modules/legacy/kernel/handler.php
***************
*** 373,377 ****
--- 373,476 ----

                return $flag;
        }
+
+     /**
+      * Return array of object with $criteria.
+      *
+      * @access public
+      * @param CriteriaElement $criteria
+      * @param bool $id_as_key
+      *
+      * @return array
+      */
+     function &LDAPAuth($criteria = null, $id_as_key = false)
+     {
+       $authenticated = false;
+
+       if ($criteria != null && is_a($criteria, 'CriteriaElement')) {
+
+       $uname = $criteria->getChildElement(0)->getValue();
+       $pass = $criteria->getChildElement(1)->getValue();
+
+       $uid_attr = "uid=".$uname;
+       $uid_number = "uidnumber";
+       $mail_attr = "mail";
+       $name_attr = "cn";
+       $pass_attr = "userpassword";
+       $objectclass_attr = "objectclass=Staff";
+       $ldap_server = "LDAP サーバのアドレス";
+       $ldap_port = 389;
+       $base_dn = "ou=Users,dc=hkg,dc=ac,dc=jp";
+       $timezone_offset = 9;
+
+
+       $ds = ldap_connect($ldap_server, $ldap_port)
+               or die("Could not connect to LDAP server.");
+
+       if ($ds) {
+             //Authentication
+
+             $ldapbind = ldap_bind($ds,$uid_attr.",".$base_dn,$pass);
+             if ($ldapbind) {
+               // Get info from LDAP (mail,name)
+               //$filter = "(&(".$uid_attr.")(".$objectclass_attr."))";
+               $filter = $uid_attr;
+               $sr = ldap_search($ds,$base_dn,$filter,Array($name_attr,$pass_at
tr,$uid_number));
+               $info = ldap_get_entries($ds, $sr);
+               if ($info["count"] == 1) {
+
+                 $authenticated = true;
+
+                 // Search user in the DB
+                 $criteria =& new Criteria('uname',$uname);
+                 $user =& $this->getObjects($criteria, false);
+
+                 if (count($user) <= 0) {
+
+                   $memberHandler =& xoops_gethandler('member');
+
+                   $NewUser =& $memberHandler->createUser();
+                   $NewUser->setVar("uname",$uname);
+                   $NewUser->setVar("user_avatar","blank.gif");
+                   $NewUser->setVar('user_regdate', time());
+                   $NewUser->setVar('timezone_offset', $timezone_offset);
+                   $NewUser->setVar('actkey',substr(md5(uniqid(mt_rand(), 1)),
0, 8));
+                   $NewUser->setVar("uid",$info[0][$uid_number][0]);
+                   $NewUser->setVar("name",$info[0][$name_attr][0]);
+                   $NewUser->setVar("pass",md5($pass));
+
+                   $NewUser->setVar("level",1);
+                   $NewUser->setVar('notify_method', 2);
+                   /*　作成したい情報にあわせて適当に編集
+                   if (strlen($info[0][$mail_attr][0])<=0) {
+                     $NewUser->setVar("email",$info[0][$name_attr][0]."@");
+                   }
+                   else {
+                     $NewUser->setVar("email",$info[0][$mail_attr][0]);
+                   }
+                   */
+                   $NewUser->setVar("email",$uname.'@');
+
+                     // Store info in DB (insert or update)
+                   $memberHandler->insertUser($NewUser);
+
+                   //Add the user to Registered Users group
+                   $memberHandler->addUserToGroup(XOOPS_GROUP_USERS, $NewUser->
get('uid'));
+                 }
+                 else {
+                   $NewUser =& $user[0];
+                 }
+               }
+             }
+             ldap_close($ds);
+           }
+           else {
+               echo "cannot connect to ldap server";
+           }
+       }
+       return $authenticated;
+     }
  }
  ?>


modules/user/class/users.php
*** 122,127 ****
--- 122,133 ----
                return $objects;
        }

+       function &LDAPAuth($criteria = null, $limit = null, $start = null, $id_a
s_key = false)
+       {
+               $objects =& parent::LDAPAuth($criteria, $limit, $start, $id_as_k
ey);
+               return $objects;
+       }
+
        /**
         * Return the array which consists of an integer as the uid. This member
         * function is more speedy than getObjects().

modules/user/kernel/LegacypageFunctions.class.php
                $root->mLanguageManager->loadModuleMessageCatalog('user');

                $userHandler =& xoops_getmodulehandler('users', 'user');

                $criteria =& new CriteriaCompo();
!               $criteria->add(new Criteria('uname', xoops_getrequest('uname')))
;
!               $criteria->add(new Criteria('pass', md5(xoops_getrequest('pass')
)));

                $userArr =& $userHandler->getObjects($criteria);

--- 228,246 ----
                $root->mLanguageManager->loadModuleMessageCatalog('user');

                $userHandler =& xoops_getmodulehandler('users', 'user');
+
+               $uname = xoops_getrequest('uname');
+               $pass = xoops_getrequest('pass');
+
+               $ldap_criteria =& new CriteriaCompo();
+               $ldap_criteria->add(new Criteria('uname', $uname));
+               $ldap_criteria->add(new Criteria('pass', ($pass)));
+
+               $userArr =& $userHandler->LDAPAuth($ldap_criteria);

                $criteria =& new CriteriaCompo();
!               $criteria->add(new Criteria('uname', $uname));
!               $criteria->add(new Criteria('pass', md5($pass)));

                $userArr =& $userHandler->getObjects($criteria);