184 lines
5.5 KiB
Go
184 lines
5.5 KiB
Go
|
package ldap
|
||
|
|
||
|
import (
|
||
|
"errors"
|
||
|
|
||
|
ber "github.com/go-asn1-ber/asn1-ber"
|
||
|
)
|
||
|
|
||
|
// Change operation choices
|
||
|
const (
|
||
|
AddAttribute = 0
|
||
|
DeleteAttribute = 1
|
||
|
ReplaceAttribute = 2
|
||
|
IncrementAttribute = 3 // (https://tools.ietf.org/html/rfc4525)
|
||
|
)
|
||
|
|
||
|
// PartialAttribute for a ModifyRequest as defined in https://tools.ietf.org/html/rfc4511
|
||
|
type PartialAttribute struct {
|
||
|
// Type is the type of the partial attribute
|
||
|
Type string
|
||
|
// Vals are the values of the partial attribute
|
||
|
Vals []string
|
||
|
}
|
||
|
|
||
|
func (p *PartialAttribute) encode() *ber.Packet {
|
||
|
seq := ber.Encode(ber.ClassUniversal, ber.TypeConstructed, ber.TagSequence, nil, "PartialAttribute")
|
||
|
seq.AppendChild(ber.NewString(ber.ClassUniversal, ber.TypePrimitive, ber.TagOctetString, p.Type, "Type"))
|
||
|
set := ber.Encode(ber.ClassUniversal, ber.TypeConstructed, ber.TagSet, nil, "AttributeValue")
|
||
|
for _, value := range p.Vals {
|
||
|
set.AppendChild(ber.NewString(ber.ClassUniversal, ber.TypePrimitive, ber.TagOctetString, value, "Vals"))
|
||
|
}
|
||
|
seq.AppendChild(set)
|
||
|
return seq
|
||
|
}
|
||
|
|
||
|
// Change for a ModifyRequest as defined in https://tools.ietf.org/html/rfc4511
|
||
|
type Change struct {
|
||
|
// Operation is the type of change to be made
|
||
|
Operation uint
|
||
|
// Modification is the attribute to be modified
|
||
|
Modification PartialAttribute
|
||
|
}
|
||
|
|
||
|
func (c *Change) encode() *ber.Packet {
|
||
|
change := ber.Encode(ber.ClassUniversal, ber.TypeConstructed, ber.TagSequence, nil, "Change")
|
||
|
change.AppendChild(ber.NewInteger(ber.ClassUniversal, ber.TypePrimitive, ber.TagEnumerated, uint64(c.Operation), "Operation"))
|
||
|
change.AppendChild(c.Modification.encode())
|
||
|
return change
|
||
|
}
|
||
|
|
||
|
// ModifyRequest as defined in https://tools.ietf.org/html/rfc4511
|
||
|
type ModifyRequest struct {
|
||
|
// DN is the distinguishedName of the directory entry to modify
|
||
|
DN string
|
||
|
// Changes contain the attributes to modify
|
||
|
Changes []Change
|
||
|
// Controls hold optional controls to send with the request
|
||
|
Controls []Control
|
||
|
}
|
||
|
|
||
|
// Add appends the given attribute to the list of changes to be made
|
||
|
func (req *ModifyRequest) Add(attrType string, attrVals []string) {
|
||
|
req.appendChange(AddAttribute, attrType, attrVals)
|
||
|
}
|
||
|
|
||
|
// Delete appends the given attribute to the list of changes to be made
|
||
|
func (req *ModifyRequest) Delete(attrType string, attrVals []string) {
|
||
|
req.appendChange(DeleteAttribute, attrType, attrVals)
|
||
|
}
|
||
|
|
||
|
// Replace appends the given attribute to the list of changes to be made
|
||
|
func (req *ModifyRequest) Replace(attrType string, attrVals []string) {
|
||
|
req.appendChange(ReplaceAttribute, attrType, attrVals)
|
||
|
}
|
||
|
|
||
|
// Increment appends the given attribute to the list of changes to be made
|
||
|
func (req *ModifyRequest) Increment(attrType string, attrVal string) {
|
||
|
req.appendChange(IncrementAttribute, attrType, []string{attrVal})
|
||
|
}
|
||
|
|
||
|
func (req *ModifyRequest) appendChange(operation uint, attrType string, attrVals []string) {
|
||
|
req.Changes = append(req.Changes, Change{operation, PartialAttribute{Type: attrType, Vals: attrVals}})
|
||
|
}
|
||
|
|
||
|
func (req *ModifyRequest) appendTo(envelope *ber.Packet) error {
|
||
|
pkt := ber.Encode(ber.ClassApplication, ber.TypeConstructed, ApplicationModifyRequest, nil, "Modify Request")
|
||
|
pkt.AppendChild(ber.NewString(ber.ClassUniversal, ber.TypePrimitive, ber.TagOctetString, req.DN, "DN"))
|
||
|
changes := ber.Encode(ber.ClassUniversal, ber.TypeConstructed, ber.TagSequence, nil, "Changes")
|
||
|
for _, change := range req.Changes {
|
||
|
changes.AppendChild(change.encode())
|
||
|
}
|
||
|
pkt.AppendChild(changes)
|
||
|
|
||
|
envelope.AppendChild(pkt)
|
||
|
if len(req.Controls) > 0 {
|
||
|
envelope.AppendChild(encodeControls(req.Controls))
|
||
|
}
|
||
|
|
||
|
return nil
|
||
|
}
|
||
|
|
||
|
// NewModifyRequest creates a modify request for the given DN
|
||
|
func NewModifyRequest(dn string, controls []Control) *ModifyRequest {
|
||
|
return &ModifyRequest{
|
||
|
DN: dn,
|
||
|
Controls: controls,
|
||
|
}
|
||
|
}
|
||
|
|
||
|
// Modify performs the ModifyRequest
|
||
|
func (l *Conn) Modify(modifyRequest *ModifyRequest) error {
|
||
|
msgCtx, err := l.doRequest(modifyRequest)
|
||
|
if err != nil {
|
||
|
return err
|
||
|
}
|
||
|
defer l.finishMessage(msgCtx)
|
||
|
|
||
|
packet, err := l.readPacket(msgCtx)
|
||
|
if err != nil {
|
||
|
return err
|
||
|
}
|
||
|
|
||
|
if packet.Children[1].Tag == ApplicationModifyResponse {
|
||
|
err := GetLDAPError(packet)
|
||
|
if err != nil {
|
||
|
return err
|
||
|
}
|
||
|
} else {
|
||
|
logger.Printf("Unexpected Response: %d", packet.Children[1].Tag)
|
||
|
}
|
||
|
return nil
|
||
|
}
|
||
|
|
||
|
// ModifyResult holds the server's response to a modify request
|
||
|
type ModifyResult struct {
|
||
|
// Controls are the returned controls
|
||
|
Controls []Control
|
||
|
// Referral is the returned referral
|
||
|
Referral string
|
||
|
}
|
||
|
|
||
|
// ModifyWithResult performs the ModifyRequest and returns the result
|
||
|
func (l *Conn) ModifyWithResult(modifyRequest *ModifyRequest) (*ModifyResult, error) {
|
||
|
msgCtx, err := l.doRequest(modifyRequest)
|
||
|
if err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
defer l.finishMessage(msgCtx)
|
||
|
|
||
|
result := &ModifyResult{
|
||
|
Controls: make([]Control, 0),
|
||
|
}
|
||
|
|
||
|
l.Debug.Printf("%d: waiting for response", msgCtx.id)
|
||
|
packet, err := l.readPacket(msgCtx)
|
||
|
if err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
|
||
|
switch packet.Children[1].Tag {
|
||
|
case ApplicationModifyResponse:
|
||
|
if err = GetLDAPError(packet); err != nil {
|
||
|
if referral, referralErr := getReferral(err, packet); referralErr != nil {
|
||
|
return result, referralErr
|
||
|
} else {
|
||
|
result.Referral = referral
|
||
|
}
|
||
|
|
||
|
return result, err
|
||
|
}
|
||
|
if len(packet.Children) == 3 {
|
||
|
for _, child := range packet.Children[2].Children {
|
||
|
decodedChild, err := DecodeControl(child)
|
||
|
if err != nil {
|
||
|
return nil, errors.New("failed to decode child control: " + err.Error())
|
||
|
}
|
||
|
result.Controls = append(result.Controls, decodedChild)
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
l.Debug.Printf("%d: returning", msgCtx.id)
|
||
|
return result, nil
|
||
|
}
|