this class provides the LDAP interface to Qorus's RBAC infrastructure More...

Inherits AbstractRbacProvider.

Public Member Methods
	constructor (hash opt, code log)
	creates the objects from options and an optional logging closure

hash	addUser (string user, *list role_cmds, string pass, string name)
	creates a new user; currently unimplemented More...

*hash	passwd (string user, *hash auth, softstring old_pwd, softstring new_pwd)
	changes the given user's password in the LDAP server

*hash	updateUser (string user, list role_cmds, list storage_cmds, softstring pass, string name)
	updates the user definition in the LDAP server; currently none of the possibile changes are supported More...

hash	deleteUser (string user)
	deletes an existing user in the LDAP store; currently unimplemented More...

string	getName ()
	returns the name of the object (`"ldap"`)

bool	intrinsic ()
	return `False` since this object is not built-in to Qorus

bool	hasStorage ()
	returns `False` since user storage key-value pairs are not stored in the LDAP server

*hash	loadUser (string user, string pass)
	reads in a user from the LDAP DB

bool	authenticateUser (string user, *hash auth, string pass, reference rh)
	authenticates a user

*list	listUsers ()
	lists all users; currently not implemented More...

*hash	getUser (string user)
	loads the given user and returns a hash describing the user

Public Attributes
const	RoleAttr = "qorususerrole"
	default qorus user role attribute

const	Defaults
	default options

Private Attributes
string	uri
	ldap server URI

string	base
	search base

*string	ubase
	user base

string	uentry
	user entry

*code	logfunc
	log closure/call ref

string	name
	unique name of object

string	roleattr = RoleAttr
	qorus user role attribute

list	attr = ("cn",)
	list of attributes to retrieve

*string	roleregex
	role extraction regex

bool	directusername = False
	if True then the username is bound without any further processing

*string	directbindprefix
	a prefix to prepend with directusername

Detailed Description

this class provides the LDAP interface to Qorus's RBAC infrastructure

Member Function Documentation

hash QorusLdapAuth::LdapRbacProvider::addUser	(	string	user,
		*list	role_cmds,
		string	pass,
		string	name
	)

creates a new user; currently unimplemented

Exceptions

LDAP-ERROR this method is currently not supported in the QorusLdapAuth class

hash QorusLdapAuth::LdapRbacProvider::deleteUser ( string user )

deletes an existing user in the LDAP store; currently unimplemented

Exceptions

LDAP-ERROR this method is currently not supported in the QorusLdapAuth class

*list QorusLdapAuth::LdapRbacProvider::listUsers ( )

lists all users; currently not implemented

Exceptions

LDAP-ERROR this method is currently not supported in the QorusLdapAuth class

*hash QorusLdapAuth::LdapRbacProvider::updateUser	(	string	user,
		*list	role_cmds,
		*list	storage_cmds,
		*softstring	pass,
		*string	name
	)

updates the user definition in the LDAP server; currently none of the possibile changes are supported

Exceptions

LDAP-ERROR this method is currently not supported in the QorusLdapAuth class

The documentation for this class was generated from the following file: