137fb3feeSRatan Gupta #pragma once 237fb3feeSRatan Gupta 337fb3feeSRatan Gupta #include "config.h" 437fb3feeSRatan Gupta #include <xyz/openbmc_project/Object/Enable/server.hpp> 537fb3feeSRatan Gupta #include <xyz/openbmc_project/User/Ldap/Create/server.hpp> 637fb3feeSRatan Gupta #include <xyz/openbmc_project/User/Ldap/Config/server.hpp> 737fb3feeSRatan Gupta #include <xyz/openbmc_project/Common/error.hpp> 837fb3feeSRatan Gupta #include <phosphor-logging/log.hpp> 937fb3feeSRatan Gupta #include <phosphor-logging/elog.hpp> 1037fb3feeSRatan Gupta #include <phosphor-logging/elog-errors.hpp> 1137fb3feeSRatan Gupta #include <sdbusplus/bus.hpp> 1237fb3feeSRatan Gupta #include <sdbusplus/server/object.hpp> 1337fb3feeSRatan Gupta #include <string> 1437fb3feeSRatan Gupta 1537fb3feeSRatan Gupta namespace phosphor 1637fb3feeSRatan Gupta { 1737fb3feeSRatan Gupta namespace ldap 1837fb3feeSRatan Gupta { 1937fb3feeSRatan Gupta 2037fb3feeSRatan Gupta using namespace phosphor::logging; 2137fb3feeSRatan Gupta using namespace sdbusplus::xyz::openbmc_project::Common::Error; 2237fb3feeSRatan Gupta using ConfigIface = sdbusplus::xyz::openbmc_project::User::Ldap::server::Config; 2337fb3feeSRatan Gupta using EnableIface = sdbusplus::xyz::openbmc_project::Object::server::Enable; 24*25b9c904SRatan Gupta using Ifaces = sdbusplus::server::object::object<ConfigIface, EnableIface>; 2537fb3feeSRatan Gupta using CreateIface = sdbusplus::server::object::object< 2637fb3feeSRatan Gupta sdbusplus::xyz::openbmc_project::User::Ldap::server::Create>; 2737fb3feeSRatan Gupta 2837fb3feeSRatan Gupta class ConfigMgr; 2937fb3feeSRatan Gupta class MockConfigMgr; 3037fb3feeSRatan Gupta 3137fb3feeSRatan Gupta /** @class Config 3237fb3feeSRatan Gupta * @brief Configuration for LDAP. 3337fb3feeSRatan Gupta * @details concrete implementation of xyz.openbmc_project.User.Ldap.Config 3437fb3feeSRatan Gupta * API, in order to provide LDAP configuration. 3537fb3feeSRatan Gupta */ 3637fb3feeSRatan Gupta class Config : public Ifaces 3737fb3feeSRatan Gupta { 3837fb3feeSRatan Gupta public: 3937fb3feeSRatan Gupta Config() = delete; 4037fb3feeSRatan Gupta ~Config() = default; 4137fb3feeSRatan Gupta Config(const Config&) = delete; 4237fb3feeSRatan Gupta Config& operator=(const Config&) = delete; 4337fb3feeSRatan Gupta Config(Config&&) = default; 4437fb3feeSRatan Gupta Config& operator=(Config&&) = default; 4537fb3feeSRatan Gupta 4637fb3feeSRatan Gupta /** @brief Constructor to put object onto bus at a D-Bus path. 4737fb3feeSRatan Gupta * @param[in] bus - Bus to attach to. 4837fb3feeSRatan Gupta * @param[in] path - The D-Bus object path to attach at. 4937fb3feeSRatan Gupta * @param[in] filePath - LDAP configuration file. 5037fb3feeSRatan Gupta * @param[in] caCertFile - LDAP's CA certificate file. 5137fb3feeSRatan Gupta * @param[in] secureLDAP - Specifies whether to use SSL or not. 5237fb3feeSRatan Gupta * @param[in] lDAPServerURI - LDAP URI of the server. 5337fb3feeSRatan Gupta * @param[in] lDAPBindDN - distinguished name with which to bind. 5437fb3feeSRatan Gupta * @param[in] lDAPBaseDN - distinguished name to use as search base. 5537fb3feeSRatan Gupta * @param[in] lDAPBindDNPassword - credentials with which to bind. 5637fb3feeSRatan Gupta * @param[in] lDAPSearchScope - the search scope. 5737fb3feeSRatan Gupta * @param[in] lDAPType - Specifies the LDAP server type which can be AD 5837fb3feeSRatan Gupta * or openLDAP. 5937fb3feeSRatan Gupta * @param[in] lDAPServiceEnabled - Specifies whether the service would be 6037fb3feeSRatan Gupta * enabled or not. 6137fb3feeSRatan Gupta * @param[in] groupNameAttribute - Specifies attribute name that contains 6237fb3feeSRatan Gupta * the name of the Group in the LDAP server. 6337fb3feeSRatan Gupta * @param[in] userNameAttribute - Specifies attribute name that contains 6437fb3feeSRatan Gupta * the username in the LDAP server. 6537fb3feeSRatan Gupta * 6637fb3feeSRatan Gupta * @param[in] parent - parent of config object. 6737fb3feeSRatan Gupta */ 6837fb3feeSRatan Gupta 6937fb3feeSRatan Gupta Config(sdbusplus::bus::bus& bus, const char* path, const char* filePath, 7037fb3feeSRatan Gupta const char* caCertFile, bool secureLDAP, std::string lDAPServerURI, 7137fb3feeSRatan Gupta std::string lDAPBindDN, std::string lDAPBaseDN, 7237fb3feeSRatan Gupta std::string&& lDAPBindDNPassword, 7337fb3feeSRatan Gupta ConfigIface::SearchScope lDAPSearchScope, ConfigIface::Type lDAPType, 7437fb3feeSRatan Gupta bool lDAPServiceEnabled, std::string groupNameAttribute, 7537fb3feeSRatan Gupta std::string userNameAttribute, ConfigMgr& parent); 7637fb3feeSRatan Gupta 7737fb3feeSRatan Gupta using ConfigIface::groupNameAttribute; 7837fb3feeSRatan Gupta using ConfigIface::lDAPBaseDN; 7937fb3feeSRatan Gupta using ConfigIface::lDAPBindDN; 8037fb3feeSRatan Gupta using ConfigIface::lDAPBindDNPassword; 8137fb3feeSRatan Gupta using ConfigIface::lDAPSearchScope; 8237fb3feeSRatan Gupta using ConfigIface::lDAPServerURI; 8337fb3feeSRatan Gupta using ConfigIface::lDAPType; 8437fb3feeSRatan Gupta using ConfigIface::setPropertyByName; 8537fb3feeSRatan Gupta using ConfigIface::userNameAttribute; 8637fb3feeSRatan Gupta using EnableIface::enabled; 8737fb3feeSRatan Gupta 8837fb3feeSRatan Gupta /** @brief Update the Server URI property. 8937fb3feeSRatan Gupta * @param[in] value - lDAPServerURI value to be updated. 9037fb3feeSRatan Gupta * @returns value of changed lDAPServerURI. 9137fb3feeSRatan Gupta */ 9237fb3feeSRatan Gupta std::string lDAPServerURI(std::string value) override; 9337fb3feeSRatan Gupta 9437fb3feeSRatan Gupta /** @brief Update the BindDN property. 9537fb3feeSRatan Gupta * @param[in] value - lDAPBindDN value to be updated. 9637fb3feeSRatan Gupta * @returns value of changed lDAPBindDN. 9737fb3feeSRatan Gupta */ 9837fb3feeSRatan Gupta std::string lDAPBindDN(std::string value) override; 9937fb3feeSRatan Gupta 10037fb3feeSRatan Gupta /** @brief Update the BaseDN property. 10137fb3feeSRatan Gupta * @param[in] value - lDAPBaseDN value to be updated. 10237fb3feeSRatan Gupta * @returns value of changed lDAPBaseDN. 10337fb3feeSRatan Gupta */ 10437fb3feeSRatan Gupta std::string lDAPBaseDN(std::string value) override; 10537fb3feeSRatan Gupta 10637fb3feeSRatan Gupta /** @brief Update the Search scope property. 10737fb3feeSRatan Gupta * @param[in] value - lDAPSearchScope value to be updated. 10837fb3feeSRatan Gupta * @returns value of changed lDAPSearchScope. 10937fb3feeSRatan Gupta */ 11037fb3feeSRatan Gupta ConfigIface::SearchScope 11137fb3feeSRatan Gupta lDAPSearchScope(ConfigIface::SearchScope value) override; 11237fb3feeSRatan Gupta 11337fb3feeSRatan Gupta /** @brief Update the LDAP Type property. 11437fb3feeSRatan Gupta * @param[in] value - lDAPType value to be updated. 11537fb3feeSRatan Gupta * @returns value of changed lDAPType. 11637fb3feeSRatan Gupta */ 11737fb3feeSRatan Gupta ConfigIface::Type lDAPType(ConfigIface::Type value) override; 11837fb3feeSRatan Gupta 11937fb3feeSRatan Gupta /** @brief Update the ldapServiceEnabled property. 12037fb3feeSRatan Gupta * @param[in] value - ldapServiceEnabled value to be updated. 12137fb3feeSRatan Gupta * @returns value of changed ldapServiceEnabled. 12237fb3feeSRatan Gupta */ 12337fb3feeSRatan Gupta bool enabled(bool value) override; 12437fb3feeSRatan Gupta 12537fb3feeSRatan Gupta /** @brief Update the userNameAttribute property. 12637fb3feeSRatan Gupta * @param[in] value - userNameAttribute value to be updated. 12737fb3feeSRatan Gupta * @returns value of changed userNameAttribute. 12837fb3feeSRatan Gupta */ 12937fb3feeSRatan Gupta std::string userNameAttribute(std::string value) override; 13037fb3feeSRatan Gupta 13137fb3feeSRatan Gupta /** @brief Update the groupNameAttribute property. 13237fb3feeSRatan Gupta * @param[in] value - groupNameAttribute value to be updated. 13337fb3feeSRatan Gupta * @returns value of changed groupNameAttribute. 13437fb3feeSRatan Gupta */ 13537fb3feeSRatan Gupta std::string groupNameAttribute(std::string value) override; 13637fb3feeSRatan Gupta 13737fb3feeSRatan Gupta /** @brief Update the BindDNPasword property. 13837fb3feeSRatan Gupta * @param[in] value - lDAPBindDNPassword value to be updated. 13937fb3feeSRatan Gupta * @returns value of changed lDAPBindDNPassword. 14037fb3feeSRatan Gupta */ 14137fb3feeSRatan Gupta std::string lDAPBindDNPassword(std::string value) override; 14237fb3feeSRatan Gupta 14337fb3feeSRatan Gupta bool secureLDAP; 14437fb3feeSRatan Gupta 14537fb3feeSRatan Gupta private: 14637fb3feeSRatan Gupta std::string lDAPBindPassword{}; 14737fb3feeSRatan Gupta std::string configFilePath{}; 14837fb3feeSRatan Gupta std::string tlsCacertFile{}; 14937fb3feeSRatan Gupta 15037fb3feeSRatan Gupta /** @brief Persistent sdbusplus D-Bus bus connection. */ 15137fb3feeSRatan Gupta sdbusplus::bus::bus& bus; 15237fb3feeSRatan Gupta 15337fb3feeSRatan Gupta /** @brief Create a new LDAP config file. 15437fb3feeSRatan Gupta */ 15537fb3feeSRatan Gupta virtual void writeConfig(); 15637fb3feeSRatan Gupta 15737fb3feeSRatan Gupta /** @brief reference to config manager object */ 15837fb3feeSRatan Gupta ConfigMgr& parent; 15937fb3feeSRatan Gupta 16037fb3feeSRatan Gupta friend class MockConfigMgr; 16137fb3feeSRatan Gupta }; 16237fb3feeSRatan Gupta 16337fb3feeSRatan Gupta } // namespace ldap 16437fb3feeSRatan Gupta } // namespace phosphor 165