X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=UDLdap.py;h=01553459bcac7d769faca1a08d9fb600d3d85157;hb=454bfc602780c1eb98912615ccf35f312a97a9d2;hp=4f83137f1e892468ba27fa3abf2a94589f41b565;hpb=9c3400fed701494b24575a602d25a83ae1815b72;p=mirror%2Fuserdir-ldap.git diff --git a/UDLdap.py b/UDLdap.py index 4f83137..0155345 100644 --- a/UDLdap.py +++ b/UDLdap.py @@ -3,8 +3,10 @@ import time import userdir_ldap class Account: - array_values = ['keyFingerPrint', 'mailWhitelist', 'mailRBL', 'mailRHSBL', 'supplementaryGid'] - int_values = ['shadowExpire', 'gidNumber'] + array_values = ['objectClass', 'keyFingerPrint', 'mailWhitelist', 'mailRBL', + 'mailRHSBL', 'supplementaryGid', 'sshRSAAuthKey', + 'sudoPassword', 'dnsZoneEntry', 'allowedHost'] + int_values = ['shadowExpire', 'gidNumber', 'uidNumber'] defaults = { 'accountStatus': 'active', 'keyFingerPrint': [] @@ -14,11 +16,9 @@ class Account: def from_search(ldap_connection, base, user): searchresult = ldap_connection.search_s(base, ldap.SCOPE_SUBTREE, 'uid=%s'%(user)) if len(searchresult) < 1: - sys.stderr.write("No such user: %s\n"%(user)) - return + raise IndexError, "No such user: %s\n"%(user) elif len(searchresult) > 1: - sys.stderr.write("More than one hit when getting %s\n"%(user)) - return + raise IndexError, "More than one hit when getting %s\n"%(user) else: return Account(searchresult[0][0], searchresult[0][1]) @@ -30,11 +30,12 @@ class Account: if key in self.attributes: if key in self.array_values: return self.attributes[key] - elif key in self.int_values: - if len(self.attributes[key]) == 1: - return int(self.attributes[key][0]) - else: - raise ValueError, 'non-array value has not exactly one value' + + if not len(self.attributes[key]) == 1: + raise ValueError, 'non-array value has not exactly one value' + + if key in self.int_values: + return int(self.attributes[key][0]) else: return self.attributes[key][0] elif key in self.defaults: @@ -54,10 +55,17 @@ class Account: def pw_active(self): if self['userPassword'] == '{crypt}*LK*': return False - if self['userPassword'].startswith("!"): + if self['userPassword'].startswith("{crypt}!"): return False return True + def get_password(self): + p = self['userPassword'] + if not p.startswith('{crypt}') or len(p) > 50: + return p + else: + return p[7:] + # not expired def shadow_active(self): if 'shadowExpire' in self and \ @@ -86,9 +94,20 @@ class Account: return '(%s)'%(', '.join(status)) + def delete_mailforward(self): + del self.attributes['emailForward'] + def get_dn(self): return self.dn + def email_address(self): + mailbox = "<%s@%s>" % (self['uid'], userdir_ldap.EmailAppend) + tokens = [] + if 'cn' in self: tokens.append(self['cn']) + if 'sn' in self: tokens.append(self['sn']) + tokens.append(mailbox) + return ' '.join(tokens) + # vim:set et: # vim:set ts=4: # vim:set shiftwidth=4: