##// END OF EJS Templates
jro_apps » redmine
RSS
Adds an application setting to choose whether or not subprojects issues should be displayed by default on the issue list, calendar and gantt (r1178). Default is true....
Adds an application setting to choose whether or not subprojects issues should be displayed by default on the issue list, calendar and gantt (r1178). Default is true. git-svn-id: http://redmine.rubyforge.org/svn/trunk@1198 e93f8b46-1217-0410-a6f0-8f06a7374b81
Jean-Philippe Lang - - Load All Authors

File last commit:

r1180:a70737ad592c
r1184:533994e5ea00
Show More
auth_source_ldap.rb
84 lines | 3.2 KiB | text/x-ruby | RubyLexer
/ app / models / auth_source_ldap.rb
History | Source | Raw |Copy content |Copy permalink
Jean-Philippe Lang
added svn:eol-style native property on /app files...
 r330 # redMine - project management software
# Copyright (C) 2006 Jean-Philippe Lang
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
require 'net/ldap'
require 'iconv'
class AuthSourceLdap < AuthSource
validates_presence_of :host, :port, :attr_login
Jean-Philippe Lang
Firstname, lastname and email LDAP attributes are now required if "on-the-fly register" is checked....
 r628 validates_presence_of :attr_firstname, :attr_lastname, :attr_mail, :if => Proc.new { |a| a.onthefly_register? }
Jean-Philippe Lang
added svn:eol-style native property on /app files...
 r330 def after_initialize
self.port = 389 if self.port == 0
end
def authenticate(login, password)
Jean-Philippe Lang
Fixed: LDAP authentication without password may be possible (#714)....
 r1155 return nil if login.blank? || password.blank?
Jean-Philippe Lang
added svn:eol-style native property on /app files...
 r330 attrs = []
# get user's DN
ldap_con = initialize_ldap_con(self.account, self.account_password)
login_filter = Net::LDAP::Filter.eq( self.attr_login, login )
object_filter = Net::LDAP::Filter.eq( "objectClass", "*" )
dn = String.new
ldap_con.search( :base => self.base_dn,
:filter => object_filter & login_filter,
Jean-Philippe Lang
LDAP authentication: only ask for the user's DN if on-the-fly registration is disabled...
 r869 # only ask for the DN if on-the-fly registration is disabled
:attributes=> (onthefly_register? ? ['dn', self.attr_firstname, self.attr_lastname, self.attr_mail] : ['dn'])) do |entry|
Jean-Philippe Lang
added svn:eol-style native property on /app files...
 r330 dn = entry.dn
attrs = [:firstname => AuthSourceLdap.get_attr(entry, self.attr_firstname),
:lastname => AuthSourceLdap.get_attr(entry, self.attr_lastname),
:mail => AuthSourceLdap.get_attr(entry, self.attr_mail),
Jean-Philippe Lang
Fixed: LDAP authentication crashes if one of the LDAP attributes name is left blank on the LDAP setup screen....
 r841 :auth_source_id => self.id ] if onthefly_register?
Jean-Philippe Lang
added svn:eol-style native property on /app files...
 r330 end
return nil if dn.empty?
logger.debug "DN found for #{login}: #{dn}" if logger && logger.debug?
# authenticate user
ldap_con = initialize_ldap_con(dn, password)
return nil unless ldap_con.bind
# return user's attributes
logger.debug "Authentication successful for '#{login}'" if logger && logger.debug?
attrs
rescue Net::LDAP::LdapError => text
raise "LdapError: " + text
end
# test the connection to the LDAP
def test_connection
ldap_con = initialize_ldap_con(self.account, self.account_password)
ldap_con.open { }
rescue Net::LDAP::LdapError => text
raise "LdapError: " + text
end
def auth_method_name
"LDAP"
end
private
def initialize_ldap_con(ldap_user, ldap_password)
Jean-Philippe Lang
Fixed "LdapError: invalid binding information" when no username/password are set on the LDAP account (#764)....
 r1180 options = { :host => self.host,
:port => self.port,
:encryption => (self.tls ? :simple_tls : nil)
}
options.merge(:auth => { :method => :simple, :username => ldap_user, :password => ldap_password }) unless ldap_user.blank? && ldap_password.blank?
Net::LDAP.new options
Jean-Philippe Lang
added svn:eol-style native property on /app files...
 r330 end
def self.get_attr(entry, attr_name)
entry[attr_name].is_a?(Array) ? entry[attr_name].first : entry[attr_name]
Jean-Philippe Lang
0.3 unstable...
 r10 end
end