package logic import ( "fmt" "fusenapi/model/gmodel" "fusenapi/utils/auth" "fusenapi/utils/basic" "fusenapi/utils/chinese_to_pinyin" "fusenapi/utils/email" "fusenapi/utils/encryption_decryption" "fusenapi/utils/ldap_lib" "strings" "context" "fusenapi/server/ldap-admin/internal/svc" "fusenapi/server/ldap-admin/internal/types" "github.com/zeromicro/go-zero/core/logx" ) type CreateLdapUserLogic struct { logx.Logger ctx context.Context svcCtx *svc.ServiceContext } func NewCreateLdapUserLogic(ctx context.Context, svcCtx *svc.ServiceContext) *CreateLdapUserLogic { return &CreateLdapUserLogic{ Logger: logx.WithContext(ctx), ctx: ctx, svcCtx: svcCtx, } } // 处理进入前逻辑w,r // func (l *CreateLdapUserLogic) BeforeLogic(w http.ResponseWriter, r *http.Request) { // } func (l *CreateLdapUserLogic) CreateLdapUser(req *types.CreateLdapUserReq, userinfo *auth.UserInfo) (resp *basic.Response) { req.UserName = strings.Trim(req.UserName, " ") req.Mobile = strings.Trim(req.Mobile, " ") req.Email = strings.Trim(req.Email, " ") req.Password = strings.Trim(req.Password, " ") if req.UserName == "" { return resp.SetStatusWithMessage(basic.CodeRequestParamsErr, "参数错误,用户名不能为空") } if req.Password == "" { return resp.SetStatusWithMessage(basic.CodeRequestParamsErr, "参数错误,密码不能为空") } if !email.IsEmailValid(req.Email) { return resp.SetStatusWithMessage(basic.CodeRequestParamsErr, "参数错误,邮箱格式不正确") } ldapServer := ldap_lib.NewLdap(l.svcCtx.Ldap, l.svcCtx.Config.Ldap.BaseDN, l.svcCtx.Config.Ldap.RootDN) //把用户名转pinyin userNamePinyin := chinese_to_pinyin.ChineseToPinyin(req.UserName) //新增一条记录获取递增用户id userData := &gmodel.LdapUser{} if err := l.svcCtx.AllModels.LdapUser.Create(l.ctx, userData); err != nil { logx.Error(err) return resp.SetStatusWithMessage(basic.CodeDbSqlErr, "获取自增用户id失败") } userDN := fmt.Sprintf("cn=%s,%s", req.Email, l.svcCtx.Config.Ldap.PeopleGroupDN) pwd, err := encryption_decryption.CBCEncrypt(req.Password) if err != nil { logx.Error(err) return resp.SetStatusWithMessage(basic.CodeServiceErr, "加密密码失败") } if err := ldapServer.Create(userDN, map[string][]string{ "objectClass": {"person", "organizationalPerson", "inetOrgPerson", "posixAccount", "top", "shadowAccount"}, //固有属性 "shadowLastChange": {"19676"}, //固有属性 "shadowMin": {"0"}, //固有属性 "shadowMax": {"99999"}, //固有属性 "shadowWarning": {"7"}, //固有属性 "loginShell": {"/usr/sbin/nologin"}, //固有属性 "homeDirectory": {"/home/users/" + userNamePinyin}, "uidNumber": {fmt.Sprintf("%d", userData.Id)}, "gidNumber": {fmt.Sprintf("%d", userData.Id)}, "uid": {userNamePinyin}, "cn": {req.Email}, "sn": {req.UserName}, "mail": {req.Email}, "postalCode": {fmt.Sprintf("%d", req.Status)}, "departmentNumber": {"0"}, "postalAddress": {req.Avatar}, "mobile": {req.Mobile}, "userPassword": {"{crypt}" + pwd}, }); err != nil { logx.Error(err) return resp.SetStatusWithMessage(basic.CodeServiceErr, "添加用户失败,"+err.Error()) } return resp.SetStatusWithMessage(basic.CodeOK, "添加用户成功") } // 处理逻辑后 w,r 如:重定向, resp 必须重新处理 // func (l *CreateLdapUserLogic) AfterLogic(w http.ResponseWriter, r *http.Request, resp *basic.Response) { // // httpx.OkJsonCtx(r.Context(), w, resp) // }