Codango: ASP Code Snippet

JSP

Share The Love

You are 1 of 20 Active ASP Visitors

ASP Home | Resources | Write a Review | My Favor-Its | Login

ldap AuthenticationCode Snippet

Read Reviews | Report Errors

[+][+]

1
Reviews

1
Favor-It

we can create a java class to authenticate a set of given credentials against ldap, and register that java class as a COM component and access its methods from an asp. Code: ASP 3.0 & VBScript


		Code Snippet

Code Written By: Pavan k Nanduri

In order to accomplish this we need to create a javaclass, which has authentication methods to authenticate the user against ldap and returns a Boolean value
 
In order for this sample to work you need to have Microsoft Java installed on the server

1)Install the Microsoft virtual machine (Microsoft VM) (Build 1518 or newer) (Microsoft Visual J++ 1.1 comes with build 1513). You can check the version of the Msjava.dll in your windows/system or winnt/system32 directory to verify what build of the Microsoft VM you have in your system. You can download the latest VM from  http://www.microsoft.com/java/

2) Create your Java class, which will be created as a COM object
    ex: ldapauth.java
3) Compile the .java file into a .class file
NOTE: This does not require that you use the Microsoft compiler for Java, JAVAC works just fine. 

4) Copy the resulting .class file into the %windir%\java\trustlib or %windir%\java\lib directory of the server machine. Note that you may have to restart the Microsoft VM if you copy over a preexisting class file. To restart the Microsoft VM on the server side go to Microsoft Internet Service Manager (IIS) and stop and then restart all three IIS services (that is, www, gopher, ftp). 

5) Register your Java class as a COM object on the server machine using the JavaReg utility (available with Visual J++ or the Microsoft SDK for Java). This can also be done manually or by a setup program, "javareg/register" is only creating registry entries: 
ex: javareg /register /class:Simple /progid:Simple


that’s all now we can access our java class as a com object from our asp.

Lets look at the code now
We will use netscape LDAP API to accomplish this 
Download ldapjdk.jar from netscape site and update the system class path with the downloaded jar file path

ldapauth.java

import netscape.ldap.*; 
/** 
  ldapAuth.java 
  Author: Pavan K Nanduri
  Email: pnanduri76@hotmail.com
  Date: 09/07/02
  The authenticate method in this class authenticates the user to LDAP and returns
  true or false based on the passed credentials.  
 
The code here is provided as is without any warranty, use it at your own risk. The author is not liable for any loss or damages from using this code.
Additional methods can be added to this class for modifying user profile 
 changing user password.
*/ 
//declare public class
public class ldapAuth { 
// the method below returns a boolean value based on the credentials passed.
 public boolean authenticate(String host,int portnum,String searchbase,String uid,String pwd) 
  { 
    boolean status = false; 
	// instantiate ldap connection
    LDAPConnection ld = new LDAPConnection(); 
    LDAPEntry findEntry = null; 
    String dn = null; 
    String MY_HOST = host;//"MAYFIELDPC002"; 
    int MY_PORT = portnum;//389; 
    String MY_SEARCHBASE = searchbase;//MAYFIELDPC002"; 
    String MY_FILTER = "uid=" + uid; 
    try { 
       //try to connect to the ldap
       ld.connect( MY_HOST, MY_PORT ); 
	   // search filter searches ldap for dn for the passed in user.
       LDAPSearchResults res = ld.search(MY_SEARCHBASE,LDAPConnection.SCOPE_SUB,MY_FILTER,null,false);
       // more than 1 user matching filter, fail. 
       if (res.getCount() != 1) { return false;} 
       if (res.hasMoreElements()) { 
          findEntry = res.next(); 
          dn = findEntry.getDN(); 
          //prevent anonymous connections 
          if ((dn == "") || (pwd == "")) { return false;} 
          //now attempt to bind to server 
		  ld.authenticate(dn,pwd); 
		  //if ld.authenticate doesn't throw an exception we passed 
		  status = true; 
   } 
   } catch(LDAPException e) { 
            System.out.println(e.toString()); 
           } 
           catch(Exception x) { 
            x.printStackTrace(); 
     } 
			return status; 
   } 

 
} // close main class


login.asp

<%
' login.asp
' Author: Pavan K Nanduri
' emial: pnanduri76@hotmail.com
' this code is provide "As Is without any warranty" use it at your own risk
' the author is not liable for any loss or damages caused by using this code
' login.asp is a self submiting page that posts back to itself and validates the user.
on Error Resume Next
Dim ldapObj, strAuthFlag, strUid, strPass,blnValidated,blnSubmitted
Dim strHost, strSearchBase, strPort
blnValidated = false
blnSubmitted = Request.Form("submitted")

If blnSubmitted = "true" Then
	strUid = Request.Form("uid")
	strPass = Request.Form("pwd")
	If strUid = "" or strPass = "" Then
		strMessage = "<font color=""red""><b>Please check UserName and Password</b></font>"
		blnValidated = false
	Else
		blnValidated= true
	End If

	If blnValidated Then
		strHost = “ MYLDAPSERVER”
		strSearchBase = "ou=fabebizna,o=MYDOMAIN.COM"
		strPort = "390"
		‘ create a reference to our ladp class
		Set ldapObj = Server.CreateObject("ldapAuth") 
		‘ call the method in our COM component
		strAuthFlag = ldapObj.authenticate(strHost,strPort,strSearchBase,strUid,strPass)
		If strAuthFlag Then
			Response.write "<center><b>" & strUid & " Successfully Authenticated to LDAP server on " & strHost & "</b></center>"
		Else
			blnValidated = false
			strMessage = "<font color=""red""><b>Authentication failed</b></font>"
		End If
	 End If
End If
If Not blnValidated Then
%>
	<form name="login" method="post">
	<center>
	<b>LDAP Authentication Page</b><br><br>
	<%=strMessage%><br><br>
	<table border=0 cellspacing=1 cellpadding=1>
		<tr>
			<td>User Name:</td>
			<td><input type="text" name="uid" value="<%=strUid%>"></td>
		</tr>
		<tr>
			<td>Password:</td>
			<td><input type="password" name="pwd" value="<%=strPass%>"></td>
		</tr>
		<tr>
			<td></td>
			<td><input type="submit" name="submit" value="LOGIN"></td>
		</tr>
	</table>
	<input type="hidden" name="submitted" value="true">
	</center>
<%
End If
%>


simple isn’t it??

Note: the ldapAuth java class can be extended with additional methods for entering, modifying user profiles, changing passwords etc.


	Shopping Cart

To use the code above, click and drag your mouse over the code to highlight it. Then right click on the highlighted code and click "Copy." Now you may paste it into your code editor.

Submit Your Own Code to Codango


Link to Us \| About Us		Advertise \| Contact Us \| Website Help
Write a User Review Today! Its Fun, Fast, and Easy!	Codango Home \| PHP \| ASP.NET \| ASP \| JSP Advertise With Us \| About Us \| Terms of Use \| Privacy Policy


� 2013 ezd.com, All rights reserved