Store and retrieve avatars in/from LDAP exclusively

No need to keep them in two places at the same time. We can fetch them
from LDAP whenever we want to do something with them.

app/services/ldap_manager/fetch_avatar.rb

@@ -0,0 +1,18 @@
+module LdapManager
+  class FetchAvatar < LdapManagerService
+    def initialize(cn:, ou: nil)
+      @cn = cn
+      @ou = ou
+    end
+
+    def call
+      treebase   = @ou ? "ou=#{@ou},cn=users,#{suffix}" : ldap_config["base"]
+      puts treebase.inspect
+      attributes = %w{ jpegPhoto }
+      filter     = Net::LDAP::Filter.eq("cn", @cn)
+
+      entry = ldap_client.search(base: treebase, filter: filter, attributes: attributes).first
+      entry.try(:jpegPhoto) ? entry.jpegPhoto.first : nil
+    end
+  end
+end

app/services/ldap_manager/update_avatar.rb

@@ -1,12 +1,27 @@
+require "image_processing/vips"
+
 module LdapManager
   class UpdateAvatar < LdapManagerService
-    def initialize(dn, img_data)
+    def initialize(dn, file)
       @dn = dn
-      @img_data = img_data
+      @img_data = process(file)
     end
 
     def call
       replace_attribute @dn, :jpegPhoto, @img_data
     end
+
+    private
+
+    def process(file)
+      processed = ImageProcessing::Vips
+        .resize_to_fill(512, 512)
+        .source(file)
+        .convert("jpeg")
+        .saver(strip: true)
+        .call
+
+      Base64.strict_encode64 processed.read
+    end
   end
 end

app/services/ldap_manager_service.rb

@@ -1,2 +1,5 @@
 class LdapManagerService < LdapService
+  def suffix
+    @suffix ||= ENV["LDAP_SUFFIX"] || "dc=kosmos,dc=org"
+  end
 end