univention.connector package

univention.connector.decode_guid(value)

univention.connector.generate_strong_password(length=24)

univention.connector.set_ucs_passwd_user(connector, key, ucs_object)

set random password to fulfill required values

univention.connector.check_ucs_lastname_user(connector, key, ucs_object)

check if required values for lastname are set

univention.connector.set_primary_group_user(connector, key, ucs_object)

check if correct primary group is set

univention.connector.dictonary_lowercase(dict_)

univention.connector.compare_normal(val1, val2)

univention.connector.compare_lowercase(val1, val2)

class univention.connector.configdb(filename)

Bases: object

get_by_value(section, option)

get(section, option)

set(section, option, value)

items(section)

remove_option(section, option)

has_section(section)

add_section(section)

has_option(section, option)

class univention.connector.RFC4514_dn

Bases: object

special_dn_chars = '"+,;<=>'

pattern = '(\\\\")|(\\\\\\+)|(\\\\,)|(\\\\;)|(\\\\<)|(\\\\=)|(\\\\>)'

match = re.compile('(\\\\")|(\\\\\\+)|(\\\\,)|(\\\\;)|(\\\\<)|(\\\\=)|(\\\\>)')

substs = ['\\22', '\\2B', '\\2C', '\\3B', '\\3C', '\\3D', '\\3E']

replace()

classmethod to_ad(dn)

Currently just for documentation purposes

classmethod to_openldap(dn)

Doing the inverse of RFC4514_dn.to_ad

class univention.connector.Mapping(mapping)

Bases: object

class univention.connector.attribute(ucs_attribute='', ldap_attribute='', con_attribute='', con_other_attribute='', required=0, single_value=False, compare_function='', mapping=(), reverse_attribute_check=False, sync_mode='sync', con_depends='', con_attribute_encoding='UTF-8')

Bases: object

A mapping attribute description

Parameters:

• ucs_attribute (str) – The property name of the object in UDM

• ldap_attribute (str) – The LDAP attribute name of the object in UCS LDAP

• con_attribute (str) – The LDAP attribute name of the object in AD LDAP

• con_other_attribute (str) – Further LDAP attribute name of the object in AD LDAP.

• required (bool) – unused

• single_value (bool) – Whether the attribute is single_value in the AD LDAP.

• compare_function (callable) – A comparison function which compares raw ldap attribute values.

• mapping – Mapping functions for (sync_to_ad, sync_to_ucs)

• reverse_attribute_check – Make a reverse check of this mapping, if the mapping is not 1:1.

• sync_mode – The syncronization direction (read, write, sync)

Ptype mapping:

tuple

Ptype reverse_attribute_check:

bool

Ptype sync_mode:

str

class univention.connector.property(ucs_default_dn='', con_default_dn='', ucs_module='', ucs_module_others=[], sync_mode='', scope='', con_search_filter='', ignore_filter=None, match_filter=None, allow_subtree=[], allow_filter=None, ignore_subtree=[], con_create_objectclass=[], con_create_attributes=[], dn_mapping_function=[], attributes=None, ucs_create_functions=[], post_con_create_functions=[], post_con_modify_functions=[], post_ucs_modify_functions=[], post_attributes=None, mapping_table=None, position_mapping=[], con_subtree_delete_objects=[])

Bases: object

class univention.connector.ucs(CONFIGBASENAME, _property, configRegistry, listener_dir, logfilename, debug_level)

Bases: object

init_ldap_connections()

dn_mapped_to_base(dn, base)

Introduced for Bug #33110: Fix case of base part of DN

open_ucs()

search_ucs(filter='(objectClass=*)', base='', scope='sub', attr=[], unique=0, required=0, timeout=-1, sizelimit=0)

init_debug()

close_debug()

list_rejected_ucs(filter_noresync=False)

get_dn_by_ucs(dn_ucs)

get_dn_by_con(dn_con)

context_log(property_type, obj, message='', to_ucs=True)

get_ucs_ldap_object_dn(dn)

get_ucs_ldap_object(dn)

get_ucs_object(property_type, dn)

initialize_ucs()

initialize()

resync_rejected_ucs()

tries to resync rejected changes from UCS

resync_rejected()

poll_ucs()

poll changes from UCS: iterates over files exported by directory-listener module

poll(show_deleted=True)

add_in_ucs(property_type, object, module, position)

modify_in_ucs(property_type, object, module, position)

move_in_ucs(property_type, object, module, position)

update_deleted_cache_after_removal(entryUUID, objectGUID)

was_entryUUID_deleted(entryUUID)

was_objectGUID_deleted_by_ucs(objectGUID)

delete_in_ucs(property_type, object, module, position)

Removes an AD object in UCS-LDAP

sync_to_ucs(property_type, object, pre_mapped_ad_dn, original_object)

Synchronize an object from AD-LDAP to UCS Open-LDAP.

Parameters:

• property_type – the type of the object to be synced, must be part of the mapping. (e.g. “user”, “group”, “dc”, “windowscomputer”, etc.)

• object – A dictionary describing the AD object. modtype: A modification type (“add”, “modify”, “move”, “delete”) dn: The DN of the object in the UCS-LDAP olddn: The olddn of the object object in UCS-LDAP (e.g. on “move” operation)

• pre_mapped_ad_dn – pass

• original_object – pass

Ptype object:

dict

identify_udm_object(dn, attrs)

Get the type of the specified UCS object

Subpackages

• univention.connector.ad package
  • netbiosDomainnameNotFound
  • kerberosAuthenticationFailed
  • set_univentionObjectFlag_to_synced()
  • group_members_sync_from_ucs()
  • object_memberships_sync_from_ucs()
  • group_members_sync_to_ucs()
  • object_memberships_sync_to_ucs()
  • primary_group_sync_from_ucs()
  • primary_group_sync_to_ucs()
  • disable_user_from_ucs()
  • set_userPrincipalName_from_ucr()
  • disable_user_to_ucs()
  • fix_dn_in_search()
  • fix_dn()
  • str2dn()
  • unix2ad_time()
  • ad2unix_time()
  • samba2ad_time()
  • ad2samba_time()
  • samaccountname_dn_mapping()
  • user_dn_mapping()
  • group_dn_mapping()
  • windowscomputer_dn_mapping()
  • decode_sid()
  • LDAPEscapeFormatter
    • LDAPEscapeFormatter.convert_field()
  • format_escaped()
  • ad
    • ad.RANGE_RETRIEVAL_PATTERN
    • ad.main()
    • ad.init_group_cache()
    • ad.init_ldap_connections()
    • ad.open_drs_connection()
    • ad.open_samr()
    • ad.get_kerberos_ticket()
    • ad.ad_search_ext_s()
    • ad.open_ad()
    • ad.get_lastUSN()
    • ad.list_rejected()
    • ad.save_rejected()
    • ad.remove_rejected()
    • ad.addToCreationList()
    • ad.removeFromCreationList()
    • ad.isInCreationList()
    • ad.parse_range_retrieval_attrs()
    • ad.value_range_retrieval()
    • ad.get_ad_members()
    • ad.get_object()
    • ad.set_primary_group_to_ucs_user()
    • ad.primary_group_sync_from_ucs()
    • ad.primary_group_sync_to_ucs()
    • ad.object_memberships_sync_from_ucs()
    • ad.group_members_sync_from_ucs()
    • ad.object_memberships_sync_to_ucs()
    • ad.one_group_member_sync_to_ucs()
    • ad.one_group_member_sync_from_ucs()
    • ad.group_members_sync_to_ucs()
    • ad.set_userPrincipalName_from_ucr()
    • ad.disable_user_from_ucs()
    • ad.disable_user_to_ucs()
    • ad.ucs_object_ignored()
    • ad.initialize()
    • ad.resync_rejected()
    • ad.poll()
    • ad.sync_from_ucs()
    • ad.delete_in_ad()
  • Submodules
  • univention.connector.ad.main module
    • bind_stdout()
    • daemon()
    • connect()
    • lock()
    • main()
  • univention.connector.ad.mapping module
    • ignore_filter_from_tmpl()
    • ignore_filter_from_attr()
    • get_mapping()
    • create_mapping()
    • load_localmapping()
  • univention.connector.ad.password module
    • nt_password_to_arcfour_hmac_md5()
    • transformKey()
    • mySamEncryptNTLMHash()
    • deriveKey()
    • removeDESLayer()
    • decrypt()
    • decrypt_history()
    • calculate_krb5keys()
    • set_password_in_ad()
    • decrypt_supplementalCredentials()
    • get_password_from_ad()
    • password_sync_ucs()
    • password_sync_kinit()
    • password_sync()
    • lockout_sync_to_ucs()
    • lockout_sync_from_ucs()
  • univention.connector.ad.proxyAddresses module
    • valid_mailaddress()
    • equal()
    • to_proxyAddresses()
    • to_mailPrimaryAddress()
    • to_mailAlternativeAddress()
  • univention.connector.ad.query_config module
    • fixup()

Submodules

univention.connector.adcache module

class univention.connector.adcache.EntryDiff(old, new)

Bases: object

added()

removed()

changed()

class univention.connector.adcache.ADCache(filename)

Bases: object

Local cache for the current AD state of the adconnector. With this cache the connector has the possibility to create a diff between the new AD object and the old one from cache.

add_entry(guid, entry)

diff_entry(old_entry, new_entry)

get_entry(guid)

remove_entry(guid)