First commit

node_modules/ldapjs/examples/inmemory.js

@@ -0,0 +1,177 @@
+const ldap = require('../lib/index')
+
+/// --- Shared handlers
+
+function authorize (req, res, next) {
+  /* Any user may search after bind, only cn=root has full power */
+  const isSearch = (req instanceof ldap.SearchRequest)
+  if (!req.connection.ldap.bindDN.equals('cn=root') && !isSearch) { return next(new ldap.InsufficientAccessRightsError()) }
+
+  return next()
+}
+
+/// --- Globals
+
+const SUFFIX = 'o=smartdc'
+const db = {}
+const server = ldap.createServer()
+
+server.bind('cn=root', function (req, res, next) {
+  if (req.dn.toString() !== 'cn=root' || req.credentials !== 'secret') { return next(new ldap.InvalidCredentialsError()) }
+
+  res.end()
+  return next()
+})
+
+server.add(SUFFIX, authorize, function (req, res, next) {
+  const dn = req.dn.toString()
+
+  if (db[dn]) { return next(new ldap.EntryAlreadyExistsError(dn)) }
+
+  db[dn] = req.toObject().attributes
+  res.end()
+  return next()
+})
+
+server.bind(SUFFIX, function (req, res, next) {
+  const dn = req.dn.toString()
+  if (!db[dn]) { return next(new ldap.NoSuchObjectError(dn)) }
+
+  if (!db[dn].userpassword) { return next(new ldap.NoSuchAttributeError('userPassword')) }
+
+  if (db[dn].userpassword.indexOf(req.credentials) === -1) { return next(new ldap.InvalidCredentialsError()) }
+
+  res.end()
+  return next()
+})
+
+server.compare(SUFFIX, authorize, function (req, res, next) {
+  const dn = req.dn.toString()
+  if (!db[dn]) { return next(new ldap.NoSuchObjectError(dn)) }
+
+  if (!db[dn][req.attribute]) { return next(new ldap.NoSuchAttributeError(req.attribute)) }
+
+  let matches = false
+  const vals = db[dn][req.attribute]
+  for (let i = 0; i < vals.length; i++) {
+    if (vals[i] === req.value) {
+      matches = true
+      break
+    }
+  }
+
+  res.end(matches)
+  return next()
+})
+
+server.del(SUFFIX, authorize, function (req, res, next) {
+  const dn = req.dn.toString()
+  if (!db[dn]) { return next(new ldap.NoSuchObjectError(dn)) }
+
+  delete db[dn]
+
+  res.end()
+  return next()
+})
+
+server.modify(SUFFIX, authorize, function (req, res, next) {
+  const dn = req.dn.toString()
+  if (!req.changes.length) { return next(new ldap.ProtocolError('changes required')) }
+  if (!db[dn]) { return next(new ldap.NoSuchObjectError(dn)) }
+
+  const entry = db[dn]
+
+  let mod
+  for (let i = 0; i < req.changes.length; i++) {
+    mod = req.changes[i].modification
+    switch (req.changes[i].operation) {
+      case 'replace':
+        if (!entry[mod.type]) { return next(new ldap.NoSuchAttributeError(mod.type)) }
+
+        if (!mod.vals || !mod.vals.length) {
+          delete entry[mod.type]
+        } else {
+          entry[mod.type] = mod.vals
+        }
+
+        break
+
+      case 'add':
+        if (!entry[mod.type]) {
+          entry[mod.type] = mod.vals
+        } else {
+          mod.vals.forEach(function (v) {
+            if (entry[mod.type].indexOf(v) === -1) { entry[mod.type].push(v) }
+          })
+        }
+
+        break
+
+      case 'delete':
+        if (!entry[mod.type]) { return next(new ldap.NoSuchAttributeError(mod.type)) }
+
+        delete entry[mod.type]
+
+        break
+    }
+  }
+
+  res.end()
+  return next()
+})
+
+server.search(SUFFIX, authorize, function (req, res, next) {
+  const dn = req.dn.toString()
+  if (!db[dn]) { return next(new ldap.NoSuchObjectError(dn)) }
+
+  let scopeCheck
+
+  switch (req.scope) {
+    case 'base':
+      if (req.filter.matches(db[dn])) {
+        res.send({
+          dn,
+          attributes: db[dn]
+        })
+      }
+
+      res.end()
+      return next()
+
+    case 'one':
+      scopeCheck = function (k) {
+        if (req.dn.equals(k)) { return true }
+
+        const parent = ldap.parseDN(k).parent()
+        return (parent ? parent.equals(req.dn) : false)
+      }
+      break
+
+    case 'sub':
+      scopeCheck = function (k) {
+        return (req.dn.equals(k) || req.dn.parentOf(k))
+      }
+
+      break
+  }
+
+  Object.keys(db).forEach(function (key) {
+    if (!scopeCheck(key)) { return }
+
+    if (req.filter.matches(db[key])) {
+      res.send({
+        dn: key,
+        attributes: db[key]
+      })
+    }
+  })
+
+  res.end()
+  return next()
+})
+
+/// --- Fire it up
+
+server.listen(1389, function () {
+  console.log('LDAP server up at: %s', server.url)
+})