2

我正在尝试在我公司的应用程序中实现 LDAP 身份验证。我正在使用 Laravel 5.8 和 LdapRecord 包（https://github.com/DirectoryTree/LdapRecord-Laravel）。

我已成功将应用程序与 LDAP 服务器连接，但身份验证仍然无法正常工作，我知道为什么...... :(

这是我的代码：

登录控制器

<?php

namespace App\Http\Controllers\Auth;

use App\Http\Controllers\Controller;
use Illuminate\Foundation\Auth\AuthenticatesUsers;
use LdapRecord\Container;
use Illuminate\Http\Request;
use App\User;

class LoginController extends Controller
{
    /*
    |--------------------------------------------------------------------------
    | Login Controller
    |--------------------------------------------------------------------------
    |
    | This controller handles authenticating users for the application and
    | redirecting them to your home screen. The controller uses a trait
    | to conveniently provide its functionality to your applications.
    |
    */
    use AuthenticatesUsers;

    /**
     * LDAP Connection 
     */
    private $connection;

    /**
     * Where to redirect users after login.
     *
     * @var string
     */
    protected $redirectTo = '/home';

    /**
     * Create a new controller instance.
     *
     * @return void
     */
    public function __construct()
    {
        $this->connection = Container::getConnection('default');
        $this->middleware('guest')->except('logout');
    }

    public function username() {
        return 'username';
    }

    protected function credentials(Request $request)
    {
        return [
            'comptent' => $request->username,
            'password' => $request->password,
        ];
    }
}

这是配置 - auth.php：

    'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'ldap',
        ],
// some code
    'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model' => App\Ldap\User::class,
        ],
        'ldap' => [
            'driver' => 'ldap',
            'model' => LdapRecord\Models\ActiveDirectory\User::class,
            'rules' => [],
            'database' => [
                'model' => App\Ldap\User::class,
                'sync_passwords' => false,
                'sync_attributes' => [
                    'LASTNAME' => 'sn',
                    'FIRSTNAME' => 'givenname',
                    'ACTIVE_DIRECTORY_USER' => 'comptent'

用户模型 - User.php：

<?php

namespace App\Ldap;

//use Illuminate\Database\Eloquent\Model;
use LdapRecord\Laravel\Auth\HasLdapUser;
use Illuminate\Notifications\Notifiable;
use Illuminate\Contracts\Auth\MustVerifyEmail;
use Illuminate\Foundation\Auth\User as Authenticatable;
use LdapRecord\Laravel\Auth\AuthenticatesWithLdap;
use LdapRecord\Laravel\Auth\LdapAuthenticatable;
use LdapRecord\Models\Model;

/**
 * Class User
 * 
 * @property int $ID_USER
 * @property string $LASTNAME
 * @property string $FIRSTNAME
 * @property string $ACTIVE_DIRECTORY_USER
 * @property int $ID_ROLE
 * 
 * @property Role $role
 *
 * @package App\Models
 */
class User extends Model
{

    use Notifiable, AuthenticatesWithLdap;

    /**
     * The object classes of the LDAP model.
     *
     * @var array
     */
    public static $objectClasses = [];
    protected $table = 'user';
    protected $primaryKey = 'ID_USER';
    public $incrementing = false;
    public $timestamps = false;

    protected $casts = [
        'ID_USER' => 'int',
        'ID_ROLE' => 'int'
    ];

    protected $fillable = [
        'LASTNAME',
        'FIRSTNAME',
        'ACTIVE_DIRECTORY_USER',
        'ID_ROLE'
    ];

    public function role()
    {
        return $this->belongsTo(Role::class, 'ID_ROLE');
    }
}

这是我尝试登录时的一些日志：

[2020-02-19 15:49:12] local.INFO: LDAP (ldap://srv-gldap1:389) - Operation: Listing - Base DN: ou=utilisateurs,dc=rms,dc=fr - Filter: (objectclass=*) - Selected: (*) - Time Elapsed: 922.65  
[2020-02-19 15:49:12] local.INFO: LDAP (ldap://srvil-gdldap1:389) - Operation: Search - Base DN: ou=utilisateurs,dc=rms,dc=fr - Filter: (comptentdomaine=hippolyte.massicot@rms.local) - Selected: (*) - Time Elapsed: 101.91

有没有人已经使用过这个包并且可以帮助我编写代码？先感谢您 ：）

4

0 回答 0