Add memberOf API call to the XML-RPC interface

Make find-groups use memberOf to have a prettier dispaly of members

2 files changed, 32 insertions, 0 deletions

diff --git a/ipa-server/xmlrpc-server/funcs.py b/ipa-server/xmlrpc-server/funcs.py
index 257e84d2e..9f8780048 100644
--- a/ipa-server/xmlrpc-server/funcs.py
+++ b/ipa-server/xmlrpc-server/funcs.py
@@ -1061,6 +1061,37 @@ class IPAServer:
 
         return label_list
 
+    def memberOf(self, groupdn, attr_list, opts=None):
+        """Do a memberOf search of groupdn and return the attributes in
+           attr_list (an empty list returns everything)."""
+
+        # TODO - retrieve from config
+        timelimit = 2
+
+        searchlimit = 0
+
+        groupdn = self.__safe_filter(groupdn)
+        filter = "(memberOf=%s)" % groupdn
+
+        conn = self.getConnection(opts)
+        try:
+            results = conn.getListAsync(self.basedn, self.scope,
+                filter, attr_list, 0, None, None, timelimit,
+                searchlimit)
+        except ipaerror.exception_for(ipaerror.LDAP_NOT_FOUND):
+            results = [0]
+        finally:
+            self.releaseConnection(conn)
+
+        counter = results[0]
+        results = results[1:]
+
+        entries = [counter]
+        for e in results:
+            entries.append(self.convert_entry(e))
+
+        return entries
+
 def ldap_search_escape(match):
     """Escapes out nasty characters from the ldap search.
     See RFC 2254."""
diff --git a/ipa-server/xmlrpc-server/ipaxmlrpc.py b/ipa-server/xmlrpc-server/ipaxmlrpc.py
index 64e5fa68c..863273659 100644
--- a/ipa-server/xmlrpc-server/ipaxmlrpc.py
+++ b/ipa-server/xmlrpc-server/ipaxmlrpc.py
@@ -350,6 +350,7 @@ def handler(req, profiling=False):
             h.register_function(f.update_group)
             h.register_function(f.delete_group)
             h.register_function(f.attrs_to_labels)
+            h.register_function(f.memberOf)
             h.handle_request(req)
         finally:
              pass