module LdapLogin::Login
  LDAP_ADSERVER=["ad.asia.edu.tw","ad2.asia.edu.tw","ad3.asia.edu.tw"]
  def ldap_login_auth(user,request,session,flash,params)
    LDAP_ADSERVER=["ad.asia.edu.tw","ad2.asia.edu.tw","ad3.asia.edu.tw"]
    ldap_hosts = LDAP_ADSERVER.shuffle
    error = ''
    ldap_user = params[:user_name]
    ldap_pass = params[:password]
    login_flag = false
    _session = {'ad' => []}
    ldap_hosts.each do |ldap_host|
      begin
        ldap = Net::LDAP.new
        ldap.host = ldap_host
        ldap.port = 389
        ldap.auth ldap_user, ldap_pass
        if ldap.bind
          puts ['ldap_user',ldap_user,'ldap_pass',ldap_pass]
          if !user.nil?
            filter = Net::LDAP::Filter.eq( "sAMAccountName", ldap_user )
            treebase = "ou=Asia Univ,dc=asia,dc=edu,dc=tws"
            puts "==LDAP SEARCH START=="
            ldap.search( :base => treebase, :filter => filter, :return_result => false ) do |entry|
              puts "DN: #{entry.dn}"
              entry.each do |attribute, values|
                puts "   #{attribute}:"
                values.each do |value|
                  puts "      --->#{value}"
                end
              end
            end
            puts "==LDAP SEARCH END=="
            session[:user_id] = user.id
            session[:login_referer] = nil
            if params[:referer_url]
              url = URI.parse(params[:referer_url]).path
              url_method = 'redirect_to' 
            else
              url = admin_dashboards_path
              url_method = 'redirect_to'
            end
            login_flag = true
          else
            error = t('devise.failure.ldap_pass_but_account_not_in_orbit')
          end
        else
          error = '驗證失敗，您輸入的使用者名稱或密碼不正確!'
        end
        break
      rescue => e
        if !e.class==Net::LDAP::ConnectionError
          error = '發生不可預知的錯誤'
          puts ['ldap',error,e]
          break
        else
          error = 'Could not connect to AD server.'
        end
      end
    end
    if !login_flag
      flash.now.alert = error.html_safe
      url = 'new'
      url_method = 'render'
    end
    [login_flag,session,flash,url,url_method]
  end
end