Zabbix

<?php

/*

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software: you can redistribute it and/or modify it under the terms of

** the GNU Affero General Public License as published by the Free Software Foundation, version 3.

**

** This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;

** without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

** See the GNU Affero General Public License for more details.

**

** You should have received a copy of the GNU Affero General Public License along with this program.

** If not, see <https://www.gnu.org/licenses/>.

**/

​

​

/**

 * A class for validating LDAP credentials.

 */

class CLdapAuthValidator extends CValidator {

​

    /**

     * Initialized LDAP service instance to test user credentials.

     *

     * @var CLdap

     */

    public $ldap;

​

    /**

     * Checks if the given user name and password are valid.

     *

     * The $value array must have the following attributes:

     * - username   - user name

     * - password   - password

     *

     * @param array $value

     *

     * @return bool

     */

    public function validate($value) {

        $status = $this->ldap->checkCredentials($value['username'], $value['password']);

​

        if (!$status) {

            $this->setError($this->ldap->error);

        }

​

        return $status;

    }

​

    /**

     * Return error message.

     *

     * @return string

     */

    public function getError() {

        $error = parent::getError();

​

        $messages = [

            CLdap::ERR_PHP_EXTENSION => _('PHP LDAP extension missing.'),

            CLdap::ERR_SERVER_UNAVAILABLE => _('Cannot connect to LDAP server.'),

            CLdap::ERR_BIND_FAILED => _('Cannot bind to LDAP server.'),

            CLdap::ERR_BIND_ANON_FAILED => _('Cannot bind anonymously to LDAP server.'),

            CLdap::ERR_OPT_PROTOCOL_FAILED => _('Setting LDAP protocol failed.'),