Ejemplo n.º 1
0
def search_group(stog_filter = None, attrib = None):
    if not stog_filter:
            stog_filter = STOG_FILTER
    #print 'stog_filter is ', stog_filter
    creds = Creds(LDAP_BASE_DN)
    creds.acquire(MGR_CRED, MGR_PASSWD)
    activate(creds)
    client = Client(LDAP_BASE_DN)
    try:
        users = client.search(stog_filter, scheme='gc')
    except ldap.LDAPError, e:
        print e
Ejemplo n.º 2
0
def add_group():
    groups = get_data(0)
    creds = Creds(LDAP_BASE_DN)
    creds.acquire(MGR_CRED, MGR_PASSWD)
    activate(creds)

    client = Client(LDAP_BASE_DN)
    for group in groups:
        attrs = []
        stog_id = str(group['id'])
        stog_ou = group['path'].encode('utf-8')
        path = get_ou(stog_ou)
        dn = '%s%s' % (path, client.dn_from_domain_name(LDAP_BASE_DN))
        ou = group['name'].encode('utf-8')
        attrs.append(('ou', [ou]))
        attrs.append(('objectClass', ['top', 'organizationalUnit']))
        attrs.append(('description', [stog_id]))
        #path1 = search_group(stog_filter = 'description=' + stog_id)
        #print dn
        try:
            client.add(dn, attrs)
            logging.debug("[Group]Time %s add a new group, id is %s", strftime("%Y-%m-%d %H:%M:%S started", time.localtime()), ou)
        except (ADError, LDAPError):
            logging.debug("[Error Group]Time %s add group error, id is %s", strftime("%Y-%m-%d %H:%M:%S started", time.localtime()), ou)
Ejemplo n.º 3
0
from ad import Client, Creds, activate

domain = 'freeadi.org'

creds = Creds(domain)
creds.load()
activate(creds)

client = Client(domain)
users = client.search('(objectClass=user)', scheme='gc')
for dn,attrs in users:
    name = attrs['sAMAccountName'][0]
    domain = client.domain_name_from_dn(dn)
    print '-> %s (%s)' % (name, domain)
Ejemplo n.º 4
0
def add_user():
    users = get_user()
    creds = Creds(LDAP_BASE_DN)
    creds.acquire(MGR_CRED, MGR_PASSWD)
    activate(creds)

    client = Client(LDAP_BASE_DN)
    #sys.exit(users["data"])
    #print type(users)
    #print users["data"]
    for user in users["data"]:
        attrs = []
        stog_uid = user['uid'].encode('utf-8')
        stog_ou = str(user['ou']).encode('utf-8')
        telephoneNumber = str(user['mobile'])
        lo = user['l'].encode('utf-8')
        uid = str(user['uid'])
        c = user['c'].encode('utf-8')
        displayname = user['displayname'].encode('utf-8')
        cn = user['cn'].encode('utf-8')
        st = user['l'].encode('utf-8')
        employeeNumber = str(user['employeeNumber'])
        employeeType = user['employeeType'].encode('utf-8')
        mail = str(user['mail'])
        title = user['title'].encode('utf-8')
        sn = user['sn'].encode('utf-8')
        status = user['status']
        entryDN = str(user['entryDN']).encode('utf-8')
        if user['sex'] == 2:
            sex = '1'
        else:
            sex = '0'
        #user['sex'] == 2 ? sex = '0' : sex = '1'

        givenName = user['givenName'].encode('utf-8')
        #passwd = str(get_passwd(user['entryDN']))

        path = search_group(stog_filter = 'description=' + stog_ou)
        #print "path is ", path
        if path:
            dn = 'CN=%s,%s' % (stog_uid, path)
            #print "dn is ", dn

            path1 = search_group(stog_filter = 'cn=' + stog_uid)
            #print "path1 ", path1
            if path1 is None:
                attrs.append(('cn', [stog_uid]))
                attrs.append(('sAMAccountName', [stog_uid]))
                princ = '%s@%s' % (stog_uid, LDAP_BASE_DN)
                attrs.append(('userPrincipalName', [princ]))
                attrs.append(('description', [displayname]))
                ctrl = AD_USERCTRL_NORMAL_ACCOUNT | AD_USERCTRL_ACCOUNT_DISABLED
                attrs.append(('userAccountControl', [str(ctrl)]))
                attrs.append(('objectClass', ['user']))
                attrs.append(('Gender', [sex]))
                attrs.append(('co', [c]))
                attrs.append(('displayname', [displayname]))
                attrs.append(('sn', [sn]))
                attrs.append(('st', [st]))
                attrs.append(('givenName', [givenName]))
                attrs.append(('sk-employeeNumber', [employeeNumber]))
                attrs.append(('sk-employeeType', [employeeType]))
                attrs.append(('mail', [mail]))
                attrs.append(('title', [title]))
                attrs.append(('telephoneNumber', [telephoneNumber]))
                attrs.append(('mobile', [telephoneNumber]))
                try:
                    client.add(dn, attrs)
                    logging.debug("[User]Time %s add a new user, id is %s", strftime("%Y-%m-%d %H:%M:%S started", time.localtime()), stog_uid)
                except (ADError, LDAPError):
                    print ADError,LDAPError
                    logging.debug("[Error User]Time %s add user error, id is %s", strftime("%Y-%m-%d %H:%M:%S started", time.localtime()), stog_uid)

            else:
                print 'status', status
                if status == 128:
                    try:
                        client.rename(path1, 'cn=' + stog_uid, 'OU=已离职用户,OU=虚拟组,OU=总部,OU=美团,DC=sankuai,DC=info')
                        ctrl = 514
                        dnc = 'cn=' + stog_uid + ',OU=已离职用户,OU=虚拟组,OU=总部,OU=美团,DC=sankuai,DC=info'
                        mods = []
                        mods.append(('replace', 'userAccountControl', [str(ctrl)]))
                        client.modify(dnc, mods)
                        logging.debug("[leave office success] Time %s,old dn is %s", strftime("%Y-%m-%d %H:%M:%S started", time.localtime()), path1)
                        continue
                    except:
                        logging.debug("[leave office failed] Time %s,old dn is %s", strftime("%Y-%m-%d %H:%M:%S started", time.localtime()), path1)
                if cmp(path1, dn) != 0:
                    try:
                        client.rename(path1, 'cn=' + stog_uid, path)
                        logging.debug("[modrdn success] Time %s,old dn is %s, new dn is %s", strftime("%Y-%m-%d %H:%M:%S started", time.localtime()), path1, dn)
                    except:
                        logging.debug("[modrdn failed] Time %s,old dn is %s, new dn is %s", strftime("%Y-%m-%d %H:%M:%S started", time.localtime()), path1, dn)
                #attrs.append(('replace', 'cn', [stog_uid]))
                #attrs.append(('replace', 'sAMAccountName', [stog_uid]))
                princ = '%s@%s' % (stog_uid, LDAP_BASE_DN)
                attrs.append(('replace', 'userPrincipalName', [princ]))
                #ctrl = AD_USERCTRL_NORMAL_ACCOUNT | AD_USERCTRL_ACCOUNT_DISABLED
                #ctrl = AD_USERCTRL_NORMAL_ACCOUNT
                #attrs.append(('replace', 'userAccountControl', [str(ctrl)]))
                #attrs.append(('replace', 'objectClass', ['user']))
                attrs.append(('replace', 'Gender', [sex]))
                attrs.append(('replace', 'co', ['中国']))
                attrs.append(('replace', 'displayname', [displayname]))
                attrs.append(('replace', 'sn', [sn]))
                attrs.append(('replace', 'st', [st]))
                attrs.append(('replace', 'givenName', [givenName]))
                attrs.append(('replace', 'sk-employeeNumber', [employeeNumber]))
                attrs.append(('replace', 'sk-employeeType', [employeeType]))
                attrs.append(('replace', 'mail', [mail]))
                attrs.append(('replace', 'title', [title]))
                attrs.append(('replace', 'telephoneNumber', [str(0)]))
                attrs.append(('replace', 'mobile', [telephoneNumber]))
                attrs.append(('replace', 'description', [displayname]))
                try:
                    client.modify(dn, attrs)
                    logging.debug("[Modify User]Time %s add a new user, id is %s", strftime("%Y-%m-%d %H:%M:%S started", time.localtime()), stog_uid)
                except (ADError, LDAPError):
                    print ADError, LDAPError
                    logging.debug("[Modify User Error]Time %s add a new user, id is %s, error is %s, %s", strftime("%Y-%m-%d %H:%M:%S started", time.localtime()), stog_uid, ADError, LDAPError)