Fun little LDAP server to testing Net::LDAP
blackhedd
parent
eb3ab200f8
commit
9b59d3fd93
|
|
@ -0,0 +1,201 @@
|
|||
# $Id$
|
||||
#
|
||||
# Copyright (C) 2006 by Francis Cianfrocca. All Rights Reserved.
|
||||
# Gmail account: garbagecat10.
|
||||
#
|
||||
# This is an LDAP server intended for unit testing of Net::LDAP.
|
||||
# It implements as much of the protocol as we have the stomach
|
||||
# to implement but serves static data. Use ldapsearch to test
|
||||
# this server!
|
||||
#
|
||||
# To make this easier to write, we use the Ruby/EventMachine
|
||||
# reactor library.
|
||||
#
|
||||
|
||||
|
||||
require 'stringio'
|
||||
|
||||
#------------------------------------------------
|
||||
|
||||
class String
|
||||
def read_ber! syntax=nil
|
||||
s = StringIO.new self
|
||||
pdu = s.read_ber(syntax)
|
||||
if pdu
|
||||
if s.eof?
|
||||
slice!(0, length)
|
||||
else
|
||||
slice!(0, length - s.read.length)
|
||||
end
|
||||
end
|
||||
pdu
|
||||
end
|
||||
end
|
||||
|
||||
|
||||
module LdapServer
|
||||
|
||||
LdapServerAsnSyntax = {
|
||||
:application => {
|
||||
:constructed => {
|
||||
0 => :array, # LDAP BindRequest
|
||||
3 => :array # LDAP SearchRequest
|
||||
},
|
||||
:primitive => {
|
||||
2 => :string # ldapsearch sends this to unbind
|
||||
}
|
||||
},
|
||||
:context_specific => {
|
||||
:primitive => {
|
||||
0 => :string # simple auth (password)
|
||||
},
|
||||
}
|
||||
}
|
||||
|
||||
def post_init
|
||||
$logger.info "Accepted LDAP connection"
|
||||
@authenticated = false
|
||||
end
|
||||
|
||||
def receive_data data
|
||||
@data ||= ""; @data << data
|
||||
while pdu = @data.read_ber!(LdapServerAsnSyntax)
|
||||
begin
|
||||
handle_ldap_pdu pdu
|
||||
rescue
|
||||
$logger.error "closing connection due to error #{$!}"
|
||||
close_connection
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
def handle_ldap_pdu pdu
|
||||
tag_id = pdu[1].ber_identifier
|
||||
case tag_id
|
||||
when 0x60
|
||||
handle_bind_request pdu
|
||||
when 0x63
|
||||
handle_search_request pdu
|
||||
when 0x42
|
||||
# bizarre thing, it's a null object (primitive application-2)
|
||||
# sent by ldapsearch to request an unbind (or a kiss-off, not sure which)
|
||||
close_connection_after_writing
|
||||
else
|
||||
$logger.error "received unknown packet-type #{tag_id}"
|
||||
close_connection_after_writing
|
||||
end
|
||||
end
|
||||
|
||||
def handle_bind_request pdu
|
||||
# TODO, return a proper LDAP error instead of blowing up on version error
|
||||
if pdu[1][0] != 3
|
||||
send_ldap_response 0, pdu[0].to_i, 2, "", "We only support version 3"
|
||||
elsif pdu[1][1] != "cn=bigshot,dc=bayshorenetworks,dc=com"
|
||||
send_ldap_response 0, pdu[0].to_i, 48, "", "Who are you?"
|
||||
elsif pdu[1][2].ber_identifier != 0x80
|
||||
send_ldap_response 0, pdu[0].to_i, 7, "", "Keep it simple, man"
|
||||
elsif pdu[1][2] != "opensesame"
|
||||
send_ldap_response 0, pdu[0].to_i, 49, "", "Make my day"
|
||||
else
|
||||
@authenticated = true
|
||||
send_ldap_response 0, pdu[0].to_i, 0, pdu[1][1], "I'll take it"
|
||||
end
|
||||
end
|
||||
|
||||
def handle_search_request pdu
|
||||
unless @authenticated
|
||||
send_ldap_response 5, pdu[0].to_i, 50, "", "Who did you say you were?"
|
||||
return
|
||||
end
|
||||
|
||||
treebase = pdu[1][0]
|
||||
if treebase != "dc=bigdomain,dc=com"
|
||||
send_ldap_response 5, pdu[0].to_i, 32, "", "unknown treebase"
|
||||
return
|
||||
end
|
||||
|
||||
=begin
|
||||
Search Response ::=
|
||||
CHOICE {
|
||||
entry [APPLICATION 4] SEQUENCE {
|
||||
objectName LDAPDN,
|
||||
attributes SEQUENCE OF SEQUENCE {
|
||||
AttributeType,
|
||||
SET OF AttributeValue
|
||||
}
|
||||
},
|
||||
resultCode [APPLICATION 5] LDAPResult
|
||||
}
|
||||
=end
|
||||
|
||||
send_data( [
|
||||
pdu[0].to_i.to_ber, [
|
||||
"abcdefghijklmnopqrstuvwxyz".to_ber, [
|
||||
|
||||
[
|
||||
"mail".to_ber, ["aaa".to_ber, "bbb".to_ber, "ccc".to_ber].to_ber_set
|
||||
].to_ber_sequence,
|
||||
[
|
||||
"objectclass".to_ber, ["111".to_ber, "222".to_ber, "333".to_ber].to_ber_set
|
||||
].to_ber_sequence,
|
||||
[
|
||||
"cn".to_ber, ["CNCNCNCN".to_ber].to_ber_set
|
||||
].to_ber_sequence,
|
||||
|
||||
].to_ber_sequence
|
||||
].to_ber_appsequence(4)
|
||||
].to_ber_sequence)
|
||||
|
||||
send_data( [
|
||||
pdu[0].to_i.to_ber, [
|
||||
"ABCDEFGHIJKLMNOPQRSTUVWXYZ".to_ber, [
|
||||
|
||||
[
|
||||
"mail".to_ber, ["aaa".to_ber, "bbb".to_ber, "ccc".to_ber].to_ber_set
|
||||
].to_ber_sequence,
|
||||
[
|
||||
"objectclass".to_ber, ["111".to_ber, "222".to_ber, "333".to_ber].to_ber_set
|
||||
].to_ber_sequence,
|
||||
[
|
||||
"cn".to_ber, ["CNCNCNCN".to_ber].to_ber_set
|
||||
].to_ber_sequence,
|
||||
|
||||
].to_ber_sequence
|
||||
].to_ber_appsequence(4)
|
||||
].to_ber_sequence)
|
||||
|
||||
send_ldap_response 5, pdu[0].to_i, 0, "", "Was that what you wanted?"
|
||||
end
|
||||
|
||||
def send_ldap_response pkt_tag, msgid, code, dn, text
|
||||
send_data( [msgid.to_ber, [code.to_ber, dn.to_ber, text.to_ber].to_ber_appsequence(pkt_tag) ].to_ber )
|
||||
end
|
||||
|
||||
end
|
||||
|
||||
|
||||
#------------------------------------------------
|
||||
|
||||
if __FILE__ == $0
|
||||
|
||||
require 'rubygems'
|
||||
require 'eventmachine'
|
||||
|
||||
require 'logger'
|
||||
$logger = Logger.new $stderr
|
||||
|
||||
$logger.info "adding ../lib to loadpath, to pick up dev version of Net::LDAP."
|
||||
$:.unshift "../lib"
|
||||
|
||||
require 'netber'
|
||||
require 'ldappdu'
|
||||
require 'netldap'
|
||||
require 'netldapfilter'
|
||||
|
||||
EventMachine.run {
|
||||
$logger.info "starting LDAP server on 127.0.0.1 port 3890"
|
||||
EventMachine.start_server "127.0.0.1", 3890, LdapServer
|
||||
EventMachine.add_periodic_timer 60, proc {$logger.info "heartbeat"}
|
||||
}
|
||||
end
|
||||
|
||||
Loading…
Reference in New Issue