class.ilAuthProviderRadius.php

Go to the documentation of this file.

<?php

/* Copyright (c) 1998-2010 ILIAS open source, Extended GPL, see docs/LICENSE */

include_once './Services/Authentication/classes/Provider/class.ilAuthProvider.php';
include_once './Services/Authentication/interfaces/interface.ilAuthProviderInterface.php';
include_once './Services/Authentication/interfaces/interface.ilAuthProviderAccountMigrationInterface.php';

class ilAuthProviderRadius extends ilAuthProvider implements ilAuthProviderInterface, ilAuthProviderAccountMigrationInterface
{
    const CONNECT_TIMEOUT = 3;
    const RETRIES = 1;
    
    private $settings = null;
    
    private $external_account = '';
    
    
    public function __construct(\ilAuthCredentials $credentials)
    {
        parent::__construct($credentials);
        
        include_once './Services/Radius/classes/class.ilRadiusSettings.php';
        $this->settings = ilRadiusSettings::_getInstance();
    }
    
    
    public function createNewAccount(\ilAuthStatus $status)
    {
    }

    public function doAuthentication(\ilAuthStatus $status)
    {
        $radius = radius_auth_open();
        
        foreach ($this->settings->getServers() as $server) {
            $this->getLogger()->debug('Using: ' . $server . ':' . $this->settings->getPort());
            radius_add_server(
                $radius,
                trim($server),
                $this->settings->getPort(),
                $this->settings->getSecret(),
                self::CONNECT_TIMEOUT,
                self::RETRIES
            );
        }
        
        radius_create_request($radius, RADIUS_ACCESS_REQUEST);
        radius_put_attr($radius, RADIUS_USER_NAME, $this->getCredentials()->getUsername());
        radius_put_attr($radius, RADIUS_USER_PASSWORD, $this->getCredentials()->getPassword());

        $this->getLogger()->debug('username: ' . $this->getCredentials()->getUsername());

        $result = radius_send_request($radius);
        
        switch ($result) {
            case RADIUS_ACCESS_ACCEPT:
                $this->getLogger()->info('Radius authentication successful.');
                $status->setStatus(ilAuthStatus::STATUS_AUTHENTICATED);
                
                $local_login = ilObjUser::_checkExternalAuthAccount('radius', $this->getCredentials()->getUsername());
                $status->setAuthenticatedUserId(ilObjUser::_lookupId($local_login));
                return true;
                
            case RADIUS_ACCESS_REJECT:
                $this->getLogger()->info('Radius authentication rejected with message: ' . radius_strerror($radius));
                $this->handleAuthenticationFail($status, 'err_wrong_login');
                return false;
                
            case RADIUS_ACCESS_CHALLENGE:
                $this->getLogger()->info('Radius authentication failed (access challenge): ' . radius_strerror($radius));
                $this->handleAuthenticationFail($status, 'err_wrong_login');
                return false;
                
            default:
                $this->getLogger()->error('Radius authentication failed with message: ' . radius_strerror($radius));
                $this->handleAuthenticationFail($status, 'err_wrong_login');
                return false;
        }
    }
    
    public function getExternalAccountName()
    {
        return $this->external_account;
    }

    public function getTriggerAuthMode()
    {
        return AUTH_RADIUS;
    }

    public function getUserAuthModeName()
    {
        return 'radius';
    }

    public function migrateAccount(ilAuthStatus $status)
    {
    }
}