ldap

Documentation

Index

• func Backend() *backend
• func EscapeLDAPValue(input string) string
• func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error)
• type CLIHandler
  • func (h *CLIHandler) Auth(c *api.Client, m map[string]string) (*api.Secret, error)
  • func (h *CLIHandler) Help() string
• type ConfigEntry
  • func (c *ConfigEntry) DialLDAP() (*ldap.Conn, error)
  • func (c *ConfigEntry) GetTLSConfig(host string) (*tls.Config, error)
• type GroupEntry
• type UserEntry

Functions

func Backend

func Backend() *backend

func EscapeLDAPValue

func EscapeLDAPValue(input string) string

func Factory

func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error)

Types

type CLIHandler

type CLIHandler struct{}

func (*CLIHandler) Auth

func (h *CLIHandler) Auth(c *api.Client, m map[string]string) (*api.Secret, error)

func (*CLIHandler) Help

func (h *CLIHandler) Help() string

type ConfigEntry

type ConfigEntry struct {
	Url           string `json:"url"`
	UserDN        string `json:"userdn"`
	GroupDN       string `json:"groupdn"`
	GroupFilter   string `json:"groupfilter"`
	GroupAttr     string `json:"groupattr"`
	UPNDomain     string `json:"upndomain"`
	UserAttr      string `json:"userattr"`
	Certificate   string `json:"certificate"`
	InsecureTLS   bool   `json:"insecure_tls"`
	StartTLS      bool   `json:"starttls"`
	BindDN        string `json:"binddn"`
	BindPassword  string `json:"bindpass"`
	DenyNullBind  bool   `json:"deny_null_bind"`
	DiscoverDN    bool   `json:"discoverdn"`
	TLSMinVersion string `json:"tls_min_version"`
	TLSMaxVersion string `json:"tls_max_version"`

	// This json tag deviates from snake case because there was a past issue
	// where the tag was being ignored, causing it to be jsonified as "CaseSensitiveNames".
	// To continue reading in users' previously stored values,
	// we chose to carry that forward.
	CaseSensitiveNames *bool `json:"CaseSensitiveNames,omitempty"`
	// contains filtered or unexported fields
}

func (*ConfigEntry) DialLDAP

func (c *ConfigEntry) DialLDAP() (*ldap.Conn, error)

func (*ConfigEntry) GetTLSConfig

func (c *ConfigEntry) GetTLSConfig(host string) (*tls.Config, error)

type GroupEntry

type GroupEntry struct {
	Policies []string
}

type UserEntry

type UserEntry struct {
	Groups   []string
	Policies []string
}