109 lines
4.0 KiB
Python
109 lines
4.0 KiB
Python
# Create your models here.
|
|
import re
|
|
|
|
from django.contrib.auth.models import User
|
|
from django.contrib.auth.tokens import default_token_generator
|
|
from django.template.loader import render_to_string
|
|
from django.utils.encoding import force_bytes
|
|
from django.utils.http import urlsafe_base64_encode
|
|
from ldapdb.models import fields as ldap_fields
|
|
from ldapdb.models.base import Model
|
|
|
|
from core.settings import PASSWORD_RESET_TIMEOUT_DAYS
|
|
from account_manager.utils.mail_utils import realm_send_mail
|
|
from multiprocessing import Process
|
|
from ldap import NO_SUCH_OBJECT, ALREADY_EXISTS
|
|
from django.core.exceptions import ObjectDoesNotExist
|
|
|
|
|
|
class LdapUser(Model):
|
|
"""
|
|
Class for representing an LDAP user entry.
|
|
"""
|
|
# LDAP meta-data
|
|
ROOT_DN = "dc=stuve,dc=de"
|
|
base_dn = "dc=stuve,dc=de"
|
|
object_classes = ['inetOrgPerson']
|
|
# last_modified = ldap_fields.DateTimeField(db_column='modifyTimestamp', blank=True)
|
|
|
|
# inetOrgPerson
|
|
username = ldap_fields.CharField(db_column='uid', primary_key=True)
|
|
password = ldap_fields.CharField(db_column='userPassword')
|
|
first_name = ldap_fields.CharField(db_column='cn', blank=True)
|
|
last_name = ldap_fields.CharField(db_column='sn', blank=True)
|
|
email = ldap_fields.CharField(db_column='mail')
|
|
phone = ldap_fields.CharField(db_column='telephoneNumber', blank=True)
|
|
mobile_phone = ldap_fields.CharField(db_column='mobile', blank=True)
|
|
photo = ldap_fields.ImageField(db_column='jpegPhoto')
|
|
|
|
def __str__(self):
|
|
return self.username
|
|
|
|
def __unicode__(self):
|
|
return self.full_name
|
|
|
|
@staticmethod
|
|
def create_with_django_user_creation_and_welcome_mail(realm, protocol, domain, username, email):
|
|
if not LdapUser.is_user_duplicate(username):
|
|
LdapUser.base_dn = f'ou=people, {realm.ldap_base_dn}'
|
|
ldap_user = LdapUser.objects.create(username=username, email=email, first_name=" ", last_name=" ")
|
|
user, _ = User.objects.get_or_create(username=username, email=email)
|
|
mail_subject = 'Activate your blog account.'
|
|
message = render_to_string('registration/welcome_email.jinja2', {
|
|
'user': user,
|
|
'domain': domain,
|
|
'uid': urlsafe_base64_encode(force_bytes(user.pk)).decode(),
|
|
'token': default_token_generator.make_token(user=user),
|
|
'protocol': protocol,
|
|
'email': email,
|
|
'expiration_days': PASSWORD_RESET_TIMEOUT_DAYS
|
|
})
|
|
# TODO failure handling
|
|
p1 = Process(target=realm_send_mail, args=(realm, user.email, mail_subject, message))
|
|
p1.start()
|
|
return ldap_user
|
|
else:
|
|
raise ALREADY_EXISTS('User already exists')
|
|
|
|
@staticmethod
|
|
def password_reset(user, raw_password):
|
|
LdapUser.base_dn = LdapUser.ROOT_DN
|
|
ldap_user = LdapUser.objects.get(username=user.username)
|
|
ldap_user.password = raw_password
|
|
LdapUser.base_dn = re.compile('(uid=[a-zA-Z0-9_]*),(.*)').match(ldap_user.dn).group(2)
|
|
ldap_user.save()
|
|
|
|
@staticmethod
|
|
def is_user_duplicate(username):
|
|
LdapUser.base_dn = LdapUser.ROOT_DN
|
|
try:
|
|
LdapUser.objects.get(username=username)
|
|
return True
|
|
except (NO_SUCH_OBJECT, ObjectDoesNotExist) as err:
|
|
return False
|
|
|
|
|
|
class LdapGroup(Model):
|
|
"""
|
|
Class for representing an LDAP group entry.
|
|
"""
|
|
# LDAP meta-data
|
|
ROOT_DN = "dc=stuve,dc=de"
|
|
base_dn = "dc=stuve,dc=de"
|
|
object_classes = ['groupOfNames']
|
|
|
|
name = ldap_fields.CharField(db_column='cn', max_length=200, primary_key=True)
|
|
members = ldap_fields.ListField(db_column='member')
|
|
|
|
@staticmethod
|
|
def get_user_groups(realm, user, group_base_dn):
|
|
LdapUser.base_dn = f'ou=people,{realm.ldap_base_dn}'
|
|
LdapGroup.base_dn = group_base_dn
|
|
return LdapGroup.objects.filter(members=user.dn)
|
|
|
|
def __str__(self):
|
|
return self.name
|
|
|
|
def __unicode__(self):
|
|
return self.name
|