python-ldap-dev — discussion among developers

Re: compile python-ldap on macosx

[Jens V. <je...@zo...>]

well, something about your setup is strange. just to compare, here is 
the output from my own machine::

**************************
gcc -flat_namespace -bundle -undefined suppress 
build/temp.darwin-6.1-Power Macintosh-2.1/LDAPObject.o 
build/temp.darwin-6.1-Power Macintosh-2.1/common.o 
build/temp.darwin-6.1-Power Macintosh-2.1/constants.o 
build/temp.darwin-6.1-Power Macintosh-2.1/errors.o 
build/temp.darwin-6.1-Power Macintosh-2.1/functions.o 
build/temp.darwin-6.1-Power Macintosh-2.1/schema.o 
build/temp.darwin-6.1-Power Macintosh-2.1/ldapmodule.o 
build/temp.darwin-6.1-Power Macintosh-2.1/linkedlist.o 
build/temp.darwin-6.1-Power Macintosh-2.1/message.o 
build/temp.darwin-6.1-Power Macintosh-2.1/version.o 
build/temp.darwin-6.1-Power Macintosh-2.1/options.o -L/usr/local/lib 
-R/usr/local/lib -lldap_r -llber -lssl -lcrypto -o 
build/lib.darwin-6.1-Power Macintosh-2.1/_ldap.so
gcc: unrecognized option `-R/usr/local/lib'
[dhcp192:local/src/python-ldap-HEAD] jens%
***************************

as you can see, no "arch" arguments whatsoever. by the way, my python 
is "hand-made" as well. it's a self-compiled python 2.1.3.

i don't know much about compilers, but it seems strange that there are 
more than a single arch argument, anyway. or is it possible to build 
for two completely disparate architectures in one compile run? sounds 
unlikely to me.

jens

On Friday, Oct 25, 2002, at 09:00 US/Eastern, J. Scholtes wrote:

>
> Am Freitag, 25.10.02, um 14:39 Uhr (Europe/Budapest) schrieb Jens 
> Vagelpohl:
>
>> now that i am looking at it, why does it say something about building 
>> for the i386 architecture in the build output? something about your 
>> build is horribly wrong.
>>
>> jens
>>
>>
>> On Friday, Oct 25, 2002, at 08:21 US/Eastern, J. Scholtes wrote:
>>> gcc -arch i386 -arch ppc -bundle -flat_namespace -undefined suppress 
>>> build/temp.darwin-6.1-Power Macintosh-2.2/
>
> mmh.
> but the second switch (-arch ppc) is correct
>
> Juergen
>
>

Re: compile python-ldap on macosx

[J. S. <sch...@fh...>]

Am Freitag, 25.10.02, um 14:39 Uhr (Europe/Budapest) schrieb Jens 
Vagelpohl:

> now that i am looking at it, why does it say something about building 
> for the i386 architecture in the build output? something about your 
> build is horribly wrong.
>
> jens
>
>
> On Friday, Oct 25, 2002, at 08:21 US/Eastern, J. Scholtes wrote:
>> gcc -arch i386 -arch ppc -bundle -flat_namespace -undefined suppress 
>> build/temp.darwin-6.1-Power Macintosh-2.2/

mmh.
but the second switch (-arch ppc) is correct

Juergen

Re: compile python-ldap on macosx

[Jens V. <je...@zo...>]

now that i am looking at it, why does it say something about building 
for the i386 architecture in the build output? something about your 
build is horribly wrong.

jens


On Friday, Oct 25, 2002, at 08:21 US/Eastern, J. Scholtes wrote:
> gcc -arch i386 -arch ppc -bundle -flat_namespace -undefined suppress 
> build/temp.darwin-6.1-Power Macintosh-2.2/LDAPObject.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/common.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/constants.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/errors.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/functions.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/schema.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/ldapmodule.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/linkedlist.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/message.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/version.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/options.o 
> -L/Library/OpenLDAP/lib -Wl,-R/Library/OpenLDAP/lib -lldap -llber 
> -lresolv -o build/lib.darwin-6.1-Power Macintosh-2.2/_ldap.so
> ld: for architecture i386
> ld: unknown flag: -R/Library/OpenLDAP/lib
> error: command 'gcc' failed with exit status 1

Re: compile python-ldap on macosx

[Jens V. <je...@zo...>]

that error message always shows up for me as well (probably a typo 
somewhere in the build code), but it never made the build process fail 
for me.

as far as OpenLDAP goes, i never use pre-packaged stuff. i use the 
source distribution and build it myself. never had a problem building 
python-ldap with that.

jens


> - I installed an OpenLDAP-Package distributed by Apple. I'ts based on 
> openldap-2.0.18.
> - python-ldap version: python-ldap-2.0.0pre06
>
> log of build:
> ###################
> [Tour1:~/python-ldap-2.0.0pre06] zope% python setup.py build
> running build
> running build_py
> warning: build_py: file Lib/ldap.py (for module ldap) not found
> warning: build_py: file Lib/ldap/schema.py (for module ldap.schema) 
> not found
> not copying Lib/ldap/__init__.py (output up-to-date)
> not copying Lib/ldap/async.py (output up-to-date)
> not copying Lib/ldap/cidict.py (output up-to-date)
> not copying Lib/ldap/functions.py (output up-to-date)
> not copying Lib/ldap/sasl.py (output up-to-date)
> not copying Lib/ldap/schema/__init__.py (output up-to-date)
> not copying Lib/ldap/schema/tokenizer.py (output up-to-date)
> not copying Lib/ldap/schema/models.py (output up-to-date)
> not copying Lib/ldap/schema/subentry.py (output up-to-date)
> not copying Lib/ldap/ldapobject.py (output up-to-date)
> not copying Lib/ldap/modlist.py (output up-to-date)
> not copying Lib/ldapurl.py (output up-to-date)
> not copying Lib/ldif.py (output up-to-date)
> warning: build_py: file Lib/ldap.py (for module ldap) not found
> warning: build_py: file Lib/ldap/schema.py (for module ldap.schema) 
> not found
> running build_ext
> building '_ldap' extension
> skipping Modules/LDAPObject.c (build/temp.darwin-6.1-Power 
> Macintosh-2.2/LDAPObject.o up-to-date)
> skipping Modules/common.c (build/temp.darwin-6.1-Power 
> Macintosh-2.2/common.o up-to-date)
> skipping Modules/constants.c (build/temp.darwin-6.1-Power 
> Macintosh-2.2/constants.o up-to-date)
> skipping Modules/errors.c (build/temp.darwin-6.1-Power 
> Macintosh-2.2/errors.o up-to-date)
> skipping Modules/functions.c (build/temp.darwin-6.1-Power 
> Macintosh-2.2/functions.o up-to-date)
> skipping Modules/schema.c (build/temp.darwin-6.1-Power 
> Macintosh-2.2/schema.o up-to-date)
> skipping Modules/ldapmodule.c (build/temp.darwin-6.1-Power 
> Macintosh-2.2/ldapmodule.o up-to-date)
> skipping Modules/linkedlist.c (build/temp.darwin-6.1-Power 
> Macintosh-2.2/linkedlist.o up-to-date)
> skipping Modules/message.c (build/temp.darwin-6.1-Power 
> Macintosh-2.2/message.o up-to-date)
> skipping Modules/version.c (build/temp.darwin-6.1-Power 
> Macintosh-2.2/version.o up-to-date)
> skipping Modules/options.c (build/temp.darwin-6.1-Power 
> Macintosh-2.2/options.o up-to-date)
> gcc -arch i386 -arch ppc -bundle -flat_namespace -undefined suppress 
> build/temp.darwin-6.1-Power Macintosh-2.2/LDAPObject.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/common.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/constants.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/errors.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/functions.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/schema.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/ldapmodule.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/linkedlist.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/message.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/version.o 
> build/temp.darwin-6.1-Power Macintosh-2.2/options.o 
> -L/Library/OpenLDAP/lib -Wl,-R/Library/OpenLDAP/lib -lldap -llber 
> -lresolv -o build/lib.darwin-6.1-Power Macintosh-2.2/_ldap.so
> ld: for architecture i386
> ld: unknown flag: -R/Library/OpenLDAP/lib
> error: command 'gcc' failed with exit status 1
> #####################################
>
> I did a 'man ld' , but cannot find something about a flag or option -R 
> !
>
> Please be kind with me if I did something very stupid. I'm not a 
> "kernel-hacker" but more like one of those script-kiddies ;)
>
>

Re: compile python-ldap on macosx

[J. S. <sch...@fh...>]

Am Freitag, 25.10.02, um 13:51 Uhr (Europe/Budapest) schrieb Michael=20
Str=F6der:

> J. Scholtes wrote:
>> I'm trying to set up ZOPE with the LDAPuserFolder on a macosx-system=20=

>> and therefor I need python-ldap. But I#m not able to compile it on=20
>> MacOsX 10.2
>> Is anyone on the List who did it successfull ?
>
> It's more likely that you get help if you provide more information=20
> about what you're trying to do and what went wrong.
>
> - OpenLDAP libs, version
> - python-ldap version
> - log of build with error messages
>


- I installed an OpenLDAP-Package distributed by Apple. I'ts based on=20
openldap-2.0.18.
- python-ldap version: python-ldap-2.0.0pre06

log of build:
###################
[Tour1:~/python-ldap-2.0.0pre06] zope% python setup.py build
running build
running build_py
warning: build_py: file Lib/ldap.py (for module ldap) not found
warning: build_py: file Lib/ldap/schema.py (for module ldap.schema) not=20=

found
not copying Lib/ldap/__init__.py (output up-to-date)
not copying Lib/ldap/async.py (output up-to-date)
not copying Lib/ldap/cidict.py (output up-to-date)
not copying Lib/ldap/functions.py (output up-to-date)
not copying Lib/ldap/sasl.py (output up-to-date)
not copying Lib/ldap/schema/__init__.py (output up-to-date)
not copying Lib/ldap/schema/tokenizer.py (output up-to-date)
not copying Lib/ldap/schema/models.py (output up-to-date)
not copying Lib/ldap/schema/subentry.py (output up-to-date)
not copying Lib/ldap/ldapobject.py (output up-to-date)
not copying Lib/ldap/modlist.py (output up-to-date)
not copying Lib/ldapurl.py (output up-to-date)
not copying Lib/ldif.py (output up-to-date)
warning: build_py: file Lib/ldap.py (for module ldap) not found
warning: build_py: file Lib/ldap/schema.py (for module ldap.schema) not=20=

found
running build_ext
building '_ldap' extension
skipping Modules/LDAPObject.c (build/temp.darwin-6.1-Power=20
Macintosh-2.2/LDAPObject.o up-to-date)
skipping Modules/common.c (build/temp.darwin-6.1-Power=20
Macintosh-2.2/common.o up-to-date)
skipping Modules/constants.c (build/temp.darwin-6.1-Power=20
Macintosh-2.2/constants.o up-to-date)
skipping Modules/errors.c (build/temp.darwin-6.1-Power=20
Macintosh-2.2/errors.o up-to-date)
skipping Modules/functions.c (build/temp.darwin-6.1-Power=20
Macintosh-2.2/functions.o up-to-date)
skipping Modules/schema.c (build/temp.darwin-6.1-Power=20
Macintosh-2.2/schema.o up-to-date)
skipping Modules/ldapmodule.c (build/temp.darwin-6.1-Power=20
Macintosh-2.2/ldapmodule.o up-to-date)
skipping Modules/linkedlist.c (build/temp.darwin-6.1-Power=20
Macintosh-2.2/linkedlist.o up-to-date)
skipping Modules/message.c (build/temp.darwin-6.1-Power=20
Macintosh-2.2/message.o up-to-date)
skipping Modules/version.c (build/temp.darwin-6.1-Power=20
Macintosh-2.2/version.o up-to-date)
skipping Modules/options.c (build/temp.darwin-6.1-Power=20
Macintosh-2.2/options.o up-to-date)
gcc -arch i386 -arch ppc -bundle -flat_namespace -undefined suppress=20
build/temp.darwin-6.1-Power Macintosh-2.2/LDAPObject.o=20
build/temp.darwin-6.1-Power Macintosh-2.2/common.o=20
build/temp.darwin-6.1-Power Macintosh-2.2/constants.o=20
build/temp.darwin-6.1-Power Macintosh-2.2/errors.o=20
build/temp.darwin-6.1-Power Macintosh-2.2/functions.o=20
build/temp.darwin-6.1-Power Macintosh-2.2/schema.o=20
build/temp.darwin-6.1-Power Macintosh-2.2/ldapmodule.o=20
build/temp.darwin-6.1-Power Macintosh-2.2/linkedlist.o=20
build/temp.darwin-6.1-Power Macintosh-2.2/message.o=20
build/temp.darwin-6.1-Power Macintosh-2.2/version.o=20
build/temp.darwin-6.1-Power Macintosh-2.2/options.o=20
-L/Library/OpenLDAP/lib -Wl,-R/Library/OpenLDAP/lib -lldap -llber=20
-lresolv -o build/lib.darwin-6.1-Power Macintosh-2.2/_ldap.so
ld: for architecture i386
ld: unknown flag: -R/Library/OpenLDAP/lib
error: command 'gcc' failed with exit status 1
#####################################

I did a 'man ld' , but cannot find something about a flag or option -R !

Please be kind with me if I did something very stupid. I'm not a=20
"kernel-hacker" but more like one of those script-kiddies ;)

Re: compile python-ldap on macosx

[<mi...@st...>]

J. Scholtes wrote:
> 
> I'm trying to set up ZOPE with the LDAPuserFolder on a macosx-system and 
> therefor I need python-ldap. But I#m not able to compile it on MacOsX 10.2
> Is anyone on the List who did it successfull ?

It's more likely that you get help if you provide more information about 
what you're trying to do and what went wrong.

- OpenLDAP libs, version
- python-ldap version
- log of build with error messages

Ciao, Michael.

compile python-ldap on macosx

[J. S. <sch...@fh...>]

Hi.
I'm new to the list. In the list-archive I didn't find much about 
macosx, so here is my post.

I'm trying to set up ZOPE with the LDAPuserFolder on a macosx-system 
and therefor I need python-ldap. But I#m not able to compile it on 
MacOsX 10.2
Is anyone on the List who did it successfull ?

thanks
Juergen Scholtes

Re: example of python-ldap module

[<mi...@st...>]

Jun Ding wrote:
> Could some body give me a short python exmple of how to use this module? I
> can't find any doc for how to use it,

http://python-ldap.sourceforge.net/docs.shtml

Ciao, Michael.

Re: example of python-ldap module

[David M. <da...@es...>]

something like:

results = l.search_s('o=search_base',ldap.SCOPE_SUBTREE,'uid=user')

the module actually has on-line docs as I recall.  Lok at
l.search_s.__doc__ for example.

Dave



On Fri, 18 Oct 2002, Jun Ding wrote:

> Could some body give me a short python exmple of how to use this module? I
> can't find any doc for how to use it, all docs I can find is C example. I
> installed a Windows 2k active direction ldap server on 10.20.30.100, and I
> can do that:
> >>> import ldap
> >>> l = ldap.open("10.20.30.100")
> >>> l.simple_bind("test","test")
> 1
> >>>
> Then what? like how can I get the value of "test" user's Last name? or how
> can I set some values back to my ldap server? Thanks.
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:
> Access Your PC Securely with GoToMyPC. Try Free Now
> https://www.gotomypc.com/s/OSND/DD
> _______________________________________________
> Python-LDAP-dev mailing list
> Pyt...@li...
> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev
>

example of python-ldap module

[Jun D. <Jun...@mi...>]

Could some body give me a short python exmple of how to use this module? I
can't find any doc for how to use it, all docs I can find is C example. I
installed a Windows 2k active direction ldap server on 10.20.30.100, and I
can do that:
>>> import ldap
>>> l = ldap.open("10.20.30.100")
>>> l.simple_bind("test","test")
1
>>>
Then what? like how can I get the value of "test" user's Last name? or how
can I set some values back to my ldap server? Thanks.

Wrapper above ADSI (was: Search w/ win2000)

[<mi...@st...>]

Steffen Ries wrote:
>>The best option would be to ask whether somebody here (not me!) can
>>provide a Win32 build of recent python-ldap.
> 
> It would indeed be nice to have a recent python-ldap build for
> windows... :-)

Hmm, just a wild idea:
How about using Python Win32 to access ADSI via COM and set a python-ldap 
API-compatible wrapper module above?

Ciao, Michael.

Re: Search w/ win2000

[Steffen R. <ste...@sy...>]

Michael Str=F6der <mi...@st...> writes:

> Ric...@ju... wrote:
> > I have Iplanet 5.0, which is ldapv.3 compliant. Simple
> > authentication is our bind method.
>=20
> This should normally work even if you're stuck with LDAPv2.
>=20
> > I am running win2000 on my deskpoint and my ldap resides on unix.
>=20
> Maybe there are even incompabilities of the old Umich DLLs used by
> Win32 version of python-ldap 1.x with W2K?

I am using python-ldap 1.x with W2K and I can connect to iPlanet
directories (and other LDAPv3 servers) without problems.

> The best option would be to ask whether somebody here (not me!) can
> provide a Win32 build of recent python-ldap.

It would indeed be nice to have a recent python-ldap build for
windows... :-)

/steffen
--=20
ste...@sy...	<> Gravity is a myth -- the Earth sucks!

Re: Search w/ win2000

[<mi...@st...>]

Ric...@ju... wrote:
> 
> I have Iplanet 5.0, which is ldapv.3 compliant. Simple authentication is 
> our bind method.

This should normally work even if you're stuck with LDAPv2.

> I am running win2000 on my deskpoint and my ldap resides on unix.

Maybe there are even incompabilities of the old Umich DLLs used by Win32 
version of python-ldap 1.x with W2K?

How about also testing with python-ldap 2.x on your Unix box? Well, success 
might also depend on your Unix flavor.

Another option would be using python-ldap 2.x based on OpenLDAP 2.x under 
cygwin (see http://www.geocrawler.com/archives/3/1568/2002/1/0/7452037/).

The best option would be to ask whether somebody here (not me!) can provide 
a Win32 build of recent python-ldap.

Ciao, Michael.

Re: Search w/ win2000

[<Ric...@ju...>]

I have Iplanet 5.0, which is ldapv.3 compliant. Simple authentication is=20
our bind method.

I am running win2000 on my deskpoint and my ldap resides on unix.


=20




Michael Str=F6der <mi...@st...>
09/26/2002 08:39 AM
Please respond to michael

=20
        To:     Ric...@ju...
        cc:     Python Developer List <pyt...@li...=
t>
        Subject:        Re: Search w/ win2000


Ric...@ju... wrote:
 >
 > I have version ldap-1.10a3 installed. I am running on a python 2.2 on
 > a win2000 system.

Which LDAP server? Active Directory? Note that python-ldap 1.x cannot
open an LDAPv3 connection. It's limited to LDAPv2 which is not allowed
with Active Directory I suspect. There are other caveats of 1.x and=20
LDAPv2.

Unfortunately there's currently no Win32 build available of python-ldap=20
2.x which is based on OpenLDAP 2.x libs.

 > I have been unable to make the search work. Below are some of my
 > unsuccessful tries. Can I use the "=5Fs" option on the version

The synchronous method search=5Fs() is what you probably like to use. It
returns the search result als list of 2-tuples containing the
distinguished name (string) and the entry (dictionary).

 > Traceback (most recent call last):
 >   File "C:\Python22\test=5Fld1.py", line 3, in ?
 >     l.simple=5Fbind=5Fs('uid=3Dxxxxx,ou=3Dmyou,o=3Dmyorg','xxxxx')
 > LOCAL=5FERROR: {'desc': 'Local error'}

More information about your setup is needed. Which server? Is simple=20
authentication enabled at the server at all?

 > l.simple=5Fbind('uid=3Dxxxxx,ou=3Dmyou,o=3Dmyorg','xxxxx')

You should use the synchronous version for binding in any case.

l.simple=5Fbind=5Fs('uid=3Dxxxxx,ou=3Dmyou,o=3Dmyorg','xxxxx')

 > res =3D l.search('o=3Dmyorg', ldap.SCOPE=5FBASE,
 > 'uid=3Dxxxxx,ou=3Dmyou,o=3Dmyorg',
 > ["ou", "l"])
 >
 > for entry in res:
  > [..]
 > This code gives me this error msg: TypeError: iteration over
 > non-sequence

search() in opposite to search=5Fs() returns an integer representing the
message ID of the started LDAP operation which is then used when calling
result(). That's probably not what you want.

Ciao, Michael.

Re: Search w/ win2000

[<mi...@st...>]

Ric...@ju... wrote:
 >
 > I have version ldap-1.10a3 installed. I am running on a python 2.2 on
 > a win2000 system.

Which LDAP server? Active Directory? Note that python-ldap 1.x cannot
open an LDAPv3 connection. It's limited to LDAPv2 which is not allowed
with Active Directory I suspect. There are other caveats of 1.x and LDAPv2.

Unfortunately there's currently no Win32 build available of python-ldap 
2.x which is based on OpenLDAP 2.x libs.

 > I have been unable to make the search work. Below are some of my
 > unsuccessful tries. Can I use the "_s" option on the version

The synchronous method search_s() is what you probably like to use. It
returns the search result als list of 2-tuples containing the
distinguished name (string) and the entry (dictionary).

 > Traceback (most recent call last):
 >   File "C:\Python22\test_ld1.py", line 3, in ?
 >     l.simple_bind_s('uid=xxxxx,ou=myou,o=myorg','xxxxx')
 > LOCAL_ERROR: {'desc': 'Local error'}

More information about your setup is needed. Which server? Is simple 
authentication enabled at the server at all?

 > l.simple_bind('uid=xxxxx,ou=myou,o=myorg','xxxxx')

You should use the synchronous version for binding in any case.

l.simple_bind_s('uid=xxxxx,ou=myou,o=myorg','xxxxx')

 > res = l.search('o=myorg', ldap.SCOPE_BASE,
 > 'uid=xxxxx,ou=myou,o=myorg',
 > ["ou", "l"])
 >
 > for entry in res:
  > [..]
 > This code gives me this error msg: TypeError: iteration over
 > non-sequence

search() in opposite to search_s() returns an integer representing the
message ID of the started LDAP operation which is then used when calling
result(). That's probably not what you want.

Ciao, Michael.

Search w/ win2000

[<Ric...@ju...>]

I have version ldap-1.10a3 installed. I am running on a python 2.2 on a 
win2000 system.

I have been unable to make the search work. Below are some of my 
unsuccessful tries. Can I use the "_s" option on the version that I am 
running and if not, can anyone tell me what format I would use for a basic 
search that returns the attributes I am looking for ? I assume that once I 
get this, the modify of the object would have the same format.

Is this the version that would be used for win2000 ?

Thanks,
Richard Ferry


-------------------------------------------
import ldap
l = ldap.open("myserver.myorg:4444")
l.simple_bind_s('uid=xxxxx,ou=myou,o=myorg','xxxxx')

res = l.search_s('o=myorg', ldap.SCOPE_BASE, 'uid=xxxxx,ou=myou,o=myorg', 
["ou", "l"])

When using the synchronous call I get this error:

Traceback (most recent call last):
  File "C:\Python22\test_ld1.py", line 3, in ?
    l.simple_bind_s('uid=xxxxx,ou=myou,o=myorg','xxxxx')
LOCAL_ERROR: {'desc': 'Local error'}
-------------------------------------

import ldap
l = ldap.open("myserver.myorg:4444")
l.simple_bind('uid=xxxxx,ou=myou,o=myorg','xxxxx')

res = l.search('o=myorg', ldap.SCOPE_BASE, 'uid=xxxxx,ou=myou,o=myorg', 
["ou", "l"])

for entry in res:
    attrs=entry[1]
    ou=attrs["ou"]
    loc=attrs["l"]
    print loc
    print ou

l.unbind()

This code gives me this error msg: TypeError: iteration over non-sequence
--------------------------------------------
import ldap
l = ldap.open("myserver.myorg:4444")
l.simple_bind('uid=xxxxx,ou=myou,o=myorg','xxxxx')

res = l.search('o=myorg', ldap.SCOPE_BASE, 'uid=xxxxx,ou=myou,o=myorg', 
["ou", "l"])

print res

This code prints out res, which has a value of 2.

Security fix module ldapurl (was: ANN: python-ldap-2.0.0pre06)

[<mi...@st...>]

Peter Hawkins wrote:
>>- Security fix to module ldapurl
> 
> Can you explain this more clearly? How severe is it?

If an application used the LDAP URL extensions bindname and X-BINDPW in 
prior versions the key-word arg 'extensions' for LDAPUrl._init__() was 
not newly initialized each time. This could in some cases reveal login 
information elsewhere through LDAP URLs generated with this module.

See also:
http://www.geocrawler.com/lists/3/SourceForge/1568/0/9527098/

The follow-ups:
http://www.geocrawler.com/lists/3/SourceForge/1568/0/9527860/
http://www.geocrawler.com/lists/3/SourceForge/1568/0/9527887/
http://www.geocrawler.com/lists/3/SourceForge/1568/0/9533130/

 > Which versions does it affect?

2.0.0pre05 and prior versions which contain module ldapurl.

 > Do I need to issue an advisory against my package?

Depends on your policy.

Ciao, Michael.

Re: ANN: python-ldap-2.0.0pre06

[Peter H. <pe...@ha...>]

Hi...
On Wed, 25 Sep 2002 01:55 am, Michael Str=F6der wrote:
> HI!
>
> Find a new pre-release of python-ldap:
> ...
> - Security fix to module ldapurl

Can you explain this more clearly? How severe is it? Which versions=20
does it affect? Do I need to issue an advisory against my package?

> ...

Also, pre06 doesn't appear to build against ldap_r (functions like=20
ldap_first_reference don't exist in ldap_r).

=3D)
Peter

--=20
pe...@ha...
GPG key fingerprint:
C746 38A9 D3E4 A171 FB6A  56D4 5E30 DFCC BE11 F437

ANN: python-ldap-2.0.0pre06

[<mi...@st...>]

HI!

Find a new pre-release of python-ldap:

   http://python-ldap.sourceforge.net/

python-ldap provides an object-oriented API to access LDAP directory 
servers from Python programs. It mainly wraps the OpenLDAP 2.x libs for 
that purpose. Additionally it contains modules for other LDAP-related 
stuff (e.g. processing LDIF, LDAPURLs and LDAPv3 schema).

Download link:
http://prdownloads.sourceforge.net/python-ldap/python-ldap-2.0.0pre06.tar.gz?download

Changes since 2.0.0pre05:
- Fine-grained locking when linking against libldap_r
- New wrapper class ldap.ReconnectLDAPObject
- Security fix to module ldapurl
- Other fixes and improvements to whole package
- LDAPv3 schema support (still somewhat premature and undocumented)

Ciao, Michael.

Re: CVS: python-ldap

[David L. <dav...@it...>]

On Wed, 18 Sep 2002, Michael Str?der typed thusly:

> A single 'Python-style' license for the whole sdist package. It's called LICENSE to avoid David having an identity crisis.


ahahahahahahaa!!!!!

good on ya!
-- 
David Leonard                           Dav...@it...
School of Inf. Tech. and Elec. Engg _   Ph:+61 404 844 850
The University of Queensland       |+|  http://www.itee.uq.edu.au/~leonard/
QLD 4072  AUSTRALIA               ~` '~

Re: updated 2.0.0pre05 RPM/SRPM

[Joe L. <jl...@op...>]

And before anyone asks.. Its the same 2.0.0pre05 without patches. This  
was simply an RPM update that was submitted to me. Most people will  
want to be using the latest CVS version as per Michael's instructions..

On Tuesday, September 10, 2002, at 12:00 PM, Joe Little wrote:

>
> Thanks to Kelly Roestel, a new set of RPMs for python-ldap have been
> created that use setup.py instead of the makefile, and use pythonapp in
> the spec file to indicate which python version to build against.
>
> I have posted python-ldap-2.0.0pre05-2.i386.rpm and its src rpm on
> ftp.open-it.org for RedHat 7.3 and python 2.2. You can use the spec  
> file
> to match anything else.
>
> Michael:
>
> Can you adjust the rpm link again to point to the web page for  
> downloads
> (its more informative and doesn't lose info from column truncation in
> ftp listings):
>
> http://kodama.open-it.org/openit/ 
> modules.php?op=modload&name=Downloads&file=index&req=viewdownload&cid=2
>
>
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: OSDN - Tired of that same old
> cell phone?  Get a new here for FREE!
> https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
> _______________________________________________
> Python-LDAP-dev mailing list
> Pyt...@li...
> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev

updated 2.0.0pre05 RPM/SRPM

[Joe L. <jl...@op...>]

Thanks to Kelly Roestel, a new set of RPMs for python-ldap have been 
created that use setup.py instead of the makefile, and use pythonapp in 
the spec file to indicate which python version to build against.

I have posted python-ldap-2.0.0pre05-2.i386.rpm and its src rpm on 
ftp.open-it.org for RedHat 7.3 and python 2.2. You can use the spec file 
to match anything else. 

Michael:

Can you adjust the rpm link again to point to the web page for downloads 
(its more informative and doesn't lose info from column truncation in 
ftp listings):

http://kodama.open-it.org/openit/modules.php?op=modload&name=Downloads&file=index&req=viewdownload&cid=2

Re: 'valid' attribute in python-ldap 2.0.0pre05

[<mi...@st...>]

Lars,

Cc:-ed pyt...@li... to receive comments by others.

Lars Damerow wrote:
> 
> I just built python-ldap 2.0.0pre05, and I can
> no longer access the 'valid' attribute of LDAPObjects:

Well, it is not supported at the moment. It would be fairly easy to 
reimplement it in the Python wrapper class (see Lib/ldap/ldapobject.c) 
if really needed for backward compability.

Normally it's done within David's C code. Most times I'm not bothering 
with it. Frankly I would not rely on this flag at all.

I'd suggest statements like:

try:
   ..some LDAP operation..
except ldap.SERVER_DOWN:
   ..try to reconnect..

In current CVS version the new wrapper class 
ldap.ldapobject.ReconnectLDAPObject provides a convenient framework for 
this. Check it out.

Ciao, Michael.

Re: Very strange problem with module ldapurl

[<mi...@st...>]

David Leonard wrote:
 >
 > | 6.25. Why are default values sometimes shared between objects?
 >
 > <http://www.python.org/cgi-bin/faqw.py?req=show&file=faq06.025.htp>

I replaced all such fishy key-word arguments with mutable types and
such. Please bring your working tree in sync and test.

Ciao, Michael.

Re: Very strange problem with module ldapurl

[Jens V. <je...@zo...>]

i just got confirmation from someone here at zope corp who knows these =20=

things better that...

- in general, it is better to avoid mutable default values in an =20
argument list for a method

- the fact that the LDAPUrlExtensions-constructor was part of the =20
arguemnt list would actually give you the very same object every single =20=

time.

jens


On Friday, Sep 6, 2002, at 14:27 US/Eastern, Michael Str=F6der wrote:

> HI!
>
> I have a very strange problem with ldapurl (my own source, sigh!) =20
> which can also be a security problem in case of passwords stored in =20=

> LDAPUrlExtension instances. It drives me crazy!
>
> See this simple source:
>
> ------------------------ snip ------------------------
> from ldapurl import LDAPUrl,LDAPUrlExtension
>
> l1=3DLDAPUrl()
> l1.hostport=3D'host1'
> l1.who=3D'cn=3DUser1'
> l1.cred=3D'passwd1'
> l1.extensions['dummyext1']=3DLDAPUrlExtension(
>   extype=3D'dummyext1',exvalue=3D'dummyvalue1'
> )
>
> print 'l1 before creation of l2:\n',str(l1)
>
> l2=3DLDAPUrl()
> l2.hostport=3D'host2'
> l2.who=3D'cn=3DUser2'
> l2.cred=3D'passwd2'
> l2.extensions['dummyext2']=3DLDAPUrlExtension(
>   extype=3D'dummyext2',exvalue=3D'dummyvalue2'
> )
>
> print 'l1 after creation of l2:\n',str(l1)
> print 'l2 itself:\n',str(l2)
> ------------------------ snip ------------------------
>
> In theory l1 and l2 should be completely independent LDAPUrl =20
> instances. But it seems the LDAPUrl.extensions class attributes are =20=

> tied by some means.
>
> The problem is the output (with Python 2.2.1):
>
> $ python Tests/ldapurl_instance_error.py
> ldap://host1/=20
> ????dummyext2=3Ddummyvalue2,dummyext1=3Ddummyvalue1,bindname=3Dcn=3DUser=
2,X-=20
> BINDPW=3Dpasswd2
> ldap://host2/=20
> ????dummyext2=3Ddummyvalue2,dummyext1=3Ddummyvalue1,bindname=3Dcn=3DUser=
2,X-=20
> BINDPW=3Dpasswd2
>
> Anybody here having a clue?
>
> Ciao, Michael.