<?php

/**
 * LDAP authentication source.
 *
 * See the ldap-entry in config-templates/authsources.php for information about
 * configuration of this authentication source.
 *
 * This class is based on www/auth/login.php.
 *
 * @package simpleSAMLphp
 * @version $Id$
 */
class sspmod_ldap_Auth_Source_LDAPMulti extends sspmod_core_Auth_UserPassOrgBase {

	/**
	 * An array with descriptions for organizations.
	 */
	private $orgs;

	/**
	 * An array of organization IDs to LDAP configuration objects.
	 */
	private $ldapOrgs;


	/**
	 * Constructor for this authentication source.
	 *
	 * @param array $info  Information about this authentication source.
	 * @param array $config  Configuration.
	 */
	public function __construct($info, $config) {
		assert('is_array($info)');
		assert('is_array($config)');

		/* Call the parent constructor first, as required by the interface. */
		parent::__construct($info, $config);

		$this->orgs = array();
		$this->ldapOrgs = array();
		foreach ($config as $orgId => $orgCfg) {
			if (array_key_exists('description', $orgCfg)) {
				$this->orgs[$orgId] = $orgCfg['description'];
			} else {
				$this->orgs[$orgId] = $orgId;
			}

			$orgCfg = new sspmod_ldap_ConfigHelper($orgCfg,
				'Authentication source ' . var_export($this->authId, TRUE) .
				', organization ' . var_export($orgId, TRUE));
			$this->ldapOrgs[$orgId] = $orgCfg;
		}
	}


	/**
	 * Attempt to log in using the given username and password.
	 *
	 * @param string $username  The username the user wrote.
	 * @param string $password  The password the user wrote.
	 * @param string $org  The organization the user chose.
	 * @return array  Associative array with the users attributes.
	 */
	protected function login($username, $password, $org) {
		assert('is_string($username)');
		assert('is_string($password)');

		if (!array_key_exists($org, $this->ldapOrgs)) {
			/* The user has selected an organization which doesn't exist anymore. */
			SimpleSAML_Logger::warning('Authentication source ' . var_export($this->authId, TRUE) .
				': Organization seems to have disappeared while the user logged in.' .
				' Organization was ' . var_export($org, TRUE));
			throw new SimpleSAML_Error_Error('WRONGUSERPASS');
		}

		return $this->ldapOrgs[$org]->login($username, $password);
	}


	/**
	 * Retrieve list of organizations.
	 *
	 * @return array  Associative array with the organizations.
	 */
	protected function getOrganizations() {
		return $this->orgs;
	}

}


?>