python-ldap-dev — discussion among developers

Re: -lpthread + -D_REENTRANT

[David L. <dav...@cs...>]

On Mon, 14 May 2001, Michael Str=F6der typed thusly:

> I'll raise this one again:
> We should set gcc compiler option -D_REENTRANT aka -D_THREAD_SAFE
> and linker option -lpthread in the autoconf script if Python was
> built
> --with-threads.
>
> Anybody capable of adding that to the autoconf stuff?

if you're talking about setting these when building _ldap then, no,
I don't think that's right. Different platforms have different ways of doin=
g
threads. The autoconf way currently uses the options and libraries
that python itself was using when it was compiling its builtin modules,
so you don't need any more or any less.

_ldap does not use the platform thread api (and nor should it).
there is (or should be) sufficient communication between _ldap and python
about blockable points to make it work with and without threads.
I am led to believe from the python documentation that that's the right way=
=2E

so, python-ldap should link and work with threads as it stands now.

the ldap libraries may not be thread safe, but that's another issue..
(but you've addressed that somewhat at the python level)

d
--=20
David Leonard                           Dav...@cs...
Dept of Comp. Sci. and Elec. Engg   _   Room:78-640  Ph:+61 7 336 51187
The University of Queensland       |+|  http://www.csee.uq.edu.au/~leonard/
QLD 4072  AUSTRALIA               ~` '~ B73CD65FBEF4C089B79A8EBADF1A932F13E=
A0FC8

Why are apartments so close together?

the new python-ldap website

[Jens V. <je...@di...>]

i just noticed one thing that hasn't been moved to the new site yet: the
instructions / login info for anonymous CVS access...

jens

Compiling woes on Solaris

[Michael <mi...@st...>]

Since Brian did not re-post his question here I'll do it.

Ciao, Michael.

-------- Original Message --------
Subject: web2ldap feedback
Date: Fri, 27 Apr 2001 14:18:14 -0700
From: Brian Doherty <bdo...@ma...>
To: fee...@we...

[..]

I have the Netscape SDK in /usr/local/mozilla and the openldap v2 
in /usr/local.  Neither worked, and the ./Misc/openldap.sh didn't 
either.  I downloaded openldap 1.2.11 myself and installed it in 
/usr/local/openldap1.  Then I tried to configure python-ldap with 
./configure --with-ldap=/usr/local/openldap1 
This configured OK, but the make failed with the following: 

make[1]: Entering directory
`/usr/local/src/LDAP/Web/python-ldap-1.10alpha3/Modules'
gcc -shared  ./LDAPObject.o ./common.o ./constants.o ./errors.o
./functions.o ./ldapmodule.o ./message.o ./version.o ./linkedlist.o
./template.o ./CIDict.o  -L/usr/local/openldap1/lib -lldap -llber
-lsocket -lnsl -lm  -o ./_ldapmodule.so
Text relocation remains                         referenced
    against symbol                  offset      in file
<unknown>                           0x430      
/usr/local/openldap1/lib/libldap.a(getfilter.o)
<unknown>                           0x434      
/usr/local/openldap1/lib/libldap.a(getfilter.o)
<unknown>                           0x438      
/usr/local/openldap1/lib/libldap.a(getfilter.o)

... (many many many more lines like this)

ld: fatal: relocations remain against allocatable but non-writable
sections
collect2: ld returned 1 exit status
make[1]: *** [_ldapmodule.so] Error 1
make[1]: Leaving directory
`/usr/local/src/LDAP/Web/python-ldap-1.10alpha3/Modules'
make: *** [_ldapmodule-build] Error 2

-lpthread + -D_REENTRANT

[Michael <mi...@st...>]

HI!

I'll raise this one again:
We should set gcc compiler option -D_REENTRANT aka -D_THREAD_SAFE
and linker option -lpthread in the autoconf script if Python was
built
--with-threads.

Anybody capable of adding that to the autoconf stuff?

Ciao, Michael.

Re: Completely async...

[Michael <mi...@st...>]

Michael Str=F6der wrote:
> =

> I wrote a drop-in replacement class for LDAPObject for locking calls
> into the LDAP libs since these are not completely thread-safe

I've added this module as python-ldap/Lib/ldapthreadlock.py to the
CVS repository. See __doc__ string:

"""
ldapthreadlock.py - mimics LDAPObject class in a thread-safe way
(c) by Michael Stroeder <mi...@st...>

License:
Do anything you want with this module.

Compability:
- The behaviour of the ldapthreadlock.LDAPObject class should be
  exactly the same like ldap.LDAPObject
- This module needs your Python installation to be built with
  thread support (module threading is imported).

Usage:
You can simply use function open() of this module instead of
function
open() of module ldap to create an instance of LDAPObject class.

Basically calls into the LDAP lib are serialized by the module-wide
lock _ldapmodule_lock. To avoid blocking of other threads
synchronous
methods like search_s() etc. and the result() method were rewritten
to do
solely asynchronous LDAP lib calls with zero timeout.

The timeout handling is done within the method result() which
probably leads
to less exact timing.
"""

Ciao, Michael.

Re: distutils

[Sascha G. <sas...@op...>]

On Sat, 12 May 2001 23:11:55 +0200
Michael Ströder <mi...@st...> wrote:

> Joe Little wrote:
> > 
> > I've been conversing with sasha at free.de, who has a rough cut
> > python-ldap swig module done. He has had it work against Netscape,
> > OpenLDAP,
> 

Just openldap1.x.
I have send a plan to jl...@op..., how swig-ldap-0.2 *could* look
like. This plan didn't have much text going with it - I just thought its clear
it couldnt match current swig-ldap, since no interface for netscape, sun or whatever
is included. Sorry for not communicating clear enough.

> Sascha,
> 
> please give us a status report which vendors/versions of LDAP C SDKs
> you wrapped with your SWIG approach and which functionality it has.
> 
Nothing compared to python-ldap. Some basic stuff to handle some simple
adding, searching and deletion of records.


-- 
/* Yeah  */

Re: distutils

[Michael <mi...@st...>]

Joe Little wrote:
> 
> I've been conversing with sasha at free.de, who has a rough cut
> python-ldap swig module done. He has had it work against Netscape,
> OpenLDAP,

Sascha,

please give us a status report which vendors/versions of LDAP C SDKs
you wrapped with your SWIG approach and which functionality it has.

Ciao, Michael.

Re: distutils

[Joe L. <jl...@op...>]

I've been conversing with sasha at free.de, who has a rough cut
python-ldap swig module done. He has had it work against Netscape,
OpenLDAP, etc. to various extents (you can build out separate modules for
each SDK). Maybe we can finish that work and thus allow for what you ask..
Especially if you are willing to finish off the python-ldap api stuff :)


On Sat, 12 May 2001, Michael Str=F6der wrote:

> David Leonard wrote:
> >
> > i plan to
> >         * move towards just supporting OpenLDAP 2, and
> >         * delete all the gnu autoconf gunk
>
> How about thread-safety only possible with Mozilla SDK?
>
> Hmm, I thought of the following:
>
> SWIG modules for every LDAP C SDK out there which should not be
> directly used by an application. The SWIG modules should wrap *all*
> functions provided by a C SDK.
>
> Python LDAPObject class as an abstraction layer which hides the
> SWIG-ed functions of the C SDK providing an API compatible to recent
> python-ldap. For each underlying C SDK there should be a specific
> implementation class.
>
> Now the SWIG folks could start wrapping the OpenLDAP 1.2.x, 2.0.x
> and Mozilla C SDK without having to provide a nice Python API and I
> promise to write Python wrapper classes compatible to recent
> python-ldap.
>
> This is just an quick idea. Let me know what you all think.
>
> Ciao, Michael.
>
> _______________________________________________
> Python-LDAP-dev mailing list
> Pyt...@li...
> http://lists.sourceforge.net/lists/listinfo/python-ldap-dev
>

Re: web pages of python-ldap

[Michael <mi...@st...>]

Jens Vagelpohl wrote:
> 
> i think putting up a "software built on python-ldap"-page like you suggested
> earlier would be a great addition to the official page, not just for
> showcasing but also to enable people to find working code that they can look
> at for inspiration.

It's already there:

http://python-ldap.sourceforge.net/apps.shtml

I already added links to your code.

Ciao, Michael.

Re: web pages of python-ldap

[Jens V. <je...@di...>]

oops, i noticed you already put it up there ;)

jens


On 5/11/01 14:54, "Michael Str=F6der" <mi...@st...> wrote:

> Michael Str=F6der wrote:
>>=20
>> Find a first draft of new web pages for python on-line:
>=20
> The new sparse web pages are now on-line at
>=20
> http://python-ldap.sourceforge.net/
>=20
> Please comment! Feel free to suggest content related to python-ldap.
>=20
> Ciao, Michael.
>=20
> _______________________________________________
> Python-LDAP-dev mailing list
> Pyt...@li...
> http://lists.sourceforge.net/lists/listinfo/python-ldap-dev
>=20

Re: web pages of python-ldap

[Jens V. <je...@di...>]

michael,

i think putting up a "software built on python-ldap"-page like you suggeste=
d
earlier would be a great addition to the official page, not just for
showcasing but also to enable people to find working code that they can loo=
k
at for inspiration.

jens


On 5/11/01 14:54, "Michael Str=F6der" <mi...@st...> wrote:

> Michael Str=F6der wrote:
>>=20
>> Find a first draft of new web pages for python on-line:
>=20
> The new sparse web pages are now on-line at
>=20
> http://python-ldap.sourceforge.net/
>=20
> Please comment! Feel free to suggest content related to python-ldap.
>=20
> Ciao, Michael.

Re: python-ldap and openldap 2.07

[Jens V. <je...@di...>]

donal,

> Basically I'm writing some code for the Mailman mailing list software, so
> that it can do authentication, subscription, etc by LDAP. Have the
> authentication
> working after some initial playing with the python-ldap module, but I can't
> for the life of me modify any values in the ldap directory.

i'm ctually very interested in having mailman get auth info from ldap
myself. mind sharing your experiences / code? i haven't gotten to even
looking at mailman yet, but it will be a requirement for all zope-related
mailing lists real soon now.


> *I may just be just making errors in my code, but i'm nearly sure i'm not*
> the line of code i'm using:
> res = l.modify_s(user_dn, [(MOD_REPLACE, 'userPassword', [new_pw])])
> where:
> user_dn = cn=huntd2,ou=RedGiant,o=DCU
> new_pw = newpw
> 
> is there a way to get the LDAP error codes back from the python-ldap module??

take a look at the manage_editUserPassword method in the LDAPUserManager
module here:

http://cvs.dataflake.org/LDAPUserManager/LDAPUserManager.py?rev=1.27&content
-type=text/vnd.viewcvs-markup

the call to modify_s is wrapped in a try/except and if an exception occurs i
catch it and feed it to a formatting routine so i can return it back to a
web page. the code is pretty zope-specific, but you can see the pattern.

jens

Re: distutils

[Michael <mi...@st...>]

David Leonard wrote:
> 
> i plan to
>         * move towards just supporting OpenLDAP 2, and
>         * delete all the gnu autoconf gunk

How about thread-safety only possible with Mozilla SDK?

Hmm, I thought of the following:

SWIG modules for every LDAP C SDK out there which should not be
directly used by an application. The SWIG modules should wrap *all*
functions provided by a C SDK.

Python LDAPObject class as an abstraction layer which hides the
SWIG-ed functions of the C SDK providing an API compatible to recent
python-ldap. For each underlying C SDK there should be a specific
implementation class.

Now the SWIG folks could start wrapping the OpenLDAP 1.2.x, 2.0.x
and Mozilla C SDK without having to provide a nice Python API and I
promise to write Python wrapper classes compatible to recent
python-ldap.

This is just an quick idea. Let me know what you all think.

Ciao, Michael.

distutils

[David L. <dav...@cs...>]

fellas,

I have committed two files (setup.py and setup.cfg) into CVS.

this is because I want to use Python's distutils package for
distributing future python-ldap modules.
distutils should make it easier to build binary distributions that
do the right thing when installing. much less hassle to build releases.

(people who add new stuff to CVS may also have to edit setup.py now!)

So, to build python-ldap in the new way, simply type

	python setup.py build

You may need to edit setup.cfg first. Full documentation for distutils is
on the python web site.

fortunately, (or unfortunately depending on how you look at it) there is
no support in distutils for autodetecting features about the ldap library.

i plan to
	* move towards just supporting OpenLDAP 2, and
	* delete all the gnu autoconf gunk

If someone wants to support mozilla's or solaris' library etc
they should speak up now and be willing to help add support. (email me now!)

for this contingency, I have created rough, manual descriptions of what
#defines etc to enable when OpenLDAP2 is selected. By default, openldap is
selected in setup.cfg, which is a file that looks like this:
	[_ldap]
	class = OpenLDAP2

perhaps in the future, python programs will be able to check what library
is being used by doing something with it; e.g.:

	if _ldap.libclass == "OpenLDAP2":
		do_something_openldap_specific()

your comments?

d
-- 
David Leonard                           Dav...@cs...
Dept of Comp. Sci. and Elec. Engg   _   Room:78-640  Ph:+61 7 336 51187
The University of Queensland       |+|  http://www.csee.uq.edu.au/~leonard/
QLD 4072  AUSTRALIA               ~` '~ B73CD65FBEF4C089B79A8EBADF1A932F13EA0FC8

Why are apartments so close together?

Re: python-ldap and openldap 2.07

[Michael <mi...@st...>]

don...@ma... wrote:
> 
> Basically I'm writing some code for the Mailman mailing list software, so
> that it can do authentication, subscription, etc by LDAP. Have the authentication
> working after some initial playing with the python-ldap module, but I can't
> for the life of me modify any values in the ldap directory.
> 
> Having read some of the previous discussion on this list (ANNC and query:
> ldapmodule-1.10a3-patched RPMs available), it looks like the problem I'm
> having is to do with OpenLDAP and it's ACLs.  Am i correct in thinking this???

I don't think so. Do the following:

1. Remove all ACLs in your slapd.conf for testing your Python code
to make sure you don't have wrong ACLs. Off course do this on a test
machine!

2. Run your OpenLDAP server with ACLs in place with verbose logging.

> If so, am i correct in thinking there is a "patch" to solve the problem

No. ACLs with OpenLDAP 1 and 2 are configured in slapd.conf. This
has nothing to do with python-ldap. Take questions related to ACL
configuration with OpenLDAP to ope...@op... list.

> *I may just be just making errors in my code, but i'm nearly sure i'm not*
> the line of code i'm using:
> res = l.modify_s(user_dn, [(MOD_REPLACE, 'userPassword', [new_pw])])
> where:
> user_dn = cn=huntd2,ou=RedGiant,o=DCU
           ^                           ^
Forgot the quotes?

> new_pw = newpw

???

Feel free to dig into web2ldap's module w2lpasswd...

> is there a way to get the LDAP error codes back from the python-ldap module??

In case of an error an exception is raise. See
http://python-ldap.sourceforge.net/doc/lib/subsec:exceptfrommeth.html

Ciao, Michael.

=?iso-8859-1?Q?python=2Dldap=20and=20openldap=202=2E07?=

[<don...@ma...>]

I'm fairly new to this list but came across the python-ldap module while
searching for components for a project I'm doing.

Basically I'm writing some code for the Mailman mailing list software, so=

that it can do authentication, subscription, etc by LDAP. Have the authen=
tication
working after some initial playing with the python-ldap module, but I can=
't
for the life of me modify any values in the ldap directory.

Having read some of the previous discussion on this list (ANNC and query:=

ldapmodule-1.10a3-patched RPMs available), it looks like the problem I'm
having is to do with OpenLDAP and it's ACLs.  Am i correct in thinking th=
is???

If so, am i correct in thinking there is a "patch" to solve the problem
or should i look at what other modules or APIs that allow python to use
the LDAP protocol?

I'm using: RedHat 6.2, OpenLDAP 2.07, BeOpen-Python-2.0 and python-ldap-1=
.10alpha3.

Thanks

Donal Hunt

*I may just be just making errors in my code, but i'm nearly sure i'm not=
*
the line of code i'm using:
res =3D l.modify_s(user_dn, [(MOD_REPLACE, 'userPassword', [new_pw])])
where:
user_dn =3D cn=3Dhuntd2,ou=3DRedGiant,o=3DDCU
new_pw =3D newpw

is there a way to get the LDAP error codes back from the python-ldap modu=
le??

Re: web pages of python-ldap

[Michael <mi...@st...>]

Michael Str=F6der wrote:
> =

> Find a first draft of new web pages for python on-line:

The new sparse web pages are now on-line at

  http://python-ldap.sourceforge.net/

Please comment! Feel free to suggest content related to python-ldap.

Ciao, Michael.

LDAP options with OpenLDAP 2.0 (was: ANNC and query: ldapmodule-1.10a3-patched RPMs available)

[Michael <mi...@st...>]

Joe Little wrote:
> 
> So, I put together python-ldap RPMs/SRPMs for redhat 6.2 and 7.0 to go
> with my OpenLDAP 2.0.x RPMs on open-it.org. these include the patches
> spoken of before to support OpenLDAP 2.x.

Note that those patches might break some python-ldap applications
(e.g. web2ldap).

Setting LDAP options seems to be different with OpenLDAP 2.0. If I
remember correctly Konstantin's patch addresses setting options by
making available LDAPObject attributes "referrals" and "restart".

Ciao, Michael.

Re: ANNC and query: ldapmodule-1.10a3-patched RPMs available

[Michael <mi...@st...>]

Michael Str=F6der wrote:
> =

> Unfortunately the LDAP C SDKs diverged [..]

Read more about differences of LDAP C SDKs on

 =

http://www.OpenLDAP.org/lists/openldap-software/200003/msg00082.html

Ciao, Michael.

Re: web pages of python-ldap

[David L. <dav...@cs...>]

On Fri, 11 May 2001, Michael Str=F6der typed thusly:

> > did you use php?
> No, I hope they support SSI (server-side includes).

looks like apache.. not sure how they've configured it.
"suck it & see".

> > if you commit to the htdocs part of the python-ldap CVS tree, the
> > sourceforge web server should automatically update the "live" copy
> > either immediately, or within 30 mins..
>
> Good to now. Shall I remove the other things?

well... have a look at the php stuff i started writing.. could be easier
to maintain than ssi?

> > downloads/binaries should have mini-toc to the platforms.
> > don't forget the platform architecture (x86, sparc etc).
> > not everyone has PCs :)
>
> Hmm, I'm not sure if I want to maintain a very detailed overview of
> binaries. Off course the RPMs should contain arch.
>
> BTW: Did you have a look on how to use the compile farm on
> SourceForge?

yes.. a while ago. it was pretty awfully set up.. ie no real set of
useful tools on any of the different compile farm hosts. you have to
install everything yourself. i think also the network lag exaggerated
the pain.

should be able to use the python distutils techniq to build python-ldap,
but i found it a bit tricky. if we target 2.0 at just openldap it should
be a lot simpler.

> > a first question for the faq should be "Is python-ldap abandon-ware?" :=
)
> And the answer: "Jump on in!"

You mean, "jump into the C" :)

d
--=20
David Leonard                           Dav...@ds...
CRC For Distributed Systems Technology  Room:78-632  Ph:+61 7 336 58358
The University of Queensland            http://www.dstc.edu.au/
QLD 4072  AUSTRALIA                     B73CD65FBEF4C089B79A8EBADF1A932F13E=
A0FC8

EERROR - Erroneous error. Nothing wrong.

Re: web pages of python-ldap

[Michael <mi...@st...>]

David Leonard wrote:
> =

> > Michael Str=F6der wrote:
> > > I would be willing to contribute a new version of the python-ldap
> > > web pages. Any suggestions for a sparse "Pythonic" web design?
> =

> i don't mind sparseness. i use the w3m text browser :)

Bah, what a bloat browser with support for tables! Real men use
lynx. ;-}

> > Find a first draft of new web pages for python on-line:
> >   http://stroeder.com/python-ldap/
> =

> did you use php?

No, I hope they support SSI (server-side includes).

> if you commit to the htdocs part of the python-ldap CVS tree, the
> sourceforge web server should automatically update the "live" copy
> either immediately, or within 30 mins..

Good to now. Shall I remove the other things?

> > Please comment. Especially the "Binaries" section could need more
> > detailed information of pre-built packages with links and
> > maintainers.
> =

> downloads/binaries should have mini-toc to the platforms.
> don't forget the platform architecture (x86, sparc etc).
> not everyone has PCs :)

Hmm, I'm not sure if I want to maintain a very detailed overview of
binaries. Off course the RPMs should contain arch.

BTW: Did you have a look on how to use the compile farm on
SourceForge?

> a first question for the faq should be "Is python-ldap abandon-ware?" :=
)

And the answer: "Jump on in!"

Ciao, Michael.

Re: web pages of python-ldap

[David L. <dav...@cs...>]

> Michael Str=F6der wrote:
> > I would be willing to contribute a new version of the python-ldap
> > web pages. Any suggestions for a sparse "Pythonic" web design?

i don't mind sparseness. i use the w3m text browser :)

> Find a first draft of new web pages for python on-line:
>   http://stroeder.com/python-ldap/

did you use php?

if you commit to the htdocs part of the python-ldap CVS tree, the
sourceforge web server should automatically update the "live" copy
either immediately, or within 30 mins..

> Please comment. Especially the "Binaries" section could need more
> detailed information of pre-built packages with links and
> maintainers.

downloads/binaries should have mini-toc to the platforms.
don't forget the platform architecture (x86, sparc etc).
not everyone has PCs :)

a first question for the faq should be "Is python-ldap abandon-ware?" :)

> If you want your work related to python-ldap to be listed to the
> "Apps" section I'd be happy to add it.

an apps section is a good idea. that was something certainly missing

d
--=20
David Leonard                           Dav...@ds...
CRC For Distributed Systems Technology  Room:78-632  Ph:+61 7 336 58358
The University of Queensland            http://www.dstc.edu.au/
QLD 4072  AUSTRALIA                     B73CD65FBEF4C089B79A8EBADF1A932F13E=
A0FC8

EERROR - Erroneous error. Nothing wrong.

Re: web pages of python-ldap

[Michael <mi...@st...>]

Michael Str=F6der wrote:
> =

> I would be willing to contribute a new version of the python-ldap
> web pages. Any suggestions for a sparse "Pythonic" web design?

Find a first draft of new web pages for python on-line:

  http://stroeder.com/python-ldap/

Please comment. Especially the "Binaries" section could need more
detailed information of pre-built packages with links and
maintainers.

If you want your work related to python-ldap to be listed to the
"Apps" section I'd be happy to add it.

Preferrably write something like

  <dt>
    Project title
  </dt>
  <dd>
    Short description
  </dd>

Ciao, Michael.

Re: web pages of python-ldap

[Joe L. <jl...@op...>]

<duck>
Well, a simple Zope web page would do the trick
</duck>

On Thursday, May 10, 2001, at 08:22  AM, Michael Str=F6der wrote:

> HI!
>
> I would be willing to contribute a new version of the python-ldap
> web pages. Any suggestions for a sparse "Pythonic" web design?
>
> I could easily do something like http://www.web2ldap.de.
>
> Ciao, Michael.
>
> _______________________________________________
> Python-LDAP-dev mailing list
> Pyt...@li...
> http://lists.sourceforge.net/lists/listinfo/python-ldap-dev
>

web pages of python-ldap

[Michael <mi...@st...>]

HI!

I would be willing to contribute a new version of the python-ldap
web pages. Any suggestions for a sparse "Pythonic" web design?

I could easily do something like http://www.web2ldap.de.

Ciao, Michael.