How to implement connection with user provided login and password?

[nikosid]

Hi!
Can you help me to understand how to implement logic when we connect to AD with user provided credential but not with LDAP_USERNAME and LDAP_PASSWORD from .env? So the application will use login form not only to authenticate user but also for connection.

[stevebauman]

Hi @nikosid,

There is no built-in way to do this. PHP is stateless, so LDAP connections are not sustained across requests. This is why we must add configured database credentials into our Laravel applications (as well as LDAP credentials).

You will have to store the users LDAP credentials (likely in an encrypted database column), then either override the configured username and password before any connection is made, or by connecting manually. Here's some psuedo-code to show you what I mean:

use App\User;

$user = User::first();

[$username, $password] = $user->getLdapCredentials();

config()->set('ldap.connections.default.username', $username);
config()->set('ldap.connections.default.password', $password);

// Begin performing LDAP tasks underneath this user...

---

use App\User;
use LdapRecord\Container;

$user = User::first();

[$username, $password] = $user->getLdapCredentials();

$connection = Container::getDefaultConnection();

$connection->connect($username, $password);

// Begin performing LDAP tasks underneath this user...

Hope this helps!

[mc9629]

Hi @stevebauman @nikosid, have you found a solution to this problem ? Is there a chance ? Thank you

[stevebauman]

@mc9629 Please post your implementation.

[mc9629]

Just implemented plain auth and worked perfectly, but i want to connect the AD server with the login form's credentials without setup LDAP_USERNAME and LDAP_PASSWORD in the .env configuration file, (anyway great job! @stevebauman)

[nikosid]

Hi @stevebauman @nikosid, have you found a solution to this problem ? Is there a chance ? Thank you

Hi. Nope. Currently I use oauth2

[mc9629]

Oki, thanks... i saw the jotaelesalinas/laravel-adminless-ldap-auth and it works (but only Login) ...