94 lines
2.9 KiB
PHP
94 lines
2.9 KiB
PHP
<?
|
|
/*
|
|
$Id$
|
|
|
|
This code is part of LDAP Account Manager (http://www.sourceforge.net/projects/lam)
|
|
Copyright (C) 2003 Michael Duergner
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
|
|
LDAP Account Manager checking login data.
|
|
*/
|
|
|
|
include_once("../config/config.php"); // Include config.php which provides Config class
|
|
|
|
// Get session save path
|
|
$path = getcwd();
|
|
$path = explode("/", substr($path,1));
|
|
for($i = 0; $i < (count($path) - 1); $i++)
|
|
{
|
|
$session_save_path .= "/" . $path[$i];
|
|
}
|
|
$session_save_path .= "/sess";
|
|
|
|
session_save_path($session_save_path); // Set session save path
|
|
@session_start(); // Start LDAP Account Manager session
|
|
// generate 256 bit key and initialization vector for user/passwd-encryption
|
|
$key = mcrypt_create_iv(32, MCRYPT_DEV_RANDOM);
|
|
$iv = mcrypt_create_iv(32, MCRYPT_DEV_RANDOM);
|
|
|
|
// save both in cookie
|
|
setcookie("Key", base64_encode($key));
|
|
setcookie("IV", base64_encode($iv));
|
|
|
|
// checking if the submitted username/password is correct.
|
|
if($action == "checklogin")
|
|
{
|
|
include_once("../lib/ldap.php"); // Include ldap.php which provides Ldap class
|
|
|
|
$ldap = new Ldap($config); //$config); // Create new Ldap object
|
|
$result = $ldap->connect($username,$passwd); // Connect to LDAP server for verifing username/password
|
|
if($result == True) // Username/password correct. Do some configuration and load main frame.
|
|
{
|
|
// setting language
|
|
$language = explode(":", $language);
|
|
putenv("LANG=" . $language[1]);
|
|
setlocale(LC_ALL, $language[0]);
|
|
bindtextdomain("lam", "../locale");
|
|
textdomain("lam");
|
|
|
|
include("./main.php"); // Load main frame
|
|
|
|
session_register("ldap"); // Register $ldap object in session
|
|
session_register("language"); // Register $language in session
|
|
}
|
|
else
|
|
{
|
|
if($ldap->server)
|
|
{
|
|
$error_message = "Wrong Password/Username combination. Try again.";
|
|
include("./login.inc"); // Username/password invalid. Return to login page.
|
|
}
|
|
else
|
|
{
|
|
$error_message = "Cannot connect to specified LDAP-Server. Try again.";
|
|
include("./login.inc"); // Server not reachable. Return to login page.
|
|
}
|
|
}
|
|
}
|
|
// Load login page
|
|
else
|
|
{
|
|
session_register("config"); // Register $config object in session
|
|
|
|
include_once("../lib/ldap.php"); // Includ ldap.php which provides Ldap class
|
|
|
|
$config = new Config; // Create new Config object
|
|
|
|
include("./login.inc"); // Load login page
|
|
}
|
|
?>
|