Produits Entr'ouvert » Authentic 2

div.a2-manager-ldap pre {

	background: white;

	border: 1px solid black;

	padding: .3em;

	overflow-x: auto;

	white-space: pre-wrap;

	word-wrap: break-word;

}

    {% if user.is_superuser %}

    <li><a href="{% url 'a2-manager-tech-info' %}">{% trans 'Technical information' %}</a></li>

    {% endif %}

{% load i18n %}

<h4>{% trans "Realm:" %} {{ ldap.realm }}</h4>

<div class="a2-manager-ldap-{{ ldap.realm }}">

{% if not error %}

<h5>{% blocktrans %}Base ldapsearch command:{% endblocktrans %}</h5>

 <pre>ldapsearch -v -H {{ ldap.ldap_uri }} -D "{{ ldap.binddn }}" -w "{{ ldap.bindpw }}" -b "{{ ldap.basedn }}"{% if ldap.user_filter or ldap.sync_ldap_users_filter %} "{% firstof ldap.sync_ldap_users_filter ldap.user_filter %}"{% endif %}</pre>

{% else %}

<div class="error">

{% blocktrans %}Error while attempting to connect to LDAP server, base ldapsearch command won't be displayed.{% endblocktrans %}

</div>

{% endif %}

<h5>{% trans "Configuration:" %}</h5>

<pre>{{ ldap|pprint }}</pre>

</div>

{% extends "authentic2/manager/base.html" %}

{% load i18n %}

{% block appbar %}

  <h2>{% blocktrans %}{{ title }}{% endblocktrans %}</h2>

{% endblock %}

{% block content %}

  {% if ldap_list %}

  <h3>{% trans "LDAP information" %}</h3>

  <div id="a2-manager-tech-info-ldap-list">

    {% for ldap in ldap_list %}

     {% include "authentic2/manager/ldap_details.html" with ldap=ldap %}

    {% endfor %}

  </div>

{% endif %}

{% endblock %}

        # technical information including ldap config

        url(r'^tech-info/$', views.tech_info, name='a2-manager-tech-info'),

class TechnicalInformationView(TitleMixin, MediaMixin, TemplateView):

    template_name = 'authentic2/manager/tech_info.html'

    title = _("Technical information")

    def get(self, request, *args, **kwargs):

        if not request.user.is_superuser:

            raise PermissionDenied

        return super().get(request, *args, **kwargs)

    def get_context_data(self, **kwargs):

        import ldap

        from authentic2.backends import ldap_backend

        backend = ldap_backend.LDAPBackend

        kwargs['ldap_list'] = []

        for block in backend.get_config():

            config = block.copy()

            conn = backend.get_connection(config)

            if not conn:

                kwargs['error'] = True

            else:

                # retrieve ldap uri, not directly visible in configuration block

                config['ldap_uri'] = conn.get_option(ldap.OPT_URI)

                # user filters need to be formatted to ldapsearch syntax

                config['user_filter'] = force_text(block.get('user_filter'), '').replace('%s', '*')

                config['sync_ldap_users_filter'] = (

                    force_text(block.get('sync_ldap_users_filter'), '').replace('%s', '*').replace('%s', '*')

                )

            kwargs['ldap_list'].append(config)

        return super().get_context_data(**kwargs)

tech_info = TechnicalInformationView.as_view()

from django.utils.encoding import force_bytes, force_str, force_text

from .test_ldap import slapd

from .utils import assert_event, get_link_from_mail, login, logout, request_select2

def test_technical_info_ldap(app, admin, superuser, slapd, settings, monkeypatch):

    from ldap.dn import escape_dn_chars

    from authentic2.backends import ldap_backend

    settings.LDAP_AUTH_SETTINGS = [

        {

            'url': [slapd.ldap_url],

            'binddn': force_text('cn=%s,o=ôrga' % escape_dn_chars('Étienne Michu')),

            'bindpw': 'passé',

            'basedn': 'o=ôrga',

            'use_tls': False,

        }

    ]

    assert slapd

    login(app, admin, 'a2-manager-homepage')

    app.get(reverse('a2-manager-tech-info'), status=403)

    logout(app)

    resp = login(app, superuser, 'a2-manager-tech-info')

    ldap_config_text = resp.pyquery('div#a2-manager-tech-info-ldap-list').text()

    assert 'Base ldapsearch command' in ldap_config_text

    assert 'ldapsearch -v -H ldapi://' in ldap_config_text

    assert '-D "cn=Étienne Michu,o=ôrga" -w "passé" -b "o=ôrga" "(|(mail=*)(uid=*))"' in ldap_config_text

    for opt in [

        'active_directory',

        'attribute_mappings',

        'attributes',

        'basedn',

        'bind_with_username',

        'binddn',

        'bindpw',

        'bindsasl',

        'cacertdir',

        'cacertfile',

        'can_reset_password',

        'certfile',

        'clean_external_id_on_update',

        'connect_with_user_credentials',

        'create_group',

        'disable_update',

        'email_field',

        'external_id_tuples',

        'extra_attributes',

        'fname_field',

        'global_ldap_options',

        'group_basedn',

        'group_filter',

        'group_mapping',

        'group_to_role_mapping',

        'groupactive',

        'groupstaff',

        'groupsu',

        'is_staff',

        'is_superuser',

        'keep_password',

        'keep_password_in_session',

        'keyfile',

        'ldap_options',

        'ldap_uri',

        'limit_to_realm',

        'lname_field',

        'lookups',

        'mandatory_attributes_values',

        'member_of_attribute',

        'multimatch',

        'ou_slug',

        'ppolicy_dn',

        'realm',

        'referrals',

        'replicas',

        'require_cert',

        'set_mandatory_groups',

        'set_mandatory_roles',

        'shuffle_replicas',

        'sync_ldap_users_filter',

        'timeout',

        'update_username',

        'url',

        'use_controls',

        'use_first_url_for_external_id',

        'use_password_modify',

        'use_tls',

        'user_attributes',

        'user_basedn',

        'user_can_change_password',

        'user_dn_template',

        'user_filter',

        'username_template',

    ]:

        assert opt in ldap_config_text

    # mock a buggy connection

    monkeypatch.setattr(ldap_backend.LDAPBackend, 'get_connection', lambda x: None)

    resp = app.get(reverse('a2-manager-tech-info'))

    ldap_config_text = resp.pyquery('div#a2-manager-tech-info-ldap-list').text()

    assert 'Base ldapsearch command' not in ldap_config_text

    assert 'Error while attempting to connect to LDAP server' in ldap_config_text