File manager

File manager - Edit - /home/ferretapmx/public_html/ldap.tar

Back
src/Factory/LdapFactoryInterface.php��0000644��00000001456�15231065524�0013515 0��ustar�00��<?php /** * Joomla! Content Management System * * @copyright (C) 2023 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Plugin\Authentication\Ldap\Factory; use Symfony\Component\Ldap\LdapInterface; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Factory to create Ldap clients. * * @since 4.3.0 / interface LdapFactoryInterface { /* * Method to load and return an Ldap client. * * @param array $config The configuration array for the ldap client * * @return LdapInterface * * @since 4.3.0 * @throws \Exception / public function createLdap(array $config): LdapInterface; } ��src/Factory/LdapFactory.php��0000644��00000001646�15231065524�0011675 0��ustar�00��<?php /* * Joomla! Content Management System * * @copyright (C) 2023 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Plugin\Authentication\Ldap\Factory; use Symfony\Component\Ldap\Ldap; use Symfony\Component\Ldap\LdapInterface; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Factory to create Ldap clients. * * @since 4.3.0 / class LdapFactory implements LdapFactoryInterface { /* * Method to load and return an Ldap client. * * @param array $config The configuration array for the ldap client * * @return LdapInterface * * @since 4.3.0 * * @throws \Exception / public function createLdap(array $config): LdapInterface { return Ldap::create('ext_ldap', $config); } } ��src/Factory/.htaccess��0000555��00000000355�15231065524�0010547 0��ustar�00��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>��src/Extension/Ldap.php��0000644��00000032662�15231065524�0010714 0��ustar�00��<?php /* * @package Joomla.Plugin * @subpackage Authentication.ldap * * @copyright (C) 2006 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Plugin\Authentication\Ldap\Extension; use Joomla\CMS\Authentication\Authentication; use Joomla\CMS\Event\User\AuthenticationEvent; use Joomla\CMS\Log\Log; use Joomla\CMS\Plugin\CMSPlugin; use Joomla\Event\SubscriberInterface; use Joomla\Plugin\Authentication\Ldap\Factory\LdapFactoryInterface; use Symfony\Component\Ldap\Entry; use Symfony\Component\Ldap\Exception\ConnectionException; use Symfony\Component\Ldap\Exception\LdapException; use Symfony\Component\Ldap\LdapInterface; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * LDAP Authentication Plugin * * @since 1.5 / final class Ldap extends CMSPlugin implements SubscriberInterface { /* * The ldap factory * * @var LdapFactoryInterface * @since 4.3.0 / private $factory; /* * Constructor * * @param LdapFactoryInterface $factory The Ldap factory * @param array $config An optional associative array of configuration settings. * Recognized key values include 'name', 'group', 'params', 'language' * (this list is not meant to be comprehensive). * * @since 4.3.0 / public function __construct(LdapFactoryInterface $factory, array $config = []) { parent::__construct($config); $this->factory = $factory; } /* * Returns an array of events this subscriber will listen to. * * @return array * * @since 5.2.0 / public static function getSubscribedEvents(): array { return ['onUserAuthenticate' => 'onUserAuthenticate']; } /* * This method should handle any authentication and report back to the subject * * @param AuthenticationEvent $event Authentication event * * @return void * * @since 1.5 / public function onUserAuthenticate(AuthenticationEvent $event): void { // If LDAP not correctly configured then bail early. if (!$this->params->get('host', '')) { return; } $credentials = $event->getCredentials(); $response = $event->getAuthenticationResponse(); // For JLog $logcategory = 'ldap'; $response->type = $logcategory; // Strip null bytes from the password $credentials['password'] = str_replace(\chr(0), '', $credentials['password']); // LDAP does not like Blank passwords (tries to Anon Bind which is bad) if (empty($credentials['password'])) { $response->status = Authentication::STATUS_FAILURE; $response->error_message = $this->getApplication()->getLanguage()->_('JGLOBAL_AUTH_EMPTY_PASS_NOT_ALLOWED'); return; } // Load plugin params info $ldap_email = $this->params->get('ldap_email', ''); $ldap_fullname = $this->params->get('ldap_fullname', ''); $ldap_uid = $this->params->get('ldap_uid', ''); $auth_method = $this->params->get('auth_method', ''); // Load certificate info $ignore_reqcert_tls = (bool) $this->params->get('ignore_reqcert_tls', '1'); $cacert = $this->params->get('cacert', ''); // getting certificate file and certificate directory options (both need to be set) if (!$ignore_reqcert_tls && !empty($cacert)) { if (is_dir($cacert)) { $cacertdir = $cacert; $cacertfile = ""; } elseif (is_file($cacert)) { $cacertfile = $cacert; $cacertdir = \dirname($cacert); } else { $cacertfile = $cacert; $cacertdir = $cacert; Log::add(\sprintf('Certificate path for LDAP client is neither an existing file nor directory: "%s"', $cacert), Log::ERROR, $logcategory); } } else { Log::add(\sprintf('Not setting any LDAP TLS CA certificate options because %s, system wide settings are used', $ignore_reqcert_tls ? "certificate is ignored" : "no certificate location is configured"), Log::DEBUG, $logcategory); } $options = [ 'host' => $this->params->get('host', ''), 'port' => (int) $this->params->get('port', ''), 'version' => $this->params->get('use_ldapV3', '1') == '1' ? 3 : 2, 'referrals' => (bool) $this->params->get('no_referrals', '0'), 'encryption' => $this->params->get('encryption', 'none'), 'debug' => (bool) $this->params->get('ldap_debug', '0'), 'options' => [ 'x_tls_require_cert' => $ignore_reqcert_tls ? LDAP_OPT_X_TLS_NEVER : LDAP_OPT_X_TLS_DEMAND, ], ]; // if these are not set, the system defaults are used if (isset($cacertdir, $cacertfile)) { $options['options']['x_tls_cacertdir'] = $cacertdir; $options['options']['x_tls_cacertfile'] = $cacertfile; } Log::add(\sprintf('Creating LDAP session with options: %s', json_encode($options)), Log::DEBUG, $logcategory); $connection_string = \sprintf('ldap%s://%s:%s', 'ssl' === $options['encryption'] ? 's' : '', $options['host'], $options['port']); Log::add(\sprintf('Creating LDAP session to connect to "%s" while binding', $connection_string), Log::DEBUG, $logcategory); $ldap = $this->factory->createLdap($options); switch ($auth_method) { case 'search': try { $dn = $this->params->get('username', ''); Log::add(\sprintf('Binding to LDAP server with administrative dn "%s" and given administrative password (anonymous if user dn is blank)', $dn), Log::DEBUG, $logcategory); $ldap->bind($dn, $this->params->get('password', '')); } catch (ConnectionException \| LdapException $exception) { $response->status = Authentication::STATUS_FAILURE; $response->error_message = $this->getApplication()->getLanguage()->_('JGLOBAL_AUTH_NOT_CONNECT'); Log::add($exception->getMessage(), Log::ERROR, $logcategory); return; } // Search for users DN try { $searchstring = str_replace( '[search]', str_replace(';', '\3b', $ldap->escape($credentials['username'], '', LDAP_ESCAPE_FILTER)), $this->params->get('search_string', '') ); Log::add(\sprintf('Searching LDAP entry with filter: "%s"', $searchstring), Log::DEBUG, $logcategory); $entry = $this->searchByString($searchstring, $ldap); } catch (LdapException $exception) { $response->status = Authentication::STATUS_FAILURE; $response->error_message = $this->getApplication()->getLanguage()->_('JGLOBAL_AUTH_UNKNOWN_ACCESS_DENIED'); Log::add($exception->getMessage(), Log::ERROR, $logcategory); return; } if (!$entry) { // we did not find the login in LDAP $response->status = Authentication::STATUS_FAILURE; $response->error_message = $this->getApplication()->getLanguage()->_('JGLOBAL_AUTH_NO_USER'); Log::add($this->getApplication()->getLanguage()->_('JGLOBAL_AUTH_USER_NOT_FOUND'), Log::ERROR, $logcategory); return; } Log::add(\sprintf('LDAP entry found at "%s"', $entry->getDn()), Log::DEBUG, $logcategory); try { // Verify Users Credentials Log::add(\sprintf('Binding to LDAP server with found user dn "%s" and user entered password', $entry->getDn()), Log::DEBUG, $logcategory); $ldap->bind($entry->getDn(), $credentials['password']); } catch (ConnectionException $exception) { $response->status = Authentication::STATUS_FAILURE; $response->error_message = $this->getApplication()->getLanguage()->_('JGLOBAL_AUTH_INVALID_PASS'); Log::add($exception->getMessage(), Log::ERROR, $logcategory); return; } break; case 'bind': // We just accept the result here try { if ($this->params->get('users_dn', '') == '') { $dn = $credentials['username']; } else { $dn = str_replace( '[username]', $ldap->escape($credentials['username'], '', LDAP_ESCAPE_DN), $this->params->get('users_dn', '') ); } Log::add(\sprintf('Direct binding to LDAP server with entered user dn "%s" and user entered password', $dn), Log::DEBUG, $logcategory); $ldap->bind($dn, $credentials['password']); } catch (ConnectionException \| LdapException $exception) { $response->status = Authentication::STATUS_FAILURE; $response->error_message = $this->getApplication()->getLanguage()->_('JGLOBAL_AUTH_INVALID_PASS'); Log::add($exception->getMessage(), Log::ERROR, $logcategory); return; } try { $searchstring = str_replace( '[search]', str_replace(';', '\3b', $ldap->escape($credentials['username'], '', LDAP_ESCAPE_FILTER)), $this->params->get('search_string', '') ); Log::add(\sprintf('Searching LDAP entry with filter: "%s"', $searchstring), Log::DEBUG, $logcategory); $entry = $this->searchByString($searchstring, $ldap); } catch (LdapException $exception) { $response->status = Authentication::STATUS_FAILURE; $response->error_message = $this->getApplication()->getLanguage()->_('JGLOBAL_AUTH_UNKNOWN_ACCESS_DENIED'); Log::add($exception->getMessage(), Log::ERROR, $logcategory); return; } if (!$entry) { // we did not find the login in LDAP $response->status = Authentication::STATUS_FAILURE; $response->error_message = $this->getApplication()->getLanguage()->_('JGLOBAL_AUTH_NO_USER'); Log::add($this->getApplication()->getLanguage()->_('JGLOBAL_AUTH_USER_NOT_FOUND'), Log::ERROR, $logcategory); return; } Log::add(\sprintf('LDAP entry found at "%s"', $entry->getDn()), Log::DEBUG, $logcategory); break; default: // Unsupported configuration $response->status = Authentication::STATUS_FAILURE; $response->error_message = $this->getApplication()->getLanguage()->_('JGLOBAL_AUTH_UNKNOWN_ACCESS_DENIED'); Log::add($response->error_message, Log::ERROR, $logcategory); return; } // Grab some details from LDAP and return them $response->username = $entry->getAttribute($ldap_uid)[0] ?? false; $response->email = $entry->getAttribute($ldap_email)[0] ?? false; $response->fullname = $entry->getAttribute($ldap_fullname)[0] ?? $credentials['username']; // Were good - So say so. Log::add(\sprintf('LDAP login succeeded; username: "%s", email: "%s", fullname: "%s"', $response->username, $response->email, $response->fullname), Log::DEBUG, $logcategory); $response->status = Authentication::STATUS_SUCCESS; $response->error_message = ''; // Stop event propagation when status is STATUS_SUCCESS $event->stopPropagation(); // The connection is no longer needed, destroy the object to close it unset($ldap); } /* * Shortcut method to perform a LDAP search based on a semicolon separated string * * Note that this method requires that semicolons which should be part of the search term to be escaped * to correctly split the search string into separate lookups * * @param string $search search string of search values * @param LdapInterface $ldap The LDAP client * * @return Entry\|null The search result entry if a matching record was found * * @since 3.8.2 / private function searchByString(string $search, LdapInterface $ldap) { $dn = $this->params->get('base_dn', ''); // We return the first entry from the first search result which contains data foreach (explode(';', $search) as $key => $result) { $results = $ldap->query($dn, '(' . str_replace('\3b', ';', $result) . ')')->execute(); if (\count($results)) { return $results[0]; } } } } ��src/Extension/.htaccess��0000555��00000000355�15231065524�0011114 0��ustar�00��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>��src/.htaccess��0000555��00000000355�15231065524�0007140 0��ustar�00��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>��services/provider.php��0000644��00000002372�15231065524�0010741 0��ustar�00��<?php /* * @package Joomla.Plugin * @subpackage Authentication.ldap * * @copyright (C) 2023 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / \defined('_JEXEC') or die; use Joomla\CMS\Extension\PluginInterface; use Joomla\CMS\Factory; use Joomla\CMS\Plugin\PluginHelper; use Joomla\DI\Container; use Joomla\DI\ServiceProviderInterface; use Joomla\Plugin\Authentication\Ldap\Extension\Ldap; use Joomla\Plugin\Authentication\Ldap\Factory\LdapFactory; return new class () implements ServiceProviderInterface { /* * Registers the service provider with a DI container. * * @param Container $container The DI container. * * @return void * * @since 4.3.0 */ public function register(Container $container) { $container->set( PluginInterface::class, function (Container $container) { $plugin = new Ldap( new LdapFactory(), (array) PluginHelper::getPlugin('authentication', 'ldap') ); $plugin->setApplication(Factory::getApplication()); return $plugin; } ); } }; ��services/.htaccess��0000555��00000000355�15231065524�0010174 0��ustar�00��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>��.htaccess��0000555��00000000355�15231065524�0006351 0��ustar�00��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>��ldap.xml��0000644��00000011006�15231065524�0006207 0��ustar�00��<?xml version="1.0" encoding="UTF-8"?> <extension type="plugin" group="authentication" method="upgrade"> <name>plg_authentication_ldap</name> <author>Joomla! Project</author> <creationDate>2005-11</creationDate> <copyright>(C) 2005 Open Source Matters, Inc.</copyright> <license>GNU General Public License version 2 or later; see LICENSE.txt</license> <authorEmail>admin@joomla.org</authorEmail> <authorUrl>www.joomla.org</authorUrl> <version>3.0.0</version> <description>PLG_LDAP_XML_DESCRIPTION</description> <namespace path="src">Joomla\Plugin\Authentication\Ldap</namespace> <files> <folder plugin="ldap">services</folder> <folder>src</folder> </files> <languages> <language tag="en-GB">language/en-GB/plg_authentication_ldap.ini</language> <language tag="en-GB">language/en-GB/plg_authentication_ldap.sys.ini</language> </languages> <config> <fields name="params"> <fieldset name="basic"> <field name="host" type="text" label="PLG_LDAP_FIELD_HOST_LABEL" required="true" /> <field name="port" type="number" label="PLG_LDAP_FIELD_PORT_LABEL" min="1" max="65535" default="389" hint="389" validate="number" filter="integer" /> <field name="use_ldapV3" type="radio" layout="joomla.form.field.radio.switcher" label="PLG_LDAP_FIELD_V3_LABEL" default="1" filter="integer" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="encryption" type="list" label="PLG_LDAP_FIELD_ENCRYPTION_LABEL" default="none" validate="options" > <option value="none">PLG_LDAP_FIELD_VALUE_ENCRYPTIONNONE</option> <option value="tls">PLG_LDAP_FIELD_VALUE_ENCRYPTIONTLS</option> <option value="ssl">PLG_LDAP_FIELD_VALUE_ENCRYPTIONSSL</option> </field> <field name="ignore_reqcert_tls" type="radio" label="PLG_LDAP_FIELD_IGNORE_REQCERT_TLS_LABEL" layout="joomla.form.field.radio.switcher" default="1" filter="boolean" showon="encryption!:none" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="cacert" type="text" label="PLG_LDAP_FIELD_CACERT_LABEL" description="PLG_LDAP_FIELD_CACERT_DESC" required="false" showon="encryption!:none[AND]ignore_reqcert_tls:0" /> <field name="no_referrals" type="radio" label="PLG_LDAP_FIELD_REFERRALS_LABEL" default="0" filter="integer" layout="joomla.form.field.radio.switcher" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="auth_method" type="list" label="PLG_LDAP_FIELD_AUTHMETHOD_LABEL" default="bind" validate="options" > <option value="search">PLG_LDAP_FIELD_VALUE_BINDSEARCH</option> <option value="bind">PLG_LDAP_FIELD_VALUE_BINDUSER</option> </field> <field name="base_dn" type="text" label="PLG_LDAP_FIELD_BASEDN_LABEL" required="true" /> <field name="search_string" type="text" label="PLG_LDAP_FIELD_SEARCHSTRING_LABEL" description="PLG_LDAP_FIELD_SEARCHSTRING_DESC" required="true" /> <field name="users_dn" type="text" label="PLG_LDAP_FIELD_USERSDN_LABEL" description="PLG_LDAP_FIELD_USERSDN_DESC" /> <field name="username" type="text" label="PLG_LDAP_FIELD_USERNAME_LABEL" description="PLG_LDAP_FIELD_USERNAME_DESC" /> <field name="password" type="password" label="PLG_LDAP_FIELD_PASSWORD_LABEL" description="PLG_LDAP_FIELD_PASSWORD_DESC" /> <field name="ldap_fullname" type="text" label="PLG_LDAP_FIELD_FULLNAME_LABEL" description="PLG_LDAP_FIELD_FULLNAME_DESC" default="fullName" /> <field name="ldap_email" type="text" label="PLG_LDAP_FIELD_EMAIL_LABEL" description="PLG_LDAP_FIELD_EMAIL_DESC" default="mail" /> <field name="ldap_uid" type="text" label="PLG_LDAP_FIELD_UID_LABEL" description="PLG_LDAP_FIELD_UID_DESC" default="uid" /> <field name="ldap_debug" type="radio" label="PLG_LDAP_FIELD_LDAPDEBUG_LABEL" description="PLG_LDAP_FIELD_LDAPDEBUG_DESC" default="0" filter="integer" layout="joomla.form.field.radio.switcher" > <option value="0">JNO</option> <option value="1">JYES</option> </field> </fieldset> </fields> </config> </extension> ��

| ver. 1.4 | Github | . | PHP 8.2.32 | Generation time: 0.06 | proxy | phpinfo | Settings