From 673f070cb7d857ef50e5ee31cc841e7eaefa5d49 Mon Sep 17 00:00:00 2001
From: Deon George <deon@dege.au>
Date: Sat, 18 Jan 2025 22:55:50 +1100
Subject: [PATCH] Add support for SASL Kerberous realms. Closes #114

---
 app/Classes/LDAP/Attribute/Password/SASL.php | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 app/Classes/LDAP/Attribute/Password/SASL.php

diff --git a/app/Classes/LDAP/Attribute/Password/SASL.php b/app/Classes/LDAP/Attribute/Password/SASL.php
new file mode 100644
index 0000000..ae7630f
--- /dev/null
+++ b/app/Classes/LDAP/Attribute/Password/SASL.php
@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Classes\LDAP\Attribute\Password;
+
+final class SASL extends Base
+{
+	public const key = 'SASL';
+
+	public function encode(string $password): string
+	{
+		if (! str_contains($password,'@'))
+			return '';
+
+		// Ensure our id is lowercase, and realm is uppercase
+		list($id,$realm) = explode('@',$password);
+
+		return sprintf('{%s}%s@%s',self::key,strtolower($id),strtoupper($realm));
+	}
+}
\ No newline at end of file