#!/usr/bin/perl
use Env;
use CGI;
use FileHandle;
use IPC::Open2;
use IPC::Open3;
use Ldapp;
use MIME::Base64;

#############################################################################
# user configurable section begins here, changes at own risk and peril
#############################################################################

# basic variables

$tmphtml="/home/admin/aoe/html/ldap";
$baseurl="http://$ENV{HTTP_HOST}/~aoe/ldap/";
$defaultserver="$ENV{HTTP_HOST}";
$defaultport=389;
$defaultbase="o=OeH Uni Wien, c=AT";
$defaultqueryattribute="cn";
$0 =~ /([^\/]*?)$/;
$basename="$1";
$ldappath="/home/admin/aoe/bin";

# mandatory attributes (used for long form)

@mand=(["Server:","text","server","$ENV{HTTP_HOST}"],
["LDAP Port:","text","port","389"],
["Base DN:","text","base","o=Oeh Uni Wien, c=AT"],
["Rootdn:","text",rootdn,"cn=Admin, o=oeh uni wien, c=at"],
["Rootpw:","password",rootpw,""],
["Suborganisation:","text","uo",""],
["Common Name:","text","cn",""],
["Other Cname:","text","cn1",""],
["Third Cname:","text","cn2",""],
["Fourth Cname:","text","cn3",""],
["Short Name:","text","sn",""],
["User ID:","text",uid,""],
["Objectclass:","text",objectclass,luser],
["Password:","password",userPassword,""],
["Password (confirmation):","password",userPassword1,""]);

# compulsory attributes (used for long form)

@comp=(["Mail Address:","text",mail,""],
["Description:","text",description,""],
["Mail-forward:","text",forward,""],
["Groups:","text",groups,"users"],
["Office:","text",office,"Oeh Uni Wien"],
["Phone:","text",ophone,""],
["Fax:","text",fax,""],
["Attitude:","text",attitude,"slightly non-technical"],
["Home:","text",home,""],
["Home Phone:","text",phone,""],
["Fax:","text",fax,""],
["Home Page:","text",url,""],
["lart:","text",lart,""]);

# simple interface attributes (used for simple interface)

@simple=(["","hidden","server","$ENV{HTTP_HOST}"],
["","hidden","base","o=Oeh Uni Wien, c=AT"],
["","hidden","port","389"],
["Common Name:","text","cn",""],
["Short Name:","text","sn",""],
["User ID:","text",uid,""],
["Objectclass:","text",objectclass,luser]);

# options for adding fields (multiple allowed) (used for modify interface)

@options=(
["Other Cname:","text","cn2",""],
["Short Name:","text","sn",""],
["User ID:","text",uid,""],
["Objectclass:","text",objectclass,luser],
["Mail Address:","text",mail,""],
["Description:","text",description,""],
["Mail-forward:","text",forward,""],
["Groups:","text",groups,"users"],
["Office:","text",office,"Oeh Uni Wien"],
["Phone:","text",ophone,""],
["Fax:","text",fax,""],
["Attitude:","text",attitude,"slightly non-technical"],
["Home:","text",home,""],
["Home Phone:","text",phone,""],
["Home Page:","text",url,""],
["lart:","text",lart,""]);

$docfooter="<a href=\"$basename\">LDAP Home</a> -
<a href=\"$basename?action=longform&debug=$debug\">Complete Form</a> -
<a href=\"about.html\">About LDAP</a>
<p><font size=-1>
(c) 1998 aoe, gw</p></font>
</body>
</html>\n";

# empty value for modify form
$bullet="ignore";
############################################################################
# user configurable section ends here, changes farther below at own risk only!
############################################################################

# sheesh, netscape Ldapp uses different semantics ...
$scope =~ s/^sub$/subtree/g;
$scope =~ s/^base$/samelevel/g;
$scope =~ s/^one$/onelevel/g;
$scope =~ s/^$/subtree/g;

Env::import();
$|=1;
$query=new CGI;
@fields = $query->param;

foreach (@fields) {
	$$_=$query->param($_);
	chomp $$_;
}
$nofields="^(port|modifytype|scope|server|rootdn|rootpw|cn|userPassword|action|base|debug)";

# help for dummies

if (!$server){$server="$defaultserver"};
if (!$port){$port=$defaultport};
if (!$base){$base="$defaultbase"};

# basename hack for help pages

if ($action eq "") {
	$_=$basename;
	if (/longform/) {$action="longform"
	} elsif (/modify/) {
		$action="modifyform";
#		$debug="on";
		$cn="*Hacker*";
	} elsif (($#fields eq 0) && ($fields[0] eq "keywords")){
		$f=$fields[0];
		$action="query"; 
		$$defaultqueryattribute="*$$f*"; 
		$$defaultqueryattribute =~ s/\*\*\*/\*/g;
	};
}


print <<EODOCHEAD;
content-type: text/html

<html>
<head>
<base href="$baseurl">
EODOCHEAD

chomp $base;

for(sn,uid,cn3,cn2,cn1,cn){if($$_ ne ""){$i=$_;while(/[0-9]$/){chop}; $rdn="$_=$$i"}}; 
if ($uo ne "") { $rdn .= ", uo=$uo"; };
$dn=$rdn;
if ($base ne "") { $dn .= ", $base"};
$uth="<tr><th>name</th><th>changetype</th><th>value</th></tr>";
$th="<tr><th>name</th><th></th><th>value</th></tr>";
$cncount=1;


if ($action eq "query") {
	print"<title>OeH Uni Wien LDAP Query Result Page</title>
</head>
<body>
<h1>LDAP Search Interface Results page</h1>\n";
	$search="";
	foreach (@fields) {
		if ((!/$nofields/) and ("$$_" ne "")) {$search = "$_=$$_"};
	};
	if ($sn ne "") { $search = "sn=$sn";}
	if ($uid ne "") { $search = "uid=$uid";}
	if ($cn3 ne "") { $search = "cn=$cn3";}
	if ($cn2 ne "") { $search = "cn=$cn2";}
	if ($cn1 ne "") { $search = "cn=$cn1";}
	if ($cn ne "") { $search = "cn=$cn";}
	if ($search eq "") { $search="objectclass=*"; };
	if ($scope ne "") {$scope ="-s $scope"};
	$search =~ s/=(.*)$/=*$1*/;
	while ($search =~ s/\*\*/\*/g){;};
# phonetic search doesn't work with short strings, substring
# seems more important
#	$search =~ s/=(..+)$/~=$1/;
###	$cmd="$ldappath/ldapsearch -p $port $scope -h $server -b \"$base\" \"$search\" " . '>&/dev/stdout';

	print "<h3>Query Result for $search</h3>\n";
	$ldap = new Ldapp("$server",$port,"$Rootdn","$Rootpw");
	$entry = $ldap->search("$base","$scope","$search");
	&printentry if $entry;
	push (@data,"");
	while($entry = $ldap->entry)
	{
		&printentry;
	}
	$ldap->close;
		
} elsif ($action eq "addentry") {
	print "<h1>LDAP Administrative Interface Results</h1>\n";
	$urlforthis = $dn;
#	$urlforthis =~ s/cn/cn1/g;
	$urlforthis =~ s/, /&/g;
	$urlforthis =~ s/,/&/g;
#		phonetic search, great -- but clashes with regex-starts
#		$urlforthis =~ s/=/~=/g;
	$urlforthis =~ s/$base//g;
	$_=$base;
	s/=/%3d/g;
	$urlforthis .= "&base=$_";
	$urlforthis="$url&server=$server";
	$urlforthis =~ s/ /+/g;
	
	print "Request: Add <a href=\"$basename?action=query&$urlforthis&debug=$debug\">$dn</a></h3>\n";	
	$addentry{dn}="$dn";
	foreach (@fields) {
		if ((!/$nofields/ || /^cn[0-9]/) and ("$$_" ne "")) {
			$attribute=$_;
			while (/[0-9]$/){chop};
			$_=$addentry{$_};
			push @$_,$$attribute;
		};
	};
	if ($userPassword ne $userPassword1) {
		print "<p>passwords don't match!</p>\n"
	} elsif ($userPassword ne "")  {
		if ($debug) { print "<h3>input to ldapadd command:</h3>\n";
			print "<pre>\n$ldap";
			print "userPassword: not shown\n</pre>\n";
		};
		$ldapcmd="$ldappath/ldapadd -p $port -h $server -D \"$rootdn\" -w \"$rootpw\" >&/dev/stdout";
		$ldapprintcmd="$ldappath/ldapadd -p $port -h $server -D \"$rootdn\" -w \"\$rootpw\" >&/dev/stdout";
		print "<h3>result for ldapadd command:</h3>\n";
		if ($debug) { print "<p>$ldapprintcmd</p>\n"}; 
		print "<pre>\n";
		$pid = open2( \*Reader, \*Writer, $ldapcmd);
		Writer->autoflush(); # default here, actually
		print Writer $ldap;
		print Writer "userPassword: $userPassword\n";
		close Writer;
		while ($got=<Reader>) {print "$got\n"};
		close Reader;
		print "\n</pre>\n";
	};
} elsif ($action =~ /modifyform/) {
	print "<h1>LDAP Administrative Interface Results</h1>\n";
	$search="";
	foreach (@fields) {
		if ((!/$nofields/) and ("$$_" ne "")) {$search = "$_=$$_"};
	};
	if ($sn ne "") { $search = "sn=$sn";}
	if ($uid ne "") { $search = "uid=$uid";}
	if ($cn3 ne "") { $search = "cn=$cn3";}
	if ($cn2 ne "") { $search = "cn=$cn2";}
	if ($cn1 ne "") { $search = "cn=$cn1";}
	if ($cn ne "") { $search = "cn=$cn";}
	if ($search eq "") { $search="objectclass=*"; };
#	if ($scope ne "") {$scope ="-s $scope"};
	$search =~ s/=(.*)$/=*$1*/;
	while ($search =~ s/\*\*/\*/g){;};
	print "<h3>Modify Form for $search</h3>\n";
# first query db whether an entry exists ...
#	$cmd="$ldappath/ldapsearch -p $port -h $server -b \"$base\" \"$rdn\" ";
        $ldap = new Ldapp("$server",$port,"$Rootdn","$Rootpw");
        $entry = $ldap->search("$base","$scope","$search");
	if ($debug) {
		print "<h3>getting data base entry for $search</h3>\n";
	};
	$#data=-1;
        if ($entry) {&modifyentry} else {print "<h3>Found No Entries to Modify!</h3>\n"};
        while($entry = $ldap->entry)
        {
                &modifyentry;
        }
        $ldap->close;

} elsif ($action =~ /modifyscript/) {
	print "<h1>LDAP Administrative Interface Results</h1>\n";
	print "<h3>Request Type: Modify ";
	$urlforthis = $dn;
	$urlforthis =~ s/$base//g;
#	$urlforthis =~ s/cn/cn1/g;
	$urlforthis =~ s/,\s*/&/g;
#		phonetic search, great -- but clashes with regex-starts
#		$urlforthis =~ s/=/~=/g;
	$_=$base;
	s/=/%3d/g;
	$urlforthis .= "&base=$_";
	$urlforthis .= "&server=$server";
	$urlforthis =~ s/ /+/g;
	
	print "<a href=\"$basename?action=query&$urlforthis&debug=$debug\">$dn</a></h3>\n";	
#	print "$_<br>\n";
#	$ldap="dn: $dn\nchangetype: modify\n";
	$ldap="$dn\n";
	if ($cn1 ne "") { $ldap .= "$modify: cn\ncn: $cn1\n";}
	if ($cn2 ne "") { $ldap .= "$modify: cn\ncn: $cn2\n";}
	if ($cn3 ne "") { $ldap .= "$modify: cn\ncn: $cn3\n";}
	
	foreach $attribute (@fields) {
		$modifytype="modifytype$attribute";
		if ($debug){print "$attribute: $$attribute ($$modifytype)<br>\n";};
		$_=$$modifytype;
		if (/add/) {
			$attribute=$_;
			while (/[0-9]$/){chop};
			$ldap .= "+$_=$$attribute\n"
		} elsif (/replace/) {
			$attribute=$_;
			while (/[0-9]$/){chop};
			$ldap .= "$_=$$attribute\n"
		} elsif (/delete/) {
			$attribute=$_;
			$ldap .= "-$_=$$attribute\n";
		};
	};
	chomp $userPassword;
	chomp $userPassword1;
	if ($userPassword ne $userPassword1) {
		print "<p>passwords don't match, not changed!</p>\n";
	} elsif ($userPassword ne "") {
		$ldap.="userPassword=$userPassword\n";
	}; 
	$ldapcmd="$ldappath/ldapmodify -p $port -v -h $server -D \"$rootdn\" -w \"$rootpw\" " . '>&/dev/stdout';
	$ldapprintcmd="$ldappath/ldapmodify -p $port -v -h $server -D \"$rootdn\" -w \"\$rootpw\" " . '>&/dev/stdout';
	if ($debug) { print "<p>$ldapprintcmd</p>\n"}; 
	$pid = open2( \*Reader, \*Writer, $ldapcmd);
	Writer->autoflush(); # default here, actually
	print Writer $ldap;
	close Writer;
	print "<h3>result for ldapmodify command:</h3>\n";
	print "<pre>\n";
	while ($got=<Reader>) {print "$got\n"};
	close Reader;
	print "</pre>\n";
	if ($debug ne "") {
		print "<h3>ldapmodify input<h3>\n";
		print "<pre>\n$ldap";
		print "</pre>\n";
	};
	
} elsif ($action eq "clearfield") {
	print "<h1>LDAP Administrative Interface Results</h1>\n";
	print "<h3>Request Type: Clear Field Value</h3>\n";
	$prefix="dn: $dn\nchangetype: modify\n";
	$ldap=$prefix;
	if ($cn1 ne "") { $ldap .= "delete: cn\n";}
	if ($cn2 ne "") { $ldap .= "delete: cn\n";}
	if ($cn3 ne "") { $ldap .= "delete: cn\n";}
	foreach (@fields) {
		if ((!/$nofields/) and ("$$_" =~ /^[dD][eE][lL]/)) {$ldap .= "delete: $_\n"};
	};
	$ldapcmd="$ldappath/ldapmodify -p $port -v -h $server -D \"$rootdn\" -w \"$rootpw\"  " .  '>&/dev/stdout';
	$ldapprintcmd="$ldappath/ldapmodify -p $port -v -h $server -D \"$rootdn\" -w \"\$rootpw\" " . '>&/dev/stdout';
	if ($debug) {
		print "<h3>LDAP call and data</h3><p>$ldapprintcmd</p><pre>$ldap"; 
		print "</pre>\n";
	};
	$pid = open2( \*Reader, \*Writer, $ldapcmd);
	Writer->autoflush(); # default here, actually
	print Writer $ldap;
	close Writer;
	print "<h3>LDAP reply</h3>\n<pre>\n";
	while ($got=<Reader>) {print "$got\n"};
	close Reader;
	print "</pre>\n";
	$cmd="$ldappath/ldapsearch -p $port -h $server -b \"$base\" \"cn=$cn\" " . '>&/dev/stdout';
	print "<h3>New Values</h3>\n";
	if ($debug) {print "<p>$cmd</p>\n"}; 
	print ("<pre>\n" . `$cmd` . "\n</pre>\n");
} elsif ($action eq "deleteentry") {
	print "<h1>LDAP Administrative Interface Results</h1>\n";
	print "<h3>Request Type: Delete Entry</h3>\n";
	$ldap="dn: $dn\ncn: $cn\n";
	$search="";
	if ($sn ne "") { $search = "sn=$sn";}
	if ($uid ne "") { $search = "uid=$uid";}
	if ($cn3 ne "") { $search = "cn=$cn3";}
	if ($cn2 ne "") { $search = "cn=$cn2";}
	if ($cn1 ne "") { $search = "cn=$cn1";}
	if ($cn ne "") { $search = "cn=$cn";}
	if ($search eq "") { $search="objecttype=*"}; 
	$cmd="$ldappath/ldapsearch -p $port -h $server -b \"$base\" \"$search\" " . '>&/dev/stdout';
	if ($debug) {print "<h3>searching thru data base for viable entries</h3>\n";
		print "<p>$cmd</p>\n<pre>";
	};
	open DELS, "$cmd |"; 
	while ($_=<DELS>) {
		if (/,/) { 
			chomp;
			push @dels, $_;
 			if ($debug) {print $_};
		}; 
	};
	close DELS;
	if (@dels < 0) { 
		print "No data set found to be deleted!\n" 
	} elsif ($dels == 0) {
		$ldapcmd="$ldappath/ldapdelete -p $port -v -h $server -D \"$rootdn\" -w \"$rootpw\" \"$dels[0]\" " .'>&/dev/stdout';
		$ldapprintcmd="$ldappath/ldapdelete -p $port -h $server -D \"$rootdn\" -w \"\$rootpw\" \"$dels[0]\" " . '>&/dev/stdout';
		print "<h3>result for ldapdelete command:</h3>\n";
		if ($debug) { print "<p>$ldapprintcmd</p>\n"}; 
		print ("<pre>\n" . `$ldapcmd` . "\n</pre>\n");
	
	} else {
		print "<h3>ldapdelete not executed, more than one possible data sets:</h3>\n<pre>\n";
		foreach (@dels) {print $_ };
		print "\n</pre>\n<p>pleasy try being more specific and mind your spelling!</p>\n";
	};
} elsif ($action eq "longform") { ####### long interface form ##############

print <<EODOC;

<title>Long Access Form for Oeh Uni Wien LDAP Service</title>
</head><body>
<h1>LDAP Directory Access Form</H1>
<li>
<form method=post action="$basename">
<select name=action>
<option value=query>Query Database
<option value=addentry>Add New Entry
<option value=deleteentry>Delete Entry
<option value=modifyform>Modify Entry
</select>
Search Scope: <select name=scope>
<option value=sub>sub
<option value=base>base
<option value=one>one
</select>
<input type=submit value=submit!>
<input type=reset value=reset>
<table border=1>
<tr><th><h2>Mandatory Attributes</h2></th></tr>
$th
EODOC
for  (@mand) {
($desc, $input, $name, $value)=@$_;
print ("<tr><td>$desc</td><td></td><td><input type=$input size=40 name=\"$name\" value=\"$value\"></td></tr>\n");};
print "<tr><th><h2>Compulsory Attributes</h2></th></tr>\n$th\n";
for  (@comp) {
($desc, $input, $name, $value)=@$_;
print ("<tr><td>$desc</td><td></td><td><input type=$input size=40 name=\"$name\" value=\"$value\"></td></tr>\n");};

print <<EODOC;
</table>
<br> <font size=-1><input type=checkbox name=debug>debug</font>
<br> <input type=submit value=ok>
<input type=reset value=reset>
</form>
<p><a href="longhelp.html">Help for this form</a></p>
EODOC
} else { ############################### simple interface form ############
print <<EODOC;

<title>Access Form for Oeh Uni Wien LDAP Service</title>
</head><body>
<h1>LDAP Directory Access Form</H1>
<li>
<form method=post action="$basename">
<input type=hidden name=action value=query>
<input type=hidden name=scope value=sub>
<input type=submit value=Search!>
<input type=reset value=Reset>
<table border=1>
<tr><th><h2>Search Attributes</h2></th></tr>
$th
EODOC
for  (@simple) {
($desc, $input, $name, $value)=@$_;
print ("<tr><td>$desc</td><td></td><td><input type=$input size=40 name=\"$name\" value=\"$value\"></td></tr>\n");};

print <<EODOC;
</table>
<br> <font size=-1><input type=checkbox name=debug>debug</font>
<br> <input type=submit value=Search!>
<input type=reset value=Reset>
</form>
<p><a href="simplehelp.html">Help Page for this form</a></p>
EODOC
};
print $docfooter;
close STDOUT;
close STDERR;
close STDIN;
exit 0;

sub options {
	$options="<tr><th><h3>additional attributes<h3></th></tr>\n$uth\n";
	for  (@options) {
		($desc, $input, $name, $value)=@$_;
		/^([^=]*)=(.*)$/;
		$count="";
		$cn{count}=1;
		if ($$name{count} ne 0) {$count = $$name{count} };
		$$name{count} ++;
		$options .= "
<tr><td> $desc </td><td>
<select name=modifytype$name$count>
<option name=modifytype$name$count value=none>$bullet
<option name=modifytype$name$count value=add>add
<option name=modifytype$name$count value=replace>replace
<option name=modifytype$name$count value=delete>delete
</select>
</td><td>
<input type=input size=40 name=$name$count value=\"$value\">
</td></tr>\n";
	};
};
sub printentry {
	  $dn=join(' ',@$entry{dn});
	  $url=$dn;
#	  $url =~ s/cn/cn1/g;
	  $url =~ s/, /&/g;
	  $url =~ s/,/&/g;
#    phonetic search, great -- but clashes with regex-stars
#    $url =~ s/=/~=/g;
	  $url =~ s/$base//g;
	  $_=$base;
	  s/=/%3d/g;
	  $url .= "&base=$_";
	  $url="$url&server=$server";
	  $url =~ s/ /+/g;
	  
	  print "<h3><a href=\"$basename?action=modifyform&$url&port=$port&debug=$debug\">dn: $dn</a></h3>\n<p>\n";  
	  for $i (@$entry{ocorder}) {
	    for $j (@$i) {
	      print "$j: ";
	      for $k (@$entry{$j}) {
		$binarycount=0;
		for $l (@$k) {
		  if ($l =~ /[\200-\377]/ and $binarycount == 0) {
		    $binarycount=1;
	# fucking ldapp has some strcpy that terminates at null bytes. sheesh ...
		    $l=`$ldappath/ldapsearch -t -p $port $scope -h $server -b \"$base\" \"$search\" \"$j\" >&/dev/stdout`;
		    if ($debug) {print "<pre>\n$l\n</<pre>\n"};
		    while ( $l =~ s/.*$j=(.*[0-9])$//m) {
		    
		      $tmpname="tmp-ldap-".time.$imagecount;
		      $imagecount++;
		      system("find $tmphtml -name \"tmp-*\" -amin +5 -exec rm \\{\\} \\; ; mv $1 $tmphtml/$tmpname.file");
		      $_=`file $tmphtml/$tmpname.file`;
		      if (/JPEG/) {
			system("mv $tmphtml/$tmpname.file $tmphtml/$tmpname.jpeg");
			print "<a href=\"$tmpname.jpeg\"><img src=\"$tmpname.jpeg\" alt=\"JPEG Image\"></a> ";
		      } elsif (/GIF/) {
			system("mv $tmphtml/$tmpname.file $tmphtml/$tmpname.gif");
			print "<a href=\"$tmpname.gif\"><img src=\"$tmpname.gif\" alt=\"GIF Image\"></a> ";
		      } elsif (/Sun\/NeXT/) {
			system("mv $tmphtml/$tmpname.file $tmphtml/$tmpname.au");
			print "<a href=\"$tmpname.au\">Sun Audio File</a> ";
		      } elsif (/MIDI/) {
			system("mv $tmphtml/$tmpname.file $tmphtml/$tmpname.midi");
			print "<a href=\"$tmpname.midi\">MIDI File</a> ";
		      } elsif (/MP3/) {
			system("mv $tmphtml/$tmpname.file $tmphtml/$tmpname.mp3");
			print "<a href=\"$tmpname.mp3\">MP3 audio file</a> ";
		      } else {
			print "<a href=\"$tmpname.file\">Unknown binary file</a> ";
		      };
		    };
		  } elsif ($binarycount == 0) {
		    print "$l ";  
		  };
		};
		print "<br>\n";
	      };
	    };
	  }
	print "</p>\n";
};
sub modifyentry {
	  $dn=join(' ',@$entry{dn});
	  $url=$dn;
#	  $url =~ s/cn/cn1/g;
	  $url =~ s/, /&/g;
	  $url =~ s/,/&/g;
#    phonetic search, great -- but clashes with regex-stars
#    $url =~ s/=/~=/g;
	  $url =~ s/$base//g;
	  $_=$base;
	  s/=/%3d/g;
	  $url .= "&base=$_";
	  $url="$url&server=$server";
	  $url =~ s/ /+/g;
	  print <<EOHEAD;
<h3><a href="$basename?action=query&$url&port=$port&debug=$debug">dn: $dn</a></h3>\n<p>  
<form method=post action="$basename">

<input name=action type=hidden value=modifyscript>
<br> <input type=submit value=enter>
<input type=reset value=reset>
<table>
$th
<tr><td> Server: </td><td></td><td>
<input type=text name=server size=40 value="$server">
</td></tr><tr><td> Base DN:  </td><td> </td><td> 
<input type=text name=base size=40 value="$base">
</td></tr><tr><td> Rootdn:  </td><td> </td><td> 
<input type=text size=40 name=rootdn value="$dn">
</td></tr><tr><td> Rootpw:  </td><td> </td><td> 
<input type=password size=40 name=rootpw value="">
</td></tr>
$uth
EOHEAD
	  for $i (@$entry{ocorder}) {
	    for $j (@$i) {
#	      print "$j: ";
	      for $k (@$entry{$j}) {
		$binarycount=0;
		for $l (@$k) {
		  if ($l =~ /[\200-\377]/ and $binarycount == 0) {
		    print "<tr><td> $j: </td><td>\n";
		    $binarycount=1;
# fucking ldapp has some strcpy that terminates at null bytes. sheesh ...
		    $l="$ldappath/ldapsearch -t -p $port -h $server -b \"$base\" \"$search\" \"$j\" >&/dev/stdout";
		    if ($debug) {print "<pre>\n$l\n</<pre>\n"};
		    $l=`$l`;
		    if ($debug) {print "<pre>\n$l\n</<pre>\n"};
		    while ( $l =~ s/.*$j=(.*[0-9])$//m) {
		    
		      $tmpname="tmp-ldap-".time.$imagecount;
		      $imagecount++;
		      system("find $tmphtml -name \"tmp-*\" -amin +5 -exec rm \\{\\} \\; ; mv $1 $tmphtml/$tmpname.file");
		      $_=`file $tmphtml/$tmpname.file`;
		      if (/JPEG/) {
			system("mv $tmphtml/$tmpname.file $tmphtml/$tmpname.jpeg");
			print "<a href=\"$tmpname.jpeg\"><img src=\"$tmpname.jpeg\" alt=\"JPEG Image\"></a> ";
		      } elsif (/GIF/) {
			system("mv $tmphtml/$tmpname.file $tmphtml/$tmpname.gif");
			print "<a href=\"$tmpname.gif\"><img src=\"$tmpname.gif\" alt=\"GIF Image\"></a> ";
		      } elsif (/Sun\/NeXT/) {
			system("mv $tmphtml/$tmpname.file $tmphtml/$tmpname.au");
			print "<a href=\"$tmpname.au\">Sun Audio File</a> ";
		      } elsif (/MIDI/) {
			system("mv $tmphtml/$tmpname.file $tmphtml/$tmpname.midi");
			print "<a href=\"$tmpname.midi\">MIDI File</a> ";
		      } elsif (/MP3/) {
			system("mv $tmphtml/$tmpname.file $tmphtml/$tmpname.mp3");
			print "<a href=\"$tmpname.mp3\">MP3 audio file</a> ";
		      } else {
			print "<a href=\"$tmpname.file\">Unknown binary file</a> ";
		      };
		    };
		    print "</td></tr>\n";
		  } elsif ($binarycount == 0) {
                    $count="";
# ?????             $cn{count}=1;
                    if ($$j{count} ne 0) {$count = $$j{count} };
                    $$j{count} ++;
		    print <<EOVALUE;
<tr><td> $j: </td><td>
<select name=modifytype$j$count>
<option name=modifytype$j$count value=none>$bullet
<option name=modifytype$j$count value=add>add
<option name=modifytype$j$count value=replace>replace
<option name=modifytype$j$count value=delete>delete
</select>
</td><td>
<input type=text size=40 name=$j$count value="$l">
</td></tr>
EOVALUE
		  };
		};
#		print "<br>\n";
	      };
	    };
	  }
	  &options;
print <<EOFOOT;
<tr><td> userPassword: </td><td></td><td>
<input type=password size=40 name="userPassword" value="">
</td></tr><tr><td> userPassword (confirmation): </td><td></td><td>
<input type=password size=40 name="userPassword1" value="">
</td></tr>
$options
</table>
<br> <font size=-1><input type=checkbox name=debug value="on">debug</font>
<br> <input type=submit value=enter>
<input type=reset value=reset>
</form>
<p><a href="modifyhelp.html">Help for this Form</a></p>
EOFOOT
	print "</p>\n";
};