func getBindDN(cfg *ConfigEntry, c *ldap.Conn, username string) (string, error) {
bindDN := ""
if cfg.DiscoverDN || (cfg.BindDN != "" && cfg.BindPassword != "") {
if err := c.Bind(cfg.BindDN, cfg.BindPassword); err != nil {
return bindDN, fmt.Errorf("LDAP bind (service) failed: %v", err)
}
result, err := c.Search(&ldap.SearchRequest{
BaseDN: cfg.UserDN,
Scope: 2, // subtree
Filter: fmt.Sprintf("(%s=%s)", cfg.UserAttr, ldap.EscapeFilter(username)),
})
if err != nil {
return bindDN, fmt.Errorf("LDAP search for binddn failed: %v", err)
}
if len(result.Entries) != 1 {
return bindDN, fmt.Errorf("LDAP search for binddn 0 or not unique")
}
bindDN = result.Entries[0].DN
} else {
if cfg.UPNDomain != "" {
bindDN = fmt.Sprintf("%s@%s", EscapeLDAPValue(username), cfg.UPNDomain)
} else {
bindDN = fmt.Sprintf("%s=%s,%s", cfg.UserAttr, EscapeLDAPValue(username), cfg.UserDN)
}
}
return bindDN, nil
}
// Bind binds to a given LDAP connection if a bind DN and password were given.
// Bind returns whether a bind occurred and whether an error occurred
func (l *LDAPClientConfig) Bind(connection *ldap.Conn) (bound bool, err error) {
if len(l.BindDN) > 0 {
if err := connection.Bind(l.BindDN, l.BindPassword); err != nil {
return false, err
} else {
return true, nil
}
}
return false, nil
}
func (la *LDAPAuth) bindReadOnlyUser(l *ldap.Conn) error {
if la.config.BindDN != "" {
password, err := ioutil.ReadFile(la.config.BindPasswordFile)
if err != nil {
return err
}
glog.V(2).Infof("Bind read-only user %s", string(password))
err = l.Bind(la.config.BindDN, string(password))
if err != nil {
return err
}
}
return nil
}
func (la *LDAPAuth) bindReadOnlyUser(l *ldap.Conn) error {
if la.config.BindDN != "" {
password, err := ioutil.ReadFile(la.config.BindPasswordFile)
if err != nil {
return err
}
password_str := strings.TrimSpace(string(password))
glog.V(2).Infof("Bind read-only user (DN = %s)", la.config.BindDN)
err = l.Bind(la.config.BindDN, password_str)
if err != nil {
return err
}
}
return nil
}
func indexHandler(w http.ResponseWriter, r *http.Request) {
var (
xSearchPplMode = int(0)
xSearch string
xMessage string
dn string
dn_back string
dn_back_tmp []string
go_home_button string
ldap_Search string
ldapSearchMode = int(1)
ckl1 int
ldap_Attr []string
xGetDN [1000]string
xGetCkl int
l *ldap.Conn
err error
xFRColor = string("#FFFFFF")
xBGColor = string("#FFFFFF")
LUserName = string("")
setAdminMode = string("")
)
username, userperm := CheckUserSession(r, w)
//fmt.Printf("%s / %d\n", username, userperm)
switch userperm {
case roleAdmin:
xFRColor = "#FF0000"
xBGColor = "#FFFFFF"
LUserName = username
setAdminMode = "Yes"
case roleUser:
xFRColor = "#0000FF"
xBGColor = "#FFFFFF"
LUserName = username
default:
xFRColor = "#FFFFFF"
xBGColor = "#FFFFFF"
LUserName = ""
}
ldap_Attr = make([]string, len(rconf.WLB_LDAP_ATTR))
for ckl1 := 0; ckl1 < len(rconf.WLB_LDAP_ATTR); ckl1++ {
ldap_Attr[ckl1] = rconf.WLB_LDAP_ATTR[ckl1][0]
}
SABModules.Log_ON(&rconf)
defer SABModules.Log_OFF()
get_dn := r.FormValue("dn")
get_cn := r.FormValue("cn")
get_fn := r.FormValue("FirstName")
get_ln := r.FormValue("LastName")
searchMode := r.FormValue("SearchMode")
remIPClient := getIPAddress(r)
// log.Printf("DN: %s --- CN: %s", get_dn, get_cn)
if get_dn == "" {
dn = rconf.LDAP_URL[ldap_count][3]
} else {
dn = get_dn
}
if len(dn) < len(rconf.LDAP_URL[ldap_count][3]) {
dn = rconf.LDAP_URL[ldap_count][3]
}
log.Printf("->")
log.Printf("--> %s", pVersion)
log.Printf("->")
ucurl, _ := strconv.Unquote(r.RequestURI)
log.Println(remIPClient + " --> http://" + r.Host + ucurl)
log.Printf("%s ++> DN: %s / CN: %s / Mode: %d / Def.DN: %s", remIPClient, dn, ldap_Search, ldapSearchMode, rconf.LDAP_URL[ldap_count][3])
if get_cn == "" && get_ln == "" && get_fn == "" {
ldap_Search = rconf.LDAP_URL[ldap_count][4]
} else {
log.Printf("%s ++> SQL Search: %s/%s/%s\n", remIPClient, get_cn, get_fn, get_ln)
dbpg, err := sql.Open("postgres", rconf.PG_DSN)
if err != nil {
log.Fatalf("PG_INIT::Open() error: %v\n", err)
}
defer dbpg.Close()
queryx := "select x.dn from ldap_entries as x, ldapx_persons as y where x.uid=y.uid"
if len(get_cn) > 2 {
queryx = fmt.Sprintf("%s and lower(fullname) like lower('%%%s%%')", queryx, strings.ToLower(get_cn))
}
if len(get_ln) > 2 {
queryx = fmt.Sprintf("%s and lower(surname) like lower('%s%%')", queryx, strings.ToLower(get_ln))
}
if len(get_fn) > 2 {
queryx = fmt.Sprintf("%s and lower(name) like lower('%s%%')", queryx, strings.ToLower(get_fn))
}
if len(get_cn) <= 2 && len(get_ln) <= 2 && len(get_fn) <= 2 {
queryx = fmt.Sprintf("%s and 2=3;", queryx)
} else {
queryx = fmt.Sprintf("%s;", queryx)
}
// log.Printf("Search QUERY: %s\n", queryx)
rows, err := dbpg.Query(queryx)
if err != nil {
fmt.Printf("SQL Error: %s\n", queryx)
log.Printf("PG::Query() Check LDAP tables error: %v\n", err)
return
}
xGetCkl = 0
for rows.Next() {
rows.Scan(&xGetDN[xGetCkl])
//fmt.Println("XXX:", xGetDN[xGetCkl], dn)
if strings.Contains(strings.ToLower(xGetDN[xGetCkl]), strings.ToLower(dn)) || searchMode == "Full" {
log.Printf("%s <-- SQL Found: %s\n", remIPClient, xGetDN[xGetCkl])
xGetCkl++
if xGetCkl > userLimit {
xMessage = fmt.Sprintf("Количество персон по вашему запросу превысило %d! Пожалуйста, задайте критерии более конкретно!", userLimit)
break
}
}
}
xSearchPplMode = 1
ldapSearchMode = 2
}
if strings.ToLower(dn) != strings.ToLower(rconf.LDAP_URL[ldap_count][3]) || xSearchPplMode == 1 {
go_home_button = "+"
}
if ldapSearchMode != 2 {
xSearch = "+"
}
if strings.ToLower(dn) != strings.ToLower(rconf.LDAP_URL[ldap_count][3]) {
if ldapSearchMode == 1 && xSearchPplMode == 0 {
dn_back_tmp = strings.Split(dn, ",")
for ckl1 = 1; ckl1 < len(dn_back_tmp); ckl1++ {
if ckl1 == 1 {
dn_back = dn_back_tmp[ckl1]
} else {
dn_back += fmt.Sprintf(",%s", dn_back_tmp[ckl1])
}
}
}
}
// log.Printf("%s ... Initialize LDAP connector...", remIPClient)
if initLDAPConnector() == "error" {
return
}
l, err = ldap.Dial("tcp", rconf.LDAP_URL[ldap_count][0])
if err != nil {
fmt.Fprintf(w, err.Error())
log.Printf("LDAP::Initialize() error: %v\n", err)
return
}
// l.Debug = true
defer l.Close()
log.Printf("%s =!= Connected to server %d of %d: %s", remIPClient, ldap_count+1, len(rconf.LDAP_URL), rconf.LDAP_URL[ldap_count][0])
err = l.Bind(rconf.LDAP_URL[ldap_count][1], rconf.LDAP_URL[ldap_count][2])
if err != nil {
fmt.Fprintf(w, err.Error())
log.Printf("LDAP::Bind() error: %v\n", err)
return
}
t, err := template.ParseFiles("templates/header.html")
if err != nil {
fmt.Fprintf(w, err.Error())
log.Println(err.Error())
return
}
t.ExecuteTemplate(w, "header", template.FuncMap{"Pagetitle": rconf.WLB_HTML_Title, "FRColor": xFRColor, "BGColor": xBGColor})
t, err = template.ParseFiles("templates/search.html")
if err != nil {
fmt.Fprintf(w, err.Error())
log.Println(err.Error())
return
}
t.ExecuteTemplate(w, "search", template.FuncMap{"GoHome": go_home_button, "PrevDN": dn_back, "DN": dn, "xSearch": xSearch, "xMessage": xMessage, "LineColor": "#EEEEEE", "LUserName": LUserName, "LoginShow": "Yes", "RedirectDN": r.RequestURI})
t, err = template.ParseFiles("templates/index.html")
if err != nil {
fmt.Fprintf(w, err.Error())
log.Println(err.Error())
return
}
if xSearchPplMode == 0 {
search := ldap.NewSearchRequest(dn, ldapSearchMode, ldap.NeverDerefAliases, 0, 0, false, ldap_Search, ldap_Attr, nil)
// log.Printf("Search: %v\n%v\n%v\n%v\n%v\n%v\n", search, dn, ldapSearchMode, ldap.NeverDerefAliases, ldap_Search, ldap_Attr)
sr, err := l.Search(search)
if err != nil {
fmt.Fprintf(w, err.Error())
log.Printf("LDAP::Search() error: %v\n", err)
return
}
// fmt.Printf("\n\nSearch: %v", search)
log.Printf("%s ++> search: %s // found: %d\n", remIPClient, search.Filter, len(sr.Entries))
if len(sr.Entries) > 0 {
dnList := make(map[string]tList, len(sr.Entries))
for _, entry := range sr.Entries {
fType := ""
fField := make(map[string]string, len(rconf.WLB_LDAP_ATTR))
for _, attr := range entry.Attributes {
for ckl1 := 0; ckl1 < len(rconf.WLB_LDAP_ATTR); ckl1++ {
if attr.Name == rconf.WLB_LDAP_ATTR[ckl1][0] {
fField[rconf.WLB_LDAP_ATTR[ckl1][1]] = fmt.Sprintf("%s", strings.Join(attr.Values, ","))
// fmt.Printf("Name: %s==%s --> %s = %s\n", attr.Name, rconf.WLB_LDAP_ATTR[ckl1][0], rconf.WLB_LDAP_ATTR[ckl1][1], fField[rconf.WLB_LDAP_ATTR[ckl1][1]])
if rconf.WLB_LDAP_ATTR[ckl1][1] == "ORGName" {
fType = "Org"
}
if rconf.WLB_LDAP_ATTR[ckl1][1] == "USERName" {
fType = "User"
}
}
}
}
getMore(remIPClient, fField, fType, l, dnList, setAdminMode)
}
t.ExecuteTemplate(w, "index", dnList)
}
} else {
dnList := make(map[string]tList, xGetCkl)
for ckl1 = 0; ckl1 < xGetCkl; ckl1++ {
// fmt.Printf("GET: %s / %d\n", xGetDN[ckl1], ckl1)
search := ldap.NewSearchRequest(xGetDN[ckl1], 0, ldap.NeverDerefAliases, 0, 0, false, "(objectClass=inetOrgPerson)", ldap_Attr, nil)
// fmt.Printf("GET: %v\n", search)
sr, err := l.Search(search)
if err != nil {
fmt.Printf(err.Error())
// fmt.Fprintf(w, err.Error())
log.Printf("LDAP::Search() error: %v %v\n", search, err)
continue
}
fType := "User"
fField := make(map[string]string, len(rconf.WLB_LDAP_ATTR))
fField["DN"] = xGetDN[ckl1]
if len(sr.Entries) > 0 {
for _, entry := range sr.Entries {
for _, attr := range entry.Attributes {
for ckl2 := 0; ckl2 < len(rconf.WLB_LDAP_ATTR); ckl2++ {
if attr.Name == rconf.WLB_LDAP_ATTR[ckl2][0] {
fField[rconf.WLB_LDAP_ATTR[ckl2][1]] = fmt.Sprintf("%s", strings.Join(attr.Values, ","))
// fmt.Printf("Name: %s==%s --> %s = %s\n", attr.Name, rconf.WLB_LDAP_ATTR[ckl1][0], rconf.WLB_LDAP_ATTR[ckl1][1], fField[rconf.WLB_LDAP_ATTR[ckl1][1]])
}
}
}
}
}
getMore(remIPClient, fField, fType, l, dnList, setAdminMode)
}
t.ExecuteTemplate(w, "index", dnList)
}
t, err = template.ParseFiles("templates/footer.html")
if err != nil {
fmt.Fprintf(w, err.Error())
log.Println(err.Error())
return
}
t.ExecuteTemplate(w, "footer", template.FuncMap{"WebBookVersion": pVersion, "xMailBT": rconf.WLB_MailBT, "LineColor": "#EEEEEE"})
}
func davDNHandler(w http.ResponseWriter, r *http.Request) {
var (
uid string
uAction string
uFullname string
queryx string
err error
l *ldap.Conn
xFRColor = string("#FFFFFF")
xBGColor = string("#FFFFFF")
)
_, userperm := CheckUserSession(r, w)
switch userperm {
case roleAdmin:
//xFRColor = "#FF0000"
//xBGColor = "#FFFFFF"
default:
return
}
SABModules.Log_ON(&rconf)
defer SABModules.Log_OFF()
remIPClient := getIPAddress(r)
uid = r.FormValue("uid")
uAction = r.FormValue("action")
dbpg, err := sql.Open("postgres", rconf.PG_DSN)
if err != nil {
log.Fatalf("PG_INIT::Open() error: %v\n", err)
}
defer dbpg.Close()
queryx = fmt.Sprintf("select fullname from ldapx_persons where uid='%s';", uid)
rows, err := dbpg.Query(queryx)
if err != nil {
log.Printf("%s\n", queryx)
log.Printf("PG::Query() Get User Name for UID: %v\n", err)
return
}
rows.Next()
rows.Scan(&uFullname)
if uAction == "SaveDN" && len(uFullname) > 0 {
queryx = fmt.Sprintf("select id from aaa_logins where uid='%s';", uid)
rows, err := dbpg.Query(queryx)
if err != nil {
log.Printf("%s\n", queryx)
log.Printf("PG::Query() Get User ID for UID: %v\n", err)
return
}
xId := 0
rows.Next()
rows.Scan(&xId)
queryx = fmt.Sprintf("delete from aaa_dns where userid=%d;", xId)
_, err = dbpg.Query(queryx)
if err != nil {
log.Printf("%s\n", queryx)
log.Printf("PG::Query() Delete DNs for UID: %v\n", err)
return
}
time.Sleep(time.Second)
r.ParseForm()
for parName := range r.Form {
if strings.Contains(parName, "SaveDN") {
queryx = fmt.Sprintf("insert into aaa_dns (userid,dn) select %d, dn from ldap_entries where uid='%s';", xId, r.FormValue(parName))
//fmt.Printf("%s\n", queryx)
_, err = dbpg.Query(queryx)
if err != nil {
log.Printf("%s\n", queryx)
log.Printf("PG::Query() Insert DNs for UID: %v\n", err)
return
}
//fmt.Fprintf(w, "%v\n", r.FormValue(parName))
}
}
queryx = fmt.Sprintf("insert into aaa_dav_ntu (userid,updtime) select %d,%v where not exists (select userid from aaa_dav_ntu where userid=%d); update aaa_dav_ntu set updtime=%v where userid=%d;", xId, time.Now().Unix(), xId, time.Now().Unix(), xId)
//fmt.Printf("%s\n", queryx)
_, err = dbpg.Query(queryx)
if err != nil {
log.Printf("%s\n", queryx)
log.Printf("PG::Query() Update NTU table: %v\n", err)
return
}
log.Printf("%s --> Set DavDN List for %s", remIPClient, uFullname)
time.Sleep(time.Second)
fmt.Fprintf(w, "<script type=\"text/javascript\">window.close();</script>")
} else {
log.Printf("%s <-- Get DavDN List for %s", remIPClient, uFullname)
if initLDAPConnector() == "error" {
return
}
l, err = ldap.Dial("tcp", rconf.LDAP_URL[ldap_count][0])
if err != nil {
fmt.Fprintf(w, err.Error())
log.Printf("LDAP::Initialize() error: %v\n", err)
return
}
// l.Debug = true
defer l.Close()
log.Printf("%s =!= Connected to server %d of %d: %s", remIPClient, ldap_count+1, len(rconf.LDAP_URL), rconf.LDAP_URL[ldap_count][0])
err = l.Bind(rconf.LDAP_URL[ldap_count][1], rconf.LDAP_URL[ldap_count][2])
if err != nil {
fmt.Fprintf(w, err.Error())
log.Printf("LDAP::Bind() error: %v\n", err)
return
}
t, err := template.ParseFiles("templates/header.html")
if err != nil {
fmt.Fprintf(w, err.Error())
log.Println(err.Error())
return
}
t.ExecuteTemplate(w, "header", template.FuncMap{"Pagetitle": rconf.WLB_HTML_Title, "FRColor": xFRColor, "BGColor": xBGColor, "TREEOn": "Yes"})
t, err = template.ParseFiles("templates/tree-00.html")
if err != nil {
fmt.Fprintf(w, err.Error())
log.Println(err.Error())
return
}
t.ExecuteTemplate(w, "tree-00", template.FuncMap{"UID": uid})
queryx = fmt.Sprintf("select distinct uid from ldap_entries where lower(dn)=lower('%s') limit 1;", rconf.LDAP_URL[ldap_count][3])
rows, err := dbpg.Query(queryx)
if err != nil {
log.Printf("%s\n", queryx)
log.Printf("PG::Query() Get UID for DN: %v\n", err)
return
}
rows.Next()
uidDN := ""
rows.Scan(&uidDN)
queryx = fmt.Sprintf("select z.uid from aaa_dns as x, aaa_logins as y, ldap_entries as z where x.userid=y.id and x.dn=z.dn and y.uid='%s';", uid)
//fmt.Printf("%s\n", queryx)
rows, err = dbpg.Query(queryx)
if err != nil {
log.Printf("%s\n", queryx)
log.Printf("PG::Query() Get UID for DN: %v\n", err)
return
}
dnList := make([]string, 0)
x := ""
for rows.Next() {
rows.Scan(&x)
dnList = append(dnList, x)
//fmt.Printf("%s\n", x)
}
//fmt.Printf("%v\n", dnList)
getLDAPdnList(l, uidDN, 0, rconf.WLB_DavDNTreeDepLev, w, r, dnList)
t, err = template.ParseFiles("templates/tree-10.html")
if err != nil {
fmt.Fprintf(w, err.Error())
log.Println(err.Error())
return
}
t.ExecuteTemplate(w, "tree-10", nil)
}
}