Attachment 4177 Details for Bug 26120

univention-samba4-ldap-position-sync.py

univention-samba4-ldap-position-sync.py (text/plain), 6.72 KB, created by Arvid Requate on 2012-02-14 17:54 CET

(hide)

Description:

Filename:

MIME Type:

Creator: Arvid Requate

Created: 2012-02-14 17:54 CET

Size: 6.72 KB

patch

obsolete

>#!/usr/bin/python2.6
>from samba.samdb import SamDB
>import ldb
>import optparse
>import sys
>from samba.param import LoadParm
>from samba.auth import system_session
>from univention import config_registry
>import univention.s4connector.s4
>import univention.admin.filter
>import copy
>
>def log(level, string):
>	if opts.verbose >= level:
>		print string
>
>
>## the following functions are modified versions of the ones in univention.s4connector.s4
>## the only difference is that they use a non-matching objectClass (None)
>## to trick samaccountname_dn_mapping into retriving the DN
>## where the S4 Connector would create an object if it wasn't there already..
>
>def user_dn_mapping(s4connector, given_object, dn_mapping_stored, isUCSobject):
>	'''
>	map dn of given user using the samaccountname/uid
>	s4connector is an instance of univention.s4connector.s4, given_object an object-dict,
>	dn_mapping_stored a list of dn-types which are already mapped because they were stored in the config-file
>	'''
>	return univention.s4connector.s4.samaccountname_dn_mapping(s4connector, given_object, dn_mapping_stored, isUCSobject, 'user', u'samAccountName', u'posixAccount', 'uid', None)
>
>def group_dn_mapping(s4connector, given_object, dn_mapping_stored, isUCSobject):
>	'''
>	map dn of given group using the samaccountname/cn
>	s4connector is an instance of univention.s4connector.s4, given_object an object-dict,
>	dn_mapping_stored a list of dn-types which are already mapped because they were stored in the config-file
>	'''
>	return univention.s4connector.s4.samaccountname_dn_mapping(s4connector, given_object, dn_mapping_stored, isUCSobject, 'group', u'cn', u'posixGroup', 'cn', None)
>
>def windowscomputer_dn_mapping(s4connector, given_object, dn_mapping_stored, isUCSobject):
>	'''
>	map dn of given windows computer using the samaccountname/uid
>	s4connector is an instance of univention.s4connector.s4, given_object an object-dict,
>	dn_mapping_stored a list of dn-types which are already mapped because they were stored in the config-file
>	'''
>	return univention.s4connector.s4.samaccountname_dn_mapping(s4connector, given_object, dn_mapping_stored, isUCSobject, 'windowscomputer', u'samAccountName', u'posixAccount', 'uid', None)
>
>def dc_dn_mapping(s4connector, given_object, dn_mapping_stored, isUCSobject):
>	'''
>	map dn of given dc computer using the samaccountname/uid
>	s4connector is an instance of univention.s4connector.s4, given_object an object-dict,
>	dn_mapping_stored a list of dn-types which are already mapped because they were stored in the config-file
>	'''
>	return univention.s4connector.s4.samaccountname_dn_mapping(s4connector, given_object, dn_mapping_stored, isUCSobject, 'dc', u'samAccountName', u'posixAccount', 'uid', None)
>
>overload_dn_mapping_function = {
>	univention.s4connector.s4.user_dn_mapping: user_dn_mapping,
>	univention.s4connector.s4.group_dn_mapping: group_dn_mapping,
>	univention.s4connector.s4.windowscomputer_dn_mapping: windowscomputer_dn_mapping,
>	univention.s4connector.s4.dc_dn_mapping: dc_dn_mapping,
>}
>
>## subclass the univention.s4connector.s4.s4 for convenience
>class S4Connector(univention.s4connector.s4.s4):
>	def __init__(self, ucr=None):
>		if not ucr:
>			ucr = config_registry.ConfigRegistry()
>			ucr.load()
>			
>		s4_ldap_bindpw=open(ucr['%s/s4/ldap/bindpw' % CONFIGBASENAME]).read()
>		if s4_ldap_bindpw[-1] == '\n':
>			s4_ldap_bindpw=s4_ldap_bindpw[0:-1]
>
>		univention.s4connector.s4.s4.__init__(self,
>				CONFIGBASENAME,
>				mapping.s4_mapping,
>				ucr,
>				ucr['%s/s4/ldap/host' % CONFIGBASENAME],
>				ucr['%s/s4/ldap/port' % CONFIGBASENAME],
>				ucr['%s/s4/ldap/base' % CONFIGBASENAME],
>				ucr['%s/s4/ldap/binddn' % CONFIGBASENAME],
>				s4_ldap_bindpw,
>				ucr['%s/s4/ldap/certificate' % CONFIGBASENAME],
>				ucr['%s/s4/listener/dir' % CONFIGBASENAME])
>
>	def plain_mapped_dn(self, property_type, object, old_dn):
>		## determine the dn where the S4 Connector would have created the object
>		if hasattr ( self.property[property_type], 'dn_mapping_function' ):
>			tmp_object = copy.deepcopy(object)
>			tmp_object['dn'] = old_dn
>			for function in self.property[property_type].dn_mapping_function:
>				if function in overload_dn_mapping_function:
>					tmp_object = overload_dn_mapping_function[function](self, tmp_object, [], isUCSobject=True)
>				else:
>					tmp_object = function(self, tmp_object, [], isUCSobject=True)
>			old_dn = tmp_object['dn']
>
>		if hasattr(self.property[property_type], 'position_mapping'):
>			for mapping in self.property[property_type].position_mapping:
>				old_dn=self._subtree_replace(old_dn.lower(),mapping[0].lower(),mapping[1].lower())
>
>		return old_dn
>
>
>if __name__ == "__main__":
>	parser = optparse.OptionParser("%prog [options]")
>	parser.add_option("--dry-run", action="store_true", dest="dryrun")
>	parser.add_option("-v", "--verbose", action="count", dest="verbose", default=0)
>	parser.add_option("--configbasename", dest="configbasename",
>		help="", metavar="CONFIGBASENAME", default="connector")
>	opts, args = parser.parse_args()
>
>	if opts.dryrun:
>		print "Option --dry-run given, checking only:"
>
>	CONFIGBASENAME = "connector"
>	if opts.configbasename:
>		CONFIGBASENAME = opts.configbasename
>	sys.path=['/etc/univention/%s/s4/' % CONFIGBASENAME]+sys.path
>	import mapping
>
>	ucs_match_filter = {
>		'user':
>			mapping.s4_mapping['user'].match_filter,
>		'group': 
>			unicode(univention.admin.filter.conjunction('&', [
>				univention.admin.filter.expression('cn', '*'),
>				univention.admin.filter.conjunction('|',
>				  [univention.admin.filter.conjunction('&',
>						[univention.admin.filter.expression('objectClass', 'univentionGroup'),]),
>				   univention.admin.filter.conjunction('&',
>						[univention.admin.filter.expression('objectClass', 'sambaGroupMapping'),])
>				   ])
>				])),
>		'dc':
>			mapping.s4_mapping['dc'].match_filter,
>		'windowscomputer':
>			mapping.s4_mapping['windowscomputer'].match_filter,
>	}
>
>	ucr = config_registry.ConfigRegistry()
>	ucr.load()
>
>	s4=S4Connector(ucr)
>
>			
>	lp = LoadParm()
>	lp.load('/etc/samba/smb.conf')
>	samdb = SamDB('/var/lib/samba/private/sam.ldb', session_info=system_session(lp), lp=lp)
>
>
>	ldap_base = ucr.get('ldap/base', '')
>
>	for key in ucs_match_filter:
>		for dn, attrs in s4.lo.search(ucs_match_filter[key], ldap_base, 'sub', []):
>			
>			log(1, "UCS: %s" % dn)
>
>			## use the S4 Connector to lookup the current location of the corresponding object
>			object = { 'dn': unicode(dn, 'utf8'), 'modtype': 'modify', 'attributes': attrs }
>			object = s4._object_mapping(key, object, 'ucs')
>
>			if not s4._ignore_object(key, object):
>				## determine the plain_mapped_dn, i.e. where the S4 Connector would create the object
>				mapped_dn = s4.plain_mapped_dn(key, object, dn)
>				if object['dn'].lower() != mapped_dn.lower():
>					print "RENAME: ", object['dn'], " to ", mapped_dn
>					if not opts.dryrun:
>						samdb.rename(ldb.Dn(samdb, object['dn']), ldb.Dn(samdb, mapped_dn))
>

Actions: View

Attachments on bug 26120: 4177 | 4193