mirror of
https://github.com/netauth/ldap.git
synced 2026-11-03 11:43:44 -06:00
123 lines
3.6 KiB
Go
123 lines
3.6 KiB
Go
package main
|
|
|
|
import (
|
|
"errors"
|
|
"os"
|
|
"os/signal"
|
|
"strings"
|
|
"syscall"
|
|
|
|
"github.com/hashicorp/go-hclog"
|
|
"github.com/netauth/ldap/internal/ldap"
|
|
"github.com/netauth/netauth/pkg/netauth"
|
|
log "github.com/sirupsen/logrus"
|
|
"github.com/spf13/viper"
|
|
)
|
|
|
|
func init() {
|
|
viper.SetDefault("ldap.bind", "localhost:389")
|
|
viper.SetDefault("ldap.tls", false)
|
|
viper.SetDefault("ldap.key", "/var/lib/netauth/keys/ldap.key")
|
|
viper.SetDefault("ldap.cert", "/var/lib/netauth/keys/ldap.cert")
|
|
viper.SetDefault("ldap.allow_anon", false)
|
|
}
|
|
|
|
func main() {
|
|
var appLogger hclog.Logger
|
|
|
|
llevel := os.Getenv("NETAUTH_LOGLEVEL")
|
|
if llevel != "" {
|
|
appLogger = hclog.New(&hclog.LoggerOptions{
|
|
Name: "ldap-proxy",
|
|
Level: hclog.LevelFromString(llevel),
|
|
})
|
|
} else {
|
|
appLogger = hclog.NewNullLogger()
|
|
}
|
|
|
|
// Take over the built in logger and set it up for Trace level
|
|
// priority. The only thing that logs at this priority are
|
|
// protocol messages from the underlying ldap server mux.
|
|
log.SetFormatter(&log.TextFormatter{
|
|
DisableTimestamp: true,
|
|
})
|
|
log.SetOutput(appLogger.Named("ldap.protocol").
|
|
StandardWriter(
|
|
&hclog.StandardLoggerOptions{
|
|
ForceLevel: hclog.Trace,
|
|
},
|
|
),
|
|
)
|
|
|
|
viper.SetConfigName("config")
|
|
viper.AddConfigPath("/etc/netauth/")
|
|
viper.AddConfigPath("$HOME/.netauth/")
|
|
viper.AddConfigPath(".")
|
|
viper.SetEnvKeyReplacer(strings.NewReplacer(".", "_"))
|
|
viper.SetEnvPrefix("NETAUTH")
|
|
viper.AutomaticEnv()
|
|
// Every setting has either a default or an environment
|
|
// counterpart, so a missing config file is not a reason to
|
|
// refuse to start. Anything else (bad syntax, unreadable file)
|
|
// still is.
|
|
if err := viper.ReadInConfig(); err != nil {
|
|
var notFound viper.ConfigFileNotFoundError
|
|
if !errors.As(err, ¬Found) {
|
|
appLogger.Error("Error loading config", "error", err)
|
|
os.Exit(5)
|
|
}
|
|
}
|
|
|
|
nacl, err := netauth.NewWithLog(appLogger.Named("netauth"))
|
|
if err != nil {
|
|
appLogger.Error("Error initializing client", "error", err)
|
|
os.Exit(2)
|
|
}
|
|
|
|
ls := ldap.New(
|
|
ldap.WithLogger(appLogger),
|
|
ldap.WithNetAuth(nacl),
|
|
ldap.WithAnonBind(viper.GetBool("ldap.allow_anon")),
|
|
)
|
|
|
|
if err := ls.SetDomain(viper.GetString("ldap.domain")); err != nil {
|
|
appLogger.Error("Error configuring the base DN", "error", err)
|
|
os.Exit(3)
|
|
}
|
|
|
|
if !viper.GetBool("ldap.tls") {
|
|
if !strings.HasPrefix(viper.GetString("ldap.bind"), "localhost") {
|
|
appLogger.Warn("===================================================================")
|
|
appLogger.Warn(" WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING ")
|
|
appLogger.Warn("===================================================================")
|
|
appLogger.Warn("")
|
|
appLogger.Warn("You are launching this server in plaintext mode! This is only")
|
|
appLogger.Warn("advisable when bound to localhost, and the bind configuration has")
|
|
appLogger.Warn("been detected as not being bound to localhost.")
|
|
appLogger.Warn("")
|
|
appLogger.Warn("===================================================================")
|
|
appLogger.Warn(" WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING ")
|
|
appLogger.Warn("===================================================================")
|
|
}
|
|
err = ls.Serve(viper.GetString("ldap.bind"))
|
|
} else {
|
|
err = ls.ServeTLS(
|
|
viper.GetString("ldap.bind"),
|
|
viper.GetString("ldap.key"),
|
|
viper.GetString("ldap.cert"),
|
|
)
|
|
}
|
|
if err != nil {
|
|
appLogger.Error("Error serving", "error", err)
|
|
return
|
|
}
|
|
|
|
// Sit here and wait for a signal to shutdown.
|
|
ch := make(chan os.Signal, 5)
|
|
signal.Notify(ch, syscall.SIGINT, syscall.SIGTERM)
|
|
<-ch
|
|
ls.Stop()
|
|
|
|
appLogger.Info("Goodbye!")
|
|
}
|