X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=UDLdap.py;h=97fd2fbdcb665800a3746b3f6c79f32a7d10bb2e;hb=ab9b6db10f47351659f37b0d75acfad2d40d2493;hp=2e4509258e9301947b38334676df1bd0d1a5a242;hpb=032921f6a9454a411d72cf859aaef6dabdf8a2c9;p=mirror%2Fuserdir-ldap.git diff --git a/UDLdap.py b/UDLdap.py index 2e45092..97fd2fb 100644 --- a/UDLdap.py +++ b/UDLdap.py @@ -1,6 +1,8 @@ import ldap import time +import datetime import userdir_ldap +import sys class Account: array_values = ['objectClass', 'keyFingerPrint', 'mailWhitelist', 'mailRBL', @@ -16,11 +18,9 @@ class Account: def from_search(ldap_connection, base, user): searchresult = ldap_connection.search_s(base, ldap.SCOPE_SUBTREE, 'uid=%s'%(user)) if len(searchresult) < 1: - sys.stderr.write("No such user: %s\n"%(user)) - return + raise IndexError, "No such user: %s\n"%(user) elif len(searchresult) > 1: - sys.stderr.write("More than one hit when getting %s\n"%(user)) - return + raise IndexError, "More than one hit when getting %s\n"%(user) else: return Account(searchresult[0][0], searchresult[0][1]) @@ -110,6 +110,24 @@ class Account: tokens.append(mailbox) return ' '.join(tokens) + def is_allowed_by_hostacl(self, host): + if not 'allowedHost' in self: return False + if host in self['allowedHost']: return True + # or maybe it's a date limited ACL + for entry in self['allowedHost']: + list = entry.split(None,1) + if len(list) == 1: continue + (h, expire) = list + if host != h: continue + try: + parsed = datetime.datetime.strptime(expire, '%Y%m%d') + except ValueError: + print >>sys.stderr, "Cannot parse expiry date in '%s' in hostACL entry for %s."%(entry, self['uid']) + return False + return parsed >= datetime.datetime.now() + return False + + # vim:set et: # vim:set ts=4: # vim:set shiftwidth=4: