From 1d6e88565c48ee0799ac1df58d4a56444388f0c8 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Tue, 30 Oct 2007 15:07:02 -0400
Subject: Add memberOf API call to the XML-RPC interface Make find-groups use
 memberOf to have a prettier dispaly of members

---
 ipa-server/xmlrpc-server/funcs.py     | 31 +++++++++++++++++++++++++++++++
 ipa-server/xmlrpc-server/ipaxmlrpc.py |  1 +
 2 files changed, 32 insertions(+)

(limited to 'ipa-server/xmlrpc-server')

diff --git a/ipa-server/xmlrpc-server/funcs.py b/ipa-server/xmlrpc-server/funcs.py
index 257e84d2..9f878004 100644
--- a/ipa-server/xmlrpc-server/funcs.py
+++ b/ipa-server/xmlrpc-server/funcs.py
@@ -1061,6 +1061,37 @@ class IPAServer:
 
         return label_list
 
+    def memberOf(self, groupdn, attr_list, opts=None):
+        """Do a memberOf search of groupdn and return the attributes in
+           attr_list (an empty list returns everything)."""
+
+        # TODO - retrieve from config
+        timelimit = 2
+
+        searchlimit = 0
+
+        groupdn = self.__safe_filter(groupdn)
+        filter = "(memberOf=%s)" % groupdn
+
+        conn = self.getConnection(opts)
+        try:
+            results = conn.getListAsync(self.basedn, self.scope,
+                filter, attr_list, 0, None, None, timelimit,
+                searchlimit)
+        except ipaerror.exception_for(ipaerror.LDAP_NOT_FOUND):
+            results = [0]
+        finally:
+            self.releaseConnection(conn)
+
+        counter = results[0]
+        results = results[1:]
+
+        entries = [counter]
+        for e in results:
+            entries.append(self.convert_entry(e))
+
+        return entries
+
 def ldap_search_escape(match):
     """Escapes out nasty characters from the ldap search.
     See RFC 2254."""
diff --git a/ipa-server/xmlrpc-server/ipaxmlrpc.py b/ipa-server/xmlrpc-server/ipaxmlrpc.py
index 64e5fa68..86327365 100644
--- a/ipa-server/xmlrpc-server/ipaxmlrpc.py
+++ b/ipa-server/xmlrpc-server/ipaxmlrpc.py
@@ -350,6 +350,7 @@ def handler(req, profiling=False):
             h.register_function(f.update_group)
             h.register_function(f.delete_group)
             h.register_function(f.attrs_to_labels)
+            h.register_function(f.memberOf)
             h.handle_request(req)
         finally:
              pass
-- 
cgit