[RESOLVED] Getting LDAP values

jkurrle

I'm currently adding some integration code to an LDAP authentication module. One of the things I need to do to finish this is to get the user's email out of the OpenLDAP server. The code connects and binds successfully, but I cannot get the mail account information I need. This is what I have:

// get base dn
global $basedn;

//get ou, using MyBB's database API
$query = $db->simple_select('settings','value','name="mybbldap_ou"');
$ou = $db->fetch_field($query, 'value');

// testing variables...
echo "<br />Base DN is $basedn<br />";
echo "<br />OU is $ou<br />";

// set up search criteria.  $mybb->input['username'] is the submitted UID
$filter = "(|($ou)(uid=".$mybb->input['username']."))";
echo "<br />FILTER is $filter<br />";

$justthese = array("mail");

// run the search, $ld is the connection
$sr=ldap_search($ld,$basedn,$filter,$justthese);
if($sr==FALSE) echo "<br />SEARCH RESULTS NOT FOUND<br />";

// get the entries from the search
$entry = ldap_get_entries($ld,$sr);
if($entry==FALSE) echo "<br />ENTRIES NOT FOUND<br />";
else echo "Count of entries is ".count($entry)."<br />";

//get the values from the entry
$values = ldap_get_values($ld,$entry,"*");
if($values==FALSE) echo "<br />VALUES NOT RECEIVED<br />";

//setting the email value (hopefully)
global $LDAPmail;
$LDAPmail = $values[0];

Upon execution, the screen comes back as follows:

Base DN is dc=evolve,dc=someorg,dc=gov

OU is ou=People

FILTER is (|(ou=People)(uid=johnkurrle))

Count of entries is 3

VALUES NOT RECEIVED

The account I'm trying to access has an email account. When I use print_r() on $entry, I see my email address at $entry[1]['mail'][0]. My question is this: Am I doing something wrong, and if so, what is it?

johanafm

jkurrle;11032841 wrote:
The account I'm trying to access has an email account. When I use print_r() on $entry, I see my email address at $entry[1]['mail'][0]. My question is this: Am I doing something wrong, and if so, what is it?

I've never worked with LDAP, so I have no specific knowledge. However, considering the format of that array, I'm guessing LDAP handles multiple email adresses per user. Is that correct?

If it is, the structure you see makes sense

['mail'][0]

since with multiple addresses, you'd have

['mail'][0]
['mail'][1]
['mail'][2]

whereas if it was found directly under ['mail'] for one address, and under ['mail'][0] and ['mail'][1], you'd need additional checks to find an email adress. As it is now, you can either simply take the first one (possibly assuming that it's the "default" email address or "master email address" for this user, or you could foreach over the email addresses, using all of them.

jkurrle

Well, I could access the array directly, but this is going to assume that all OpenLDAP servers have the same structure, which is probably not wise. To commit this updated module back to the community, I need to figure out how to use either ldap_get_values() or ldap_get_attributes() correctly, in order to get the data extracted. The issue I'm having is getting that last step to extract the data.

jkurrle

This is what I finally did to resolve email extraction:

// get base dn 
global $basedn; 

//get ou, using MyBB's database API 
$query = $db->simple_select('settings','value','name="mybbldap_ou"'); 
$ou = $db->fetch_field($query, 'value'); 

// set up search criteria.  $mybb->input['username'] is the submitted UID 
$filter = "(|($ou)(uid=".$mybb->input['username']."))"; 

// what I want from the search results
$justthese = array("mail"); 

// run the search, $ld is the connection 
$sr=ldap_search($ld,$basedn,$filter,$justthese); 

// get the entries from the search 
$entry = ldap_get_entries($ld,$sr); 

// convert print_r($entry) into a variable
ob_start();
echo "<pre>";
print_r($entry);
echo "</pre>";
$output=ob_get_contents();
ob_end_clean();

//unify output across platforms, then explode it
$output=str_replace("\r","\n",$output);
$output=str_replace("\n\n","\n",$output);
$testArr=explode("\n",$output);

//get the first email and set it to $LDAPmail
$LDAPmail="";
foreach($testArr as $testItem)
  {
  if(strpos($testItem,"@")!==FALSE && strpos($testItem,".")!==FALSE && $LDAPmail=="")
    {
    $testArr2 = explode("=>",$testItem);
    $LDAPmail = trim($testArr2[1]);
    }
  }

Kind of an ugly kludge to fix it at the end, but nobody had any solutions and I couldn't find anything relevant in my internet searches. At least this way, it doesn't matter where or what level the email is located at.