2018-09-25 07:30:50 -04:00
|
|
|
<?php namespace BookStack\Auth\Access;
|
2016-01-15 18:21:47 -05:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Class Ldap
|
|
|
|
* An object-orientated thin abstraction wrapper for common PHP LDAP functions.
|
|
|
|
* Allows the standard LDAP functions to be mocked for testing.
|
|
|
|
*/
|
|
|
|
class Ldap
|
|
|
|
{
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Connect to a LDAP server.
|
|
|
|
* @param string $hostName
|
|
|
|
* @param int $port
|
|
|
|
* @return resource
|
|
|
|
*/
|
|
|
|
public function connect($hostName, $port)
|
|
|
|
{
|
|
|
|
return ldap_connect($hostName, $port);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Set the value of a LDAP option for the given connection.
|
|
|
|
* @param resource $ldapConnection
|
|
|
|
* @param int $option
|
|
|
|
* @param mixed $value
|
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
public function setOption($ldapConnection, $option, $value)
|
|
|
|
{
|
|
|
|
return ldap_set_option($ldapConnection, $option, $value);
|
|
|
|
}
|
|
|
|
|
2021-02-07 15:00:04 -05:00
|
|
|
/**
|
|
|
|
* Start TLS on the given LDAP connection.
|
|
|
|
*/
|
|
|
|
public function startTls($ldapConnection): bool
|
|
|
|
{
|
|
|
|
return ldap_start_tls($ldapConnection);
|
|
|
|
}
|
|
|
|
|
2016-05-02 06:38:07 -04:00
|
|
|
/**
|
|
|
|
* Set the version number for the given ldap connection.
|
|
|
|
* @param $ldapConnection
|
|
|
|
* @param $version
|
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
public function setVersion($ldapConnection, $version)
|
|
|
|
{
|
|
|
|
return $this->setOption($ldapConnection, LDAP_OPT_PROTOCOL_VERSION, $version);
|
|
|
|
}
|
|
|
|
|
2016-01-15 18:21:47 -05:00
|
|
|
/**
|
|
|
|
* Search LDAP tree using the provided filter.
|
|
|
|
* @param resource $ldapConnection
|
|
|
|
* @param string $baseDn
|
|
|
|
* @param string $filter
|
|
|
|
* @param array|null $attributes
|
|
|
|
* @return resource
|
|
|
|
*/
|
|
|
|
public function search($ldapConnection, $baseDn, $filter, array $attributes = null)
|
|
|
|
{
|
|
|
|
return ldap_search($ldapConnection, $baseDn, $filter, $attributes);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Get entries from an ldap search result.
|
|
|
|
* @param resource $ldapConnection
|
|
|
|
* @param resource $ldapSearchResult
|
|
|
|
* @return array
|
|
|
|
*/
|
|
|
|
public function getEntries($ldapConnection, $ldapSearchResult)
|
|
|
|
{
|
|
|
|
return ldap_get_entries($ldapConnection, $ldapSearchResult);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Search and get entries immediately.
|
|
|
|
* @param resource $ldapConnection
|
|
|
|
* @param string $baseDn
|
|
|
|
* @param string $filter
|
|
|
|
* @param array|null $attributes
|
|
|
|
* @return resource
|
|
|
|
*/
|
|
|
|
public function searchAndGetEntries($ldapConnection, $baseDn, $filter, array $attributes = null)
|
|
|
|
{
|
|
|
|
$search = $this->search($ldapConnection, $baseDn, $filter, $attributes);
|
|
|
|
return $this->getEntries($ldapConnection, $search);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Bind to LDAP directory.
|
|
|
|
* @param resource $ldapConnection
|
|
|
|
* @param string $bindRdn
|
|
|
|
* @param string $bindPassword
|
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
public function bind($ldapConnection, $bindRdn = null, $bindPassword = null)
|
|
|
|
{
|
|
|
|
return ldap_bind($ldapConnection, $bindRdn, $bindPassword);
|
|
|
|
}
|
2018-12-20 15:04:09 -05:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Explode a LDAP dn string into an array of components.
|
|
|
|
* @param string $dn
|
|
|
|
* @param int $withAttrib
|
|
|
|
* @return array
|
|
|
|
*/
|
|
|
|
public function explodeDn(string $dn, int $withAttrib)
|
|
|
|
{
|
|
|
|
return ldap_explode_dn($dn, $withAttrib);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Escape a string for use in an LDAP filter.
|
|
|
|
* @param string $value
|
|
|
|
* @param string $ignore
|
|
|
|
* @param int $flags
|
|
|
|
* @return string
|
|
|
|
*/
|
|
|
|
public function escape(string $value, string $ignore = "", int $flags = 0)
|
|
|
|
{
|
|
|
|
return ldap_escape($value, $ignore, $flags);
|
|
|
|
}
|
2016-11-15 05:10:12 -05:00
|
|
|
}
|