python-ldap-dev — discussion among developers

Re: Referral support (was: port of Net::LDAP::Entry)

[<mi...@st...>]

Michael Str=F6der wrote:
>=20
> If you switch off internal referral handling you will receive search=20
> continuations along with normal search results as tuples with None as=20
> first item and a string containing the LDAP URL as second item.

I forgot something: If the search root is itself matched by a=20
referral a ldap.REFERRAL exception is raised.

You have to extract the referral's LDAP URL and matched field from=20
the exception instance. Feel free to check out web2ldap's sources=20
pylib/w2lapp/handler.py and pylib/w2lapp/referral.py. Your mileage=20
may vary.

Note that there are many issues to deal with either in your=20
concept or your application when extensively using referrals.

Ciao, Michael.

Re: Referral support (was: port of Net::LDAP::Entry)

[Robert S. <ml-...@ep...>]

On Thu, 25 Jul 2002 10:45:12 +0000 (UTC),
 Michael Ströder <mi...@st...> wrote:
> import ldap
> 
> l=ldap.initialize('ldap://ldap.rediris.es')
> l.set_option(ldap.OPT_PROTOCOL_VERSION,ldap.VERSION3)
> l.set_option(ldap.OPT_REFERRALS,0)
> result = l.search_s('dc=es',ldap.SCOPE_ONELEVEL,'(objectClass=*)')
> for i in result:
>    print i

Thanks for the example code. That actually works!

I think I have to check all these options and their meaning again. ;-)

Greetings
-- 
Robert Sander
Manager
Information Systems        www.epigenomics.com        Kastanienallee 24
+493024345330                                              10435 Berlin

Re: Setting options via class attributes of LDAPObject

[Jens V. <je...@zo...>]

+1

IMHO direct attribute access without going through methods is nasty

jens


On Thursday, July 25, 2002, at 11:34 , Michael Str=F6der wrote:

> HI!
>
> I'd like to remove the possibility to set/get LDAP options via class=20=

> attributes of ldap.LDAPObject instances since it's error-prone and =
kludgy=20
> code.
>
> LDAPObject.set_option() and LDAPObject.get_option() is the complete=20
> solution.
>
> Although it might break existing code if I remove=20
> LDAPObject.__setattr__() and LDAPObject.__getattr__(). Therefore I'd =
like=20
> to ask who is setting LDAP options via class attributes?
>
> Ciao, Michael.

Re: Setting options via class attributes of LDAPObject

[<mi...@st...>]

Michael Str=F6der wrote:
>=20
> I'd like to remove the possibility to set/get LDAP options via class=20
> attributes of ldap.LDAPObject instances since it's error-prone and=20
> kludgy code.
>=20
> LDAPObject.set_option() and LDAPObject.get_option() is the complete=20
> solution.
>=20
> Although it might break existing code if I remove=20
> LDAPObject.__setattr__() and LDAPObject.__getattr__(). Therefore I'd=20
> like to ask who is setting LDAP options via class attributes?

Hmm, I've checked in a much less complex implementation of=20
LDAPObject.__setattr__() and LDAPObject.__getattr__().

But I'd really like to remove getattr() and setattr() in=20
LDAPObject.c since it does not make sense to do this at the C=20
level. But if I remove getattr() and setattr() the set_option()=20
and get_option() method are also removed.

David, can you please enlighten me how the stuff in options.c=20
works? It seems somewhat overly complex to me.

Ciao, Michael.

Setting options via class attributes of LDAPObject

[<mi...@st...>]

HI!

I'd like to remove the possibility to set/get LDAP options via 
class attributes of ldap.LDAPObject instances since it's 
error-prone and kludgy code.

LDAPObject.set_option() and LDAPObject.get_option() is the 
complete solution.

Although it might break existing code if I remove 
LDAPObject.__setattr__() and LDAPObject.__getattr__(). Therefore 
I'd like to ask who is setting LDAP options via class attributes?

Ciao, Michael.

Re: ldap, ldap_r and thread problem

[Jens V. <je...@zo...>]

i might be able to help if you send me the code for all those objects that 
collaborate to create the full 4-frame page, like all DTML/ZPT pages etc.

jens


On Thursday, July 25, 2002, at 03:29 , WENGER G DsigTcs wrote:

> Hi,
>
> I'm using Zope. my index.html page has 4 frames. Before, my 4 frames
> appeared without problem. Then, I've installed LDAPUserFolder which uses
> python ldap. And now, I often have one (different each time) of my frames
> which causes in Internal Error of Apache (because of no answer from Zope)
> .
> I've tried to launch Zope with -M <file.log> and I've seen that there was 
> 4
> 'Get' but only 3 answers. So, my conclusion it's that Zope catchs the 4
> 'simultaneous' requests but answers only to 3.
> I have a lot of difficulties to find the origin of my problem. I've
> installed
> python ldap 2.0.0pre05 (compiled with Lib: ldap_r ldap lber resolv) and
> OpenLDAP 2.0.25-2.
> Is it the fault of LDAPUserFolder for, perhaps, a thread reason? Or Is it 
> a
> problem with python ldap? May you help me? What can I do?
>
> I am using :
> Zope 2.5.1
> Pyhton 2.1.3
> LDAPUserFolder 1.5beta1
> Python ldap 2.0.0pre05 (compiled with ldap_r)
> OpenLDAP 2.0.25-2
>
> Thanks,

Re: Referral support (was: port of Net::LDAP::Entry)

[<mi...@st...>]

Robert Sander wrote:
> On Thu, Jul 25, 2002 at 11:59:21AM +0200, Michael Str=F6der wrote:
>=20
>>Before I write a pile of postings about it I'd like to know what=20
>>your understanding of handling referrals is.
>=20
> The Perl modules in Net::LDAP return a entries array and a references
> array after a search when the parameter "deref" is set to 3. I think
> this is DEREF_ALWAYS.

Option OPT_DEREF has nothing to do with referrals. It's for=20
aliases. OPT_REFERRALS is the relevant option which defines=20
whether the OpenLDAP library internally follows referrals or not.

> With the referrals you are able to search further in the tree.

If you switch off internal referral handling you will receive=20
search continuations along with normal search results as tuples=20
with None as first item and a string containing the LDAP URL as=20
second item. (Note that it might block when python-ldap is using=20
the OpenLDAP 2.1 libs. I did not have the possibility to track=20
down this issue.)

See example:

http://sites.inka.de:8002/web2ldap?ldap://ldap.rediris.es/dc%3Des??one?

(Please use [Disconnect] after use to quickly erase the LDAP=20
connection. This demo runs on a restricted shell-account allowing=20
only 24 file handles).

Example code:

-------------------------------------------------------------------
import ldap

l=3Dldap.initialize('ldap://ldap.rediris.es')
l.set_option(ldap.OPT_PROTOCOL_VERSION,ldap.VERSION3)
l.set_option(ldap.OPT_REFERRALS,0)
result =3D l.search_s('dc=3Des',ldap.SCOPE_ONELEVEL,'(objectClass=3D*)')
for i in result:
   print i
-------------------------------------------------------------------

Ciao, Michael.

Re: Referral support (was: port of Net::LDAP::Entry)

[Robert S. <gur...@ep...>]

On Thu, Jul 25, 2002 at 11:59:21AM +0200, Michael Ströder wrote:
> Robert Sander wrote:
> >We have a directory service set up with OpenLDAP extensively using
> >referrals. It seems that python-ldap currently is not able to handle
> >these. Is this correct?
> 
> Before I write a pile of postings about it I'd like to know what 
> your understanding of handling referrals is.

The Perl modules in Net::LDAP return a entries array and a references
array after a search when the parameter "deref" is set to 3. I think
this is DEREF_ALWAYS.
With the referrals you are able to search further in the tree.

I admit that I haven't tried to use l.deref = ldap.DEREF_ALWAYS and
look at the result.

Greetings
-- 
Robert Sander
Manager
Information Systems        www.epigenomics.com        Kastanienallee 24
+493024345330                                              10435 Berlin

Re: port of Net::LDAP::Entry

[Robert S. <rob...@ep...>]

On Thu, Jul 25, 2002 at 12:09:06PM +0200, Michael Ströder wrote:
> Robert Sander wrote:
> >This is a first port of
> >Net::LDAP::Entry 
> 
> I have to admit that I do not know Net::LDAP::Entry. Therefore I 
> might not fully understand the rationale.

As I wrote we are currently using these Perl modules in our scripts. I
ported this class to make the transition easy.

Greetings
-- 
Robert Sander
Manager
Information Systems        www.epigenomics.com        Kastanienallee 24
+493024345330                                              10435 Berlin

Re: port of Net::LDAP::Entry

[<mi...@st...>]

Robert Sander wrote:
> This is a first port of
> Net::LDAP::Entry 

I have to admit that I do not know Net::LDAP::Entry. Therefore I 
might not fully understand the rationale.

Check out ldap.modlist.modifyModlist(). Simply copy your old entry 
tweak the new entry's dictionary and create a list you can 
directly pass to LDAPObject.modify()/modify_s(). In some cases 
that might not work since there's no smart schema handling of the 
LDAP syntaxes but most times it's pretty convenient.

Ciao, Michael.

Re: ldap, ldap_r and thread problem

[<mi...@st...>]

WENGER G DsigTcs wrote:
 >
 > python ldap 2.0.0pre05
 > (compiled with Lib: ldap_r ldap lber resolv)

Use either ldap or ldap_r as given in the examples in setup.cfg. 
Not both!

In any case the proper locking should be done to serialize the 
calls according to the requirements of either ldap or ldap_r.

 > Is it the fault of LDAPUserFolder for, perhaps, a thread 
reason? Or Is it a
 > problem with python ldap? May you help me? What can I do?

I'm sure Jens can give more detailed information here. But I guess 
it's not a thread problem.

Ciao, Michael.

port of Net::LDAP::Entry

[Robert S. <ml-...@ep...>]

Hi!

We have been using the Perl Net::LDAP modules to access our directory
server. Now we want to switch to Python. This is a first port of
Net::LDAP::Entry 

class Entry:
    import ldap
    def __init__(self, dn, values = {}):
        self.distname = dn
        self.values = values
        self.chgtype = "add"
        self.changes = []
    def __str__(self):
        return "%s[%s]: %s" % ( self.distname, self.chgtype, self.values )
    def get_value(self, attr):
        try:
            return self.values[attr]
        except KeyError, er:
            return None
    def changetype(self, typ = None):
        if typ:
            self.chgtype = typ
            self.changes = []
        else:
            return self.chgtype
    def dn(self, dn = None):
        if dn:
            self.distname = dn
        else:
            return self.distname
    def exists(self, attr):
        return self.values.has_key(attr)
    def add(self, attrs):
        if type(attrs) != type([]):
            attrs = [attrs]
        for typ, val in attrs:
            if type(val) != type([]):
                val = [val]
            if self.values.has_key(typ):
                self.values[typ].extend(val)
                if self.chgtype == "modify":
                    self.changes.append((ldap.MOD_REPLACE, typ, self.values[typ]))
            else:
                self.values[typ] = val
                if self.chgtype == "modify":
                    self.changes.append((ldap.MOD_ADD, typ, val))
    def replace(self, attrs):
        if type(attrs) != type([]):
            attrs = [attrs]
        for typ, val in attrs:
            if type(val) != type([]):
                val = [val]
            self.values[typ] = val
            if self.chgtype == "modify":
                self.changes.append((ldap.MOD_REPLACE, typ, val))
    def delete(self, attrs = None):
        if attrs:
            if type(attrs) != type([]):
                attrs = [attrs]
            for attr in attrs:
                if self.values.has_key(attr):
                    del(self.values[attr])
                    if self.chgtype == "modify":
                        self.changes.append((ldap.MOD_DELETE, attr, None))
    def update(self, l):
        if self.chgtype == "add":
            import ldap.modlist
            return l.add_s(self.distname, ldap.modlist.addModlist(self.values))
        elif self.chgtype == "delete":
            return l.delete_s(self.distname)
        elif self.chgtype == "modify":
            return l.modify_s(self.distname, self.changes)


You may find it useful.

We have a directory service set up with OpenLDAP extensively using
referrals. It seems that python-ldap currently is not able to handle
these. Is this correct?

Greetings
-- 
Robert Sander
Manager
Information Systems        www.epigenomics.com        Kastanienallee 24
+493024345330                                              10435 Berlin

ldap, ldap_r and thread problem

[WENGER G D. <Gui...@so...>]

Hi,

I'm using Zope. my index.html page has 4 frames. Before, my 4 frames
appeared without problem. Then, I've installed LDAPUserFolder which uses
python ldap. And now, I often have one (different each time) of my frames
which causes in Internal Error of Apache (because of no answer from Zope).
I've tried to launch Zope with -M <file.log> and I've seen that there was 4
'Get' but only 3 answers. So, my conclusion it's that Zope catchs the 4
'simultaneous' requests but answers only to 3.
I have a lot of difficulties to find the origin of my problem. I've
installed 
python ldap 2.0.0pre05 (compiled with Lib: ldap_r ldap lber resolv) and
OpenLDAP 2.0.25-2. 
Is it the fault of LDAPUserFolder for, perhaps, a thread reason? Or Is it a
problem with python ldap? May you help me? What can I do?

I am using :
Zope 2.5.1
Pyhton 2.1.3
LDAPUserFolder 1.5beta1
Python ldap 2.0.0pre05 (compiled with ldap_r)
OpenLDAP 2.0.25-2

Thanks,
*************************************************************************

Ce message et toutes les pieces jointes (ci-apres le "message") sont
confidentiels et etablis a l'intention exclusive de ses destinataires.
Toute utilisation ou diffusion non autorisee est interdite. 
Tout message electronique est susceptible d'alteration. 
La SOCIETE GENERALE et ses filiales declinent toute responsabilite au titre de ce message s'il a ete altere, deforme ou falsifie.

				********

This message and any attachments (the "message") are confidential and
intended solely for the addressees.
Any unauthorised use or dissemination is prohibited. 
E-mails are susceptible to alteration.   
Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified. 

*************************************************************************

Re: 2.0.0pre05 RPMs

[<mi...@st...>]

Joe Little wrote:
> 
> Michael: Freshmeat.net still points to the redhat7.1 directory for RPMs. 
> Is this something that I can somehow change?

Since you created the python-ldap project entry on Freshmeat.net 
you should be able to request modifications.

I requested a change of the project description a couple of days ago.

Ciao, Michael.

2.0.0pre05 RPMs

[Joe L. <jl...@cs...>]

are now up and posted via ftp.open-it.org. There are both RH7.2 and 
RH7.3 versions, the former using Python 2.1, and the latter using 
Python 2.2.

Michael: Freshmeat.net still points to the redhat7.1 directory for 
RPMs. Is this something that I can somehow change?

Re: parameter problem

[<mi...@st...>]

Klaus Boehm wrote:
> 
> s = l.search_s("ou=xxxxx, o=xxx", ldap.SCOPE_SUBTREE, gecos,
> attrlist=['uidnumber','gidnumber','uid'], attrsonly=0)
> 
> and i want pass the parameter filterstring as a variable(gecos) from
> another programm(Website).
> But i get an error:             "ldap.FILTER_ERROR: {'desc': 'Bad search
> filter'}"
> 
> What can i do to avoid this error?

Provide a correct search filter (see RFC2254).

Example: '(gecos=*klaus*)'

Ciao, Michael.

Re: parameter problem

[Hans A. <Han...@Ph...>]

On Montag, 22. Juli 2002 13:43, Klaus Boehm wrote:
> I have this line in my sourcecode.
>
>
> s = l.search_s("ou=xxxxx, o=xxx", ldap.SCOPE_SUBTREE, gecos,
> attrlist=['uidnumber','gidnumber','uid'], attrsonly=0)
>
> and i want pass the parameter filterstring as a variable(gecos) from
> another programm(Website).
> But i get an error:             "ldap.FILTER_ERROR: {'desc': 'Bad
> search filter'}"
>
> What can i do to avoid this error?

Could you please tell us the contents of the gecos variable? Since the 
error is a 'Bad search filter', it would be really helpful to know the 
search filter...

Useful searchfilters look like '(objectclass=*)', or '(gecos=xyz)'. If 
xyz is in your gecos variable, you can build the search filter with 
'(gecos=%s)' % gecos

HTH,

Hans


-- 
Han...@Ph...

parameter problem

[Klaus B. <k....@ew...>]

I have this line in my sourcecode.


s = l.search_s("ou=xxxxx, o=xxx", ldap.SCOPE_SUBTREE, gecos,
attrlist=['uidnumber','gidnumber','uid'], attrsonly=0)

and i want pass the parameter filterstring as a variable(gecos) from
another programm(Website).
But i get an error:             "ldap.FILTER_ERROR: {'desc': 'Bad search
filter'}"

What can i do to avoid this error?

Thanks for help.

Klaus


--

ewt gmbh
data management group
tel: ++49 821 3106 319
fax: ++49 821 3106 399
url: www.ewt.de

Re: python-ldap 2.0.0pre05

[Joe L. <jl...@op...>]

Michael,

can you adjust the freshmeat RPM link to point to=20
www.open-it.org/download/ (since pre04 is in redhat 7.2 and pre05 will=20=

shortly be in at least 7.3) -- currently it points to 7.1 where the=20
1.10alpha3 RPMs are.

On Saturday, July 20, 2002, at 03:25 AM, Michael Str=F6der wrote:

> HI!
>
> Find a new pre-release of python-ldap:
>
>   http://python-ldap.sf.net/download.shtml
>
> Ciao, Michael.
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Python-LDAP-dev mailing list
> Pyt...@li...
> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev

Re: python-ldap 2.0.0pre05

[Jens V. <je...@zo...>]

thanks michael.

as far as you asking questions to the list concerning
development decisions and not getting a lot of responses,
at least in my own case most that you have asked about so
far was about functionalities and parts of the code that i
have never used myself (and sometimes never even heard
about). that's why i can't really give too much meaningful
feedback. my own products don't exercise python-ldap beyond
very standard method calls. :(

jens


On Sat, 20 Jul 2002 12:25:46 +0200
 =?ISO-8859-15?Q?Michael_Str=F6der?= <mi...@st...>
wrote:
> HI!
> 
> Find a new pre-release of python-ldap:
> 
>   http://python-ldap.sf.net/download.shtml
> 
> Ciao, Michael.
> 

python-ldap 2.0.0pre05

[<mi...@st...>]

HI!

Find a new pre-release of python-ldap:

    http://python-ldap.sf.net/download.shtml

Ciao, Michael.

python-ldap 2.0.0pre05

[<mi...@st...>]

HI!

Find a new pre-release of python-ldap:

   http://python-ldap.sf.net/download.shtml

Ciao, Michael.

Caching-related DEFINE's and mem leaks

[<mi...@st...>]

Hans Aschauer wrote:
> On Mittwoch, 17. Juli 2002 17:01, Michael Str=F6der wrote:
>=20
>>Anyone here in favor of caching features in OpenLDAP2 libs? This
>>feature is considered to be broken/experimental. Therefore I'd
>>like to comment out the cache-related defines in setup.py.
>>
>>Comments?
>=20
> Do it!=20

/bin/done

Regarding the mem leaks: I can't observe them anymore with recent=20
CVS version. Hmm, strange. I did experience mem leaks. That's why=20
I wrote the script attached.

Ciao, Michael.

Re: Fat memory leaks

[Hans A. <Han...@Ph...>]

On Dienstag, 2. Juli 2002 12:58, Michael Ströder wrote:
> HI!
>
> I remember that someone reported memory leaks quite a while ago
> and there was no further action. Running some test scripts I can
> observe that the python-ldap using process grows quite fast.
>
> Does anybody have the time to look into this? If yes, please dig
> into Modules/LDAPObject.c, functions l_ldap_result() and
> l_ldap_search().

I tried to find leaks, but did not succeed (I used valgrind for this 
task, which should at least find malloc/free leaks. I don't know if 
wrong reference counts in the python-C API will also be detected).

Could you please post a sample program that does leak for you? Maybe I 
will find some time to dig into this problem.

Hans


-- 
Han...@Ph...

Re: Caching-related DEFINE's

[Hans A. <Han...@Ph...>]

On Mittwoch, 17. Juli 2002 17:01, Michael Ströder wrote:
> HI!
>
> Anyone here in favor of caching features in OpenLDAP2 libs? This
> feature is considered to be broken/experimental. Therefore I'd
> like to comment out the cache-related defines in setup.py.
>
> Comments?

Do it! 

Just my 2 Cents.

Hans

-- 
Han...@Ph...