HPCE/ldapuserdir
0
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

WIP: Python3 refactor #1

Draft
viessm_h wants to merge 2 commits from refactor into master
pull from: refactor
merge into: HPCE:master
Conversation 3 Commits 2 Files Changed 12 +964 -222
viessm_h commented 2026-02-12 16:20:20 +01:00
Owner
Copy Link
No description provided.
viessm_h added 2 commits 2026-02-12 16:20:20 +01:00
protext against agent [UNDO] 148d9a19af
fully compliant with python3.6+ e9a45941af
viessm_h requested review from feichtinger 2026-02-12 16:20:20 +01:00
viessm_h commented 2026-02-12 16:27:24 +01:00
Author
Owner
Copy Link

hmmm, its seems Simon has been working on a ldaputil tool similar to ldapuserdir https://gitea.psi.ch/ctrl_packages/gfa-ldaputils... does it make sense to have several general tools to query ldap?

hmmm, its seems Simon has been working on a ldaputil tool similar to ldapuserdir https://gitea.psi.ch/ctrl_packages/gfa-ldaputils... does it make sense to have several _general_ tools to query ldap?
viessm_h requested review from caubet_m 2026-02-12 16:27:34 +01:00
feichtinger commented 2026-02-12 17:13:08 +01:00
Owner
Copy Link

If Simon has a newer tool that he has written, then we should look whether it has all the functionality we want. My ldapuserdir is quite old now, and the main class was written as a component of a gateway that steered the firewall setting of a gateway server (sigateway) based on the identity of the user logging in - so a user would get access only to the beamline machines he was entitled to... we used that to tunnel nomachine through it at that time... around 2013. The CLI I then just put on top for convenience and because we lacked such tools at that time

This old class uses an old python ldap library which still works, but it's not as nice to use as the newer one (ldap3). Did you already test Simon's new client @viessm_h?

If Simon has a newer tool that he has written, then we should look whether it has all the functionality we want. My ldapuserdir is quite old now, and the main class was written as a component of a gateway that steered the firewall setting of a gateway server (sigateway) based on the identity of the user logging in - so a user would get access only to the beamline machines he was entitled to... we used that to tunnel nomachine through it at that time... around 2013. The CLI I then just put on top for convenience and because we lacked such tools at that time This old class uses an old python ldap library which still works, but it's not as nice to use as the newer one (ldap3). Did you already test Simon's new client @viessm_h?
feichtinger commented 2026-02-12 17:26:37 +01:00
Owner
Copy Link

Hmmm... Simon's tool is also already 5y old... don't know whether it covers all that ldapuserdir dies maybe should ask him next week. Whatever is easiest should be used. Both tools also allowed making changes to LDAP, but in today's AD this probably is anyhow no longer allowed for our identities.

Hmmm... Simon's tool is also already 5y old... don't know whether it covers all that ldapuserdir dies maybe should ask him next week. Whatever is easiest should be used. Both tools also allowed making changes to LDAP, but in today's AD this probably is anyhow no longer allowed for our identities.
This pull request is marked as a work in progress.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin refactor:refactor
git checkout refactor
Sign in to join this conversation.
Reviewers
No Reviewers
feichtinger
caubet_m
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
agosti_j assman_g caubet_m feichtinger gsell pozsa_k viessm_h
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: HPCE/ldapuserdir#1
Delete Branch "refactor"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?