jruby-ldap 0.0.1

data/LICENSE

@@ -0,0 +1,20 @@
+Copyright (c) 2007 Ola Bini <ola.bini@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README

@@ -0,0 +1,14 @@
+JRuby/LDAP
+-----------
+
+This is an interface compatible port of Ruby/LDAP - to allow binary LDAP usage through JRuby. This implementation is pure Ruby, but uses the Java Integration features of JRuby to access the JNDI libraries and through these implement the correct functionality.
+
+Many classes are missing right now, but the base functionality should be there.
+
+
+Usage
+-----
+require 'rubygems'
+require 'ldap'
+
+And then use it like all tutorials of Ruby/LDAP show you.

data/Rakefile

@@ -0,0 +1,42 @@
+require 'rake'
+require 'rake/testtask'
+
+task :default => [:test, :package]
+
+desc "Run all tests"
+task :test => [:test_all]
+
+Rake::TestTask.new(:test_all) do |t|
+  t.test_files = FileList['test/**/test_*.rb']
+  t.libs << 'test'
+  t.libs.delete("lib") unless defined?(JRUBY_VERSION)
+end
+
+
+task :filelist do
+  puts FileList['pkg/**/*'].inspect
+end
+
+MANIFEST = FileList["lib/**/*.rb", "test/**/*.rb", "Rakefile", "LICENSE", "README"]
+
+file "Manifest.txt" => :manifest
+task :manifest do
+  File.open("Manifest.txt", "w") {|f| MANIFEST.each {|n| f << "#{n}\n"} }
+end
+
+Rake::Task['manifest'].invoke # Always regen manifest, so Hoe has up-to-date list of files
+
+begin
+  require 'hoe'
+  Hoe.new("jruby-ldap", "0.0.1") do |p|
+    p.rubyforge_name = "jruby-extras"
+    p.url = "http://jruby-extras.rubyforge.org/jruby-ldap"
+    p.author = "Ola Bini"
+    p.email = "ola.bini@gmail.com"
+    p.summary = "Port of Ruby/LDAP to JRuby"
+  end.spec.dependencies.delete_if { |dep| dep.name == "hoe" }
+rescue LoadError
+  puts "You really need Hoe installed to be able to package this gem"
+rescue => e
+  puts "ignoring error while loading hoe: #{e.to_s}"
+end

data/lib/ldap.rb

@@ -0,0 +1,83 @@
+require 'java'
+
+module LDAP
+  def self.err2string(err)
+    case err||0
+    when -1: "Can't contact LDAP server"
+    when 0: "Success"
+    when 1: "Operations error"
+    when 2: "Protocol error"
+    when 3: "Time limit exceeded"
+    when 4: "Size limit exceeded"
+    when 5: "Compare False"
+    when 6: "Compare True"
+    when 7: "Authentication method not supported"
+    when 8: "Strong(er) authentication required"
+    when 9: "Partial results and referral received"
+    when 10: "Referral"
+    when 11: "Administrative limit exceeded"
+    when 12: "Critical extension is unavailable"
+    when 13: "Confidentiality required"
+    when 14: "SASL bind in progress"
+    when 15: "Unknown error"
+    when 16: "No such attribute"
+    when 17: "Undefined attribute type"
+    when 18: "Inappropriate matching"
+    when 19: "Constraint violation"
+    when 20: "Type or value exists"
+    when 21: "Invalid syntax"
+    when 32: "No such object"
+    when 33: "Alias problem"
+    when 34: "Invalid DN syntax"
+    when 35: "Entry is a leaf"
+    when 36: "Alias dereferencing problem"
+    when 47: "Proxy Authorization Failure"
+    when 48: "Inappropriate authentication"
+    when 49: "Invalid credentials"
+    when 50: "Insufficient access"
+    when 51: "Server is busy"
+    when 52: "Server is unavailable"
+    when 53: "Server is unwilling to perform"
+    when 54: "Loop detected"
+    when 64: "Naming violation"
+    when 65: "Object class violation"
+    when 66: "Operation not allowed on non-leaf"
+    when 67: "Operation not allowed on RDN"
+    when 68: "Already exists"
+    when 69: "Cannot modify object class"
+    when 70: "Results too large"
+    when 71: "Operation affects multiple DSAs"
+    when 80: "Internal (implementation specific) error"
+    else "Unknown error"
+    end
+  end
+
+  def self.load_configuration(attrs={})
+    env = nil
+    env = javax.naming.directory.InitialDirContext.new.environment rescue nil
+    default = {'java.naming.factory.initial' => 'com.sun.jndi.ldap.LdapCtxFactory'}
+    if env
+      env2 = default.dup
+      env.each do |k,v|
+        env2[k.to_s] = v.to_s
+      end
+      env = env2
+    else
+      env = default.dup
+    end
+    env.merge! attrs
+    @environment = env
+  end
+  
+  def self.configuration(attrs = { })
+    @environment.update attrs
+  end
+end
+
+require 'ldap/constants'
+require 'ldap/conn'
+require 'ldap/entry'
+require 'ldap/error'
+require 'ldap/mod'
+
+LDAP.load_configuration

data/lib/ldap/conn.rb

@@ -0,0 +1,250 @@
+module LDAP  
+  module ConnImplementation
+    def compare(*args)
+      raise "NOT IMPLEMENTED"
+    end
+
+    def controls(*args)
+      raise "NOT IMPLEMENTED"
+    end
+
+    def get_option(*args)
+      raise "NOT IMPLEMENTED"
+    end
+    
+    def modrdn(*args)
+      raise "NOT IMPLEMENTED"
+    end
+
+    def perror(*args)
+      raise "NOT IMPLEMENTED"
+    end
+
+    def referrals(*args)
+      raise "NOT IMPLEMENTED"
+    end
+    
+    def result2error(*args)
+      raise "NOT IMPLEMENTED"
+    end
+
+    def __jndi_context
+      @context
+    end
+    
+    def initialize(host='localhost', port=LDAP_PORT)
+      @host = host
+      @port = port
+    end
+    
+    def err
+      @err || 0
+    end
+    
+    def err2string(err)
+      LDAP.err2string(err)
+    end
+
+    def simple_bind(dn=nil, password=nil, &block)
+      bind(dn, password, LDAP_AUTH_SIMPLE, &block)
+    end
+
+    def bind(dn=nil, password=nil, method=LDAP_AUTH_SIMPLE)
+      raise LDAP::Error, "already bound" if bound?
+
+      url = @use_ssl ? "ldaps://#@host:#@port/" : "ldap://#@host:#@port/"
+      base_env = {javax.naming.Context::PROVIDER_URL => url}
+      base_env[javax.naming.Context::SECURITY_PRINCIPAL] = dn if dn
+      base_env[javax.naming.Context::SECURITY_CREDENTIALS] = password if password
+
+      @current_env = java.util.Hashtable.new(LDAP::configuration(base_env))
+
+      begin 
+        @context = javax.naming.directory.InitialDirContext.new(@current_env)
+        @err = 0
+      rescue javax.naming.NoPermissionException => e
+        @err = 50
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.NamingException => e
+        @err = -1
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      end
+      
+      if !block_given?
+        return self
+      end
+
+      begin 
+        yield self
+
+        return nil
+      ensure
+        unbind
+      end
+    end
+    
+    def set_option(opt, value)
+      @err = 0
+    end
+    
+    def add(dn, attrs)
+      raise LDAP::InvalidDataError, "The LDAP handler has already unbound." unless bound?
+
+      attrs = LDAP::hash2mods(LDAP::LDAP_MOD_ADD, attrs) if attrs.is_a?(Hash)
+
+      begin 
+        @context.create_subcontext(dn, LDAP::Mod.to_java_attributes(*attrs))
+        @err = 0
+      rescue javax.naming.NameNotFoundException => e
+        @err = 32
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.InvalidNameException => e
+        @err = 34
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.NoPermissionException => e
+        @err = 50
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.directory.SchemaViolationException => e
+        @err = 65
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.NamingException => e
+        @err = 21
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      end
+      self
+    end
+
+    def modify(dn, attrs)
+      raise LDAP::InvalidDataError, "The LDAP handler has already unbound." unless bound?
+
+      attrs = LDAP::hash2mods(LDAP::LDAP_MOD_REPLACE, attrs) if attrs.is_a?(Hash)
+
+      begin 
+        @context.modify_attributes(dn, LDAP::Mod.to_java_modification_items(*attrs))
+        @err = 0
+      rescue javax.naming.NameNotFoundException => e
+        @err = 32
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.InvalidNameException => e
+        @err = 34
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.NoPermissionException => e
+        @err = 50
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.directory.SchemaViolationException => e
+        @err = 65
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.NamingException => e
+        @err = 21
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      end
+
+      self
+    end
+    
+    def delete(dn)
+      raise LDAP::InvalidDataError, "The LDAP handler has already unbound." unless bound?
+
+      begin
+        @context.destroy_subcontext(dn)
+        @err = 0
+      rescue javax.naming.NameNotFoundException => e
+        @err = 32
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.InvalidNameException => e
+        @err = 34
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.NoPermissionException => e
+        @err = 50
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.NamingException => e
+        @err = 21
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      end
+      self
+    end
+    
+    def search(base_dn, scope, filter, attrs=nil, attrsonly=nil, sec=0, usec=0, s_attr=nil, s_proc=nil)
+      raise LDAP::InvalidDataError, "The LDAP handler has already unbound." unless bound?
+
+      controls = javax.naming.directory.SearchControls.new
+      controls.search_scope = scope
+
+      if attrs && !attrs.empty?
+        controls.returning_attributes = attrs.to_java(:string)
+      end
+      if attrsonly
+        controls.returning_obj_flag = true
+      end
+
+      if sec != 0 || usec != 0
+        controls.time_limit = usec/1000 + sec*1000
+      end
+
+      begin 
+        @context.search(base_dn, filter, controls).each do |val|
+          yield LDAP::Entry.create_from_search_result(val)
+        end
+
+        @err = 0
+      rescue javax.naming.NameNotFoundException => e
+        @err = 32
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.InvalidNameException => e
+        @err = 34
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      rescue javax.naming.NoPermissionException => e
+        @err = 50
+        raise LDAP::ResultError.wrap(LDAP::err2string(@err), e)
+      end
+
+      self
+    end
+
+    def search2(base_dn, scope, filter, attrs=nil, attrsonly=nil, sec=0, usec=0, s_attr=nil, s_proc=nil)
+      arr = []
+      search(base_dn, scope, filter, attrs, attrsonly, sec, usec, s_attr, s_proc) do |val|
+        arr << LDAP::entry2hash(val)
+      end
+      arr
+    end
+    
+    def unbind
+      raise LDAP::InvalidDataError, "The LDAP handler has already unbound." unless bound?
+      @context.close
+      @err = 0
+      @context = nil
+    end
+    
+    def bound?
+      !@context.nil?
+    end
+  end   
+  
+
+  class Conn
+    class << self
+      alias open new
+    end
+
+    def initialize(host='localhost', port=LDAP_PORT)
+      super
+      @use_ssl = false
+    end
+    
+    include ConnImplementation
+  end
+
+  class SSLConn
+    class << self
+      alias open new
+    end
+
+    def initialize(host='localhost', port=LDAPS_PORT)
+      super
+      @use_ssl = true
+    end
+    
+    include ConnImplementation
+  end
+end

data/lib/ldap/constants.rb

@@ -0,0 +1,126 @@
+module LDAP
+  LDAPS_PORT = 636
+  LDAP_ADMINLIMIT_EXCEEDED = 11
+  LDAP_ALIAS_DEREF_PROBLEM = 36
+  LDAP_ALIAS_PROBLEM = 33
+  LDAP_ALREADY_EXISTS = 68
+  LDAP_API_INFO_VERSION = 1
+  LDAP_API_VERSION = 3001
+  LDAP_AUTH_KRBV41 = 129
+  LDAP_AUTH_KRBV42 = 130
+  LDAP_AUTH_METHOD_NOT_SUPPORTED = 7
+  LDAP_AUTH_NONE = 0
+  LDAP_AUTH_SASL = 163
+  LDAP_AUTH_SIMPLE = 128
+  LDAP_AUTH_UNKNOWN = -6
+  LDAP_BUSY = 51
+  LDAP_COMPARE_FALSE = 5
+  LDAP_COMPARE_TRUE = 6
+  LDAP_CONFIDENTIALITY_REQUIRED = 13
+  LDAP_CONSTRAINT_VIOLATION = 19
+  LDAP_CONTROL_PAGEDRESULTS = "1.2.840.113556.1.4.319"
+  LDAP_DECODING_ERROR = -4
+  LDAP_DEREF_ALWAYS = 3
+  LDAP_DEREF_FINDING = 2
+  LDAP_DEREF_NEVER = 0
+  LDAP_DEREF_SEARCHING = 1
+  LDAP_ENCODING_ERROR = -3
+  LDAP_FILTER_ERROR = -7
+  LDAP_INAPPROPRIATE_AUTH = 48
+  LDAP_INAPPROPRIATE_MATCHING = 18
+  LDAP_INSUFFICIENT_ACCESS = 50
+  LDAP_INVALID_CREDENTIALS = 49
+  LDAP_INVALID_DN_SYNTAX = 34
+  LDAP_INVALID_SYNTAX = 21
+  LDAP_IS_LEAF = 35
+  LDAP_LOCAL_ERROR = -2
+  LDAP_LOOP_DETECT = 54
+  LDAP_MOD_ADD = 0
+  LDAP_MOD_BVALUES = 128
+  LDAP_MOD_DELETE = 1
+  LDAP_MOD_INCREMENT = 3
+  LDAP_MOD_OP = 7
+  LDAP_MOD_REPLACE = 2
+  LDAP_NAMING_VIOLATION = 64
+  LDAP_NOT_ALLOWED_ON_NONLEAF = 66
+  LDAP_NOT_ALLOWED_ON_RDN = 67
+  LDAP_NO_MEMORY = -10
+  LDAP_NO_OBJECT_CLASS_MODS = 69
+  LDAP_NO_SUCH_ATTRIBUTE = 16
+  LDAP_NO_SUCH_OBJECT = 32
+  LDAP_OBJECT_CLASS_VIOLATION = 65
+  LDAP_OPERATIONS_ERROR = 1
+  LDAP_OPT_API_FEATURE_INFO = 21
+  LDAP_OPT_API_INFO = 0
+  LDAP_OPT_CLIENT_CONTROLS = 19
+  LDAP_OPT_DEREF = 2
+  LDAP_OPT_DESC = 1
+  LDAP_OPT_HOST_NAME = 48
+  LDAP_OPT_OFF = 0
+  LDAP_OPT_ON = 3117220
+  LDAP_OPT_PROTOCOL_VERSION = 17
+  LDAP_OPT_REFERRALS = 8
+  LDAP_OPT_RESTART = 9
+  LDAP_OPT_SERVER_CONTROLS = 18
+  LDAP_OPT_SIZELIMIT = 3
+  LDAP_OPT_TIMELIMIT = 4
+  LDAP_OPT_X_SASL_AUTHCID = 24834
+  LDAP_OPT_X_SASL_AUTHZID = 24835
+  LDAP_OPT_X_SASL_MAXBUFSIZE = 24841
+  LDAP_OPT_X_SASL_MECH = 24832
+  LDAP_OPT_X_SASL_REALM = 24833
+  LDAP_OPT_X_SASL_SECPROPS = 24838
+  LDAP_OPT_X_SASL_SSF = 24836
+  LDAP_OPT_X_SASL_SSF_EXTERNAL = 24837
+  LDAP_OPT_X_SASL_SSF_MAX = 24840
+  LDAP_OPT_X_SASL_SSF_MIN = 24839
+  LDAP_OPT_X_TLS = 24576
+  LDAP_OPT_X_TLS_ALLOW = 3
+  LDAP_OPT_X_TLS_CACERTDIR = 24579
+  LDAP_OPT_X_TLS_CACERTFILE = 24578
+  LDAP_OPT_X_TLS_CERTFILE = 24580
+  LDAP_OPT_X_TLS_CIPHER_SUITE = 24584
+  LDAP_OPT_X_TLS_DEMAND = 2
+  LDAP_OPT_X_TLS_HARD = 1
+  LDAP_OPT_X_TLS_KEYFILE = 24581
+  LDAP_OPT_X_TLS_NEVER = 0
+  LDAP_OPT_X_TLS_RANDOM_FILE = 24585
+  LDAP_OPT_X_TLS_REQUIRE_CERT = 24582
+  LDAP_OPT_X_TLS_TRY = 4
+  LDAP_OTHER = 80
+  LDAP_PARAM_ERROR = -9
+  LDAP_PARTIAL_RESULTS = 9
+  LDAP_PORT = 389
+  LDAP_PROTOCOL_ERROR = 2
+  LDAP_REFERRAL = 10
+  LDAP_RESULTS_TOO_LARGE = 70
+  LDAP_SASL_BIND_IN_PROGRESS = 14
+  LDAP_SASL_SIMPLE = nil
+  LDAP_SCOPE_BASE = 0
+  LDAP_SCOPE_ONELEVEL = 1
+  LDAP_SCOPE_SUBTREE = 2
+  LDAP_SERVER_DOWN = -1
+  LDAP_SIZELIMIT_EXCEEDED = 4
+  LDAP_STRONG_AUTH_NOT_SUPPORTED = 7
+  LDAP_STRONG_AUTH_REQUIRED = 8
+  LDAP_SUCCESS = 0
+  LDAP_TIMELIMIT_EXCEEDED = 3
+  LDAP_TIMEOUT = -5
+  LDAP_TYPE_OR_VALUE_EXISTS = 20
+  LDAP_UNAVAILABLE = 52
+  LDAP_UNAVAILABLE_CRITICAL_EXTENSION = 12
+  LDAP_UNDEFINED_TYPE = 17
+  LDAP_UNWILLING_TO_PERFORM = 53
+  LDAP_USER_CANCELLED = -8
+  LDAP_VENDOR_NAME = "OpenLDAP"
+  LDAP_VENDOR_VERSION = 20335
+  LDAP_VERSION = 2
+  LDAP_VERSION1 = 1
+  LDAP_VERSION2 = 2
+  LDAP_VERSION3 = 3
+  LDAP_VERSION_MAX = 3
+  MAJOR_VERSION = 0
+  MINOR_VERSION = 9
+  PATCH_VERSION = 7
+  VERSION = "0.9.7"
+end