160 lines
3.7 KiB
PHP
160 lines
3.7 KiB
PHP
<?php
|
|
/**
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; under version 2
|
|
* of the License (non-upgradable).
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*
|
|
* Copyright (c) 2013 (original work) Open Assessment Technologies SA (under the project TAO-PRODUCT);
|
|
*
|
|
*
|
|
*/
|
|
|
|
/**
|
|
* Authentication adapter interface to be implemented by authentication methodes
|
|
*
|
|
* @author christophe massin
|
|
* @package authKeyValue
|
|
|
|
*/
|
|
|
|
namespace oat\authLdap\model;
|
|
|
|
use core_kernel_users_Service;
|
|
use core_kernel_users_InvalidLoginException;
|
|
use oat\authKeyValue\model\AuthKeyValueUser;
|
|
use oat\oatbox\user\auth\LoginAdapter;
|
|
use Zend\Authentication\Adapter\Ldap;
|
|
|
|
/**
|
|
* Adapter to authenticate users stored in the Ldap implementation
|
|
*
|
|
* @author Christophe Massin <christope@taotesting.com>
|
|
*
|
|
*/
|
|
class LdapAdapter implements LoginAdapter
|
|
{
|
|
|
|
/** Key used to retrieve the persistence information */
|
|
CONST KEY_VALUE_PERSISTENCE_ID = 'authLdap';
|
|
|
|
/** @var $username string */
|
|
private $username;
|
|
|
|
/** @var $password string */
|
|
private $password;
|
|
|
|
/** @var $configuration array $configuration */
|
|
protected $configuration;
|
|
|
|
/**
|
|
* @param array $configuration
|
|
*/
|
|
public function __construct(array $configuration) {
|
|
$this->configuration = $configuration;
|
|
}
|
|
|
|
/**
|
|
* Set the credential
|
|
*
|
|
* @param string $login
|
|
* @param string $password
|
|
*/
|
|
public function setCredentials($login, $password){
|
|
$this->username = $login;
|
|
$this->password = $password;
|
|
}
|
|
|
|
public function authenticate() {
|
|
$adapter = new Ldap();
|
|
$adapter->setOptions(
|
|
array($this->getConfiguration())
|
|
);
|
|
|
|
$adapter->setUsername($this->getUsername());
|
|
$adapter->setPassword($this->getPassword());
|
|
|
|
|
|
$identity = $adapter->authenticate();
|
|
$params=array();
|
|
|
|
|
|
if($identity){
|
|
$user = new AuthKeyValueUser();
|
|
$user->setConfiguration($this->getConfiguration());
|
|
$user->setIdentifier($params['uri']);
|
|
$user->setRoles($params[PROPERTY_USER_ROLES]);
|
|
$user->setLanguageUi($params[PROPERTY_USER_UILG]);
|
|
$user->setLanguageDefLg($params[PROPERTY_USER_DEFLG]);
|
|
$user->setUserRawParameters($params);
|
|
|
|
return $user;
|
|
|
|
} else {
|
|
throw new core_kernel_users_InvalidLoginException();
|
|
}
|
|
|
|
|
|
}
|
|
|
|
/**
|
|
* @param array $configuration
|
|
*/
|
|
public function setConfiguration($configuration)
|
|
{
|
|
$this->configuration = $configuration;
|
|
}
|
|
|
|
/**
|
|
* @return array
|
|
*/
|
|
public function getConfiguration()
|
|
{
|
|
return $this->configuration;
|
|
}
|
|
|
|
/**
|
|
* @param string $password
|
|
*/
|
|
public function setPassword($password)
|
|
{
|
|
$this->password = $password;
|
|
}
|
|
|
|
/**
|
|
* @return string
|
|
*/
|
|
public function getPassword()
|
|
{
|
|
return $this->password;
|
|
}
|
|
|
|
/**
|
|
* @param string $username
|
|
*/
|
|
public function setUsername($username)
|
|
{
|
|
$this->username = $username;
|
|
}
|
|
|
|
/**
|
|
* @return string
|
|
*/
|
|
public function getUsername()
|
|
{
|
|
return $this->username;
|
|
}
|
|
|
|
|
|
|
|
|
|
} |