mirror of
https://github.com/zammad/zammad
synced 2026-05-24 09:48:36 +00:00
1615e3c995
Co-authored-by: Dusan Vuckovic <dv@zammad.com> Co-authored-by: Florian Liebe <fl@zammad.com> Co-authored-by: Mantas Masalskis <mm@zammad.com> Co-authored-by: Marcel Bialas <mb@zammad.com> Co-authored-by: Martin Gruner <mg@zammad.com>
62 lines
1.7 KiB
Ruby
62 lines
1.7 KiB
Ruby
# Copyright (C) 2012-2026 Zammad Foundation, https://zammad-foundation.org/
|
|
|
|
class Integration::LdapController < ApplicationController
|
|
include Integration::ImportJobBase
|
|
|
|
prepend_before_action :authenticate_and_authorize!
|
|
|
|
SENSITIVE_FIELDS = [:bind_pw].freeze
|
|
|
|
EXCEPTIONS_SPECIAL_TREATMENT = {
|
|
'48, Inappropriate Authentication' => {}, # workaround for issue #1114
|
|
'50, Insufficient Access Rights' => { error: 'disallow-bind-anon' },
|
|
'53, Unwilling to perform' => { error: 'disallow-bind-anon' },
|
|
}.freeze
|
|
|
|
def discover
|
|
answer_with do
|
|
|
|
ldap = ::Ldap.new(params)
|
|
|
|
{
|
|
attributes: ldap.preferences
|
|
}
|
|
rescue => e
|
|
EXCEPTIONS_SPECIAL_TREATMENT.find { |msg, _| e.message.ends_with?(msg) }&.last || raise
|
|
end
|
|
end
|
|
|
|
def bind
|
|
unmasked_params = unmask_sensitive_params(params, LdapSource.find_by(id: params[:ldap_source_id])&.preferences)
|
|
|
|
answer_with do
|
|
# create single instance so
|
|
# User and Group don't have to
|
|
# open new connections
|
|
ldap = ::Ldap.new(unmasked_params)
|
|
user = ::Ldap::User.new(unmasked_params, ldap: ldap)
|
|
group = ::Ldap::Group.new(unmasked_params, ldap: ldap)
|
|
|
|
{
|
|
# the order of these calls is relevant!
|
|
user_filter: user.filter,
|
|
user_attributes: user.attributes,
|
|
user_uid: user.uid_attribute,
|
|
|
|
# the order of these calls is relevant!
|
|
group_filter: group.filter,
|
|
groups: group.list,
|
|
group_uid: group.uid_attribute,
|
|
}
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def payload_dry_run
|
|
payload = unmask_sensitive_params(super, LdapSource.find_by(id: params[:ldap_source_id]))
|
|
{
|
|
ldap_config: payload
|
|
}
|
|
end
|
|
end
|