4953e211fe
* make tidy * Update AuthRadius version * Load Authen::Radius with an eval
91 lines
1.8 KiB
Perl
91 lines
1.8 KiB
Perl
##@file
|
||
# Radius authentication backend file
|
||
|
||
##@class
|
||
# Radius authentication backend class
|
||
package Lemonldap::NG::Portal::AuthRadius;
|
||
|
||
# Author: Sebastien Bahloul
|
||
|
||
use Lemonldap::NG::Portal::Simple;
|
||
use Lemonldap::NG::Portal::_WebForm;
|
||
|
||
our $VERSION = '1.2.0';
|
||
use base qw(Lemonldap::NG::Portal::_WebForm);
|
||
|
||
## @apmethod int authInit()
|
||
# Set _authnLevel
|
||
# @return Lemonldap::NG::Portal constant
|
||
sub authInit {
|
||
my $self = shift;
|
||
|
||
# require Perl module
|
||
eval { require Authen::Radius; };
|
||
if ($@) {
|
||
$self->lmLog( "Module Authen::Radius not found in @INC", 'error' );
|
||
return PE_ERROR;
|
||
}
|
||
|
||
$self->lmLog( "Opening connexion to " . $self->{radiusServer} . " ...",
|
||
'debug' );
|
||
$self->{radius} = new Authen::Radius(
|
||
Host => $self->{radiusServer},
|
||
Secret => $self->{radiusSecret}
|
||
);
|
||
|
||
unless ( $self->{radius} ) {
|
||
return PE_RADIUSCONNECTFAILED;
|
||
}
|
||
|
||
$self->{_authnLevel} = $self->{radiusAuthnLevel};
|
||
|
||
PE_OK;
|
||
}
|
||
|
||
## @apmethod int authenticate()
|
||
# Authenticate user by LDAP mechanism.
|
||
# @return Lemonldap::NG::Portal constant
|
||
sub authenticate {
|
||
my $self = shift;
|
||
|
||
unless ( $self->{radius} ) {
|
||
return PE_RADIUSCONNECTFAILED;
|
||
}
|
||
|
||
my $res = $self->{radius}->check_pwd( $self->{user}, $self->{password} );
|
||
|
||
unless ( $res == 1 ) {
|
||
$self->lmLog( "Unable to authenticate " . $self->{user} . " !",
|
||
'notice' );
|
||
return PE_BADCREDENTIALS;
|
||
}
|
||
return PE_OK;
|
||
}
|
||
|
||
## @apmethod int authFinish()
|
||
# Unbind.
|
||
# @return Lemonldap::NG::Portal constant
|
||
sub authFinish {
|
||
my $self = shift;
|
||
|
||
$self->{radius} = 0;
|
||
|
||
PE_OK;
|
||
}
|
||
|
||
## @apmethod int authLogout()
|
||
# Does nothing
|
||
# @return Lemonldap::NG::Portal constant
|
||
sub authLogout {
|
||
PE_OK;
|
||
}
|
||
|
||
## @apmethod boolean authForce()
|
||
# Does nothing
|
||
# @return result
|
||
sub authForce {
|
||
return 0;
|
||
}
|
||
|
||
1;
|