# Authors: Rob Crittenden # # Copyright (C) 2007 Red Hat # see file 'COPYING' for use and warranty information # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License as # published by the Free Software Foundation; version 2 only # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # import sys sys.path.insert(0, ".") sys.path.insert(0, "..") import ldap from ipalib.conn import context from ipalib import ipautil # temporary import krbV krbctx = krbV.default_context() realm = krbctx.default_realm basedn = ipautil.realm_to_suffix(realm) def convert_entry(ent): entry = dict(ent.data) entry['dn'] = ent.dn # For now convert single entry lists to a string for the ui. # TODO: we need to deal with multi-values better for key,value in entry.iteritems(): if isinstance(value,list) or isinstance(value,tuple): if len(value) == 0: entry[key] = '' elif len(value) == 1: entry[key] = value[0] return entry def convert_scalar_values(orig_dict): """LDAP update dicts expect all values to be a list (except for dn). This method converts single entries to a list.""" new_dict={} for (k,v) in orig_dict.iteritems(): if not isinstance(v, list) and k != 'dn': v = [v] new_dict[k] = v return new_dict # TODO: rethink the get_entry vs get_list API calls. # they currently restrict the data coming back without # restricting scope. For now adding a get_base/sub_entry() # calls, but the API isn't great. def get_entry (base, scope, searchfilter, sattrs=None): """Get a specific entry (with a parametized scope). Return as a dict of values. Multi-valued fields are represented as lists. """ ent="" ent = context.conn.getConn().getEntry(base, scope, searchfilter, sattrs) return convert_entry(ent) def get_base_entry (base, searchfilter, sattrs=None): """Get a specific entry (with a scope of BASE). Return as a dict of values. Multi-valued fields are represented as lists. """ return get_entry(base, ldap.SCOPE_BASE, searchfilter, sattrs) def get_sub_entry (base, searchfilter, sattrs=None): """Get a specific entry (with a scope of SUB). Return as a dict of values. Multi-valued fields are represented as lists. """ return get_entry(base, ldap.SCOPE_SUBTREE, searchfilter, sattrs) def get_list (base, searchfilter, sattrs=None): """Gets a list of entries. Each is converted to a dict of values. Multi-valued fields are represented as lists. """ entries = [] entries = context.conn.getConn().getList(base, ldap.SCOPE_SUBTREE, searchfilter, sattrs) return map(convert_entry, entries) def update_entry (oldentry, newentry): """Update an LDAP entry oldentry is a dict newentry is a dict """ oldentry = convert_scalar_values(oldentry) newentry = convert_scalar_values(newentry) # Should be able to get this from either the old or new entry # but just in case someone has decided to try changing it, use the # original try: moddn = oldentry['dn'] except KeyError, e: # FIXME: return a missing DN error message raise e res = context.conn.getConn().updateEntry(moddn, oldentry, newentry) return res def uniq_list(x): """Return a unique list, preserving order and ignoring case""" myset = {} return [set.setdefault(e.lower(),e) for e in x if e.lower() not in myset] def get_schema(): """Retrieves the current LDAP schema from the LDAP server.""" schema_entry = get_base_entry("", "objectclass=*", ['dn','subschemasubentry']) schema_cn = schema_entry.get('subschemasubentry') schema = get_base_entry(schema_cn, "objectclass=*", ['*']) return schema def get_objectclasses(): """Returns a list of available objectclasses that the LDAP server supports. This parses out the syntax, attributes, etc and JUST returns a lower-case list of the names.""" schema = get_schema() objectclasses = schema.get('objectclasses') # Convert this list into something more readable result = [] for i in range(len(objectclasses)): oc = objectclasses[i].lower().split(" ") result.append(oc[3].replace("'","")) return result