idr_staff 0.0.6

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 3185895cd0493d986232855d734692a59ebb0999
+  data.tar.gz: e9e3af19e0dca5ab6770eefbe0f3f414fad57a81
+SHA512:
+  metadata.gz: c8de2dba34b2ba604443b6267fc785c4d60627319c5e69b180a70e6f1a5bb8eb72a7eeb40bbfd4f3a401c99621bda42f74d83c53a099d872885135fa760d62db
+  data.tar.gz: 3a005e5dd366e78af8959157b8744b3f58ff6ee8bea77637c1e7ca8b33b0e0e8cb4685d6f8de78821ef64240864a4384c36576764927fc31d99a7987c612b279

data/.gitignore

@@ -0,0 +1,9 @@
+/.bundle/
+/.yardoc
+/Gemfile.lock
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/

data/.rspec

@@ -0,0 +1,2 @@
+--format documentation
+--color

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in idr_staff.gemspec
+gemspec

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2016 Ernst Van Graan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,31 @@
+# IdrStaff
+
+This gem provides the ability to talk to an LDAP source for Hetzner staff data, translate that into a staff entity, and present the data as a model to controllers in an identity registry.
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+		gem 'idr_staff'
+
+And then execute:
+
+    bundle
+
+Or install it yourself as:
+
+    gem install idr_staff
+
+## Usage
+	  spec.add_development_dependency 'idr_staff'
+	  bundle exec irb
+
+## Contributing
+
+Bug reports and feature requests are welcome by email to ernst dot van dot graan at hetzner dot co dot za. This gem is sponsored by Hetzner (Pty) Ltd (http://hetzner.co.za)
+
+
+## License
+
+The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).
+

data/Rakefile

@@ -0,0 +1,6 @@
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new(:spec)
+
+task :default => :spec

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "idr_staff"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/idr_staff.gemspec

@@ -0,0 +1,38 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'idr_staff/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = "idr_staff"
+  spec.version       = IdrStaff::VERSION
+  spec.authors       = ["Ernst Van Graan"]
+  spec.email         = ["ernst.van.graan@hetzner.co.za"]
+
+  spec.summary       = %q{Model for staff IDR}
+  spec.description   = %q{Model for staff IDR}
+  #spec.homepage      = "TODO: Put your gem's website or public repo URL here."
+  spec.license       = "MIT"
+
+  # Prevent pushing this gem to RubyGems.org by setting 'allowed_push_host', or
+  # delete this section to allow pushing this gem to any host.
+  #if spec.respond_to?(:metadata)
+  #  spec.metadata['allowed_push_host'] = "TODO: Set to 'http://mygemserver.com'"
+  #else
+  #  raise "RubyGems 2.0 or newer is required to protect against public gem pushes."
+  #end
+
+  spec.files         = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+  spec.bindir        = "exe"
+  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ["lib"]
+
+  spec.add_development_dependency "bundler", "~> 1.11"
+  spec.add_development_dependency "rake", "~> 10.0"
+  spec.add_development_dependency "rspec", "~> 3.0"
+
+  spec.add_development_dependency "byebug"
+  spec.add_dependency "soar_idm"
+  spec.add_dependency "soar_ldap"
+  spec.add_dependency "jsender"
+end

data/lib/idr_staff.rb

@@ -0,0 +1,7 @@
+require 'idr_staff/configuration_validator'
+require 'idr_staff/hetzner_staff_ldap'
+require 'idr_staff/hetzner_staff_ldap_translator'
+require 'idr_staff/staff_idr'
+
+module IdrStaff
+end

data/lib/idr_staff/configuration_validator.rb

@@ -0,0 +1,84 @@
+require 'jsender'
+
+module IdrStaff
+  class ConfigurationValidator
+    include Jsender
+
+    def validate(configuration)
+      return fail 'invalid configuration provided' if not valid_configuration?(configuration)
+      return fail 'no rule set provided' if not configuration_present_for?(configuration, 'rule_set')
+      return fail 'no provider provided' if not configuration_present_for?(configuration, 'provider')
+
+      begin
+        return fail 'invalid rule set provided' if not valid_rule_set?(configuration)
+      rescue => ex
+        return fail 'failure bootstrapping rule set'
+      end
+
+      begin
+        return fail 'invalid provider provided' if not valid_provider?(configuration)
+      rescue => ex
+        return fail 'failure bootstrapping provider'
+      end
+
+      success
+    end
+
+    private
+
+    def valid_configuration?(configuration)
+      return false if configuration.nil?
+      return false if not configuration.is_a?(Hash)
+      return false if configuration['valid'] != 'valid'
+      true
+    end
+
+    def valid_rule_set?(configuration)
+      adaptor = extract_adaptor('rule_set', configuration)
+      return false if adaptor == ''
+      return false if not class_exists?(adaptor)
+      klass = Module.const_get(adaptor)
+      return false if not (klass.public_instance_methods.include?(:translate))
+      true
+    end
+
+    def valid_provider?(configuration)
+      adaptor = extract_adaptor('provider', configuration)
+      return false if adaptor == ''
+      return false if not class_exists?(adaptor)
+      raise RuntimeError if adaptor == 'RuntimeError'
+      klass = Module.const_get(adaptor)
+      # Someone please tell me why klass.is_a?(SoarIdm::DirectoryProvider) is not working here?
+      return false if 
+        not (klass.superclass.name == "SoarIdm::DirectoryProvider") and
+        not (klass.superclass.superclass.name == "SoarIdm::DirectoryProvider")
+      connector = extract_category('provider', configuration)
+      return false if connector['path'].nil?
+      return false if connector['server'].nil?
+      return false if connector['port'].nil?
+      return false if connector['username'].nil?
+      return false if connector['password'].nil?
+      true
+    end
+
+    def configuration_present_for?(configuration, category)
+      not configuration[category].nil?
+    end
+
+    def extract_adaptor(category, configuration)
+      configuration[category]['adaptor'].to_s.strip
+    end
+
+    def extract_category(category, configuration)
+      configuration[category]
+    end
+
+
+    def class_exists?(class_name)
+      klass = Module.const_get(class_name)
+      return klass.is_a?(Class)
+    rescue NameError
+      return false
+    end
+  end
+end

data/lib/idr_staff/hetzner_staff_ldap.rb

@@ -0,0 +1,15 @@
+require 'soar_ldap'
+
+module IdrStaff
+  class HetznerStaffLdap < SoarLdap::LdapProvider
+    def find_entity(connection, identifier)
+      connection.search(@path, ::LDAP::LDAP_SCOPE_SUBTREE, 'objectClass=*', ['objectClass', 'cn', 'dn', 'entryuuid', 'description']) do |entry|
+        uuid = entry['entryUUID'].first
+        dn = entry.dn
+        return entry if uuid == identifier
+        return entry if dn and dn == "genieUser=#{identifier.downcase},ou=people,dc=hetzner,dc=co,dc=za"
+      end
+      nil
+    end
+  end
+end

data/lib/idr_staff/hetzner_staff_ldap_translator.rb

@@ -0,0 +1,50 @@
+require 'soar_idm/soar_idm'
+
+module IdrStaff
+  class HetznerStaffLdapTranslator
+    def translate(entry)
+      uuid, cn, object_classes, email = extract_fields(entry)
+      build_entity(uuid, cn, object_classes, email)
+    end
+
+    private
+
+    def build_entity(uuid, cn, object_classes, email)
+      entity = {}
+      entity['roles'] = extract_entity_roles(object_classes, cn, email)
+      entity['uuid'] = uuid
+      entity
+    end
+
+    def extract_entity_roles(object_classes, cn, email)
+      roles = {}
+      object_classes.each do |role|
+        roles[role] = {}
+        roles[role] = { 'name_and_surname' => cn,
+                        'email_address' => email } if role == 'hetznerPerson'
+      end
+      roles
+    end
+
+    def extract_fields(entry)
+      uuid = extract_uuid(entry)
+      dn = entry.dn
+      cn = entry['cn'].first
+      object_classes = entry['objectClass']
+      email = extract_email(dn)
+      return uuid, cn, object_classes, email
+    end
+
+    def extract_uuid(entry)
+      entry['entryUUID'].first if entry['entryUUID']
+    end
+
+    def extract_email(dn)
+      email = nil
+      dn.split(",").each do |value|
+        email = value.split('=')[1] if value.include?('genie')
+      end
+      email
+    end
+  end
+end

data/lib/idr_staff/staff_idr.rb

@@ -0,0 +1,71 @@
+require 'jsender'
+require 'soar_idm/soar_idm'
+require 'idr_staff/configuration_validator'
+require 'idr_staff/hetzner_staff_ldap'
+
+module IdrStaff
+  class StaffIdr < ::SoarIdm::IdmApi
+    attr_reader :configuration
+    attr_reader :status
+    attr_reader :translator
+    attr_reader :directory
+
+    def bootstrap(configuration)
+      validator = IdrStaff::ConfigurationValidator.new
+      @status = validator.validate(configuration)
+      @status
+    end
+
+    def initialize(configuration)
+      @configuration = configuration
+      bootstrap(configuration)
+      initialize_providers(configuration) if bootstrapped?
+    end
+
+    def initialize_providers(configuration)
+      @translator = Object::const_get(@configuration['rule_set']['adaptor']).new
+      provider = @configuration['provider']
+      @directory = Object::const_get(provider['adaptor']).new(provider)
+      credentials = { 'username' => provider['username'], 'password' => provider['password'] }
+      @directory.authenticate(credentials)
+    end
+
+    def bootstrapped?
+      @status['status'] == 'success'
+    end        
+
+    def calculate_roles(identity)
+      entry = @directory.get_entity(identity)
+      return nil if not entry
+      entity = translator.translate(entry)
+      roles = []
+      entity['roles'].each do |role, attributes|
+        roles << role
+      end
+      roles
+    end
+
+    def calculate_all_attributes(identity)
+      attributes = {}
+      roles = calculate_roles(identity)
+      roles.each do |role|
+        attributes.merge!(calculate_attributes(identity, role))
+      end
+      attributes
+    end
+
+    def calculate_attributes(identity, role)
+      entry = @directory.get_entity(identity)
+      return nil if not entry
+      entity = translator.translate(entry)
+      { role => entity['roles'][role] }
+    end 
+
+    def calculate_identities(entity_identifier)
+      entry = @directory.get_entity(entity_identifier)
+      return nil if not entry
+      entity = translator.translate(entry)
+      [entity['uuid']]
+    end
+  end
+end

data/lib/idr_staff/version.rb

@@ -0,0 +1,3 @@
+module IdrStaff
+  VERSION = "0.0.6"
+end

metadata

@@ -0,0 +1,158 @@
+--- !ruby/object:Gem::Specification
+name: idr_staff
+version: !ruby/object:Gem::Version
+  version: 0.0.6
+platform: ruby
+authors:
+- Ernst Van Graan
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2016-03-15 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.11'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.11'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: byebug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: soar_idm
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: soar_ldap
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: jsender
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Model for staff IDR
+email:
+- ernst.van.graan@hetzner.co.za
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rspec"
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- bin/console
+- bin/setup
+- idr_staff.gemspec
+- lib/idr_staff.rb
+- lib/idr_staff/configuration_validator.rb
+- lib/idr_staff/hetzner_staff_ldap.rb
+- lib/idr_staff/hetzner_staff_ldap_translator.rb
+- lib/idr_staff/staff_idr.rb
+- lib/idr_staff/version.rb
+homepage: 
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.8
+signing_key: 
+specification_version: 4
+summary: Model for staff IDR
+test_files: []
+has_rdoc: