Vh!ddlmZmZmZeZdZdZdZddl Z ddl m Z m Z ddl mZmZddlmZmZmZdZ ddlZddlZd ZGd d eZd Zedk(reyy#e$re j4Zd ZY6wxYw))absolute_importdivisionprint_functiona module: ldap_entry short_description: Add or remove LDAP entries description: - Add or remove LDAP entries. This module only asserts the existence or non-existence of an LDAP entry, not its attributes. To assert the attribute values of an entry, see M(community.general.ldap_attrs). author: - Jiri Tyr (@jtyr) requirements: - python-ldap attributes: check_mode: support: full diff_mode: support: none options: attributes: description: - If O(state=present), attributes necessary to create an entry. Existing entries are never modified. To assert specific attribute values on an existing entry, use M(community.general.ldap_attrs) module instead. - Each attribute value can be a string for single-valued attributes or a list of strings for multi-valued attributes. - If you specify values for this option in YAML, please note that you can improve readability for long string values by using YAML block modifiers as seen in the examples for this module. - Note that when using values that YAML/ansible-core interprets as other types, like V(yes), V(no) (booleans), or V(2.10) (float), make sure to quote them if these are meant to be strings. Otherwise the wrong values may be sent to LDAP. type: dict default: {} objectClass: description: - If O(state=present), value or list of values to use when creating the entry. It can either be a string or an actual list of strings. type: list elements: str state: description: - The target state of the entry. choices: [present, absent] default: present type: str recursive: description: - If O(state=delete), a flag indicating whether a single entry or the whole branch must be deleted. type: bool default: false version_added: 4.6.0 extends_documentation_fragment: - community.general.ldap.documentation - community.general.attributes a\ - name: Make sure we have a parent entry for users community.general.ldap_entry: dn: ou=users,dc=example,dc=com objectClass: organizationalUnit - name: Make sure we have an admin user community.general.ldap_entry: dn: cn=admin,dc=example,dc=com objectClass: - simpleSecurityObject - organizationalRole attributes: description: An LDAP administrator userPassword: "{SSHA}tabyipcHzhwESzRaGA7oQ/SDoBZQOGND" - name: Set possible values for attributes elements community.general.ldap_entry: dn: cn=admin,dc=example,dc=com objectClass: - simpleSecurityObject - organizationalRole attributes: description: An LDAP Administrator roleOccupant: - cn=Chocs Puddington,ou=Information Technology,dc=example,dc=com - cn=Alice Stronginthebrain,ou=Information Technology,dc=example,dc=com olcAccess: - >- {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=example,dc=com" write by * none' - >- {1}to dn.base="dc=example,dc=com" by dn="cn=admin,dc=example,dc=com" write by * read - name: Get rid of an old entry community.general.ldap_entry: dn: ou=stuff,dc=example,dc=com state: absent server_uri: ldap://localhost/ bind_dn: cn=admin,dc=example,dc=com bind_pw: password # # The same as in the previous example but with the authentication details # stored in the ldap_auth variable: # # ldap_auth: # server_uri: ldap://localhost/ # bind_dn: cn=admin,dc=example,dc=com # bind_pw: password # # In the example below, 'args' is a task keyword, passed at the same level as the module - name: Get rid of an old entry community.general.ldap_entry: dn: ou=stuff,dc=example,dc=com state: absent args: "{{ ldap_auth }}" z # Default return values N) AnsibleModulemissing_required_lib) to_nativeto_bytes) LdapGeneric gen_specsldap_required_togetherTFc*eZdZdZdZdZdZdZy) LdapEntrycXtj|||jjd|_|jjd|_|jjd|jjdd<|jdk(r|j |_yy)Nstate recursive objectClass attributespresent)r __init__moduleparamsrr _load_attrsattrs)selfrs p/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/general/plugins/modules/ldap_entry.pyrzLdapEntry.__init__sT6*[[''0 ++K8 KK  } - <(7 :: "))+DJ #ci}|jjdjD]A\}}t|trt t t |||<3t |g||<C|S)z" Turn attribute's value to array. r)rritems isinstancelistmapr )rrnamevalues rrzLdapEntry._load_attrssh;;--l;AAC 0KD%%&"3x#78d '/d  0  rcfd}js-tjjj|}|Sd}|S)zA If self.dn does not exist, returns a callable that will add it. cRjjjyN) connectionadd_sdn)modlistrsr_addzLdapEntry.add.._adds OO ! !$''7 3rN)_is_entry_presentldapr* addModlistr)rr+actionr*s` @raddz LdapEntry.addsF 4%%'ll--djj9GF F rchfd}fd}jrjr|}|S|}|Sd}|S)z If self.dn exists, returns a callable that will delete either the item itself if the recursive option is not set or the whole branch if it is. cPjjjyr&)r'delete_sr))rsr_deletez!LdapEntry.delete.._deletes OO $ $TWW -rc tjjd}jj j |gy#tj $rnjjj tjd}|j|D] }jj|d"YywxYw)zi Attempt recursive deletion using the subtree-delete control. If that fails, do it manually. z1.2.840.113556.1.4.805) serverctrls)r))attrlistrN) r-controlsValueLessRequestControlr' delete_ext_sr)NOT_ALLOWED_ON_NONLEAFsearch_s SCOPE_SUBTREEreverser3)subtree_deletesearchentryrs r_delete_recursivez+LdapEntry.delete.._delete_recursives 7!%!F!FG_!`,,TWW>BR,S.. 711$''4;M;MX_1` #7EOO,,U1X67 7sAA A>C  C N)r,r)rr4rBr/s` rdeletezLdapEntry.deletesH . 7  ! ! #~~*  ! F rc |jj|jtjd}|S#tj $rd}Y|SwxYw)NTF)r'r<r)r- SCOPE_BASENO_SUCH_OBJECT)r is_presents rr,zLdapEntry._is_entry_presentsT  OO $ $TWWdoo >J "" J  s4:AAN)__name__ __module__ __qualname__rrr0rCr,rrrrs ,  :rrc jtttidtddtdddgtd d  d dd gfgdt}ts |j t dt|jd }t|}|dk(r|j}n|dk(r|j}|js ||j#|duy#t$r9}|j dt|tj Yd}~Rd}~wwxYw)Ndict)defaulttyper str)rOelementsrabsent)rNchoicesFbool)rrrrrrT) argument_spec required_ifsupports_check_moderequired_togetherz python-ldap)msg exceptionzEntry action failed.)rYdetailsrZ)changed)rr rMr HAS_LDAP fail_jsonr LDAP_IMP_ERRrrr0rC check_mode Exceptionr traceback format_exc exit_json)rrr-r/es rmainrfs4 BV4&59y9h2GH5v6  y=/:; 02 F 1-@#/  1 MM' "E V D  ( &"3"3 q H fD02 q   !71YbYmYmYo  p p qsC00 D29/D--D2__main__) __future__rrrrO __metaclass__ DOCUMENTATIONEXAMPLESRETURNrbansible.module_utils.basicrr+ansible.module_utils.common.text.convertersrr ?ansible_collections.community.general.plugins.module_utils.ldapr r r r_ ldap.modlistr- ldap.controlsr] ImportErrorrcrrfrHrKrrrssA@ 0 f> B JKzz H N Nb#3L zFy'9'')LHs AA54A5