Menu
▾
▴
module ldap : no module named .py
|
From: D. H. <da...@hl...> - 2008-06-05 13:50:05
|
Hello, i am trying to write python authentification hook for
InternetNewsService (INN) using *python-ldap module*
I have created nnrpd_auth.py ,which is working for me, when i am calling it
from my test.py script.
Alltought when i pass it to INN, when INN calls nnrpd_auth.py and comes to
line *when ldap module is used first time* it will return error
"no module named.py"
I will post you my test.py and nnrpd_auth.py.
test.py i am using to debug my
nnrpd_auth.py. Trought test.py as i mentioned nnrpd_auth.py is working (ldap
module will load fine and post results)
Is there some bug, or am i blind and forgetting about somethin?
I am using it on CentOs5.1 with python-2.4.3-19.el5 and
python-ldap-2.2.0-2.1
----------------nnrpd_auth.py----------------------
class AUTH:
"""Provide authentication and authorization callbacks to nnrpd."""
def __init__(self):
"""This is a good place to initialize variables or open a
database connection.
"""
# Create a list of NNTP codes to respond on connect
self.connectcodes = { 'READPOST':200,
'READ':201,
'AUTHNEEDED':480,
'PERMDENIED':502
}
# Create a list of NNTP codes to respond on authentication
self.authcodes = { 'ALLOWED':281,
'DENIED':502
}
#LDAP search definitions
self.server = 'ldap://dev01.net.hlacik.eu'
self.user_dn = 'cn=pdg,ou=Operators,o=Polarion'
self.user_pw = 'Pdg1'
self.base_dn_users = 'ou=Users,o=Polarion'
self.base_dn_groups = 'ou=Groups,o=Polarion'
syslog('notice', 'nnrpd authentication class instance created')
def __newsauth(self,match_username,match_password):
filter = "(uid=" + match_username + ")"
attrs = ['userPassword']
try :
l = ldap.initialize(self.server)
l.bind_s(self.user_dn, self.user_pw)
search = l.search_s( self.base_dn_users, ldap.SCOPE_SUBTREE,
filter, attrs
)[0][1]
l.unbind()
except ldap.SERVER_DOWN:
syslog('notice', 'Error, server down')
return 2
except ldap.INVALID_CREDENTIALS:
syslog('Notice','Error, invalid credentials"')
return 2
except ldap.LDAPError, e:
syslog('Notice', "Error, %s" % e)
for password in search["userPassword"]:
if password == match_password: return 1
return 0
def newsaccess(self,match_username,match_password):
filter = "(uid=" + match_username + ")"
attrs = ['cn']
try :
l = ldap.initialize(self.server)
l.bind_s(self.user_dn, self.user_pw)
cn = l.search_s( self.base_dn_users, ldap.SCOPE_SUBTREE,
filter, attrs )[0]
[0]
raw_res = l.search_s( self.base_dn_groups,
ldap.SCOPE_SUBTREE, "(member=" +
cn + ")",attrs)
l.unbind()
except ldap.SERVER_DOWN:
syslog('notice', 'Error, LDAP server down')
return 2
except ldap.INVALID_CREDENTIALS:
syslog('Notice','Error, invalid LDAP credentials"')
return 2
except ldap.LDAPError, e:
syslog('Notice', "LDAP error, %s" % e)
return raw_res
def authenticate(self, attributes):
"""Called when python_auth is encountered in readers.conf"""
# just for debugging purposes
syslog('notice', 'n_a authenticate() invoked: hostname %s, ipaddress
%s, interface
%s, user %s' % (\
attributes['hostname'], \
attributes['ipaddress'], \
attributes['interface'], \
attributes['user']))
# username & password auth using LDAP
try:
if
self.__newsauth(str(attributes['user']),str(attributes['pass'])):
syslog('notice', 'authentication by username
succeeded')
return ( self.authcodes['ALLOWED'], 'No error',
'default_user')
else:
syslog('notice', 'authentication by username
failed')
return ( self.authcodes['DENIED'], 'Access
Denied!')
except Exception, e:
syslog('notice', "Error: %s" % e)
def access(self, attributes):
"""Called when python_access is encountered in readers.conf"""
# just for debugging purposes
syslog('notice', 'n_a access() invoked: hostname %s, ipaddress %s,
interface %s, us
er %s' % (\
attributes['hostname'], \
attributes['ipaddress'], \
attributes['interface'], \
attributes['user']))
# allow newsreading from specific host only
if '127.0.0.1' == str(attributes['ipaddress']):
syslog('notice', 'authentication by IP address succeeded')
return {'read':'*','post':'*'}
else:
syslog('notice', 'authentication by IP address failed')
return {'read':'!*','post':'!*'}
def dynamic(self, attributes):
"""Called when python_dynamic was reached in the processing of
readers.conf and a reader requests either read or post
permission for particular newsgroup.
"""
# just for debugging purposes
syslog('notice', 'n_a dyanmic() invoked against type %s, hostname
%s, ipaddress %s,
interface %s, user %s' % (\
attributes['type'], \
attributes['hostname'], \
attributes['ipaddress'], \
attributes['interface'], \
attributes['user']))
# Allow reading of any newsgroup but not posting
if 'post' == str(attributes['type']):
syslog('notice', 'authorization for post access denied')
return "no posting for you"
elif 'read' == str(attributes['type']):
syslog('notice', 'authorization for read access granted')
return None
else:
syslog('notice', 'authorization type is not known: %s' %
attributes['type'])
return "Internal error";
#
# The rest is used to hook up the auth module on nnrpd. It is unlikely
# you will ever need to modify this.
#
# Import functions exposed by nnrpd. This import must succeed, or nothing
# will work!
from nnrpd import *
#from ldap import *
import ldap
# Create a class instance
myauth = AUTH()
# ...and try to hook up on nnrpd. This would make auth object methods
visible
# to nnrpd.
try:
set_auth_hook(myauth)
syslog('notice', "authentication module successfully hooked into nnrpd")
except Exception, errmsg:
syslog('error', "Cannot obtain nnrpd hook for authentication method: %s"
% errmsg[0])
----test.py----------
from nnrpd_auth import *
myauth = AUTH()
#print dir(myauth)
print
myauth.authenticate({'user':'boss','pass':'xxx','interface':None,'ipaddress':
None,'hostname':None})
#print myauth.newsauth('boss','22')
#print myauth.newsaccess('boss','xxx')
|
