jgaunt/seafile-sso
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

added code to disable users

Browse Source
This commit is contained in:
John Gaunt
2021-11-02 15:20:56 -04:00
parent 3925737d01
commit 0d082b69e1
1 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
seafile-ldap.py
View File

@@ -132,7 +132,7 @@ ldap.search(ldapBase, '(&(mail=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2
logger.debug("Found {0} LDAP users.".format(len(ldap.entries))) logger.debug("Found {0} LDAP users.".format(len(ldap.entries)))
ldapUsers = ldap.entries ldapUsers = ldap.entries
for user in ldapUsers: for user in ldapUsers:
logger.debug("User: {0} - Email: {1} - UserDN: {2}".format(user.name, user.mail, user.distinguishedName)) logger.debug("User: {0} - Email: {1} - UserDN: {2}".format(user.displayName, user.mail, user.distinguishedName))
# Connect to DB # Connect to DB
dbconfig = { dbconfig = {
@@ -217,9 +217,15 @@ for ldapUser in ldapUsers:
for sqlLDAPuser in sqlLDAPusers: for sqlLDAPuser in sqlLDAPusers:
logger.debug("Searching for user {0} that has an email address, are enabled, and in the {1} group.".format(sqlLDAPuser[1], ldapFilter)) logger.debug("Searching for user {0} that has an email address, are enabled, and in the {1} group.".format(sqlLDAPuser[1], ldapFilter))
ldap.search(ldapBase, '(&(mail={0})(!(userAccountControl:1.2.840.113556.1.4.803:=2))({1}))'.format(sqlLDAPuser[1], ldapFilter), attributes=['*']) ldap.search(ldapBase, '(&(mail={0})(!(userAccountControl:1.2.840.113556.1.4.803:=2))({1}))'.format(sqlLDAPuser[1], ldapFilter), attributes=['*'])
logger.debug("Found {0} LDAP user.".format(len(ldap.entries))) count = len(ldap.entries)
print(ldap.entries) logger.debug("Found {0} LDAP user.".format(count))
#logger.debug("User: {0} - Email: {1} - UserDN: {2}".format(ldap.entries.[0].name, ldap.entries.[0].mail, ldap.entries.[0].distinguishedName)) if count == 0:
# User is not enabled, have email, or in the group, disable their account
disableUserinSeafile = request('admin/users/{0}/'.format(sqlLDAPuser[1]), seafileURL, seafileToken, "PUT", {"is_active": "false"})['response']
if not disableUserinSeafile['is_active']:
logger.info("User {0} was set to disabled in Seafile".format(sqlLDAPuser[1]l))
else:
logger.error("There was an error setting user {0} to disabled in Seafile".format(sqlLDAPuser[1]))
#if [item for item in ldapUsers if sqlLDAPuser[1] in item]: #if [item for item in ldapUsers if sqlLDAPuser[1] in item]:
#logger.debug("Found {0} in sql table".format(sqlLDAPuser[1])) #logger.debug("Found {0} in sql table".format(sqlLDAPuser[1]))