mirror of
https://github.com/librenms/librenms.git
synced 2024-09-25 04:19:07 +00:00
6b8cba3d24
git-svn-id: http://www.observium.org/svn/observer/trunk@2580 61d68cd4-352d-0410-923a-c4978735b2b8
152 lines
3.0 KiB
PHP
152 lines
3.0 KiB
PHP
<?php
|
|
|
|
$ds = @ldap_connect($config['auth_ldap_server'],$config['auth_ldap_port']);
|
|
|
|
function authenticate($username,$password)
|
|
{
|
|
global $config, $ds;
|
|
|
|
if ($ds)
|
|
{
|
|
if ($config['auth_ldap_version'])
|
|
{
|
|
ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, $config['auth_ldap_version']);
|
|
}
|
|
if (ldap_bind($ds, $config['auth_ldap_prefix'] . $username . $config['auth_ldap_suffix'], $password))
|
|
{
|
|
if (!$config['auth_ldap_group'])
|
|
{
|
|
return 1;
|
|
}
|
|
else
|
|
{
|
|
if (ldap_compare($ds,$config['auth_ldap_group'],'memberUid',$username))
|
|
{
|
|
return 1;
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
echo(ldap_error($ds));
|
|
}
|
|
}
|
|
else
|
|
{
|
|
# FIXME return a warning that LDAP couldn't connect?
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
function passwordscanchange()
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
function changepassword($username,$newpassword)
|
|
{
|
|
# Not supported (for now)
|
|
}
|
|
|
|
function auth_usermanagement()
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
function adduser($username, $password, $level, $email = "", $realname = "")
|
|
{
|
|
# Not supported
|
|
return 0;
|
|
}
|
|
|
|
function user_exists($username)
|
|
{
|
|
global $config, $ds;
|
|
|
|
$filter = "(" . $config['auth_ldap_prefix'] . $username . ")";
|
|
$search = ldap_search($ds, trim($config['auth_ldap_suffix'],','), $filter);
|
|
$entries = ldap_get_entries($ds, $search);
|
|
if ($entries['count'])
|
|
{
|
|
return 1;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
function get_userlevel($username)
|
|
{
|
|
global $config, $ds;
|
|
|
|
$userlevel = 0;
|
|
|
|
# Find all defined groups $username is in
|
|
$filter = "(&(|(cn=" . join(")(cn=", array_keys($config['auth_ldap_groups'])) . "))(memberUid=" . $username . "))";
|
|
$search = ldap_search($ds, $config['auth_ldap_groupbase'], $filter);
|
|
$entries = ldap_get_entries($ds, $search);
|
|
|
|
# Loop the list and find the highest level
|
|
foreach ($entries as $entry)
|
|
{
|
|
$groupname = $entry['cn'][0];
|
|
if ($config['auth_ldap_groups'][$groupname]['level'] > $userlevel)
|
|
{
|
|
$userlevel = $config['auth_ldap_groups'][$groupname]['level'];
|
|
}
|
|
}
|
|
|
|
return $userlevel;
|
|
}
|
|
|
|
function get_userid($username)
|
|
{
|
|
global $config, $ds;
|
|
|
|
$filter = "(" . $config['auth_ldap_prefix'] . $username . ")";
|
|
$search = ldap_search($ds, trim($config['auth_ldap_suffix'],','), $filter);
|
|
$entries = ldap_get_entries($ds, $search);
|
|
|
|
if ($entries['count'])
|
|
{
|
|
return $entries[0]['uidnumber'][0];
|
|
}
|
|
|
|
return -1;
|
|
}
|
|
|
|
function deluser($username)
|
|
{
|
|
# Not supported
|
|
return 0;
|
|
}
|
|
|
|
function get_userlist()
|
|
{
|
|
global $config, $ds;
|
|
|
|
$filter = '(' . $config['auth_ldap_prefix'] . '*)';
|
|
|
|
$search = ldap_search($ds, trim($config['auth_ldap_suffix'],','), $filter);
|
|
$entries = ldap_get_entries($ds, $search);
|
|
|
|
if ($entries['count'])
|
|
{
|
|
foreach ($entries as $entry)
|
|
{
|
|
$username = $entry['uid'][0];
|
|
$realname = $entry['cn'][0];
|
|
$user_id = $entry['uidnumber'][0];
|
|
|
|
if (!isset($config['auth_ldap_group']) || ldap_compare($ds,$config['auth_ldap_group'],'memberUid',$username))
|
|
{
|
|
$userlist[] = array('username' => $username, 'realname' => $realname, 'user_id' => $user_id);
|
|
}
|
|
}
|
|
}
|
|
|
|
return $userlist;
|
|
}
|
|
|
|
?>
|