mirror of
https://github.com/Luzifer/nginx-sso.git
synced 2024-12-30 01:31:18 +00:00
115182e445
* Define configuration for LDAP module * Implement LDAP auth * Vendor new dependencies * Add documentation for LDAP provider
113 lines
3.3 KiB
Go
113 lines
3.3 KiB
Go
//
|
|
// https://tools.ietf.org/html/rfc4511
|
|
//
|
|
// AddRequest ::= [APPLICATION 8] SEQUENCE {
|
|
// entry LDAPDN,
|
|
// attributes AttributeList }
|
|
//
|
|
// AttributeList ::= SEQUENCE OF attribute Attribute
|
|
|
|
package ldap
|
|
|
|
import (
|
|
"errors"
|
|
"log"
|
|
|
|
"gopkg.in/asn1-ber.v1"
|
|
)
|
|
|
|
// Attribute represents an LDAP attribute
|
|
type Attribute struct {
|
|
// Type is the name of the LDAP attribute
|
|
Type string
|
|
// Vals are the LDAP attribute values
|
|
Vals []string
|
|
}
|
|
|
|
func (a *Attribute) encode() *ber.Packet {
|
|
seq := ber.Encode(ber.ClassUniversal, ber.TypeConstructed, ber.TagSequence, nil, "Attribute")
|
|
seq.AppendChild(ber.NewString(ber.ClassUniversal, ber.TypePrimitive, ber.TagOctetString, a.Type, "Type"))
|
|
set := ber.Encode(ber.ClassUniversal, ber.TypeConstructed, ber.TagSet, nil, "AttributeValue")
|
|
for _, value := range a.Vals {
|
|
set.AppendChild(ber.NewString(ber.ClassUniversal, ber.TypePrimitive, ber.TagOctetString, value, "Vals"))
|
|
}
|
|
seq.AppendChild(set)
|
|
return seq
|
|
}
|
|
|
|
// AddRequest represents an LDAP AddRequest operation
|
|
type AddRequest struct {
|
|
// DN identifies the entry being added
|
|
DN string
|
|
// Attributes list the attributes of the new entry
|
|
Attributes []Attribute
|
|
}
|
|
|
|
func (a AddRequest) encode() *ber.Packet {
|
|
request := ber.Encode(ber.ClassApplication, ber.TypeConstructed, ApplicationAddRequest, nil, "Add Request")
|
|
request.AppendChild(ber.NewString(ber.ClassUniversal, ber.TypePrimitive, ber.TagOctetString, a.DN, "DN"))
|
|
attributes := ber.Encode(ber.ClassUniversal, ber.TypeConstructed, ber.TagSequence, nil, "Attributes")
|
|
for _, attribute := range a.Attributes {
|
|
attributes.AppendChild(attribute.encode())
|
|
}
|
|
request.AppendChild(attributes)
|
|
return request
|
|
}
|
|
|
|
// Attribute adds an attribute with the given type and values
|
|
func (a *AddRequest) Attribute(attrType string, attrVals []string) {
|
|
a.Attributes = append(a.Attributes, Attribute{Type: attrType, Vals: attrVals})
|
|
}
|
|
|
|
// NewAddRequest returns an AddRequest for the given DN, with no attributes
|
|
func NewAddRequest(dn string) *AddRequest {
|
|
return &AddRequest{
|
|
DN: dn,
|
|
}
|
|
|
|
}
|
|
|
|
// Add performs the given AddRequest
|
|
func (l *Conn) Add(addRequest *AddRequest) error {
|
|
packet := ber.Encode(ber.ClassUniversal, ber.TypeConstructed, ber.TagSequence, nil, "LDAP Request")
|
|
packet.AppendChild(ber.NewInteger(ber.ClassUniversal, ber.TypePrimitive, ber.TagInteger, l.nextMessageID(), "MessageID"))
|
|
packet.AppendChild(addRequest.encode())
|
|
|
|
l.Debug.PrintPacket(packet)
|
|
|
|
msgCtx, err := l.sendMessage(packet)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer l.finishMessage(msgCtx)
|
|
|
|
l.Debug.Printf("%d: waiting for response", msgCtx.id)
|
|
packetResponse, ok := <-msgCtx.responses
|
|
if !ok {
|
|
return NewError(ErrorNetwork, errors.New("ldap: response channel closed"))
|
|
}
|
|
packet, err = packetResponse.ReadPacket()
|
|
l.Debug.Printf("%d: got response %p", msgCtx.id, packet)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if l.Debug {
|
|
if err := addLDAPDescriptions(packet); err != nil {
|
|
return err
|
|
}
|
|
ber.PrintPacket(packet)
|
|
}
|
|
|
|
if packet.Children[1].Tag == ApplicationAddResponse {
|
|
resultCode, resultDescription := getLDAPResultCode(packet)
|
|
if resultCode != 0 {
|
|
return NewError(resultCode, errors.New(resultDescription))
|
|
}
|
|
} else {
|
|
log.Printf("Unexpected Response: %d", packet.Children[1].Tag)
|
|
}
|
|
|
|
l.Debug.Printf("%d: returning", msgCtx.id)
|
|
return nil
|
|
}
|