1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
<?php
/**
* Copyright 2004-2014 Horde LLC (http://www.horde.org/)
*
* See the enclosed file COPYING for license information (LGPL). If you did
* not receive this file, http://www.horde.org/licenses/lgpl21
*
* @author Jon Parise <jon@horde.org>
* @category Horde
* @license http://www.horde.org/licenses/lgpl21 LGPL-2.1
* @package Auth
*/
/**
* The Horde_Auth_Pam:: class provides a PAM-based implementation of the Horde
* authentication system.
*
* PAM (Pluggable Authentication Modules) is a flexible mechanism for
* authenticating users. It has become the standard authentication system for
* Linux, Solaris and FreeBSD.
*
* This driver relies on the PECL PAM package:
*
* http://pecl.php.net/package/PAM
*
* @author Jon Parise <jon@horde.org>
* @category Horde
* @license http://www.horde.org/licenses/lgpl21 LGPL-2.1
* @package Auth
*/
class Horde_Auth_Pam extends Horde_Auth_Base
{
/**
* Constructor.
*
* @param array $params Optional parameters:
* <pre>
* 'service' - (string) The name of the PAM service to use when
* authenticating.
* DEFAULT: php
* </pre>
*
* @throws Horde_Auth_Exception
*/
public function __construct(array $params = array())
{
if (!Horde_Util::extensionExists('pam')) {
throw new Horde_Auth_Exception('PAM authentication is not available.');
}
if (!empty($params['service'])) {
ini_set('pam.servicename', $params['service']);
}
parent::__construct($params);
}
/**
* Find out if a set of login credentials are valid.
*
* @param string $userId The userId to check.
* @param array $credentials An array of login credentials.
*
* @throws Horde_Auth_Exception
*/
protected function _authenticate($userId, $credentials)
{
if (empty($credentials['password'])) {
throw new Horde_Auth_Exception('', Horde_Auth::REASON_BADLOGIN);
}
$error = null;
if (!pam_auth($userId, $credentials['password'], $error)) {
throw new Horde_Auth_Exception($error);
}
}
}
|
