xref: /openbmc/phosphor-user-manager/phosphor-ldap-config/ldap_config.hpp (revision 25b9c9040c7abd3cf7cba2a7bd132b03e0e5dd65)
137fb3feeSRatan Gupta #pragma once
237fb3feeSRatan Gupta 
337fb3feeSRatan Gupta #include "config.h"
437fb3feeSRatan Gupta #include <xyz/openbmc_project/Object/Enable/server.hpp>
537fb3feeSRatan Gupta #include <xyz/openbmc_project/User/Ldap/Create/server.hpp>
637fb3feeSRatan Gupta #include <xyz/openbmc_project/User/Ldap/Config/server.hpp>
737fb3feeSRatan Gupta #include <xyz/openbmc_project/Common/error.hpp>
837fb3feeSRatan Gupta #include <phosphor-logging/log.hpp>
937fb3feeSRatan Gupta #include <phosphor-logging/elog.hpp>
1037fb3feeSRatan Gupta #include <phosphor-logging/elog-errors.hpp>
1137fb3feeSRatan Gupta #include <sdbusplus/bus.hpp>
1237fb3feeSRatan Gupta #include <sdbusplus/server/object.hpp>
1337fb3feeSRatan Gupta #include <string>
1437fb3feeSRatan Gupta 
1537fb3feeSRatan Gupta namespace phosphor
1637fb3feeSRatan Gupta {
1737fb3feeSRatan Gupta namespace ldap
1837fb3feeSRatan Gupta {
1937fb3feeSRatan Gupta 
2037fb3feeSRatan Gupta using namespace phosphor::logging;
2137fb3feeSRatan Gupta using namespace sdbusplus::xyz::openbmc_project::Common::Error;
2237fb3feeSRatan Gupta using ConfigIface = sdbusplus::xyz::openbmc_project::User::Ldap::server::Config;
2337fb3feeSRatan Gupta using EnableIface = sdbusplus::xyz::openbmc_project::Object::server::Enable;
24*25b9c904SRatan Gupta using Ifaces = sdbusplus::server::object::object<ConfigIface, EnableIface>;
2537fb3feeSRatan Gupta using CreateIface = sdbusplus::server::object::object<
2637fb3feeSRatan Gupta     sdbusplus::xyz::openbmc_project::User::Ldap::server::Create>;
2737fb3feeSRatan Gupta 
2837fb3feeSRatan Gupta class ConfigMgr;
2937fb3feeSRatan Gupta class MockConfigMgr;
3037fb3feeSRatan Gupta 
3137fb3feeSRatan Gupta /** @class Config
3237fb3feeSRatan Gupta  *  @brief Configuration for LDAP.
3337fb3feeSRatan Gupta  *  @details concrete implementation of xyz.openbmc_project.User.Ldap.Config
3437fb3feeSRatan Gupta  *  API, in order to provide LDAP configuration.
3537fb3feeSRatan Gupta  */
3637fb3feeSRatan Gupta class Config : public Ifaces
3737fb3feeSRatan Gupta {
3837fb3feeSRatan Gupta   public:
3937fb3feeSRatan Gupta     Config() = delete;
4037fb3feeSRatan Gupta     ~Config() = default;
4137fb3feeSRatan Gupta     Config(const Config&) = delete;
4237fb3feeSRatan Gupta     Config& operator=(const Config&) = delete;
4337fb3feeSRatan Gupta     Config(Config&&) = default;
4437fb3feeSRatan Gupta     Config& operator=(Config&&) = default;
4537fb3feeSRatan Gupta 
4637fb3feeSRatan Gupta     /** @brief Constructor to put object onto bus at a D-Bus path.
4737fb3feeSRatan Gupta      *  @param[in] bus - Bus to attach to.
4837fb3feeSRatan Gupta      *  @param[in] path - The D-Bus object path to attach at.
4937fb3feeSRatan Gupta      *  @param[in] filePath - LDAP configuration file.
5037fb3feeSRatan Gupta      *  @param[in] caCertFile - LDAP's CA certificate file.
5137fb3feeSRatan Gupta      *  @param[in] secureLDAP - Specifies whether to use SSL or not.
5237fb3feeSRatan Gupta      *  @param[in] lDAPServerURI - LDAP URI of the server.
5337fb3feeSRatan Gupta      *  @param[in] lDAPBindDN - distinguished name with which to bind.
5437fb3feeSRatan Gupta      *  @param[in] lDAPBaseDN -  distinguished name to use as search base.
5537fb3feeSRatan Gupta      *  @param[in] lDAPBindDNPassword - credentials with which to bind.
5637fb3feeSRatan Gupta      *  @param[in] lDAPSearchScope - the search scope.
5737fb3feeSRatan Gupta      *  @param[in] lDAPType - Specifies the LDAP server type which can be AD
5837fb3feeSRatan Gupta      *              or openLDAP.
5937fb3feeSRatan Gupta      *  @param[in] lDAPServiceEnabled - Specifies whether the service would be
6037fb3feeSRatan Gupta      *  enabled or not.
6137fb3feeSRatan Gupta      *  @param[in] groupNameAttribute - Specifies attribute name that contains
6237fb3feeSRatan Gupta      *             the name of the Group in the LDAP server.
6337fb3feeSRatan Gupta      *  @param[in] userNameAttribute - Specifies attribute name that contains
6437fb3feeSRatan Gupta      *             the username in the LDAP server.
6537fb3feeSRatan Gupta      *
6637fb3feeSRatan Gupta      *  @param[in] parent - parent of config object.
6737fb3feeSRatan Gupta      */
6837fb3feeSRatan Gupta 
6937fb3feeSRatan Gupta     Config(sdbusplus::bus::bus& bus, const char* path, const char* filePath,
7037fb3feeSRatan Gupta            const char* caCertFile, bool secureLDAP, std::string lDAPServerURI,
7137fb3feeSRatan Gupta            std::string lDAPBindDN, std::string lDAPBaseDN,
7237fb3feeSRatan Gupta            std::string&& lDAPBindDNPassword,
7337fb3feeSRatan Gupta            ConfigIface::SearchScope lDAPSearchScope, ConfigIface::Type lDAPType,
7437fb3feeSRatan Gupta            bool lDAPServiceEnabled, std::string groupNameAttribute,
7537fb3feeSRatan Gupta            std::string userNameAttribute, ConfigMgr& parent);
7637fb3feeSRatan Gupta 
7737fb3feeSRatan Gupta     using ConfigIface::groupNameAttribute;
7837fb3feeSRatan Gupta     using ConfigIface::lDAPBaseDN;
7937fb3feeSRatan Gupta     using ConfigIface::lDAPBindDN;
8037fb3feeSRatan Gupta     using ConfigIface::lDAPBindDNPassword;
8137fb3feeSRatan Gupta     using ConfigIface::lDAPSearchScope;
8237fb3feeSRatan Gupta     using ConfigIface::lDAPServerURI;
8337fb3feeSRatan Gupta     using ConfigIface::lDAPType;
8437fb3feeSRatan Gupta     using ConfigIface::setPropertyByName;
8537fb3feeSRatan Gupta     using ConfigIface::userNameAttribute;
8637fb3feeSRatan Gupta     using EnableIface::enabled;
8737fb3feeSRatan Gupta 
8837fb3feeSRatan Gupta     /** @brief Update the Server URI property.
8937fb3feeSRatan Gupta      *  @param[in] value - lDAPServerURI value to be updated.
9037fb3feeSRatan Gupta      *  @returns value of changed lDAPServerURI.
9137fb3feeSRatan Gupta      */
9237fb3feeSRatan Gupta     std::string lDAPServerURI(std::string value) override;
9337fb3feeSRatan Gupta 
9437fb3feeSRatan Gupta     /** @brief Update the BindDN property.
9537fb3feeSRatan Gupta      *  @param[in] value - lDAPBindDN value to be updated.
9637fb3feeSRatan Gupta      *  @returns value of changed lDAPBindDN.
9737fb3feeSRatan Gupta      */
9837fb3feeSRatan Gupta     std::string lDAPBindDN(std::string value) override;
9937fb3feeSRatan Gupta 
10037fb3feeSRatan Gupta     /** @brief Update the BaseDN property.
10137fb3feeSRatan Gupta      *  @param[in] value - lDAPBaseDN value to be updated.
10237fb3feeSRatan Gupta      *  @returns value of changed lDAPBaseDN.
10337fb3feeSRatan Gupta      */
10437fb3feeSRatan Gupta     std::string lDAPBaseDN(std::string value) override;
10537fb3feeSRatan Gupta 
10637fb3feeSRatan Gupta     /** @brief Update the Search scope property.
10737fb3feeSRatan Gupta      *  @param[in] value - lDAPSearchScope value to be updated.
10837fb3feeSRatan Gupta      *  @returns value of changed lDAPSearchScope.
10937fb3feeSRatan Gupta      */
11037fb3feeSRatan Gupta     ConfigIface::SearchScope
11137fb3feeSRatan Gupta         lDAPSearchScope(ConfigIface::SearchScope value) override;
11237fb3feeSRatan Gupta 
11337fb3feeSRatan Gupta     /** @brief Update the LDAP Type property.
11437fb3feeSRatan Gupta      *  @param[in] value - lDAPType value to be updated.
11537fb3feeSRatan Gupta      *  @returns value of changed lDAPType.
11637fb3feeSRatan Gupta      */
11737fb3feeSRatan Gupta     ConfigIface::Type lDAPType(ConfigIface::Type value) override;
11837fb3feeSRatan Gupta 
11937fb3feeSRatan Gupta     /** @brief Update the ldapServiceEnabled property.
12037fb3feeSRatan Gupta      *  @param[in] value - ldapServiceEnabled value to be updated.
12137fb3feeSRatan Gupta      *  @returns value of changed ldapServiceEnabled.
12237fb3feeSRatan Gupta      */
12337fb3feeSRatan Gupta     bool enabled(bool value) override;
12437fb3feeSRatan Gupta 
12537fb3feeSRatan Gupta     /** @brief Update the userNameAttribute property.
12637fb3feeSRatan Gupta      *  @param[in] value - userNameAttribute value to be updated.
12737fb3feeSRatan Gupta      *  @returns value of changed userNameAttribute.
12837fb3feeSRatan Gupta      */
12937fb3feeSRatan Gupta     std::string userNameAttribute(std::string value) override;
13037fb3feeSRatan Gupta 
13137fb3feeSRatan Gupta     /** @brief Update the groupNameAttribute property.
13237fb3feeSRatan Gupta      *  @param[in] value - groupNameAttribute value to be updated.
13337fb3feeSRatan Gupta      *  @returns value of changed groupNameAttribute.
13437fb3feeSRatan Gupta      */
13537fb3feeSRatan Gupta     std::string groupNameAttribute(std::string value) override;
13637fb3feeSRatan Gupta 
13737fb3feeSRatan Gupta     /** @brief Update the BindDNPasword property.
13837fb3feeSRatan Gupta      *  @param[in] value - lDAPBindDNPassword value to be updated.
13937fb3feeSRatan Gupta      *  @returns value of changed lDAPBindDNPassword.
14037fb3feeSRatan Gupta      */
14137fb3feeSRatan Gupta     std::string lDAPBindDNPassword(std::string value) override;
14237fb3feeSRatan Gupta 
14337fb3feeSRatan Gupta     bool secureLDAP;
14437fb3feeSRatan Gupta 
14537fb3feeSRatan Gupta   private:
14637fb3feeSRatan Gupta     std::string lDAPBindPassword{};
14737fb3feeSRatan Gupta     std::string configFilePath{};
14837fb3feeSRatan Gupta     std::string tlsCacertFile{};
14937fb3feeSRatan Gupta 
15037fb3feeSRatan Gupta     /** @brief Persistent sdbusplus D-Bus bus connection. */
15137fb3feeSRatan Gupta     sdbusplus::bus::bus& bus;
15237fb3feeSRatan Gupta 
15337fb3feeSRatan Gupta     /** @brief Create a new LDAP config file.
15437fb3feeSRatan Gupta      */
15537fb3feeSRatan Gupta     virtual void writeConfig();
15637fb3feeSRatan Gupta 
15737fb3feeSRatan Gupta     /** @brief reference to config manager object */
15837fb3feeSRatan Gupta     ConfigMgr& parent;
15937fb3feeSRatan Gupta 
16037fb3feeSRatan Gupta     friend class MockConfigMgr;
16137fb3feeSRatan Gupta };
16237fb3feeSRatan Gupta 
16337fb3feeSRatan Gupta } // namespace ldap
16437fb3feeSRatan Gupta } // namespace phosphor
165