* @category Horde
* @copyright 2004-2017 Horde LLC
* @license http://www.horde.org/licenses/lgpl21 LGPL-2.1
* @package Auth
*/
class Horde_Auth_Peclsasl extends Horde_Auth_Base
{
/**
* Constructor.
*
* @param array $params Optional parameters:
*
* 'app' - (string) The name of the authenticating application.
* DEFAULT: horde
* 'service' - (string) The name of the SASL service to use when
* authenticating.
* DEFAULT: php
*
*
* @throws Horde_Auth_Exception
*/
public function __construct(array $params = array())
{
if (!Horde_Util::extensionExists('sasl')) {
throw new Horde_Auth_Exception('Horde_Auth_Peclsasl:: requires the sasl PECL extension to be loaded.');
}
$params = array_merge(array(
'app' => 'horde',
'service' => 'php'
), $params);
parent::__construct($params);
sasl_server_init($this->_params['app']);
}
/**
* Find out if a set of login credentials are valid.
*
* @param string $userId The userId to check.
* @param array $credentials An array of login credentials.
*
* @throws Horde_Auth_Exception
*/
protected function _authenticate($userId, $credentials)
{
if (empty($credentials['password'])) {
throw new Horde_Auth_Exception('', Horde_Auth::REASON_BADLOGIN);
}
$conn = sasl_server_new($this->_params['service']);
if (!is_resource($conn)) {
throw new Horde_Auth_Exception('Failed to create new SASL connection.');
}
if (!sasl_checkpass($conn, $userId, $credentials['password'])) {
throw new Horde_Auth_Exception(sasl_errdetail($conn));
}
}
}