68 lines
		
	
	
		
			3.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
		
		
			
		
	
	
			68 lines
		
	
	
		
			3.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| 
								 | 
							
								<?php
							 | 
						||
| 
								 | 
							
								// +-----------------------------------------------------------------------+
							 | 
						||
| 
								 | 
							
								// | Copyright (c) 2002-2003 Richard Heyes                                 |
							 | 
						||
| 
								 | 
							
								// | All rights reserved.                                                  |
							 | 
						||
| 
								 | 
							
								// |                                                                       |
							 | 
						||
| 
								 | 
							
								// | Redistribution and use in source and binary forms, with or without    |
							 | 
						||
| 
								 | 
							
								// | modification, are permitted provided that the following conditions    |
							 | 
						||
| 
								 | 
							
								// | are met:                                                              |
							 | 
						||
| 
								 | 
							
								// |                                                                       |
							 | 
						||
| 
								 | 
							
								// | o Redistributions of source code must retain the above copyright      |
							 | 
						||
| 
								 | 
							
								// |   notice, this list of conditions and the following disclaimer.       |
							 | 
						||
| 
								 | 
							
								// | o Redistributions in binary form must reproduce the above copyright   |
							 | 
						||
| 
								 | 
							
								// |   notice, this list of conditions and the following disclaimer in the |
							 | 
						||
| 
								 | 
							
								// |   documentation and/or other materials provided with the distribution.|
							 | 
						||
| 
								 | 
							
								// | o The names of the authors may not be used to endorse or promote      |
							 | 
						||
| 
								 | 
							
								// |   products derived from this software without specific prior written  |
							 | 
						||
| 
								 | 
							
								// |   permission.                                                         |
							 | 
						||
| 
								 | 
							
								// |                                                                       |
							 | 
						||
| 
								 | 
							
								// | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS   |
							 | 
						||
| 
								 | 
							
								// | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT     |
							 | 
						||
| 
								 | 
							
								// | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR |
							 | 
						||
| 
								 | 
							
								// | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT  |
							 | 
						||
| 
								 | 
							
								// | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
							 | 
						||
| 
								 | 
							
								// | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT      |
							 | 
						||
| 
								 | 
							
								// | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
							 | 
						||
| 
								 | 
							
								// | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
							 | 
						||
| 
								 | 
							
								// | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT   |
							 | 
						||
| 
								 | 
							
								// | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
							 | 
						||
| 
								 | 
							
								// | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.  |
							 | 
						||
| 
								 | 
							
								// |                                                                       |
							 | 
						||
| 
								 | 
							
								// +-----------------------------------------------------------------------+
							 | 
						||
| 
								 | 
							
								// | Author: Richard Heyes <richard@php.net>                               |
							 | 
						||
| 
								 | 
							
								// +-----------------------------------------------------------------------+
							 | 
						||
| 
								 | 
							
								//
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								/**
							 | 
						||
| 
								 | 
							
								* Implmentation of CRAM-MD5 SASL mechanism
							 | 
						||
| 
								 | 
							
								*
							 | 
						||
| 
								 | 
							
								* @author  Richard Heyes <richard@php.net>
							 | 
						||
| 
								 | 
							
								* @author  Michael Weibel <michael.weibel@amiadogroup.com> (made it work for PHP5)
							 | 
						||
| 
								 | 
							
								* @access  public
							 | 
						||
| 
								 | 
							
								* @version 1.0.1
							 | 
						||
| 
								 | 
							
								* @package Auth_SASL
							 | 
						||
| 
								 | 
							
								*/
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								require_once(dirname(__FILE__) . '/Common.php');
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								class Auth_SASL_CramMD5 extends Auth_SASL_Common
							 | 
						||
| 
								 | 
							
								{
							 | 
						||
| 
								 | 
							
								    /**
							 | 
						||
| 
								 | 
							
								    * Implements the CRAM-MD5 SASL mechanism
							 | 
						||
| 
								 | 
							
								    * This DOES NOT base64 encode the return value,
							 | 
						||
| 
								 | 
							
								    * you will need to do that yourself.
							 | 
						||
| 
								 | 
							
								    *
							 | 
						||
| 
								 | 
							
								    * @param string $user      Username
							 | 
						||
| 
								 | 
							
								    * @param string $pass      Password
							 | 
						||
| 
								 | 
							
								    * @param string $challenge The challenge supplied by the server.
							 | 
						||
| 
								 | 
							
								    *                          this should be already base64_decoded.
							 | 
						||
| 
								 | 
							
								    *
							 | 
						||
| 
								 | 
							
								    * @return string The string to pass back to the server, of the form
							 | 
						||
| 
								 | 
							
								    *                "<user> <digest>". This is NOT base64_encoded.
							 | 
						||
| 
								 | 
							
								    */
							 | 
						||
| 
								 | 
							
								    public function getResponse($user, $pass, $challenge)
							 | 
						||
| 
								 | 
							
								    {
							 | 
						||
| 
								 | 
							
								        return $user . ' ' . $this->HMAC_MD5($pass, $challenge);
							 | 
						||
| 
								 | 
							
								    }
							 | 
						||
| 
								 | 
							
								}
							 | 
						||
| 
								 | 
							
								?>
							 |