mirrors/easyappointments
1
0
Fork 1
mirror of https://github.com/alextselegidis/easyappointments.git synced 2024-11-10 10:02:33 +03:00
Code Issues Projects Releases Packages Wiki Activity

Set protocol configuration before creating a new LDAP binding

Browse source
This commit is contained in:
Alex Tselegidis 2024-06-01 15:47:12 +02:00
parent 08f8315313
commit 3a488c2238
1 changed files with 1 additions and 29 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
application/libraries/Ldap_client.php
View file

@ -38,34 +38,6 @@ class Ldap_client
$this->CI->load->library('accounts'); $this->CI->load->library('accounts');
} }
/**
* Validate the provided password with an LDAP hashed password.
*
* @param string $password
* @param string $hashed_password
*
* @return bool
*/
public function validate_password(string $password, string $hashed_password): bool
{
if (empty($hashed_password) || ($hashed_password[0] !== '{' && $password === $hashed_password)) {
return false;
}
if (str_starts_with($hashed_password, '{MD5}')) {
$encrypted_password = '{MD5}' . base64_encode(md5($password, true));
} elseif (str_starts_with($hashed_password, '{SHA1}')) {
$encrypted_password = '{SHA}' . base64_encode(sha1($password, true));
} elseif (str_starts_with($hashed_password, '{SSHA}')) {
$salt = substr(base64_decode(substr($hashed_password, 6)), 20);
$encrypted_password = '{SSHA}' . base64_encode(sha1($password . $salt, true) . $salt);
} else {
throw new RuntimeException('Unsupported password hash format');
}
return $hashed_password === $encrypted_password;
}
/** /**
* Try authenticating the user with LDAP * Try authenticating the user with LDAP
* *
@ -106,7 +78,7 @@ class Ldap_client
$ldap_port = (int) setting('ldap_port'); $ldap_port = (int) setting('ldap_port');
$connection = @ldap_connect($ldap_host, $ldap_port); $connection = @ldap_connect($ldap_host, $ldap_port);
@ldap_set_option($connection, LDAP_OPT_PROTOCOL_VERSION, 3);
$user_bind = @ldap_bind($connection, $user['ldap_dn'], $password); $user_bind = @ldap_bind($connection, $user['ldap_dn'], $password);
if ($user_bind) { if ($user_bind) {