Authentication against ILIAS database. More...

Inheritance diagram for ilAuthContainerApache:

Collaboration diagram for ilAuthContainerApache:

Public Member Functions
	__construct ()
	Constructor. More...

Static Public Member Functions
static	forceCreation ($value)

Static Public Attributes
static	$force_creation = false

Protected Member Functions
	updateRequired ($a_username)
	Check if an update is required. More...

	handleLDAPDataSource ($a_auth, $ext_account, $settings)
	Handle ldap as data source. More...

Private Member Functions
	initLDAPAttributeToUser ()
	Init LDAP attribute mapping private. More...

Detailed Description

Authentication against ILIAS database.

Author: Stefan Meyer meyer.nosp@m.@lei.nosp@m.fos.c.nosp@m.om

Version: $Id$

Definition at line 12 of file class.ilAuthContainerApache.php.

Constructor & Destructor Documentation

◆ __construct()

ilAuthContainerApache::__construct ( )

Constructor.

Definition at line 22 of file class.ilAuthContainerApache.php.

     {
         parent::__construct();
     }

Member Function Documentation

◆ forceCreation()

static ilAuthContainerApache::forceCreation ( $value )

static

Parameters

boolean $value

Definition at line 30 of file class.ilAuthContainerApache.php.

References $_GET, $_POST, $_SERVER, $_SESSION, $config, $ilDB, $ilSetting, $info, $key, $list, $password, $query, ilObjUser\_checkExternalAuthAccount(), ilAuthModeDetermination\_getInstance(), array, AUTH_APACHE, AUTH_APACHE_FAILED, AUTH_LDAP, defined, ilLDAPServer\doConnectionCheck(), ilLDAPRoleAssignmentRules\getAssignmentsForCreation(), ilLoggerFactory\getLogger(), handleLDAPDataSource(), initLDAPAttributeToUser(), ilUtil\isLogin(), ilUtil\redirect(), ilLDAPRoleAssignmentRules\ROLE_ACTION_ASSIGN, time, and updateRequired().

     {
         self::$force_creation = $value;
     }

Here is the call graph for this function:

◆ handleLDAPDataSource()

ilAuthContainerApache::handleLDAPDataSource	(	$a_auth,
		$ext_account,
		$settings
	)

protected

Handle ldap as data source.

Parameters

Auth	$auth
string	$ext_account

Definition at line 278 of file class.ilAuthContainerApache.php.

References $server, $sync, array, AUTH_RADIUS_NO_ILIAS_USER, ilLDAPServer\getInstanceByServerId(), ilLoggerFactory\getLogger(), and ilUtil\redirect().

Referenced by forceCreation().

     {
         include_once './Services/LDAP/classes/class.ilLDAPServer.php';
         $server = ilLDAPServer::getInstanceByServerId(
             $settings->get('apache_ldap_sid')
         );
 
         ilLoggerFactory::getLogger('auth')->debug('Using ldap data source with server configuration: ' . $server->getName());
 
         include_once './Services/LDAP/classes/class.ilLDAPUserSynchronisation.php';
         $sync = new ilLDAPUserSynchronisation('ldap_' . $server->getServerId(), $server->getServerId());
         $sync->setExternalAccount($ext_account);
         $sync->setUserData(array());
         $sync->forceCreation(self::$force_creation);
         $sync->forceReadLdapData(true);
 
         try {
             $internal_account = $sync->sync();
         } catch (UnexpectedValueException $e) {
             ilLoggerFactory::getLogger('auth')->info('Login failed with message: ' . $e->getMessage());
             $a_auth->status = AUTH_WRONG_LOGIN;
             $a_auth->logout();
             return false;
         } catch (ilLDAPSynchronisationForbiddenException $e) {
             // No syncronisation allowed => create Error
             ilLoggerFactory::getLogger('auth')->info('Login failed with message: ' . $e->getMessage());
             $a_auth->status = AUTH_RADIUS_NO_ILIAS_USER;
             $a_auth->logout();
             return false;
         } catch (ilLDAPAccountMigrationRequiredException $e) {
             ilLoggerFactory::getLogger('auth')->debug('Starting account migration');
             $a_auth->logout();
             ilUtil::redirect('ilias.php?baseClass=ilStartUpGUI&cmdClass=ilstartupgui&cmd=showAccountMigration');
         }
 
         $a_auth->setAuth($internal_account);
         return true;
     }

Here is the call graph for this function:

Here is the caller graph for this function:

◆ initLDAPAttributeToUser()

ilAuthContainerApache::initLDAPAttributeToUser ( )

private

Init LDAP attribute mapping private.

Definition at line 266 of file class.ilAuthContainerApache.php.

Referenced by forceCreation().

     {
         include_once('Services/LDAP/classes/class.ilLDAPAttributeToUser.php');
         $this->ldap_attr_to_user = new ilLDAPAttributeToUser($this->server);
     }

Here is the caller graph for this function:

◆ updateRequired()

ilAuthContainerApache::updateRequired ( $a_username )

protected

Check if an update is required.

Returns

Parameters

string $a_username

Definition at line 245 of file class.ilAuthContainerApache.php.

References ilObjUser\_checkExternalAuthAccount(), ilLDAPRoleAssignmentRule\hasRulesForUpdate(), and ilLDAPAttributeMapping\hasRulesForUpdate().

Referenced by forceCreation().

     {
         if (!ilObjUser::_checkExternalAuthAccount("ldap_" . $this->server->getServerId(), $a_username)) {
             return true;
         }
         // Check attribute mapping on login
         include_once './Services/LDAP/classes/class.ilLDAPAttributeMapping.php';
         if (ilLDAPAttributeMapping::hasRulesForUpdate($this->server->getServerId())) {
             return true;
         }
         include_once './Services/LDAP/classes/class.ilLDAPRoleAssignmentRule.php';
         if (ilLDAPRoleAssignmentRule::hasRulesForUpdate()) {
             return true;
         }
         return false;
     }