class.ilAuthProviderRadius.php

Go to the documentation of this file.

<?php

/* Copyright (c) 1998-2010 ILIAS open source, Extended GPL, see docs/LICENSE */

include_once './Services/Authentication/classes/Provider/class.ilAuthProvider.php';
include_once './Services/Authentication/interfaces/interface.ilAuthProviderInterface.php';
include_once './Services/Authentication/interfaces/interface.ilAuthProviderAccountMigrationInterface.php';

class ilAuthProviderRadius extends ilAuthProvider implements ilAuthProviderInterface, ilAuthProviderAccountMigrationInterface
{
        const CONNECT_TIMEOUT = 3;
        const RETRIES = 1;
        
        private $settings = null;
        
        private $external_account = '';
        
        
        public function __construct(\ilAuthCredentials $credentials)
        {
                parent::__construct($credentials);
                
                include_once './Services/Radius/classes/class.ilRadiusSettings.php';
                $this->settings = ilRadiusSettings::_getInstance();
        }
        
        
        public function createNewAccount(\ilAuthStatus $status)
        {
                
        }

        public function doAuthentication(\ilAuthStatus $status)
        {
                $radius = radius_auth_open();
                
                foreach($this->settings->getServers() as $server)
                {
                        $this->getLogger()->debug('Using: ' . $server.':'. $this->settings->getPort());
                        radius_add_server(
                                $radius,
                                trim($server),
                                $this->settings->getPort(),
                                $this->settings->getSecret(),
                                self::CONNECT_TIMEOUT,
                                self::RETRIES
                        );
                }
                
                radius_create_request($radius, RADIUS_ACCESS_REQUEST);
                radius_put_attr($radius, RADIUS_USER_NAME, $this->getCredentials()->getUsername());
                radius_put_attr($radius, RADIUS_USER_PASSWORD, $this->getCredentials()->getPassword());

                $this->getLogger()->debug('username: ' . $this->getCredentials()->getUsername());

                $result = radius_send_request($radius);
                
                switch($result)
                {
                        case RADIUS_ACCESS_ACCEPT:
                                $this->getLogger()->info('Radius authentication successful.');
                                $status->setStatus(ilAuthStatus::STATUS_AUTHENTICATED);
                                
                                $local_login = ilObjUser::_checkExternalAuthAccount('radius',$this->getCredentials()->getUsername());
                                $status->setAuthenticatedUserId(ilObjUser::_lookupId($local_login));
                                return true;
                                
                        case RADIUS_ACCESS_REJECT:
                                $this->getLogger()->info('Radius authentication rejected with message: ' . radius_strerror($radius));
                                $this->handleAuthenticationFail($status, 'err_wrong_login');
                                return false;
                                
                        case RADIUS_ACCESS_CHALLENGE:
                                $this->getLogger()->info('Radius authentication failed (access challenge): ' . radius_strerror($radius));
                                $this->handleAuthenticationFail($status, 'err_wrong_login');
                                return false;
                                
                        default:
                                $this->getLogger()->error('Radius authentication failed with message: ' . radius_strerror($radius));
                                $this->handleAuthenticationFail($status, 'err_wrong_login');
                                return false;
                }
        }
        
        public function getExternalAccountName()
        {
                return $this->external_account;
        }

        public function getTriggerAuthMode()
        {
                return AUTH_RADIUS;
        }

        public function getUserAuthModeName()
        {
                return 'radius';
        }

        public function migrateAccount(ilAuthStatus $status)
        {
                
        }

}
?>