guichet/model-user.go

188 lines
5.7 KiB
Go
Raw Normal View History

/*
Model-User handles everything having to do with the user.
*/
package main
import (
"fmt"
"log"
"strings"
"github.com/go-ldap/ldap/v3"
)
func get(user User, config *ConfigFile, ldapConn *ldap.Conn) (*User, error) {
searchReq := ldap.NewSearchRequest(
user.DN,
ldap.ScopeBaseObject,
ldap.NeverDerefAliases,
0,
0,
false,
"(objectClass=*)",
[]string{
"cn",
"givenName",
"displayName",
"uid",
"sn",
"mail",
"description",
2023-07-26 09:16:52 +00:00
"carLicense",
},
nil)
searchRes, err := ldapConn.Search(searchReq)
if err != nil {
log.Printf("get User : %v", err)
log.Printf("get User : %v", searchReq)
log.Printf("get User : %v", searchRes)
return nil, err
}
userEntry := searchRes.Entries[0]
resUser := User{
2023-07-26 08:51:59 +00:00
DN: user.DN,
GivenName: searchRes.Entries[0].GetAttributeValue("givenName"),
DisplayName: searchRes.Entries[0].GetAttributeValue("displayName"),
Description: searchRes.Entries[0].GetAttributeValue("description"),
SN: searchRes.Entries[0].GetAttributeValue("sn"),
UID: searchRes.Entries[0].GetAttributeValue("uid"),
CN: searchRes.Entries[0].GetAttributeValue("cn"),
Mail: searchRes.Entries[0].GetAttributeValue("mail"),
OtherMailbox: searchRes.Entries[0].GetAttributeValue("carLicense"),
CanAdmin: strings.EqualFold(user.DN, config.AdminAccount),
CanInvite: true,
UserEntry: userEntry,
}
searchReq.BaseDN = config.GroupCanAdmin
searchReq.Filter = "(member=" + user.DN + ")"
searchRes, err = ldapConn.Search(searchReq)
if err == nil {
if len(searchRes.Entries) > 0 {
resUser.CanAdmin = true
}
}
return &resUser, nil
}
2023-07-26 12:15:46 +00:00
// Adds a new user
func add(user User, config *ConfigFile, ldapConn *ldap.Conn) error {
log.Printf(fmt.Sprint("Adding New User"))
2023-07-26 12:15:46 +00:00
// LDAP Add Object
dn := user.DN
req := ldap.NewAddRequest(dn, nil)
req.Attribute("objectClass", []string{"top", "person", "organizationalPerson", "inetOrgPerson"})
if user.DisplayName != "" {
req.Attribute("displayName", []string{user.DisplayName})
}
if user.GivenName != "" {
req.Attribute("givenName", []string{user.GivenName})
}
if user.Mail != "" {
req.Attribute("mail", []string{user.Mail})
}
if user.UID != "" {
req.Attribute("uid", []string{user.UID})
}
// if user.Member != "" {
// req.Attribute("member", []string{user.Member})
// }
if user.SN != "" {
req.Attribute("sn", []string{user.SN})
}
2023-07-26 08:35:11 +00:00
if user.OtherMailbox != "" {
req.Attribute("carLicense", []string{user.OtherMailbox})
}
if user.Description != "" {
req.Attribute("description", []string{user.Description})
}
2023-07-26 12:15:46 +00:00
// Add the User
2023-07-26 12:19:45 +00:00
// err := ldapConn.Add(req)
// var ldapNewConn *ldap.Conn
ldapNewConn, err := openNewUserLdap(config)
err = ldapNewConn.Add(req)
if err != nil {
2023-07-26 08:41:21 +00:00
log.Printf(fmt.Sprintf("add(User) ldapconn.Add: %v", err))
log.Printf(fmt.Sprintf("add(User) ldapconn.Add: %v", req))
log.Printf(fmt.Sprintf("add(User) ldapconn.Add: %v", user))
//return err
}
2023-07-26 09:53:44 +00:00
// passwordModifyRequest := ldap.NewPasswordModifyRequest(user.DN, "", user.Password)
// _, err = ldapConn.PasswordModify(passwordModifyRequest)
// if err != nil {
// return err
// }
2023-07-26 08:48:07 +00:00
2023-07-26 08:35:11 +00:00
// Send the email
2023-07-26 09:44:29 +00:00
2023-07-26 09:53:44 +00:00
newUserLdapConn, _ := openNewUserLdap(config)
2023-07-26 12:51:03 +00:00
user.OtherMailbox = ""
2023-07-26 09:53:44 +00:00
err = passwordLost(user, config, newUserLdapConn)
2023-07-26 12:15:46 +00:00
if err != nil {
log.Printf("add User PasswordLost %v", err)
log.Printf("add User PasswordLost %v", newUserLdapConn)
}
2023-07-26 09:44:29 +00:00
// sendMailTplData := SendMailTplData{
// From: "alice@resdigita.org",
// To: user.OtherMailbox,
// RelTemplatePath: "user/new.email.txt",
// EmailContentVars: EmailContentVarsTplData{
// InviteFrom: "alice@resdigita.org",
// SendAddress: "https://www.gvoisins.org",
// Code: "...",
// },
// }
// err = sendMail(sendMailTplData)
// if err != nil {
// log.Printf("add(user) sendMail: %v", err)
// log.Printf("add(user) sendMail: %v", user)
// log.Printf("add(user) sendMail: %v", sendMailTplData)
// }
2023-07-26 08:35:11 +00:00
return err
}
func modify(user User, config *ConfigFile, ldapConn *ldap.Conn) error {
modify_request := ldap.NewModifyRequest(user.DN, nil)
previousUser, err := get(user, config, ldapConn)
if err != nil {
return err
}
replaceIfContent(modify_request, "displayName", user.DisplayName, previousUser.DisplayName)
replaceIfContent(modify_request, "givenName", user.GivenName, previousUser.GivenName)
replaceIfContent(modify_request, "sn", user.SN, previousUser.SN)
2023-07-26 09:36:51 +00:00
replaceIfContent(modify_request, "carLicense", user.OtherMailbox, user.OtherMailbox)
replaceIfContent(modify_request, "description", user.Description, previousUser.Description)
err = ldapConn.Modify(modify_request)
if err != nil {
log.Printf(fmt.Sprintf("71: %v", err))
log.Printf(fmt.Sprintf("72: %v", modify_request))
log.Printf(fmt.Sprintf("73: %v", user))
return err
}
return nil
}
func passwd(user User, config *ConfigFile, ldapConn *ldap.Conn) error {
passwordModifyRequest := ldap.NewPasswordModifyRequest(user.DN, "", user.Password)
_, err := ldapConn.PasswordModify(passwordModifyRequest)
2023-07-26 12:38:04 +00:00
if err != nil {
log.Printf(fmt.Sprintf("model-user passwd : %v %v", err, ldapConn))
log.Printf(fmt.Sprintf("model-user passwd : %v", user))
}
return err
}
func bind(user User, config *ConfigFile, ldapConn *ldap.Conn) error {
return ldapConn.Bind(user.DN, user.Password)
}
// func encodePassword(inPassword string) (string, error) {
// utf16 := unicode.UTF16(unicode.LittleEndian, unicode.IgnoreBOM)
// return utf16.NewEncoder().String("\"" + inPassword + "\"")
// // if err != nil {
// // log.Printf("Error encoding password: %s", err)
// // return err
// // }
// }