{"id":535,"date":"2009-10-24T23:56:00","date_gmt":"2009-10-24T15:56:00","guid":{"rendered":"http:\/\/note.systw.net\/note\/?p=535"},"modified":"2023-11-04T00:20:15","modified_gmt":"2023-11-03T16:20:15","slug":"php-ldap","status":"publish","type":"post","link":"https:\/\/systw.net\/note\/archives\/535","title":{"rendered":"PHP LDAP"},"content":{"rendered":"\n

php\u4f7f\u7528ldap<\/p>\n\n\n\n

………………………………………………………..<\/p>\n\n\n\n

\u74b0\u5883\u9810\u8a2d\u5982\u4e0b
ldap\u4e3b\u6a5f\u57f7\u884cbind_anon\u505c\u7528\u533f\u540d\u7e6b\u7d50
ldap\u4e3b\u6a5f\u70ba10.20.30.40
ldap\u4e3b\u6a5f\u4f7f\u7528\u7684port\u70ba389
\u9a57\u8b49\u7528\u7684dn\u70bauid=raymond,ou=people,dc=study,dc=net
\u9a57\u8b49\u7528\u7684dn\u5bc6\u78bc\u70ba1234567
\u8981\u986f\u793a\u76f8\u95dc\u8cc7\u6599\u7684user\u662fraymond

<\/p>\n\n\n\n

\u7b2c\u4e00\u7a2e\u60c5\u6cc1<\/strong><\/h2>\n\n\n\n

1
dn\u7d50\u69cb\u76f8\u540c\u5982\u4e0b
uid=raymond,ou=people,dc=study,dc=net
uid=tom,ou=people,dc=study,dc=net
uid=peter,ou=people,dc=study,dc=net

\u53ef\u7528\u4ee5\u4e0b\u7a0b\u5f0f\u78bc\u89e3\u6c7a<\/p>\n\n\n\n

\/\/ldap\u76f8\u95dc\u53c3\u6578
$ldap[‘host’] = ‘10.20.30.40’;
$ldap[‘port’] = 389;
$ldap[‘user’] = ‘raymond’;
$ldap[‘dn’] = ‘uid=’.$ldap[‘user’].’,ou=people,dc=study,dc=net’;
$ldap[‘dnpass’] = ‘1234567’;
$ldap[‘base’] = ‘ou=people,dc=study,dc=net’;<\/p>\n\n\n\n

\/\/\u8207ldap\u9023\u7dda
$ldapconnect=ldap_connect($ldap[‘host’],$ldap[‘port’])or die(‘Could not connect to server’);<\/p>\n\n\n\n

\/\/\u9a57\u8b49ldap\u5e33\u5bc6
$ldapbind=ldap_bind($ldapconnect,$ldap[‘dn’],$ldap[‘dnpass’]);
if(!$ldapbind){echo ldap_error($ldapconnect);exit;}

\/\/\u5230\u6b64\u8a8d\u8b49\u968e\u6bb5\u4ee5\u7d50\u675f,\u4ee5\u4e0b\u662f\u9078\u64c7\u6027code<\/p>\n\n\n\n

\/\/\u53d6\u5f97uid=$ldap[‘user’]\u7684\u76f8\u95dc\u8cc7\u8a0a
$ldapresult=ldap_search($ldapconnect,$ldap[‘base’],’uid=’.$ldap[‘user’]);
if($ldapresult){
\/\/\u5c07$ldap[‘user’]\u7684\u8cc7\u8a0a\u5b58\u5230$ldapinfo\u9663\u5217
$ldapinfo=ldap_get_entries($ldapconnect,$ldapresult);
}<\/p>\n\n\n\n

\/\/\u986f\u793a$ldapinfo\u9663\u5217\u5167\u8cc7\u6599
if($ldapinfo){
print_r($ldapinfo);
}<\/p>\n\n\n\n

\/\/\u95dc\u9589ldap\u9023\u7dda
ldap_close($ldapconnect);<\/p>\n\n\n\n

?><\/p>\n\n\n\n

\u7b2c2\u7a2e\u60c5\u6cc1<\/strong><\/h2>\n\n\n\n

1
dn\u7d50\u69cb\u4e0d\u540c,\u5982\u4e0b<\/strong>
uid=raymond,ou=sales,ou=taipei,dc=study,dc=net
uid=tom,ou=account,dc=study,dc=net
uid=peter,ou=technology,dc=study,dc=net
2
\u5bc6\u78bc\u5132\u5b58\u5728userpassword\u6b04\u4f4d<\/strong>

\u53ef\u7528\u4ee5\u4e0b\u7a0b\u5f0f\u78bc\u5132\u5b58<\/p>\n\n\n\n

$ldap['host'] = '10.20.30.40';\n$ldap['port'] = 389;\n$ldap['uid']='raymond';\n$ldap['dnpw']='12345676';\n$ldap['basedn']=\"dc=study,dc=net\";\n\n\/\/ connecting to ldap\n$ldap['conn']=ldap_connect($ldap['host'],$ldap['port'])or die('Could not connect to server');\n\n\/\/search uid=\"raymond\"\n$filter=\"(&(uid=\".$ldap['uid'].\")(userpassword=*))\";\n$sr=ldap_search($ldap['conn'],$ldap['basedn'],$filter,array(\"uid\"));\n\n\/\/get search result\n$ldapinfo = ldap_get_entries($ldap['conn'],$sr);\n$ldap['dn']=$ldapinfo[0]['dn'];\n\n\/\/ binding to ldap\n$ldap['bind']=@ldap_bind($ldap['conn'],$ldap['dn'],$ldap['dnpw']);\nif($ldap['bind']){echo 'auth ok'; }<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
……………………………………………………………………..

ldap_get_entries\u6293\u53d6\u7684\u9663\u5217\u683c\u5f0f<\/strong><\/p>\n\n\n\n
\u82e5ldap\u7684\u683c\u5f0f\u70ba<\/p>\n\n\n\n
dn: uid=raymond, ou=people, dc=study, dc=net\nuid: raymond\ncn: raymond\nobjectClass: account\nobjectClass: posixAccount\nobjectClass: top\nobjectClass: shadowAccount\nshadowLastChange: 611773\nloginShell: \/usr\/bin\/tcsh\nuidNumber: 1178\ngidNumber: 10\nhomeDirectory: \/home\/raymond\nuserPassword:: e2NyeXB0fVdQZWt5T3hiYzYzY1U=<\/code><\/pre>\n\n\n\n
\u5247\u4f7f\u7528ldap_get_entries\u6293\u51fa\u4f86\u7684\u8cc7\u6599\u6703\u5982\u4e0b<\/p>\n\n\n\n
Array (
[count] => 1
[0] => Array (
\u3000\u3000[dn] => uid=raymond2, ou=people, dc=study, dc=net )
\u3000\u3000[count] => 9
\u3000\u3000[0] => uid
\u3000\u3000[uid] => Array (
\u3000\u3000\u3000\u3000[count] => 1
\u3000\u3000\u3000\u3000[0] => raymond )
\u3000\u3000[1] => cn
\u3000\u3000[cn] => Array (
\u3000\u3000\u3000\u3000[count] => 1
\u3000\u3000\u3000\u3000[0] => raymond )
\u3000\u3000[2] => objectclass
\u3000\u3000[objectclass] => Array (
\u3000\u3000\u3000\u3000[count] => 4
\u3000\u3000\u3000\u3000[0] => account
\u3000\u3000\u3000\u3000[1] => posixAccount
\u3000\u3000\u3000\u3000[2] => top
\u3000\u3000\u3000\u3000[3] => shadowAccount )
\u3000\u3000[3] => shadowlastchange
\u3000\u3000[shadowlastchange] => Array (
\u3000\u3000\u3000\u3000[count] => 1
\u3000\u3000\u3000\u3000[0] => 611773 )
\u3000\u3000[4] => loginshell
\u3000\u3000[loginshell] => Array (
\u3000\u3000\u3000\u3000[count] => 1
\u3000\u3000\u3000\u3000[0] => \/usr\/bin\/tcsh )
\u3000\u3000[5] => uidnumber
\u3000\u3000[uidnumber] => Array (
\u3000\u3000\u3000\u3000[count] => 1
\u3000\u3000\u3000\u3000[0] => 1178 )
\u3000\u3000[6] => gidnumber
\u3000\u3000[gidnumber] => Array (
\u3000\u3000\u3000\u3000[count] => 1
\u3000\u3000\u3000\u3000[0] => 10 )
\u3000\u3000[7] => homedirectory
\u3000\u3000[homedirectory] => Array (
\u3000\u3000\u3000\u3000[count] => 1
\u3000\u3000\u3000\u3000[0] => \/home\/raymond )
\u3000\u3000[8] => userpassword
\u3000\u3000[userpassword] => Array (
\u3000\u3000\u3000\u3000[count] => 1
\u3000\u3000\u3000\u3000[0] => {crypt}WPekyOxbc63cU )
\u3000\u3000<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
php\u4f7f\u7528ldap ……&#8230 …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[14],"tags":[],"class_list":["post-535","post","type-post","status-publish","format-standard","hentry","category-develop"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/535","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/comments?post=535"}],"version-history":[{"count":0,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/535\/revisions"}],"wp:attachment":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/media?parent=535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/categories?post=535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/tags?post=535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}