@etcsec-com/etc-collector 1.4.0

package/dist/providers/ldap/ad-mappers.js

@@ -0,0 +1,162 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mapToADUser = mapToADUser;
+exports.mapToADGroup = mapToADGroup;
+exports.mapToADComputer = mapToADComputer;
+exports.mapToADOU = mapToADOU;
+exports.mapToGeneric = mapToGeneric;
+const logger_1 = require("../../utils/logger");
+function fileTimeToDate(filetime) {
+    if (!filetime) {
+        return undefined;
+    }
+    try {
+        const value = BigInt(filetime);
+        if (value === BigInt(0) || value === BigInt('9223372036854775807')) {
+            return undefined;
+        }
+        const unixTimestamp = Number((value - BigInt('116444736000000000')) / BigInt(10000));
+        return new Date(unixTimestamp);
+    }
+    catch (error) {
+        logger_1.logger.warn(`Failed to convert FILETIME: ${filetime}`, error);
+        return undefined;
+    }
+}
+function getString(value) {
+    if (!value) {
+        return undefined;
+    }
+    if (typeof value === 'string') {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value[0]?.toString();
+    }
+    if (Buffer.isBuffer(value)) {
+        return value.toString('utf-8');
+    }
+    return String(value);
+}
+function getStringArray(value) {
+    if (!value) {
+        return undefined;
+    }
+    if (Array.isArray(value)) {
+        return value.map((v) => (Buffer.isBuffer(v) ? v.toString('utf-8') : String(v)));
+    }
+    return [getString(value)].filter(Boolean);
+}
+function getNumber(value) {
+    if (!value) {
+        return undefined;
+    }
+    const str = getString(value);
+    if (!str) {
+        return undefined;
+    }
+    const num = parseInt(str, 10);
+    return isNaN(num) ? undefined : num;
+}
+function isAccountEnabled(userAccountControl) {
+    if (userAccountControl === undefined) {
+        return true;
+    }
+    const ACCOUNTDISABLE = 0x0002;
+    return (userAccountControl & ACCOUNTDISABLE) === 0;
+}
+function mapToADUser(entry) {
+    const userAccountControl = getNumber(entry['userAccountControl']);
+    const user = {
+        dn: entry.dn,
+        sAMAccountName: getString(entry['sAMAccountName']) || '',
+        userPrincipalName: getString(entry['userPrincipalName']),
+        displayName: getString(entry['displayName']),
+        enabled: isAccountEnabled(userAccountControl),
+        passwordLastSet: fileTimeToDate(getString(entry['pwdLastSet'])),
+        lastLogon: fileTimeToDate(getString(entry['lastLogon'])),
+        adminCount: getNumber(entry['adminCount']),
+        memberOf: getStringArray(entry['memberOf']),
+        userAccountControl,
+    };
+    for (const [key, value] of Object.entries(entry)) {
+        if (!(key in user)) {
+            user[key] = value;
+        }
+    }
+    return user;
+}
+function mapToADGroup(entry) {
+    const group = {
+        dn: entry.dn,
+        sAMAccountName: getString(entry['sAMAccountName']) || '',
+        displayName: getString(entry['displayName']),
+        groupType: getNumber(entry['groupType']),
+        memberOf: getStringArray(entry['memberOf']),
+        member: getStringArray(entry['member']),
+    };
+    for (const [key, value] of Object.entries(entry)) {
+        if (!(key in group)) {
+            group[key] = value;
+        }
+    }
+    return group;
+}
+function mapToADComputer(entry) {
+    const userAccountControl = getNumber(entry['userAccountControl']);
+    const computer = {
+        dn: entry.dn,
+        sAMAccountName: getString(entry['sAMAccountName']) || '',
+        dNSHostName: getString(entry['dNSHostName']),
+        operatingSystem: getString(entry['operatingSystem']),
+        operatingSystemVersion: getString(entry['operatingSystemVersion']),
+        lastLogon: fileTimeToDate(getString(entry['lastLogon'])),
+        enabled: isAccountEnabled(userAccountControl),
+    };
+    for (const [key, value] of Object.entries(entry)) {
+        if (!(key in computer)) {
+            computer[key] = value;
+        }
+    }
+    return computer;
+}
+function mapToADOU(entry) {
+    const ou = {
+        dn: entry.dn,
+        name: getString(entry['name']) || getString(entry['ou']) || '',
+        description: getString(entry['description']),
+    };
+    for (const [key, value] of Object.entries(entry)) {
+        if (!(key in ou)) {
+            ou[key] = value;
+        }
+    }
+    return ou;
+}
+function mapToGeneric(entry) {
+    const result = {
+        dn: entry.dn,
+    };
+    const binaryAttributes = new Set(['nTSecurityDescriptor', 'objectGUID', 'objectSid']);
+    for (const [key, value] of Object.entries(entry)) {
+        if (key === 'dn')
+            continue;
+        if (binaryAttributes.has(key) && Buffer.isBuffer(value)) {
+            result[key] = value;
+        }
+        else if (typeof value === 'string' && /^\d+$/.test(value)) {
+            result[key] = parseInt(value, 10);
+        }
+        else if (Array.isArray(value)) {
+            result[key] = value.map((v) => (Buffer.isBuffer(v) ? v.toString('utf-8') : v));
+        }
+        else if (Buffer.isBuffer(value)) {
+            result[key] = value.toString('utf-8');
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=ad-mappers.js.map

package/dist/providers/ldap/ad-mappers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ad-mappers.js","sourceRoot":"","sources":["../../../src/providers/ldap/ad-mappers.ts"],"names":[],"mappings":";;AA0IA,kCAwBC;AAQD,oCAkBC;AAQD,0CAqBC;AAQD,8BAeC;AAUD,oCA6BC;AArRD,+CAA4C;AAoB5C,SAAS,cAAc,CAAC,QAA4B;IAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAG/B,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAEnE,OAAO,SAAS,CAAC;QACnB,CAAC;QAID,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAErF,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,IAAI,CAAC,+BAA+B,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAUD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAQD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;IAGD,OAAO,CAAC,SAAS,CAAC,KAAK,CAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAQD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AACtC,CAAC;AAWD,SAAS,gBAAgB,CAAC,kBAAsC;IAC9D,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC;IAC9B,OAAO,CAAC,kBAAkB,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC;AAQD,SAAgB,WAAW,CAAC,KAAY;IACtC,MAAM,kBAAkB,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAElE,MAAM,IAAI,GAAW;QACnB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACxD,iBAAiB,EAAE,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxD,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC5C,OAAO,EAAE,gBAAgB,CAAC,kBAAkB,CAAC;QAC7C,eAAe,EAAE,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/D,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACxD,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3C,kBAAkB;KACnB,CAAC;IAGF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,SAAgB,YAAY,CAAC,KAAY;IACvC,MAAM,KAAK,GAAY;QACrB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACxD,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC5C,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACxC,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;KACxC,CAAC;IAGF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,SAAgB,eAAe,CAAC,KAAY;IAC1C,MAAM,kBAAkB,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAElE,MAAM,QAAQ,GAAe;QAC3B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACxD,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC5C,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACpD,sBAAsB,EAAE,SAAS,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAClE,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACxD,OAAO,EAAE,gBAAgB,CAAC,kBAAkB,CAAC;KAC9C,CAAC;IAGF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAQD,SAAgB,SAAS,CAAC,KAAY;IACpC,MAAM,EAAE,GAAS;QACf,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;QAC9D,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;KAC7C,CAAC;IAGF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;YACjB,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAUD,SAAgB,YAAY,CAAC,KAAY;IACvC,MAAM,MAAM,GAA4B;QACtC,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC;IAGF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,sBAAsB,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;IAGtF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS;QAG3B,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;aAEI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/providers/ldap/ldap-client.d.ts

@@ -0,0 +1,33 @@
+import { Entry } from 'ldapts';
+import { SearchOptions } from '../interfaces/ILDAPProvider';
+export interface LDAPConnectionOptions {
+    url: string;
+    bindDN: string;
+    bindPassword: string;
+    timeout?: number;
+    tlsOptions?: {
+        rejectUnauthorized?: boolean;
+        ca?: Buffer | Buffer[];
+        checkServerIdentity?: (hostname: string, cert: unknown) => Error | undefined;
+        servername?: string;
+    };
+    caCertPath?: string;
+    skipHostnameVerification?: boolean;
+    tlsServername?: string;
+}
+export declare class LDAPClient {
+    private client;
+    private options;
+    private isConnected;
+    constructor(options: LDAPConnectionOptions);
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    testConnection(): Promise<{
+        success: boolean;
+        responseTime: number;
+    }>;
+    search(baseDN: string, options: SearchOptions): Promise<Entry[]>;
+    isClientConnected(): boolean;
+    getConnectionUrl(): string;
+}
+//# sourceMappingURL=ldap-client.d.ts.map

package/dist/providers/ldap/ldap-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap-client.d.ts","sourceRoot":"","sources":["../../../src/providers/ldap/ldap-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,EAAE,MAAM,QAAQ,CAAC;AAErD,OAAO,EAAE,aAAa,EAAe,MAAM,6BAA6B,CAAC;AAiBzE,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE;QACX,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACvB,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,KAAK,GAAG,SAAS,CAAC;QAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAOD,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,EAAE,qBAAqB;IAWpC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAuFxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAqB3B,cAAc,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAiCrE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAmDtE,iBAAiB,IAAI,OAAO;IAO5B,gBAAgB,IAAI,MAAM;CAG3B"}

package/dist/providers/ldap/ldap-client.js

@@ -0,0 +1,195 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LDAPClient = void 0;
+const ldapts_1 = require("ldapts");
+const logger_1 = require("../../utils/logger");
+const ldap_retry_1 = require("./ldap-retry");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+class LDAPClient {
+    client = null;
+    options;
+    isConnected = false;
+    constructor(options) {
+        this.options = options;
+    }
+    async connect() {
+        if (this.isConnected) {
+            logger_1.logger.debug('LDAP client already connected');
+            return;
+        }
+        await (0, ldap_retry_1.retryWithBackoff)(async () => {
+            try {
+                logger_1.logger.debug(`Connecting to LDAP server: ${this.options.url}`);
+                let tlsOptions = this.options.tlsOptions || {};
+                const shouldLoadCaCert = this.options.caCertPath && tlsOptions.rejectUnauthorized !== false;
+                if (shouldLoadCaCert) {
+                    try {
+                        const certPath = path.resolve(this.options.caCertPath);
+                        if (fs.existsSync(certPath)) {
+                            const caCert = fs.readFileSync(certPath);
+                            tlsOptions = {
+                                ...tlsOptions,
+                                ca: caCert,
+                            };
+                            logger_1.logger.debug(`Loaded CA certificate from: ${certPath}`);
+                        }
+                        else {
+                            logger_1.logger.warn(`CA certificate not found at ${certPath}, using system CA store`);
+                        }
+                    }
+                    catch (error) {
+                        logger_1.logger.warn(`Failed to load CA certificate from ${this.options.caCertPath}:`, error);
+                    }
+                }
+                else if (tlsOptions.rejectUnauthorized === false) {
+                    logger_1.logger.debug('TLS verification disabled (rejectUnauthorized=false)');
+                }
+                if (this.options.tlsServername) {
+                    tlsOptions = {
+                        ...tlsOptions,
+                        servername: this.options.tlsServername,
+                    };
+                    logger_1.logger.debug(`Using TLS servername for certificate validation: ${this.options.tlsServername}`);
+                }
+                if (this.options.skipHostnameVerification) {
+                    tlsOptions = {
+                        ...tlsOptions,
+                        checkServerIdentity: (hostname, _cert) => {
+                            logger_1.logger.debug(`Skipping hostname verification for: ${hostname}`);
+                            return undefined;
+                        },
+                    };
+                    logger_1.logger.debug('Hostname verification disabled (skipHostnameVerification=true)');
+                }
+                this.client = new ldapts_1.Client({
+                    url: this.options.url,
+                    timeout: this.options.timeout || 5000,
+                    connectTimeout: this.options.timeout || 5000,
+                    tlsOptions,
+                });
+                await this.client.bind(this.options.bindDN, this.options.bindPassword);
+                this.isConnected = true;
+                logger_1.logger.info(`Connected to LDAP server: ${this.options.url}`);
+            }
+            catch (error) {
+                this.isConnected = false;
+                this.client = null;
+                logger_1.logger.error('Failed to connect to LDAP server:', error);
+                throw new Error(`LDAP connection failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            }
+        }, ldap_retry_1.LDAP_RETRY_OPTIONS);
+    }
+    async disconnect() {
+        if (!this.client) {
+            return;
+        }
+        try {
+            await this.client.unbind();
+            logger_1.logger.debug('Disconnected from LDAP server');
+        }
+        catch (error) {
+            logger_1.logger.warn('Error during LDAP disconnect:', error);
+        }
+        finally {
+            this.client = null;
+            this.isConnected = false;
+        }
+    }
+    async testConnection() {
+        const startTime = Date.now();
+        try {
+            await this.connect();
+            const responseTime = Date.now() - startTime;
+            return {
+                success: true,
+                responseTime,
+            };
+        }
+        catch (error) {
+            logger_1.logger.error('LDAP connection test failed:', error);
+            return {
+                success: false,
+                responseTime: Date.now() - startTime,
+            };
+        }
+    }
+    async search(baseDN, options) {
+        if (!this.client || !this.isConnected) {
+            throw new Error('LDAP client not connected. Call connect() first.');
+        }
+        return (0, ldap_retry_1.retryWithBackoff)(async () => {
+            try {
+                logger_1.logger.debug(`LDAP search: baseDN=${baseDN}, filter=${options.filter}`);
+                const searchOptions = {
+                    filter: options.filter,
+                    scope: options.scope,
+                    attributes: options.attributes,
+                    sizeLimit: options.sizeLimit,
+                    timeLimit: options.timeLimit,
+                    paged: options.paged ? { pageSize: 1000 } : undefined,
+                };
+                if (options.controls && options.controls.length > 0) {
+                    searchOptions.controls = options.controls.map((ctrl) => {
+                        const control = {
+                            type: ctrl.oid,
+                            critical: ctrl.critical || false,
+                        };
+                        if (ctrl.value) {
+                            control.value = Buffer.isBuffer(ctrl.value) ? ctrl.value : Buffer.from(ctrl.value);
+                        }
+                        return control;
+                    });
+                }
+                const searchResult = await this.client.search(baseDN, searchOptions);
+                logger_1.logger.debug(`LDAP search returned ${searchResult.searchEntries.length} entries`);
+                return searchResult.searchEntries;
+            }
+            catch (error) {
+                logger_1.logger.error(`LDAP search failed: baseDN=${baseDN}`, error);
+                throw new Error(`LDAP search failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            }
+        }, ldap_retry_1.LDAP_RETRY_OPTIONS);
+    }
+    isClientConnected() {
+        return this.isConnected;
+    }
+    getConnectionUrl() {
+        return this.options.url;
+    }
+}
+exports.LDAPClient = LDAPClient;
+//# sourceMappingURL=ldap-client.js.map

package/dist/providers/ldap/ldap-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap-client.js","sourceRoot":"","sources":["../../../src/providers/ldap/ldap-client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAAqD;AACrD,+CAA4C;AAE5C,6CAAoE;AACpE,uCAAyB;AACzB,2CAA6B;AAmC7B,MAAa,UAAU;IACb,MAAM,GAAkB,IAAI,CAAC;IAC7B,OAAO,CAAwB;IAC/B,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAY,OAA8B;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IASD,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,eAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,MAAM,IAAA,6BAAgB,EAAC,KAAK,IAAI,EAAE;YAChC,IAAI,CAAC;gBACH,eAAM,CAAC,KAAK,CAAC,8BAA8B,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAG/D,IAAI,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;gBAI/C,MAAM,gBAAgB,GACpB,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,kBAAkB,KAAK,KAAK,CAAC;gBAErE,IAAI,gBAAgB,EAAE,CAAC;oBACrB,IAAI,CAAC;wBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAW,CAAC,CAAC;wBACxD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC5B,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;4BACzC,UAAU,GAAG;gCACX,GAAG,UAAU;gCACb,EAAE,EAAE,MAAM;6BACX,CAAC;4BACF,eAAM,CAAC,KAAK,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;wBAC1D,CAAC;6BAAM,CAAC;4BACN,eAAM,CAAC,IAAI,CAAC,+BAA+B,QAAQ,yBAAyB,CAAC,CAAC;wBAChF,CAAC;oBACH,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,eAAM,CAAC,IAAI,CAAC,sCAAsC,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC;oBAEvF,CAAC;gBACH,CAAC;qBAAM,IAAI,UAAU,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;oBACnD,eAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBACvE,CAAC;gBAGD,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;oBAC/B,UAAU,GAAG;wBACX,GAAG,UAAU;wBACb,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;qBACvC,CAAC;oBACF,eAAM,CAAC,KAAK,CAAC,oDAAoD,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;gBACjG,CAAC;gBAGD,IAAI,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC;oBAC1C,UAAU,GAAG;wBACX,GAAG,UAAU;wBACb,mBAAmB,EAAE,CAAC,QAAgB,EAAE,KAAc,EAAa,EAAE;4BACnE,eAAM,CAAC,KAAK,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;4BAChE,OAAO,SAAS,CAAC;wBACnB,CAAC;qBACF,CAAC;oBACF,eAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;gBACjF,CAAC;gBAGD,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,CAAC;oBACvB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;oBACrB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI;oBACrC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI;oBAC5C,UAAU;iBACX,CAAC,CAAC;gBAGH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAEvE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,eAAM,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;gBACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,eAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;gBACzD,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CACtF,CAAC;YACJ,CAAC;QACH,CAAC,EAAE,+BAAkB,CAAC,CAAC;IACzB,CAAC;IAKD,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3B,eAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;IAOD,KAAK,CAAC,cAAc;QAClB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC;YAEH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAErB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE5C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,YAAY;aACb,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAaD,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,OAAsB;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,IAAA,6BAAgB,EAAC,KAAK,IAAI,EAAE;YACjC,IAAI,CAAC;gBACH,eAAM,CAAC,KAAK,CAAC,uBAAuB,MAAM,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAGxE,MAAM,aAAa,GAAQ;oBACzB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;iBACtD,CAAC;gBAGF,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpD,aAAa,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAiB,EAAE,EAAE;wBAClE,MAAM,OAAO,GAAQ;4BACnB,IAAI,EAAE,IAAI,CAAC,GAAG;4BACd,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;yBACjC,CAAC;wBACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACrF,CAAC;wBACD,OAAO,OAAO,CAAC;oBACjB,CAAC,CAAC,CAAC;gBACL,CAAC;gBAGD,MAAM,YAAY,GAAiB,MAAM,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;gBAEpF,eAAM,CAAC,KAAK,CAAC,wBAAwB,YAAY,CAAC,aAAa,CAAC,MAAM,UAAU,CAAC,CAAC;gBAElF,OAAO,YAAY,CAAC,aAAa,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,eAAM,CAAC,KAAK,CAAC,8BAA8B,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;gBAC5D,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAClF,CAAC;YACJ,CAAC;QACH,CAAC,EAAE,+BAAkB,CAAC,CAAC;IACzB,CAAC;IAKD,iBAAiB;QACf,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAKD,gBAAgB;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IAC1B,CAAC;CACF;AA1ND,gCA0NC"}

package/dist/providers/ldap/ldap-errors.d.ts

@@ -0,0 +1,48 @@
+export declare class LDAPError extends Error {
+    constructor(message: string);
+}
+export declare class LDAPConnectionError extends LDAPError {
+    readonly url: string;
+    readonly cause?: Error;
+    constructor(message: string, url: string, cause?: Error);
+}
+export declare class LDAPAuthenticationError extends LDAPError {
+    readonly bindDN: string;
+    constructor(message: string, bindDN: string);
+}
+export declare class LDAPSearchError extends LDAPError {
+    readonly baseDN: string;
+    readonly filter: string;
+    readonly cause?: Error;
+    constructor(message: string, baseDN: string, filter: string, cause?: Error);
+}
+export declare class LDAPTimeoutError extends LDAPError {
+    readonly operation: string;
+    readonly timeoutMs: number;
+    constructor(message: string, operation: string, timeoutMs: number);
+}
+export declare class LDAPInvalidFilterError extends LDAPError {
+    readonly filter: string;
+    constructor(message: string, filter: string);
+}
+export declare class LDAPInvalidDNError extends LDAPError {
+    readonly dn: string;
+    constructor(message: string, dn: string);
+}
+export declare class LDAPInjectionAttemptError extends LDAPError {
+    readonly input: string;
+    constructor(message: string, input: string);
+}
+export declare class LDAPNotConnectedError extends LDAPError {
+    constructor(message?: string);
+}
+export declare class LDAPConfigurationError extends LDAPError {
+    readonly configKey: string;
+    constructor(message: string, configKey: string);
+}
+export declare class LDAPSizeLimitExceededError extends LDAPError {
+    readonly limit: number;
+    readonly returned: number;
+    constructor(message: string, limit: number, returned: number);
+}
+//# sourceMappingURL=ldap-errors.d.ts.map

package/dist/providers/ldap/ldap-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap-errors.d.ts","sourceRoot":"","sources":["../../../src/providers/ldap/ldap-errors.ts"],"names":[],"mappings":"AAcA,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAK5B;AAOD,qBAAa,mBAAoB,SAAQ,SAAS;IAChD,SAAgB,GAAG,EAAE,MAAM,CAAC;IAC5B,SAAyB,KAAK,CAAC,EAAE,KAAK,CAAC;gBAE3B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAOxD;AAOD,qBAAa,uBAAwB,SAAQ,SAAS;IACpD,SAAgB,MAAM,EAAE,MAAM,CAAC;gBAEnB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAM5C;AAOD,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAyB,KAAK,CAAC,EAAE,KAAK,CAAC;gBAE3B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAQ3E;AAOD,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAOlE;AAOD,qBAAa,sBAAuB,SAAQ,SAAS;IACnD,SAAgB,MAAM,EAAE,MAAM,CAAC;gBAEnB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAM5C;AAOD,qBAAa,kBAAmB,SAAQ,SAAS;IAC/C,SAAgB,EAAE,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;CAMxC;AAOD,qBAAa,yBAA0B,SAAQ,SAAS;IACtD,SAAgB,KAAK,EAAE,MAAM,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAM3C;AAOD,qBAAa,qBAAsB,SAAQ,SAAS;gBACtC,OAAO,GAAE,MAAoC;CAK1D;AAOD,qBAAa,sBAAuB,SAAQ,SAAS;IACnD,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAM/C;AAOD,qBAAa,0BAA2B,SAAQ,SAAS;IACvD,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,QAAQ,EAAE,MAAM,CAAC;gBAErB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAO7D"}

package/dist/providers/ldap/ldap-errors.js

@@ -0,0 +1,120 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LDAPSizeLimitExceededError = exports.LDAPConfigurationError = exports.LDAPNotConnectedError = exports.LDAPInjectionAttemptError = exports.LDAPInvalidDNError = exports.LDAPInvalidFilterError = exports.LDAPTimeoutError = exports.LDAPSearchError = exports.LDAPAuthenticationError = exports.LDAPConnectionError = exports.LDAPError = void 0;
+class LDAPError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'LDAPError';
+        Object.setPrototypeOf(this, LDAPError.prototype);
+    }
+}
+exports.LDAPError = LDAPError;
+class LDAPConnectionError extends LDAPError {
+    url;
+    cause;
+    constructor(message, url, cause) {
+        super(message);
+        this.name = 'LDAPConnectionError';
+        this.url = url;
+        this.cause = cause;
+        Object.setPrototypeOf(this, LDAPConnectionError.prototype);
+    }
+}
+exports.LDAPConnectionError = LDAPConnectionError;
+class LDAPAuthenticationError extends LDAPError {
+    bindDN;
+    constructor(message, bindDN) {
+        super(message);
+        this.name = 'LDAPAuthenticationError';
+        this.bindDN = bindDN;
+        Object.setPrototypeOf(this, LDAPAuthenticationError.prototype);
+    }
+}
+exports.LDAPAuthenticationError = LDAPAuthenticationError;
+class LDAPSearchError extends LDAPError {
+    baseDN;
+    filter;
+    cause;
+    constructor(message, baseDN, filter, cause) {
+        super(message);
+        this.name = 'LDAPSearchError';
+        this.baseDN = baseDN;
+        this.filter = filter;
+        this.cause = cause;
+        Object.setPrototypeOf(this, LDAPSearchError.prototype);
+    }
+}
+exports.LDAPSearchError = LDAPSearchError;
+class LDAPTimeoutError extends LDAPError {
+    operation;
+    timeoutMs;
+    constructor(message, operation, timeoutMs) {
+        super(message);
+        this.name = 'LDAPTimeoutError';
+        this.operation = operation;
+        this.timeoutMs = timeoutMs;
+        Object.setPrototypeOf(this, LDAPTimeoutError.prototype);
+    }
+}
+exports.LDAPTimeoutError = LDAPTimeoutError;
+class LDAPInvalidFilterError extends LDAPError {
+    filter;
+    constructor(message, filter) {
+        super(message);
+        this.name = 'LDAPInvalidFilterError';
+        this.filter = filter;
+        Object.setPrototypeOf(this, LDAPInvalidFilterError.prototype);
+    }
+}
+exports.LDAPInvalidFilterError = LDAPInvalidFilterError;
+class LDAPInvalidDNError extends LDAPError {
+    dn;
+    constructor(message, dn) {
+        super(message);
+        this.name = 'LDAPInvalidDNError';
+        this.dn = dn;
+        Object.setPrototypeOf(this, LDAPInvalidDNError.prototype);
+    }
+}
+exports.LDAPInvalidDNError = LDAPInvalidDNError;
+class LDAPInjectionAttemptError extends LDAPError {
+    input;
+    constructor(message, input) {
+        super(message);
+        this.name = 'LDAPInjectionAttemptError';
+        this.input = input;
+        Object.setPrototypeOf(this, LDAPInjectionAttemptError.prototype);
+    }
+}
+exports.LDAPInjectionAttemptError = LDAPInjectionAttemptError;
+class LDAPNotConnectedError extends LDAPError {
+    constructor(message = 'LDAP client not connected') {
+        super(message);
+        this.name = 'LDAPNotConnectedError';
+        Object.setPrototypeOf(this, LDAPNotConnectedError.prototype);
+    }
+}
+exports.LDAPNotConnectedError = LDAPNotConnectedError;
+class LDAPConfigurationError extends LDAPError {
+    configKey;
+    constructor(message, configKey) {
+        super(message);
+        this.name = 'LDAPConfigurationError';
+        this.configKey = configKey;
+        Object.setPrototypeOf(this, LDAPConfigurationError.prototype);
+    }
+}
+exports.LDAPConfigurationError = LDAPConfigurationError;
+class LDAPSizeLimitExceededError extends LDAPError {
+    limit;
+    returned;
+    constructor(message, limit, returned) {
+        super(message);
+        this.name = 'LDAPSizeLimitExceededError';
+        this.limit = limit;
+        this.returned = returned;
+        Object.setPrototypeOf(this, LDAPSizeLimitExceededError.prototype);
+    }
+}
+exports.LDAPSizeLimitExceededError = LDAPSizeLimitExceededError;
+//# sourceMappingURL=ldap-errors.js.map

package/dist/providers/ldap/ldap-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap-errors.js","sourceRoot":"","sources":["../../../src/providers/ldap/ldap-errors.ts"],"names":[],"mappings":";;;AAcA,MAAa,SAAU,SAAQ,KAAK;IAClC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;CACF;AAND,8BAMC;AAOD,MAAa,mBAAoB,SAAQ,SAAS;IAChC,GAAG,CAAS;IACH,KAAK,CAAS;IAEvC,YAAY,OAAe,EAAE,GAAW,EAAE,KAAa;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;CACF;AAXD,kDAWC;AAOD,MAAa,uBAAwB,SAAQ,SAAS;IACpC,MAAM,CAAS;IAE/B,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;CACF;AATD,0DASC;AAOD,MAAa,eAAgB,SAAQ,SAAS;IAC5B,MAAM,CAAS;IACf,MAAM,CAAS;IACN,KAAK,CAAS;IAEvC,YAAY,OAAe,EAAE,MAAc,EAAE,MAAc,EAAE,KAAa;QACxE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAbD,0CAaC;AAOD,MAAa,gBAAiB,SAAQ,SAAS;IAC7B,SAAS,CAAS;IAClB,SAAS,CAAS;IAElC,YAAY,OAAe,EAAE,SAAiB,EAAE,SAAiB;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;CACF;AAXD,4CAWC;AAOD,MAAa,sBAAuB,SAAQ,SAAS;IACnC,MAAM,CAAS;IAE/B,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;CACF;AATD,wDASC;AAOD,MAAa,kBAAmB,SAAQ,SAAS;IAC/B,EAAE,CAAS;IAE3B,YAAY,OAAe,EAAE,EAAU;QACrC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AATD,gDASC;AAOD,MAAa,yBAA0B,SAAQ,SAAS;IACtC,KAAK,CAAS;IAE9B,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACnE,CAAC;CACF;AATD,8DASC;AAOD,MAAa,qBAAsB,SAAQ,SAAS;IAClD,YAAY,UAAkB,2BAA2B;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;CACF;AAND,sDAMC;AAOD,MAAa,sBAAuB,SAAQ,SAAS;IACnC,SAAS,CAAS;IAElC,YAAY,OAAe,EAAE,SAAiB;QAC5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;CACF;AATD,wDASC;AAOD,MAAa,0BAA2B,SAAQ,SAAS;IACvC,KAAK,CAAS;IACd,QAAQ,CAAS;IAEjC,YAAY,OAAe,EAAE,KAAa,EAAE,QAAgB;QAC1D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;CACF;AAXD,gEAWC"}

package/dist/providers/ldap/ldap-retry.d.ts

@@ -0,0 +1,14 @@
+export interface RetryOptions {
+    maxAttempts?: number;
+    initialDelay?: number;
+    maxDelay?: number;
+    backoffMultiplier?: number;
+    jitterFactor?: number;
+    shouldRetry?: (error: Error, attempt: number) => boolean;
+    onRetry?: (error: Error, attempt: number, delay: number) => void;
+}
+export declare function isRetryableError(error: Error): boolean;
+export declare function retryWithBackoff<T>(operation: () => Promise<T>, options?: RetryOptions): Promise<T>;
+export declare function retryable<TArgs extends unknown[], TReturn>(fn: (...args: TArgs) => Promise<TReturn>, options?: RetryOptions): (...args: TArgs) => Promise<TReturn>;
+export declare const LDAP_RETRY_OPTIONS: RetryOptions;
+//# sourceMappingURL=ldap-retry.d.ts.map

package/dist/providers/ldap/ldap-retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap-retry.d.ts","sourceRoot":"","sources":["../../../src/providers/ldap/ldap-retry.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,YAAY;IAK3B,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,YAAY,CAAC,EAAE,MAAM,CAAC;IAMtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAM3B,YAAY,CAAC,EAAE,MAAM,CAAC;IAMtB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAKzD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAClE;AAgCD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CA8BtD;AAoDD,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,CAAC,CAAC,CAiDZ;AAqBD,wBAAgB,SAAS,CAAC,KAAK,SAAS,OAAO,EAAE,EAAE,OAAO,EACxD,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,EACxC,OAAO,GAAE,YAAiB,GACzB,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,CAItC;AAOD,eAAO,MAAM,kBAAkB,EAAE,YAUhC,CAAC"}