How To Retrieve All The Attributes Of Ldap Database

April 22, 2024 Post a Comment

I am using ldap module of python to connect to ldap server. I am able to query the database but I dont know how to retrieve the fields present in the database, so that I can notify

Solution 1:

You need to read the schema of your ldap server.

This code may work for you, as tempalte

#!/usr/bin/env python#coding:utf-8# Author:  peter --<pjl@hpc.com.py># Purpose: Tareas comunes a utilizar con respecto a schemas ldap# Created: 01/05/12import ldap
import ldap.schema



########################################################################classSchemasIPA(object):

    __ldaps = ldap.schema

    #----------------------------------------------------------------------def__init__(self, url):
        """Constructor"""
        ldap._trace_level = 0
        ldap.set_option(ldap.OPT_DEBUG_LEVEL,0)
        subschemasubentry_dn, self.schema = ldap.schema.urlfetch(url,ldap._trace_level)
        self.oc_tree = self.schema.tree(ldap.schema.ObjectClass)        
        self.at_tree = self.schema.tree(ldap.schema.AttributeType)        

    defgetobjectclasses(self):
        """
        trae la listas de objectclasses de un servidor dado
        """
        allobjc = {}
        for a in self.oc_tree.keys():
            objc = self.schema.get_obj(ldap.schema.ObjectClass, a)

            if objc != None:
                allobjc[objc.oid] = (objc.names, objc.must, objc.may, objc.sup, objc.obsolete)

        return allobjc

    defgetatributes(self):
        """
        trae la lista de atributos de un servidor dado
        """
        allatt= {}
        o = []
        for a in self.at_tree.keys():
            att = self.schema.get_obj(ldap.schema.AttributeType, a)

            if att != None:
                allatt[att.oid] = (att.names, att.syntax, att.syntax_len, att.desc, att.collective, att.equality, att.single_value)

        return allatt

    defgetvalidoid(self, objects):
        """
        retorno un valor oid libre valida para la creacion de esquemas y atributos
        el proceso valido es pedirle a la iana un oid valido, pero se tarda mas de un mes
        los oid a utilizar son valores predefinidos al momento de la instalacion del servidor ldap
        """passif __name__ == '__main__':
    sch = SchemasIPA('ldap://localhost')
    #at = sch.getatributes()
    ob = sch.getobjectclasses()

    for a, b in ob.iteritems():
        print a
        print b[0]

Then you can wrapper this class like this

#a file contained the above classimport schemas

olschemas = schemas.SchemasIPA(url='ldap://192.168.1.81')

#here are, some magic :)
pa = olschemas.schema.get_obj(olschemas._SchemasIPA__ldaps.ObjectClass, 'posixaccount')
pa.must #going to print all the attributes that can't be null's
pa.may #going to print all the attributes that are optional's

Solution 2:

The Root DSE and possible base DN of the schema

Assuming that the LDAP client only cares what attributes are defined in the schema (see extensibleObject below), to determine if an attribute is defined in the server schema, retrieve the schema. In many directory servers, the base DN (or base object) for the schema is defined in the attribute subSchemaSubEntry which might be present in the root DSE. For more information about the root DSE, see LDAP: The Root DSE. To retrieve the contents of the root DSE, transmit a search request to the server consisting of a base object of '' and a search scope of base, and a requested attribute list consisting of * and +.

extensibleObject

Note that the presence of the objectClass extensibleObject allows LDAP clients to add any attribute name and value they require, much like a FORTRAN garbage common block, that is, attributes could be present in an entry but not defined in the schema.

subSchemaSubEntry not present

If the subSchemaSubEntry attribute is not present, contact the server administrators and ask for information regarding retrieving the schema and for sufficient access rights to do so.

subSchemaSubEntry present

If the subSchemaSubEntry attribute is present, read the schema by transmitting a search request to the server using the value of the subSchemaSubEntry attribute as the base object, a search scope of one and a requested attribute list consistent of * and +. The attribute type definitions and objectClass definitions are contained in the schema.

Solution 3:

I am using ldap module of python to connect to ldap server. I am able to query the database but I dont know how to retrieve the fields present in the database, so that I can notify the user in advance to quering the database, telling him that the field he is trying to access is not in the database.

A simple solution would be to search and then print a list of the keys from the result.

import ldap

# connect to your ldap server

some_dn = '...' # Your base dn
some_lookup = '...' # your lookup attr

result = conn.search_s(some_dn,ldap.SCOPE_SUBTREE,some_lookup)
result[0][1].keys()

For example, against my AD server it returns the following:

['mailNickname',
 'publicDelegatesBL',
 'logonCount',
 'cn',
 'countryCode',
 'dSCorePropagationData',
 'objectClass',
 # ... many many more'telephoneNumber',
'physicalDeliveryOfficeName',
'name',
'memberOf',
'codePage',
'userAccountControl',
'msExchMDBRulesQuota',
'lastLogon',
'protocolSettings',
'uSNChanged',
'sn',
'msExchVersion',
'mDBUseDefaults',
'givenName',
'msExchMailboxGuid',
'lastLogoff']

Python Programming Language