|
|
|
@ -60,6 +60,34 @@ defmodule Pleroma.Web.Auth.LDAPAuthenticator do
|
|
|
|
|
case :eldap.open([to_charlist(host)], options) do
|
|
|
|
|
{:ok, connection} ->
|
|
|
|
|
try do
|
|
|
|
|
if Keyword.get(ldap, :tls, false) do
|
|
|
|
|
:application.ensure_all_started(:ssl)
|
|
|
|
|
|
|
|
|
|
case :eldap.start_tls(
|
|
|
|
|
connection,
|
|
|
|
|
Keyword.get(ldap, :tlsopts, []),
|
|
|
|
|
@connection_timeout
|
|
|
|
|
) do
|
|
|
|
|
:ok ->
|
|
|
|
|
:ok
|
|
|
|
|
|
|
|
|
|
error ->
|
|
|
|
|
Logger.error("Could not start TLS: #{inspect(error)}")
|
|
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
bind_user(connection, ldap, name, password)
|
|
|
|
|
after
|
|
|
|
|
:eldap.close(connection)
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
{:error, error} ->
|
|
|
|
|
Logger.error("Could not open LDAP connection: #{inspect(error)}")
|
|
|
|
|
{:error, {:ldap_connection_error, error}}
|
|
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
defp bind_user(connection, ldap, name, password) do
|
|
|
|
|
uid = Keyword.get(ldap, :uid, "cn")
|
|
|
|
|
base = Keyword.get(ldap, :base)
|
|
|
|
|
|
|
|
|
@ -76,14 +104,6 @@ defmodule Pleroma.Web.Auth.LDAPAuthenticator do
|
|
|
|
|
error ->
|
|
|
|
|
error
|
|
|
|
|
end
|
|
|
|
|
after
|
|
|
|
|
:eldap.close(connection)
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
{:error, error} ->
|
|
|
|
|
Logger.error("Could not open LDAP connection: #{inspect(error)}")
|
|
|
|
|
{:error, {:ldap_connection_error, error}}
|
|
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
defp register_user(connection, base, uid, name, password) do
|
|
|
|
@ -91,6 +111,7 @@ defmodule Pleroma.Web.Auth.LDAPAuthenticator do
|
|
|
|
|
{:base, to_charlist(base)},
|
|
|
|
|
{:filter, :eldap.equalityMatch(to_charlist(uid), to_charlist(name))},
|
|
|
|
|
{:scope, :eldap.wholeSubtree()},
|
|
|
|
|
{:attributes, ['mail', 'email']},
|
|
|
|
|
{:timeout, @search_timeout}
|
|
|
|
|
]) do
|
|
|
|
|
{:ok, {:eldap_search_result, [{:eldap_entry, _, attributes}], _}} ->
|
|
|
|
@ -110,7 +131,9 @@ defmodule Pleroma.Web.Auth.LDAPAuthenticator do
|
|
|
|
|
error -> error
|
|
|
|
|
end
|
|
|
|
|
else
|
|
|
|
|
_ -> {:error, :ldap_registration_missing_attributes}
|
|
|
|
|
_ ->
|
|
|
|
|
Logger.error("Could not find LDAP attribute mail: #{inspect(attributes)}")
|
|
|
|
|
{:error, :ldap_registration_missing_attributes}
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
error ->
|
|
|
|
|