diff --git a/conf/config.local.php b/conf/config.local.php index 70ca1a9..18f58e0 100644 --- a/conf/config.local.php +++ b/conf/config.local.php @@ -58,6 +58,66 @@ const SECRET_KEY = '__SECRET_KEY__'; //const LOCAL_LOGIN = null; +const LDAP_HOST = 'localhost'; +const LDAP_DN = 'cn=%s,ou=users,dc=yunohost,dc=org'; + +session_start(); + +if (empty($_SESSION['ldap_user']) && !empty($_POST['ldap_login']) && !empty($_POST['ldap_password'])) { + $l = ldap_connect(LDAP_HOST) || die('Connexion impossible'); + ldap_set_option($l, LDAP_OPT_PROTOCOL_VERSION, 3); + ldap_set_option($l, LDAP_OPT_REFERRALS, 0); + ldap_set_option($l, LDAP_OPT_NETWORK_TIMEOUT, 10); + + $login = trim($_POST['ldap_login']); + + if (ldap_bind($l, sprintf(LDAP_DN, $login), $_POST['ldap_password'])) { + $_SESSION['ldap_user'] = $login; + } + + ldap_close($l); +} + +if (empty($_SESSION['ldap_user'])) { + echo ' + + +
'; + + if (!empty($_POST['ldap_login'])) { + echo '

Identifiants invalides

'; + } + + echo ' +
+ Connexion +
+
Login
+
+
Mot de passe
+
+
+

+
+
+ + '; + exit; +} + +define('Garradin\LOCAL_LOGIN', [ + 'user' => [ + '_name' => $_SESSION['ldap_user'], + ], + 'permissions' => [ + 'users' => 9, + 'accounting' => 9, + 'web' => 9, + 'documents' => 9, + 'config' => 9, + ], +]); + /** * Autoriser (ou non) l'import de sauvegarde qui a été modifiée ? *