php - Zimbra SOAP 创建帐户

Question

我想使用 SOAP API 创建 Zimbra 用户帐户，但无法让它工作 - 这很奇怪，因为我可以获得 AuthToken，甚至可以查看以下信息已通过请求 GetAccountRequest 创建的帐户(通过管理面板)，但帐户的创建不起作用。

这是我的 AuthToken (POST) 请求代码:

Header: Content-Type: application/soap+xml

<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope">
  <soap:Header xmlns="urn:zimbra">
    <context></context>
  </soap:Header>
  <soap:Body>
    <AuthRequest xmlns="urn:zimbraAdmin" password="myPassword"> 
        <account by="adminName"><a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="b2dfcb9cdcd3dfd7f2dfcbd6dddfd3dbdc9cd1dddf" rel="noreferrer noopener nofollow">[email protected]</a></account> 
    </AuthRequest>
  </soap:Body>
</soap:Envelope>

这有效，我拿回了身份验证 token 。

接下来我尝试使用此(POST)请求创建新的用户帐户:

<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope">
  <soap:Header xmlns="urn:zimbraAdmin">
    <context>
<authToken> 0_69cd602eef3cf46bb488b02c6a173da698d17bdb_69643blablaTherestofmyauthtoken</authToken>
</context>
  </soap:Header>
  <soap:Body>
     <CreateAccountRequest xmlns="urn:zimbraAdmin" name="<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="cda7a2a5a3e3a9a2a88da0b4a9a2a0aca4a3e3aea2a0" rel="noreferrer noopener nofollow">[email protected]</a>" password="john123!"> 
        <a n="givenName">John</a>
        <a n="sn">Doe</a>
        <a n="displayName">John Doe</a>
    </CreateAccountRequest>
  </soap:Body>
</soap:Envelope>

这是我得到的回复:

SimpleXMLElement Object
(
    [soap:Code] => SimpleXMLElement Object
        (
            [soap:Value] => soap:Sender
        )

    [soap:Reason] => SimpleXMLElement Object
        (
            [soap:Text] => no valid authtoken present
        )

    [soap:Detail] => SimpleXMLElement Object
        (
            [Error] => SimpleXMLElement Object
                (
                    [Code] => service.AUTH_REQUIRED
                    [Trace] => btpool0-3022://zimbra.mydomain.com:7071/service/admin/soap:1449756733826:bc04a0eab6d6c7ec:SoapEngine368
                )

        )

)

有人可以帮我吗？谢谢..

Answer 1

所以我想通了 - 当您发出 AuthToken 请求时，您会收到一个带有 AuthToken 值的 cookie，当您尝试创建新用户帐户时，您必须将该 cookie 发送回 header 部分，如下所示:

Cookie: ZM_ADMIN_AUTH_TOKEN=0_69cd602eef3cf46bb488b02c6a173da698d17bdb_69643blablaTherestofmyauthtoken

整个请求必须如下所示:

$request= array(
    'http' => array(
        'method'  => 'POST',
        'header'  => array(
            'Content-Type: application/soap+xml',
            'Cookie: ZM_ADMIN_AUTH_TOKEN=0_69cd602eef3cf46bb488b02c6a173da698d17bdb_69643blablaTherestofmyauthtoken',
        ),
        'timeout'  => 20, 
        'ignore_errors' => true,  
        'content'  => '
            <soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope">
                <soap:Header xmlns="urn:zimbraAdmin">
                    <context>
                        <authToken> 0_69cd602eef3cf46bb488b02c6a173da698d17bdb_69643blablaTherestofmyauthtoken</authToken>
                    </context>
                </soap:Header>
                <soap:Body>
                    <CreateAccountRequest xmlns="urn:zimbraAdmin" name="<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="a6ccc9cec888c2c9c3e6cbdfc2c9cbc7cfc888c5c9cb" rel="noreferrer noopener nofollow">[email protected]</a>" password="john123!"> 
                        <a n="givenName">John</a>
                        <a n="sn">Doe</a>
                        <a n="displayName">John Doe</a>
                    </CreateAccountRequest>
                </soap:Body>
            </soap:Envelope>
        ',
    ),
);

documentation中有解释管理员授权 token 是必需的，但它没有说明您必须通过请求 header 中的 cookie 将其发送回任何地方。