X-Git-Url: https://git.quassel-irc.org/?p=quassel.git;a=blobdiff_plain;f=src%2Fcore%2Fldapauthenticator.cpp;h=9e9d46389924a79ca9f894e4f0438cec2d059419;hp=d79ebf18ec7933eda7d908f00b430d7dc59ee55a;hb=ce1feba3940c27dbce5eff9fa9705dce8240a64a;hpb=f77a0b720ed58a2b68876b9320742b81b6df871f diff --git a/src/core/ldapauthenticator.cpp b/src/core/ldapauthenticator.cpp index d79ebf18..9e9d4638 100644 --- a/src/core/ldapauthenticator.cpp +++ b/src/core/ldapauthenticator.cpp @@ -65,52 +65,50 @@ bool LdapAuthenticator::isAvailable() const QString LdapAuthenticator::backendId() const { - // We identify the backend to use for the monolithic core by its displayname. + // We identify the backend to use for the monolithic core by this identifier. // so only change this string if you _really_ have to and make sure the core // setup for the mono client still works ;) return QString("LDAP"); } -QString LdapAuthenticator::description() const +QString LdapAuthenticator::displayName() const { - return tr("Authenticate users using an LDAP server."); + return tr("LDAP"); } -QStringList LdapAuthenticator::setupKeys() const + +QString LdapAuthenticator::description() const { - // The parameters needed for LDAP. - QStringList keys; - keys << "Hostname" - << "Port" - << "Bind DN" - << "Bind Password" - << "Base DN" - << "Filter" - << "UID Attribute"; - return keys; + return tr("Authenticate users using an LDAP server."); } -QVariantMap LdapAuthenticator::setupDefaults() const +QVariantList LdapAuthenticator::setupData() const { - QVariantMap map; - map["Hostname"] = QVariant(QString("ldap://localhost")); - map["Port"] = QVariant(DEFAULT_LDAP_PORT); - map["UID Attribute"] = QVariant(QString("uid")); - return map; + // The parameters needed for LDAP. + QVariantList data; + data << "Hostname" << tr("Hostname") << QString{"ldap://localhost"} + << "Port" << tr("Port") << DEFAULT_LDAP_PORT + << "BindDN" << tr("Bind DN") << QString{} + << "BindPassword" << tr("Bind Password") << QString{} + << "BaseDN" << tr("Base DN") << QString{} + << "Filter" << tr("Filter") << QString{} + << "UidAttribute" << tr("UID Attribute") << QString{"uid"} + ; + return data; } -void LdapAuthenticator::setConnectionProperties(const QVariantMap &properties) +void LdapAuthenticator::setAuthProperties(const QVariantMap &properties) { _hostName = properties["Hostname"].toString(); _port = properties["Port"].toInt(); - _baseDN = properties["Base DN"].toString(); + _bindDN = properties["BindDN"].toString(); + _bindPassword = properties["BindPassword"].toString(); + _baseDN = properties["BaseDN"].toString(); _filter = properties["Filter"].toString(); - _bindDN = properties["Bind DN"].toString(); - _bindPassword = properties["Bind Password"].toString(); - _uidAttribute = properties["UID Attribute"].toString(); + _uidAttribute = properties["UidAttribute"].toString(); } // TODO: this code is sufficiently general that in the future, perhaps an abstract @@ -124,14 +122,18 @@ UserId LdapAuthenticator::validateUser(const QString &username, const QString &p return UserId(); } + // LDAP is case-insensitive, thus we will lowercase the username, in spite of + // a better solution :( + const QString lUsername = username.toLower(); + // If auth succeeds, but the user has not logged into quassel previously, make // a new user for them and return that ID. // Users created via LDAP have empty passwords, but authenticator column = LDAP. // On the other hand, if auth succeeds and the user already exists, do a final // cross-check to confirm we're using the right auth provider. - UserId quasselId = Core::validateUser(username, QString()); + UserId quasselId = Core::validateUser(lUsername, QString()); if (!quasselId.isValid()) { - return Core::addUser(username, QString(), backendId()); + return Core::addUser(lUsername, QString(), backendId()); } else if (!(Core::checkAuthProvider(quasselId, backendId()))) { return 0; @@ -142,7 +144,7 @@ UserId LdapAuthenticator::validateUser(const QString &username, const QString &p bool LdapAuthenticator::setup(const QVariantMap &settings) { - setConnectionProperties(settings); + setAuthProperties(settings); bool status = ldapConnect(); return status; } @@ -150,15 +152,15 @@ bool LdapAuthenticator::setup(const QVariantMap &settings) Authenticator::State LdapAuthenticator::init(const QVariantMap &settings) { - setConnectionProperties(settings); + setAuthProperties(settings); bool status = ldapConnect(); if (!status) { - quInfo() << qPrintable(backendId()) << "Authenticator cannot connect."; + quInfo() << qPrintable(backendId()) << "authenticator cannot connect."; return NotAvailable; } - quInfo() << qPrintable(backendId()) << "Authenticator is ready."; + quInfo() << qPrintable(backendId()) << "authenticator is ready."; return IsReady; } @@ -179,6 +181,8 @@ bool LdapAuthenticator::ldapConnect() serverURIArray = serverURI.toLocal8Bit(); res = ldap_initialize(&_connection, serverURIArray); + quInfo() << "LDAP: Connecting to" << serverURI; + if (res != LDAP_SUCCESS) { qWarning() << "Could not connect to LDAP server:" << ldap_err2string(res); return false;