56 lines
2.2 KiB
HTML
56 lines
2.2 KiB
HTML
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||
|
|
<html>
|
||
|
|
<head>
|
||
|
|
<meta content="text/html; charset=ISO-8859-15"
|
||
|
|
http-equiv="content-type">
|
||
|
|
<title>ldap.inc</title>
|
||
|
|
<link rel="stylesheet" type="text/css" href="style/layout.css">
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<h1 style="text-align: center;">ldap.inc</h1>
|
||
|
|
<br>
|
||
|
|
<br>
|
||
|
|
This library provides the access to the LDAP server and its content.<br>
|
||
|
|
The <span style="font-weight: bold; font-style: italic;">$_SESSION['ldap']</span>
|
||
|
|
object reconnects automatically to the LDAP server on every page load.<br>
|
||
|
|
<br>
|
||
|
|
<br>
|
||
|
|
<h2>1. Server handle</h2>
|
||
|
|
All PHP functions which access LDAP require a server handle as
|
||
|
|
parameter. This is managed by ldap.inc.<br>
|
||
|
|
You can access it with <span
|
||
|
|
style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->server</span>.<br>
|
||
|
|
<br>
|
||
|
|
<br>
|
||
|
|
<h2>2. Object classes</h2>
|
||
|
|
Account modules may want to check if the current LDAP server supports
|
||
|
|
all required object classes.<br>
|
||
|
|
<span style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->objectClasses
|
||
|
|
</span>contains a list of object classes and their attributes which is
|
||
|
|
read from the LDAP server.<br>
|
||
|
|
<br>
|
||
|
|
<br>
|
||
|
|
<h2>3. En-/Decryption</h2>
|
||
|
|
For security reasons sensitive data like user passwords should be
|
||
|
|
encrypted before storing in session.<br>
|
||
|
|
<span style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->encrypt(<string>)</span>
|
||
|
|
encrypts a string and returns a binary object. This can be decrypted
|
||
|
|
with <span style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->decrypt(<object>)</span><br>
|
||
|
|
<br>
|
||
|
|
Ldap.inc will take care for the crypotographic key and if Blowfish or
|
||
|
|
MCrypt/AES is used.<br>
|
||
|
|
<br>
|
||
|
|
<br>
|
||
|
|
<h2>4. Random values</h2>
|
||
|
|
Ldap.inc contains a random integer value which is much more secure than
|
||
|
|
calling <span style="font-style: italic;">mt_rand()</span>. The value
|
||
|
|
changes on every page load and is accessible in <span
|
||
|
|
style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->rand</span><span
|
||
|
|
style="font-style: italic;">.</span><br>
|
||
|
|
If you need multiple values you can get a new value by calling <span
|
||
|
|
style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->new_rand()</span><span
|
||
|
|
style="font-style: italic;">.</span><br>
|
||
|
|
<br>
|
||
|
|
</body>
|
||
|
|
</html>
|