fusenapi/utils/ldap_lib/ldap_group.go
2023-11-15 17:03:37 +08:00

74 lines
1.7 KiB
Go

package ldap_lib
import (
"errors"
"github.com/go-ldap/ldap/v3"
)
type Ldap struct {
conn *ldap.Conn
}
func NewLdap(conn *ldap.Conn) *Ldap {
return &Ldap{conn}
}
// 更新资源(分组/用户)
func (l *Ldap) Update(DN string, attr map[string][]string) error {
modify := ldap.NewModifyRequest(DN, nil)
for key, v := range attr {
modify.Replace(key, v)
}
return l.conn.Modify(modify)
}
// 创建资源(分组/用户)
func (l *Ldap) Create(DN string, attr map[string][]string) error {
add := ldap.NewAddRequest(DN, nil)
for key, v := range attr {
add.Attribute(key, v)
}
return l.conn.Add(add)
}
// 删除资源(分组/用户)
func (l *Ldap) Delete(DN string) error {
del := ldap.NewDelRequest(DN, nil)
return l.conn.Del(del)
}
// 查询资源(分组/用户)
func (l *Ldap) Search(DN, filter string, attr []string, controls []ldap.Control) (resp *ldap.SearchResult, err error) {
if filter == "" {
filter = "(objectClass=*)"
}
searchRequest := ldap.NewSearchRequest(
DN,
ldap.ScopeWholeSubtree, ldap.NeverDerefAliases, 0, 0, false,
filter,
attr,
controls,
)
// 执行搜索请求
return l.conn.Search(searchRequest)
}
// AddUserToGroup 添加用户到分组
func (l *Ldap) AddUserToGroup(groupDN, userDN string) error {
//判断dn是否以ou开头
if groupDN[:3] == "ou=" {
return errors.New("不能添加用户到OU组织单元")
}
modify := ldap.NewModifyRequest(groupDN, nil)
modify.Add("uniqueMember", []string{userDN})
return l.conn.Modify(modify)
}
// DelUserFromGroup 将用户从分组删除
func (l *Ldap) RemoveUserFromGroup(groupDN, userDN string) error {
modify := ldap.NewModifyRequest(groupDN, nil)
modify.Delete("uniqueMember", []string{userDN})
return l.conn.Modify(modify)
}