ldapmatchers.coffee

# Various duck type checking functions for ldapjs Filters and DNs.

schema = require "js-schema"


# @param {Filter}
# @return {Boolean}
isUIDFilter = schema
  type: "and"
  filters:
    length: 2
    0:
      type: "equal"
      attribute: "objectclass"
      value: "posixaccount"
    1:
      type: "equal"
      attribute: "uid"
      value: String


# @param {Filter}
# @return {Boolean}
isUIDNumberFilter = schema
  type: "and"
  filters:
    length: 2
    0:
      type: "equal"
      attribute: "objectclass"
      value: "posixaccount"
    1:
      type: "equal"
      attribute: "uidnumber"
      value: String


# @param {Filter}
# @return {Boolean}
isAllFilter = schema
  type: "present"
  attribute: "objectclass"


# @param {DN}
# @return {Boolean}
isMasterDN = schema
  rdns:
    0: ou: "Master"
    1: dc: String # Organisation key
    2: dc: "fi"
    length: 3

# @param {DN}
# @return {Boolean}
isGuestDN = schema
  rdns:
    0: couchuser: /.+@.+/
    1: ou: "People"
    2: dc: String # Organisation key
    3: dc: "fi"
    length: 4

# @param {Filter}
# @return {Boolean}
isGroupFilterByGIDNumber = schema
  type: "and"
  filters:
    length: 2
    0:
      type: "equal"
      attribute: "objectclass"
      value: "posixgroup"
    1:
      type: "equal"
      attribute: "gidnumber"
      value: /^[0-9]+$/

# @param {Filter}
# @return {Boolean}
isGroupFilterByMember = schema
  type: "and"
  filters:
    length: 2
    0:
      type: "equal"
      attribute: "objectclass"
      value: "posixgroup"
    1:
      type: "or"
      filters:
        length: 2
        0:
          type: "equal"
          attribute: "memberuid"
          value: String
        1:
          type: "equal"
          attribute: "member"
          value: String


module.exports =
  isUIDFilter: isUIDFilter
  isAllFilter: isAllFilter
  isUIDNumberFilter: isUIDNumberFilter
  isMasterDN: isMasterDN
  isGuestDN: isGuestDN
  isGroupFilterByMember: isGroupFilterByMember
  isGroupFilterByGIDNumber: isGroupFilterByGIDNumber


# Poor man's test cases
if require.main is module

  assert = require "assert"
  ldap = require "ldapjs"

  uidFilter = ldap.parseFilter "(&(objectclass=posixaccount)(uid=epeli))"
  uidNumberFilter = ldap.parseFilter "(&(objectclass=posixaccount)(uidnumber=11542))"


  assert isUIDFilter uidFilter
  assert isUIDNumberFilter uidNumberFilter

  assert not isUIDFilter uidNumberFilter
  assert not isUIDNumberFilter uidFilter


  allFilter = ldap.parseFilter "(objectclass=*)"
  assert.ok isAllFilter allFilter

  masterDN = ldap.parseDN 'ou=Master, dc=kehitys, dc=fi'
  assert isMasterDN masterDN


  groupFilterByGIDNumber = ldap.parseFilter "(&(objectclass=posixgroup)(gidnumber=1005))"
  assert isGroupFilterByGIDNumber groupFilterByGIDNumber

  groupFilterByMember = ldap.parseFilter "(&(objectclass=posixgroup)(|(memberuid=aarlorvilehto)(member=couchuser=aarlorvilehto, ou=People, dc=kehitys, dc=fi)))"
  assert isGroupFilterByMember groupFilterByMember


  guestDN = ldap.parseDN "couchuser=epeli@toimisto, ou=People, dc=kehitys, dc=fi"
  assert isGuestDN guestDN