package ldap

import (
	"fmt"
	"gitee.com/wuzheng0709/backend-gopkg/infrastructure/pkg/gin/log"

	"gitee.com/wuzheng0709/backend-gopkg/infrastructure/config"
	"github.com/go-ldap/ldap/v3"
	"golang.org/x/text/encoding/unicode"
)

/*
  @Author : lanyulei
*/

func LdapUpdatePwd(username string, oldPassword string, newPassword string) (err error) {
	err = ldapConnection()
	if err != nil {
		return
	}
	defer conn.Close()

	var userDn = fmt.Sprintf("cn=%v,%v", username, config.C.Ldap.Basedn)

	err = conn.Bind(userDn, oldPassword)
	if err != nil {
		log.Error("用户或密码错误。", err)
		return
	}

	sql2 := ldap.NewModifyRequest(userDn, nil)

	utf16 := unicode.UTF16(unicode.LittleEndian, unicode.IgnoreBOM)
	pwdEncoded, _ := utf16.NewEncoder().String(newPassword)

	sql2.Replace("unicodePwd", []string{pwdEncoded})
	sql2.Replace("userAccountControl", []string{"512"})

	if err = conn.Modify(sql2); err != nil {
		log.Error("密码修改失败，%v", err.Error())
		return
	}

	return
}