From 05b58916b25d4ff3cada5d7e78e4a6cf6de1058a Mon Sep 17 00:00:00 2001
From: Florian Pritz <bluewind@xinu.at>
Date: Thu, 18 Apr 2013 14:46:53 +0200
Subject: Add LDAP authentification driver

Signed-off-by: Florian Pritz <bluewind@xinu.at>
---
 application/libraries/Duser/drivers/Duser_ldap.php | 67 ++++++++++++++++++++++
 1 file changed, 67 insertions(+)
 create mode 100644 application/libraries/Duser/drivers/Duser_ldap.php

(limited to 'application/libraries/Duser')

diff --git a/application/libraries/Duser/drivers/Duser_ldap.php b/application/libraries/Duser/drivers/Duser_ldap.php
new file mode 100644
index 000000000..97a593bdc
--- /dev/null
+++ b/application/libraries/Duser/drivers/Duser_ldap.php
@@ -0,0 +1,67 @@
+<?php
+/*
+ * Copyright 2013 Florian "Bluewind" Pritz <bluewind@server-speed.net>
+ * Contributions by Hannes Rist
+ *
+ * Licensed under AGPLv3
+ * (see COPYING for full license text)
+ *
+ */
+class Duser_ldap extends Duser_Driver {
+	// none supported
+	public $optional_functions = array();
+
+	// Original source: http://code.activestate.com/recipes/101525-ldap-authentication/
+	public function login($username, $password) {
+		$CI =& get_instance();
+
+		$config = $CI->config->item("auth_ldap");
+
+		if ($username == "" || $password == "") {
+			return false;
+		}
+
+		$ds = ldap_connect($config['host'],$config['port']);
+		if ($ds === false) {
+			return false;
+		}
+
+		switch ($config["scope"]) {
+			case "base":
+				$r = ldap_read($ds, $config['basedn'], $config["username_field"].'='.$username);
+				break;
+			case "one":
+				$r = ldap_list($ds, $config['basedn'], $config["username_field"].'='.$username);
+				break;
+			case "subtree":
+				$r = ldap_search($ds, $config['basedn'], $config["username_field"].'='.$username);
+				break;
+			default:
+				show_error("Invalid LDAP scope");
+		}
+		if ($r === false) {
+			return false;
+		}
+
+		foreach ($config["options"] as $key => $value) {
+			if (ldap_set_option($ds, $key, $value) === false) {
+				return false;
+			}
+		}
+
+		$result = ldap_get_entries($ds, $r);
+		if ($result === false || !isset($result[0])) {
+			return false;
+		}
+
+		if (ldap_bind($ds, $result[0]['dn'], $password)) {
+			ldap_unbind($ds);
+			return array(
+				"username" => $result[0][$config["username_field"]][0],
+				"userid" => $result[0][$config["userid_field"]][0]
+			);
+		}
+
+		return false;
+	}
+}
-- 
cgit v1.2.3-24-g4f1b