models

var (
	SectigoSMIMEIntermediatesCommonNames = []string{
		`GEANT Personal CA 4`,
		`GEANT Personal ECC CA 4`,
		`GEANT eScience Personal CA 4`,
		`GEANT eScience Personal ECC CA 4`,
		`GEANT Code Signing CA 4`,
	}

	HaricaSMIMEIntermediatesCommonNames = []string{
		`GEANT S/MIME ECC 1`,
		`GEANT S/MIME RSA 1`,
	}
)

var (
	LDAPFilterShortestPrefix shortestprefix.ShortestPrefixResult
	AvailableLDAPFilterNames []string
	LDAPFilterNamesSorted    []string
)

var (
	ITBSuffixesNoOE = map[string]bool{
		"CN=SCC-ITB-biju":                                 true,
		"CN=SCC-ITB-gesamt":                               true,
		"CN=SCC-ITB-gesamt-SndTo":                         true,
		"CN=SCC-ITB-gruppenverwalter":                     true,
		"CN=SCC-ITB-Manager":                              true,
		"CN=SCC-ITB-mitAdminKonto":                        true,
		"CN=SCC-ITB-mitAdminKontoPortal-Wissenswertes_ro": true,
		"CN=SCC-ITB-Portal_ro":                            true,
		"CN=SCC-ITB-Portal-Wissenswertes_ro":              true,
		"CN=SCC-ITB-XYZTEST":                              true,
		"CN=SCC-ITB-ZZZ":                                  true,
		"CN=SCC-ITB-ZZZ_KS":                               true,
	}
)

var (
	// LDAPFilter is a map of named LDAP filter templates
	LDAPFilter = map[string]LDAPFilterTemplate{

		"default": {
			Template: template.Must(template.New("Default").Parse(compactFilter(`
		(|
			(sAMAccountName={{- .Query -}})
			(proxyAddresses=smtp:{{- .Query -}}*)
			(mail={{- .Query -}}*)
			(userPrincipalName={{- .Query -}}*)
			(targetAddress=smtp:{{- .Query -}}*)
			(extensionAttribute9={{- .Query -}}*)
			(givenName={{- .Query -}})
			(sn={{- .Query -}}))
		`))),
			Description:     "The default filter searches names, email addresses, account names and a few associated attributes. Account names and personal names need to be fully specified.",
			DisplayPriority: 100,
		},
		"nonames": {
			Template: template.Must(template.New("NoNames").Parse(compactFilter(`
		(|
			(sAMAccountName={{- .Query -}})
			(proxyAddresses=smtp:{{- .Query -}}*)
			(mail={{- .Query -}}*)
			(userPrincipalName={{- .Query -}}*)
			(targetAddress=smtp:{{- .Query -}}*)
			(extensionAttribute9={{- .Query -}}*)
		)`))),
			Description:     "The same as the default filter, but without searching for personal names.",
			DisplayPriority: 80,
		},
		"extensive": {
			Template: template.Must(template.New("Extensive").Parse(compactFilter(`
		(|
			(sAMAccountName={{- .Query -}})
			(proxyAddresses=smtp:{{- .Query -}}*)
			(mail={{- .Query -}}*)
			(userPrincipalName={{- .Query -}}*)
			(targetAddress=smtp:{{- .Query -}}*)
			(extensionAttribute9={{- .Query -}}*)
			(givenName=*{{- .Query -}}*)
			(sn=*{{- .Query -}}*)
			(displayName=*{{- .Query -}}*)
		)`))),
			Description: "Searches a lot of attributes with wildcards on both sides of the query. This filter is slow and should be used with caution.",
		},
		"email": {
			Template: template.Must(template.New("EMail").Parse(compactFilter(`
		(|
			(proxyAddresses=smtp:{{- .Query -}}*)
			(mail={{- .Query -}}*)
			(targetAddress=smtp:{{- .Query -}}*)
		)`))),
			Description:     "Only searches email addresses.",
			DisplayPriority: 70,
		},
		"phone": {
			Template: template.Must(template.New("Phone").Parse(compactFilter(`
			(telephoneNumber=*{{- .Query -}})
		`))),
			Description: "Only searches phone numbers without extension. This is automatically used if the query looks like an internal phone number. Only finds phone numbers that people have published. Use the internal phone search [2] for better results.",
		},
		"account": {
			Template: template.Must(template.New("PrimaryAccount").Parse(compactFilter(`
		(|
			(sAMAccountName={{- .Query -}})
			(userPrincipalName={{- .Query -}}*))
		`))),
			Description: "Only searches account names and user principal names.",
		},
		"distinguishedName": {
			Template: template.Must(template.New("DistinguishedName").Parse(compactFilter(`
			(distinguishedName={{- .Query -}})
		`))),
			Description: "Searches the (full) distinguished name of an object. This is useful for finding a specific object. Only returns no or exactly one result.",
		},
		"itb": {
			Template: template.Must(template.New("DistinguishedName").Parse(compactFilter(`
			(CN=SCC-ITB-{{- .Query -}}*)
		`))),
			Description:     "Looks for ITB account for specific OUs. Use only the OU name as query. Append a wildcard to the search (search »foo« will find »SCC-ITB-FOO« as well as »SCC-ITB-FOOBAR«).",
			DisplayPriority: 55,
		},
		"itbexact": {
			Template: template.Must(template.New("DistinguishedName").Parse(compactFilter(`
			(CN=SCC-ITB-{{- .Query -}})
		`))),
			Description:     "Like itb but only finds exact matches.",
			DisplayPriority: 50,
		},
		"externalRedirect": {
			Template: template.Must(template.New("ExternalRedirect").Parse(compactFilter(`
			(&
				(mail=*)
				(targetAddress=*)
				(!(targetAddress=*.kit.edu)))
		`))),
			Description:     "Searches for external redirect addresses. This filter is slow and should be used with caution. The query is not used.",
			DisplayPriority: 0,
		},
	}
)