<?php

// Until we develop a mean to adress this within the setup, let's check that this instance
// of PHP has the php_ldap extension
//
if (function_exists('ldap_connect')) {

	SetupWebPage::AddModule(
		__FILE__, // Path to the current file, all other file names are relative to the directory containing this file
		'authent-ldap/3.3.0',
		[
			// Identification
			//
			'label' => 'User authentication based on LDAP',
			'category' => 'authentication',

			// Setup
			//
			'dependencies' => [
			],
			'mandatory' => false,
			'visible' => true,
			'installer' => 'AuthentLDAPInstaller',

			// Components
			//
			'datamodel' => [
			],
			'data.struct' => [
				//'data.struct.authent-ldap.xml',
			],
			'data.sample' => [
				//'data.sample.authent-ldap.xml',
			],

			// Documentation
			//
			'doc.manual_setup' => '',
			'doc.more_information' => '',

			// Default settings
			//
			'settings' => [
				'uri' => 'ldap://localhost', // URI with host or IP address of your LDAP server
				'default_user' => '', // User and password used for initial "Anonymous" bind to LDAP
				'default_pwd' => '',  // Leave both blank, if anonymous (read-only) bind is allowed
				'base_dn' => 'dc=yourcompany,dc=com', // Base DN for User queries, adjust it to your LDAP schema
				'user_query' => '(&(uid=%1$s)(inetuserstatus=ACTIVE))', // Query used to retrieve each user %1$s => iTop login
																		// For Windows AD use (samaccountname=%1$s) or (userprincipalname=%1$s)

				// Some extra LDAP options, refer to: http://www.php.net/manual/en/function.ldap-set-option.php for more info
				'options' => [
					LDAP_OPT_PROTOCOL_VERSION => 3,
					LDAP_OPT_REFERRALS => 0,
				],
				'start_tls' => false,
				'debug' => false,
				'servers' => [],
			],
		]
	);

	// Module installation handler
	//
	class AuthentLDAPInstaller extends ModuleInstallerAPI
	{
		public static function AfterDataLoad(Config $oConfiguration, $sPreviousVersion, $sCurrentVersion)
		{

		}

		public static function BeforeWritingConfig(Config $oConfiguration)
		{

		}
	}

} // if (function_exists('ldap_connect'))