Module: Scooter::HttpDispatchers::Rbac::V1::DirectoryService

Included in:
Scooter::HttpDispatchers::Rbac::V1
Defined in:
lib/scooter/httpdispatchers/rbac/v1/directory_service.rb

Overview

Methods defined here are broken out from the rest of the RBAC endpoints because they use a ldapdispatcher object to determine various settings for the ds endpoint.

Instance Method Summary collapse

Instance Method Details

#attach_ds_to_rbac(ldapdispatcher = nil, options = {}) ⇒ Object 



43
44
45
46
47
48
49
50
51
 
# File 'lib/scooter/httpdispatchers/rbac/v1/directory_service.rb', line 43

def attach_ds_to_rbac(ldapdispatcher=nil, options={})
  settings = ldapdispatcher ? ds_default_settings(ldapdispatcher) : {}
  settings.merge!(options)

  set_rbac_path
  @connection.put('v1/ds') do |req|
    req.body = settings
  end
end

#ds_default_settings(ldapdispatcher) ⇒ Object 



10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
 
# File 'lib/scooter/httpdispatchers/rbac/v1/directory_service.rb', line 10

def ds_default_settings(ldapdispatcher)
  base_dn_to_chomp = ',' + ldapdispatcher.base
  user_rdn = ldapdispatcher.users_dn.chomp(base_dn_to_chomp)
  group_rdn = ldapdispatcher.groups_dn.chomp(base_dn_to_chomp)
  settings                      = {
      "id"                     => 1,
      "display_name"           => 'test_ds',
      "help_link"              => 'https://example.com',
      "hostname"               => ldapdispatcher.host,
      "port"                   => ldapdispatcher.port,
      "login"                  => ldapdispatcher.admin_dn,
      "password"               => ldapdispatcher.return_default_password,
      "connect_timeout"        => 20,
      "ssl"                    => true,
      "base_dn"                => ldapdispatcher.base,
      "user_lookup_attr"       => 'cn',
      "user_email_attr"        => 'mail',
      "user_display_name_attr" => 'displayName',
      "group_object_class"     => '*',
      "group_name_attr"        => 'name',
      "group_member_attr"      => 'uniqueMember',
      "group_lookup_attr"      => 'cn',
      "user_rdn"               => user_rdn,
      "group_rdn"              => group_rdn
    }

    # Change the group_member_attr to just member if windows is the
    # directory service, because AD doesn't support the attribute
    # uniqueMember
    settings['group_member_attr'] = 'member' if ldapdispatcher.is_windows_ad?
    settings
end

#test_attach_ds_to_rbac(ldapdispatcher = nil, options = {}) ⇒ Object 



53
54
55
56
57
58
59
60
61
 
# File 'lib/scooter/httpdispatchers/rbac/v1/directory_service.rb', line 53

def test_attach_ds_to_rbac(ldapdispatcher=nil, options={})
  settings = ldapdispatcher ? ds_default_settings(ldapdispatcher) : {}
  settings.merge!(options)

  set_rbac_path
  @connection.put('v1/ds/test') do |req|
    req.body = settings
  end
end