activedirectoryupstreamwatcher

Documentation

Overview

Package activedirectoryupstreamwatcher implements a controller which watches ActiveDirectoryIdentityProviders.

Index

• Constants
• func GroupSAMAccountNameWithDomainSuffix(entry *ldap.Entry) (string, error)
• func MicrosoftUUIDFromBinary(attributeName string) func(entry *ldap.Entry) (string, error)
• func New(idpCache UpstreamActiveDirectoryIdentityProviderICache, ...) controllerlib.Controller
• func ValidComputedUserAccountControl(entry *ldap.Entry, _ provider.StoredRefreshAttributes) error
• func ValidUserAccountControl(entry *ldap.Entry, _ provider.StoredRefreshAttributes) error
• type UpstreamActiveDirectoryIdentityProviderICache

Constants

const (

	// PwdLastSetAttribute is the date and time that the password for this account was last changed.
	// https://docs.microsoft.com/en-us/windows/win32/adschema/a-pwdlastset
	PwdLastSetAttribute = "pwdLastSet"
	// UserAccountControlAttribute represents a bitmap of user properties.
	// https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/useraccountcontrol-manipulate-account-properties
	UserAccountControlAttribute = "userAccountControl"
	// UserAccountControlComputedAttribute represents a bitmap of user properties.
	// https://docs.microsoft.com/en-us/windows/win32/adschema/a-msds-user-account-control-computed
	UserAccountControlComputedAttribute = "msDS-User-Account-Control-Computed"
)

Functions

func GroupSAMAccountNameWithDomainSuffix

func GroupSAMAccountNameWithDomainSuffix(entry *ldap.Entry) (string, error)

func MicrosoftUUIDFromBinary

func MicrosoftUUIDFromBinary(attributeName string) func(entry *ldap.Entry) (string, error)

func New

func New(
	idpCache UpstreamActiveDirectoryIdentityProviderICache,
	client pinnipedclientset.Interface,
	activeDirectoryIdentityProviderInformer idpinformers.ActiveDirectoryIdentityProviderInformer,
	secretInformer corev1informers.SecretInformer,
	withInformer pinnipedcontroller.WithInformerOptionFunc,
) controllerlib.Controller

New instantiates a new controllerlib.Controller which will populate the provided UpstreamActiveDirectoryIdentityProviderICache.

func ValidComputedUserAccountControl

func ValidComputedUserAccountControl(entry *ldap.Entry, _ provider.StoredRefreshAttributes) error

func ValidUserAccountControl

func ValidUserAccountControl(entry *ldap.Entry, _ provider.StoredRefreshAttributes) error

Types

type UpstreamActiveDirectoryIdentityProviderICache

type UpstreamActiveDirectoryIdentityProviderICache interface {
	SetActiveDirectoryIdentityProviders([]provider.UpstreamLDAPIdentityProviderI)
}

UpstreamActiveDirectoryIdentityProviderICache is a thread safe cache that holds a list of validated upstream LDAP IDP configurations.