Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- /**
- * ownCloud
- *
- * @author Dominik Schmidt
- * @author Alessandro Lorenzi
- * @copyright 2011 Dominik Schmidt dev@dominik-schmidt.de
- * @copyright 2012 Alessandro Lorenzi alorenzi@fsugitalia.org
- *
- * This library is free software; you can redistribute it and/or
- * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
- * License as published by the Free Software Foundation; either
- * version 3 of the License, or any later version.
- *
- * This library is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
- *
- * You should have received a copy of the GNU Affero General Public
- * License along with this library. If not, see <http://www.gnu.org/licenses/>.
- *
- */
- class OC_USER_LDAP extends OC_User_Backend {
- protected $ds;
- protected $configured = false;
- // cached settings
- protected $ldap_host;
- protected $ldap_port;
- protected $ldap_dn;
- protected $ldap_password;
- protected $ldap_base;
- protected $ldap_filter;
- function __construct() {
- $this->ldap_host = OC_Appconfig::getValue('user_ldap', 'ldap_host','');
- $this->ldap_port = OC_Appconfig::getValue('user_ldap', 'ldap_port', OC_USER_BACKEND_LDAP_DEFAULT_PORT );
- $this->ldap_dn = OC_Appconfig::getValue('user_ldap', 'ldap_dn','');
- $this->ldap_password = OC_Appconfig::getValue('user_ldap', 'ldap_password','');
- $this->ldap_base = OC_Appconfig::getValue('user_ldap', 'ldap_base','');
- $this->ldap_filter = OC_Appconfig::getValue('user_ldap', 'ldap_filter','');
- if( !empty($this->ldap_host)
- && !empty($this->ldap_port)
- && !empty($this->ldap_dn)
- && !empty($this->ldap_password)
- && !empty($this->ldap_base)
- && !empty($this->ldap_filter)
- )
- {
- $this->configured = true;
- }
- }
- function __destruct() {
- // close the connection
- if( $this->ds )
- ldap_unbind($this->ds);
- }
- private function getDs() {
- if(!$this->ds) {
- #$this->ds = ldap_connect( $this->ldap_host, $this->ldap_port );
- # if(ldap_set_option($this->ds, LDAP_OPT_PROTOCOL_VERSION, 3))
- # if(ldap_set_option($this->ds, LDAP_OPT_REFERRALS, 0))
- # ldap_start_tls($this->ds);
- $this->ds=ldap_connect($this->ldap_host);
- if (!$this->ds) echo "err";
- }
- // login
- if(!empty($this->ldap_dn)) {
- ldap_set_option($this->ds, LDAP_OPT_PROTOCOL_VERSION, 3);
- $ldap_login = @ldap_bind( $this->ds, $this->ldap_dn, $this->ldap_password );
- if(!$ldap_login)
- return false;
- }
- return $this->ds;
- }
- private function getDn( $uid ) {
- if(!$this->configured)
- return false;
- // connect to server
- $ds = $this->getDs();
- if( !$ds )
- return false;
- // get dn
- $filter = str_replace("%uid", $uid, $this->ldap_filter);
- $sr = ldap_search( $this->getDs(), $this->ldap_base, $filter );
- $entries = ldap_get_entries( $this->getDs(), $sr );
- if( $entries["count"] == 0 )
- return false;
- return $entries[0]["dn"];
- }
- public function checkPassword( $uid, $password ) {
- if(!$this->configured){
- return false;
- }
- $dn = $this->getDn( $uid );
- if( !$dn )
- return false;
- if (!@ldap_bind( $this->getDs(), $dn, $password ))
- return false;
- return $uid;
- }
- public function userExists( $uid ) {
- if(!$this->configured){
- return false;
- }
- $dn = $this->getDn($uid);
- return !empty($dn);
- }
- }
- ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement