Chris@1464: # Redmine - project management software
Chris@1464: # Copyright (C) 2006-2013  Jean-Philippe Lang
Chris@1464: #
Chris@1464: # This program is free software; you can redistribute it and/or
Chris@1464: # modify it under the terms of the GNU General Public License
Chris@1464: # as published by the Free Software Foundation; either version 2
Chris@1464: # of the License, or (at your option) any later version.
Chris@1464: #
Chris@1464: # This program is distributed in the hope that it will be useful,
Chris@1464: # but WITHOUT ANY WARRANTY; without even the implied warranty of
Chris@1464: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
Chris@1464: # GNU General Public License for more details.
Chris@1464: #
Chris@1464: # You should have received a copy of the GNU General Public License
Chris@1464: # along with this program; if not, write to the Free Software
Chris@1464: # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
Chris@1464: 
Chris@1464: # Generic exception for when the AuthSource can not be reached
Chris@1464: # (eg. can not connect to the LDAP)
Chris@1464: class AuthSourceException < Exception; end
Chris@1464: class AuthSourceTimeoutException < AuthSourceException; end
Chris@1464: 
Chris@1464: class AuthSource < ActiveRecord::Base
Chris@1464:   include Redmine::SubclassFactory
Chris@1464:   include Redmine::Ciphering
Chris@1464: 
Chris@1464:   has_many :users
Chris@1464: 
Chris@1464:   validates_presence_of :name
Chris@1464:   validates_uniqueness_of :name
Chris@1464:   validates_length_of :name, :maximum => 60
Chris@1464: 
Chris@1464:   def authenticate(login, password)
Chris@1464:   end
Chris@1464: 
Chris@1464:   def test_connection
Chris@1464:   end
Chris@1464: 
Chris@1464:   def auth_method_name
Chris@1464:     "Abstract"
Chris@1464:   end
Chris@1464: 
Chris@1464:   def account_password
Chris@1464:     read_ciphered_attribute(:account_password)
Chris@1464:   end
Chris@1464: 
Chris@1464:   def account_password=(arg)
Chris@1464:     write_ciphered_attribute(:account_password, arg)
Chris@1464:   end
Chris@1464: 
Chris@1464:   def searchable?
Chris@1464:     false
Chris@1464:   end
Chris@1464: 
Chris@1464:   def self.search(q)
Chris@1464:     results = []
Chris@1464:     AuthSource.all.each do |source|
Chris@1464:       begin
Chris@1464:         if source.searchable?
Chris@1464:           results += source.search(q)
Chris@1464:         end
Chris@1464:       rescue AuthSourceException => e
Chris@1464:         logger.error "Error while searching users in #{source.name}: #{e.message}"
Chris@1464:       end
Chris@1464:     end
Chris@1464:     results
Chris@1464:   end
Chris@1464: 
Chris@1464:   def allow_password_changes?
Chris@1464:     self.class.allow_password_changes?
Chris@1464:   end
Chris@1464: 
Chris@1464:   # Does this auth source backend allow password changes?
Chris@1464:   def self.allow_password_changes?
Chris@1464:     false
Chris@1464:   end
Chris@1464: 
Chris@1464:   # Try to authenticate a user not yet registered against available sources
Chris@1464:   def self.authenticate(login, password)
Chris@1464:     AuthSource.where(:onthefly_register => true).all.each do |source|
Chris@1464:       begin
Chris@1464:         logger.debug "Authenticating '#{login}' against '#{source.name}'" if logger && logger.debug?
Chris@1464:         attrs = source.authenticate(login, password)
Chris@1464:       rescue => e
Chris@1464:         logger.error "Error during authentication: #{e.message}"
Chris@1464:         attrs = nil
Chris@1464:       end
Chris@1464:       return attrs if attrs
Chris@1464:     end
Chris@1464:     return nil
Chris@1464:   end
Chris@1464: end