NAME
    Authen::Simple::LDAP - Simple LDAP authentication

SYNOPSIS
        use Authen::Simple::LDAP;
    
        my $ldap = Authen::Simple::LDAP->new( 
            host    => 'ldap.company.com',
            basedn  => 'ou=People,dc=company,dc=net'
        );
    
        if ( $ldap->authenticate( $username, $password ) ) {
            # successfull authentication
        }
    
        # or as a mod_perl Authen handler
    
        PerlModule Authen::Simple::Apache
        PerlModule Authen::Simple::LDAP

        PerlSetVar AuthenSimpleLDAP_host   "ldap.company.com"
        PerlSetVar AuthenSimpleLDAP_basedn "ou=People,dc=company,dc=net"

        <Location /protected>
          PerlAuthenHandler Authen::Simple::LDAP
          AuthType          Basic
          AuthName          "Protected Area"
          Require           valid-user
        </Location>

DESCRIPTION
    Authenticate against a LDAP service.

METHODS
    *   new

        This method takes a hash of parameters. The following options are
        valid:

        *       host

                Connection host, can be a hostname, IP number or a URI.
                Defaults to "localhost".

                    host => ldap.company.com
                    host => 10.0.0.1
                    host => ldap://ldap.company.com:389
                    host => ldaps://ldap.company.com

        *       port

                Connection port, default to 389. May be overriden by host if
                host is a URI.

                    port => 389

        *       timeout

                Connection timeout, defaults to 60.

                    timeout => 60

        *       version

                The LDAP version to use, defaults to 3.

                    version => 3

        *       binddn

                The distinguished name to bind to the server with, defaults
                to bind anonymously.

                    binddn => 'uid=proxy,cn=users,dc=company,dc=com'

        *       bindpw

                The credentials to bind with.

                    bindpw => 'secret'

        *       basedn

                The distinguished name of the search base.

                    basedn => 'cn=users,dc=company,dc=com'

        *       filter

                LDAP filter to use in search, defaults to "(uid=%s)".

                    filter => '(uid=%s)'

        *       scope

                The search scope, can be "base", "one" or "sub", defaults to
                "sub".

                    filter => 'sub'

        *       log

                Any object that supports "debug", "info", "error" and
                "warn".

                    log => Log::Log4perl->get_logger('Authen::Simple::LDAP')

    *   authenticate( $username, $password )

        Returns true on success and false on failure.

EXAMPLE USAGE
  Apple Open Directory
        my $ldap = Authen::Simple::LDAP->new(
            host    => 'od.company.com',
            basedn  => 'cn=users,dc=company,dc=com',
            filter  => '(&(objectClass=inetOrgPerson)(objectClass=posixAccount)(uid=%s))'
        );

  Microsoft Active Directory
        my $ldap = Authen::Simple::LDAP->new(
            host    => 'ad.company.com',
            binddn  => 'proxyuser@company.com',
            bindpw  => 'secret',
            basedn  => 'cn=users,dc=company,dc=com',
            filter  => '(&(objectClass=organizationalPerson)(objectClass=user)(sAMAccountName=%s))'
        );

    Active Directory by default does not allow anonymous binds. It's
    recommended that a proxy user is used that has sufficient rights to
    search the desired tree and attributes.

SEE ALSO
    Authen::Simple::ActiveDirectory.

    Authen::Simple.

    Net::LDAP.

AUTHOR
    Christian Hansen "chansen@cpan.org"

COPYRIGHT
    This program is free software, you can redistribute it and/or modify it
    under the same terms as Perl itself.