mirror of
https://github.com/nabbar/golib.git
synced 2025-10-05 15:56:50 +08:00
cce6ba5348
- component/request: fix IsStarted function - component/head: replace mutex to atomic Package LDAP: - fix bug if ldapPort for TLS is not set - fix bug if ldapPort for StartTLS or noTLS is not set
139 lines
4.1 KiB
Go
139 lines
4.1 KiB
Go
/*
|
|
* MIT License
|
|
*
|
|
* Copyright (c) 2019 Nicolas JUHEL
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
* of this software and associated documentation files (the "Software"), to deal
|
|
* in the Software without restriction, including without limitation the rights
|
|
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
* copies of the Software, and to permit persons to whom the Software is
|
|
* furnished to do so, subject to the following conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be included in all
|
|
* copies or substantial portions of the Software.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
* SOFTWARE.
|
|
*
|
|
*/
|
|
|
|
package ldap
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/go-playground/validator/v10"
|
|
"github.com/nabbar/golib/errors"
|
|
)
|
|
|
|
type TLSMode uint8
|
|
|
|
const (
|
|
_TLSModeInit TLSMode = iota
|
|
//TLSModeNone no tls connection.
|
|
TLSModeNone TLSMode = iota + 1
|
|
//TLSModeTLS strict tls connection.
|
|
TLSModeTLS
|
|
//TLSModeStarttls starttls connection (tls into a no tls connection).
|
|
TLSModeStarttls
|
|
)
|
|
|
|
const (
|
|
groupFieldCN = "cn"
|
|
userFieldUid = "uid"
|
|
)
|
|
|
|
func (m TLSMode) String() string {
|
|
switch m {
|
|
case TLSModeStarttls:
|
|
return "starttls"
|
|
case TLSModeTLS:
|
|
return "tls"
|
|
case TLSModeNone:
|
|
return "none"
|
|
case _TLSModeInit:
|
|
return "not defined"
|
|
}
|
|
|
|
return _TLSModeInit.String()
|
|
}
|
|
|
|
func GetDefaultAttributes() []string {
|
|
return []string{"givenName", "mail", "uid", "dn"}
|
|
}
|
|
|
|
type Config struct {
|
|
Uri string `cloud:"uri" mapstructure:"uri" json:"uri" yaml:"uri" toml:"uri" validate:"fqdn,required"`
|
|
PortLdap int `cloud:"port-ldap" mapstructure:"port-ldap" json:"port-ldap" yaml:"port-ldap" toml:"port-ldap" validate:"number,gte=0,nefield=Portldaps,required"`
|
|
Portldaps int `cloud:"port-ldaps" mapstructure:"port-ldaps" json:"port-ldaps" yaml:"port-ldaps" toml:"port-ldaps" validate:"number,nefield=Portldap,omitempty"`
|
|
Basedn string `cloud:"basedn" mapstructure:"basedn" json:"basedn" yaml:"basedn" toml:"basedn" validate:"printascii,omitempty"`
|
|
//FilterGroup is fmt pattern like '(&(objectClass=groupOfNames)(%s=%s))' to make search of group object class
|
|
FilterGroup string `cloud:"filter-group" mapstructure:"filter-group" json:"filter-group" yaml:"filter-group" toml:"filter-group" validate:"printascii,required"`
|
|
//FilterUser is a fmt pattern like '(%s=%s)' to make search of user. By default, uid field is 'uid'
|
|
FilterUser string `cloud:"filter-user" mapstructure:"filter-user" json:"filter-user" yaml:"filter-user" toml:"filter-user" validate:"printascii,required"`
|
|
}
|
|
|
|
func NewConfig() *Config {
|
|
return &Config{}
|
|
}
|
|
|
|
func (cnf Config) Clone() *Config {
|
|
return &Config{
|
|
Uri: cnf.Uri,
|
|
PortLdap: cnf.PortLdap,
|
|
Portldaps: cnf.Portldaps,
|
|
Basedn: cnf.Basedn,
|
|
FilterGroup: cnf.FilterGroup,
|
|
FilterUser: cnf.FilterUser,
|
|
}
|
|
}
|
|
|
|
func (cnf Config) BaseDN() string {
|
|
return cnf.Basedn
|
|
}
|
|
|
|
func (cnf Config) ServerAddr(withTls bool) string {
|
|
if withTls && cnf.Portldaps > 0 {
|
|
return fmt.Sprintf("%s:%d", cnf.Uri, cnf.Portldaps)
|
|
} else if !withTls && cnf.PortLdap > 0 {
|
|
return fmt.Sprintf("%s:%d", cnf.Uri, cnf.PortLdap)
|
|
}
|
|
|
|
return ""
|
|
}
|
|
|
|
func (cnf Config) PatternFilterGroup() string {
|
|
return cnf.FilterGroup
|
|
}
|
|
|
|
func (cnf Config) PatternFilterUser() string {
|
|
return cnf.FilterUser
|
|
}
|
|
|
|
func (cnf Config) Validate() errors.Error {
|
|
var e = ErrorLDAPValidatorError.Error(nil)
|
|
|
|
if err := validator.New().Struct(cnf); err != nil {
|
|
if er, ok := err.(*validator.InvalidValidationError); ok {
|
|
e.Add(er)
|
|
}
|
|
|
|
for _, er := range err.(validator.ValidationErrors) {
|
|
//nolint #goerr113
|
|
e.Add(fmt.Errorf("config field '%s' is not validated by constraint '%s'", er.Namespace(), er.ActualTag()))
|
|
}
|
|
}
|
|
|
|
if !e.HasParent() {
|
|
e = nil
|
|
}
|
|
|
|
return e
|
|
}
|