PHP Class sspmod_ldap_Auth_Process_AttributeAddUsersGroups, simplesamlphp

Author: Ryan Panning ([email protected])

Inheritance: extends sspmod_ldap_Auth_Process_BaseFilter

Show file Open project: simplesamlphp/simplesamlphp

Public Methods

Method	Description
process ( &$request )	This is run when the filter is processed by SimpleSAML.

Protected Methods

Method	Description
getGroups ( array $attributes ) : array	This section of code was broken out because the child filter AuthorizeByGroup can use this method as well.
search ( array $memberof ) : array	Looks for groups from the list of DN's passed. Also recursively searches groups for further membership.
searchActiveDirectory ( string $dn ) : array	Searches LDAP using a ActiveDirectory specific filter, looking for group membership for the users DN. Returns the list of group DNs retrieved.

Method Details

getGroups() protected method

Based on the LDAP product, it will do an optimized search using the required attribute values from the user to get their group membership, recursively.

protected getGroups ( array $attributes ) : array
$attributes	array
return	array

process() public method

It will attempt to find the current users groups using the best method possible for the LDAP product. The groups are then added to the request attributes.

public process ( &$request )
$request

search() protected method

Avoids loops by only searching a DN once. Returns the list of groups found.

protected search ( array $memberof ) : array
$memberof	array
return	array

searchActiveDirectory() protected method

Searches LDAP using a ActiveDirectory specific filter, looking for group membership for the users DN. Returns the list of group DNs retrieved.

protected searchActiveDirectory ( string $dn ) : array
$dn	string
return	array