Auth

Creating an authentication system.

The PEAR::Auth package provides methods for creating an authentication system using PHP. Currently it supports the following storage containers to read/write the login data: * All databases supported by the PEAR database layer * All databases supported by the MDB database layer * All databases supported by the MDB2 database layer * Plaintext files * LDAP servers * POP3 servers * IMAP servers * vpopmail accounts * RADIUS * SAMBA password files * SOAP MJ Martin Jansen mj@php.net lead jflemer James E. Flemer jflemer@acm.jhu.edu developer yavo Yavor Shahpasov yavo@siava.org lead 1.3.0r1 2004-06-04 PHP License beta * Added an Auth_Controller class, to manage automatic redirection to login page and redirect back to the calling page [04/06/2004 - Yavo] * Changes to LDAP container: - additional attribute fetching to authData via new option attributes - utf8 encoding username for ldapv3 (fixes german umlaut problem) - make scope definable for user and group searching seperately - remove useroc, groupoc and replace them with userfilter, groupfilter which is way more flexible - updated documentation on all new and changed parameters As some of the parameters changed this one is not backwards compatible to earlier versions. Look at the top of the class where all parameters are explained in detail. [08/April/2004 - jw] * Added new MDB2 container [30/March/2004 - quipo] * Implements changePassword and CS fixed, patch from Cipriano Groenendal <cipri@cipri.com> [29/March/2004 - yavo] * Added options for changing the post variables, patch supplied by Moritz Heidkamp <moritz.heidkamp@invision-team.de> [03/March/2004 - yavo] * Added method setAdvancedSecurity and set advanced security to off by default, if turned on auth will perform additional security checks if ip or user agent has changed across requests * Login is now performed only if showLogin is true, do not allow for logins to be performed from any page which calls auth->start spotted by Matt Eaton <pear@divinehawk.com> [16/Jan/2004 - yavo] * Fixed bug noted by Jeroen Houben <jeroen@terena.nl>, calling loginFailedCallback would not have the proper status set [16/Jan/2004 - yavo] * Added PEAR container, authenticate the user against the pear web site (probably php.net also) [16/Dec/2003 - yavo] File_Passwd Net_POP3 DB MDB MDB2 Auth_RADIUS File_SMBPasswd 1.2.3 2003-09-08 PHP License stable * new Method to auth_container getUser() * New Auth_Container_File, using new File_Passwd class. Provided by Michael Wallner <mike@php.net> * Login/Logout callbacks now get a reference to auth * New Login Failed Callback added (method setFailedLoginCallback) * SOAP container patch to keep a reference to the Soap responce by Bruno Pedro <bpedro@co.sapo.pt> * Auth is now installed in /pear-dir/Auth.php instead of /pear-dir/Auth/Auth.php, an empty file /pear-dev/Auth/Auth.php wich includes Auth.php is added for BC * The contaner now gets a reference to the auth object ($auth->storage->_auth_obj) *Some patches from the pear-dev list bellow -maka3d@yahoo.com.br - Patch to use a method of the container in Auth_Container::verifyPassword -Lorenzo Alberton <l.alberton@quipo.it> - Patch to use variable session variable name, untill now the variable auth was used -Marcos Neves <maka3d@yahoo.com.br> - Avaoid error when calling getAuthData() before the login 1.2.2 2003-07-29 PHP License stable * Added support for passing contaner as an object * Added fix when db_fileds is * * Added Test Suite (experimental) * Added generic support for arbitrary password crypting functions different than MD5, DES and plain text. (Patch by Tom Anderson) * Added new MDB storage container written by Lorenzo Alberton * Added new Container for SAMBA password files (SMBPasswd)