# -*- coding: utf-8 -*- # Copyright 2016 Mir Calculate. http://www.calculate-linux.org # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. import sys import os from os import path from calculate.core.server.func import MethodsInterface from calculate.server.server import Server from calculate.lib.utils.files import listDirectory from calculate.lib.cl_ldap import LDAPConnectError, ldap import shutil _ = lambda x: x from calculate.lib.cl_lang import (setLocalTranslate, getLazyLocalTranslate) setLocalTranslate('cl_ldap3', sys.modules[__name__]) __ = getLazyLocalTranslate(_) class LdapError(Exception): pass class Ldap(Server): """Основной объект для выполнения действий связанных с настройкой LDAP сервиса """ class Method(object): Setup = "ldap_setup" All = (Setup,) class Service(object): LDAP = "slapd" def init(self): pass def preconfigureTemplates(self): """ Выполнить шаблоны для предварительной конфигурации """ self.clVars.Set('cl_ldap_preconfigure_set', 'on', force=True) try: return self.applyTemplates("/", False, False, "/", False, True) finally: self.clVars.Set('cl_ldap_preconfigure_set', 'off', force=True) def set_ldap_connection(self, binddn, bindpw): self.clVars.Set('ldap.cl_ldap_bind_dn', binddn, force=True) self.clVars.Set('ldap.cl_ldap_bind_pw', bindpw, force=True) return True def clear_directory(self, rmpath): """ Удалить каталог """ for fname in listDirectory(rmpath, fullPath=True): if path.isdir(fname): shutil.rmtree(fname) else: os.unlink(fname) def remove_ldap_db(self, database_path): """ Удалить базу LDAP """ try: self.clear_directory(database_path) except OSError: raise LdapError(_("Failed to erase LDAP database")) return True def remove_ldap_branch(self, branch): """ Удалить указанную ветку LDAP :param branch: удаляемая ветка :return: """ ldap_connect = self.clVars.Get('ldap.cl_ldap_connect') try: try: dn_list = ldap_connect.conLdap.search_s(branch, ldap.SCOPE_SUBTREE, '(objectclass=*)', ['']) except ldap.NO_SUCH_OBJECT as e: self.printWARNING(_("Unix LDAP branch not found")) return True except ldap.LDAPError as e: raise LdapError("searchDN: " + e[0]['desc']) for dn, f in sorted(dn_list, key=lambda x: len(x[0]), reverse=True): try: ldap_connect.conLdap.delete_s(dn) except ldap.LDAPError, e: raise LdapError("deleteDN: " + e[0]['desc']) except LDAPConnectError as e: raise LdapError(str(e)) return True def save_variables(self): for varname in ('ldap.ld_base_root',): header, o, writename = varname.partition(".") self.clVars.Write(writename, self.clVars.Get(varname), header=header) return True