Chris@1296: # Redmine - project management software
Chris@1296: # Copyright (C) 2006-2012  Jean-Philippe Lang
Chris@1296: #
Chris@1296: # This program is free software; you can redistribute it and/or
Chris@1296: # modify it under the terms of the GNU General Public License
Chris@1296: # as published by the Free Software Foundation; either version 2
Chris@1296: # of the License, or (at your option) any later version.
Chris@1296: #
Chris@1296: # This program is distributed in the hope that it will be useful,
Chris@1296: # but WITHOUT ANY WARRANTY; without even the implied warranty of
Chris@1296: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
Chris@1296: # GNU General Public License for more details.
Chris@1296: #
Chris@1296: # You should have received a copy of the GNU General Public License
Chris@1296: # along with this program; if not, write to the Free Software
Chris@1296: # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
Chris@1296: 
Chris@1296: # Generic exception for when the AuthSource can not be reached
Chris@1296: # (eg. can not connect to the LDAP)
Chris@1296: class AuthSourceException < Exception; end
Chris@1296: class AuthSourceTimeoutException < AuthSourceException; end
Chris@1296: 
Chris@1296: class AuthSource < ActiveRecord::Base
Chris@1296:   include Redmine::SubclassFactory
Chris@1296:   include Redmine::Ciphering
Chris@1296: 
Chris@1296:   has_many :users
Chris@1296: 
Chris@1296:   validates_presence_of :name
Chris@1296:   validates_uniqueness_of :name
Chris@1296:   validates_length_of :name, :maximum => 60
Chris@1296: 
Chris@1296:   def authenticate(login, password)
Chris@1296:   end
Chris@1296: 
Chris@1296:   def test_connection
Chris@1296:   end
Chris@1296: 
Chris@1296:   def auth_method_name
Chris@1296:     "Abstract"
Chris@1296:   end
Chris@1296: 
Chris@1296:   def account_password
Chris@1296:     read_ciphered_attribute(:account_password)
Chris@1296:   end
Chris@1296: 
Chris@1296:   def account_password=(arg)
Chris@1296:     write_ciphered_attribute(:account_password, arg)
Chris@1296:   end
Chris@1296: 
Chris@1296:   def allow_password_changes?
Chris@1296:     self.class.allow_password_changes?
Chris@1296:   end
Chris@1296: 
Chris@1296:   # Does this auth source backend allow password changes?
Chris@1296:   def self.allow_password_changes?
Chris@1296:     false
Chris@1296:   end
Chris@1296: 
Chris@1296:   # Try to authenticate a user not yet registered against available sources
Chris@1296:   def self.authenticate(login, password)
Chris@1296:     AuthSource.where(:onthefly_register => true).all.each do |source|
Chris@1296:       begin
Chris@1296:         logger.debug "Authenticating '#{login}' against '#{source.name}'" if logger && logger.debug?
Chris@1296:         attrs = source.authenticate(login, password)
Chris@1296:       rescue => e
Chris@1296:         logger.error "Error during authentication: #{e.message}"
Chris@1296:         attrs = nil
Chris@1296:       end
Chris@1296:       return attrs if attrs
Chris@1296:     end
Chris@1296:     return nil
Chris@1296:   end
Chris@1296: end