Add basic config setting for LDAP education backend

require LDAP support for Education resources to be explicitly enabled.
Default to a NOOP implementation if disabled.

services/graph/pkg/identity/ldap.go

@@ -40,6 +40,8 @@ type LDAP struct {
 	groupScope        int
 	groupAttributeMap groupAttributeMap
 
+	educationConfig educationConfig
+
 	logger *log.Logger
 	conn   ldap.Client
 }
@@ -90,6 +92,11 @@ func NewLDAPBackend(lc ldap.Client, config config.LDAP, logger *log.Logger) (*LD
 		return nil, fmt.Errorf("error configuring group scope: %w", err)
 	}
 
+	var educationConfig educationConfig
+	if educationConfig, err = newEducationConfig(config); err != nil {
+		return nil, fmt.Errorf("error setting up education resource config: %w", err)
+	}
+
 	return &LDAP{
 		useServerUUID:     config.UseServerUUID,
 		usePwModifyExOp:   config.UsePasswordModExOp,
@@ -103,6 +110,7 @@ func NewLDAPBackend(lc ldap.Client, config config.LDAP, logger *log.Logger) (*LD
 		groupObjectClass:  config.GroupObjectClass,
 		groupScope:        groupScope,
 		groupAttributeMap: gam,
+		educationConfig:   educationConfig,
 		logger:            logger,
 		conn:              lc,
 		writeEnabled:      config.WriteEnabled,

services/graph/pkg/identity/ldap_school.go

@@ -2,12 +2,15 @@ package identity
 
 import (
 	"context"
+	"fmt"
 	"net/url"
 
+	"github.com/go-ldap/ldap/v3"
 	libregraph "github.com/owncloud/libre-graph-api-go"
+	"github.com/owncloud/ocis/v2/services/graph/pkg/config"
 )
 
-type schoolConfig struct {
+type educationConfig struct {
 	schoolBaseDN       string
 	schoolFilter       string
 	schoolObjectClass  string
@@ -16,14 +19,37 @@ type schoolConfig struct {
 }
 
 type schoolAttributeMap struct {
-	displayname  string
+	displayName  string
 	schoolNumber string
 	id           string
 }
 
+func defaultEducationConfig() educationConfig {
+	return educationConfig{
+		schoolObjectClass:  "ocEducationSchool",
+		schoolScope:        ldap.ScopeWholeSubtree,
+		schoolAttributeMap: newSchoolAttributeMap(),
+	}
+}
+
+func newEducationConfig(config config.LDAP) (educationConfig, error) {
+	if config.EducationResourcesEnabled {
+		var err error
+		eduCfg := defaultEducationConfig()
+		eduCfg.schoolBaseDN = config.EducationConfig.SchoolBaseDN
+		if config.EducationConfig.SchoolSearchScope != "" {
+			if eduCfg.schoolScope, err = stringToScope(config.EducationConfig.SchoolSearchScope); err != nil {
+				return educationConfig{}, fmt.Errorf("error configuring school search scope: %w", err)
+			}
+		}
+		return eduCfg, nil
+	}
+	return educationConfig{}, nil
+}
+
 func newSchoolAttributeMap() schoolAttributeMap {
 	return schoolAttributeMap{
-		displayname:  "ou",
+		displayName:  "ou",
 		schoolNumber: "ocEducationSchoolNumber",
 		id:           "owncloudUUID",
 	}

services/graph/pkg/identity/noop_school.go

@@ -0,0 +1,71 @@
+package identity
+
+import (
+	"context"
+	"net/url"
+
+	libregraph "github.com/owncloud/libre-graph-api-go"
+)
+
+// NOOP is a dummy EducationBackend, doing nothing
+type NOOP struct{}
+
+// CreateSchool creates the supplied school in the identity backend.
+func (i *NOOP) CreateSchool(ctx context.Context, school libregraph.EducationSchool) (*libregraph.EducationSchool, error) {
+	return nil, errNotImplemented
+}
+
+// DeleteSchool deletes a given school, identified by id
+func (i *NOOP) DeleteSchool(ctx context.Context, id string) error {
+	return errNotImplemented
+}
+
+// GetSchool implements the EducationBackend interface for the NOOP backend.
+func (i *NOOP) GetSchool(ctx context.Context, nameOrID string, queryParam url.Values) (*libregraph.EducationSchool, error) {
+	return nil, errNotImplemented
+}
+
+// GetSchools implements the EducationBackend interface for the NOOP backend.
+func (i *NOOP) GetSchools(ctx context.Context, queryParam url.Values) ([]*libregraph.EducationSchool, error) {
+	return nil, errNotImplemented
+}
+
+// GetSchoolMembers implements the EducationBackend interface for the NOOP backend.
+func (i *NOOP) GetSchoolMembers(ctx context.Context, id string) ([]*libregraph.EducationUser, error) {
+	return nil, errNotImplemented
+}
+
+// AddMembersToSchool adds new members (reference by a slice of IDs) to supplied school in the identity backend.
+func (i *NOOP) AddMembersToSchool(ctx context.Context, schoolID string, memberID []string) error {
+	return errNotImplemented
+}
+
+// RemoveMemberFromSchool removes a single member (by ID) from a school
+func (i *NOOP) RemoveMemberFromSchool(ctx context.Context, schoolID string, memberID string) error {
+	return errNotImplemented
+}
+
+// CreateEducationUser creates a given education user in the identity backend.
+func (i *NOOP) CreateEducationUser(ctx context.Context, user libregraph.EducationUser) (*libregraph.EducationUser, error) {
+	return nil, errNotImplemented
+}
+
+// DeleteEducationUser deletes a given educationuser, identified by username or id, from the backend
+func (i *NOOP) DeleteEducationUser(ctx context.Context, nameOrID string) error {
+	return errNotImplemented
+}
+
+// UpdateEducationUser applies changes to given education user, identified by username or id
+func (i *NOOP) UpdateEducationUser(ctx context.Context, nameOrID string, user libregraph.EducationUser) (*libregraph.EducationUser, error) {
+	return nil, errNotImplemented
+}
+
+// GetEducationUser implements the EducationBackend interface for the NOOP backend.
+func (i *NOOP) GetEducationUser(ctx context.Context, nameOrID string, queryParam url.Values) (*libregraph.EducationUser, error) {
+	return nil, errNotImplemented
+}
+
+// GetEducationUsers implements the EducationBackend interface for the NOOP backend.
+func (i *NOOP) GetEducationUsers(ctx context.Context, queryParam url.Values) ([]*libregraph.EducationUser, error) {
+	return nil, errNotImplemented
+}