1 -- check if credentials (given by a user) are valid to bind to LDAP

2 -- --------------------------------------------------------------------------

3 --

4 -- arguments:

5 -- dn: The distinguished name to be used fo binding (string, required)

6 -- password: Password credentials (string, required)

7 --

8 -- returns

9 -- success: true in cases of valid credentials

10 -- false in cases of invalid credentials

11 -- nil in undetermined cases, i.e. unavailable LDAP server

12 -- err: error code in case of errors, otherwise nil (string)

13 -- err2: error dependent extra error information

14

15 function ldap.check_credentials(login, password)

16

17 local filter = config.ldap.member.login_filter_map(login)

18 local ldap_entry, err, err2 = ldap.get_member_entry(filter)

19

20 if err == "too_many_entries_found" then

21 return false, "invalid_credentials"

22 end

23

24 if err then

25 return nil, err

26 end

27 if not ldap_entry then

28 return false, "invalid_credentials"

29 end

30

31 local dn = ldap_entry.dn

32

33 local ldap, err, err2 = ldap.bind(dn, password)

34

35 if err == "invalid_credentials" then

36 return false, "invalid_credentials"

37 end

38

39 if err then

40 return nil, err, err2

41 end

42

43 ldap:unbind()

44

45 return ldap_entry

46

47 end