haraka/haraka-plugin-ldap

'use strict';

const util      = require('util');
const constants = require('haraka-constants');

exports._verify_existence = function (address, callback, connection) {
    const pool = connection.server.notes.ldappool;
    function onError (err) {
        connection.logerror(`Could not verify address ${address}`)
        connection.logdebug(`${util.inspect(err)}`);
        callback(err, false);
    }
    if (!pool) return onError('LDAP Pool not found!');

    pool.get((err, client) => {
        if (err) return onError(err);

        const config = this._get_search_conf(address, connection);
        connection.logdebug(`Verifying existence: ${  util.inspect(config)}`);
        try {
            client.search(config.basedn, config, (search_error, res) => {
                if (search_error) { onError(search_error); }
                let entries = 0;
                res.on('searchEntry', (entry) => {
                    entries++;
                });
                res.on('error', onError);
                res.on('end', () => {
                    callback(null, entries > 0);
                });
            });
        }
        catch (e) {
            onError(e);
        }
    });
};

exports._get_search_conf = (address, connection) => {
    const pool = connection.server.notes.ldappool;
    let filter = pool.config.rcpt_to.searchfilter || '(&(objectclass=*)(mail=%a))';
    filter = filter.replace(/%a/g, address);
    return {
        basedn: pool.config.rcpt_to.basedn || pool.config.basedn,
        filter,
        scope: pool.config.rcpt_to.scope || pool.config.scope,
        attributes: [ 'dn' ]
    };
};

exports.check_rcpt = function (next, connection, params) {
    if (!params || !params[0] || !params[0].address) {
        connection.logerror(`Ignoring invalid call. Given connection.transaction: ${util.inspect(connection.transaction)}`);
        return next();
    }
    const rcpt = params[0].address();
    this._verify_existence(rcpt, (err, result) => {
        if (err) {
            connection.logerror(`Could not use LDAP for address check: ${err.message}`);
            next(constants.denysoft);
        }
        else if (result) {
            next(constants.ok);
        }
        else {
            next(constants.deny);
        }
    }, connection);
};