Lines 40-45
import univention.s4connector.s4.dc
|
Link Here
|
---|
|
40 |
import univention.s4connector.s4.computer |
40 |
import univention.s4connector.s4.computer |
41 |
|
41 |
|
42 |
@!@ |
42 |
@!@ |
|
|
43 |
|
43 |
global_ignore_subtree=['cn=univention,@%@ldap/base@%@','cn=policies,@%@ldap/base@%@', |
44 |
global_ignore_subtree=['cn=univention,@%@ldap/base@%@','cn=policies,@%@ldap/base@%@', |
44 |
'cn=shares,@%@ldap/base@%@','cn=printers,@%@ldap/base@%@', |
45 |
'cn=shares,@%@ldap/base@%@','cn=printers,@%@ldap/base@%@', |
45 |
'cn=networks,@%@ldap/base@%@', 'cn=kerberos,@%@ldap/base@%@', |
46 |
'cn=networks,@%@ldap/base@%@', 'cn=kerberos,@%@ldap/base@%@', |
|
102 |
con_search_filter='(&(objectClass=user)(!(objectClass=computer))(userAccountControl:1.2.840.113556.1.4.803:=512))', |
103 |
con_search_filter='(&(objectClass=user)(!(objectClass=computer))(userAccountControl:1.2.840.113556.1.4.803:=512))', |
103 |
match_filter='(&(|(&(objectClass=posixAccount)(objectClass=krb5Principal))(objectClass=user))(!(objectClass=univentionHost)))', |
104 |
match_filter='(&(|(&(objectClass=posixAccount)(objectClass=krb5Principal))(objectClass=user))(!(objectClass=univentionHost)))', |
104 |
@!@ |
105 |
@!@ |
105 |
ignore_filter = '' |
106 |
from univention.s4connector.s4.mapping import ignore_filter_parts_from_tmpl |
106 |
for user in configRegistry.get('connector/s4/mapping/user/ignorelist', '').split(','): |
107 |
ignore_filter = ignore_filter_parts_from_tmpl('(uid={0!e})(CN={0!e})', 'connector/s4/mapping/user/ignorelist') |
107 |
if user: |
|
|
108 |
ignore_filter += '(uid=%s)(CN=%s)' % (user, user) |
109 |
if ignore_filter: |
108 |
if ignore_filter: |
110 |
print " ignore_filter='(|%s)'," % ignore_filter |
109 |
print " ignore_filter='%s'," % ignore_filter |
111 |
@!@ |
110 |
@!@ |
112 |
ignore_subtree = global_ignore_subtree, |
111 |
ignore_subtree = global_ignore_subtree, |
113 |
|
112 |
|
|
313 |
scope='sub', |
312 |
scope='sub', |
314 |
|
313 |
|
315 |
@!@ |
314 |
@!@ |
316 |
ignore_filter = '' |
315 |
from univention.s4connector.s4.mapping import ignore_filter_parts_from_attr |
|
|
316 |
ignore_filter = ignore_filter_parts_from_attr('cn', 'connector/s4/mapping/group/ignorelist') |
317 |
if configRegistry.is_false('connector/s4/mapping/group/grouptype', False): |
317 |
if configRegistry.is_false('connector/s4/mapping/group/grouptype', False): |
318 |
ignore_filter += '(sambaGroupType=5)(groupType=5)' |
318 |
ignore_filter = '(|{}{})'.format('(sambaGroupType=5)(groupType=5)', ignore_filter) |
319 |
for group in configRegistry.get('connector/s4/mapping/group/ignorelist', '').split(','): |
319 |
if ignore_filter: |
320 |
if group: |
320 |
print " ignore_filter='%s'," % ignore_filter |
321 |
ignore_filter += '(cn=%s)' % (group) |
|
|
322 |
print " ignore_filter='(|%s)'," % ignore_filter |
323 |
@!@ |
321 |
@!@ |
324 |
|
322 |
|
325 |
ignore_subtree = global_ignore_subtree, |
323 |
ignore_subtree = global_ignore_subtree, |
|
431 |
# and this subobject would avoid a deletion of this DC in S4 |
429 |
# and this subobject would avoid a deletion of this DC in S4 |
432 |
con_subtree_delete_objects = [ 'cn=rid set' ], |
430 |
con_subtree_delete_objects = [ 'cn=rid set' ], |
433 |
@!@ |
431 |
@!@ |
434 |
ignore_filter = '' |
432 |
from univention.s4connector.s4.mapping import ignore_filter_parts_from_attr |
435 |
for dc in configRegistry.get('connector/s4/mapping/dc/ignorelist', '').split(','): |
433 |
ignore_filter = ignore_filter_parts_from_attr('cn', 'connector/s4/mapping/dc/ignorelist') |
436 |
if dc: |
|
|
437 |
ignore_filter += '(cn=%s)' % (dc) |
438 |
if ignore_filter: |
434 |
if ignore_filter: |
439 |
print " ignore_filter='(|%s)'," % ignore_filter |
435 |
print " ignore_filter='%s'," % ignore_filter |
440 |
@!@ |
436 |
@!@ |
441 |
|
437 |
|
442 |
@!@ |
438 |
@!@ |
|
533 |
|
529 |
|
534 |
ignore_subtree = global_ignore_subtree, |
530 |
ignore_subtree = global_ignore_subtree, |
535 |
@!@ |
531 |
@!@ |
536 |
ignore_filter = '' |
532 |
from univention.s4connector.s4.mapping import ignore_filter_parts_from_attr |
537 |
for computer in configRegistry.get('connector/s4/mapping/windowscomputer/ignorelist', '').split(','): |
533 |
ignore_filter = ignore_filter_parts_from_attr('cn', 'connector/s4/mapping/windowscomputer/ignorelist') |
538 |
if computer: |
|
|
539 |
ignore_filter += '(cn=%s)' % (computer) |
540 |
if ignore_filter: |
534 |
if ignore_filter: |
541 |
print " ignore_filter='(|%s)'," % ignore_filter |
535 |
print " ignore_filter='%s'," % ignore_filter |
542 |
@!@ |
536 |
@!@ |
543 |
|
537 |
|
544 |
con_create_objectclass=['top', 'computer' ], |
538 |
con_create_objectclass=['top', 'computer' ], |
|
653 |
|
647 |
|
654 |
print dns_section |
648 |
print dns_section |
655 |
|
649 |
|
|
|
650 |
from univention.s4connector.s4.mapping import ignore_filter_parts_from_attr |
656 |
|
651 |
|
657 |
if configRegistry.is_true('connector/s4/mapping/gpo', True): |
652 |
if configRegistry.is_true('connector/s4/mapping/gpo', True): |
658 |
ignore_filter = '' |
653 |
ignore_filter = ignore_filter_parts_from_attr('cn', 'connector/s4/mapping/gpo/ignorelist') |
659 |
for gpo in configRegistry.get('connector/s4/mapping/gpo/ignorelist', '').split(','): |
|
|
660 |
if gpo: |
661 |
ignore_filter += '(cn=%s)' % (gpo) |
662 |
if configRegistry.get('connector/s4/mapping/ou/syncmode'): |
654 |
if configRegistry.get('connector/s4/mapping/ou/syncmode'): |
663 |
sync_mode_ou=configRegistry.get('connector/s4/mapping/ou/syncmode') |
655 |
sync_mode_ou=configRegistry.get('connector/s4/mapping/ou/syncmode') |
664 |
else: |
656 |
else: |
Lines 772-782
if configRegistry.is_true('connector/s4/mapping/gpo', True):
|
Link Here
|
---|
|
772 |
''' |
764 |
''' |
773 |
print section |
765 |
print section |
774 |
|
766 |
|
|
|
767 |
from univention.s4connector.s4.mapping import ignore_filter_parts_from_attr |
768 |
|
775 |
if configRegistry.is_true('connector/s4/mapping/wmifilter', False): |
769 |
if configRegistry.is_true('connector/s4/mapping/wmifilter', False): |
776 |
ignore_filter = '' |
770 |
ignore_filter = ignore_filter_parts_from_attr('cn', 'connector/s4/mapping/wmifilter/ignorelist') |
777 |
for wmifilter in configRegistry.get('connector/s4/mapping/wmifilter/ignorelist', '').split(','): |
|
|
778 |
if wmifilter: |
779 |
ignore_filter += '(cn=%s)' % (wmifilter) |
780 |
if configRegistry.get('connector/s4/mapping/ou/syncmode'): |
771 |
if configRegistry.get('connector/s4/mapping/ou/syncmode'): |
781 |
sync_mode_ou=configRegistry.get('connector/s4/mapping/ou/syncmode') |
772 |
sync_mode_ou=configRegistry.get('connector/s4/mapping/ou/syncmode') |
782 |
else: |
773 |
else: |
Lines 901-911
if configRegistry.is_true('connector/s4/mapping/wmifilter', False):
|
Link Here
|
---|
|
901 |
), |
892 |
), |
902 |
''' % {'ignore_filter': ignore_filter, 'sync_mode_ou': sync_mode_ou} |
893 |
''' % {'ignore_filter': ignore_filter, 'sync_mode_ou': sync_mode_ou} |
903 |
|
894 |
|
|
|
895 |
from univention.s4connector.s4.mapping import ignore_filter_parts_from_attr |
896 |
|
904 |
if configRegistry.is_true('connector/s4/mapping/msprintconnectionpolicy', False): |
897 |
if configRegistry.is_true('connector/s4/mapping/msprintconnectionpolicy', False): |
905 |
ignore_filter = '' |
898 |
ignore_filter = ignore_filter_parts_from_attr('cn', 'connector/s4/mapping/msprintconnectionpolicy/ignorelist') |
906 |
for cfilter in configRegistry.get('connector/s4/mapping/msprintconnectionpolicy/ignorelist', '').split(','): |
|
|
907 |
if cfilter: |
908 |
ignore_filter += '(cn=%s)' % (cfilter) |
909 |
if configRegistry.get('connector/s4/mapping/ou/syncmode'): |
899 |
if configRegistry.get('connector/s4/mapping/ou/syncmode'): |
910 |
sync_mode_ou=configRegistry.get('connector/s4/mapping/ou/syncmode') |
900 |
sync_mode_ou=configRegistry.get('connector/s4/mapping/ou/syncmode') |
911 |
else: |
901 |
else: |
|
984 |
con_search_filter='(&(|(objectClass=container)(objectClass=builtinDomain))(!(objectClass=groupPolicyContainer)))', # builtinDomain is cn=builtin (with group cn=Administrators) |
974 |
con_search_filter='(&(|(objectClass=container)(objectClass=builtinDomain))(!(objectClass=groupPolicyContainer)))', # builtinDomain is cn=builtin (with group cn=Administrators) |
985 |
|
975 |
|
986 |
@!@ |
976 |
@!@ |
987 |
ignore_filter = '' |
977 |
from univention.s4connector.s4.mapping import ignore_filter_parts_from_attr |
988 |
for cn in configRegistry.get('connector/s4/mapping/container/ignorelist', 'mail,kerberos,MicrosoftDNS').split(','): |
978 |
ignore_filter = ignore_filter_parts_from_attr('cn', 'connector/s4/mapping/container/ignorelist', 'mail,kerberos,MicrosoftDNS') |
989 |
if cn: |
|
|
990 |
ignore_filter += '(cn=%s)' % (cn) |
991 |
if ignore_filter: |
979 |
if ignore_filter: |
992 |
print " ignore_filter='(|%s)'," % ignore_filter |
980 |
print " ignore_filter='%s'," % ignore_filter |
993 |
@!@ |
981 |
@!@ |
994 |
|
982 |
|
995 |
ignore_subtree = global_ignore_subtree, |
983 |
ignore_subtree = global_ignore_subtree, |
|
1041 |
con_search_filter='objectClass=organizationalUnit', |
1029 |
con_search_filter='objectClass=organizationalUnit', |
1042 |
|
1030 |
|
1043 |
@!@ |
1031 |
@!@ |
1044 |
ignore_filter = '' |
1032 |
from univention.s4connector.s4.mapping import ignore_filter_parts_from_attr |
1045 |
for ou in configRegistry.get('connector/s4/mapping/ou/ignorelist', '').split(','): |
1033 |
ignore_filter = ignore_filter_parts_from_attr('ou', 'connector/s4/mapping/ou/ignorelist') |
1046 |
if ou: |
|
|
1047 |
ignore_filter += '(ou=%s)' % (ou) |
1048 |
if ignore_filter: |
1034 |
if ignore_filter: |
1049 |
print " ignore_filter='(|%s)'," % ignore_filter |
1035 |
print " ignore_filter='%s'," % ignore_filter |
1050 |
@!@ |
1036 |
@!@ |
1051 |
|
1037 |
|
1052 |
ignore_subtree = global_ignore_subtree, |
1038 |
ignore_subtree = global_ignore_subtree, |