Variables: ldap/server/addition

Variables: ldap/server/name

Variables: ldap/server/name

Variables: ldap/server/addition

univention-thin-client-basesystem (9.1.3-1) unstable; urgency=low

  * merged changed from customer scope Ticket: #2011041210005499

 -- Felix Botner <botner@univention.de>  Mon, 15 Aug 2011 16:32:20 +0200

univention-thin-client-basesystem (9.1.2-2) unstable; urgency=low

  * run univention-find-ldapserver at the end of thin-client-network

    Ticket #2011030710000906 

 -- Felix Botner <botner@univention.de>  Wed, 13 Apr 2011 16:08:00 +0200

univention-thin-client-basesystem (9.1.2-1) unstable; urgency=low

  * ignore ldap server policy univentionLDAPServer Ticket #2011030710000906 

 -- Felix Botner <botner@univention.de>  Mon, 11 Apr 2011 14:51:39 +0200

univention-thin-client-basesystem (9.1.1-1) unstable; urgency=low

  * added univention-find-ldapserver into tc' chroot 

    Ticket #2011030710000906

 -- Felix Botner <botner@univention.de>  Mon, 11 Apr 2011 11:25:48 +0200

univention-thin-client-basesystem (9.1.0-1) unstable; urgency=low

  * support multiple ldap server in /proc/cmdline

  * support ldap/server/addition in thin client config

    and init scripts Ticket #2011030710000906

 -- Felix Botner <botner@univention.de>  Thu, 07 Apr 2011 11:28:38 +0200

@!@

print "HOST %s" % baseConfig.get('ldap/server/name', "") + " " + baseConfig.get('ldap/server/addition', "")

print "BASE %s" % baseConfig.get('ldap/base', "")

print "#SASL_MECH GSSAPI"

print "#SASL_REALM @%@kerberos/realm@%@"

@!@

#!/usr/bin/python2.4

#

# Univention Client Basesystem

#  helper script finding the ldap server for a thin client

#

# Copyright 2011 Univention GmbH

#

# http://www.univention.de/

#

# All rights reserved.

#

# The source code of this program is made available

# under the terms of the GNU Affero General Public License version 3

# (GNU AGPL V3) as published by the Free Software Foundation.

#

# Binary versions of this program provided by Univention to you as

# well as other copyrighted, protected or trademarked materials like

# Logos, graphics, fonts, specific documentations and configurations,

# cryptographic keys etc. are subject to a license agreement between

# you and Univention and not subject to the GNU AGPL V3.

#

# In the case you use this program under the terms of the GNU AGPL V3,

# the program is provided in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

# GNU Affero General Public License for more details.

#

# You should have received a copy of the GNU Affero General Public

# License with the Debian GNU/Linux or Univention distribution in file

# /usr/share/common-licenses/AGPL-3; if not, see

# <http://www.gnu.org/licenses/>.

import ldap

import socket

import os

import re

import sys

import univention.config_registry

LDAP_OLD_CMDLINE = re.compile('.*ldapServer=([^ "]+).*')

LDAP_NEW_CMDLINE = re.compile('.*ldapServer="([^"]+)".*')

LDAP_PORT = re.compile('.*ldapPort=([^ ]+).*')

SOURCE = "/proc/cmdline"

def setTemporaryVarsAndExit (server, port, addition):

	if server: univention.config_registry.handler_set(['temporary/ldap/server=%s' % server])

	if addition: univention.config_registry.handler_set(['temporary/ldap/addition=%s' % " ".join(addition)])

	if port: univention.config_registry.handler_set(['temporary/ldap/port=%s' % port])

	sys.exit(0)

def ldapAvailable (ip, port):

	# test ldap port

	try:

		s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

		s.settimeout(1)

		s.connect((ip, int(port)))

	except Exception, e:

		return False

	# try simple bind

	try:

		lo = ldap.open(ip, port=int(port))

		lo.simple_bind_s()

	except Exception, e:

		return False

	return True

server = ""

servers = []

port = "389"

fh = open(SOURCE, "r")

for line in fh.readlines():

	line = line.rstrip('\n')

	# old cmdline style

	match = LDAP_OLD_CMDLINE.match(line)

	if match:

		server = match.group(1)

	# new style

	match = LDAP_NEW_CMDLINE.match(line)

	if match:

		servers = match.group(1).split(" ")

	# port

	match = LDAP_PORT.match(line)

	if match:

		port = match.group(1)

fh.close()

if server:

	setTemporaryVarsAndExit(server, port, [])

if servers:

	servers.reverse()

	addServer = []

	# test ldap servers

	while servers:

		server = servers.pop()

		if ldapAvailable(server, port):

			untested = servers

			untested.reverse()

			addServer = untested + addServer

			setTemporaryVarsAndExit(server, port, addServer)

		else:

			addServer.append(server)

	# multiple servers found but none available,

	# use first one

	server = addServer[0]

	del addServer[0]

	setTemporaryVarsAndExit(server, port, addServer)

	# ignore ldap server policy

	if [ "$var" == "univentionLDAPServer" ]; then

		continue

	fi

if [ -z "$searchedForLdap" ]; then

	# save available ldap server from /proc/cmdline in temporary ucr var for later use

	/usr/sbin/univention-find-ldapserver

fi