New LDAP Library! - Printable Version

Code:
/**

     * Initialize the user preferences

     *

     * Accepts an associative array as input, containing display preferences

     *

     * @access    public

     * @param    array    config preferences

     * @return    void

     */

    function Ldap($options = array())

    {

        //you can specifically overide any of the default configuration options setup above

        if(count($options) > 0)

        {

            if(array_key_exists("account_suffix",$options))

            {

                $this->_account_suffix=$options["account_suffix"];

            }

            if(array_key_exists("base_dn",$options))

            {

                $this->_base_dn=$options["base_dn"];

            }

            if(array_key_exists("domain_controllers",$options))

            {

                $this->_domain_controllers=$options["domain_controllers"];

            }

            if(array_key_exists("ad_username",$options))

            {

                $this->_ad_username=$options["ad_username"];

            }

            if(array_key_exists("ad_password",$options))

            {

                $this->_ad_password=$options["ad_password"];

            }

            if(array_key_exists("real_primarygroup",$options))

            {

                $this->_real_primarygroup=$options["real_primarygroup"];

            }

            if(array_key_exists("use_ssl",$options))

            {

                $this->_use_ssl=$options["use_ssl"];

            }

            if(array_key_exists("recursive_groups",$options))

            {

                $this->_recursive_groups=$options["recursive_groups"];

            }

        }



        //connect to the LDAP server as the username/password

        $dc = $this->random_controller();

        if($this->_use_ssl)

        {

            $this->_conn = ldap_connect("ldaps://".$dc);

        }

        else

        {

            $this->_conn = ldap_connect($dc);

        }



        if( ! $this->_conn )

        {

            show_error ("FATAL: AD connection to '". $dc ."' failed. <br/>"

                        .ldap_err2str());

            return FALSE;

        }



        //set some ldap options for talking to AD

        ldap_set_option($this->_conn, LDAP_OPT_PROTOCOL_VERSION, 3);

        ldap_set_option($this->_conn, LDAP_OPT_REFERRALS, 0);



        //bind as a domain admin if they've set it up

        if( ! empty($this->_ad_username) && ! empty($this->_ad_password) )

        {

            $this->_bind = @ldap_bind($this->_conn,$this->_ad_username.$this->_account_suffix,$this->_ad_password);

            if( ! $this->_bind)

            {

                if($this->_use_ssl)

                {

                    //if you have problems troubleshooting, remove the @ character from the ldap_bind command above to get the actual error message

                    if ( $this->_error ("FATAL: AD bind to '". $dc ."' failed. <br/>Either the LDAPS connection failed or the login credentials are incorrect.") )

                    return FALSE;

                }

                else

                {

                    if ( $this->_error ("FATAL: AD bind to '". $dc ."' failed. Check the login credentials.") )

                    return FALSE;

                }

            }

        }

        else

        {

            $this->_bind = @ldap_bind($this->_conn);

            if( ! $this->_bind )

            {

                if ( $this->_error("FATAL: Anonymous AD bind to '". $dc ."' failed."))

                    return FALSE;

            }

        }



        return TRUE;

    }



    // basic test for errors

    function _error( $msg )

    {

        $errno = ldap_errno($this->_conn);

        if ($errno)

        {

            show_error("LDAP Lib error: (". $errno .") "

                        . ldap_err2str($errno) ."<br/>". $msg );

        }

        return (bool) $errno;

    }