169 lines
5.5 KiB
PHP
169 lines
5.5 KiB
PHP
<?php
|
||
# helper function for linked OUs
|
||
function getLinkedOUs(string $gpo): array|false
|
||
{
|
||
$encodedGpo = rawurlencode($gpo);
|
||
$requestUrl = "http://172.17.0.1:5000/linked_ous?gpo={$encodedGpo}";
|
||
$ch = curl_init($requestUrl);
|
||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
||
curl_setopt($ch, CURLOPT_TIMEOUT, 10);
|
||
$rawResponse = curl_exec($ch);
|
||
if ($rawResponse === false) {
|
||
error_log('cURL error [' . curl_errno($ch) . ']: ' . curl_error($ch));
|
||
curl_close($ch);
|
||
return false;
|
||
}
|
||
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
||
if ($httpCode !== 200) {
|
||
error_log("API returned HTTP {$httpCode} for GPO '{$gpo}'");
|
||
curl_close($ch);
|
||
return false;
|
||
}
|
||
curl_close($ch);
|
||
$decoded = json_decode($rawResponse, true);
|
||
if ($decoded === null && json_last_error() !== JSON_ERROR_NONE) {
|
||
error_log('JSON decode error: ' . json_last_error_msg());
|
||
return false;
|
||
}
|
||
return $decoded;
|
||
//return implode("\n", $decoded);
|
||
}
|
||
|
||
?>
|
||
|
||
|
||
<!DOCTYPE html>
|
||
<html lang="en">
|
||
<head>
|
||
<meta charset="UTF-8">
|
||
<title>GPO Query</title>
|
||
<link rel="stylesheet" href="styles.css">
|
||
</head>
|
||
<body>
|
||
<div class="container">
|
||
<h2>Query GPOs by Group</h2>
|
||
This tool allows you to query Group Policy Objects in Active Directory by Restricted Group.<br>
|
||
Search is case insensitive and supports partial match. <br>
|
||
Once you have the GPO name, you can locate this in the GPO management snap-in and find what OUs it links to.<br><p>
|
||
</div>
|
||
<div class="container">
|
||
|
||
<?php
|
||
// populating the info div
|
||
// if the group var is set, show the GPOs with the search term
|
||
if (isset($_GET['group'])) {
|
||
echo '
|
||
<form action="index.php" method="GET">
|
||
<label for="group">Group Name:</label>
|
||
<input type="text" id="group" name="group" value="'.htmlspecialchars($_GET['group']).'" required>
|
||
<button type="submit">Query</button>
|
||
</form><p>
|
||
';
|
||
$group = urlencode($_GET['group']);
|
||
$url = "http://172.17.0.1:5000/gpo?group=$group";
|
||
// query API
|
||
$ch = curl_init();
|
||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
||
curl_setopt($ch, CURLOPT_URL, $url);
|
||
$response = curl_exec($ch);
|
||
if ($e = curl_error($ch)) {
|
||
die("Curl error: $e");
|
||
}
|
||
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
||
if ($httpCode != 200) {
|
||
die("Error: Received HTTP code $httpCode");
|
||
}
|
||
curl_close($ch);
|
||
$data = json_decode($response, true);
|
||
$numResults = count($data);
|
||
// build the group array
|
||
$gpoMap = []; // will look like: [ 'GPO‑Name' => ['Administrator' => [...], 'vnc_admin' => [...]] ]
|
||
|
||
if (isset($data['error'])) {
|
||
echo "<p>Error: {$data['error']}</p>";
|
||
}
|
||
else {
|
||
foreach ($data as $row) {
|
||
// safety: skip rows that do not contain the expected keys
|
||
if (!isset($row['gpo'], $row['ad_group'], $row['local_group'])) {
|
||
continue;
|
||
}
|
||
$gpoName = $row['gpo'];
|
||
$adGroup = $row['ad_group'];
|
||
$localGroup = strtolower($row['local_group']);
|
||
// initialise if not already done
|
||
if (!isset($gpoMap[$gpoName])) {
|
||
$gpoMap[$gpoName] = [
|
||
'administrators' => [],
|
||
'vnc_admin' => []
|
||
];
|
||
}
|
||
// put the ad_group into the right bucket
|
||
if ($localGroup === 'administrators') {
|
||
$gpoMap[$gpoName]['administrators'][] = $adGroup;
|
||
} elseif ($localGroup === 'vnc_admin') {
|
||
$gpoMap[$gpoName]['vnc_admin'][] = $adGroup;
|
||
}
|
||
}
|
||
ksort($gpoMap, SORT_STRING | SORT_FLAG_CASE);
|
||
if($numResults > 0){
|
||
echo 'Total results: '.$numResults.'<br>
|
||
';
|
||
echo '<table border="1" cellpadding="4" cellspacing="0">
|
||
';
|
||
echo '<tr><th>GPO</th><th>Administrators</th><th>vnc_admin</th></tr>
|
||
';
|
||
|
||
foreach ($gpoMap as $gpoName => $cols) {
|
||
// Remove duplicates and build comma‑separated lists
|
||
$adminGroups = implode('<br>', array_unique($cols['administrators']));
|
||
$vncGroups = implode('<br>', array_unique($cols['vnc_admin']));
|
||
$linkedOUs = implode("\n", getLinkedOUs($gpoName));
|
||
echo ' <tr>
|
||
';
|
||
echo " <td>
|
||
<div title='$linkedOUs'>
|
||
<a href=/?gpo='$gpoName'>{$gpoName}</a>
|
||
</div></td>
|
||
";
|
||
echo " <td>{$adminGroups}</td>
|
||
";
|
||
echo " <td>{$vncGroups}</td>
|
||
";
|
||
echo ' </tr>
|
||
';
|
||
}
|
||
echo '</table>
|
||
';
|
||
}
|
||
else{
|
||
echo 'No results found for query <b>'.$_GET['group'].'</b>.<p>';
|
||
}
|
||
}
|
||
|
||
}
|
||
|
||
// if you click on a GPO name, print all OUs
|
||
else if (isset($_GET['gpo'])) {
|
||
echo 'OUs linked to GPO <b>'.$_GET['gpo'].':</b><p>';
|
||
$LinkedOUs = getLinkedOUs($_GET['gpo']);
|
||
echo implode("<br>", $LinkedOUs);
|
||
echo '<br>Return <a href=/>Home</a>';
|
||
|
||
}
|
||
else {
|
||
echo '
|
||
<form action="index.php" method="GET">
|
||
<label for="group">Group Name:</label>
|
||
<input type="text" id="group" name="group" required>
|
||
<button type="submit">Query</button>
|
||
</form><p>
|
||
';
|
||
echo "<p>No group specified.</p>";
|
||
}
|
||
echo "</div>";
|
||
//echo "<p>Source code can be found <a target='_blank' rel='noopener noreferrer' href='https://gitea.matt-cloud.com/matt/gpo_lookup'>here</a>.<p>";
|
||
?>
|
||
|
||
</body>
|
||
</html>
|