www.hkvforums.com

<?php
// Initialize session
session_start();

function authenticate($user, $password) {
if(empty($user) || empty($password)) return false;

// Active Directory server
$ldap_host = "server.college.school.edu";

// Active Directory DN
$ldap_dn = "OU=Departments,DC=college,DC=school,DC=edu";

// Active Directory user group
$ldap_user_group = "WebUsers";

// Active Directory manager group
$ldap_manager_group = "WebManagers";

// Domain, for purposes of constructing $user
$ldap_usr_dom = '@college.school.edu';

// connect to active directory
$ldap = ldap_connect($ldap_host);

// verify user and password
if($bind = @ldap_bind($ldap, $user.$ldap_usr_dom, $password)) {
// valid
// check presence in groups
$filter = "(sAMAccountName=".$user.")";
$attr = array("memberof");
$result = ldap_search($ldap, $ldap_dn, $filter, $attr) or exit("Unable to search LDAP server");
$entries = ldap_get_entries($ldap, $result);
ldap_unbind($ldap);

// check groups
foreach($entries[0]['memberof'] as $grps) {
// is manager, break loop
if(strpos($grps, $ldap_manager_group)) { $access = 2; break; }

// is user
if(strpos($grps, $ldap_user_group)) $access = 1;
}

if($access != 0) {
// establish session variables
$_SESSION['user'] = $user;
$_SESSION['access'] = $access;
return true;
} else {
// user has no rights
return false;
}

} else {
// invalid name or password
return false;
}
}

	function getADMemberof($inputString) {
		$sql = "SELECT adgroup, id_area FROM sys_area";
		$stmt = ExecuteQuery($sql);
		$stringValues = array();
		if ($stmt->rowCount() > 0) { // check condition: if record count is greater than 0
			while ($row = $stmt->fetch()) { // loop
			   $stringValues[$row["adgroup"]] = intval($row["id_area"]);
			}
		}
		if (array_key_exists($inputString, $stringValues)) {
			$area = $stringValues[$inputString];
			return $area;
		} else {
			return 0; 
		}
	}

	$ldap_conn = $this->Conn;
	$search_base = "OU=Departments,DC=college,DC=school,DC=edu"; // Your LDAP Directory
	$search_filter = "(sAMAccountName=" . $usr . ")";
	$search_attributes = array("givenName", "sn", "mail", "employeeID", "memberof");
	$search_result = ldap_search($ldap_conn, $search_base, $search_filter, $search_attributes);
	if ($search_result) {
		$entries = ldap_get_entries($ldap_conn, $search_result);
		for ($i = 0; $i < $entries["count"]; $i++) {
			$name= $entries[$i]["givenname"][0];
			$lastname= $entries[$i]["sn"][0];
			$cuit = $entries[$i]["employeeid"][0];
			$correo = $entries[$i]["mail"][0];
			$delimiter = ",";
			/*
			$cns = [];
			foreach ($entries[$i]["memberof"] as $item) {
				$parts = explode($delimiter, $item);
				if (!empty($parts)) {
					$cns[] = $parts[0];
				}
			}
			$cn = implode(", ", array_slice($cns,1));
			$group= str_replace("CN=","",$cns[1]);
			$area_id = getADMemberof($group);
			$grupos = str_replace("CN=","",$cn);
			*/
			$group_id = "0";
			$user= $name. ' ' . $lastname;
		}
	}

		ExecuteUpdate("INSERT INTO `webuser` (
		`user`,
		`name`,
		`password`,		
		`userlevel_ID`
		) VALUES (
		'".$usr."',
		'".$user."' ,
		'".md5($pwd)."',
		'".$group_id."'
		)");