simple_ldap_authenticator 1.1.0 → 1.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3a0cd12219f55450a7360afd838042eeeb7c96914fa01e7f573246c8de9bec8c
-  data.tar.gz: 38e42cc1bd4bc35bf8f5d7f71317d53bf0aa816041a5198aaaa8abe06bddc954
+  metadata.gz: 3dbf224e93ab7c30ed11038747ecaec5dc263715cb9ab03172f6a1d605bac947
+  data.tar.gz: bb5b1c047030368ea994ea55b35aee888596d5976323780109437805776a4b34
 SHA512:
-  metadata.gz: fc4aa226b58a7d8889e3049ba134c194466951e4691a9a3be58c083460dec02295632a49cfe8bd274612d8fe684426d1b0c02f3eec6d2a312a2e26eca4cf1d4f
-  data.tar.gz: 6d95e78ff27cce08a1f7cebd9c95499701efffcdae602243079763ed085936215255318586d4187d5e0f4e2c9e60a8dfed829436f1c6f9e8ff8d9243e150dd10
+  metadata.gz: 177e31bda9a64aa956f2f67bd484674d238fcf16c0721892dbfd7ceaf7ae0a78902accf2378879c1a8568ea29404aa2593f64d8f43187549395e1d4a165bbc9a
+  data.tar.gz: 6d627bd78c11141794af994ba7ad9876e25e5666fbda3d3fe467bb15e722351a3b9af5b2d6b023d8ee02db59a58426ceed016a55d1607ec1dd39d0a9859db586

data/LICENSE

@@ -1,4 +1,4 @@
-Copyright (c) 2006-2022 Jeremy Evans
+Copyright (c) 2006-2026 Jeremy Evans and contributors
 
 test/ldapserver.rb Copyright (c) 2006-2011 by Francis Cianfrocca and other contributors.
 

data/README

@@ -4,19 +4,17 @@ SimpleLdapAuthenticator
 Allows for simple authentication to an LDAP server with a minimum of
 configuration.  Requires either Ruby/LDAP or Net::LDAP.   
 
-Usage is fairly simple:
+Example Usage:
+
   require 'simple_ldap_authenticator'
+  require 'logger'
+
   SimpleLdapAuthenticator.servers = %w'dc1.domain.com dc2.domain.com'
   SimpleLdapAuthenticator.use_ssl = true
-  SimpleLdapAuthenticator.login_format = '%s @domain.com'
-  SimpleLdapAuthenticator.logger = RAILS_DEFAULT_LOGGER
-  class LoginController < ApplicationController
-    def login
-      return redirect_to(:action=>'try_again') unless \
-        SimpleLdapAuthenticator.valid?(params[:username], \
-        params[:password])  
-      session[:username] = params[:username]
-    end
-  end
+  SimpleLdapAuthenticator.login_format = '%s@domain.com'
+  SimpleLdapAuthenticator.logger = Logger.new($stdout)
+
+  SimpleLdapAuthenticator.valid?(username, password)
+  # => true or false (or raise if there is an issue connecting to the server)
 
-github: http://github.com/jeremyevans/simple_ldap_authenticator/tree/master
+github: http://github.com/jeremyevans/simple_ldap_authenticator

data/lib/simple_ldap_authenticator.rb

@@ -14,22 +14,19 @@
 # * servers = ['dc1.domain.com', 'dc2.domain.com'] # names/addresses of LDAP servers to use
 # * use_ssl = true # for logging in via LDAPS
 # * port = 3289 # instead of 389 for LDAP or 636 for LDAPS
-# * logger = RAILS_DEFAULT_LOGGER # for logging authentication successes/failures
+# * logger = Logger.new($stdout) # for logging authentication successes/failures
 #
 # The class is used as a singleton, you are not supposed to create an
 # instance of it. For example:
 #
-#    require 'simple_ldap_authenticator'
-#    SimpleLdapAuthenticator.servers = %w'dc1.domain.com dc2.domain.com'
-#    SimpleLdapAuthenticator.use_ssl = true
-#    SimpleLdapAuthenticator.login_format = '%s@domain.com'
-#    SimpleLdapAuthenticator.logger = RAILS_DEFAULT_LOGGER
-#    class LoginController < ApplicationController 
-#      def login
-#        return redirect_to(:action=>'try_again') unless SimpleLdapAuthenticator.valid?(params[:username], params[:password])
-#        session[:username] = params[:username]
-#      end
-#    end
+#  require 'simple_ldap_authenticator'
+#
+#  SimpleLdapAuthenticator.servers = %w'dc1.domain.com dc2.domain.com'
+#  SimpleLdapAuthenticator.use_ssl = true
+#  SimpleLdapAuthenticator.login_format = '%s@domain.com'
+#
+#  SimpleLdapAuthenticator.valid?(username, password)
+#  # => true or false (or raise if there is an issue connecting to the server)
 class SimpleLdapAuthenticator
   @servers = ['127.0.0.1']
   @use_ssl = false
@@ -94,34 +91,40 @@ class SimpleLdapAuthenticator
     
     # Check the validity of a login/password combination
     def valid?(login, password)
-      if password.to_s == ''
+      login = login.to_s
+      password = password.to_s
+      connection = self.connection
+      if password == '' || password.include?("\0") || login.include?("\0")
         false
       elsif ldap_library == 'net/ldap'
-        connection.authenticate(login_format % login.to_s, password.to_s)
+        connection.authenticate(login_format % login, password)
         begin
           if connection.bind
-            logger.info("Authenticated #{login.to_s} by #{server}") if logger
+            logger.info("Authenticated #{login} by #{server}") if logger
             true
           else
-            logger.info("Error attempting to authenticate #{login.to_s} by #{server}: #{connection.get_operation_result.code} #{connection.get_operation_result.message}") if logger
-            switch_server unless connection.get_operation_result.code == 49
+            result = connection.get_operation_result
+            if logger
+              logger.info("Error attempting to authenticate #{login} by #{server}: #{result.code} #{result.message} #{result.error_message.to_s.strip}")
+            end
+            switch_server unless result.code == 49
             false
           end
         rescue Net::LDAP::Error, SocketError, SystemCallError => error
-          logger.info("Error attempting to authenticate #{login.to_s} by #{server}: #{error.message}") if logger
+          logger.info("Error attempting to authenticate #{login} by #{server}: #{error.message}") if logger
           switch_server
           false
         end
       else
         connection.unbind if connection.bound?
         begin
-          connection.bind(login_format % login.to_s, password.to_s)
+          connection.bind(login_format % login, password)
           connection.unbind
-          logger.info("Authenticated #{login.to_s} by #{server}") if logger
+          logger.info("Authenticated #{login} by #{server}") if logger
           true
         rescue LDAP::ResultError => error
           connection.unbind if connection.bound?
-          logger.info("Error attempting to authenticate #{login.to_s} by #{server}: #{error.message}") if logger
+          logger.info("Error attempting to authenticate #{login} by #{server}: #{error.message}") if logger
           switch_server unless error.message == 'Invalid credentials'
           false
         end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: simple_ldap_authenticator
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.3.0
 platform: ruby
 authors:
 - Jeremy Evans
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-07-19 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: minitest-global_expectations
@@ -66,7 +65,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-description: 
 email: code@jeremyevans.net
 executables: []
 extensions: []
@@ -76,14 +74,14 @@ files:
 - LICENSE
 - README
 - lib/simple_ldap_authenticator.rb
-homepage: 
-licenses: []
+homepage: http://github.com/jeremyevans/simple_ldap_authenticator
+licenses:
+- MIT
 metadata:
   bug_tracker_uri: https://github.com/jeremyevans/simple_ldap_authenticator/issues
   changelog_uri: https://github.com/jeremyevans/simple_ldap_authenticator/blob/master/CHANGELOG
   mailing_list_uri: https://github.com/jeremyevans/simple_ldap_authenticator/discussions
   source_code_uri: https://github.com/jeremyevans/simple_ldap_authenticator
-post_install_message: 
 rdoc_options:
 - "--inline-source"
 - "--line-numbers"
@@ -95,15 +93,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.9.2
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.7
-signing_key: 
+rubygems_version: 4.0.20
 specification_version: 4
 summary: Easy authentication to an LDAP server(s)
 test_files: []