From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pmg-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id DE82B1FF165 for <inbox@lore.proxmox.com>; Wed, 26 Feb 2025 18:38:01 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id DBA091A733; Wed, 26 Feb 2025 18:37:59 +0100 (CET) From: Stoiko Ivanov <s.ivanov@proxmox.com> To: pmg-devel@lists.proxmox.com Date: Wed, 26 Feb 2025 18:37:35 +0100 Message-Id: <20250226173737.577869-2-s.ivanov@proxmox.com> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20250226173737.577869-1-s.ivanov@proxmox.com> References: <20250226173737.577869-1-s.ivanov@proxmox.com> MIME-Version: 1.0 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.064 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [plugin.pm, utils.pm] Subject: [pmg-devel] [PATCH pmg-api 1/3] auth: plugin: move schema definitions from Utils to Auth::Plugin X-BeenThere: pmg-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Mail Gateway development discussion <pmg-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pmg-devel>, <mailto:pmg-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pmg-devel/> List-Post: <mailto:pmg-devel@lists.proxmox.com> List-Help: <mailto:pmg-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pmg-devel>, <mailto:pmg-devel-request@lists.proxmox.com?subject=subscribe> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: pmg-devel-bounces@lists.proxmox.com Sender: "pmg-devel" <pmg-devel-bounces@lists.proxmox.com> it's the class that actually needs them, and where we want to keep the definitions. move happens in order to not have a cyclical include (PMG::Auth::Plugin including PMG::Utils for the schema definitions, and PMG::Utils including PMG::Auth::Plugin to get the realms from its config file). Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com> --- src/PMG/Auth/Plugin.pm | 19 ++++++++++++++++++- src/PMG/Utils.pm | 21 ++------------------- 2 files changed, 20 insertions(+), 20 deletions(-) diff --git a/src/PMG/Auth/Plugin.pm b/src/PMG/Auth/Plugin.pm index beb8fc4..f6792ac 100755 --- a/src/PMG/Auth/Plugin.pm +++ b/src/PMG/Auth/Plugin.pm @@ -6,7 +6,6 @@ use warnings; use Digest::SHA; use Encode; -use PMG::Utils; use PVE::INotify; use PVE::JSONSchema qw(get_standard_option); use PVE::SectionConfig; @@ -56,6 +55,24 @@ sub lock_realm_config { } } +sub is_valid_realm { + my ($realm) = @_; + return 0 if !$realm; + return 1 if $realm eq 'pam' || $realm eq 'quarantine'; # built-in ones + + my $cfg = PVE::INotify::read_file(PMG::Auth::Plugin::realm_conf_id()); + return exists($cfg->{ids}->{$realm}) ? 1 : 0; +} + +PVE::JSONSchema::register_format('pmg-realm', \&is_valid_realm); + +PVE::JSONSchema::register_standard_option('realm', { + description => "Authentication domain ID", + type => 'string', + format => 'pmg-realm', + maxLength => 32, +}); + my $realm_regex = qr/[A-Za-z][A-Za-z0-9\.\-_]+/; sub pmg_verify_realm { diff --git a/src/PMG/Utils.pm b/src/PMG/Utils.pm index d440876..33f80ae 100644 --- a/src/PMG/Utils.pm +++ b/src/PMG/Utils.pm @@ -34,6 +34,7 @@ use Time::Local; use Xdgmime; use PMG::AtomicFile; +use PMG::Auth::Plugin; use PMG::MIMEUtils; use PMG::MailQueue; use PMG::SMTPPrinter; @@ -52,30 +53,12 @@ try_decode_utf8 my $user_regex = qr![^\s:/]+!; sub valid_pmg_realm_regex { - my $cfg = PVE::INotify::read_file('realms.cfg'); + my $cfg = PVE::INotify::read_file(PMG::Auth::Plugin::realm_conf_id()); my $ids = $cfg->{ids}; my $realms = ['pam', 'quarantine', sort keys $cfg->{ids}->%* ]; return join('|', @$realms); } -sub is_valid_realm { - my ($realm) = @_; - return 0 if !$realm; - return 1 if $realm eq 'pam' || $realm eq 'quarantine'; # built-in ones - - my $cfg = PVE::INotify::read_file('realms.cfg'); - return exists($cfg->{ids}->{$realm}) ? 1 : 0; -} - -PVE::JSONSchema::register_format('pmg-realm', \&is_valid_realm); - -PVE::JSONSchema::register_standard_option('realm', { - description => "Authentication domain ID", - type => 'string', - format => 'pmg-realm', - maxLength => 32, -}); - PVE::JSONSchema::register_standard_option('pmg-starttime', { description => "Only consider entries newer than 'starttime' (unix epoch). Default is 'now - 1day'.", type => 'integer', -- 2.39.5 _______________________________________________ pmg-devel mailing list pmg-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pmg-devel