OpenNebula

# -------------------------------------------------------------------------- #

# Copyright 2002-2012, OpenNebula Project Leads (OpenNebula.org)             #

#                                                                            #

# Licensed under the Apache License, Version 2.0 (the "License"); you may    #

# not use this file except in compliance with the License. You may obtain    #

# a copy of the License at                                                   #

#                                                                            #

# http://www.apache.org/licenses/LICENSE-2.0                                 #

#                                                                            #

# Unless required by applicable law or agreed to in writing, software        #

# distributed under the License is distributed on an "AS IS" BASIS,          #

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.   #

# See the License for the specific language governing permissions and        #

# limitations under the License.                                             #

#--------------------------------------------------------------------------- #

require 'yaml'

require 'ldap_auth'

module LdapCloudAuth

    def do_auth(env, params={})

        auth = Rack::Auth::Basic::Request.new(env)

        if auth.provided? && auth.basic?

            username, password = auth.credentials

            one_pass = get_password(username, true)

            options=YAML.load(File.read('/etc/one/auth/ldap_auth.conf'))

            ldap=LdapAuth.new(options)

            user_name=ldap.find_user(username)

            if !user_name || user_name != one_pass

                return nil

            end

            if options[:group]

                if !ldap.is_in_group?(user_name, options[:group])

                    return nil

                end

            end

            if ldap.authenticate(user_name, password)

                return username

            end

        end

        return nil

    end

end