File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/ldapmod.cpython-310.pyc
Back
o ;j� � @ s� d Z ddlZddlZddlZddlmZ z ddlZddlZdZ W n e y+ dZ Y nw e� e �Z dZdd� Zdd d �Zd d � Z dd d�ZG dd� d�ZdS )at Salt interface to LDAP commands :depends: - ldap Python module :configuration: In order to connect to LDAP, certain configuration is required in the minion config on the LDAP server. The minimum configuration items that must be set are: .. code-block:: yaml ldap.basedn: dc=acme,dc=com (example values, adjust to suit) If your LDAP server requires authentication then you must also set: .. code-block:: yaml ldap.anonymous: False ldap.binddn: admin ldap.bindpw: password In addition, the following optional values may be set: .. code-block:: yaml ldap.server: localhost (default=localhost, see warning below) ldap.port: 389 (default=389, standard port) ldap.tls: False (default=False, no TLS) ldap.no_verify: False (default=False, verify TLS) ldap.anonymous: True (default=True, bind anonymous) ldap.scope: 2 (default=2, ldap.SCOPE_SUBTREE) ldap.attrs: [saltAttr] (default=None, return all attributes) .. warning:: At the moment this module only recommends connection to LDAP services listening on ``localhost``. This is deliberate to avoid the potentially dangerous situation of multiple minions sending identical update commands to the same LDAP server. It's easy enough to override this behavior, but badness may ensue - you have been warned. � N)�CommandExecutionErrorTF�ldapc C s t rtS dS )z9 Only load this module if the ldap config is set )FzGThe ldapmod execution module cannot be loaded: ldap config not present.)�HAS_LDAP�__virtualname__� r r �H/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/ldapmod.py� __virtual__> s r c K sB |du r| }| |v r|| }n t d d|� ��}tjjj|dd�S )z� Return a value for 'name' from command line args then config file options. Specify 'key' if the config file option is not the same as 'name'. Nz config.optionzldap.T)Zto_str)Z__salt__�salt�utils�data�decode)�name�key�kwargs�valuer r r �_configK s r c K s2 i }dD ] }t |fi | ��||< qtdi |��jS )zP Instantiate LDAP Connection class and return an LDAP connection object )�uri�server�port�tls� no_verify�binddn�bindpw� anonymousNr )r �_LDAPConnectionr )r Zconnargsr r r r �_connectY s r c K s� |st dd�}|s t d�}|dkrd}n|du r t d�}tdi |��}t�� }t�d| |||� |�|t|�| |�}t�� | }|dk rPtt|d d ��d } n tt|d ��d } |t |�| tt|d��d�d�} | S )az Run an arbitrary LDAP query and return the results. CLI Example: .. code-block:: bash salt 'ldaphost' ldap.search "filter=cn=myhost" Return data: .. code-block:: python {'myhost': {'count': 1, 'results': [['cn=myhost,ou=hosts,o=acme,c=gb', {'saltKeyValue': ['ntpserver=ntp.acme.local', 'foo=myfoo'], 'saltState': ['foo', 'bar']}]], 'time': {'human': '1.2ms', 'raw': '0.00123'}}} Search and connection options can be overridden by specifying the relevant option as key=value pairs, for example: .. code-block:: bash salt 'ldaphost' ldap.search filter=cn=myhost dn=ou=hosts,o=acme,c=gb scope=1 attrs='' server='localhost' port='7393' tls=True bindpw='ssh' �dnZbasedn�scope� N�attrsz=Running LDAP search with filter:%s, dn:%s, scope:%s, attrs:%sg�������?i� � �ms� �s� )Zhuman�raw)�results�count�timer ) r r r( �log�debugZsearch_s�int�str�round�len) �filterr r r r Z_ldap�startr& �elapsedZ elapsed_h�retr r r �searchm s6 # � �r3 c @ s e Zd ZdZdd� ZdS )r z# Setup an LDAP connection. c C s� || _ || _|| _|| _|| _|| _| j dkr"d| j� d| j� �| _ z7|r-t�tjtj � t� | j � �| _d| j_ | j�tj d� | jrI| j� � |sW| j�| j| j� W dS W dS typ } z td�| j | j| ���d} ~ ww )zE Bind to an LDAP directory using passed credentials. r zldap://�:� r z*Failed to bind to LDAP server {} as {}: {}N)r r r r r r r Z set_optionZOPT_X_TLS_REQUIRE_CERTZOPT_X_TLS_NEVERZ initializeZprotocol_versionZ OPT_REFERRALSZ start_tls_sZ simple_bind_s� Exceptionr �format) �selfr r r r r r r r Z ldap_errorr r r �__init__� s6 � ����z_LDAPConnection.__init__N)�__name__� __module__� __qualname__�__doc__r9 r r r r r � s r )N)NNN)r= �loggingr( Zsalt.utils.datar Zsalt.exceptionsr r Z ldap.modlistr � ImportError� getLoggerr: r) r r r r r3 r r r r r �<module> s, ) � �C
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings