使用LDAP和本地数据库进行Rails身份验证

2 回答

• 3

  Ruby的Net :: LDAP库非常好 .

  这是我多年来一直使用的简化版本：

  # sessions_controller.rb
  def create
    user = User.find_by_login(params[:login])
    if user && Ldap.authenticate(params[:login], params[:password])
      self.current_user = user
      Rails.logger.info "Logged in #{user.name}"
      flash[:notice] = "Successfully Logged In!"
      redirect_back_or_default root_url
    else
      flash[:alert] = "Invalid User credentials"
      render :new
    end
  end
  
  # lib/ldap.rb
  # Ldap.authenticate('user','password')
  # Returns true if validated
  # Returns false if invalidated
  # Returns nil if LDAP unavailable
  require 'net/ldap'
  class Ldap
    def self.config
      # this is actually loaded from a yaml config file
      {
        :domain => 'YOURDOMAIN',
        :host   => '10.10.10.100'
      }
    end
  
    def self.authenticate(login, password)
      conn = Net::LDAP.new(
        :host       => config[:host],
        :port       => 636,
        :base       => "dc=#{config[:domain]}, dc=local",
        :encryption => :simple_tls,
        :auth       => {
          :username => "#{login}@#{config[:domain]}.local",
          :password => password,
          :method   => :simple
        }
      )
      Timeout::timeout(15) do
        return conn.bind ? true : false
      end
    rescue Net::LDAP::LdapError => e
      notify_ldap_admin(config[:host],'Error',e)
      nil
    rescue Timeout::Error => e
      notify_ldap_admin(config[:host],'Timeout',e)
      nil
    end
  
    def self.notify_ldap_admin(host,error_type,error)
      msg = "LDAP #{error_type} on #{host}"
      RAILS_DEFAULT_LOGGER.debug(msg)
      DeveloperMailer.deliver_ldap_failure_msg(msg,error)
    end
  end
  

  回复于 2024-05-06T12:58:38+08:00
• 0

  查看devise和devise_ldap_authenticatable库 .

  回复于 2024-05-06T12:58:38+08:00