|
|
|
Simple and fast authentication module when you want to authenticate your users
againt Active Directory through LDAP. The script will also store the username,
Display Name, and fully qualified DN ie;
DN=user,ou=users,ou=account,dc=domain,dc=com in a cookie. You could also
store any other attribute of the user in the cookie as well (email address, office
phone, etc...)
Note: you will need to change the server, basedn and filter variables for your
environment.
Just place an include "auth.in";
at the top of every file that you want protected.
<?
$server="XXX.XXX.XXX.XXX"; //change to ip address of ldap server
$basedn="ou=users, ou=accounts, dc=domain, dc=com"; //change to reflect the ou
and
domain that your users are in.
$script=$_SERVER['SCRIPT_NAME'];
if (isset($HTTP_COOKIE_VARS['cookie'])) { //If cookie exists, retrieve it and
put it in an
array for use.
$cookie=$HTTP_COOKIE_VARS['cookie'];
}
if (isset($cookie)) {
$username=$cookie['user'];
$password=($cookie['token']);
$fullname=$cookie['fullname'];
$fqdn=$cookie['fqdn'];
$dn = "cn=$username, ";
if (!($connect = ldap_connect($server))) {
die ("Could not connect to LDAP server");
}
if (!($bind = ldap_bind($connect, "$dn" . "$basedn", $password))) {
die ("Could not bind to $dn$basedn");
}
} else {
if ((isset($_POST['username'])) && (isset($_POST['password']))) {
$username=$_POST['username'];
$password=$_POST['password'];
$filter="(&(|(!(displayname=Administrator*))(!
(displayname=Admin*)))(cn=$username))"; //define an appropriate ldap search filter
to
find your users, and filter out accounts such as administrator(administrator should
be
renamed anyway!).
$dn = "cn=$username, ";
if (!($connect = ldap_connect($server))) {
die ("Could not connect to LDAP server");
}
if (!($bind = ldap_bind($connect, "$dn" . "$basedn",
$password))) {
die ("Could not bind to $dn");
}
$sr = ldap_search($connect, $basedn,"$filter");
$info = ldap_get_entries($connect, $sr);
$fullname=$info[0]["displayname"][0];
$fqdn=$info[0]["dn"];
setcookie("cookie[user]",$username);
setcookie("cookie[token]",$password);
setcookie("cookie[fullname]",$fullname);
setcookie("cookie[fqdn]", $fqdn);
} else {
?>
<html>
<head>
<title>Portal Login</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta http-equiv="expires" content="0">
<meta http-equiv="pragma" content="no-cache">
</head>
<SCRIPT LANGUAGE="JavaScript">
<!--
document.onmousedown=click;
function click()
{
if (event.button==2) {alert('Right-clicking has been
disabled by
the administrator.');}
}
//-->
</SCRIPT>
<div align="center">
<form method="post" action="<? echo $script; ?>">
<div align="center">
<table width="210" border="0" cellspacing="0" cellpadding="0">
<tr>
<td align="center">
<fieldset>
<Legend><font face="Verdana,Tahoma,Arial,sans-serif" size="1"
color="gray">Enter Credentials</font></Legend>
<table border="0" cellspacing="3" cellpadding="0">
<tr>
<td align="right" valign="middle"><b><font
face="Verdana,Tahoma,Arial,sans-
serif" size="1" color="gray">Username:</font></td>
<td align="center" valign="middle">
<input class="clear" type="text" size="15" name="username">
</td>
</tr>
<tr>
<td align="right" valign="middle"><b><font
face="Verdana,Tahoma,Arial,sans-
serif" size="1" color="gray">Password:</font></td>
<td align="center" valign="middle">
<input class="pass" type="password" size="15"
name="password">
</td>
</tr>
</table>
<input type=image src="images/login.gif" alt="Login"
name="image">
<br>
</div>
</td>
</tr>
</fieldset>
</table>
<br>
<table width="640"><tr><td align="center">
<font face="Verdana,Tahoma,Arial,sans-serif" size="1"
color="silver">This System is
for the use of authorized users only. Individuals using this computer system
without
authority, or in excess of their authority, are subject to having their activities
on this system
monitored and recorded by system personnel. In the course of monitoring individuals
improperly using this system, or in the course of system maintenance, the activities
of
authorized users may also be monitored. Anyone using this system expressly consents
to
such monitoring and is advised that if such monitoring reveals possible criminal
activity,
system personnel may provide the evidence of such monitoring to law enforcement
officals.
This warning has been provided by the United States Department of Justice and is
intended to
ensure that monitoring of user activity is not in violation of the Communications
Privacy Act of
1986.</font>
</td></tr></table>
</div>
</form>
</div>
</body>
</html>
<?
die ();
}
}
?> |
|
| PHP4 MYSQL Authentication Script with cookie. Short & Sweet
Categories : Authentication, Apache, Cookies, PHP, MySQL | | | Authenticator for Exchange Server LDAP Categories : PHP, Authentication, LDAP, Security, Sessions | | | Complete, simple working example of login screen and check on a unique page using php functions, cookies and mysql database. Categories : PHP, Cookies, MySQL, HTML and PHP, Authentication | | | Using $PHP_AUTH_USER and $PHP_AUTH_PW to authenticate. Categories : Authentication, PHP | | | Basic Authentication with sessions Categories : PHP, Beginner Guides, Authentication, Form Processing, Sessions | | | A flat file counter Categories : PHP, Cookies, Filesystem, Beginner Guides | | | Authorize Me! An authentication script. Categories : MySQL, Databases, Authentication, PHP | | | Simple Password example Categories : PHP, Authentication, Security, HTTP | | | PHP Function to Encrypt/Decrypt a string without a known key. The string itself has his own different key for every character. Categories : PHP, Algorithms, Security, Authentication, Encryption | | | Windows 2003 Active Directory User Query (Ldap) Categories : PHP, LDAP | | | cookie Categories : Cookies, PHP | | | ldap_add -- Add entries to LDAP directory Categories : PHP, PHP Functions, LDAP | | | Function to remember password Categories : PHP, Authentication, Personalization and Membership | | | A web-based php3 IMAP email client supporting address books, attachements (downloading and sending), LDAP searching, and much much more. Categories : Email, PHP, LDAP | | | Is there some possibility to link a database to an htaccess file, so that instead of having a passwd file you would have a database with DES-crypted password and username fields? Categories : Authentication, PHP, General SQL, Databases | |
| | | | Patrick Dooley wrote : 786
Ooops, just copy this text into a file called "auth.inc" and include it at the top of every page you want protected.
| | | | Bruce Truman wrote : 1023
Hello,
I am having a problem with this script. Can you please help me out. I am not sure if I am setting all the variables correctly and I get the following error:
Fatal error: Call to undefined function: ldap_connect() in D:\intranet\loginnt.php on line 28
| | | | Jeremy Polley wrote : 1061
include "auth.inc";
all that simply did was added the code to the page that was already there, also, it is not contacting active directory properly, how can this be fixed?
| | | | Gus Kilkenny wrote :1352
Hi
May I first say thanks for a very useful script. I have a slight problem with it though in that I can`t get some users to authenticate. The reason is that we have one parent OU with child ou`s that brake off containing a branch with computers,users,printers in there. so at the $basedn="ou=users, ou=accounts, dc=domain, dc=com"; section the first ou contains users but the second only allows us to specify one ou (or branch in our structure)
Can you tel me a way (bar moving all users in to one ou) that I can authenticate across multiple branch ou`s?
Many thanks
Gus
| |
|
|
|