mirror of
https://github.com/operasoftware/ssh-key-authority.git
synced 2025-12-30 09:20:19 -06:00
631e2b6ba6
Patch taken from DNS UI fix by maltris <m@maltris.org>: https://github.com/operasoftware/dns-ui/commit/1d8461c
89 lines
2.7 KiB
PHP
89 lines
2.7 KiB
PHP
<?php
|
|
##
|
|
## Copyright 2013-2017 Opera Software AS
|
|
##
|
|
## Licensed under the Apache License, Version 2.0 (the "License");
|
|
## you may not use this file except in compliance with the License.
|
|
## You may obtain a copy of the License at
|
|
##
|
|
## http://www.apache.org/licenses/LICENSE-2.0
|
|
##
|
|
## Unless required by applicable law or agreed to in writing, software
|
|
## distributed under the License is distributed on an "AS IS" BASIS,
|
|
## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
## See the License for the specific language governing permissions and
|
|
## limitations under the License.
|
|
##
|
|
|
|
class LDAP {
|
|
private $conn;
|
|
private $host;
|
|
private $starttls;
|
|
private $bind_dn;
|
|
private $bind_password;
|
|
|
|
public function __construct($host, $starttls, $bind_dn, $bind_password) {
|
|
$this->conn = null;
|
|
$this->host = $host;
|
|
$this->starttls = $starttls;
|
|
$this->bind_dn = $bind_dn;
|
|
$this->bind_password = $bind_password;
|
|
}
|
|
|
|
private function connect() {
|
|
$this->conn = ldap_connect($this->host);
|
|
if($this->conn === false) throw new LDAPConnectionFailureException('Invalid LDAP connection settings');
|
|
if($this->starttls) {
|
|
ldap_set_option($this->conn, LDAP_OPT_PROTOCOL_VERSION, 3);
|
|
if(!ldap_start_tls($this->conn)) throw new LDAPConnectionFailureException('Could not initiate TLS connection to LDAP server');
|
|
}
|
|
if(!empty($this->bind_dn)) {
|
|
if(!ldap_bind($this->conn, $this->bind_dn, $this->bind_password)) throw new LDAPConnectionFailureException('Could not bind to LDAP server');
|
|
}
|
|
}
|
|
|
|
public function search($basedn, $filter, $fields = array(), $sort = array()) {
|
|
if(is_null($this->conn)) $this->connect();
|
|
if(empty($fields)) $r = @ldap_search($this->conn, $basedn, $filter);
|
|
else $r = @ldap_search($this->conn, $basedn, $filter, $fields);
|
|
$sort = array_reverse($sort);
|
|
foreach($sort as $field) {
|
|
@ldap_sort($this->conn, $r, $field);
|
|
}
|
|
if($r) {
|
|
// Fetch entries
|
|
$result = @ldap_get_entries($this->conn, $r);
|
|
unset($result['count']);
|
|
$items = array();
|
|
foreach($result as $item) {
|
|
unset($item['count']);
|
|
$itemResult = array();
|
|
foreach($item as $key => $values) {
|
|
if(!is_int($key)) {
|
|
if(is_array($values)) {
|
|
unset($values['count']);
|
|
if(count($values) == 1) $values = $values[0];
|
|
}
|
|
$itemResult[$key] = $values;
|
|
}
|
|
}
|
|
$items[] = $itemResult;
|
|
}
|
|
return $items;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
public static function escape($str = '') {
|
|
$metaChars = array("\\00", "\\", "(", ")", "*");
|
|
$quotedMetaChars = array();
|
|
foreach($metaChars as $key => $value) {
|
|
$quotedMetaChars[$key] = '\\'. dechex(ord($value));
|
|
}
|
|
$str = str_replace($metaChars, $quotedMetaChars, $str);
|
|
return $str;
|
|
}
|
|
}
|
|
|
|
class LDAPConnectionFailureException extends RuntimeException {}
|