Add LDAP/AD authentication about munkireport-php HOT 9 CLOSED

                case 'AD': // Active Directory authentication
                    //prevent empty values
                    if ($login && $password)
                    {
                        //include the class and create a connection
                        //TODO wrap this include somewhere else?
                        include_once (APP_PATH . '/lib/adLDAP/adLDAP.php');
                        try {
                            $adldap = new adLDAP($auth_data);
                        }
                        catch (adLDAPException $e) {
                            $_SESSION['autherror'] = lang('error_contacting_AD');
                            //helpful for troubleshooting connections
                            //$_SESSION['autherror'] = $e;
                            break 2;   
                        }
                        //authenticate user
                        if ($adldap->authenticate($login, $password))
                        {

                            //check user against users list
                            if(isset($auth_data['mr_admin_users']))
                            {
                                $admin_users = is_array($auth_data['mr_admin_users']) ? $auth_data['mr_admin_users'] : array($auth_data['mr_admin_users']);

                                if (in_array(strtolower($login), array_map('strtolower', $admin_users)))
                                {
                                    $check = TRUE;
                                    break 2;
                                } 
                            }

                            //check user against group list
                            if(isset($auth_data['mr_admin_groups']))
                            { 
                                // Set mr_admin_groups to array
                                $admin_groups = is_array($auth_data['mr_admin_groups']) ? $auth_data['mr_admin_groups'] : array($auth_data['mr_admin_groups']);

                                // Get groups from AD
                                $groups = $adldap->user()->groups($login);

                                foreach ($groups as $group)
                                {
                                    if (in_array($group, $admin_groups)) 
                                    {
                                        $check = TRUE;
                                        break 3;
                                    }
                                }

                            }
                            $_SESSION['autherror'] = lang('not_authorized');
                            break;
                        }
                        $_SESSION['autherror'] = lang('wrong_user_or_pass');
                        break;
                    }
                    $_SESSION['autherror'] = lang('empty_not_allowed');
                    break;