8 use Net::LDAP::Constant qw(LDAP_SUCCESS);
10 use base 'Net::LDAP::Server';
16 use Data::Dump qw/dump/;
20 # ldapsearch -h localhost -p 2389 -b dc=ffzg,dc=hr -x 'otherPager=200903160021'
23 our $dsn = 'DBI:mysql:dbname=';
24 our $database = 'koha';
25 our $user = 'unconfigured-user';
26 our $passwd = 'unconfigured-password';
28 our $max_results = 3000; # FIXME must be enough for all users
29 our $objectclass_default = 'hrEduPerson';
38 require 'config.pl' if -e 'config.pl';
40 my $dbh = DBI->connect($dsn . $database, $user,$passwd, { RaiseError => 1, AutoCommit => 1 }) || die $DBI::errstr;
42 # we need reverse LDAP -> SQL mapping for where clause
44 my $ldap_sql_mapping = {
46 'objectGUID' => 'borrowernumber',
47 'displayName' => 'surname',
49 'pager' => 'rfid_sid',
54 $ldap_sql_mapping->{$name} || $name;
57 use constant RESULT_OK => {
60 'resultCode' => LDAP_SUCCESS
65 my ($class, $sock) = @_;
66 my $self = $class->SUPER::new($sock);
67 print "connection from: ", $sock->peerhost(), "\n";
75 warn "# bind ",dump($reqData);
82 sub __ldap_search_to_sql {
83 my ( $how, $what ) = @_;
84 warn "### __ldap_search_to_sql $how ",dump( $what ),"\n";
85 if ( $how eq 'equalityMatch' && defined $what ) {
86 my $name = $what->{attributeDesc} || warn "ERROR: no attributeDesc?";
87 my $value = $what->{assertionValue} || warn "ERROR: no assertionValue?";
89 if ( lc $name eq 'objectclass' ) {
90 $objectclass = $value;
92 push @limits, __sql_column($name) . ' = ?';
95 } elsif ( $how eq 'substrings' ) {
96 foreach my $substring ( @{ $what->{substrings} } ) {
97 my $name = $what->{type} || warn "ERROR: no type?";
98 while ( my($op,$value) = each %$substring ) {
99 push @limits, __sql_column($name) . ' LIKE ?';
100 if ( $op eq 'any' ) {
101 $value = '%' . $value . '%';
103 warn "UNSUPPORTED: op $op - using plain $value";
105 push @values, $value;
108 } elsif ( $how eq 'present' ) {
109 my $name = __sql_column( $what );
110 push @limits, "$name IS NOT NULL and length($name) > 1";
111 ## XXX length(foo) > 1 to avoid empty " " strings
113 warn "UNSUPPORTED: $how ",dump( $what );
118 # my ( $dn,$attributes ) = _dn_attributes( $row, $base );
121 my ($row,$base) = @_;
123 warn "## row = ",dump( $row );
125 die "no objectClass column in ",dump( $row ) unless defined $row->{objectClass};
127 $row->{objectClass} = [ split(/\s+/, $row->{objectClass}) ] if $row->{objectClass} =~ m{\n};
129 warn "## row = ",dump( $row );
131 my $dn = delete( $row->{dn} ) || die "no dn in ",dump( $row );
133 # this does some sanity cleanup for our data
134 my $base_as_domain = $base;
135 $base_as_domain =~ s{dn=}{.};
136 $base_as_domain =~ s{^\.}{@};
137 $dn =~ s{$base_as_domain$}{};
139 $dn .= ',' . $base unless $dn =~ m{,}; # add base if none present
145 # the search operation
149 print "searching...\n";
151 warn "# " . localtime() . " request = ", dump($reqData);
153 my $base = $reqData->{'baseObject'}; # FIXME use it?
156 if ( $reqData->{'filter'} ) {
162 foreach my $filter ( keys %{ $reqData->{'filter'} } ) {
164 warn "## filter $filter ", dump( $reqData->{'filter'}->{ $filter } ), "\n";
168 if ( ref $reqData->{'filter'}->{ $filter } eq 'ARRAY' ) {
170 foreach my $filter ( @{ $reqData->{'filter'}->{ $filter } } ) {
171 warn "### filter ",dump($filter),$/;
172 foreach my $how ( keys %$filter ) {
173 if ( $how eq 'or' ) {
174 __ldap_search_to_sql( %$_ ) foreach ( @{ $filter->{$how} } );
176 __ldap_search_to_sql( $how, $filter->{$how} );
178 warn "## limits ",dump(@limits), " values ",dump(@values);
183 __ldap_search_to_sql( $filter, $reqData->{'filter'}->{$filter} );
186 $sql_where .= ' ' . join( " $filter ", @limits ) if @limits;
190 $objectclass ||= $objectclass_default;
192 my $sql_select = read_file( lc "sql/$objectclass.sql" );
194 if ( $sql_select !~ m{where}i ) {
195 $sql_where = " where $sql_where";
197 $sql_where = " and $sql_where";
202 warn "# SQL:\n$sql_select\n", $sql_where ? $sql_where : '-- no where', "\n# DATA: ",dump( @values );
203 my $sth = $dbh->prepare( $sql_select . $sql_where . " LIMIT $max_results" ); # XXX remove limit?
204 $sth->execute( @values );
206 warn "# ", $sth->rows, " results for ",dump( $reqData->{'filter'} );
211 while (my $row = $sth->fetchrow_hashref) {
213 my ( $dn, $attributes ) = _dn_attributes( $row, $base );
215 warn "# dn $last_dn ... $dn\n";
217 if ( $dn ne $last_dn ) {
220 #$entry->changetype( 'modify' );
221 warn "### entry ",$entry->dump( \*STDERR );
222 push @entries, $entry;
226 $entry = Net::LDAP::Entry->new;
229 $entry->add( %$attributes );
232 foreach my $n ( keys %$attributes ) {
233 my $v = $attributes->{$n};
234 warn "# attr $n = $v\n";
235 $entry->add( $n, $v ) if $entry->get_value( $n ) ne $v;
244 warn "### last entry ",$entry->dump( \*STDERR );
245 push @entries, $entry;
248 warn "UNKNOWN request: ",dump( $reqData );
251 return RESULT_OK, @entries;
254 # the rest of the operations will return an "unwilling to perform"