1 files changed, 106 insertions, 0 deletions
diff --git a/src/ejabberd_auth_ldap.erl b/src/ejabberd_auth_ldap.erl
new file mode 100644
index 00000000..63c23c70
--- /dev/null
+++ b/src/ejabberd_auth_ldap.erl
@@ -0,0 +1,106 @@
+%%%----------------------------------------------------------------------
+%%% File    : ejabberd_auth_ldap.erl
+%%% Author  : Alexey Shchepin <alexey@sevcom.net>
+%%% Purpose : Authentification via LDAP
+%%% Created : 12 Dec 2004 by Alexey Shchepin <alexey@sevcom.net>
+%%% Id      : $Id$
+%%%----------------------------------------------------------------------
+
+-module(ejabberd_auth_ldap).
+-author('alexey@sevcom.net').
+-vsn('$Revision$ ').
+
+%% External exports
+-export([start/0,
+	 set_password/2,
+	 check_password/2,
+	 check_password/4,
+	 try_register/2,
+	 dirty_get_registered_users/0,
+	 get_password/1,
+	 get_password_s/1,
+	 is_user_exists/1,
+	 remove_user/1,
+	 remove_user/2,
+	 plain_password_required/0
+	]).
+
+-include("eldap/eldap.hrl").
+
+%%%----------------------------------------------------------------------
+%%% API
+%%%----------------------------------------------------------------------
+start() ->
+    LDAPServers = ejabberd_config:get_local_option(ldap_servers),
+    RootDN = ejabberd_config:get_local_option(ldap_rootdn),
+    Password = ejabberd_config:get_local_option(ldap_password),
+    eldap:start_link("ejabberd", LDAPServers, 389, RootDN, Password),
+    eldap:start_link("ejabberd_bind", LDAPServers, 389, RootDN, Password),
+    ok.
+
+plain_password_required() ->
+    true.
+
+check_password(User, Password) ->
+    case find_user_dn(User) of
+	false ->
+	    false;
+	DN ->
+	    case eldap:bind("ejabberd_bind", DN, Password) of
+		ok ->
+		    true;
+		_ ->
+		    false
+	    end
+    end.
+
+check_password(User, Password, _StreamID, _Digest) ->
+    check_password(User, Password).
+
+set_password(_User, _Password) ->
+    {error, not_allowed}.
+
+try_register(_User, _Password) ->
+    {error, not_allowed}.
+
+dirty_get_registered_users() ->
+    [].
+
+get_password(_User) ->
+    false.
+
+get_password_s(_User) ->
+    "".
+
+is_user_exists(User) ->
+    case find_user_dn(User) of
+	false ->
+	    false;
+	_DN ->
+	    true
+    end.
+
+remove_user(_User) ->
+    {error, not_allowed}.
+
+remove_user(_User, _Password) ->
+    not_allowed.
+
+
+%%%----------------------------------------------------------------------
+%%% Internal functions
+%%%----------------------------------------------------------------------
+
+find_user_dn(User) ->
+    Attr = ejabberd_config:get_local_option(ldap_uidattr),
+    Filter = eldap:equalityMatch(Attr, User),
+    Base = ejabberd_config:get_local_option(ldap_base),
+    case eldap:search("ejabberd", [{base, Base},
+				   {filter, Filter},
+				   {attributes, []}]) of
+	#eldap_search_result{entries = [E | _]} ->
+	    E#eldap_entry.object_name;
+	_ ->
+	    false
+    end.
+