我需要使用 Adldap2-Laravel。我的 laravel 应用程序基于 Laravel-样板 5。
我看到该应用程序使用的唯一 login() 方法是这个：vendorlaravelframeworksrcIlluminateFoundationAuthAuthenticatesUsers.php我知道它是一个供应商，但出于测试目的，我以这种方式编辑了public function login(Request $request)方法：
public function login(Request $request){
if (Adldap::auth()->attempt(str_replace('@example.com', '', $request->email), $request->password)) { //THIS IS THE ONLY LINE THAT IA HAVE ADDED, THE REST OF THE CODE IS THE ORIGINAL ONE
$this->validateLogin($request);
if ($this->hasTooManyLoginAttempts($request)) {
$this->fireLockoutEvent($request);
return $this->sendLockoutResponse($request);
}
if ($this->attemptLogin($request)) {
return $this->sendLoginResponse($request);
}
}
else {
$this->incrementLoginAttempts($request);
return $this->sendFailedLoginResponse($request);
}
}
一切正常，但是如何在不接触此供应商文件的情况下做到这一点？我应该在哪里通过该Adlap验证来实现该if-else。
您可以使用默认的登录页面表单。
那里解释了执行此操作的所有步骤： https://github.com/jotaelesalinas/laravel-simple-ldap-auth
我会解释一切，直到第一步，以防你错过了什么。
1. 安装 Adldap2-Laravel(拉拉维尔)
cd yourLaravalProjectFolder
composer require adldap2/adldap2-laravel
2. 在config/app.php注册Adldap的服务提供商和门面
'providers' => [
...
AdldapLaravelAdldapServiceProvider::class,
AdldapLaravelAdldapAuthServiceProvider::class,
],
'aliases' => [
...
'Adldap' => AdldapLaravelFacadesAdldap::class,
],
发布 Adldap：
php artisan vendor:publish --tag="adldap"
3. 在config/auth.php中更改用户提供程序的驱动程序
'providers' => [
'users' => [
'driver' => 'adldap', // was 'eloquent'
'model' => AppUser::class,
],
],
4. 在 中配置 Adldap2 连接config/adldap.php尝试
添加新连接并保持默认值不变，但它不起作用。Adldap2 一直尝试使用默认设置以管理员身份进行连接，所以我不得不直接修改默认值：
'connections' => [
'default' => [
'auto_connect' => false,
'connection' => AdldapConnectionsLdap::class,
'schema' => AdldapSchemasOpenLDAP::class, // was AdldapSchemasActiveDirectory::class
'connection_settings' => [
'account_prefix' => env('ADLDAP_ACCOUNT_PREFIX', ''),
'account_suffix' => env('ADLDAP_ACCOUNT_SUFFIX', ''),
'domain_controllers' => explode(' ', env('ADLDAP_CONTROLLERS', 'corp-dc1.corp.acme.org corp-dc2.corp.acme.org')),
'port' => env('ADLDAP_PORT', 389),
'timeout' => env('ADLDAP_TIMEOUT', 5),
'base_dn' => env('ADLDAP_BASEDN', 'dc=corp,dc=acme,dc=org'),
'admin_account_suffix' => env('ADLDAP_ADMIN_ACCOUNT_SUFFIX', ''),
'admin_username' => env('ADLDAP_ADMIN_USERNAME', ''),
'admin_password' => env('ADLDAP_ADMIN_PASSWORD', ''),
'follow_referrals' => true,
'use_ssl' => false,
'use_tls' => false,
],
],
],
5. 更改要在config/adldap_auth.php中同步的用户名和属性：
此配置指定将哪些字段从 LDAP 服务器复制到每个登录用户的本地数据库中。
要同步的额外属性的一些示例可能是"角色"来控制对某些区域的访问，或者"session_expiration_in_minutes"用于在一段时间后强制注销。我相信你可以想到许多其他用途。
测试 LDAP 服务器中可用的字段数量有限，因此我们将添加"电话"作为示例。
'usernames' => [
'ldap' => env('ADLDAP_USER_ATTRIBUTE', 'userprincipalname'), // was just 'userprincipalname'
'eloquent' => 'username', // was 'email'
],
'sync_attributes' => [
// 'field_in_local_db' => 'attribute_in_ldap_server',
'username' => 'uid', // was 'email' => 'userprincipalname',
'name' => 'cn',
'phone' => 'telephonenumber',
],
6. 在.env中配置 LDAP 和数据库连接
仅供参考，秘密配置，即 API 令牌或数据库密码，应存储在此文件中，Laravel默认包含在 .gitignore 中。
ADLDAP_CONNECTION=default
ADLDAP_CONTROLLERS=ldap.forumsys.com
ADLDAP_BASEDN=dc=example,dc=com
ADLDAP_USER_ATTRIBUTE=uid
ADLDAP_USER_FORMAT=uid=%s,dc=example,dc=com
DB_CONNECTION=sqlite # was 'mysql'
DB_HOST=127.0.0.1 # remove this line
DB_PORT=3306 # remove this line
DB_DATABASE=homestead # remove this line
DB_USERNAME=homestead # remove this line
DB_PASSWORD=secret # remove this line
7. 更改database/migrations/2014_10_12_000000_create_users_table.php
public function up()
{
Schema::create('users', function (Blueprint $table) {
$table->increments('id');
$table->string('username')->unique(); // was 'email'
$table->string('password');
$table->string('name'); // to be read from LDAP
$table->string('phone'); // extra field to read from LDAP
$table->rememberToken();
$table->timestamps();
});
}
8. 删除文件database/migrations/2014_10_12_100000_create_password_resets_table.php
9. 更改app/User.php
protected $fillable = [
// replace 'email' with 'username' and add 'phone'
'name', 'username', 'password', 'phone',
];
10 运行迁移以创建用户表和身份验证基架
在迁移之前，请确保您的数据库已配置且工作正常。
touch database/database.sqlite
php artisan migrate
php artisan make:auth
最后一个命令安装了许多我们不需要的控制器和视图，因此让我们删除它们。
11. 删除这些文件和文件夹
- app/Http/Controllers/Auth/ForgotPasswordController.php
- app/Http/Controllers/Auth/RegisterController.php
- app/Http/Controllers/Auth/ResetPasswordController.php
- resources/views/auth/register.blade.php
- resources/views/auth/passwords --> remove folder and all files inside
12. 从资源/视图/布局/app.blade 中删除此行.php
<li><a href="{{ route('register') }}">Register</a></li>
13. 从资源/视图/欢迎.刀片中删除此行.php
<a href="{{ url('/register') }}">Register</a>
14. 在资源/视图/身份验证/登录.blade 中将"电子邮件"更改为"用户名.php
<div class="form-group{{ $errors->has('username') ? ' has-error' : '' }}">
<label for="username" class="col-md-4 control-label">Username</label>
<div class="col-md-6">
<input id="username" type="text" class="form-control" name="username" value="{{ old('username') }}" required autofocus>
@if ($errors->has('username'))
<span class="help-block">
<strong>{{ $errors->first('username') }}</strong>
</span>
@endif
</div>
</div>
15. 将这些方法添加到登录控制器中app/Http/Controllers/Auth/LoginController.php
不要忘记使用说明。
use IlluminateHttpRequest;
use IlluminateSupportFacadesAuth;
use AdldapLaravelFacadesAdldap;
class LoginController extends Controller {
...
public function username() {
return config('adldap_auth.usernames.eloquent');
}
protected function validateLogin(Request $request) {
$this->validate($request, [
$this->username() => 'required|string|regex:/^w+$/',
'password' => 'required|string',
]);
}
protected function attemptLogin(Request $request) {
$credentials = $request->only($this->username(), 'password');
$username = $credentials[$this->username()];
$password = $credentials['password'];
$user_format = env('ADLDAP_USER_FORMAT', 'cn=%s,'.env('ADLDAP_BASEDN', ''));
$userdn = sprintf($user_format, $username);
// you might need this, as reported in
// [#14](https://github.com/jotaelesalinas/laravel-simple-ldap-auth/issues/14):
// Adldap::auth()->bind($userdn, $password);
if(Adldap::auth()->attempt($userdn, $password, $bindAsUser = true)) {
// the user exists in the LDAP server, with the provided password
$user = AppUser::where($this->username(), $username) -> first();
if (!$user) {
// the user doesn't exist in the local database, so we have to create one
$user = new AppUser();
$user->username = $username;
$user->password = '';
// you can skip this if there are no extra attributes to read from the LDAP server
// or you can move it below this if(!$user) block if you want to keep the user always
// in sync with the LDAP server
$sync_attrs = $this->retrieveSyncAttributes($username);
foreach ($sync_attrs as $field => $value) {
$user->$field = $value !== null ? $value : '';
}
}
// by logging the user we create the session, so there is no need to login again (in the configured time).
// pass false as second parameter if you want to force the session to expire when the user closes the browser.
// have a look at the section 'session lifetime' in `config/session.php` for more options.
$this->guard()->login($user, true);
return true;
}
// the user doesn't exist in the LDAP server or the password is wrong
// log error
return false;
}
protected function retrieveSyncAttributes($username) {
$ldapuser = Adldap::search()->where(env('ADLDAP_USER_ATTRIBUTE'), '=', $username)->first();
if ( !$ldapuser ) {
// log error
return false;
}
// if you want to see the list of available attributes in your specific LDAP server:
// var_dump($ldapuser->attributes); exit;
// needed if any attribute is not directly accessible via a method call.
// attributes in AdldapModelsUser are protected, so we will need
// to retrieve them using reflection.
$ldapuser_attrs = null;
$attrs = [];
foreach (config('adldap_auth.sync_attributes') as $local_attr => $ldap_attr) {
if ( $local_attr == 'username' ) {
continue;
}
$method = 'get' . $ldap_attr;
if (method_exists($ldapuser, $method)) {
$attrs[$local_attr] = $ldapuser->$method();
continue;
}
if ($ldapuser_attrs === null) {
$ldapuser_attrs = self::accessProtected($ldapuser, 'attributes');
}
if (!isset($ldapuser_attrs[$ldap_attr])) {
// an exception could be thrown
$attrs[$local_attr] = null;
continue;
}
if (!is_array($ldapuser_attrs[$ldap_attr])) {
$attrs[$local_attr] = $ldapuser_attrs[$ldap_attr];
}
if (count($ldapuser_attrs[$ldap_attr]) == 0) {
// an exception could be thrown
$attrs[$local_attr] = null;
continue;
}
// now it returns the first item, but it could return
// a comma-separated string or any other thing that suits you better
$attrs[$local_attr] = $ldapuser_attrs[$ldap_attr][0];
//$attrs[$local_attr] = implode(',', $ldapuser_attrs[$ldap_attr]);
}
return $attrs;
}
protected static function accessProtected ($obj, $prop) {
$reflection = new ReflectionClass($obj);
$property = $reflection->getProperty($prop);
$property->setAccessible(true);
return $property->getValue($obj);
}
}
运行网站
大功告成！
不要忘记在本地测试.env文件中将 Web 服务器端口设置为 8000：
APP_URL=http://localhost:8000
让我们运行网站并尝试登录。
php artisan serve
在您喜欢的浏览器中访问http://localhost:8000。
尝试在登录前访问http://localhost:8000/home。
希望对您有所帮助。