|
6 | 6 | import time |
7 | 7 | import urllib.error |
8 | 8 | import urllib.request |
9 | | -from ldap3 import Server, Connection, ALL, SAFE_SYNC |
| 9 | +from ldap3 import Server, Connection, ALL, SAFE_SYNC, Tls |
10 | 10 |
|
11 | 11 | #PRODUCTION VALUES |
12 | 12 |
|
@@ -71,7 +71,7 @@ def mkauthstr(user, passwd): |
71 | 71 |
|
72 | 72 | def get_ldap_authtok(ldap_authfile): |
73 | 73 | if ldap_authfile is not None: |
74 | | - ldap_authtok = open(ldap_authfile).readline().rstrip("\n") |
| 74 | + ldap_authtok = open(ldap_authfile).readline().strip() |
75 | 75 | else: |
76 | 76 | raise PermissionError |
77 | 77 | return ldap_authtok |
@@ -183,28 +183,6 @@ def get_ldap_groups(ldap_server, ldap_user, ldap_authtok): |
183 | 183 | return ldap_group_osggids |
184 | 184 |
|
185 | 185 |
|
186 | | -def get_ldap_group_members(ldap_gid, ldap_server, ldap_user, ldap_authtok): |
187 | | - ldap_group_members = set() |
188 | | - server = Server(ldap_server, get_info=ALL) |
189 | | - connection = Connection(server, ldap_user, ldap_authtok, client_strategy=SAFE_SYNC, auto_bind=True) |
190 | | - _, _, response, _ = connection.search("ou=groups,o=OSG,o=CO,dc=cilogon,dc=org", f"(&(gidNumber={ldap_gid})(cn=*))", attributes=["hasMember"]) |
191 | | - for group in response: |
192 | | - ldap_group_members.update(group["attributes"]["hasMember"]) |
193 | | - return ldap_group_members |
194 | | - |
195 | | - |
196 | | -def get_ldap_active_users(ldap_server, ldap_user, ldap_authtok, filter_group_name=None): |
197 | | - ldap_active_users = set() |
198 | | - filter_str = ("(isMemberOf=CO:members:active)" if filter_group_name is None |
199 | | - else f"(&(isMemberOf={filter_group_name})(isMemberOf=CO:members:active))") |
200 | | - server = Server(ldap_server, get_info=ALL) |
201 | | - connection = Connection(server, ldap_user, ldap_authtok, client_strategy=SAFE_SYNC, auto_bind=True) |
202 | | - _, _, response, _ = connection.search("ou=people,o=OSG,o=CO,dc=cilogon,dc=org", filter_str, attributes=["employeeNumber"]) |
203 | | - for person in response: |
204 | | - # the "employeeNumber" is the person's name in the first.last format |
205 | | - ldap_active_users.add(person["attributes"]["employeeNumber"]) |
206 | | - return ldap_active_users |
207 | | - |
208 | 186 | def get_ldap_active_users_and_groups(ldap_server, ldap_user, ldap_authtok, filter_group_name=None): |
209 | 187 | """ Retrieve a dictionary of active users from LDAP, with their group memberships. """ |
210 | 188 | ldap_active_users = {} |
|
0 commit comments