ldap-rest 0.18.0 → 0.19.0

package/docs/usage/plugins/ldap/external-users.md

@@ -33,10 +33,31 @@ This plugin intercepts group member validation and automatically creates missing
 ### Important Notes
 
 - **Dependencies**: This plugin requires the `core/ldap/groups` plugin
-- **DN Format**: External members are in the format `mail={email},{external_members_branch}`
-- **Domain Protection**: External users cannot be created if their mail are in managed domains (configured via `--mail-domain`)
+- **DN Format**: External members are in the format `mail={email},{external_members_branch}`,
+  the address escaped as any DN value (RFC 4514): `mail=a\+b@partner.com,…`
+  creates an entry whose `mail` is `a+b@partner.com`. Only the direct children of the
+  branch are external members.
+- **Domain Protection**: External users cannot be created if their mail are in managed domains (configured via `--mail-domain`, compared case-insensitively)
 - **Automatic Creation**: Users are created automatically when added to a group if they don't exist
 
+### Config API
+
+`GET /api/v1/config` tells a client whether external members are accepted, and
+where to send them:
+
+```json
+"externalUsersInGroups": {
+  "enabled": true,
+  "branch": "ou=contacts,dc=example,dc=com",
+  "rdnAttribute": "mail",
+  "managedDomains": ["example.com"]
+}
+```
+
+A client turns an address into a member with
+`rdnAttribute=<escaped address>,<branch>`, and can refuse a `managedDomains`
+address before sending it.
+
 ## How It Works
 
 ### Member Validation Hook

package/docs/usage/upgrading.md

@@ -4,6 +4,24 @@ What to check before deploying, newest first. Only releases that need a
 decision or a configuration change appear here; see the
 [CHANGELOG](../../CHANGELOG.md) for everything else.
 
+## To 0.19.0
+
+### Forwards are no longer copied to Twake Mail
+
+**Who is affected:** a deployment that loads `twake/james` and stores
+forwards in `--forward-attribute` (`mailForwardingAddress` by default).
+
+`twake/james` no longer applies the changes of that attribute to Twake Mail's
+forwards: users set them in Twake Mail. The forwards already in Twake Mail
+stay as they are, except those left on an address an account takes, removed
+as before,
+[details](plugins/integrations/james-mail.md#forwards-left-on-an-address).
+
+To keep the directory as the owner of the forwards, set
+`--james-sync-forwards` (`DM_JAMES_SYNC_FORWARDS=true`); it then overwrites
+what users set in Twake Mail,
+[details](plugins/integrations/james-mail.md#forwards).
+
 ## To 0.18.0
 
 ### Mailing lists are no longer copied to James

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ldap-rest",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": "Light directory manager",
   "keywords": [
     "Identity-Manager"

package/static/schemas/twake/groups.json

@@ -8,11 +8,13 @@
     "base": "ou=groups,__ldap_base__",
     "label": {
       "en": "Groups",
-      "fr": "Groupes"
+      "fr": "Groupes",
+      "mn": "Бүлгүүд"
     },
     "singularLabel": {
       "en": "group",
-      "fr": "groupe"
+      "fr": "groupe",
+      "mn": "бүлэг"
     }
   },
   "strict": true,
@@ -33,13 +35,15 @@
       "test": "^(?!.*\\.\\.)[a-zA-Z0-9!#$%&'*+/=?^_`{|}.-]{1,64}$",
       "hint": {
         "en": "Must match an email local part: letters, digits and ! # $ % & ' * + / = ? ^ _ ` { | } . -, no consecutive dots",
-        "fr": "Partie locale d'une adresse électronique : lettres, chiffres et ! # $ % & ' * + / = ? ^ _ ` { | } . -, sans points consécutifs"
+        "fr": "Partie locale d'une adresse électronique : lettres, chiffres et ! # $ % & ' * + / = ? ^ _ ` { | } . -, sans points consécutifs",
+        "mn": "Имэйл хаягийн @-ээс өмнөх хэсэг: үсэг, тоо болон ! # $ % & ' * + / = ? ^ _ ` { | } . -, дараалсан цэггүй"
       },
       "required": true,
       "role": "identifier",
       "label": {
         "en": "Name",
-        "fr": "Nom"
+        "fr": "Nom",
+        "mn": "Нэр"
       }
     },
     "description": {
@@ -48,7 +52,8 @@
       "required": false,
       "label": {
         "en": "Description",
-        "fr": "Description"
+        "fr": "Description",
+        "mn": "Тайлбар"
       }
     },
     "mail": {
@@ -57,7 +62,8 @@
       "test": "^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$",
       "hint": {
         "en": "Expected an email address, e.g. all-staff@lists.example.org",
-        "fr": "Une adresse électronique est attendue, par ex. all-staff@lists.example.org"
+        "fr": "Une adresse électronique est attendue, par ex. all-staff@lists.example.org",
+        "mn": "Имэйл хаяг оруулна уу, жишээ нь all-staff@lists.example.org"
       },
       "required": false,
       "unique": {
@@ -69,7 +75,8 @@
       "role": "primaryEmail",
       "label": {
         "en": "Email",
-        "fr": "Adresse électronique"
+        "fr": "Adresse électronique",
+        "mn": "Имэйл хаяг"
       }
     },
     "businessCategory": {
@@ -79,11 +86,13 @@
       "role": "writePolicy",
       "label": {
         "en": "List type",
-        "fr": "Type de liste"
+        "fr": "Type de liste",
+        "mn": "Жагсаалтын төрөл"
       },
       "group": {
         "en": "Mailbox Settings",
-        "fr": "Paramètres de messagerie"
+        "fr": "Paramètres de messagerie",
+        "mn": "Шуудангийн хайрцгийн тохиргоо"
       }
     },
     "twakeMailboxType": {
@@ -91,13 +100,15 @@
       "branch": ["ou=twakeMailboxType,ou=nomenclature,__LDAP_BASE__"],
       "group": {
         "en": "Mailbox Settings",
-        "fr": "Paramètres de messagerie"
+        "fr": "Paramètres de messagerie",
+        "mn": "Шуудангийн хайрцгийн тохиргоо"
       },
       "required": false,
       "role": "mailboxType",
       "label": {
         "en": "Group type",
-        "fr": "Type de groupe"
+        "fr": "Type de groupe",
+        "mn": "Бүлгийн төрөл"
       }
     },
     "member": {
@@ -107,14 +118,16 @@
         "test": "^[a-zA-Z]+=.*,__LDAP_BASE__$",
         "hint": {
           "en": "Expected the DN of an entry of this directory",
-          "fr": "Le DN d'une entrée de cet annuaire est attendu"
+          "fr": "Le DN d'une entrée de cet annuaire est attendu",
+          "mn": "Энэ лавлахын бичлэгийн DN оруулна уу"
         }
       },
       "required": false,
       "role": "members",
       "label": {
         "en": "Members",
-        "fr": "Membres"
+        "fr": "Membres",
+        "mn": "Гишүүд"
       }
     },
     "owner": {
@@ -124,14 +137,16 @@
         "test": "^[a-zA-Z]+=.*,__LDAP_BASE__$",
         "hint": {
           "en": "Expected the DN of an entry of this directory",
-          "fr": "Le DN d'une entrée de cet annuaire est attendu"
+          "fr": "Le DN d'une entrée de cet annuaire est attendu",
+          "mn": "Энэ лавлахын бичлэгийн DN оруулна уу"
         }
       },
       "required": false,
       "role": "owners",
       "label": {
         "en": "Owners",
-        "fr": "Propriétaires"
+        "fr": "Propriétaires",
+        "mn": "Эзэмшигчид"
       }
     },
     "twakeDepartmentLink": {
@@ -141,7 +156,8 @@
       "role": "organizationLink",
       "label": {
         "en": "Department",
-        "fr": "Organisation"
+        "fr": "Organisation",
+        "mn": "Байгууллага"
       }
     },
     "twakeDepartmentPath": {
@@ -152,7 +168,8 @@
       "role": "organizationPath",
       "label": {
         "en": "Department path",
-        "fr": "Chemin"
+        "fr": "Chemin",
+        "mn": "Зам"
       }
     }
   }

package/static/schemas/twake/nomenclature/twakeAccountStatus.json

@@ -7,28 +7,34 @@
     "pluralName": "accountStatuses",
     "label": {
       "en": "Account states",
-      "fr": "États de compte"
+      "fr": "États de compte",
+      "mn": "Бүртгэлийн төлөвүүд"
     },
     "singularLabel": {
       "en": "account state",
-      "fr": "état de compte"
+      "fr": "état de compte",
+      "mn": "бүртгэлийн төлөв"
     },
     "valueLabels": {
       "active": {
         "en": "Active",
-        "fr": "Actif"
+        "fr": "Actif",
+        "mn": "Идэвхтэй"
       },
       "disabled": {
         "en": "Disabled",
-        "fr": "Désactivé"
+        "fr": "Désactivé",
+        "mn": "Идэвхгүй"
       },
       "noaccess": {
         "en": "No access",
-        "fr": "Sans accès"
+        "fr": "Sans accès",
+        "mn": "Хандах эрхгүй"
       },
       "todelete": {
         "en": "To delete",
-        "fr": "À supprimer"
+        "fr": "À supprimer",
+        "mn": "Устгах"
       }
     },
     "base": "ou=twakeAccountStatus,ou=nomenclature,{ldap_base}"
@@ -50,7 +56,8 @@
       "required": true,
       "label": {
         "en": "Name",
-        "fr": "Nom"
+        "fr": "Nom",
+        "mn": "Нэр"
       }
     },
     "description": {
@@ -58,7 +65,8 @@
       "required": false,
       "label": {
         "en": "Description",
-        "fr": "Description"
+        "fr": "Description",
+        "mn": "Тайлбар"
       }
     }
   }

package/static/schemas/twake/nomenclature/twakeDeliveryMode.json

@@ -7,24 +7,29 @@
     "pluralName": "deliveryModes",
     "label": {
       "en": "Delivery modes",
-      "fr": "Modes de distribution"
+      "fr": "Modes de distribution",
+      "mn": "Хүргэлтийн горимууд"
     },
     "singularLabel": {
       "en": "delivery mode",
-      "fr": "mode de distribution"
+      "fr": "mode de distribution",
+      "mn": "хүргэлтийн горим"
     },
     "valueLabels": {
       "normal": {
         "en": "Normal",
-        "fr": "Normale"
+        "fr": "Normale",
+        "mn": "Энгийн"
       },
       "forward": {
         "en": "Forwarded",
-        "fr": "Transférée"
+        "fr": "Transférée",
+        "mn": "Дамжуулсан"
       },
       "localDelivery": {
         "en": "Forwarded, local copy kept",
-        "fr": "Transférée, copie locale conservée"
+        "fr": "Transférée, copie locale conservée",
+        "mn": "Дамжуулсан, дотоод хуулбарыг хадгалсан"
       }
     },
     "base": "ou=twakeDeliveryMode,ou=nomenclature,{ldap_base}"
@@ -46,7 +51,8 @@
       "required": true,
       "label": {
         "en": "Name",
-        "fr": "Nom"
+        "fr": "Nom",
+        "mn": "Нэр"
       }
     },
     "description": {
@@ -54,7 +60,8 @@
       "required": false,
       "label": {
         "en": "Description",
-        "fr": "Description"
+        "fr": "Description",
+        "mn": "Тайлбар"
       }
     }
   }

package/static/schemas/twake/nomenclature/twakeDomain.json

@@ -8,11 +8,13 @@
     "base": "ou=domains,ou=nomenclature,{ldap_base}",
     "label": {
       "en": "Mail domains",
-      "fr": "Domaines de messagerie"
+      "fr": "Domaines de messagerie",
+      "mn": "Имэйлийн домэйнууд"
     },
     "singularLabel": {
       "en": "domain",
-      "fr": "domaine"
+      "fr": "domaine",
+      "mn": "домэйн"
     }
   },
   "strict": true,
@@ -31,13 +33,15 @@
       "test": "^[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?$",
       "hint": {
         "en": "A single domain label: letters, digits and hyphens, e.g. example",
-        "fr": "Un seul élément de nom de domaine : lettres, chiffres et tirets, par ex. example"
+        "fr": "Un seul élément de nom de domaine : lettres, chiffres et tirets, par ex. example",
+        "mn": "Домэйн нэрийн нэг хэсэг: үсэг, тоо болон зураас, жишээ нь example"
       },
       "required": true,
       "role": "identifier",
       "label": {
         "en": "Identifier",
-        "fr": "Identifiant"
+        "fr": "Identifiant",
+        "mn": "Тодорхойлогч"
       }
     },
     "associatedDomain": {
@@ -45,13 +49,15 @@
       "test": "^[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(\\.[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)+$|^\\*$",
       "hint": {
         "en": "A fully qualified domain name (example.org), or * to allow every domain",
-        "fr": "Un nom de domaine complet (example.org), ou * pour autoriser tous les domaines"
+        "fr": "Un nom de domaine complet (example.org), ou * pour autoriser tous les domaines",
+        "mn": "Бүтэн домэйн нэр (example.org), эсвэл бүх домэйныг зөвшөөрөх бол *"
       },
       "required": true,
       "role": ["domainName", "displayName"],
       "label": {
         "en": "Mail domain",
-        "fr": "Domaine de messagerie"
+        "fr": "Domaine de messagerie",
+        "mn": "Имэйлийн домэйн"
       }
     },
     "description": {
@@ -59,7 +65,8 @@
       "required": false,
       "label": {
         "en": "Description",
-        "fr": "Description"
+        "fr": "Description",
+        "mn": "Тайлбар"
       }
     }
   }

package/static/schemas/twake/nomenclature/twakeListType.json

@@ -7,24 +7,29 @@
     "pluralName": "listTypes",
     "label": {
       "en": "List types",
-      "fr": "Types de liste"
+      "fr": "Types de liste",
+      "mn": "Жагсаалтын төрлүүд"
     },
     "singularLabel": {
       "en": "list type",
-      "fr": "type de liste"
+      "fr": "type de liste",
+      "mn": "жагсаалтын төрөл"
     },
     "valueLabels": {
       "openList": {
         "en": "Open to all",
-        "fr": "Ouverte à tous"
+        "fr": "Ouverte à tous",
+        "mn": "Бүх хүнд нээлттэй"
       },
       "memberRestrictedList": {
         "en": "Members only",
-        "fr": "Réservée aux membres"
+        "fr": "Réservée aux membres",
+        "mn": "Зөвхөн гишүүдэд"
       },
       "ownerRestrictedList": {
         "en": "Owners only",
-        "fr": "Réservée aux propriétaires"
+        "fr": "Réservée aux propriétaires",
+        "mn": "Зөвхөн эзэмшигчдэд"
       }
     },
     "base": "ou=twakeListType,ou=nomenclature,{ldap_base}"
@@ -46,7 +51,8 @@
       "required": true,
       "label": {
         "en": "Name",
-        "fr": "Nom"
+        "fr": "Nom",
+        "mn": "Нэр"
       }
     },
     "description": {
@@ -54,7 +60,8 @@
       "required": false,
       "label": {
         "en": "Description",
-        "fr": "Description"
+        "fr": "Description",
+        "mn": "Тайлбар"
       }
     }
   }

package/static/schemas/twake/nomenclature/twakeMailboxType.json

@@ -7,24 +7,29 @@
     "pluralName": "mailboxTypes",
     "label": {
       "en": "Group types",
-      "fr": "Types de groupe"
+      "fr": "Types de groupe",
+      "mn": "Бүлгийн төрлүүд"
     },
     "singularLabel": {
       "en": "group type",
-      "fr": "type de groupe"
+      "fr": "type de groupe",
+      "mn": "бүлгийн төрөл"
     },
     "valueLabels": {
       "group": {
         "en": "Group",
-        "fr": "Groupe"
+        "fr": "Groupe",
+        "mn": "Бүлэг"
       },
       "mailingList": {
         "en": "Distribution list",
-        "fr": "Liste de diffusion"
+        "fr": "Liste de diffusion",
+        "mn": "Түгээх жагсаалт"
       },
       "teamMailbox": {
         "en": "Shared mailbox",
-        "fr": "Boîte partagée"
+        "fr": "Boîte partagée",
+        "mn": "Хамтын шуудангийн хайрцаг"
       }
     },
     "base": "ou=twakeMailboxType,ou=nomenclature,{ldap_base}"
@@ -46,7 +51,8 @@
       "required": true,
       "label": {
         "en": "Name",
-        "fr": "Nom"
+        "fr": "Nom",
+        "mn": "Нэр"
       }
     },
     "description": {
@@ -54,7 +60,8 @@
       "required": false,
       "label": {
         "en": "Description",
-        "fr": "Description"
+        "fr": "Description",
+        "mn": "Тайлбар"
       }
     }
   }

package/static/schemas/twake/nomenclature/twakeTitle.json

@@ -7,44 +7,54 @@
     "pluralName": "titles",
     "label": {
       "en": "Titles",
-      "fr": "Civilités"
+      "fr": "Civilités",
+      "mn": "Хандах хэлбэрүүд"
     },
     "singularLabel": {
       "en": "title",
-      "fr": "civilité"
+      "fr": "civilité",
+      "mn": "хандах хэлбэр"
     },
     "valueLabels": {
       "Dr": {
         "en": "Dr",
-        "fr": "Dr"
+        "fr": "Dr",
+        "mn": "Др."
       },
       "Mr": {
         "en": "Mr",
-        "fr": "M."
+        "fr": "M.",
+        "mn": "Ноён"
       },
       "Mrs": {
         "en": "Mrs",
-        "fr": "Mme"
+        "fr": "Mme",
+        "mn": "Хатагтай"
       },
       "Miss": {
         "en": "Miss",
-        "fr": "Mlle"
+        "fr": "Mlle",
+        "mn": "Авхай"
       },
       "Ms": {
         "en": "Ms",
-        "fr": "Mme"
+        "fr": "Mme",
+        "mn": "Хатагтай"
       },
       "Prof": {
         "en": "Prof.",
-        "fr": "Pr"
+        "fr": "Pr",
+        "mn": "Проф."
       },
       "Hon": {
         "en": "Hon.",
-        "fr": "Honorable"
+        "fr": "Honorable",
+        "mn": "Эрхэм"
       },
       "Excellence": {
         "en": "Excellency",
-        "fr": "Excellence"
+        "fr": "Excellence",
+        "mn": "Эрхэмсэг"
       }
     },
     "base": "ou=twakeTitle,ou=nomenclature,{ldap_base}"
@@ -66,7 +76,8 @@
       "required": true,
       "label": {
         "en": "Name",
-        "fr": "Nom"
+        "fr": "Nom",
+        "mn": "Нэр"
       }
     },
     "description": {
@@ -74,7 +85,8 @@
       "required": false,
       "label": {
         "en": "Description",
-        "fr": "Description"
+        "fr": "Description",
+        "mn": "Тайлбар"
       }
     }
   }