tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-09-26 03:19:05 +02:00
Code Issues Packages Projects Releases Wiki Activity

ldap adv conf v3 (good version)

Browse Source
This commit is contained in:
Arturo Gonzalez 2017-09-25 14:18:40 +02:00
parent 89ba75f466
commit cb85cff34f
1 changed files with 28 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
pandora_console/include/auth/mysql.php
View File

@ -695,22 +695,31 @@ function ldap_process_user_login ($login, $password) {
} }
} }
$ldap_login_attr = !empty($config["ldap_login_attr"]) ? io_safe_output($config["ldap_login_attr"]) . "=" : ''; $dc = $config["ldap_base_dn"];
$ldap_base_dn = !empty($config["ldap_base_dn"]) ? "," . io_safe_output($config["ldap_base_dn"]) : '';
$ldap_adv_perms = json_decode(io_safe_output($config['ldap_adv_perms']), true); #Search group of this user it belong.
$correct = false; $filter="(cn=" . io_safe_output($login) . ")";
foreach ($ldap_adv_perms as $perm) { $justthese = array("objectclass=group");
$groups = $perm['groups_ldap'];
if ($groups[0] == '') { $sr = ldap_search($ds, $dc, $filter, $justthese);
$groups = "";
$memberof = ldap_get_entries($ds, $sr);
if ($memberof["count"] == 0 && !isset($memberof[0]["memberof"])) {
@ldap_close ($ds);
return false;
} }
else { else {
$groups = ",cn=" . str_replace(",", ",cn=", $groups[0]); $memberof = $memberof[0];
} }
unset($memberof["count"]);
$ldap_base_dn = !empty($config["ldap_base_dn"]) ? "," . io_safe_output($config["ldap_base_dn"]) : '';
$correct = false;
if(!empty($ldap_base_dn)) { if(!empty($ldap_base_dn)) {
if (strlen($password) != 0 && @ldap_bind($ds, $ldap_login_attr.io_safe_output($login).$groups.$ldap_base_dn, $password) ) { if (strlen($password) != 0 && @ldap_bind($ds, $memberof['dn'], $password) ) {
$correct = true; $correct = true;
} }
} }
@ -719,7 +728,6 @@ function ldap_process_user_login ($login, $password) {
$correct = true; $correct = true;
} }
} }
}
@ldap_close ($ds); @ldap_close ($ds);