def group_overview(groupname): title = "Group details - %s" % groupname if not ldap_group_exists(groupname=groupname): abort(404) identity_fields = [('sAMAccountName', "Name"), ('description', "Description")] group_fields = [('sAMAccountName', "Name"), ('description', "Description")] group = ldap_get_group(groupname=groupname) admin = ldap_in_group("Domain Admins") and not group['groupType'] & 1 group_details = [ldap_get_group(entry, 'distinguishedName') for entry in ldap_get_membership(groupname)] groups = sorted(group_details, key=lambda entry: entry['sAMAccountName']) member_list = [] for entry in ldap_get_members(groupname): member = ldap_get_entry_simple({'distinguishedName': entry}) if 'sAMAccountName' not in member: continue member_list.append(member) members = sorted(member_list, key=lambda entry: entry['sAMAccountName']) return render_template("pages/group_overview.html", g=g, title=title, group=group, identity_fields=identity_fields, group_fields=group_fields, admin=admin, groups=groups, members=members, grouptype_values=LDAP_AD_GROUPTYPE_VALUES)
def group_delete(groupname): title = "Delete group" if not ldap_group_exists(groupname): abort(404) form = Form(request.form) if form.validate_on_submit(): try: group = ldap_get_group(groupname=groupname) ldap_delete_entry(group['distinguishedName']) flash("Group successfuly deleted.", "success") return redirect(url_for('core_index')) except ldap.LDAPError as e: error = e.message['info'].split(":", 2)[-1].strip() error = str(error[0].upper() + error[1:]) flash(error, "error") elif form.errors: flash("Some fields failed validation.", "error") return render_template("pages/group_delete.html", title=title, action="Delete group", form=form, groupname=groupname, parent=url_for('group_overview', groupname=groupname))
def group_overview(groupname): title = "Group details - %s" % groupname if not ldap_group_exists(groupname=groupname): abort(404) identity_fields = [('sAMAccountName', "Name"), ('description', u"Description")] group_fields = [('sAMAccountName', "Name"), ('description', u"Description")] group = ldap_get_group(groupname=groupname) admin = ldap_in_group( Settings.ADMIN_GROUP) and not group['groupType'] & 1 group_details = [ ldap_get_group(entry, 'distinguishedName') for entry in ldap_get_membership(groupname) ] group_details = list(filter(None, group_details)) groups = sorted(group_details, key=lambda entry: entry['sAMAccountName']) member_list = [] for entry in ldap_get_members(groupname): member = ldap_get_entry_simple({'distinguishedName': entry}) if 'sAMAccountName' not in member: continue member_list.append(member) members = sorted(member_list, key=lambda entry: entry['sAMAccountName']) parent = ",".join(group['distinguishedName'].split(',')[1:]) return render_template("pages/group_overview_es.html", g=g, title=title, group=group, identity_fields=identity_fields, group_fields=group_fields, admin=admin, groups=groups, members=members, parent=parent, grouptype_values=LDAP_AD_GROUPTYPE_VALUES)
def group_addmembers(groupname): title = "Add members" if not ldap_group_exists(groupname): abort(404) form = GroupAddMembers(request.form) form.visible_fields = [form.new_members] if form.validate_on_submit(): group = ldap_get_group(groupname) if 'member' in group: entries = set(group['member']) else: entries = set() for line in form.new_members.data.split("\n"): entry = ldap_get_entry_simple({'sAMAccountName': line.strip()}) if not entry: error = "Invalid username: %s" % line flash(error, "error") break entries.add(entry['distinguishedName']) else: try: ldap_update_attribute(group['distinguishedName'], "member", list(entries)) flash("Members added.", "success") return redirect( url_for('group_overview', groupname=groupname)) except ldap.LDAPError as e: error = e.message['info'].split(":", 2)[-1].strip() error = str(error[0].upper() + error[1:]) flash(error, "error") elif form.errors: flash("Some fields failed validation.", "error") return render_template("forms/basicform.html", form=form, title=title, action="Add members", parent=url_for('group_overview', groupname=groupname))
def group_addmembers(groupname): title = "Add members" if not ldap_group_exists(groupname): abort(404) form = GroupAddMembers(request.form) form.visible_fields = [form.new_members] if form.validate_on_submit(): group = ldap_get_group(groupname) if 'member' in group: entries = set(group['member']) else: entries = set() for line in form.new_members.data.split("\n"): entry = ldap_get_entry_simple({'sAMAccountName': line.strip()}) if not entry: error = u"Invalid username: %s" % line flash(error, "error") break entries.add(entry['distinguishedName']) else: try: ldap_add_users_to_group(group['distinguishedName'], "member", list(entries)) flash("Added users.", "success") return redirect( url_for('group_overview', groupname=groupname)) except ldap.LDAPError as e: e = dict(e.args[0]) flash(e['info'], "error") elif form.errors: flash(u"Data validation failed.", "error") return render_template("forms/basicform.html", form=form, title=title, action="Adicionar miembros", parent=url_for('group_overview', groupname=groupname))
def group_addmembers(groupname): title = "Add members" if not ldap_group_exists(groupname): abort(404) form = GroupAddMembers(request.form) form.visible_fields = [form.new_members] if form.validate_on_submit(): group = ldap_get_group(groupname) if 'member' in group: entries = set(group['member']) else: entries = set() for line in form.new_members.data.split("\n"): entry = ldap_get_entry_simple({'sAMAccountName': line.strip()}) if not entry: error = "Invalid username: %s" % line flash(error, "error") break entries.add(entry['distinguishedName']) else: try: ldap_update_attribute(group['distinguishedName'], "member", list(entries)) flash("Members added.", "success") return redirect(url_for('group_overview', groupname=groupname)) except ldap.LDAPError as e: error = e.message['info'].split(":", 2)[-1].strip() error = str(error[0].upper() + error[1:]) flash(error, "error") elif form.errors: flash("Some fields failed validation.", "error") return render_template("forms/basicform.html", form=form, title=title, action="Add members", parent=url_for('group_overview', groupname=groupname))
def group_edit(groupname): title = "Edit group" if not ldap_group_exists(groupname): abort(404) group = ldap_get_group(groupname) # We can't edit system groups if group['groupType'] & 1: abort(401) form = GroupEdit(request.form) field_mapping = [('sAMAccountName', form.name), ('description', form.description), (None, form.group_type), ('groupType', form.group_flags)] form.visible_fields = [field[1] for field in field_mapping] form.group_flags.choices = [(key, value[0]) for key, value in LDAP_AD_GROUPTYPE_VALUES.items() if value[1]] if form.validate_on_submit(): try: for attribute, field in field_mapping: value = field.data if value != group.get(attribute): if attribute == 'sAMAccountName': # Rename the account ldap_update_attribute(group['distinguishedName'], "sAMAccountName", value) # Finish by renaming the whole record ldap_update_attribute(group['distinguishedName'], "cn", value) group = ldap_get_group(value) elif attribute == "groupType": group_type = int(form.group_type.data) + \ int(form.group_flags.data) ldap_update_attribute( group['distinguishedName'], attribute, str( struct.unpack( "i", struct.pack( "I", int(group_type)))[0])) elif attribute: ldap_update_attribute(group['distinguishedName'], attribute, value) flash("Group successfully updated.", "success") return redirect(url_for('group_overview', groupname=form.name.data)) except ldap.LDAPError as e: error = e.message['info'].split(":", 2)[-1].strip() error = str(error[0].upper() + error[1:]) flash(error, "error") elif form.errors: flash("Some fields failed validation.", "error") if not form.is_submitted(): form.name.data = group.get('sAMAccountName') form.description.data = group.get('description') form.group_type.data = group['groupType'] & 2147483648 form.group_flags.data = 0 for key, flag in LDAP_AD_GROUPTYPE_VALUES.items(): if flag[1] and group['groupType'] & key: form.group_flags.data += key return render_template("forms/basicform.html", form=form, title=title, action="Save changes", parent=url_for('group_overview', groupname=groupname))
def group_edit(groupname): title = "Edit group" if not ldap_group_exists(groupname): abort(404) group = ldap_get_group(groupname) # We can't edit system groups if group['groupType'] & 1: abort(401) form = GroupEdit(request.form) field_mapping = [('sAMAccountName', form.name), ('description', form.description), (None, form.group_type), ('groupType', form.group_flags)] form.visible_fields = [field[1] for field in field_mapping] form.group_flags.choices = [ (key, value[0]) for key, value in LDAP_AD_GROUPTYPE_VALUES.items() if value[1] ] if form.validate_on_submit(): try: for attribute, field in field_mapping: value = field.data if value != group.get(attribute): if attribute == 'sAMAccountName': # Rename the account ldap_update_attribute(group['distinguishedName'], "sAMAccountName", value) # Finish by renaming the whole record ldap_update_attribute(group['distinguishedName'], "cn", value) group = ldap_get_group(value) elif attribute == "groupType": group_type = int(form.group_type.data) + \ int(form.group_flags.data) ldap_update_attribute( group['distinguishedName'], attribute, str( struct.unpack( "i", struct.pack("I", int(group_type)))[0])) elif attribute: ldap_update_attribute(group['distinguishedName'], attribute, value) flash("Group successfully updated.", "success") return redirect( url_for('group_overview', groupname=form.name.data)) except ldap.LDAPError as e: error = e.message['info'].split(":", 2)[-1].strip() error = str(error[0].upper() + error[1:]) flash(error, "error") elif form.errors: flash("Some fields failed validation.", "error") if not form.is_submitted(): form.name.data = group.get('sAMAccountName') form.description.data = group.get('description') form.group_type.data = group['groupType'] & 2147483648 form.group_flags.data = 0 for key, flag in LDAP_AD_GROUPTYPE_VALUES.items(): if flag[1] and group['groupType'] & key: form.group_flags.data += key return render_template("forms/basicform.html", form=form, title=title, action="Save changes", parent=url_for('group_overview', groupname=groupname))