35 lines
897 B
Go
35 lines
897 B
Go
|
package ldap
|
||
|
|
|
||
|
|
import (
|
||
|
|
"context"
|
||
|
|
|
||
|
|
ldap "github.com/ps78674/ldapserver"
|
||
|
|
)
|
||
|
|
|
||
|
|
func (s *server) handleBind(w ldap.ResponseWriter, m *ldap.Message) {
|
||
|
|
ctx := context.Background()
|
||
|
|
|
||
|
|
r := m.GetBindRequest()
|
||
|
|
// The server only supports simple auth, no SASL or anything
|
||
|
|
// fancy because we are after all just fronting another
|
||
|
|
// protocol.
|
||
|
|
if r.AuthenticationChoice() != "simple" {
|
||
|
|
res := ldap.NewBindResponse(ldap.LDAPResultUnwillingToPerform)
|
||
|
|
res.SetDiagnosticMessage("Authentication choice not supported")
|
||
|
|
w.Write(res)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
s.l.Debug("Bind from dn", "dn", r.Name())
|
||
|
|
|
||
|
|
if err := s.c.AuthEntity(ctx, entityIDFromDN(r.Name()), string(r.AuthenticationSimple())); err != nil {
|
||
|
|
res := ldap.NewBindResponse(ldap.LDAPResultInvalidCredentials)
|
||
|
|
res.SetDiagnosticMessage("invalid credentials")
|
||
|
|
w.Write(res)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
res := ldap.NewBindResponse(ldap.LDAPResultSuccess)
|
||
|
|
w.Write(res)
|
||
|
|
}
|