PHP Class sspmod_ldap_Auth_Process_AttributeAddUsersGroups, simplesamlphp

Author: Ryan Panning ([email protected])
Inheritance: extends sspmod_ldap_Auth_Process_BaseFilter
显示文件 Open project: simplesamlphp/simplesamlphp

Public Methods

Method Description
process ( &$request ) This is run when the filter is processed by SimpleSAML.

Protected Methods

Method Description
getGroups ( array $attributes ) : array This section of code was broken out because the child filter AuthorizeByGroup can use this method as well.
search ( array $memberof ) : array Looks for groups from the list of DN's passed. Also recursively searches groups for further membership.
searchActiveDirectory ( string $dn ) : array Searches LDAP using a ActiveDirectory specific filter, looking for group membership for the users DN. Returns the list of group DNs retrieved.

Method Details

getGroups() protected method

Based on the LDAP product, it will do an optimized search using the required attribute values from the user to get their group membership, recursively.
protected getGroups ( array $attributes ) : array
$attributes array
return array

process() public method

It will attempt to find the current users groups using the best method possible for the LDAP product. The groups are then added to the request attributes.
public process ( &$request )
$request

searchActiveDirectory() protected method

Searches LDAP using a ActiveDirectory specific filter, looking for group membership for the users DN. Returns the list of group DNs retrieved.
protected searchActiveDirectory ( string $dn ) : array
$dn string
return array