AS1024/Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Minor changes for the LDAP model

Browse Source
This commit is contained in:
Frédéric Guillot
2014-07-08 15:47:43 -03:00
parent ba93061f4d
commit b84f60babc
1 changed files with 11 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
app/Model/Ldap.php
View File

@@ -24,8 +24,8 @@ class Ldap extends Base
die('The PHP LDAP extension is required'); die('The PHP LDAP extension is required');
} }
if (!LDAP_SSL_VERIFY) { // Skip SSL certificate verification
//Skip SSL certificate verification if (! LDAP_SSL_VERIFY) {
putenv('LDAPTLS_REQCERT=never'); putenv('LDAPTLS_REQCERT=never');
} }
@@ -38,19 +38,24 @@ class Ldap extends Base
ldap_set_option($ldap, LDAP_OPT_PROTOCOL_VERSION, 3); ldap_set_option($ldap, LDAP_OPT_PROTOCOL_VERSION, 3);
ldap_set_option($ldap, LDAP_OPT_REFERRALS, 0); ldap_set_option($ldap, LDAP_OPT_REFERRALS, 0);
if (!@ldap_bind($ldap, LDAP_USERNAME, LDAP_PASSWORD)) { if (! @ldap_bind($ldap, LDAP_USERNAME, LDAP_PASSWORD)) {
die('Unable to bind to the LDAP server: "'.LDAP_SERVER.'"'); die('Unable to bind to the LDAP server: "'.LDAP_SERVER.'"');
} }
$sr = ldap_search($ldap, LDAP_ACCOUNT_BASE, sprintf(LDAP_USER_PATTERN, $username), array(LDAP_ACCOUNT_FULLNAME, LDAP_ACCOUNT_EMAIL)); $sr = @ldap_search($ldap, LDAP_ACCOUNT_BASE, sprintf(LDAP_USER_PATTERN, $username), array(LDAP_ACCOUNT_FULLNAME, LDAP_ACCOUNT_EMAIL));
if ($sr === false) {
return false;
}
$info = ldap_get_entries($ldap, $sr); $info = ldap_get_entries($ldap, $sr);
// User not found
if (count($info) == 0 || $info['count'] == 0) { if (count($info) == 0 || $info['count'] == 0) {
//User not found
return false; return false;
} }
if (@ldap_bind($ldap, $info[0]['dn'], $password)) { if (@ldap_bind($ldap, $info[0]['dn'], $password)) {
error_log("Bind to user OK");
return $this->create($username, $info[0][LDAP_ACCOUNT_FULLNAME][0], $info[0][LDAP_ACCOUNT_EMAIL][0]); return $this->create($username, $info[0][LDAP_ACCOUNT_FULLNAME][0], $info[0][LDAP_ACCOUNT_EMAIL][0]);
} }