59 lines
1 KiB
Go
59 lines
1 KiB
Go
package ldap
|
|
|
|
import (
|
|
"sync"
|
|
|
|
"github.com/go-openapi/strfmt"
|
|
log "github.com/sirupsen/logrus"
|
|
"goauthentik.io/outpost/pkg/ak"
|
|
"goauthentik.io/outpost/pkg/models"
|
|
|
|
"github.com/nmcclain/ldap"
|
|
)
|
|
|
|
const GroupObjectClass = "group"
|
|
const UserObjectClass = "user"
|
|
|
|
type ProviderInstance struct {
|
|
BaseDN string
|
|
|
|
UserDN string
|
|
GroupDN string
|
|
|
|
appSlug string
|
|
flowSlug string
|
|
s *LDAPServer
|
|
log *log.Entry
|
|
|
|
searchAllowedGroups []*strfmt.UUID
|
|
boundUsersMutex sync.RWMutex
|
|
boundUsers map[string]UserFlags
|
|
}
|
|
|
|
type UserFlags struct {
|
|
UserInfo models.User
|
|
CanSearch bool
|
|
}
|
|
|
|
type LDAPServer struct {
|
|
s *ldap.Server
|
|
log *log.Entry
|
|
ac *ak.APIController
|
|
|
|
providers []*ProviderInstance
|
|
}
|
|
|
|
func NewServer(ac *ak.APIController) *LDAPServer {
|
|
s := ldap.NewServer()
|
|
s.EnforceLDAP = true
|
|
ls := &LDAPServer{
|
|
s: s,
|
|
log: log.WithField("logger", "authentik.outpost.ldap"),
|
|
ac: ac,
|
|
providers: []*ProviderInstance{},
|
|
}
|
|
s.BindFunc("", ls)
|
|
s.SearchFunc("", ls)
|
|
return ls
|
|
}
|