80 lines
2.2 KiB
PHP
80 lines
2.2 KiB
PHP
<?php
|
|
/**
|
|
* Copyright 2004-2017 Horde LLC (http://www.horde.org/)
|
|
*
|
|
* See the enclosed file COPYING for license information (LGPL). If you did
|
|
* not receive this file, see http://www.horde.org/licenses/lgpl21.
|
|
*
|
|
* @author Jon Parise <jon@horde.org>
|
|
* @category Horde
|
|
* @license http://www.horde.org/licenses/lgpl21 LGPL-2.1
|
|
* @package Auth
|
|
*/
|
|
|
|
/**
|
|
* The Horde_Auth_Pam:: class provides a PAM-based implementation of the Horde
|
|
* authentication system.
|
|
*
|
|
* PAM (Pluggable Authentication Modules) is a flexible mechanism for
|
|
* authenticating users. It has become the standard authentication system for
|
|
* Linux, Solaris and FreeBSD.
|
|
*
|
|
* This driver relies on the PECL PAM package:
|
|
*
|
|
* http://pecl.php.net/package/PAM
|
|
*
|
|
* @author Jon Parise <jon@horde.org>
|
|
* @category Horde
|
|
* @copyright 2004-2017 Horde LLC
|
|
* @license http://www.horde.org/licenses/lgpl21 LGPL-2.1
|
|
* @package Auth
|
|
*/
|
|
class Horde_Auth_Pam extends Horde_Auth_Base
|
|
{
|
|
/**
|
|
* Constructor.
|
|
*
|
|
* @param array $params Optional parameters:
|
|
* <pre>
|
|
* 'service' - (string) The name of the PAM service to use when
|
|
* authenticating.
|
|
* DEFAULT: php
|
|
* </pre>
|
|
*
|
|
* @throws Horde_Auth_Exception
|
|
*/
|
|
public function __construct(array $params = array())
|
|
{
|
|
if (!Horde_Util::extensionExists('pam')) {
|
|
throw new Horde_Auth_Exception('PAM authentication is not available.');
|
|
}
|
|
|
|
if (!empty($params['service'])) {
|
|
ini_set('pam.servicename', $params['service']);
|
|
}
|
|
|
|
parent::__construct($params);
|
|
}
|
|
|
|
/**
|
|
* Find out if a set of login credentials are valid.
|
|
*
|
|
* @param string $userId The userId to check.
|
|
* @param array $credentials An array of login credentials.
|
|
*
|
|
* @throws Horde_Auth_Exception
|
|
*/
|
|
protected function _authenticate($userId, $credentials)
|
|
{
|
|
if (empty($credentials['password'])) {
|
|
throw new Horde_Auth_Exception('', Horde_Auth::REASON_BADLOGIN);
|
|
}
|
|
|
|
$error = null;
|
|
if (!pam_auth($userId, $credentials['password'], $error)) {
|
|
throw new Horde_Auth_Exception($error);
|
|
}
|
|
}
|
|
|
|
}
|