56 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			HTML
		
	
	
	
			
		
		
	
	
			56 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			HTML
		
	
	
	
| <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
 | |
| <html>
 | |
| <head>
 | |
|   <meta content="text/html; charset=ISO-8859-15"
 | |
|  http-equiv="content-type">
 | |
|   <title>ldap.inc</title>
 | |
|   <link rel="stylesheet" type="text/css" href="style/layout.css">
 | |
| </head>
 | |
| <body>
 | |
| <h1 style="text-align: center;">ldap.inc</h1>
 | |
| <br>
 | |
| <br>
 | |
| This library provides the access to the LDAP server and its content.<br>
 | |
| The <span style="font-weight: bold; font-style: italic;">$_SESSION['ldap']</span>
 | |
| object reconnects automatically to the LDAP server on every page load.<br>
 | |
| <br>
 | |
| <br>
 | |
| <h2>1. Server handle</h2>
 | |
| All PHP functions which access LDAP require a server handle as
 | |
| parameter. This is managed by ldap.inc.<br>
 | |
| You can access it with <span
 | |
|  style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->server</span>.<br>
 | |
| <br>
 | |
| <br>
 | |
| <h2>2. Object classes</h2>
 | |
| Account modules may want to check if the current LDAP server supports
 | |
| all required object classes.<br>
 | |
| <span style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->objectClasses
 | |
| </span>contains a list of object classes and their attributes which is
 | |
| read from the LDAP server.<br>
 | |
| <br>
 | |
| <br>
 | |
| <h2>3. En-/Decryption</h2>
 | |
| For security reasons sensitive data like user passwords should be
 | |
| encrypted before storing in session.<br>
 | |
| <span style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->encrypt(<string>)</span>
 | |
| encrypts a string and returns a binary object. This can be decrypted
 | |
| with <span style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->decrypt(<object>)</span><br>
 | |
| <br>
 | |
| Ldap.inc will take care for the crypotographic key and if Blowfish or
 | |
| MCrypt/AES is used.<br>
 | |
| <br>
 | |
| <br>
 | |
| <h2>4. Random values</h2>
 | |
| Ldap.inc contains a random integer value which is much more secure than
 | |
| calling <span style="font-style: italic;">mt_rand()</span>. The value
 | |
| changes on every page load and is accessible in <span
 | |
|  style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->rand</span><span
 | |
|  style="font-style: italic;">.</span><br>
 | |
| If you need multiple values you can get a new value by calling <span
 | |
|  style="font-weight: bold; font-style: italic;">$_SESSION['ldap']->new_rand()</span><span
 | |
|  style="font-style: italic;">.</span><br>
 | |
| <br>
 | |
| </body>
 | |
| </html>
 |