Python script to search/show a user in LDAP directory

• Intro
• Design
• Usage
• Script

Intro

This is the script (python3.5) to show LDAP user, it's using python ldap module. There are two examples, for DSEE LDAP and SSO (single sign on, "Aria") in some company.

Design

DSEE LDAP search returns this for a user, and the script presents only needed info, in more readable format.

 

[('cn=MARKO_DODIC,l=amer,dc=comp,dc=com', 
{'displayName': ['Marko Dodic'], 'uid': ['mdodic'], 
'objectClass': ['inetOrgPerson', 'inetUser', 'legacyCred', 'networkInfo', 'organizationalPerson', 'person', 'posixAccount', 'shadowAccount', 'top'], 
'loginShell': ['/bin/bash'], 'uidNumber': ['3247377'], 'inetUserStatus': ['Active'], 'gidNumber': ['10'], 
'gecos': ['mdodic@comp.com'], 'sn': ['Dodic'], 'homeDirectory': ['/home/mdodic'], 'mail': ['mdodic@comp.com'], 
'givenName': ['Marko'], 'cn': ['MARKO_DODIC']})]

Aria return looks bit different.

Usage

For serching Aria.

 

$ show_aria_user.py -h
usage: show_aria_user.py [-h] (-l LOGIN | -e EMAIL)

Show Aria user

optional arguments:
  -h, --help            show this help message and exit
  -l LOGIN, --login LOGIN
                        Login name
  -e EMAIL, --email EMAIL
                        email address

For serching DSEE LDAP.

 

$ show_dsee_user.py -h
usage: show_dsee_user.py [-h] (-l LOGIN | -i UID | -e EMAIL)

Show DSEE user

optional arguments:
  -h, --help            show this help message and exit
  -l LOGIN, --login LOGIN
                        Login name
  -i UID, --uid UID     UID, user ID
  -e EMAIL, --email EMAIL
                        email address

Example 1 , check is user is still with the company, there is no numeric uid here.

 

$ show_aria_user.py -e marko.dodic@comp.com

Employee type: EMPLOYEE
Aria login: mdodic
Aria email: marko.dodic@comp.com
Display name: Marko Dodic
Title: Senior Principal System Administrator
Phone: 1 650 123 1234
City: Popare
User's manager: cn=MILAN_PEKIC,L=AMER,dc=comp,dc=com
Organization: System Administrator - Development

Example 2 , show user's DSEE LDAP numeric UID and login (matches with one in Aria).

 

$ show_dsee_user.py -l mdodic

DSEE login: mdodic
DSEE UID: 12345
DSEE email: mdodic@comp.com

Script

Aria script.

 

#!/import/satools/bin/python3.5

# https://www.python-ldap.org/en/python-ldap-3.2.0/reference/ldap.html
# Check if there is Aria account, is user is still with Oracle
import sys
import ldap
import argparse

parser = argparse.ArgumentParser(
         formatter_class=argparse.RawTextHelpFormatter,
         description="Show Aria user")
account = parser.add_mutually_exclusive_group(required=True)
account.add_argument("-l", "--login", help="Login name")
account.add_argument("-e", "--email", help="email address")
args = parser.parse_args()
login=args.login
email=args.email

ARIA_SRV="aria-server.comp.com"
baseDN = "dc=comp,dc=com"
searchScope = ldap.SCOPE_SUBTREE # subtree search
retrieveAttributes = None

def main():
    """
    Check input and use as filter for search
    """
    if login:
        searchFilter = "uid=" + login
    elif email:
        searchFilter = "mail=" + email

    try:
        ldapobject = ldap.initialize('ldap://' + ARIA_SRV)
        ldapobject.protocol_version = ldap.VERSION3
        l_search = ldapobject.search(baseDN, searchScope, searchFilter, retrieveAttributes)
        result_status, result_data = ldapobject.result(l_search, 0)
        #print(type(result_data)) #list
        #print(result_data)
        try:
            #print(type(result_data[0][1]))  # dict
            #print((result_data[0][1]))
            if "employeetype"  in result_data[0][1]:
                print("Employee type: " + (result_data[0][1])["employeetype"][0].decode())
            else:
                print("Employee type: none")
            if "uid" in result_data[0][1]:
                print("Aria login: " + (result_data[0][1])["uid"][0].decode())
            else:
                print("Ari alogin: none")
            if "mail" in result_data[0][1]:
                print("Aria email: " + (result_data[0][1])["mail"][0].decode())
            else:
                print("Ari email: none")
            if "displayname" in result_data[0][1]:
                print("Display name: " + (result_data[0][1])["displayname"][0].decode())
            else:
                print("Display name: none")
            if "title" in result_data[0][1]:
                print("Title: " + (result_data[0][1])["title"][0].decode())
            else:
                print("Title: none")
            if "telephonenumber" in result_data[0][1]:
                print("Phone: " + (result_data[0][1])["telephonenumber"][0].decode())
            else:
                print("Phone: none")
            if "city" in result_data[0][1]:
                print("City: " + (result_data[0][1])["city"][0].decode())
            else:
                print("City: none")
            if "manager" in result_data[0][1]:
                print("User's manager: " + (result_data[0][1])["manager"][0].decode())
            else:
                print("User's manager: none")
            if "o" in result_data[0][1]:
                print("Organization: " + (result_data[0][1])["o"][0].decode())
            else:
                print("Organization: none")
        except:
            sys.exit("A user is not with Oracle.")
    except ldap.LDAPError as err:
        print("ldap.LDAPError: {0}".format(err))

if __name__ == '__main__':
    main()

sys.exit(0)

DSEE ldap script.

 

#!/import/satools/bin/python3.5

# https://www.python-ldap.org/en/python-ldap-3.2.0/reference/ldap.html
# Check if there is DSEE account
import sys
import ldap
import argparse

parser = argparse.ArgumentParser(
         formatter_class=argparse.RawTextHelpFormatter,
         description="Show DSEE user")
account = parser.add_mutually_exclusive_group(required=True)
account.add_argument("-l", "--login", help="Login name")
account.add_argument("-i", "--uid", help="UID, user ID")
account.add_argument("-e", "--email", help="email address")
args = parser.parse_args()
login=args.login
uid=args.uid
email=args.email

DSEE_SRV="dsee-server.comp.com"
baseDN = "l=amer,dc=comp,dc=com"
searchScope = ldap.SCOPE_SUBTREE # subtree search
retrieveAttributes = None

def main():
    """
    Check input and use as filter for search
    """
    if login:
        searchFilter = "uid=" + login
    elif uid:
        searchFilter = "uidNumber=" + uid
    elif email:
        searchFilter = "mail=" + email

    try:
        ldapobject = ldap.initialize('ldap://' + DSEE_SRV)
        ldapobject.protocol_version = ldap.VERSION3
        l_search = ldapobject.search(baseDN, searchScope, searchFilter, retrieveAttributes)
        result_status, result_data = ldapobject.result(l_search, 0)
        #print(result_data)
        try:
            print("DSEE login: " + (result_data[0][1])["uid"][0].decode())
            print("DSEE UID: " + (result_data[0][1])["uidNumber"][0].decode())
            print("DSEE email: " + (result_data[0][1])["mail"][0].decode())
        except:
            sys.exit("No DSEE info")
    except ldap.LDAPError as err:
        print("ldap.LDAPError: {0}".format(err))

if __name__ == '__main__':
    main()

sys.exit(0)



Back to the main page