[hi@vpsee.com]$ su root -

• About
• Showcase
• FAQ
• Services
• VPS Plans
• Home

$ sudo apt-get install python-ldap

# yum install python-ldap

def ldap_add(firstname, lastname, username):
    l = ldap.open(LDAP_HOST)
    l.protocol_version = ldap.VERSION3
    l.simple_bind(LDAP_BIND, LDAP_PASS)

    cn = firstname + ' ' + lastname
    addDN = "cn=%s,ou=People,dc=vpsee,dc=com" % cn
    attrs = {}
    attrs['objectclass'] = ['top','person','inetOrgPerson','posixAccount','vpseeAccount']
    attrs['cn'] = cn
    attrs['givenName'] = firstname
    attrs['homeDirectory'] = '/home/people/%s' % username
    attrs['loginShell'] = '/bin/bash'
    attrs['sn'] = lastname
    attrs['uid'] = username
    attrs['uidNumber'] = ldap_newuid()
    attrs['gidNumber'] = ldap_getgid()
    attrs['active'] = 'TRUE'
    ldif = modlist.addModlist(attrs)
    l.add_s(addDN, ldif)
    l.unbind_s()

def ldap_getcn(username):
    try:
        l = ldap.open(LDAP_HOST)
        l.protocol_version = ldap.VERSION3
        l.simple_bind(LDAP_BIND, LDAP_PASS)

        searchScope = ldap.SCOPE_SUBTREE
        searchFilter = "uid=*" + username + "*"
        resultID = l.search(LDAP_BASE, searchScope, searchFilter, None)
        result_set = []
        while 1:
            result_type, result_data = l.result(resultID, 0)
            if (result_data == []):
                break
            else:
                if result_type == ldap.RES_SEARCH_ENTRY:
                    result_set.append(result_data)
        return result_set[0][0][1]['cn'][0]
    except ldap.LDAPError, e:
        print e

def ldap_deactive(username):
    try:
        l = ldap.open(LDAP_HOST)
        l.protocol_version = ldap.VERSION3
        l.simple_bind(LDAP_BIND, LDAP_PASS)

        deactiveDN = ("cn=%s," + LDAP_BASE) % ldap_getcn(username)
        old = {'active':'TRUE'}
        new = {'active':'FALSE'}
        ldif = modlist.modifyModlist(old, new)
        l.modify_s(deactiveDN, ldif)
        l.unbind_s()
    except ldap.LDAPError, e:
        print e

def ldap_delete(username):
    try:
        l = ldap.open(LDAP_HOST)
        l.protocol_version = ldap.VERSION3
        l.simple_bind(LDAP_BIND, LDAP_PASS)

        deleteDN = ("cn=%s," + LDAP_BASE) % ldap_getcn(username)
        l.delete_s(deleteDN)
    except ldap.LDAPError, e:
        print e

评论 (14 Comments)

1. 阳光不锈 - November 26th, 2012 7:58 pm

   额，不知道这个请求是否冒昧～～～
   是否可以出个XEN PV的VPS安装配置sendmail然后可以让WordPress正常发送邮件的教程？

2. 花舞花落泪 - December 3rd, 2012 8:24 am

   看了一下你的博客,收藏了很多文章,总算可以说下建议了^_^
   第一印象是网站够简洁,我喜欢,哈哈;
   而第二印象则是看的比较繁琐.
   每一页都是那么长,我看文章喜欢只看标题,觉得比较好的直接点进去,不好的越过.
   一个好的标题加上丰富的内容,足以吸引人进入内页.
   而vpsee的内容,都是长篇的-_-,所以,我觉得首页显示摘要比较好,比较适合阅读.
   当然我不是视图改变别人的想法,而是提一个建议:)

3. vpsee - December 6th, 2012 7:34 pm

   @花舞花落泪
   只显示标题适合新闻类网站，大部分读者都喜欢在首页直接阅读文章，不喜欢看了标题还要点击才能看文章（多点击一次多麻烦一次，我们和读者都喜欢简单。）

4. sole - December 13th, 2012 11:26 pm

   请问博主你的这个wp主题叫什么名字，还有你的代码插件叫什么名字啊！嘿嘿，挺好看的，求教了啊！谢谢阿

5. Anonymous - May 29th, 2013 12:25 pm

   请问博主，ldap dn的active属性，是哪个objectClass包含的？

6. Anonymous - June 10th, 2015 11:02 am

   博主给出一下
   LDAP_HOST
   LDAP_BIND
   LDAP_PASS
   LDAP_BASE
   啊…

7. tim - October 25th, 2015 12:54 pm

   LDAP获取数据最多返回1000行，在python下有解决方法吗？

8. 香菜 - March 24th, 2016 4:02 pm

   #!/bin/env python
   import sys
   import ldap

   ldapconn = ldap.initialize(‘ldap://domain.adserve.com’)
   print ldapconn
   print ldapconn.simple_bind(‘cn=xixi,dc=adserve,dc=com’, ‘123456Zz’)

   ldapconn.protocal_version = ldap.VERSION3
   searchScope = ldap.SCOPE_SUBTREE
   retrieveAttributes = None
   searchFilter = “cn=” + ‘xixi’
   ldap_result_id=ldapconn.search(‘dc=adserve,dc=com’, searchScope, searchFilter, retrieveAttributes)
   print ldap_result_id

   result_type, result_data = ldapconn.result(ldap_result_id, 0)
   if result_type == ldap.RES_SEARCH_ENTRY:
   a=result_data[0][0]

   ldapconn.simple_bind_s(a,’123456Zz’)
   ldapconn.passwd_s(a,’123456Zz’,’123456Zyy’)
   ldapconn.unbind()

   运行结果：

   1
   2
   Traceback (most recent call last):
   File “change_passwd.py”, line 18, in
   result_type, result_data = ldapconn.result(ldap_result_id, 0)
   File “/usr/local/lib/python2.7/site-packages/python_ldap-2.4.25-py2.7-linux-x86_64.egg/ldap/ldapobject.py”, line 504, in result
   resp_type, resp_data, resp_msgid = self.result2(msgid,all,timeout)
   File “/usr/local/lib/python2.7/site-packages/python_ldap-2.4.25-py2.7-linux-x86_64.egg/ldap/ldapobject.py”, line 508, in result2
   resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all,timeout)
   File “/usr/local/lib/python2.7/site-packages/python_ldap-2.4.25-py2.7-linux-x86_64.egg/ldap/ldapobject.py”, line 515, in result3
   resp_ctrl_classes=resp_ctrl_classes
   File “/usr/local/lib/python2.7/site-packages/python_ldap-2.4.25-py2.7-linux-x86_64.egg/ldap/ldapobject.py”, line 522, in result4
   ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
   File “/usr/local/lib/python2.7/site-packages/python_ldap-2.4.25-py2.7-linux-x86_64.egg/ldap/ldapobject.py”, line 107, in _ldap_call
   result = func(*args,**kwargs)
   ldap.OPERATIONS_ERROR: {‘info’: ‘000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1’, ‘desc’: ‘Operations error’}
   请问一下出错原因是什么？谢谢~ 查了很多相关的也没有解决

9. 好人 - September 21st, 2016 12:05 pm

   您好,我想问下您的 ldap_newuid 是自己写的模块吗

10. huahua - January 11th, 2017 9:18 pm

    我遇见了和你相似的报错
    请问你现在解决了吗，如果解决了，请指导一下
    谢谢

11. modlist方法 - June 13th, 2017 10:10 am

    您好，请教一下，为什么的导入的python-ldap库里没有modlist.modifyModlist(old, new)方法，找了很多资料没有介绍的

12. hehua - June 13th, 2017 10:11 am

    您好，能请教一下怎么使用modlist方法吗，我导入python-ldap库之后用不了这个，谢谢

13. 忘川小路 - September 6th, 2017 2:55 pm

    ldap 没有active这个属性，是通过userAccountControl属性控制的

14. Anonymous - June 7th, 2018 11:32 am

    请问modlist方法怎么用呢

发表评论

昵称：