Ldap.class.php

gehe zur Dokumentation dieser Datei

<?php
#
#  DaCMS Content Management System
#  Copyright (C) 2002 Jan Dankert, jandankert@jandankert.de
#
#  This program is free software; you can redistribute it and/or
#  modify it under the terms of the GNU General Public License
#  as published by the Free Software Foundation; either version 2
#  of the License, or (at your option) any later version.
#
#  This program is distributed in the hope that it will be useful,
#  but WITHOUT ANY WARRANTY; without even the implied warranty of
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#  GNU General Public License for more details.
#
#  You should have received a copy of the GNU General Public License
#  along with this program; if not, write to the Free Software
#  Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
#

class Ldap
{
     var $connection;
     var $timeout;
     var $aliases;
     
     
     function Ldap()
     {
          global $conf;
          
          $this->timeout = intval($conf['ldap']['search']['timeout']);

          if   ( $conf['ldap']['search']['aliases'] )
               $this->aliases = LDAP_DEREF_ALWAYS;
          else
               $this->aliases = LDAP_DEREF_NEVER;
     }
     
     
     
     function connect()
     {
          global $conf;
          
          $ldapHost = $conf['ldap']['host'];
          $ldapPort = $conf['ldap']['port'];

          // Verbindung zum LDAP-Server herstellen
          $this->connection = @ldap_connect( $ldapHost,$ldapPort );
          
          // Protokollversion setzen.
          $j = ldap_set_option( $this->connection, LDAP_OPT_PROTOCOL_VERSION,intval($conf['ldap']['protocol']) );
          if   ( ! $j )
               die( 'LDAP error while setting protocol version'.ldap_errno().'/'.ldap_error().')' );
          
          // siehe http://bugs.php.net/bug.php?id=15637
          // Unter bestimmten Bedingungen wird trotz nicht erreichbarem LDAP-Server eine PHP-Resource
          // zurueck gegeben. Dann erscheint zwar keine Fehlermeldung, aber zumindestens misslingt
          // der nachfolgende Bind-Befehl.
          if   ( !is_resource($this->connection) || $this->connection === false )
          {
               Logger::error( "connect to ldap server '$ldapHost:$ldapPort' failed" );
               // Abbruch, wenn LDAP-Server nicht erreichbar
               die( "Connection failed to $ldapHost:$ldapPort (".ldap_errno().'/'.ldap_error().'). Please contact your administrator.' );
          }
     }    
     
     
     
     function bind( $user,$pw )
     {
          return @ldap_bind( $this->connection,$user,$pw);
     }
     
     
     
     function bindAnonymous()
     {
          return @ldap_bind( $this->connection );
     }
     
     
     
     function unbind()
     {
          ldap_unbind( $this->connection );
     }
     
     
     
     function searchUser( $username )
     {
          global $conf;
          
          $techUser = $conf['ldap']['search']['user'];
          $techPass = $conf['ldap']['search']['password'];
          
          if   ( $conf['ldap']['search']['anonymous'] )
               $this->bindAnonymous();
          else
               $this->bind( $techUser, $techPass );
                                          
          $dn      = $conf['ldap']['search']['basedn'];
          $filter  = $conf['ldap']['search']['filter'];
          $filter  = str_replace('{user}', $username, $filter);
               
          
          $s = ldap_search( $this->connection,$dn,$filter,array(),0,1,$this->timeout,$this->aliases );
          $dn = ldap_get_dn($this->connection, ldap_first_entry($this->connection,$s) );
          
          return $dn;
     }



     function searchAttribute( $filter,$attr )
     {
          global $conf;
          
          $timeout = intval($conf['ldap']['search']['timeout']);

          if   ( $conf['ldap']['search']['aliases'] )
               $aliases = LDAP_DEREF_ALWAYS;
          else
               $aliases = LDAP_DEREF_NEVER;
               
          
          $base_dn = $conf['ldap']['search']['basedn'];
          $s = ldap_search( $this->connection,$base_dn,$filter,array(),0,0,$this->timeout,$this->aliases );
          $ergebnisse = ldap_get_entries($this->connection,$s);
          
          $liste = array();
//        Html::debug($ergebnisse);
          for( $i=0; $i<=$ergebnisse['count']-1; $i++ )
               $liste[] = $ergebnisse[$i][$attr][0];

          return $liste;
     }
     
     
     
     function close()
     {
          // Verbindung zum LDAP-Server brav beenden
          ldap_close( $this->connection );
     }    
}

?>