How validate user and password in the Active directory ?

[hdkcreative]

Hi guys !

we are using
Laravel 10
PHP 8.1

we want validate and authenticate users in our A.D

we have this setup:

.env file

**#DEFAULT CREDENTIALS TO OPEN CONECTIONS WITH OUR LDAP**
LDAP_LOGGING=true
LDAP_CONNECTION=default
LDAP_HOST=1.10..40.8
LDAP_USERNAME=cn=Administrator,cn=Users,dc=my-group,dc=com
LDAP_PASSWORD=password123
LDAP_PORT=389
LDAP_BASE_DN=dc=my-group,dc=com
LDAP_TIMEOUT=5
LDAP_SSL=false
LDAP_TLS=false
LDAP_SASL=false
[email protected]

in config/ldap.php we have

'connections' => [
        'default' => [
            'hosts' => [env('LDAP_HOST')],
            'username' => env('LDAP_USERNAME', 'cn=user,dc=local,dc=om'),
            'password' => env('LDAP_PASSWORD', 'secret'),
            'port' => env('LDAP_PORT', 389),
            'base_dn' => env('LDAP_BASE_DN', 'dc=local,dc=com'),
            'timeout' => env('LDAP_TIMEOUT', 5),
            'use_ssl' => env('LDAP_SSL', false),
            'use_tls' => env('LDAP_TLS', false),
        ],

in /app/Services/LdapAuthService.php we have this code ( the service recive the data from the form username and password)

$username = 'USERNAME_FROM_THE_FORM';
$password = 'PASSWORD_FROM_THE_FORM';

$user = LdapUser::on('default')->where('samaccountname', $username)->first();
echo '<table border="1">';
               echo '<tr><th>Property</th><th>Value</th></tr>';
               foreach ($user->getAttributes() as $attribute => $values) {
                   foreach ($values as $value) {
                       echo '<tr><td>' . $attribute . '</td><td>' . $value . '</td></tr>';
                   }
               }
               echo '</table>';

this print all information of the user... ok good

*But we need verify the password, how we can do it ?

we are try with

$connection = Container::getConnection('default');
$connection->connect($username, $password);
$authenticated = $connection->auth()->attempt($username, $password);

and this return Error: Invalid credentials

We hope you can help us with this question. !!!

[hdkcreative]

Solution 1 :
:)

$user = LdapUser::on('my-subdomin-a')->where('samaccountname', $username)->first();
if( ($user->getConnection())->auth()->attempt($user->getDn(), $password) ) {
echo "PASSWORD VALID";
}
else{
echo "password NOT valid !"
}

[stevebauman]

Hi @hdkcreative,

That solution totally works 👍

You can also retrieve your connected connection from the container via Container::getDefaultConnection() if you'd like:

use LdapRecord\Container;

$connection = Container::getDefaultConnection();

if ($connection->auth()->attempt($user->getDn(), $password)) {
    // ...
}