dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update ldap.php

This commit is contained in:
FusionPBX 2016-10-31 11:01:52 -06:00 committed by GitHub
parent a8efb3b419
commit c212bba3b8
1 changed files with 23 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
core/authentication/resources/classes/plugins/ldap.php
View File

@ -46,7 +46,18 @@ class plugin_ldap {
//ldap_set_option($connect, LDAP_OPT_NETWORK_TIMEOUT, 10); //ldap_set_option($connect, LDAP_OPT_NETWORK_TIMEOUT, 10);
ldap_set_option($connect, LDAP_OPT_PROTOCOL_VERSION, 3); ldap_set_option($connect, LDAP_OPT_PROTOCOL_VERSION, 3);
//ldap_set_option(NULL, LDAP_OPT_DEBUG_LEVEL, 7); //ldap_set_option(NULL, LDAP_OPT_DEBUG_LEVEL, 7);
$bind_dn = $_SESSION["ldap"]["user_attribute"]["text"]."=".$this->username.",".$_SESSION["ldap"]["user_dn"]["text"];
//set the default for $user_authorized to false
$user_authorized = false;
//provide backwards compatability
if (strlen($_SESSION["ldap"]["user_dn"]["text"]) > 0) {
$_SESSION["ldap"]["user_dn"][] = $_SESSION["ldap"]["user_dn"]["text"];
}
//check all user_dn in the array
foreach ($_SESSION["ldap"]["user_dn"] as $user_dn) {
$bind_dn = $_SESSION["ldap"]["user_attribute"]["text"]."=".$this->username.",".$user_dn;
$bind_pw = $this->password; $bind_pw = $this->password;
//Note: As of 4/16, the call below will fail randomly. PHP debug reports ldap_bind //Note: As of 4/16, the call below will fail randomly. PHP debug reports ldap_bind
//called below with all arguments '*uninitialized*'. However, the debugger //called below with all arguments '*uninitialized*'. However, the debugger
@ -54,10 +65,12 @@ class plugin_ldap {
$bind = ldap_bind($connect, $bind_dn, $bind_pw); $bind = ldap_bind($connect, $bind_dn, $bind_pw);
if ($bind) { if ($bind) {
$user_authorized = true; $user_authorized = true;
break;
} }
else { else {
$user_authorized = false; $user_authorized = false;
} }
}
//check to see if the user exists //check to see if the user exists
if ($user_authorized) { if ($user_authorized) {