X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2Finternal%2Fauth%2FCmsUserManagerImpl.java;h=dfb0a56a27a554691706907b22f014f22a63ff23;hb=81d9084e2c9fd9d33ca1d864171d28f9564647d8;hp=782487a9ad7b083275e3db8d65810f750d0fbdcd;hpb=a0a4cc2c5657faec904e2de279efa4a165d59ac8;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms/src/org/argeo/cms/internal/auth/CmsUserManagerImpl.java b/org.argeo.cms/src/org/argeo/cms/internal/auth/CmsUserManagerImpl.java
index 782487a9a..dfb0a56a2 100644
--- a/org.argeo.cms/src/org/argeo/cms/internal/auth/CmsUserManagerImpl.java
+++ b/org.argeo.cms/src/org/argeo/cms/internal/auth/CmsUserManagerImpl.java
@@ -8,15 +8,15 @@ import java.time.ZoneOffset;
 import java.time.ZonedDateTime;
 import java.util.ArrayList;
 import java.util.Arrays;
-import java.util.Collections;
 import java.util.Dictionary;
 import java.util.HashMap;
 import java.util.HashSet;
-import java.util.Hashtable;
-import java.util.LinkedHashMap;
 import java.util.List;
 import java.util.Map;
+import java.util.NavigableMap;
 import java.util.Set;
+import java.util.TreeMap;
+import java.util.TreeSet;
 import java.util.UUID;
 
 import javax.naming.InvalidNameException;
@@ -28,13 +28,14 @@ import org.argeo.api.cms.CmsLog;
 import org.argeo.cms.CmsUserManager;
 import org.argeo.cms.auth.CurrentUser;
 import org.argeo.cms.auth.UserAdminUtils;
-import org.argeo.osgi.transaction.WorkTransaction;
+import org.argeo.osgi.useradmin.AggregatingUserAdmin;
 import org.argeo.osgi.useradmin.TokenUtils;
-import org.argeo.osgi.useradmin.UserAdminConf;
 import org.argeo.osgi.useradmin.UserDirectory;
+import org.argeo.util.directory.DirectoryConf;
+import org.argeo.util.directory.ldap.SharedSecret;
 import org.argeo.util.naming.LdapAttrs;
 import org.argeo.util.naming.NamingUtils;
-import org.argeo.util.naming.SharedSecret;
+import org.argeo.util.transaction.WorkTransaction;
 import org.osgi.framework.InvalidSyntaxException;
 import org.osgi.service.useradmin.Authorization;
 import org.osgi.service.useradmin.Group;
@@ -61,8 +62,18 @@ public class CmsUserManagerImpl implements CmsUserManager {
 //	private Map<String, String> serviceProperties;
 	private WorkTransaction userTransaction;
 
-	private Map<UserDirectory, Hashtable<String, Object>> userDirectories = Collections
-			.synchronizedMap(new LinkedHashMap<>());
+//	private Map<UserDirectory, Hashtable<String, Object>> userDirectories = Collections
+//			.synchronizedMap(new LinkedHashMap<>());
+
+	private Set<UserDirectory> userDirectories = new HashSet<>();
+
+	public void start() {
+		log.debug(() -> "CMS user manager available");
+	}
+
+	public void stop() {
+
+	}
 
 	@Override
 	public String getMyMail() {
@@ -227,9 +238,9 @@ public class CmsUserManagerImpl implements CmsUserManager {
 
 	public Map<String, String> getKnownBaseDns(boolean onlyWritable) {
 		Map<String, String> dns = new HashMap<String, String>();
-		for (UserDirectory userDirectory : userDirectories.keySet()) {
+		for (UserDirectory userDirectory : userDirectories) {
 			Boolean readOnly = userDirectory.isReadOnly();
-			String baseDn = userDirectory.getBasePath();
+			String baseDn = userDirectory.getContext();
 
 			if (onlyWritable && readOnly)
 				continue;
@@ -237,20 +248,26 @@ public class CmsUserManagerImpl implements CmsUserManager {
 				continue;
 			if (baseDn.equalsIgnoreCase(CmsConstants.TOKENS_BASEDN))
 				continue;
-			dns.put(baseDn, UserAdminConf.propertiesAsUri(userDirectories.get(userDirectory)).toString());
+			dns.put(baseDn, DirectoryConf.propertiesAsUri(userDirectory.getProperties()).toString());
 
 		}
 		return dns;
 	}
 
+	public Set<UserDirectory> getUserDirectories() {
+		TreeSet<UserDirectory> res = new TreeSet<>((o1, o2) -> o1.getContext().compareTo(o2.getContext()));
+		res.addAll(userDirectories);
+		return res;
+	}
+
 	public String buildDistinguishedName(String localId, String baseDn, int type) {
 		Map<String, String> dns = getKnownBaseDns(true);
-		Dictionary<String, ?> props = UserAdminConf.uriAsProperties(dns.get(baseDn));
+		Dictionary<String, ?> props = DirectoryConf.uriAsProperties(dns.get(baseDn));
 		String dn = null;
 		if (Role.GROUP == type)
-			dn = LdapAttrs.cn.name() + "=" + localId + "," + UserAdminConf.groupBase.getValue(props) + "," + baseDn;
+			dn = LdapAttrs.cn.name() + "=" + localId + "," + DirectoryConf.groupBase.getValue(props) + "," + baseDn;
 		else if (Role.USER == type)
-			dn = LdapAttrs.uid.name() + "=" + localId + "," + UserAdminConf.userBase.getValue(props) + "," + baseDn;
+			dn = LdapAttrs.uid.name() + "=" + localId + "," + DirectoryConf.userBase.getValue(props) + "," + baseDn;
 		else
 			throw new IllegalStateException("Unknown role type. " + "Cannot deduce dn for " + localId);
 		return dn;
@@ -431,6 +448,20 @@ public class CmsUserManagerImpl implements CmsUserManager {
 		}
 	}
 
+	@Override
+	public UserDirectory getDirectory(Role user) {
+		String name = user.getName();
+		NavigableMap<String, UserDirectory> possible = new TreeMap<>();
+		for (UserDirectory userDirectory : userDirectories) {
+			if (name.endsWith(userDirectory.getContext())) {
+				possible.put(userDirectory.getContext(), userDirectory);
+			}
+		}
+		if (possible.size() == 0)
+			throw new IllegalStateException("No user directory found for user " + name);
+		return possible.lastEntry().getValue();
+	}
+
 //	public User createUserFromPerson(Node person) {
 //		String email = JcrUtils.get(person, LdapAttrs.mail.property());
 //		String dn = buildDefaultDN(email, Role.USER);
@@ -473,6 +504,13 @@ public class CmsUserManagerImpl implements CmsUserManager {
 	/* DEPENDENCY INJECTION */
 	public void setUserAdmin(UserAdmin userAdmin) {
 		this.userAdmin = userAdmin;
+
+		if (userAdmin instanceof AggregatingUserAdmin) {
+			userDirectories = ((AggregatingUserAdmin) userAdmin).getUserDirectories();
+		} else {
+			throw new IllegalArgumentException("Only " + AggregatingUserAdmin.class.getName() + " is supported.");
+		}
+
 //		this.serviceProperties = serviceProperties;
 	}
 
@@ -480,12 +518,12 @@ public class CmsUserManagerImpl implements CmsUserManager {
 		this.userTransaction = userTransaction;
 	}
 
-	public void addUserDirectory(UserDirectory userDirectory, Map<String, Object> properties) {
-		userDirectories.put(userDirectory, new Hashtable<>(properties));
-	}
-
-	public void removeUserDirectory(UserDirectory userDirectory, Map<String, Object> properties) {
-		userDirectories.remove(userDirectory);
-	}
+//	public void addUserDirectory(UserDirectory userDirectory, Map<String, Object> properties) {
+//		userDirectories.put(userDirectory, new Hashtable<>(properties));
+//	}
+//
+//	public void removeUserDirectory(UserDirectory userDirectory, Map<String, Object> properties) {
+//		userDirectories.remove(userDirectory);
+//	}
 
 }