Changeset 4886 for trunk/phpgwapi/inc/class.auth_ldap.inc.php

Timestamp:

08/02/11 09:44:07 (13 years ago)

Author:

roberto.santosjunior

Message:

Ticket #1820 - Disponibilizar certificado na sessão do usuário.4867

File:

• trunk/phpgwapi/inc/class.auth_ldap.inc.php (modified) (2 diffs)

trunk/phpgwapi/inc/class.auth_ldap.inc.php

@@ -56 +56 @@
                         }
                         /* find the dn for this uid, the uid is not always in the dn */
-                        $attributes     = array('uid','dn','givenName','sn','mail','uidNumber','gidNumber');
-                        
+                        $attributes     = array('uid','dn','givenName','sn','mail','uidNumber','gidNumber','usercertificate');
                         $filter = $GLOBALS['phpgw_info']['server']['ldap_search_filter'] ? $GLOBALS['phpgw_info']['server']['ldap_search_filter'] : '(uid=%user)';
                         $filter = str_replace(array('%user','%domain'),array($username,$GLOBALS['phpgw_info']['user']['domain']),$filter);
@@ -74 +73 @@
                                 {
                                         if($allValues[0]['uid'][0] != $username)
+                                        {
+                                                return false;
+                                        }
+                                }
+                                if($_SESSION['login_certificate'])
+                                {
+                                        # certificate not equal, not authenticate.
+                                        if($allValues[0]['usercertificate'][0] != $_SESSION['login_certificate'])
                                         {
                                                 return false;