1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
|
// +build ignore
package main
import (
"log"
"net"
"github.com/nmcclain/ldap"
)
/////////////
// Sample searches you can try against this simple LDAP server:
//
// ldapsearch -H ldap://localhost:3389 -x -b 'dn=test,dn=com'
// ldapsearch -H ldap://localhost:3389 -x -b 'dn=test,dn=com' 'cn=ned'
// ldapsearch -H ldap://localhost:3389 -x -b 'dn=test,dn=com' 'uidnumber=5000'
/////////////
///////////// Run a simple LDAP server
func main() {
s := ldap.NewServer()
// register Bind and Search function handlers
handler := ldapHandler{}
s.BindFunc("", handler)
s.SearchFunc("", handler)
// start the server
listen := "localhost:3389"
log.Printf("Starting example LDAP server on %s", listen)
if err := s.ListenAndServe(listen); err != nil {
log.Fatalf("LDAP Server Failed: %s", err.Error())
}
}
type ldapHandler struct {
}
///////////// Allow anonymous binds only
func (h ldapHandler) Bind(bindDN, bindSimplePw string, conn net.Conn) (ldap.LDAPResultCode, error) {
if bindDN == "" && bindSimplePw == "" {
return ldap.LDAPResultSuccess, nil
}
return ldap.LDAPResultInvalidCredentials, nil
}
///////////// Return some hardcoded search results - we'll respond to any baseDN for testing
func (h ldapHandler) Search(boundDN string, searchReq ldap.SearchRequest, conn net.Conn) (ldap.ServerSearchResult, error) {
entries := []*ldap.Entry{
&ldap.Entry{"cn=ned," + searchReq.BaseDN, []*ldap.EntryAttribute{
&ldap.EntryAttribute{"cn", []string{"ned"}},
&ldap.EntryAttribute{"uidNumber", []string{"5000"}},
&ldap.EntryAttribute{"accountStatus", []string{"active"}},
&ldap.EntryAttribute{"uid", []string{"ned"}},
&ldap.EntryAttribute{"description", []string{"ned"}},
&ldap.EntryAttribute{"objectClass", []string{"posixAccount"}},
}},
&ldap.Entry{"cn=trent," + searchReq.BaseDN, []*ldap.EntryAttribute{
&ldap.EntryAttribute{"cn", []string{"trent"}},
&ldap.EntryAttribute{"uidNumber", []string{"5005"}},
&ldap.EntryAttribute{"accountStatus", []string{"active"}},
&ldap.EntryAttribute{"uid", []string{"trent"}},
&ldap.EntryAttribute{"description", []string{"trent"}},
&ldap.EntryAttribute{"objectClass", []string{"posixAccount"}},
}},
}
return ldap.ServerSearchResult{entries, []string{}, []ldap.Control{}, ldap.LDAPResultSuccess}, nil
}
|
