logstash-filter-LDAPresolve 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3d8cee25a04c992f639bf3007edc11cc618503ef
-  data.tar.gz: 9c99de7ed399ac6c2429d4a0dca4f0aa01e209c5
+  metadata.gz: de57dc6b5130f9fd6c2cf254692aef06a80baebf
+  data.tar.gz: db27910914b47e409ab783633fce0da877c51fa9
 SHA512:
-  metadata.gz: c3a8a7bb0e9c246047811f2d707366af818bb6a3b045341fa3afd08c60d34ba195483ecf8d17fdf0ab2630e223060784c163b6049e74347cfaaf94a0e7b5ffa4
-  data.tar.gz: 1bc3391cfac2e608d3b97482f0cd9e28aeb109bc293646ac24d3c1c953b6fa79118cd1d1962da0d311469a45f69d25852b36074bd30a57404c4965d456dbd5a2
+  metadata.gz: 43a16fe0a4786385b9b18d3e439f403a3a8b6f02902e23a712ecf599367c21f667361ab3e6196e972b550f048662a60c2607267314ec2f1628cc3c69ef520d72
+  data.tar.gz: aa19a0e86dbf5cff46c1d0c6ef7df4d503f6235a91b03d913be565de2f6b54c5515cc710f69261d75772f4b1ed8fe318fb6ae989a97c361fd7310b899f1bb823

data/README.md

@@ -104,6 +104,20 @@ LDAPresolve {
 }
 ```
 
+uidNumber can be dynamic and include parts of the event using the %{field} syntax.
+eg assume we have the uidNumber previously stored in the envent's field 'uid'
+We can then use 
+```sh
+LDAPresolve {
+    uidNumber  => "%{uid}"
+    host       => "ldap.somewhere.org"
+    userdn     => "ou=users,dc=somewhere,dc=org"
+    groupdn    => "ou=groups,dc=somewhere,dc=org"
+}
+
+```
+
+
 #### auxiliary arguments
 
 if your LDAP server use another port than the (339) default one 

data/lib/logstash/filters/LDAPresolve.rb

@@ -36,7 +36,7 @@ require "logstash/namespace"
 # [source, ruby] 
 # filter {
 #   LDAPresolve {
-#     uidNumber  => uidNumber to resolve
+#     uidNumber  => uidNumber to resolve, you can also use "%{field name}" syntax
 #     host       => "my.LDAP.Server" 
 #     userdn     => "Domain Name to search for users information"
 #     groupdn    => "Domain Name to search for group information"
@@ -123,24 +123,28 @@ class LogStash::Filters::LDAPresolve < LogStash::Filters::Base
 
   public
   def filter(event)
+    # extract uid value from event
+    uid2resolve = event.sprintf(@uidNumber)
+
+    #STDERR.puts "UID:#{uid2resolve}"
     exitstatus = @SUCCESS
     ##--- first check cache for provided uidNumber
     cached = false
     if @useCache
-        cached = cached?(@uidNumber) 
+        cached = cached?(uid2resolve) 
     end
 
     if cached
         login, user , group = cached
     else
-        @logger.info("prompt LDAP for #{@uidNumber} informations")
+        @logger.info("prompt LDAP for #{uid2resolve} informations")
         if use_ssl
             conn = LDAP::SSLConn.new(host=@host, port=@ldaps_port)
         else
             conn = LDAP::Conn.new(host=@host, port=@ldap_port)
         end
         
-        res = ldapsearch(conn, uidNumber)
+        res = ldapsearch(conn, uid2resolve)
         user = res['user']
         group = res['group']
         login = res['login']
@@ -148,7 +152,7 @@ class LogStash::Filters::LDAPresolve < LogStash::Filters::Base
         errmsg = res['err']
 
         ##--- cache infos.
-        cacheUID(@uidNumber, login, user, group)
+        cacheUID(uid2resolve, login, user, group)
     end 
 
     ##--- finaly change event to embed login, user and group information
@@ -206,7 +210,7 @@ class LogStash::Filters::LDAPresolve < LogStash::Filters::Base
     scope = LDAP::LDAP_SCOPE_SUBTREE 
     ##--- search LDAP for the user name
     begin
-        conn.search(@userdn, scope, "(& (objectclass=posixAccount) (uidNumber=#{@uidNumber}))", @userattrs) { |entry|
+        conn.search(@userdn, scope, "(& (objectclass=posixAccount) (uidNumber=#{uidNumber}))", @userattrs) { |entry|
             
             # convert entry object to hash for easier manipulation
             hashEntry = {}

data/logstash-filter-LDAPresolve.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name = 'logstash-filter-LDAPresolve'
-  s.version         = '0.1.1'
+  s.version         = '0.1.2'
   s.licenses = ['Apache License (2.0)']
   s.summary = "This filter adds infodrmation fields from LDAP server based on the provided uid."
   s.description = "This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-filter-LDAPresolve
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Eric Deveaud
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2015-07-10 00:00:00.000000000 Z
+date: 2015-07-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: logstash-core