|
##############################################################################
|
|
# -*- coding: utf-8 -*-
|
|
# Project: ControlIES
|
|
# Module: Users.py
|
|
# Purpose: Users class
|
|
# Language: Python 2.5
|
|
# Date: 7-Feb-2011.
|
|
# Ver: 7-Feb-2011.
|
|
# Author: Manuel Mora Gordillo
|
|
# Copyright: 2011 - Manuel Mora Gordillo <manuito @no-spam@ gmail.com>
|
|
#
|
|
# ControlIES is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
# ControlIES is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with ControlAula. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
##############################################################################
|
|
|
|
import ldap
|
|
import logging
|
|
import hashlib
|
|
from math import ceil
|
|
from operator import itemgetter
|
|
|
|
class Users(object):
|
|
|
|
def __init__(self):
|
|
pass
|
|
|
|
def __init__(self,ldap,type,name,surname,nif,user,password,password2):
|
|
self.ldap = ldap
|
|
self.type = type
|
|
self.name = name
|
|
self.surname = surname
|
|
self.nif = nif
|
|
self.user = user
|
|
self.password = password
|
|
self.password2 = password2
|
|
|
|
def validation(self,action):
|
|
|
|
if action == "add":
|
|
if self.type == "none":
|
|
return "type"
|
|
|
|
if self.name == "":
|
|
return "name"
|
|
|
|
if self.surname == "":
|
|
return "surname"
|
|
|
|
if self.nif == "":
|
|
return "nif"
|
|
|
|
if self.user == "":
|
|
return "user"
|
|
|
|
if action == "add":
|
|
if self.existsUsername():
|
|
return "userAlreadyExists"
|
|
|
|
if self.password == "":
|
|
return "password"
|
|
|
|
if self.password2 == "":
|
|
return "password2"
|
|
|
|
if self.password != self.password2:
|
|
return "distinctPassword"
|
|
|
|
elif action == "modify":
|
|
if self.password == "" and self.password2 != "":
|
|
return "password"
|
|
|
|
if self.password != "" and self.password2 == "":
|
|
return "password2"
|
|
|
|
if self.password != "" and self.password2 != "" and self.password != self.password2:
|
|
return "distinctPassword"
|
|
|
|
return "OK"
|
|
|
|
def process(self,action):
|
|
if action == "add":
|
|
val = self.validation(action)
|
|
|
|
if val != "OK":
|
|
return val
|
|
else:
|
|
response = self.add()
|
|
return response
|
|
|
|
if action == "modify":
|
|
val = self.validation(action)
|
|
|
|
if val != "OK":
|
|
return val
|
|
else:
|
|
response = self.modify()
|
|
return response
|
|
|
|
if action == "delete":
|
|
response = self.delete()
|
|
return response
|
|
|
|
|
|
def list(self,args):
|
|
|
|
filter = self.buildFilter(args)
|
|
search = self.ldap.search("ou=People",filter,["employeeNumber","uid","cn","uidnumber","gidnumber","homedirectory"])
|
|
|
|
# grid parameters
|
|
limit = int(args['rows'][0])
|
|
page = int(args['page'][0])
|
|
start = limit * page - limit
|
|
finish = start + limit;
|
|
|
|
# sort by field
|
|
sortBy = args['sidx'][0]
|
|
if sortBy == "uid":
|
|
sortBy = "id"
|
|
|
|
# reverse Sort
|
|
reverseSort = False
|
|
if args['sord'][0] == "asc":
|
|
reverseSort = True
|
|
|
|
# type of user (Teacher/Student)
|
|
try:
|
|
searchType = args['type'][0]
|
|
except LookupError:
|
|
searchType = "none"
|
|
|
|
rows = []
|
|
for i in search:
|
|
|
|
typeRow="Alumno"
|
|
if i[0][1]["homeDirectory"][0][0:14]=="/home/profesor":
|
|
typeRow="Profesor"
|
|
|
|
if searchType == typeRow or searchType=="none":
|
|
row = {
|
|
"id":i[0][1]["uid"][0],
|
|
"cell":[typeRow, i[0][1]["cn"][0], i[0][1]["uid"][0], i[0][1]["uidNumber"][0], i[0][1]["gidNumber"][0], i[0][1]["employeeNumber"][0]],
|
|
"type": typeRow,
|
|
"cn":i[0][1]["cn"][0],
|
|
"uidNumber":i[0][1]["uidNumber"][0],
|
|
"gidNumber":i[0][1]["gidNumber"][0],
|
|
"employeeNumber":i[0][1]["employeeNumber"][0]
|
|
}
|
|
rows.append(row)
|
|
|
|
# grid parameters
|
|
if len(rows) > 0:
|
|
totalPages = ceil( len(rows) / int(limit) )
|
|
else:
|
|
totalPages = 0
|
|
|
|
if page > totalPages:
|
|
page = totalPages
|
|
|
|
# sort rows
|
|
result = sorted(rows, key=itemgetter(sortBy), reverse=reverseSort)
|
|
|
|
return { "page":page, "total":totalPages, "records":len(rows), "rows":result[start:finish] }
|
|
|
|
|
|
def buildFilter(self, args):
|
|
filter = "(&(uid=*)"
|
|
|
|
try:
|
|
filter = filter + "(uid=*" + args['uid'][0] + "*)"
|
|
except LookupError:
|
|
pass
|
|
|
|
try:
|
|
filter = filter + "(cn=*" + args['cn'][0] + "*)"
|
|
except LookupError:
|
|
pass
|
|
|
|
try:
|
|
filter = filter + "(uidNumber=" + args['uidNumber'][0] + ")"
|
|
except LookupError:
|
|
pass
|
|
|
|
try:
|
|
filter = filter + "(gidNumber=" + args['gidNumber'][0] + ")"
|
|
except LookupError:
|
|
pass
|
|
|
|
try:
|
|
filter = filter + "(employeeNumber=*" + args['employeeNumber'][0] + "*)"
|
|
except LookupError:
|
|
pass
|
|
|
|
filter = filter + ")"
|
|
return filter
|
|
|
|
|
|
def add(self):
|
|
|
|
maxID = str(self.getMaxID(l))
|
|
passwd = hashlib.sha1(self.password).hexdigest()
|
|
|
|
attr = [
|
|
('objectclass', ['top','posixAccount','shadowAccount','person','inetOrgPerson']),
|
|
('uid', [self.user]),
|
|
('cn', [self.name] ),
|
|
('employeenumber', [self.nif] ),
|
|
('sn', [self.surname] ),
|
|
('uidnumber', [maxID] ),
|
|
('gidnumber', [maxID] ),
|
|
('loginshell', ['/bin/bash'] ),
|
|
('homeDirectory', [self.whatHome() + self.user] ),
|
|
#('jpegPhoto', ['jpegPhoto'] ),
|
|
('userpassword', [passwd])
|
|
]
|
|
|
|
self.ldap.add("uid="+self.user+",ou=People", attr)
|
|
|
|
return "OK"
|
|
|
|
|
|
def modify(self):
|
|
|
|
passwd = hashlib.sha1(self.password).hexdigest()
|
|
|
|
attr = [
|
|
(ldap.MOD_REPLACE, 'cn', [self.name] ),
|
|
(ldap.MOD_REPLACE, 'employeenumber', [self.nif] ),
|
|
(ldap.MOD_REPLACE, 'sn', [self.surname] ),
|
|
(ldap.MOD_REPLACE, 'userpassword', [passwd])
|
|
]
|
|
|
|
self.ldap.modify("uid="+self.user+",ou=People", attr)
|
|
|
|
return "OK"
|
|
|
|
|
|
def delete(self):
|
|
|
|
self.ldap.delete('uid='+ self.user +',ou=People')
|
|
|
|
|
|
def getMaxID(self,l): # find the maximum ID
|
|
result = self.ldap.search("ou=Group","cn=*",["gidNumber"])
|
|
numbers = []
|
|
for i in result:
|
|
numbers.append(int(i[0][1]['gidNumber'][0]))
|
|
|
|
result = self.ldap.search("ou=People","uid=*",["gidNumber","uidNumber"])
|
|
for i in result:
|
|
numbers.append(int(i[0][1]['gidNumber'][0]))
|
|
numbers.append(int(i[0][1]['uidNumber'][0]))
|
|
|
|
numbers.sort()
|
|
|
|
maxID = 1
|
|
if len(numbers) > 0:
|
|
maxID = numbers[len(numbers)-1] + 1
|
|
|
|
return maxID
|
|
|
|
|
|
def existsUsername(self):
|
|
|
|
result = self.ldap.search("ou=People","uid="+self.user,["uid"])
|
|
|
|
if len(result) > 0:
|
|
return True
|
|
|
|
return False
|
|
|
|
|
|
def searchNewUsername(self):
|
|
|
|
result = self.ldap.search("ou=People","uid=*",["uid"])
|
|
users = []
|
|
for i in result:
|
|
users.append(i[0][1]['uid'][0])
|
|
|
|
n = self.name.lower().split(" ")
|
|
|
|
username = ""
|
|
if len(n) > 0:
|
|
username = n[0][0:1]
|
|
|
|
if len(n) > 1:
|
|
username = username + n[1]
|
|
|
|
if len(n) > 2:
|
|
username = username + n[2][0:1]
|
|
|
|
num = 1
|
|
searching = username + "0" + str(num)
|
|
|
|
found = True
|
|
while found:
|
|
try:
|
|
users.index(searching)
|
|
num = num + 1
|
|
|
|
if len(str(num)) == 1:
|
|
searching = username + "0" + str(num)
|
|
else:
|
|
searching = username + str(num)
|
|
except:
|
|
found = False
|
|
|
|
return searching
|
|
|
|
def getUserGroups(self):
|
|
result = self.ldap.search("ou=Group","(&(memberUid="+self.user+")(|(groupType=school_department)(groupType=school_class)))",["cn","groupType"])
|
|
|
|
departments = []
|
|
classrooms = []
|
|
for g in result:
|
|
if g[0][1]["groupType"][0] == "school_department":
|
|
departments.append(g[0][1]["cn"][0])
|
|
elif g[0][1]["groupType"][0] == "school_class":
|
|
classrooms.append(g[0][1]["cn"][0])
|
|
|
|
departments.sort()
|
|
classrooms.sort()
|
|
return { "departments":departments, "classrooms":classrooms }
|
|
|
|
def getUserData(self):
|
|
self.getUserGroups()
|
|
result = self.ldap.search("ou=People","uid="+self.user,["uid","cn","sn","employeenumber","homedirectory"])
|
|
|
|
type = "student"
|
|
if result[0][0][1]["homeDirectory"][0][0:14]=="/home/profesor":
|
|
type = "teacher"
|
|
|
|
dataUser = {
|
|
"user":result[0][0][1]["uid"][0],
|
|
"name":result[0][0][1]["cn"][0],
|
|
"surname":result[0][0][1]["sn"][0],
|
|
"nif":result[0][0][1]["employeeNumber"][0],
|
|
"type":type,
|
|
"groups":self.getUserGroups()
|
|
}
|
|
|
|
return dataUser
|
|
|
|
def whatHome(self):
|
|
|
|
if self.type == "teacher":
|
|
return "/home/profesor/"
|
|
else:
|
|
return "/home/alumnos/"
|