# IBM(c) 2010 EPL license http://www.eclipse.org/legal/epl-v10.html
package xCAT_plugin::activedirectory;
BEGIN
{
      $::XCATROOT = $ENV{'XCATROOT'} ? $ENV{'XCATROOT'} : '/opt/xcat';
}
my $callback;
use lib "$::XCATROOT/lib/perl";
use Getopt::Long;
use xCAT::ADUtils;
use Net::DNS;

sub handled_commands { 
    return {
        addclusteruser => 'site:directoryprovider',
        addclouduser => 'site:directoryprovider',
    };
}

sub process_request {
    my $request = shift;
    my $command = $request->{command}->[0];
    $callback = shift;
    my $doreq = shift;
    use Data::Dumper;
    if ($command =~ /add.*user/) { #user management command, adding
        my $homedir;
        my $fullname;
        my $gid;
        my $uid;
        my $ou;
        @ARGV=@{$request->{arg}};
        Getopt::Long::Configure("bundling");
        Getopt::Long::Configure("no_pass_through");

         if (!GetOptions(
            'd=s' => \$homedir,
            'c=s' => \$fullname,
            'g=s' => \$gid,
            'o=s' => \$ou,
            'u=s' => \$uid)) {
             die "TODO: usage message";
         }
         my $username = shift @ARGV;
         my $domain;
         my $sitetab = xCAT::Table->new('site');
         if ($username =~ /@/) {
             ($username,$domain) = split /@/,$username;
             $domain = lc($domain);
         } else {
             $domain = $sitetab->getAttribs({key=>'domain'},['value']);
             unless ($domain and $domain->{value}) { 
                 sendmsg([1,"Domain not provided and none set in site table"]);
             }
             $domain = $domain->{value};
         }
         #TODO: if multi-domain support implemented, use the domains table to reference between realm and domain  
         my $server = $sitetab->getAttribs({key=>'directoryserver'},['value']);
         if ($server and $server->{value}) {
             $server = $server->{value};
         } else {
             my $res = Net::DNS::Resolver->new;
             my $query = $res->query("_ldap._tcp.$domain","SRV");
             if ($query) {
                 foreach my $srec ($query->answer) {
                     $server = $srec->{target};
                 }
             }
             unless ($server) {
                 sendmsg([1,"Unable to determine a directory server to communicate with, try site.directoryserver"]);
             }
         }

         my $realm = $sitetab->getAttribs({key=>'realm'},['value']);
         if ($realm and $realm->{value}) {
             $realm = $realm->{value};
         } else {
             $realm = uc($domain);
             $realm =~ s/\.$//; #remove trailing dot if provided
         }
         #my $domainstab = xCAT::Table->new('domains');
         #$realm = $domainstab->getAttribs({domain=>$domain},
         my $passtab = xCAT::Table->new('passwd');
         my $adpent = $passtab->getAttribs({key=>'activedirectory'},[qw/username password/]);
         unless ($adpent and $adpent->{username} and $adpent->{password}) {
             sendmsg([1,"activedirectory entry missing from passwd table"]);
             return 1;
         }

         my $err = xCAT::ADUtils::krb_login(username=>$adpent->{username},password=>$adpent->{password},realm=>$realm);
         if ($err) {
             sendmsg([1,"Error authenticating to Active Directory"]);
             return 1;
         }
         my %args = ( 
            username => $username,
            dnsdomain => $domain,
            directoryserver=> $server,
        );
         if ($fullname) { $args{fullname} = $fullname };
         if ($ou)  { $args{ou} = $ou };
         if ($request->{environment} and 
             $request->{environment}->[0]->{XCAT_USERPASS}) {
             $args{password} = $request->{environment}->[0]->{XCAT_USERPASS}->[0];
         }
        #TODO: args password
         if (defined $gid) { $args{gid} = $gid };
         if (defined $uid) { $args{uid} = $uid };
        #TODO: smbHome for windows
         if (defined $homedir) { $args{homedir} = $homedir };
         my $ret = xCAT::ADUtils::add_user_account(%args);
         if (ref $ret and $ret->{error}) {
             sendmsg([1,$ret->{error}]);
         }
    }
        

}

sub sendmsg {
    my $text = shift;
    my $node = shift;
    my $descr;
    my $rc;
    if (ref $text eq 'HASH') {
        die "not right now";
    } elsif (ref $text eq 'ARRAY') {
        $rc = $text->[0];
        $text = $text->[1];
    }
    if ($text =~ /:/) {
        ($descr,$text) = split /:/,$text,2;
    }
    $text =~ s/^ *//;
    $text =~ s/ *$//;
    my $msg;
    my $curptr;
    if ($node) {
        $msg->{node}=[{name => [$node]}];
        $curptr=$msg->{node}->[0];
    } else {
        $msg = {};
        $curptr = $msg;
    }
    if ($rc) {
        $curptr->{errorcode}=[$rc];
        $curptr->{error}=[$text];
        $curptr=$curptr->{error}->[0];
    } else {
        $curptr->{data}=[{contents=>[$text]}];
        $curptr=$curptr->{data}->[0];
        if ($descr) { $curptr->{desc}=[$descr]; }
    }
#        print $outfd freeze([$msg]);
#        print $outfd "\nENDOFFREEZE6sK4ci\n";
#        yield;
#        waitforack($outfd);
    $callback->($msg);
}
1;