e502a3dc57
* new feature: Lemonldap::NG::Handler::CGI can be used directly in Perl CGI instead of using a real handler * little bugs correction
203 lines
4.4 KiB
Perl
203 lines
4.4 KiB
Perl
#==============================================================================
|
|
# Liberty Alliance Authentication for LemonLDAP.
|
|
#
|
|
# This file is part of the LemonLDAP project and released under GPL.
|
|
#==============================================================================
|
|
|
|
package Lemonldap::NG::Portal::AuthLA;
|
|
|
|
use strict;
|
|
use warnings;
|
|
|
|
use Lemonldap::NG::Portal::SharedConf qw(:all);
|
|
use lasso;
|
|
|
|
*EXPORT_OK = *Lemonldap::NG::Portal::SharedConf::EXPORT_OK;
|
|
*EXPORT_TAGS = *Lemonldap::NG::Portal::SharedConf::EXPORT_TAGS;
|
|
*EXPORT = *Lemonldap::NG::Portal::SharedConf::EXPORT;
|
|
|
|
our $VERSION = '0.1';
|
|
|
|
our @ISA = qw(Lemonldap::NG::Portal::SharedConf);
|
|
|
|
#==============================================================================
|
|
# Overloaded methods
|
|
#==============================================================================
|
|
|
|
# Main process as described in Portal::Simple module
|
|
|
|
# 1. Retrieve source URL
|
|
# Not overloaded
|
|
|
|
# 2. Control existing sessions
|
|
# Not overloaded
|
|
|
|
# 3. Retrieve user credentials
|
|
# Test here if the user was authenticated by IdP
|
|
sub extractFormInfo {
|
|
my $self = shift;
|
|
&_lasso_init();
|
|
my $libertyFilesDir = $self->{libertyFilesDir} ;
|
|
my $server = &_lasso_create_server($libertyFilesDir);
|
|
my $login = &_lasso_create_authnrequest($server);
|
|
|
|
print STDERR $server->dump();
|
|
print STDERR $login->dump();
|
|
|
|
return PE_OK;
|
|
}
|
|
|
|
# 4. LDAP format filter for attributes reading
|
|
# We must retrive user DN in SAML response
|
|
# Or use WSF to retrieve attributes
|
|
sub formateFilter {
|
|
my $self = shift;
|
|
|
|
# Get DN in SAML response (TODO)
|
|
my $dn = "uid=clement,ou=personnes,dc=linagora,dc=com";
|
|
|
|
# Explode DN to build RDN
|
|
my @rdn = split /,/ , $dn;
|
|
|
|
$self->{filter}="(".shift(@rdn).")";
|
|
|
|
return PE_OK;
|
|
}
|
|
|
|
# 5. LDAP connection
|
|
# Overload only if WSF is used to retrieve attributes
|
|
#sub connectLDAP {
|
|
# return PE_OK;
|
|
#}
|
|
|
|
# 6. LDAP bind (with Directory Manager or anonymous)
|
|
# Overload only if WSF is used to retrieve attributes
|
|
#sub bind {
|
|
# return PE_OK;
|
|
#}
|
|
|
|
|
|
# 7. Search the DN
|
|
# Overload only if WSF is used to retrieve attributes
|
|
#sub search {
|
|
# return PE_OK;
|
|
#}
|
|
|
|
# 8. Load parameters
|
|
# Overload only if WSF is used to retrieve attributes
|
|
#sub setSessionInfo {
|
|
# # Use WSF to get "exprotedVars"
|
|
# return PE_OK;
|
|
#}
|
|
|
|
# 9. Set macros
|
|
# Not overloaded
|
|
|
|
# 10. Set groups
|
|
# Not overloaded
|
|
|
|
# 11. LDAP unbind
|
|
# Overload only if WSF is used to retrieve attributes
|
|
#sub unbind {
|
|
# return PE_OK;
|
|
#}
|
|
|
|
# 12. Authentication
|
|
# Authentication is done by IdP, so we disable this step
|
|
sub authenticate {
|
|
return PE_OK;
|
|
}
|
|
|
|
# 13. Store parameters in session
|
|
# Not overloaded
|
|
|
|
# 14. Build cookie
|
|
# Not overloaded
|
|
|
|
# 15. Log
|
|
# Not overloaded
|
|
|
|
# 16. Redirection
|
|
# Not overloaded
|
|
|
|
#==============================================================================
|
|
# Liberty Alliance methods
|
|
#==============================================================================
|
|
# Lasso intialisation
|
|
sub _lasso_init {
|
|
lasso::init;
|
|
}
|
|
|
|
# Create server object
|
|
sub _lasso_create_server {
|
|
|
|
# TODO: file names in global configuration
|
|
|
|
my $libertyFilesDir = shift;
|
|
|
|
my $server = lasso::Server->new(
|
|
"$libertyFilesDir/lemonldapng-metadata.xml",
|
|
"private-key.pem",
|
|
undef, undef);
|
|
|
|
$server->addProvider(
|
|
$lasso::PROVIDER_ROLE_IDP,
|
|
"$libertyFilesDir/idp-http-authentic.demo.interldap.org-liberty-metadata-metadata.xml",
|
|
"$libertyFilesDir/idp-http-authentic.demo.interldap.org-liberty-metadata-publickey.pem",
|
|
undef);
|
|
|
|
return $server;
|
|
}
|
|
|
|
# Create AuthnRequest
|
|
sub _lasso_create_authnrequest {
|
|
|
|
my $server = shift;
|
|
|
|
my $login = lasso::Login->new($server);
|
|
|
|
return $login;
|
|
}
|
|
|
|
|
|
1;
|
|
__END__
|
|
|
|
=head1 NAME
|
|
|
|
Lemonldap::NG::Portal::AuthLA - Provide Liberty Alliance Authentication
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
=head1 SEE ALSO
|
|
|
|
L<Lemonldap::NG::Portal::SharedConf>, L<Lemonldap::NG::Portal>,
|
|
L<Lemonldap::NG::Handler>, L<Lemonldap::NG::Manager>,
|
|
http://wiki.lemonldap.objectweb.org/xwiki/bin/view/NG/Presentation
|
|
|
|
=head1 AUTHOR
|
|
|
|
Clement Oudot, E<lt>coudot@linagora.comE<gt>
|
|
|
|
=head1 BUG REPORT
|
|
|
|
Use OW2 system to report bug or ask for features:
|
|
L<http://forge.objectweb.org/tracker/?group_id=274>
|
|
|
|
=head1 DOWNLOAD
|
|
|
|
Lemonldap::NG is available at
|
|
L<http://forge.objectweb.org/project/showfiles.php?group_id=274>
|
|
|
|
=head1 COPYRIGHT AND LICENSE
|
|
|
|
Copyright (C) 2007 by Clement Oudot, E<lt>coudot@linagora.comE<gt>
|
|
|
|
This library is free software; you can redistribute it and/or modify
|
|
it under the same terms as Perl itself, either Perl version 5.8.4 or,
|
|
at your option, any later version of Perl 5 you may have available.
|
|
|
|
=cut
|