f11bb8bfd4
* fix(outpost/ldap): missing user object classes * add "person" object class * update user object classes * update boolean strings to upper for being compliant tags: WIP-LDAP-Outpost-Windows-ADSI-Support * feat(outpost/ldap): add subschema attributes * add supported capability OIDs for Windows * add relevant supported ldap control OIDs tags: WIP-LDAP-Outpost-Windows-ADSI-Support * feat(outpost/ldap): update schema for windows Compatibility * add relevant dITContentRules for authentik * add all existing attribute types for Windows/Unix/Linux * add missing object classes definitions * update classes definitions for being compliant with LDAP schema * update attributes orders tags: WIP-LDAP-Outpost-Windows-ADSI-Support * feat(outpost/ldap): refine LDAP attribute types * remove unsused attribute types * order attribute types tags: WIP-LDAP-Outpost-Windows-ADSI-Support
59 lines
1.5 KiB
Go
59 lines
1.5 KiB
Go
package ldap
|
|
|
|
import (
|
|
"fmt"
|
|
"strconv"
|
|
"strings"
|
|
|
|
"beryju.io/ldap"
|
|
"goauthentik.io/api/v3"
|
|
"goauthentik.io/internal/outpost/ldap/constants"
|
|
"goauthentik.io/internal/outpost/ldap/utils"
|
|
)
|
|
|
|
func (pi *ProviderInstance) UserEntry(u api.User) *ldap.Entry {
|
|
dn := pi.GetUserDN(u.Username)
|
|
attrs := utils.AttributesToLDAP(u.Attributes, func(key string) string {
|
|
return utils.AttributeKeySanitize(key)
|
|
}, func(value []string) []string {
|
|
for i, v := range value {
|
|
if strings.Contains(v, "%s") {
|
|
value[i] = fmt.Sprintf(v, u.Username)
|
|
}
|
|
}
|
|
return value
|
|
})
|
|
|
|
if u.IsActive == nil {
|
|
u.IsActive = api.PtrBool(false)
|
|
}
|
|
if u.Email == nil {
|
|
u.Email = api.PtrString("")
|
|
}
|
|
attrs = utils.EnsureAttributes(attrs, map[string][]string{
|
|
"ak-active": {strings.ToUpper(strconv.FormatBool(*u.IsActive))},
|
|
"ak-superuser": {strings.ToUpper(strconv.FormatBool(u.IsSuperuser))},
|
|
"memberOf": pi.GroupsForUser(u),
|
|
"cn": {u.Username},
|
|
"sAMAccountName": {u.Username},
|
|
"uid": {u.Uid},
|
|
"name": {u.Name},
|
|
"displayName": {u.Name},
|
|
"mail": {*u.Email},
|
|
"objectClass": {
|
|
constants.OCTop,
|
|
constants.OCPerson,
|
|
constants.OCOrgPerson,
|
|
constants.OCInetOrgPerson,
|
|
constants.OCUser,
|
|
constants.OCPosixAccount,
|
|
constants.OCAKUser,
|
|
},
|
|
"uidNumber": {pi.GetUidNumber(u)},
|
|
"gidNumber": {pi.GetUidNumber(u)},
|
|
"homeDirectory": {fmt.Sprintf("/home/%s", u.Username)},
|
|
"sn": {u.Name},
|
|
})
|
|
return &ldap.Entry{DN: dn, Attributes: attrs}
|
|
}
|