Authentication against ILIAS database. More...

Inheritance diagram for ilAuthContainerApache:

Collaboration diagram for ilAuthContainerApache:

Public Member Functions
	__construct ()
	Constructor. More...

Static Public Member Functions
static	forceCreation ($value)

Static Public Attributes
static	$force_creation = false

Protected Member Functions
	updateRequired ($a_username)
	Check if an update is required. More...

	handleLDAPDataSource ($a_auth, $ext_account, $settings)
	Handle ldap as data source. More...

Private Member Functions
	initLDAPAttributeToUser ()
	Init LDAP attribute mapping private. More...

Detailed Description

Authentication against ILIAS database.

Author: Stefan Meyer meyer.nosp@m.@lei.nosp@m.fos.c.nosp@m.om

Version: $Id$

Definition at line 12 of file class.ilAuthContainerApache.php.

Constructor & Destructor Documentation

◆ __construct()

ilAuthContainerApache::__construct ( )

Constructor.

Definition at line 22 of file class.ilAuthContainerApache.php.

         {
                 parent::__construct();
         }

Member Function Documentation

◆ forceCreation()

static ilAuthContainerApache::forceCreation ( $value )

static

Parameters

boolean $value

Definition at line 30 of file class.ilAuthContainerApache.php.

References $_GET, $_POST, $_SERVER, $_SESSION, $config, $ilDB, $ilSetting, $info, $query, ilObjUser\_checkExternalAuthAccount(), ilAuthModeDetermination\_getInstance(), array, AUTH_APACHE, AUTH_APACHE_FAILED, AUTH_LDAP, defined, ilLDAPServer\doConnectionCheck(), ilLDAPRoleAssignmentRules\getAssignmentsForCreation(), ilLoggerFactory\getLogger(), handleLDAPDataSource(), initLDAPAttributeToUser(), ilUtil\isLogin(), ilUtil\redirect(), ilLDAPRoleAssignmentRules\ROLE_ACTION_ASSIGN, time, and updateRequired().

         {
                 self::$force_creation = $value;
         }

Here is the call graph for this function:

◆ handleLDAPDataSource()

ilAuthContainerApache::handleLDAPDataSource	(	$a_auth,
		$ext_account,
		$settings
	)

protected

Handle ldap as data source.

Parameters

Auth	$auth
string	$ext_account

Definition at line 313 of file class.ilAuthContainerApache.php.

References $server, array, AUTH_RADIUS_NO_ILIAS_USER, ilLDAPServer\getInstanceByServerId(), ilLoggerFactory\getLogger(), ilUtil\redirect(), and ilLDAPUserSynchronisation\setExternalAccount().

Referenced by forceCreation().

         {
                 include_once './Services/LDAP/classes/class.ilLDAPServer.php';
                 $server = ilLDAPServer::getInstanceByServerId(
                         $settings->get('apache_ldap_sid')
                 );
 
                 ilLoggerFactory::getLogger('auth')->debug('Using ldap data source with server configuration: ' . $server->getName());
 
                 include_once './Services/LDAP/classes/class.ilLDAPUserSynchronisation.php';
                 $sync = new ilLDAPUserSynchronisation('ldap_'.$server->getServerId(), $server->getServerId());
                 $sync->setExternalAccount($ext_account);
                 $sync->setUserData(array());
                 $sync->forceCreation(self::$force_creation);
                 $sync->forceReadLdapData(true);
 
                 try {
                         $internal_account = $sync->sync();
                 }
                 catch(UnexpectedValueException $e) {
                         ilLoggerFactory::getLogger('auth')->info('Login failed with message: ' . $e->getMessage());
                         $a_auth->status = AUTH_WRONG_LOGIN;
                         $a_auth->logout();
                         return false;
                 }
                 catch(ilLDAPSynchronisationForbiddenException $e) {
                         // No syncronisation allowed => create Error
                         ilLoggerFactory::getLogger('auth')->info('Login failed with message: ' . $e->getMessage());
                         $a_auth->status = AUTH_RADIUS_NO_ILIAS_USER;
                         $a_auth->logout();
                         return false;
                 }
                 catch(ilLDAPAccountMigrationRequiredException $e) {
                         ilLoggerFactory::getLogger('auth')->debug('Starting account migration');
                         $a_auth->logout();
                         ilUtil::redirect('ilias.php?baseClass=ilStartUpGUI&cmdClass=ilstartupgui&cmd=showAccountMigration');
                 }
 
                 $a_auth->setAuth($internal_account);
                 return true;
         }

Here is the call graph for this function:

Here is the caller graph for this function:

◆ initLDAPAttributeToUser()

ilAuthContainerApache::initLDAPAttributeToUser ( )

private

Init LDAP attribute mapping private.

Definition at line 301 of file class.ilAuthContainerApache.php.

Referenced by forceCreation().

         {
                 include_once('Services/LDAP/classes/class.ilLDAPAttributeToUser.php');
                 $this->ldap_attr_to_user = new ilLDAPAttributeToUser($this->server);
         }

Here is the caller graph for this function:

◆ updateRequired()

ilAuthContainerApache::updateRequired ( $a_username )

protected

Check if an update is required.

Returns

Parameters

string $a_username

Definition at line 277 of file class.ilAuthContainerApache.php.

References ilObjUser\_checkExternalAuthAccount(), ilLDAPRoleAssignmentRule\hasRulesForUpdate(), and ilLDAPAttributeMapping\hasRulesForUpdate().

Referenced by forceCreation().

         {
                 if(!ilObjUser::_checkExternalAuthAccount("ldap_".$this->server->getServerId(), $a_username))
                 {
                         return true;
                 }
                 // Check attribute mapping on login
                 include_once './Services/LDAP/classes/class.ilLDAPAttributeMapping.php';
                 if(ilLDAPAttributeMapping::hasRulesForUpdate($this->server->getServerId()))
                 {
                         return true;
                 }
                 include_once './Services/LDAP/classes/class.ilLDAPRoleAssignmentRule.php';
                 if(ilLDAPRoleAssignmentRule::hasRulesForUpdate())
                 {
                         return true;
                 }
                 return false;
         }