Current File : //usr/lib/python2.7/site-packages/salt/modules/ldapmod.pyo
�
���^c @@ s d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l m
Z
d d l m Z y" d d l
Z
d d l Z
e Z Wn e k
r� e Z n Xe j e � Z d Z d � Z d d � Z d � Z d d d d
� Z d e f d � � YZ d S(
ut
Salt interface to LDAP commands
:depends: - ldap Python module
:configuration: In order to connect to LDAP, certain configuration is required
in the minion config on the LDAP server. The minimum configuration items
that must be set are:
.. code-block:: yaml
ldap.basedn: dc=acme,dc=com (example values, adjust to suit)
If your LDAP server requires authentication then you must also set:
.. code-block:: yaml
ldap.anonymous: False
ldap.binddn: admin
ldap.bindpw: password
In addition, the following optional values may be set:
.. code-block:: yaml
ldap.server: localhost (default=localhost, see warning below)
ldap.port: 389 (default=389, standard port)
ldap.tls: False (default=False, no TLS)
ldap.no_verify: False (default=False, verify TLS)
ldap.anonymous: True (default=True, bind anonymous)
ldap.scope: 2 (default=2, ldap.SCOPE_SUBTREE)
ldap.attrs: [saltAttr] (default=None, return all attributes)
.. warning::
At the moment this module only recommends connection to LDAP services
listening on ``localhost``. This is deliberate to avoid the potentially
dangerous situation of multiple minions sending identical update commands
to the same LDAP server. It's easy enough to override this behavior, but
badness may ensue - you have been warned.
i ( t absolute_importt print_functiont unicode_literalsN( t six( t CommandExecutionErroru ldapc C@ s t r
t St d f S( u9
Only load this module if the ldap config is set
uG The ldapmod execution module cannot be loaded: ldap config not present.( t HAS_LDAPt __virtualname__t False( ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/ldapmod.pyt __virtual__C s c K@ s` | d k r | } n | | k r. | | } n t d d j | � � } t j j j | d t �S( u�
Return a value for 'name' from command line args then config file options.
Specify 'key' if the config file option is not the same as 'name'.
u
config.optionu ldap.{0}t to_strN( t Nonet __salt__t formatt saltt utilst datat decodet True( t namet keyt kwargst value( ( s8 /usr/lib/python2.7/site-packages/salt/modules/ldapmod.pyt _configN s
c K@ sO i } x9 d d d d d d d d g D] } t | | � | | <q% Wt | � j S( uP
Instantiate LDAP Connection class and return an LDAP connection object
u uriu serveru portu tlsu no_verifyu binddnu bindpwu anonymous( R t _LDAPConnectiont ldap( R t connargsR ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/ldapmod.pyt _connect\ s
c K@ sL | s t d d � } n | s- t d � } n | d k rB d } n | d k r] t d � } n t | � } t j � } t j d | | | | � | j | t | � | | � } t j � | } | d k r� t j t
| d d � � d
} n t j t
| d � � d } i | d
6t | � d 6i | d 6t j t
| d � � d 6d 6}
|
S( uz
Run an arbitrary LDAP query and return the results.
CLI Example:
.. code-block:: bash
salt 'ldaphost' ldap.search "filter=cn=myhost"
Return data:
.. code-block:: python
{'myhost': {'count': 1,
'results': [['cn=myhost,ou=hosts,o=acme,c=gb',
{'saltKeyValue': ['ntpserver=ntp.acme.local',
'foo=myfoo'],
'saltState': ['foo', 'bar']}]],
'time': {'human': '1.2ms', 'raw': '0.00123'}}}
Search and connection options can be overridden by specifying the relevant
option as key=value pairs, for example:
.. code-block:: bash
salt 'ldaphost' ldap.search filter=cn=myhost dn=ou=hosts,o=acme,c=gb
scope=1 attrs='' server='localhost' port='7393' tls=True bindpw='ssh'
u dnu basednu scopeu u attrsu= Running LDAP search with filter:%s, dn:%s, scope:%s, attrs:%sg�������?i� i u msi u su resultsu countu humani u rawu timeN( R R
R t timet logt debugt search_st intR t text_typet roundt len( t filtert dnt scopet attrsR t _ldapt startt resultst elapsedt elapsed_ht ret( ( s8 /usr/lib/python2.7/site-packages/salt/modules/ldapmod.pyt searchh s. ! #
*R c B@ s e Z d Z d � Z RS( u#
Setup an LDAP connection.
c
C@ s< | | _ | | _ | | _ | | _ | | _ | | _ | j d k rc d j | j | j � | _ n y� | r� t j t j t j
� n t j d j | j � � | _ d | j _ | j j t j
d � | j r� | j j � n | s | j j | j | j � n Wn4 t k
r7} t d j | j | j | � � � n Xd S( uE
Bind to an LDAP directory using passed credentials.
u u ldap://{0}:{1}u {0}i i u- Failed to bind to LDAP server {0} as {1}: {2}N( t urit servert portt tlst binddnt bindpwR R t
set_optiont OPT_X_TLS_REQUIRE_CERTt OPT_X_TLS_NEVERt
initializet protocol_versiont
OPT_REFERRALSt start_tls_st
simple_bind_st ExceptionR (
t selfR. R/ R0 R1 t no_verifyR2 R3 t anonymoust
ldap_error( ( s8 /usr/lib/python2.7/site-packages/salt/modules/ldapmod.pyt __init__� s0
( t __name__t
__module__t __doc__RA ( ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/ldapmod.pyR � s ( RD t
__future__R R R t loggingR t salt.utils.dataR
t salt.extR t salt.exceptionsR R t ldap.modlistR R t ImportErrorR t getLoggerRB R R R R
R R R- t objectR ( ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/ldapmod.pyt <module>) s*
;
Mini Shell