使用Python脚本管理远程LDAP

import ldap try: l = ldap.open("serverip") l.protocol_version = ldap.VERSION3 username = "myUserName@adtest.local" password = "secret" result = l.simple_bind(username, password) print result except ldap.LDAPError, e: print e

import ldap import ldap.modlist as modlist # Open a connection l = ldap.initialize("ldaps://serverIp:636/") # Bind/authenticate with a user with apropriate rights to add objects l.simple_bind_s("myUserName@adtest.local","secret") # The dn of our new entry/object dn="cn=test,dc=adtest,dc=local" # A dict to help build the "body" of the object attrs = {} attrs['objectclass'] = ['top','organizationalRole','simpleSecurityObject'] attrs['cn'] = 'test' attrs['userPassword'] = 'aDifferentSecret' attrs['description'] = 'test user' # Convert our dict to nice syntax for the add-function using modlist-module ldif = modlist.addModlist(attrs) # Do the add-operation to the ldapserver l.add_s(dn,ldif) # Disconnect and free resources when done l.unbind_s()

1条回答

网友

1楼 · 发布于 2024-09-27 23:19:57

工作查询搜索！
贷方：
http://www.linuxjournal.com/article/6988?page=0,0

import ldap

def main():

    keyword = "user_query"

    try:
        l = ldap.open(serverIp)
        l.simple_bind_s("myUserName@adtest.local", "password")
        print "successfully bound to server.\n"

        print "Searching..\n"
        my_search(l,keyword)
    except ldap.LDAPError, e:
        print "Couldn't connect. %s " % e

def my_search(l, keyword):
    #Base is for the DN(Distinguised Name) of the entry where the search should start
    base = "cn=Users,dc=adtest,dc=local"
    #Scope has three options, SUBTREE searches all sub-folder/directories
    scope = ldap.SCOPE_SUBTREE
    #filter consists of a cn(common name) and keyword.
    #putting asterisks around our keyword will match anything containing the string
    f = "cn=" + "*" + keyword + "*"
    #determines which attributes to return. Returns all if set to "None"
    retrieve_attributes = None

    count = 0
    result_set = []
    timeout = 0
    result = l.search_s(base, scope, f, retrieve_attributes)
    print result[0][1].keys()
    try:
        result_id = l.search(base, scope, f, retrieve_attributes)
        while 1:
            result_type, result_data = l.result(result_id, timeout)
            if(result_data == []):
                break
            else:
                if result_type == ldap.RES_SEARCH_ENTRY:
                    result_set.append(result_data)
        if len(result_set) == 0:
            print "No Results"
            return
        for i in range(len(result_set)):
            for entry in result_set[i]:
                try:
                    name = entry[1]['cn'][0]
                    count += 1
                    print str(count)+" "+name
                except:
                    pass
    except ldap.LDAPError, e:
        print e

if __name__=='__main__':
    main()

我修复了代码中的一个错误，但是仍然无法设置某些属性，因为LDAP使用纯文本，并且不允许在没有安全连接的情况下发送私有信息。为了添加/修改用户密码信息和userAccountControl标志（启用用户），我使用端口636切换到ldap，通过添加Active Directory证书服务（*要求您重新启动服务器）在服务器上启用了该端口。
此外，您还需要包括'ldap.set_选项(ldap.OPT_X_TLS_需要证书，0）行，然后初始化。在

工作添加用户
贷方：
how to set lockoutTime and password of a user of Active Directory

^{pr2}$

相关问题更多 >

编程相关推荐

热门问题

热门文章