from ipsilon.info.common import InfoProviderBase
from ipsilon.info.common import InfoProviderInstaller
-from ipsilon.info.common import InfoMapping
from ipsilon.util.plugin import PluginObject
+from ipsilon.util.policy import Policy
from ipsilon.util import config as pconfig
import ldap
+import subprocess
# TODO: fetch mapping from configuration
-ldap_mapping = {
- 'cn': 'fullname',
- 'commonname': 'fullname',
- 'sn': 'surname',
- 'mail': 'email',
- 'destinationindicator': 'country',
- 'postalcode': 'postcode',
- 'st': 'state',
- 'statetorprovincename': 'state',
- 'streetaddress': 'street',
- 'telephonenumber': 'phone',
-}
+ldap_mapping = [
+ ['cn', 'fullname'],
+ ['commonname', 'fullname'],
+ ['sn', 'surname'],
+ ['mail', 'email'],
+ ['destinationindicator', 'country'],
+ ['postalcode', 'postcode'],
+ ['st', 'state'],
+ ['statetorprovincename', 'state'],
+ ['streetaddress', 'street'],
+ ['telephonenumber', 'phone'],
+]
class InfoProvider(InfoProviderBase):
def __init__(self, *pargs):
super(InfoProvider, self).__init__(*pargs)
- self.mapper = InfoMapping()
- self.mapper.set_mapping(ldap_mapping)
+ self.mapper = Policy(ldap_mapping)
self.name = 'ldap'
self.description = """
Info plugin that uses LDAP to retrieve user data. """
reply = dict()
try:
ldapattrs = self._get_user_data(conn, dn)
- userattrs, extras = self.mapper.map_attrs(ldapattrs)
+ userattrs, extras = self.mapper.map_attributes(ldapattrs)
groups = self._get_user_groups(conn, dn, ldapattrs)
- reply['userdata'] = userattrs
- reply['groups'] = groups
- reply['extras'] = {'ldap': extras}
+ reply = userattrs
+ reply['_groups'] = groups
+ reply['_extras'] = {'ldap': extras}
except Exception, e: # pylint: disable=broad-except
self.error(e)
# Update global config to add info plugin
po.is_enabled = True
po.save_enabled_state()
+
+ # For selinux enabled platforms permit httpd to connect to ldap,
+ # ignore if it fails
+ try:
+ subprocess.call(['/usr/sbin/setsebool', '-P',
+ 'httpd_can_connect_ldap=on'])
+ except Exception: # pylint: disable=broad-except
+ pass