tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Added ldap login adv conf v1

This commit is contained in:
Arturo Gonzalez 2017-09-22 13:54:02 +02:00
parent 9d09f9a436
commit f738fa2fce
1 changed files with 23 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
pandora_console/include/auth/mysql.php
View File

@ -697,28 +697,35 @@ function ldap_process_user_login ($login, $password) {
$ldap_login_attr = !empty($config["ldap_login_attr"]) ? io_safe_output($config["ldap_login_attr"]) . "=" : ''; $ldap_login_attr = !empty($config["ldap_login_attr"]) ? io_safe_output($config["ldap_login_attr"]) . "=" : '';
$ldap_base_dn = !empty($config["ldap_base_dn"]) ? "," . io_safe_output($config["ldap_base_dn"]) : ''; $ldap_base_dn = !empty($config["ldap_base_dn"]) ? "," . io_safe_output($config["ldap_base_dn"]) : '';
if(!empty($ldap_base_dn)){
if (strlen($password) == 0 || !@ldap_bind($ds, $ldap_login_attr.io_safe_output($login).$ldap_base_dn, $password) ) {
$config["auth_error"] = 'User not found in database or incorrect password';
@ldap_close ($ds);
return false; $ldap_adv_perms = json_decode(io_safe_output($config['ldap_adv_perms']), true);
$correct = false;
foreach ($ldap_adv_perms as $perm) {
$groups = $perm['groups_ldap'];
$groups = "cn=" . implode(",cn=", $groups);
if(!empty($ldap_base_dn)) {
if (strlen($password) != 0 && @ldap_bind($ds, $ldap_login_attr.io_safe_output($login).",".$groups.$ldap_base_dn, $password) ) {
$correct = true;
} }
} }
else { else {
if (strlen($password) == 0 || if (strlen($password) != 0 && @ldap_bind($ds, io_safe_output($login), $password) ) {
!@ldap_bind($ds, io_safe_output($login), $password) ) { $correct = true;
}
}
}
$config["auth_error"] = 'User not found in database or incorrect password';
@ldap_close ($ds); @ldap_close ($ds);
if ($correct) {
return true;
}
else {
$config["auth_error"] = 'User not found in database or incorrect password';
return false; return false;
} }
}
@ldap_close ($ds);
return true;
} }
/** /**