dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compute spoofed session with real and spoofed attributes (#1664)

Browse Source
This commit is contained in:
Christophe Maudoux 2019-03-09 13:05:44 +01:00
parent 09281f8d22
commit dfd286c9fa
1 changed files with 11 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/Impersonation.pm
View File

@ -86,14 +86,22 @@ sub run {
$self->logger->debug("Delete $k"); $self->logger->debug("Delete $k");
delete $req->{sessionInfo}->{$k}; delete $req->{sessionInfo}->{$k};
} }
$req->{user} = $spoofId;
$spoofSession = $self->_userDatas($req);
# Compute Macros and Groups with real and spoofed sessions
$req->{sessionInfo} = {%$realSession};
$req->{user} = $spoofId;
$spoofSession = $self->_userDatas($req);
return $req->error if $req->error; return $req->error if $req->error;
$spoofSession->{groups} ||= ''; # Update spoofed session
foreach (qw (_auth _userDB)) {
$self->logger->debug("Processing $_...");
$spk = "$self->{conf}->{impersonationPrefix}$_";
$spoofSession->{$_} = $realSession->{$spk};
}
# Merging SSO groups and hGroups & Dedup # Merging SSO groups and hGroups & Dedup
$spoofSession->{groups} ||= '';
if ( $self->{conf}->{impersonationMergeSSOgroups} ) { if ( $self->{conf}->{impersonationMergeSSOgroups} ) {
$self->userLogger->warn("MERGING SSO groups and hGroups..."); $self->userLogger->warn("MERGING SSO groups and hGroups...");
my $spg = "$self->{conf}->{impersonationPrefix}groups"; my $spg = "$self->{conf}->{impersonationPrefix}groups";
@ -116,14 +124,6 @@ sub run {
{ %{ $spoofSession->{hGroups} }, %{ $realSession->{$sphg} } }; { %{ $spoofSession->{hGroups} }, %{ $realSession->{$sphg} } };
} }
# Create spoofed session
foreach (qw (_auth _userDB)) {
$self->logger->debug("Processing $_...");
$spk = "$self->{conf}->{impersonationPrefix}$_";
$spoofSession->{$_} = $realSession->{$spk};
}
$spoofSession = { %$spoofSession, %$realSession };
# Main session # Main session
$self->p->updateSession( $req, $spoofSession ); $self->p->updateSession( $req, $spoofSession );
return PE_OK; return PE_OK;
@ -131,7 +131,6 @@ sub run {
sub _userDatas { sub _userDatas {
my ( $self, $req ) = @_; my ( $self, $req ) = @_;
$req->{sessionInfo} = {};
# Search user in database # Search user in database
$req->steps( [ $req->steps( [