Dolibarr\Code\Core\Classes\Ldap::connectBind()

Complexity

Conditions	31
Paths	2392

Size

Total Lines	140
Code Lines	89

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function connectBind()
    {
        global $dolibarr_main_auth_ldap_debug;

        $connected = 0;
        $this->bind = false;
        $this->error = '';
        $this->connectedServer = '';

        $ldapdebug = ((empty($dolibarr_main_auth_ldap_debug) || $dolibarr_main_auth_ldap_debug == "false") ? false : true);

        if ($ldapdebug) {
            dol_syslog(get_class($this) . "::connectBind");
            print "DEBUG: connectBind<br>\n";
        }

        // Check parameters
        if (count($this->server) == 0 || empty($this->server[0])) {
            $this->error = 'LDAP setup (file conf.php) is not complete';
            dol_syslog(get_class($this) . "::connectBind " . $this->error, LOG_WARNING);
            return -1;
        }

        if (!function_exists("ldap_connect")) {
            $this->error = 'LDAPFunctionsNotAvailableOnPHP';
            dol_syslog(get_class($this) . "::connectBind " . $this->error, LOG_WARNING);
            return -1;
        }

        if (empty($this->error)) {
            // Loop on each ldap server
            foreach ($this->server as $host) {
                if ($connected) {
                    break;
                }
                if (empty($host)) {
                    continue;
                }

                if ($this->serverPing($host, $this->serverPort)) {
                    if ($ldapdebug) {
                        dol_syslog(get_class($this) . "::connectBind serverPing true, we try ldap_connect to " . $host, LOG_DEBUG);
                    }
                    $this->connection = ldap_connect($host, $this->serverPort);
                } else {
                    if (preg_match('/^ldaps/i', $host)) {
                        // With host = ldaps://server, the serverPing to ssl://server sometimes fails, even if the ldap_connect succeed, so
                        // we test this case and continue in such a case even if serverPing fails.
                        if ($ldapdebug) {
                            dol_syslog(get_class($this) . "::connectBind serverPing false, we try ldap_connect to " . $host, LOG_DEBUG);
                        }
                        $this->connection = ldap_connect($host, $this->serverPort);
                    } else {
                        if ($ldapdebug) {
                            dol_syslog(get_class($this) . "::connectBind serverPing false, no ldap_connect " . $host, LOG_DEBUG);
                        }
                        continue;
                    }
                }

                if (is_resource($this->connection) || is_object($this->connection)) {
                    if ($ldapdebug) {
                        dol_syslog(get_class($this) . "::connectBind this->connection is ok", LOG_DEBUG);
                    }

                    // Upgrade connection to TLS, if requested by the configuration
                    if (getDolGlobalString('LDAP_SERVER_USE_TLS')) {
                        // For test/debug
                        //ldap_set_option($this->connection, LDAP_OPT_DEBUG_LEVEL, 7);
                        //ldap_set_option($this->connection, LDAP_OPT_PROTOCOL_VERSION, 3);
                        //ldap_set_option($this->connection, LDAP_OPT_REFERRALS, 0);

                        $resulttls = ldap_start_tls($this->connection);
                        if (!$resulttls) {
                            dol_syslog(get_class($this) . "::connectBind failed to start tls", LOG_WARNING);
                            $this->error = 'ldap_start_tls Failed to start TLS ' . ldap_errno($this->connection) . ' ' . ldap_error($this->connection);
                            $connected = 0;
                            $this->unbind();
                        }
                    }

                    // Execute the ldap_set_option here (after connect and before bind)
                    $this->setVersion();
                    $this->setSizeLimit();

                    if ($this->serverType == "activedirectory") {
                        $result = $this->setReferrals();
                        dol_syslog(get_class($this) . "::connectBind try bindauth for activedirectory on " . $host . " user=" . $this->searchUser . " password=" . preg_replace('/./', '*', $this->searchPassword), LOG_DEBUG);
                        $this->result = $this->bindauth($this->searchUser, $this->searchPassword);
                        if ($this->result) {
                            $this->bind = $this->result;
                            $connected = 2;
                            $this->connectedServer = $host;
                            break;
                        } else {
                            $this->error = ldap_errno($this->connection) . ' ' . ldap_error($this->connection);
                        }
                    } else {
                        // Try in auth mode
                        if ($this->searchUser && $this->searchPassword) {
                            dol_syslog(get_class($this) . "::connectBind try bindauth on " . $host . " user=" . $this->searchUser . " password=" . preg_replace('/./', '*', $this->searchPassword), LOG_DEBUG);
                            $this->result = $this->bindauth($this->searchUser, $this->searchPassword);
                            if ($this->result) {
                                $this->bind = $this->result;
                                $connected = 2;
                                $this->connectedServer = $host;
                                break;
                            } else {
                                $this->error = ldap_errno($this->connection) . ' ' . ldap_error($this->connection);
                            }
                        }
                        // Try in anonymous
                        if (!$this->bind) {
                            dol_syslog(get_class($this) . "::connectBind try bind anonymously on " . $host, LOG_DEBUG);
                            $result = $this->bind();
                            if ($result) {
                                $this->bind = $this->result;
                                $connected = 1;
                                $this->connectedServer = $host;
                                break;
                            } else {
                                $this->error = ldap_errno($this->connection) . ' ' . ldap_error($this->connection);
                            }
                        }
                    }
                }

                if (!$connected) {
                    $this->unbind();
                }
            }   // End loop on each server
        }

        if ($connected) {
            dol_syslog(get_class($this) . "::connectBind " . $connected, LOG_DEBUG);
            return $connected;
        } else {
            $this->error = 'Failed to connect to LDAP' . ($this->error ? ': ' . $this->error : '');
            dol_syslog(get_class($this) . "::connectBind " . $this->error, LOG_WARNING);
            return -1;
        }