migration to nextcloud app v3.0.0

Signed-off-by: Biermair Martin <martin.biermair@wimbergerhaus.at>
2022-04-10 10:47:18 +02:00
parent 8ec7a0b597
commit 990b6d73d3
12 changed files with 73 additions and 38 deletions
--- a/lib/SMB.php
+++ b/lib/SMB.php
@@ -0,0 +1,94 @@
+<?php
+/**
+ * Copyright (c) 2012 Robin Appelman <icewind@owncloud.com>
+ * This file is licensed under the Affero General Public License version 3 or
+ * later.
+ * See the COPYING-README file.
+ */
+namespace OCA\UserExternal;
+
+/**
+ * User authentication via samba (smbclient)
+ *
+ * @category Apps
+ * @package  UserExternal
+ * @author   Robin Appelman <icewind@owncloud.com>
+ * @license  http://www.gnu.org/licenses/agpl AGPL
+ * @link     http://github.com/owncloud/apps
+ */
+class SMB extends Base{
+	private $host;
+
+	const SMBCLIENT = 'smbclient -L';
+	const LOGINERROR = 'NT_STATUS_LOGON_FAILURE';
+
+	/**
+	 * Create new samba authentication provider
+	 *
+	 * @param string $host Hostname or IP of windows machine
+	 */
+	public function __construct($host) {
+		parent::__construct($host);
+		$this->host=$host;
+	}
+
+	/**
+	 * @param string $uid
+	 * @param string $password
+	 * @return bool
+	 */
+	private function tryAuthentication($uid, $password) {
+		$uidEscaped = escapeshellarg($uid);
+		$password = escapeshellarg($password);
+		$command = self::SMBCLIENT.' '.escapeshellarg('//' . $this->host . '/dummy').' -U '.$uidEscaped.'%'.$password;
+		$lastline = exec($command, $output, $retval);
+		if ($retval === 127) {
+			\OC::$server->getLogger()->error(
+				'ERROR: smbclient executable missing',
+				['app' => 'user_external']
+			);
+			return false;
+		} else if (strpos($lastline, self::LOGINERROR) !== false) {
+			//normal login error
+			return false;
+		} else if (strpos($lastline, 'NT_STATUS_BAD_NETWORK_NAME') !== false) {
+			//login on minor error
+			goto login;
+		} else if ($retval !== 0) {
+			//some other error
+			\OC::$server->getLogger()->error(
+				'ERROR: smbclient error: ' . trim($lastline),
+				['app' => 'user_external']
+			);
+			return false;
+		} else {
+			login:
+			return $uid;
+		}
+	}
+
+	/**
+	 * Check if the password is correct without logging in the user
+	 *
+	 * @param string $uid      The username
+	 * @param string $password The password
+	 *
+	 * @return true/false
+	 */
+	public function checkPassword($uid, $password) {
+		// Check with an invalid password, if the user authenticates then fail
+		$attemptWithInvalidPassword = $this->tryAuthentication($uid, base64_encode($password));
+		if(is_string($attemptWithInvalidPassword)) {
+			return false;
+		}
+
+		// Check with valid password
+		$attemptWithValidPassword = $this->tryAuthentication($uid, $password);
+		if(is_string($attemptWithValidPassword)) {
+			$this->storeUser($uid);
+			return $uid;
+		}
+
+		return false;
+	}
+}