Add basic LDAP support.
This commit is contained in:
parent
c3250e58fc
commit
5946118e6d
|
@ -17,24 +17,48 @@
|
||||||
require_once '../config/config-default.php';
|
require_once '../config/config-default.php';
|
||||||
require_once '../lib/database.php';
|
require_once '../lib/database.php';
|
||||||
$input = json_decode(file_get_contents('php://input'));
|
$input = json_decode(file_get_contents('php://input'));
|
||||||
$stmt = $db->prepare("SELECT id,password,type FROM users WHERE name=:name LIMIT 1");
|
if ($config['auth_type'] == 'db') {
|
||||||
$stmt->bindValue(':name', $input->user, PDO::PARAM_STR);
|
$stmt = $db->prepare('SELECT id,password,type FROM users WHERE name=:name LIMIT 1');
|
||||||
$stmt->execute();
|
$stmt->bindValue(':name', $input->user, PDO::PARAM_STR);
|
||||||
$stmt->bindColumn('id', $id);
|
$stmt->execute();
|
||||||
$stmt->bindColumn('password', $password);
|
$stmt->bindColumn('id', $id);
|
||||||
$stmt->bindColumn('type', $type);
|
$stmt->bindColumn('password', $password);
|
||||||
$stmt->fetch(PDO::FETCH_BOUND);
|
$stmt->bindColumn('type', $type);
|
||||||
if (password_verify($input->password, $password)) {
|
$stmt->fetch(PDO::FETCH_BOUND);
|
||||||
$retval['status'] = "success";
|
if (password_verify($input->password, $password)) {
|
||||||
session_start();
|
$retval['status'] = 'success';
|
||||||
$_SESSION['id'] = $id;
|
session_start();
|
||||||
$_SESSION['type'] = $type;
|
$_SESSION['id'] = $id;
|
||||||
$randomSecret = base64_encode(openssl_random_pseudo_bytes(32));
|
$_SESSION['type'] = $type;
|
||||||
$_SESSION['secret'] = $randomSecret;
|
$randomSecret = base64_encode(openssl_random_pseudo_bytes(32));
|
||||||
setcookie("authSecret", $randomSecret, 0, "/", "", false, true);
|
$_SESSION['secret'] = $randomSecret;
|
||||||
$csrfToken = base64_encode(openssl_random_pseudo_bytes(32));
|
setcookie('authSecret', $randomSecret, 0, '/', '', false, true);
|
||||||
$_SESSION['csrfToken'] = $csrfToken;
|
$csrfToken = base64_encode(openssl_random_pseudo_bytes(32));
|
||||||
|
$_SESSION['csrfToken'] = $csrfToken;
|
||||||
|
} else {
|
||||||
|
$retval['status'] = 'fail';
|
||||||
|
}
|
||||||
|
} elseif ($config['auth_type'] == 'ldap') {
|
||||||
|
$ldap = @ldap_connect($config['ldap_uri']);
|
||||||
|
@ldap_set_option($ldap, LDAP_OPT_PROTOCOL_VERSION, 3);
|
||||||
|
@ldap_bind($ldap, $config['ldap_bind_dn'], $config['ldap_bind_pw']);
|
||||||
|
$filter = str_replace('%user%', $input->user, $config['ldap_search']);
|
||||||
|
$result = @ldap_search($ldap, $config['ldap_base_dn'], $filter, array('dn'));
|
||||||
|
$dn = @ldap_get_dn($ldap, ldap_first_entry($ldap, $result));
|
||||||
|
if (@ldap_bind($ldap, $dn, $input->password)) {
|
||||||
|
$retval['status'] = 'success';
|
||||||
|
session_start();
|
||||||
|
$_SESSION['id'] = 0;
|
||||||
|
$_SESSION['type'] = 'admin';
|
||||||
|
$randomSecret = base64_encode(openssl_random_pseudo_bytes(32));
|
||||||
|
$_SESSION['secret'] = $randomSecret;
|
||||||
|
setcookie('authSecret', $randomSecret, 0, '/', '', false, true);
|
||||||
|
$csrfToken = base64_encode(openssl_random_pseudo_bytes(32));
|
||||||
|
$_SESSION['csrfToken'] = $csrfToken;
|
||||||
|
} else {
|
||||||
|
$retval['status'] = 'fail';
|
||||||
|
}
|
||||||
} else {
|
} else {
|
||||||
$retval['status'] = "fail";
|
$retval['status'] = 'fail';
|
||||||
}
|
}
|
||||||
echo json_encode($retval);
|
echo json_encode($retval);
|
||||||
|
|
|
@ -23,6 +23,9 @@ $config['db_password'] = "";
|
||||||
$config['db_port'] = 3306;
|
$config['db_port'] = 3306;
|
||||||
$config['db_name'] = "pdnsmanager";
|
$config['db_name'] = "pdnsmanager";
|
||||||
|
|
||||||
|
// Authentication source
|
||||||
|
$config['auth_type'] = 'db';
|
||||||
|
|
||||||
//Remote update
|
//Remote update
|
||||||
$config['nonce_lifetime'] = 15;
|
$config['nonce_lifetime'] = 15;
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue