Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
D
doorkey
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Container Registry
Model registry
Operate
Environments
Monitor
Incidents
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
sucssite
doorkey
Commits
d26c7a0a
Commit
d26c7a0a
authored
6 years ago
by
Imran Hussain
Browse files
Options
Downloads
Patches
Plain Diff
add my ldap auth php to the project
parent
113face8
No related branches found
No related tags found
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
ldap-auth.php
+105
-0
105 additions, 0 deletions
ldap-auth.php
with
105 additions
and
0 deletions
ldap-auth.php
0 → 100644
+
105
−
0
View file @
d26c7a0a
<?php
/*
Written by Imran Hussain ~imranh
Used to auth people, will check SUCS then the uni ldap, will only check
students on the uni ldap.
will return "sucs" if the username/password passed is a sucs member
will return "uni" if the user/pass passed has a student swan uni account
will return "nope" if the user/pass passed is inavlid
Example usage:
include_once("ldap-auth.php");
isAuthd = ldapAuth("usaername", "password");
if (isAuthd == "sucs"){
//do stuff for sucs auth
}elseif (isAuthd == "uni"){
//do stuff for uni auth
}else{
//do stuff for not authd peeps
}
*/
// we don't care about warnings, we write our own
error_reporting
(
E_ERROR
|
E_PARSE
);
function
ldapAuth
(
$username
,
$password
)
{
if
(
$username
!=
""
&&
$password
!=
""
)
{
// people like to use emails to login so lets detect and strip
if
(
filter_var
(
$username
,
FILTER_VALIDATE_EMAIL
))
{
//valid email, lets strip
// split the email into a string array "@" as a delim
$s
=
explode
(
"@"
,
$username
);
// remove the last element (domain)
array_pop
(
$s
);
// put the array back togther using "@" as a seperator
$username
=
implode
(
"@"
,
$s
);
}
// ldap servers
$sucsLDAPServer
=
'silver.sucs.swan.ac.uk'
;
$lisLDAPServer
=
'ccs-suld1.swan.ac.uk'
;
// lis auth stuffs
$lisUsernameOu
=
substr
(
$username
,
-
1
);
$lisOtherOu
=
"Moved"
;
// how to bind
$sucsBindDn
=
"uid=
$username
,ou=People,dc=sucs,dc=org"
;
$lisBindDn1
=
"cn=
$username
,ou=
$lisUsernameOu
,ou=Students,ou=SWANSEA,o=SWANUNI"
;
$lisBindDn2
=
"cn=
$username
,ou=
$lisOtherOu
,ou=Students,ou=SWANSEA,o=SWANUNI"
;
// Main auth
// Try and connect to silver
$ldapconnSUCS
=
ldap_connect
(
$sucsLDAPServer
)
or
die
(
"Could not connect to SUCS LDAP server."
);
if
(
$ldapconnSUCS
)
{
//echo "Connected to $sucsLDAPServer <br>";
// try and bind to sucs ldap
$ldapbindSUCS
=
ldap_bind
(
$ldapconnSUCS
,
$sucsBindDn
,
$password
);
if
(
$ldapbindSUCS
)
{
//echo "Auth'd as $username using SUCS LDAP<br>";
return
"sucs"
;
// turns out they didn't give us valid sucs creds, lets try lis now
}
else
{
// try and connect to the lis ldap server
$ldapconnLIS
=
ldap_connect
(
$lisLDAPServer
)
or
die
(
"Could not connect to uni LDAP server."
);
//echo "Connected to $lisLDAPServer <br>";
// lets try and bind to the uni ldap
$ldapbindLIS1
=
ldap_bind
(
$ldapconnLIS
,
$lisBindDn1
,
$password
);
if
(
$ldapbindLIS1
)
{
//echo "Auth'd as $username using uni LDAP using ou=$lisUsernameOu<br>";
return
"uni"
;
}
else
{
$ldapbindLIS2
=
ldap_bind
(
$ldapconnLIS
,
$lisBindDn2
,
$password
);
if
(
$ldapbindLIS2
)
{
//echo "Auth'd as $username using uni LDAP using ou=moved<br>";
return
"uni"
;
// shit, couldn't bind to anything
}
else
{
//exit("Invalid Username or Password");
return
"nope"
;
}
}
}
}
}
else
{
return
"nope"
;
}
}
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment