#
#  Created by Luke Kanies on 2008-3-23.
#  Copyright (c) 2008. All rights reserved.
require 'puppet/util/ldap'

class Puppet::Util::Ldap::Connection
    attr_accessor :host, :port, :user, :password, :reset, :ssl

    attr_reader :connection

    # Return a default connection, using our default settings.
    def self.instance
        ssl = if Puppet[:ldaptls]
            :tls
                elsif Puppet[:ldapssl]
                    true
                else
                    false
                end

        options = {}
        options[:ssl] = ssl
        if user = Puppet.settings[:ldapuser] and user != ""
            options[:user] = user
            if pass = Puppet.settings[:ldappassword] and pass != ""
                options[:password] = pass
            end
        end

        new(Puppet[:ldapserver], Puppet[:ldapport], options)
    end

    def close
        connection.unbind if connection.bound?
    end

    def initialize(host, port, options = {})
        raise Puppet::Error, "Could not set up LDAP Connection: Missing ruby/ldap libraries" unless Puppet.features.ldap?

        @host, @port = host, port

        options.each do |param, value|
            begin
                send(param.to_s + "=", value)
            rescue
                raise ArgumentError, "LDAP connections do not support #{param} parameters"
            end
        end
    end

    # Create a per-connection unique name.
    def name
        [host, port, user, password, ssl].collect { |p| p.to_s }.join("/")
    end

    # Should we reset the connection?
    def reset?
        reset
    end

    # Start our ldap connection.
    def start
        begin
            case ssl
            when :tls
                @connection = LDAP::SSLConn.new(host, port, true)
            when true
                @connection = LDAP::SSLConn.new(host, port)
            else
                @connection = LDAP::Conn.new(host, port)
            end
            @connection.set_option(LDAP::LDAP_OPT_PROTOCOL_VERSION, 3)
            @connection.set_option(LDAP::LDAP_OPT_REFERRALS, LDAP::LDAP_OPT_ON)
            @connection.simple_bind(user, password)
        rescue => detail
            raise Puppet::Error, "Could not connect to LDAP: #{detail}"
        end
    end
end