From 5f32ec0a16b5a07c401493032c7402a8289a2878 Mon Sep 17 00:00:00 2001
From: Arthur de Jong <arthur@arthurdejong.org>
Date: Wed, 29 Dec 2010 21:50:17 +0000
Subject: add an experimental (currently partial) Python implementation of
 nslcd to see if we can get the same features with easier to maintain code

git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1347 ef36b2f9-881f-0410-afb5-c4e39611909c
---
 pynslcd/common.py | 125 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 125 insertions(+)
 create mode 100644 pynslcd/common.py

(limited to 'pynslcd/common.py')

diff --git a/pynslcd/common.py b/pynslcd/common.py
new file mode 100644
index 0000000..fd3196a
--- /dev/null
+++ b/pynslcd/common.py
@@ -0,0 +1,125 @@
+
+# common.py - functions that are used by different modules
+#
+# Copyright (C) 2010 Arthur de Jong
+#
+# This library is free software; you can redistribute it and/or
+# modify it under the terms of the GNU Lesser General Public
+# License as published by the Free Software Foundation; either
+# version 2.1 of the License, or (at your option) any later version.
+#
+# This library is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public
+# License along with this library; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+# 02110-1301 USA
+
+import cfg
+import constants
+
+import re
+import ldap
+import ldap.dn
+
+_validname_re = re.compile(r'^[A-Za-z0-9._@$][A-Za-z0-9._@$ \\~-]{0,98}[A-Za-z0-9._@$~-]$')
+
+def isvalidname(name):
+    """Checks to see if the specified name seems to be a valid user or group
+    name.
+
+    This test is based on the definition from POSIX (IEEE Std 1003.1, 2004,
+    3.426 User Name, 3.189 Group Name and 3.276 Portable Filename Character Set):
+    http://www.opengroup.org/onlinepubs/009695399/basedefs/xbd_chap03.html#tag_03_426
+    http://www.opengroup.org/onlinepubs/009695399/basedefs/xbd_chap03.html#tag_03_189
+    http://www.opengroup.org/onlinepubs/009695399/basedefs/xbd_chap03.html#tag_03_276
+
+    The standard defines user names valid if they contain characters from
+    the set [A-Za-z0-9._-] where the hyphen should not be used as first
+    character. As an extension this test allows some more characters."""
+    return bool(_validname_re.match(name))
+
+def validate_name(name):
+    """Checks to see if the specified name seems to be a valid user or group
+    name. See isvalidname()."""
+    if not _validname_re.match(name):
+        raise ValueError('%r: invalid user name' % name)
+
+
+class Request(object):
+    """
+    Request handler class. Subclasses are expected to handle actual requests
+    and should implement the following members:
+
+    action: the NSLCD_ACTION_* action that should trigger this handler
+    read_parameters: a function that reads the request parameters of the
+                     request stream
+    filter: LDAP search filter
+    mk_filter (optional): function that returns the LDAP search filter
+    write: function that writes a single LDAP entry to the result stream
+    """
+
+    bases = cfg.bases
+    scope = cfg.scope
+
+    def __init__(self, fp, conn, calleruid):
+        self.fp = fp
+        self.conn = conn
+        self.calleruid = calleruid
+        # have default empty values for these
+        self.name = None
+        self.uid = None
+        self.gid = None
+        self.address = None
+
+    def read_parameters(self):
+        """This method should read the parameters from ths stream and
+        store them in self."""
+        pass
+
+    def mk_filter(self):
+        """Return the active search filter (based on the read parameters)."""
+        return self.filter
+
+    def handle_request(self):
+        """This method handles the request based on the parameters read
+        with read_parameters()."""
+        # get search results
+        for base in self.bases:
+            # do the LDAP search
+            try:
+                res = self.conn.search_s(base, self.scope, self.mk_filter(), self.attributes)
+                for entry in res:
+                    if entry[0]:
+                        self.write(entry)
+            except ldap.NO_SUCH_OBJECT:
+                # FIXME: log message
+                pass
+        # write the final result code
+        self.fp.write_int32(constants.NSLCD_RESULT_END)
+
+    def __call__(self):
+        self.read_parameters()
+        # TODO: log call with parameters
+        self.fp.write_int32(constants.NSLCD_VERSION)
+        self.fp.write_int32(self.action)
+        self.handle_request()
+
+
+def get_handlers(module):
+    """Return a dictionary mapping actions to Request classes."""
+    import inspect
+    res = {}
+    if isinstance(module, basestring):
+        module = __import__(module, globals())
+    for name, cls in inspect.getmembers(module, inspect.isclass):
+        if issubclass(cls, Request) and hasattr(cls, 'action'):
+            res[cls.action] = cls
+    return res
+
+def get_rdn_value(entry, attribute):
+    dn, attributes = entry
+    return dict((x, y) for x, y, z in ldap.dn.str2dn(dn)[0])[attribute]
-- 
cgit v1.2.3