ldapsrv

type Config struct {
	Enabled   bool   `json:"enabled"`
	Listen    string `json:"listen"`
	TLSListen string `json:"tls_listen,omitempty"`
	// TLSCertificate is the certificate-store name. TLSDomain is its
	// first domain, which is the lego file stem before sanitizing.
	// Both empty means LDAPS uses the worker hub certificate.
	TLSCertificate string      `json:"tls_certificate,omitempty"`
	TLSDomain      string      `json:"tls_domain,omitempty"`
	BaseDN         string      `json:"base_dn"`
	BindDN         string      `json:"bind_dn"`
	BindPassword   string      `json:"bind_password,omitempty"`
	Entries        []WireEntry `json:"entries"`
}

type Directory struct {
	BaseDN       string
	BindDN       string
	BindPassword string
	// RoleDN maps a role id to the DN it was published at. OUDN does the
	// same for folders. Both are empty for a snapshot loaded from disk.
	RoleDN map[uint]string
	OUDN   map[uint]string
	// contains filtered or unexported fields
}

type Entry struct {
	DN             string
	Attrs          map[string][]string
	Password       string
	DirectMembers  []string
	DirectMemberOf []string
	// contains filtered or unexported fields
}

type Input struct {
	BaseDN string
	OUs    []OU
	Users  []User
	Roles  []Role
}

type OU struct {
	ID       uint
	ParentID *uint
	Name     string
}

type Options struct {
	StatePath string
	// TLSCert and TLSKey are the worker hub certificate. LDAPS uses them
	// when the snapshot does not name a certificate from the store.
	TLSCert string
	TLSKey  string
	// LegoStorage is this worker's lego data directory (worker.paths
	// lego_storage). A chosen certificate is read from certificates/
	// under that directory.
	LegoStorage string
	Fetch       func(ctx context.Context) ([]byte, error)
}

type Role struct {
	ID          uint
	Name        string
	Description string
	OUID        *uint
	MemberIDs   []uint
}

type Server struct {
	// contains filtered or unexported fields
}

type User struct {
	ID       uint
	Username string
	Name     string
	Email    string
	Mobile   string
	Password string
	OUID     *uint
	RoleIDs  []uint
}

type WireEntry struct {
	DN         string              `json:"dn"`
	Attributes map[string][]string `json:"attributes"`
	Password   string              `json:"password,omitempty"`
	Members    []string            `json:"members,omitempty"`
	MemberOf   []string            `json:"member_of,omitempty"`
}