/[virtual-ldap]/lib/LDAP/Koha.pm
This is repository of my old source code which isn't updated any more. Go to git.rot13.org for current projects!
ViewVC logotype

Contents of /lib/LDAP/Koha.pm

Parent Directory Parent Directory | Revision Log Revision Log


Revision 62 - (show annotations)
Thu Feb 18 16:22:32 2010 UTC (14 years, 1 month ago) by dpavlin
File size: 6069 byte(s)
remove debug output and limit on objectclass=*person*
1 package LDAP::Koha;
2
3 use strict;
4 use warnings;
5
6 use lib '../lib';
7
8 use Net::LDAP::Constant qw(LDAP_SUCCESS);
9 use Net::LDAP::Server;
10 use base 'Net::LDAP::Server';
11 use fields qw();
12
13 use DBI;
14 use File::Slurp;
15
16 use Data::Dump qw/dump/;
17
18 my $debug = 0; # XXX very slow
19
20 # XXX test with:
21 #
22 # ldapsearch -h localhost -p 2389 -b dc=ffzg,dc=hr -x 'otherPager=200903160021'
23 #
24
25 our $dsn = 'DBI:mysql:dbname=';
26 our $database = 'koha';
27 our $user = 'unconfigured-user';
28 our $passwd = 'unconfigured-password';
29
30 our $max_results = $ENV{MAX_RESULTS} || 3000; # FIXME must be enough for all users
31 our $objectclass_default = 'hrEduPerson';
32
33 our $objectclass;
34
35 $SIG{__DIE__} = sub {
36 warn "!!! DIE ", @_;
37 die @_;
38 };
39
40 require 'config.pl' if -e 'config.pl';
41
42 my $dbh = DBI->connect($dsn . $database, $user,$passwd, { RaiseError => 1, AutoCommit => 1 }) || die $DBI::errstr;
43
44 # we need reverse LDAP -> SQL mapping for where clause
45
46 my $ldap_sql_mapping = {
47 'uid' => 'userid',
48 'objectGUID' => 'borrowernumber',
49 'displayName' => 'surname',
50 'sn' => 'surname',
51 'pager' => 'a.attribute', # was: rfid_sid
52 };
53
54 sub __sql_column {
55 my $name = shift;
56 $ldap_sql_mapping->{$name} || $name;
57 }
58
59 use constant RESULT_OK => {
60 'matchedDN' => '',
61 'errorMessage' => '',
62 'resultCode' => LDAP_SUCCESS
63 };
64
65 # constructor
66 sub new {
67 my ($class, $sock) = @_;
68 my $self = $class->SUPER::new($sock);
69 print "connection from: ", $sock->peerhost(), "\n";
70 return $self;
71 }
72
73 # the bind operation
74 sub bind {
75 my $self = shift;
76 my $reqData = shift;
77 warn "# bind ",dump($reqData);
78 return RESULT_OK;
79 }
80
81 our @values;
82 our @limits;
83
84 sub __ldap_search_to_sql {
85 my ( $how, $what ) = @_;
86 warn "### __ldap_search_to_sql $how ",dump( $what ),"\n";
87 if ( $how eq 'equalityMatch' && defined $what ) {
88 my $name = $what->{attributeDesc} || warn "ERROR: no attributeDesc?";
89 my $value = $what->{assertionValue} || warn "ERROR: no assertionValue?";
90
91 if ( lc $name eq 'objectclass' ) {
92 $objectclass = $value;
93 } else {
94 push @limits, __sql_column($name) . ' = ?';
95 push @values, $value;
96 }
97 } elsif ( $how eq 'substrings' ) {
98 foreach my $substring ( @{ $what->{substrings} } ) {
99 my $name = $what->{type} || warn "ERROR: no type?";
100 while ( my($op,$value) = each %$substring ) {
101 push @limits, __sql_column($name) . ' LIKE ?';
102 if ( $op eq 'any' ) {
103 $value = '%' . $value . '%';
104 } else {
105 warn "UNSUPPORTED: op $op - using plain $value";
106 }
107 push @values, $value;
108 }
109 }
110 } elsif ( $how eq 'present' ) {
111 my $name = __sql_column( $what );
112 push @limits, "$name IS NOT NULL and length($name) > 1";
113 ## XXX length(foo) > 1 to avoid empty " " strings
114 } else {
115 warn "UNSUPPORTED: $how ",dump( $what );
116 }
117 }
118
119
120 # my ( $dn,$attributes ) = _dn_attributes( $row, $base );
121
122 sub _dn_attributes {
123 my ($row,$base) = @_;
124
125 warn "## row = ",dump( $row ) if $debug;
126
127 die "no objectClass column in ",dump( $row ) unless defined $row->{objectClass};
128
129 $row->{objectClass} = [ split(/\s+/, $row->{objectClass}) ] if $row->{objectClass} =~ m{\n};
130
131 warn "## row = ",dump( $row ) if $debug;
132
133 my $dn = delete( $row->{dn} ) || die "no dn in ",dump( $row );
134
135 # this does some sanity cleanup for our data
136 # my $base_as_domain = $base;
137 # $base_as_domain =~ s{dn=}{.};
138 # $base_as_domain =~ s{^\.}{@};
139 # $dn =~ s{$base_as_domain$}{};
140 #
141 # $dn .= ',' . $base unless $dn =~ m{,}; # add base if none present
142
143 return ($dn, $row);
144 }
145
146
147 # the search operation
148 sub search {
149 my $self = shift;
150 my $reqData = shift;
151 print "searching...\n";
152
153 warn "# " . localtime() . " request = ", dump($reqData);
154
155 my $base = $reqData->{'baseObject'}; # FIXME use it?
156
157 my @entries;
158 if ( $reqData->{'filter'} ) {
159
160 my $sql_where = '';
161 @values = ();
162 $objectclass = '';
163
164 foreach my $filter ( keys %{ $reqData->{'filter'} } ) {
165
166 warn "## filter $filter ", dump( $reqData->{'filter'}->{ $filter } ), "\n";
167
168 @limits = ();
169
170 if ( ref $reqData->{'filter'}->{ $filter } eq 'ARRAY' ) {
171
172 foreach my $filter ( @{ $reqData->{'filter'}->{ $filter } } ) {
173 warn "### filter ",dump($filter),$/;
174 foreach my $how ( keys %$filter ) {
175 if ( $how eq 'or' ) {
176 __ldap_search_to_sql( %$_ ) foreach ( @{ $filter->{$how} } );
177 } else {
178 __ldap_search_to_sql( $how, $filter->{$how} );
179 }
180 warn "## limits ",dump(@limits), " values ",dump(@values);
181 }
182 }
183
184 } else {
185 __ldap_search_to_sql( $filter, $reqData->{'filter'}->{$filter} );
186 }
187
188 $sql_where .= ' ' . join( " $filter ", @limits ) if @limits;
189
190 }
191
192 $objectclass ||= $objectclass_default;
193
194 my $sql_select = read_file( lc "sql/$objectclass.sql" );
195 if ( $sql_where ) {
196 if ( $sql_select !~ m{where}i ) {
197 $sql_where = " where $sql_where";
198 } else {
199 $sql_where = " and $sql_where";
200 }
201 }
202
203
204 my $sql
205 = $sql_select
206 . $sql_where
207 # . ( $objectclass =~ m{person}i ? " LIMIT $max_results" : '' ) # add limit just for persons
208 ;
209
210 warn "# SQL:\n$sql\n# DATA: ",dump( @values );
211 my $sth = $dbh->prepare( $sql );
212 $sth->execute( @values );
213
214 warn "# ", $sth->rows, " results for ",dump( $reqData->{'filter'} );
215
216 my $last_dn = '?';
217 my $entry;
218
219 while (my $row = $sth->fetchrow_hashref) {
220
221 my ( $dn, $attributes ) = _dn_attributes( $row, $base );
222
223 warn "# dn $last_dn ... $dn\n";
224
225 if ( $dn ne $last_dn ) {
226
227 if ( $entry ) {
228 #$entry->changetype( 'modify' );
229 warn "### entry ",$entry->dump( \*STDERR );
230 push @entries, $entry;
231 undef $entry;
232 }
233
234 $dn =~ s{@[^,]+}{};
235
236 $entry = Net::LDAP::Entry->new;
237 $entry->dn( $dn );
238
239 $entry->add( %$attributes );
240
241 } else {
242 foreach my $n ( keys %$attributes ) {
243 my $v = $attributes->{$n};
244 warn "# attr $n = $v\n";
245 $entry->add( $n, $v ) if $entry->get_value( $n ) ne $v;
246 }
247 }
248
249
250 $last_dn = $dn;
251
252 }
253
254 if ( $entry ) {
255 warn "### last entry ",$entry->dump( \*STDERR );
256 push @entries, $entry;
257 }
258
259 } else {
260 warn "UNKNOWN request: ",dump( $reqData );
261 }
262
263 return RESULT_OK, @entries;
264 }
265
266 # the rest of the operations will return an "unwilling to perform"
267
268 1;

  ViewVC Help
Powered by ViewVC 1.1.26