LDAP Bind/Authenticate

gistfile1.rb

 require 'ldap'
 LDAP_S ={ 
  :use_ssl => true,
  :ldap_host => "domain.com",
  :domain => "domain.com",
  :start_tls => false,
  :ldap_version => 3
}

ldap_bind.rb

def self.bind?(user,pass)
  if pass == ""
    return false
  end
  port = 389
  if LDAP_S[:use_ssl]
    port = 636 #secureSSL = 636 unsecure/TLS = 389
  end
  
  
  begin
    conn = nil
    if LDAP_S[:use_ssl]
      conn = LDAP::SSLConn.new(LDAP_S[:ldap_host],port,LDAP_S[:start_tls]) #Conn.new = unsecure/TLS: SSLConn = secureSSL
    else
      conn = LDAP::Conn.new(LDAP_S[:ldap_host],port)
      if LDAP_S[:start_tls]
        conn.start_tls
      end
    end
    conn.set_option(LDAP::LDAP_OPT_PROTOCOL_VERSION, LDAP_S[:ldap_version])
  
    conn.simple_bind("#{user}@#{LDAP_S[:domain]}",pass)
    return true
  rescue => e
    conn.perror("debug")
    return false
  ensure
    conn.unbind unless conn == nil
    conn = nil
  end
end