class.smbAuthDriver.php

<?php
/*
 * Copyright 2007-2013 Charles du Jeu - Abstrium SAS <team (at) pyd.io>
 * This file is part of Pydio.
 *
 * Pydio is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * Pydio is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with Pydio.  If not, see <http://www.gnu.org/licenses/>.
 *
 * The latest code can be found at <http://pyd.io/>.
 */
use Pydio\Auth\Core\AbstractAuthDriver;
use Pydio\Auth\Core\AJXP_Safe;
use Pydio\Core\Services\AuthService;
use Pydio\Core\Services\ConfService;

defined('AJXP_EXEC') or die( 'Access not allowed');

/**
 * Authenticates user against an SMB server
 * @package AjaXplorer_Plugins
 * @subpackage Auth
 */
class smbAuthDriver extends AbstractAuthDriver
{
    public $driverName = "smb";

    public function listUsers($baseGroup = "/", $recursive = true)
    {
        $adminUser = $this->options["ADMIN_USER"];
        return array($adminUser => $adminUser);
    }

    public function userExists($login)
    {
        return true;
    }

    public function logoutCallback(\Psr\Http\Message\ServerRequestInterface $requestInterface, \Psr\Http\Message\ResponseInterface &$responseInterface)
    {
        AJXP_Safe::clearCredentials();
        foreach($_SESSION as $key => $val){
            if((substr($key,-4) === "disk") && (substr($key,0,4) == "smb_")){
                unset($_SESSION[$key]);
            }
        }
        AuthService::disconnect();
        session_write_close();
        $x = new \Pydio\Core\Http\Response\SerializableResponseStream();
        $x->addChunk(new \Pydio\Core\Http\Message\LoggingResult(2));
        $responseInterface = $responseInterface->withBody($x);
    }

    public function checkPassword($login, $pass, $seed)
    {
        if(!defined('SMB4PHP_SMBCLIENT'))
        {
            define('SMB4PHP_SMBCLIENT', $this->pluginConf["SMBCLIENT"]);
        }

        require_once(AJXP_INSTALL_PATH."/".AJXP_PLUGINS_FOLDER."/access.smb/smb.php");

        $_SESSION["AJXP_SESSION_REMOTE_PASS"] = $pass;
        $repoId = $this->options["REPOSITORY_ID"];
        $repoObject = ConfService::getRepositoryById($repoId);
        if(!isSet($repoObject)) throw new Exception("Cannot find repository with id ".$repoId);
        $path = "";
        $basePath = $repoObject->getOption("PATH", true);
        $basePath = str_replace("AJXP_USER", $login, $basePath);
        $host = $repoObject->getOption("HOST");
        $domain = $repoObject->getOption("DOMAIN", true);
        $smbPath = $repoObject->getOption("PATH", true);

        if(!empty($domain)){
            $login = $domain.$login;
        }
        $strTmp = "$login:$pass@".$host."/".$basePath."/";
        $strTmp = str_replace("//", "/",$strTmp);
        $url = "smbclient://".$strTmp;
        try {
            if (!is_dir($url)) {
                $this->logDebug("SMB Login failure");
                $_SESSION["AJXP_SESSION_REMOTE_PASS"] = '';
                foreach($_SESSION as $key => $val){
                    if((substr($key,-4) === "disk") && (substr($key,0,4) == "smb_")){
                        unset($_SESSION[$key]);
                    }
                }
                return false;
            }
            AJXP_Safe::storeCredentials($login, $pass);
        } catch (Exception $e) {
            return false;
        }
        return true;
    }

    public function usersEditable()
    {
        return false;
    }
    public function passwordsEditable()
    {
        return false;
    }

    public function createUser($login, $passwd)
    {
    }
    public function changePassword($login, $newPass)
    {
    }
    public function deleteUser($login)
    {
    }

    public function getUserPass($login)
    {
        return "";
    }

}