Class: Another::Ldap::Proxy::Operation

Inherits:
LDAP::Server::Operation
  • Object
show all
Defined in:
lib/another/ldap/proxy/operation.rb

Constant Summary collapse

PROXY_MODE_FIRST = 
'first'

Class Attribute Summary collapse

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(connection, messageID) ⇒ Operation

Returns a new instance of Operation.



18
19
20
21
22
23
24
25
26
 
# File 'lib/another/ldap/proxy/operation.rb', line 18

def initialize(connection, messageID)
  super

  @proxy_mode = self.class.backend_mode
  @proxy_backends = self.class.backends
  @root_username = self.class.root_username
  @root_password = self.class.root_password
  @logger = self.class.logger
end

Class Attribute Details

.backend_mode ⇒ Object (readonly)

Returns the value of attribute backend_mode.



67
68
69
 
# File 'lib/another/ldap/proxy/operation.rb', line 67

def backend_mode
  @backend_mode
end

.backends ⇒ Object (readonly)

Returns the value of attribute backends.



67
68
69
 
# File 'lib/another/ldap/proxy/operation.rb', line 67

def backends
  @backends
end

.logger ⇒ Object (readonly)

Returns the value of attribute logger.



67
68
69
 
# File 'lib/another/ldap/proxy/operation.rb', line 67

def logger
  @logger
end

.root_password ⇒ Object (readonly)

Returns the value of attribute root_password.



67
68
69
 
# File 'lib/another/ldap/proxy/operation.rb', line 67

def root_password
  @root_password
end

.root_username ⇒ Object (readonly)

Returns the value of attribute root_username.



67
68
69
 
# File 'lib/another/ldap/proxy/operation.rb', line 67

def root_username
  @root_username
end

Instance Attribute Details

#logger ⇒ Object (readonly)

Returns the value of attribute logger.



16
17
18
 
# File 'lib/another/ldap/proxy/operation.rb', line 16

def logger
  @logger
end

Class Method Details

.add_backend(backend) ⇒ Object 



88
89
90
91
 
# File 'lib/another/ldap/proxy/operation.rb', line 88

def add_backend(backend)
  @backends ||= []
  @backends << backend if backend
end

.new_operation(&block) ⇒ Object 



69
70
71
72
73
 
# File 'lib/another/ldap/proxy/operation.rb', line 69

def new_operation(&block)
  proxy_operation_class = Class.new(self)
  proxy_operation_class.instance_eval(&block) if block_given?
  proxy_operation_class
end

.set_backend_mode(backend_mode) ⇒ Object 



84
85
86
 
# File 'lib/another/ldap/proxy/operation.rb', line 84

def set_backend_mode(backend_mode)
  @backend_mode = backend_mode
end

.set_logger(logger) ⇒ Object 



75
76
77
 
# File 'lib/another/ldap/proxy/operation.rb', line 75

def set_logger(logger)
  @logger = logger
end

.set_root_credentials(root_username, root_password) ⇒ Object 



79
80
81
82
 
# File 'lib/another/ldap/proxy/operation.rb', line 79

def set_root_credentials(root_username, root_password)
  @root_username = root_username
  @root_password = root_password
end

Instance Method Details

#_validate_root_credentials(username, password) ⇒ Object 



62
63
64
 
# File 'lib/another/ldap/proxy/operation.rb', line 62

def _validate_root_credentials(username, password)
  @root_username == username && @root_password == password
end

#search(basedn, scope, deref, filter) ⇒ Object 



42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
 
# File 'lib/another/ldap/proxy/operation.rb', line 42

def search(basedn, scope, deref, filter)
  logger&.info "Operation#search ( #{basedn}, #{scope}, #{filter} )"

  client_scope = Another::Ldap::Proxy::ScopeConverter.from_server_to_client(scope)
  client_filter = Another::Ldap::Proxy::FilterConverter.from_server_to_client(filter)

  @proxy_backends.each do |backend|
    results = backend.search(basedn, client_scope, deref, client_filter)

    next if results.empty?

    results.each do |entry|
      dn, attributes = Another::Ldap::Proxy::EntryConverter.from_client_to_server(entry)
      send_SearchResultEntry(dn, attributes)
    end

    break if @proxy_mode == PROXY_MODE_FIRST
  end
end

#simple_bind(version, dn, password) ⇒ Object

Raises:

  • (LDAP::ResultError::InvalidCredentials) 


28
29
30
31
32
33
34
35
36
37
38
39
40
 
# File 'lib/another/ldap/proxy/operation.rb', line 28

def simple_bind(version, dn, password)
  logger&.info "Operation#simple_bind : version:#{version} dn:#{dn}"
  logger&.debug "Operation#simple_bind : dn:#{dn} password:#{password}"

  return if _validate_root_credentials(dn, password)

  @proxy_backends.each do |backend|
    return if backend.bind(version, dn, password)
  end

  logger&.warn "Operation#simple_bind : user #{dn} rejected"
  raise LDAP::ResultError::InvalidCredentials, "user #{dn} rejected"
end