add support of group/groupOfNames/groupOfUniqueNames (#6)

i-core · Nov 1, 2019 · 949b123 · 949b123
1 parent d8c1f47
commit 949b123
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/go.mod b/go.mod
@@ -19,3 +19,5 @@ require (
 	gopkg.in/asn1-ber.v1 v1.0.0-20170511165959-379148ca0225 // indirect
 	gopkg.in/ldap.v2 v2.5.1
 )
+
+go 1.13
diff --git a/internal/ldapclient/ldapclient.go b/internal/ldapclient/ldapclient.go
@@ -344,7 +344,10 @@ func (c *ldapConn) SearchUser(user string, attrs ...string) ([]map[string]interf
 }
 
 func (c *ldapConn) SearchUserRoles(user string, attrs ...string) ([]map[string]interface{}, error) {
-	query := fmt.Sprintf("(&(objectClass=group)(member=%s))", user)
+	query := fmt.Sprintf("(|"+
+		"(&(|(objectClass=group)(objectClass=groupOfNames))(member=%[1]s))"+
+		"(&(objectClass=groupOfUniqueNames)(uniqueMember=%[1]s))"+
+		")", user)
 	return c.searchEntries(c.RoleBaseDN, query, attrs)
 }