view release on metacpan or  search on metacpan

lib/Device/Firewall/PaloAlto/UserID.pm  view on Meta::CPAN

    $self->{fw}->_send_request(type => 'user-id', cmd => $xml_content);
}


sub _userid_xml {
    my %args = @_;

    $XML::LibXML::skipXMLDeclaration = 1;
    my $xml = XML::LibXML->load_xml(string => _user_id_xml_template());

    # Create the login / logout entry
    my $action_n = $xml->createElement($args{logout} ? 'logout' : 'login');
    
    # Create the login entry and set the user attributes;
    my $entry = $xml->createElement('entry');
    for my $attr(qw(name ip timeout)) {
        next unless defined $args{$attr};
        $entry->setAttribute( $attr, $args{$attr} );
    }

    # Access the login tag and append the entry.
    my ($payload_n) = $xml->findnodes('/uid-message/payload');
    $action_n->appendChild($entry);
    $payload_n->appendChild($action_n); 

    return $xml->toString;
}


sub _user_id_xml_template {
    return q{
<uid-message>
    <version>1.0</version>
    <type>update</type>
    <payload>
    </payload>
</uid-message>
    };
}
            
                        
1;

__END__

=pod

=encoding UTF-8

=head1 NAME

Device::Firewall::PaloAlto::UserID - Palo Alto User-ID dynamic mapping operations.

=head1 VERSION

version 0.1.9

=head1 SYNOPSIS

    # Add an IP to user address mapping
    $ fw->user_id->add_ip_mapping('192.0.2.1', 'localdomain\greg.foletta');

    # Remove anb IP o user address mapping
    $ fw->user_id->rm_ip_mapping('192.0.2.1', 'localdomain\greg.foletta');

=head1 DESCRIPTION

This module allows for the addition and removal of dynamic IP to user address mappings.

=head1 METHODS

=head2 add_ip_mapping

Adds a user to IP mapping.

    # Bind the IP to a user with a timeout of 10 minutes
    $fw->user_id->add_ip_mapping('192.0.2.1', 'localdomain\greg.foletta', 10);

    # If no timeout is specified, defaults to one hour
    $fw->user_id->add_ip_mapping('192.0.2.1', 'localdomain\greg.foletta');

=head2 rm_ip_mapping

Removes an IP mapping. Returns true if the mapping is removed, or L<Class::Error> if there is an error.

If a mapping does not exist and a remove is attempted, true is still returned as it is not an error to remove an entry that doesn't exist.

    $fw->user_id->rm_ip_mapping('192.0.2.1', 'localdomain\greg.foletta');

=head1 AUTHOR

Greg Foletta <greg@foletta.org>

=head1 COPYRIGHT AND LICENSE

This software is copyright (c) 2019 by Greg Foletta.

This is free software; you can redistribute it and/or modify it under
the same terms as the Perl 5 programming language system itself.

=cut