| Server IP : 94.23.64.18 / Your IP :
216.73.216.185 [
Web Server : Apache System : Linux webm005.cluster107.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64 User : villadal ( 6036) PHP Version : 7.4.33 Disable Function : _dyuweyrj4,_dyuweyrj4r,dl Domains : 2 Domains MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /home/villadal/www/old/booked/plugins/Authentication/ActiveDirectory/ |
Upload File : |
<?php
/**
Copyright 2011-2014 Nick Korbel
This file is part of Booked Scheduler.
Booked Scheduler is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
Booked Scheduler is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with Booked Scheduler. If not, see <http://www.gnu.org/licenses/>.
*/
require_once(ROOT_DIR . 'lib/Application/Authentication/namespace.php');
require_once(ROOT_DIR . 'plugins/Authentication/ActiveDirectory/namespace.php');
/**
* Provides ActiveDirectory LDAP authentication/synchronization for Booked Scheduler
* @see IAuthorization
*/
class ActiveDirectory extends Authentication implements IAuthentication
{
/**
* @var IAuthentication
*/
private $authToDecorate;
/**
* @var AdLdapWrapper
*/
private $ldap;
/**
* @var ActiveDirectoryOptions
*/
private $options;
/**
* @var IRegistration
*/
private $_registration;
/**
* @var ActiveDirectoryUser
*/
private $user = null;
/**
* @var string
*/
private $password;
public function SetRegistration($registration)
{
$this->_registration = $registration;
}
private function GetRegistration()
{
if ($this->_registration == null)
{
$this->_registration = new Registration();
}
return $this->_registration;
}
/**
* @param IAuthentication $authentication Authentication class to decorate
* @param IActiveDirectory $ldapImplementation The actual LDAP implementation to work against
* @param ActiveDirectoryOptions $ldapOptions Options to use for LDAP configuration
*/
public function __construct(IAuthentication $authentication, $ldapImplementation = null, $ldapOptions = null)
{
// TODO: Check for ldap support (in ldap plugin, too)
$this->authToDecorate = $authentication;
$this->options = $ldapOptions;
if ($ldapOptions == null)
{
$this->options = new ActiveDirectoryOptions();
}
$this->ldap = $ldapImplementation;
if ($ldapImplementation == null)
{
$this->ldap = new AdLdapWrapper($this->options);
}
}
public function Validate($username, $password)
{
$this->password = $password;
$username = $this->CleanUsername($username);
$connected = $this->ldap->Connect();
if (!$connected)
{
throw new Exception('Could not connect to ActiveDirectory LDAP server. Please check your ActiveDirectory LDAP configuration settings');
}
$isValid = $this->ldap->Authenticate($username, $password);
Log::Debug('Result of ActiveDirectory LDAP Authenticate for user %s: %d', $username, $isValid);
if ($isValid)
{
$this->user = $this->ldap->GetLdapUser($username);
$userLoaded = $this->LdapUserExists();
if (!$userLoaded)
{
Log::Error('Could not load user details from ActiveDirectory LDAP. Check your basedn setting. User: %s', $username);
}
return $userLoaded;
}
else
{
if ($this->options->RetryAgainstDatabase())
{
return $this->authToDecorate->Validate($username, $password);
}
}
return false;
}
public function Login($username, $loginContext)
{
$username = $this->CleanUsername($username);
Log::Debug('ActiveDirectory - Login() in with username: %s', $username);
if ($this->LdapUserExists())
{
Log::Debug('Running ActiveDirectory user synchronization for username: %s, Attributes: %s', $username, $this->user->__toString());
$this->Synchronize($username);
}
else
{
Log::Debug('Skipping ActiveDirectory user synchronization, user not loaded');
}
return $this->authToDecorate->Login($username, $loginContext);
}
public function Logout(UserSession $user)
{
$this->authToDecorate->Logout($user);
}
public function AreCredentialsKnown()
{
return false;
}
private function LdapUserExists()
{
return $this->user != null;
}
private function Synchronize($username)
{
$registration = $this->GetRegistration();
$registration->Synchronize(
new AuthenticatedUser(
$username,
$this->user->GetEmail(),
$this->user->GetFirstName(),
$this->user->GetLastName(),
$this->password,
Configuration::Instance()->GetKey(ConfigKeys::LANGUAGE),
Configuration::Instance()->GetDefaultTimezone(),
$this->user->GetPhone(), $this->user->GetInstitution(),
$this->user->GetTitle())
);
}
private function CleanUsername($username)
{
if (BookedStringHelper::Contains($username, '@'))
{
Log::Debug('ActiveDirectory - Username %s appears to be an email address. Cleaning...', $username);
$parts = explode('@', $username);
$username = $parts[0];
}
if (BookedStringHelper::Contains($username, '\\'))
{
Log::Debug('ActiveDirectory - Username %s appears contain a domain. Cleaning...', $username);
$parts = explode('\\', $username);
$username = $parts[1];
}
return $username;
}
}
?>