I am using ldap module of python to connect to ldap server. I am able to query the database but I dont know how to retrieve the fields present in the database, so that I can notify the user in advance to quering the database, telling him that the field he is trying to access is not in the database.
For example if the fields present are just
cn
memberOf
and if the user tries to query the database with filter
cn and memberOf and notcontained
I should be able to know that the notcontained attribute is not in the dabase schema.
How can I accomplish this.
Thanks.
You need to read the schema of your ldap server.
This code may work for you, as tempalte
#!/usr/bin/env python
#coding:utf-8
# Author: peter --<[email protected]>
# Purpose: Tareas comunes a utilizar con respecto a schemas ldap
# Created: 01/05/12
import ldap
import ldap.schema
########################################################################
class SchemasIPA(object):
__ldaps = ldap.schema
#----------------------------------------------------------------------
def __init__(self, url):
"""Constructor"""
ldap._trace_level = 0
ldap.set_option(ldap.OPT_DEBUG_LEVEL,0)
subschemasubentry_dn, self.schema = ldap.schema.urlfetch(url,ldap._trace_level)
self.oc_tree = self.schema.tree(ldap.schema.ObjectClass)
self.at_tree = self.schema.tree(ldap.schema.AttributeType)
def getobjectclasses(self):
"""
trae la listas de objectclasses de un servidor dado
"""
allobjc = {}
for a in self.oc_tree.keys():
objc = self.schema.get_obj(ldap.schema.ObjectClass, a)
if objc != None:
allobjc[objc.oid] = (objc.names, objc.must, objc.may, objc.sup, objc.obsolete)
return allobjc
def getatributes(self):
"""
trae la lista de atributos de un servidor dado
"""
allatt= {}
o = []
for a in self.at_tree.keys():
att = self.schema.get_obj(ldap.schema.AttributeType, a)
if att != None:
allatt[att.oid] = (att.names, att.syntax, att.syntax_len, att.desc, att.collective, att.equality, att.single_value)
return allatt
def getvalidoid(self, objects):
"""
retorno un valor oid libre valida para la creacion de esquemas y atributos
el proceso valido es pedirle a la iana un oid valido, pero se tarda mas de un mes
los oid a utilizar son valores predefinidos al momento de la instalacion del servidor ldap
"""
pass
if __name__ == '__main__':
sch = SchemasIPA('ldap://localhost')
#at = sch.getatributes()
ob = sch.getobjectclasses()
for a, b in ob.iteritems():
print a
print b[0]
Then you can wrapper this class like this
#a file contained the above class
import schemas
olschemas = schemas.SchemasIPA(url='ldap://192.168.1.81')
#here are, some magic :)
pa = olschemas.schema.get_obj(olschemas._SchemasIPA__ldaps.ObjectClass, 'posixaccount')
pa.must #going to print all the attributes that can't be null's
pa.may #going to print all the attributes that are optional's