API support for LDAP authentication

Author: szh

.gitleaks.toml

@@ -0,0 +1,4 @@
+[allowlist]
+files = [
+  '''ldap-server.key.pem''',
+]

CHANGELOG.md

@@ -6,11 +6,14 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+## [8.0.0] - 2022-05-25
+
 ### Changed
 - Abstract authentication flow into new `AuthenticationStrategyInterface`
   [conjur-api-python#20](https://github.com/cyberark/conjur-api-python/pull/20)
+- Add support for LDAP authentication
+  [conjur-api-python#22](https://github.com/cyberark/conjur-api-python/pull/22)
 
-## [8.0.0] - 2022-05-25
 
 [Unreleased]: https://github.com/cyberark/conjur-api-python/compare/v8.0.0...HEAD
 [8.0.0]: https://github.com/cyberark/conjur-api-python/releases/tag/v8.0.0

README.md

@@ -75,13 +75,14 @@ ssl_verification_mode = SslVerificationMode.TRUST_STORE
 ConjurConnectionInfo is a data class containing all the non-credentials connection details.
 
 ```python
-connection_info = ConjurConnectionInfo(conjur_url=conjur_url,account=account,cert_file=None)
+connection_info = ConjurConnectionInfo(conjur_url=conjur_url,account=account,cert_file=None,service_id="ldap-service-id")
 ```
 
 * conjur_url - url of conjur server
 * account - the account which we want to connect to
 * cert_file - a path to conjur rootCA file. we need it if we initialize the client in `SslVerificationMode.SELF_SIGN`
   or `SslVerificationMode.CA_BUNDLE` mode
+* service_id - a service id for the Conjur authenticator. Required when using the ldap authenticator (see below) but not when using the default `authn` authenticator.
 
 #### Create credentials provider
 
@@ -99,7 +100,6 @@ credentials = CredentialsData(username=username, password=password, machine=conj
 credentials_provider = SimpleCredentialsProvider()
 credentials_provider.save(credentials)
 del credentials
-
 ```
 
 #### Create authentication strategy
@@ -110,22 +110,17 @@ The client also uses an authentication strategy in order to authenticate to conj
 We provide the `AuthnAuthenticationStrategy` for the default Conjur authenticator. Example use:
 
 ```python
-
 authn_provider = AuthnAuthenticationStrategy(credentials_provider)
-
 ```
 
-#### Create authentication strategy
-
-The client also uses an authentication strategy in order to authenticate to conjur. This approach allows us to implement different authentication strategies
-(e.g. `authn`, `authn-ldap`, `authn-k8s`) and to keep the authentication logic separate from the client implementation.
-
-We provide the `AuthnAuthenticationStrategy` for the default Conjur authenticator. Example use:
+We also provide the `LdapAuthenticationStrategy` for the ldap authenticator. Example use:
 
 ```python
-authn_provider = AuthnAuthenticationStrategy(credentials_provider)
+authn_provider = LdapAuthenticationStrategy(credentials_provider)
 ```
 
+When using the `LdapAuthenticationStrategy` make sure `connection_info` has a `service_id` specified.
+
 #### Creating the client and use it
 
 Now that we have created `connection_info` and `authn_provider`, we can create our client:

ci/test/conjur-deployment/configuration/initial_policy.yml

@@ -1 +1,23 @@
 - !variable one/password
+- !user alice
+
+- !policy
+  id: conjur/authn-ldap/test-service
+  body:
+  - !webservice
+
+  - !group users
+
+  - !permit
+    role: !group users
+    privilege: [ read, authenticate ]
+    resource: !webservice
+
+- !grant
+  role: !group conjur/authn-ldap/test-service/users
+  member: !user alice
+
+- !permit
+  role: !user alice
+  privileges: [ read ]
+  resource: !policy root

ci/test/conjur-deployment/configuration/ldap/certs/ca-chain.cert.pem

@@ -0,0 +1,134 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

ci/test/conjur-deployment/configuration/ldap/certs/dhparam.pem

@@ -0,0 +1,8 @@
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEAqtJnSpSax/oGFs7LnFsQ3m6oshC9la+uu53+aHBzT2XElLhVzFRe
+e91P87ezsE0R6frF45zzznYzfwRg/UDfBptbywa5mW6e2SJMWSggn43RA1rBezY2
+sYc8692HUX+opsMNBZMPqs7hN7cD1EbBo5fHDyRyhVlhHUZgavvDLIbjuSSVdGVw
+f6goxhkvBy6ft65rULzzZV/CidS6Y/KFi7NV0fwfi/Uog8wdQOH/4vu6GgsQwyJn
+/a2k/x4R3N5oBvs15MUSNuZcDmFooqZxdC+9FyjLL9/J3bdmnJpC20oaxr6Ul7/Q
+JQBPS9oag6saT7UAaaycejFkrhsGwKJt+wIBAg==
+-----END DH PARAMETERS-----

ci/test/conjur-deployment/configuration/ldap/certs/ldap-server.cert.pem

@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

ci/test/conjur-deployment/configuration/ldap/certs/ldap-server.key.pem

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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==
+-----END RSA PRIVATE KEY-----

ci/test/conjur-deployment/configuration/ldap/certs/root.cert.pem

@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----
+MIIFpzCCA4+gAwIBAgIUB1GKLDjTo4BfXEAj9gnWEPAN1gkwDQYJKoZIhvcNAQEL
+BQAwWzELMAkGA1UEBhMCVVMxFjAUBgNVBAgMDU1hc3NhY2h1c2V0dHMxETAPBgNV
+BAoMCEN5YmVyQXJrMQ8wDQYDVQQLDAZDb25qdXIxEDAOBgNVBAMMB1Jvb3QgQ0Ew
+HhcNMjAxMjAzMjMzMTI0WhcNNDAxMTI4MjMzMTI0WjBbMQswCQYDVQQGEwJVUzEW
+MBQGA1UECAwNTWFzc2FjaHVzZXR0czERMA8GA1UECgwIQ3liZXJBcmsxDzANBgNV
+BAsMBkNvbmp1cjEQMA4GA1UEAwwHUm9vdCBDQTCCAiIwDQYJKoZIhvcNAQEBBQAD
+ggIPADCCAgoCggIBANiIZg75PyCCBLYDNHox/d6UPkjcYki/1jk2a5q9VD8g/s8D
+JXHEkmWbHyQroehJNA/0R8WOeaeNAUj0Pa4QmYKbur2476edgV1SF7iwuHTYPGcK
+qHX0U3u1cfbIjzZFICUnavU9dJzX8qejjtULxWIQdjLp09U5oFKKMBUgs+hr+d1L
+UuY7BAc+dnd2cTmf4WFSeukT7eIWk7wGXJLUrLXRKYZCOTJDbd4TkPt+ch/3I5vW
+Z4QRVjy2abKH4+MWzfwj4gsnI/N/Uqec7dqtV8q8GeEyViYkUPhDKy9ZnwgJvPPn
+KH8yhdyKswcXD0XibfpAH8Yl//ysJbn2AF8hAV87dX2s0Wn/adQ3RcraeFEnQ7Xs
+JvD95nxDB+fSSThbds5/EI3KZ6hW3YOHQRjqbMbexNE9RUlKfiSx+El8XKiVO6df
+aq5wLw/5QrjET0RGln3UtXyXByZjb50IkLdg5FqNmYpMUi3/6qVTHZ2QkoN5+x7u
+AxLtRgYhViR5qoLuQ8y1s0Mm8S+CSl7GZVN4rAhXblIBiGkqP7X9x3BeTOsNk5Hk
+LNxAHYgGcWPpIzgRaQK3f2Pf1NyHRMWb02WfWBi0EMRbdojylMeKkceBKkMcmK4F
+x9mGaedqmu94ujQJ4/Xk6ys6J3AJ6Sef1cIb+5ZRvBVOv+rU9xzgPSa2Z9I/AgMB
+AAGjYzBhMB0GA1UdDgQWBBTpbzOrstTLiOeVgEY/p4WdzwbH1DAfBgNVHSMEGDAW
+gBTpbzOrstTLiOeVgEY/p4WdzwbH1DAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB
+/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAwTI7ULrg2Zkc73f0g+d1xUBXJAem
+t7s69I0XI//BDIuIfohgMAcdPEiwpPcqiOEO7lUGgPpMAMr7Nbe+ageNrrgx+XUr
+rksGKhME0vkIOllNj6HTz6p8CdA4OsRVUNG9vi7l5VpdW4+gQo8ecd53Rhgdep+N
+qwZCdf6WjbUjrzWKYh48aPBO1q4s9SOHu2c5B5JpfzcKiJWEsP8N46oIqtqntmlE
+t/ErfDCfb1GbLKToPxDKAXp3v8JligCyVoXeMFpQebqlqkZKm8yJpCxEM2R0HDEa
+nkbMwECQndRDZi2b/FrbGCoeN08JnC2rUbohapdXHQnrUi3/QbxJX3NcsTkYZhqe
+knZSO3taeDGv3zJ0lOf6eXslFXdz5skcmcGuuB5HPN6pS8yvDcTwJFkrnNFqFEf7
+izSByqIu6mf9vhemNM9ZKGUK+5GMFvnYaJpT7T8L4qKKRoXG15SbE7rv1x7Uee/n
+TfzI49brMUSOVMpqOT5lV2Nhmu0cHLoBraCVuSuA07wIgh2N9L/LP40Leryrf68q
+TDig4Xfmzf0FGkoRHqVQj+l24xompRZI75aFDIz5q/ZcZVz072j8dKfbKizXHem0
+FjN3K2g2Lk5vNRCFe6sAKaALdb3PqWyPO3ZQuI0r8BF485K9+FNuN8UpZNnxNT4x
+WAC3fSL+koywUnk=
+-----END CERTIFICATE-----

ci/test/conjur-deployment/configuration/ldap/ldap.ldif

@@ -0,0 +1,12 @@
+dn: uid=alice,dc=conjur,dc=net
+cn: Alice
+sn: Smith
+uid: alice
+givenName: alice
+mail: [email protected]
+objectClass: person
+objectClass: uidObject
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+objectClass: top
+userPassword: alice