2021-04-19 22:30:27 +00:00
|
|
|
package ldap
|
|
|
|
|
|
|
|
import (
|
2021-04-26 09:53:06 +00:00
|
|
|
"errors"
|
|
|
|
"fmt"
|
|
|
|
"strings"
|
|
|
|
|
2021-05-04 22:03:19 +00:00
|
|
|
"github.com/go-openapi/strfmt"
|
2021-04-19 22:30:27 +00:00
|
|
|
log "github.com/sirupsen/logrus"
|
2021-04-26 09:53:06 +00:00
|
|
|
"goauthentik.io/outpost/pkg/client/outposts"
|
2021-04-19 22:30:27 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
func (ls *LDAPServer) Refresh() error {
|
2021-04-26 09:53:06 +00:00
|
|
|
outposts, err := ls.ac.Client.Outposts.OutpostsLdapList(outposts.NewOutpostsLdapListParams(), ls.ac.Auth)
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
if len(outposts.Payload.Results) < 1 {
|
|
|
|
return errors.New("no ldap provider defined")
|
|
|
|
}
|
|
|
|
providers := make([]*ProviderInstance, len(outposts.Payload.Results))
|
|
|
|
for idx, provider := range outposts.Payload.Results {
|
|
|
|
userDN := strings.ToLower(fmt.Sprintf("cn=users,%s", provider.BaseDn))
|
|
|
|
groupDN := strings.ToLower(fmt.Sprintf("cn=groups,%s", provider.BaseDn))
|
|
|
|
providers[idx] = &ProviderInstance{
|
2021-05-04 22:03:19 +00:00
|
|
|
BaseDN: provider.BaseDn,
|
|
|
|
GroupDN: groupDN,
|
|
|
|
UserDN: userDN,
|
|
|
|
appSlug: *provider.ApplicationSlug,
|
|
|
|
flowSlug: *provider.BindFlowSlug,
|
|
|
|
searchAllowedGroups: []*strfmt.UUID{provider.SearchGroup},
|
|
|
|
s: ls,
|
|
|
|
log: log.WithField("logger", "authentik.outpost.ldap").WithField("provider", provider.Name),
|
2021-04-26 09:53:06 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
ls.providers = providers
|
|
|
|
ls.log.Info("Update providers")
|
2021-04-19 22:30:27 +00:00
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func (ls *LDAPServer) Start() error {
|
2021-04-26 12:46:29 +00:00
|
|
|
listen := "0.0.0.0:3389"
|
2021-04-19 22:30:27 +00:00
|
|
|
log.Debugf("Listening on %s", listen)
|
|
|
|
err := ls.s.ListenAndServe(listen)
|
|
|
|
if err != nil {
|
|
|
|
ls.log.Errorf("LDAP Server Failed: %s", err.Error())
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
return nil
|
|
|
|
}
|