Added ability turn off password synchronization.

- Closes #99.

Author: stevebauman

src/Config/auth.php

@@ -84,6 +84,29 @@
 
     'password_key' => env('ADLDAP_PASSWORD_KEY', 'password'),
 
+    /*
+    |--------------------------------------------------------------------------
+    | Password Sync
+    |--------------------------------------------------------------------------
+    |
+    | The password sync option allows you to automatically synchronize
+    | users AD passwords to your local database. These passwords are
+    | hashed natively by laravel.
+    |
+    | Enabling this option would also allow users to login to their
+    | accounts using the password last used when an AD connection
+    | was present.
+    |
+    | If this option is disabled, the local user account is applied
+    | a random 16 character hashed password, and will lose access
+    | to this account upon loss of AD connectivity.
+    |
+    | This option must be true or false.
+    |
+    */
+
+    'password_sync' => env('ADLDAP_PASSWORD_SYNC', true),
+
     /*
     |--------------------------------------------------------------------------
     | Login Attribute

src/Traits/ImportsUsers.php

@@ -120,17 +120,15 @@ protected function syncModelFromAdldap(User $user, Authenticatable $model)
      */
     protected function syncModelPassword(Authenticatable $model, $password)
     {
-        if ($model instanceof Model && $model->hasSetMutator('password')) {
-            // If the model has a set mutator for the password then
-            // we'll assume that the dev is using their
-            // own encryption method for passwords.
-            $model->password = $password;
+        // If the developer doesn't want to synchronize AD passwords,
+        // we'll set the password to a random 16 character string.
+        $password = ($this->getPasswordSync() ? $password : str_random());
 
-            return $model;
-        }
-
-        // Always encrypt the model password by default.
-        $model->password = bcrypt($password);
+        // If the model has a set mutator for the password then
+        // we'll assume that the dev is using their own
+        // encryption method for passwords. Otherwise
+        // we'll bcrypt it normally.
+        $model->password = ($model->hasSetMutator('password') ? $password : bcrypt($password));
 
         return $model;
     }
@@ -246,7 +244,7 @@ protected function getAdldap($provider = null)
     }
 
     /**
-     * Retrieves the Aldldap select attributes when performing
+     * Returns the configured select attributes when performing
      * queries for authentication and binding for users.
      *
      * @return array
@@ -257,7 +255,7 @@ protected function getSelectAttributes()
     }
 
     /**
-     * Returns the username attribute for discovering LDAP users.
+     * Returns the configured username attribute for discovering LDAP users.
      *
      * @return array
      */
@@ -267,7 +265,7 @@ protected function getUsernameAttribute()
     }
 
     /**
-     * Retrieves the Adldap bind user to model config option for binding
+     * Returns the configured bind user to model option for binding
      * the Adldap user model instance to the laravel model.
      *
      * @return bool
@@ -278,7 +276,7 @@ protected function getBindUserToModel()
     }
 
     /**
-     * Retrieves the Adldap login attribute for authenticating users.
+     * Returns the configured login attribute for authenticating users.
      *
      * @return string
      */
@@ -288,7 +286,7 @@ protected function getLoginAttribute()
     }
 
     /**
-     * Retrieves the Adldap sync attributes for filling the
+     * Returns the configured sync attributes for filling the
      * Laravel user model with active directory fields.
      *
      * @return array
@@ -298,6 +296,16 @@ protected function getSyncAttributes()
         return Config::get('adldap_auth.sync_attributes', ['name' => $this->getSchema()->commonName()]);
     }
 
+    /**
+     * Returns the configured password sync configuration option.
+     *
+     * @return bool
+     */
+    protected function getPasswordSync()
+    {
+        return Config::get('adldap_auth.password_sync', true);
+    }
+
     /**
      * Returns the configured login limitation filter.
      *
@@ -309,7 +317,7 @@ protected function getLimitationFilter()
     }
 
     /**
-     * Retrieves the default connection name from the configuration.
+     * Returns the configured default connection name.
      *
      * @return mixed
      */