proxmox-mirrors/proxmox
1
0
Fork 1
mirror of https://git.proxmox.com/git/proxmox synced 2025-05-09 14:28:21 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

api-types: ldap: add verification regex for LDAP DNs

Browse Source 
Regex was taken from the LDAP implementation in PVE.

Signed-off-by: Lukas Wagner <l.wagner@proxmox.com>
This commit is contained in:
Lukas Wagner 2023-03-28 16:20:14 +02:00 committed by Thomas Lamprecht
parent 5720ba2dce
commit 3aba0d9aa6
1 changed files with 32 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
pbs-api-types/src/ldap.rs
View File

@ -1,6 +1,8 @@
use serde::{Deserialize, Serialize};
use proxmox_schema::{api, ApiStringFormat, ApiType, ArraySchema, Schema, StringSchema, Updater};
use proxmox_schema::{
api, const_regex, ApiStringFormat, ApiType, ArraySchema, Schema, StringSchema, Updater,
};
use super::{REALM_ID_SCHEMA, SINGLE_LINE_COMMENT_SCHEMA};
@ -45,6 +47,13 @@ pub enum LdapMode {
optional: true,
schema: USER_CLASSES_SCHEMA,
},
"base-dn" : {
schema: LDAP_DOMAIN_SCHEMA,
},
"bind-dn" : {
schema: LDAP_DOMAIN_SCHEMA,
optional: true,
}
},
)]
#[derive(Serialize, Deserialize, Updater, Clone)]
@ -133,6 +142,28 @@ pub enum RemoveVanished {
Properties,
}
macro_rules! DOMAIN_PART_REGEX {
() => {
r#"("[^"]+"|[^ ,+"/<>;=#][^,+"/<>;=]*[^ ,+"/<>;=]|[^ ,+"/<>;=#])"#
};
}
const_regex! {
pub LDAP_DOMAIN_REGEX = concat!(
r#"\w+="#,
DOMAIN_PART_REGEX!(),
r#"(,\s*\w+="#,
DOMAIN_PART_REGEX!(),
")*"
);
}
pub const LDAP_DOMAIN_FORMAT: ApiStringFormat = ApiStringFormat::Pattern(&LDAP_DOMAIN_REGEX);
pub const LDAP_DOMAIN_SCHEMA: Schema = StringSchema::new("LDAP Domain")
.format(&LDAP_DOMAIN_FORMAT)
.schema();
pub const SYNC_DEFAULTS_STRING_SCHEMA: Schema = StringSchema::new("sync defaults options")
.format(&ApiStringFormat::PropertyString(
&SyncDefaultsOptions::API_SCHEMA,