarafa Deutschland GmbH
* The licensing of the Program under the AGPL does not imply a trademark license.
* Therefore any rights, title and interest in our trademarks remain entirely with us.
*
* However, if you propagate an unmodified version of the Program you are
* allowed to use the term "Z-Push" to indicate that you distribute the Program.
* Furthermore you may use our trademarks where it is necessary to indicate
* the intended purpose of a product or service provided you use it in accordance
* with honest practices in industrial or commercial matters.
* If you want to propagate modified versions of the Program under the name "Z-Push",
* you may only do so if you have a written permission by Zarafa Deutschland GmbH
* (to acquire a permission please contact Zarafa at trademark@zarafa.com).
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*
* Consult LICENSE file for details
************************************************/
class Provisioning extends RequestProcessor {
/**
* Handles the Provisioning command
*
* @param int $commandCode
*
* @access public
* @return boolean
*/
public function Handle($commandCode) {
$status = SYNC_PROVISION_STATUS_SUCCESS;
$policystatus = SYNC_PROVISION_POLICYSTATUS_SUCCESS;
$rwstatus = self::$deviceManager->GetProvisioningWipeStatus();
$rwstatusWiped = false;
// if this is a regular provisioning require that an authenticated remote user
if ($rwstatus < SYNC_PROVISION_RWSTATUS_PENDING) {
ZLog::Write(LOGLEVEL_DEBUG, "RequestProcessor::HandleProvision(): Forcing delayed Authentication");
self::Authenticate();
}
$phase2 = true;
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_PROVISION))
return false;
//handle android remote wipe.
if (self::$decoder->getElementStartTag(SYNC_PROVISION_REMOTEWIPE)) {
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_STATUS))
return false;
$instatus = self::$decoder->getElementContent();
if(!self::$decoder->getElementEndTag())
return false;
if(!self::$decoder->getElementEndTag())
return false;
$phase2 = false;
$rwstatusWiped = true;
}
else {
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_POLICIES))
return false;
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_POLICY))
return false;
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_POLICYTYPE))
return false;
$policytype = self::$decoder->getElementContent();
if ($policytype != 'MS-WAP-Provisioning-XML' && $policytype != 'MS-EAS-Provisioning-WBXML') {
$status = SYNC_PROVISION_STATUS_SERVERERROR;
}
if(!self::$decoder->getElementEndTag()) //policytype
return false;
if (self::$decoder->getElementStartTag(SYNC_PROVISION_POLICYKEY)) {
$devpolicykey = self::$decoder->getElementContent();
if(!self::$decoder->getElementEndTag())
return false;
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_STATUS))
return false;
$instatus = self::$decoder->getElementContent();
if(!self::$decoder->getElementEndTag())
return false;
$phase2 = false;
}
if(!self::$decoder->getElementEndTag()) //policy
return false;
if(!self::$decoder->getElementEndTag()) //policies
return false;
if (self::$decoder->getElementStartTag(SYNC_PROVISION_REMOTEWIPE)) {
if(!self::$decoder->getElementStartTag(SYNC_PROVISION_STATUS))
return false;
$status = self::$decoder->getElementContent();
if(!self::$decoder->getElementEndTag())
return false;
if(!self::$decoder->getElementEndTag())
return false;
$rwstatusWiped = true;
}
}
if(!self::$decoder->getElementEndTag()) //provision
return false;
if (PROVISIONING !== true) {
ZLog::Write(LOGLEVEL_INFO, "No policies deployed to device");
$policystatus = SYNC_PROVISION_POLICYSTATUS_NOPOLICY;
}
self::$encoder->StartWBXML();
//set the new final policy key in the device manager
// START ADDED dw2412 Android provisioning fix
if (!$phase2) {
$policykey = self::$deviceManager->GenerateProvisioningPolicyKey();
self::$deviceManager->SetProvisioningPolicyKey($policykey);
self::$topCollector->AnnounceInformation("Policies deployed", true);
}
else {
// just create a temporary key (i.e. iPhone OS4 Beta does not like policykey 0 in response)
$policykey = self::$deviceManager->GenerateProvisioningPolicyKey();
}
// END ADDED dw2412 Android provisioning fix
self::$encoder->startTag(SYNC_PROVISION_PROVISION);
{
self::$encoder->startTag(SYNC_PROVISION_STATUS);
self::$encoder->content($status);
self::$encoder->endTag();
self::$encoder->startTag(SYNC_PROVISION_POLICIES);
self::$encoder->startTag(SYNC_PROVISION_POLICY);
if(isset($policytype)) {
self::$encoder->startTag(SYNC_PROVISION_POLICYTYPE);
self::$encoder->content($policytype);
self::$encoder->endTag();
}
self::$encoder->startTag(SYNC_PROVISION_STATUS);
self::$encoder->content($policystatus);
self::$encoder->endTag();
self::$encoder->startTag(SYNC_PROVISION_POLICYKEY);
self::$encoder->content($policykey);
self::$encoder->endTag();
if ($phase2 && $policystatus === SYNC_PROVISION_POLICYSTATUS_SUCCESS) {
self::$encoder->startTag(SYNC_PROVISION_DATA);
if ($policytype == 'MS-WAP-Provisioning-XML') {
self::$encoder->content('<wap-provisioningdoc><characteristic type="SecurityPolicy"><parm name="4131" value="1"/><parm name="4133" value="1"/></characteristic></wap-provisioningdoc>');
}
elseif ($policytype == 'MS-EAS-Provisioning-WBXML') {
self::$encoder->startTag(SYNC_PROVISION_EASPROVISIONDOC);
$prov = self::$deviceManager->GetProvisioningObject();
if (!$prov->Check())
throw new FatalException("Invalid policies!");
$prov->Encode(self::$encoder);
self::$encoder->endTag();
}
else {
ZLog::Write(LOGLEVEL_WARN, "Wrong policy type");
self::$topCollector->AnnounceInformation("Policytype not supported", true);
return false;
}
self::$topCollector->AnnounceInformation("Updated provisiong", true);
self::$encoder->endTag();//data
}
self::$encoder->endTag();//policy
self::$encoder->endTag(); //policies
}
//wipe data if a higher RWSTATUS is requested
if ($rwstatus > SYNC_PROVISION_RWSTATUS_OK && $policystatus === SYNC_PROVISION_POLICYSTATUS_SUCCESS) {
self::$encoder->startTag(SYNC_PROVISION_REMOTEWIPE, false, true);
self::$deviceManager->SetProvisioningWipeStatus(($rwstatusWiped)?SYNC_PROVISION_RWSTATUS_WIPED:SYNC_PROVISION_RWSTATUS_REQUESTED);
self::$topCollector->AnnounceInformation(sprintf("Remote wipe %s", ($rwstatusWiped)?"executed":"requested"), true);
}
self::$encoder->endTag();//provision
return true;
}
}
?>
|
