Struct LdapSession 

pub(super) struct LdapSession {
    ldap: Ldap,
    driver: JoinHandle<()>,
    operation_timeout: Duration,
}

An LDAPS connection to a domain controller. Every request on it uses the operation timeout.

Fields

ldap: Ldap

driver: JoinHandle<()>

operation_timeout: Duration

Implementations

impl LdapSession

pub(super) async fn open_and_locate( creds: &Credentials<'_>, account_identity: &str, timeouts: Timeouts, phase: Phase, ) -> Result<(Self, String), IntegrationError>

Connects, binds as the delegated service account and resolves account_identity to a DN.

async fn connect( url: &str, ca_certificate: Option<&str>, timeouts: Timeouts, phase: Phase, ) -> Result<Self, IntegrationError>

async fn find_account_dn( &mut self, base_dn: &str, account_identity: &str, phase: Phase, ) -> Result<String, IntegrationError>

Exactly one user must match, since rotating the wrong account is worse than not rotating. Account state isn’t checked: a disabled account rotates, and then fails verification.

pub(super) async fn simple_bind( &mut self, dn: &str, password: &str, ) -> Result<(), LdapError>

pub(super) async fn close(self)

The unbind is bounded too: unbounded, it waits forever on a DC that stopped reading.

Trait Implementations

impl Drop for LdapSession

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl PasswordWriter for LdapSession

fn replace_password<'life0, 'life1, 'life2, 'async_trait>( &'life0 mut self, account_dn: &'life1 str, encoded: &'life2 [u8], ) -> Pin<Box<dyn Future<Output = Result<LdapResult, LdapError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

A directory rejection comes back in the [LdapResult]; Err means there was no answer.

fn bind_as_account<'life0, 'life1, 'life2, 'async_trait>( &'life0 mut self, account_dn: &'life1 str, password: &'life2 str, ) -> Pin<Box<dyn Future<Output = Result<(), LdapError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,