ldap3

import os from ldap3 import Server, Connection, SYNC, ANONYMOUS, SUBTREE # Configuration from environment variables for security and flexibility LDAP_SERVER_URI = os.environ.get('LDAP_SERVER_URI', 'ldap://localhost:389') LDAP_BIND_DN = os.environ.get('LDAP_BIND_DN', 'cn=admin,dc=example,dc=com') LDAP_BIND_PASSWORD = os.environ.get('LDAP_BIND_PASSWORD', 'adminpassword') LDAP_SEARCH_BASE = os.environ.get('LDAP_SEARCH_BASE', 'dc=example,dc=com') LDAP_SEARCH_FILTER = os.environ.get('LDAP_SEARCH_FILTER', '(objectClass=person)') LDAP_SEARCH_ATTRIBUTES = os.environ.get('LDAP_SEARCH_ATTRIBUTES', 'cn,mail').split(',') def ldap_connect_and_search(): try: # Define the LDAP server s = Server(LDAP_SERVER_URI) # Establish a connection. auto_bind=True performs the bind operation immediately. # authentication=ANONYMOUS can be used if no credentials are required. # For authenticated bind: # c = Connection(s, user=LDAP_BIND_DN, password=LDAP_BIND_PASSWORD, client_strategy=SYNC, auto_bind=True) c = Connection(s, user=LDAP_BIND_DN, password=LDAP_BIND_PASSWORD, client_strategy=SYNC, auto_bind=True, raise_exceptions=True) print(f"Connection status: {c.bound}") # Perform a search operation # search_base: The base DN for the search # search_filter: The LDAP filter string # search_scope: The scope of the search (e.g., SUBTREE, BASE, LEVEL) # attributes: List of attributes to retrieve, or ALL_ATTRIBUTES, ALL_OPERATIONAL_ATTRIBUTES c.search(LDAP_SEARCH_BASE, LDAP_SEARCH_FILTER, search_scope=SUBTREE, attributes=LDAP_SEARCH_ATTRIBUTES) # Process the search results print(f"Found {len(c.entries)} entries:") for entry in c.entries: print(f" DN: {entry.entry_dn}") for attr in LDAP_SEARCH_ATTRIBUTES: if hasattr(entry, attr): print(f" {attr}: {getattr(entry, attr).value}") except Exception as e: print(f"An LDAP error occurred: {e}") finally: if 'c' in locals() and c.bound: c.unbind() print("Connection unbound.") if __name__ == '__main__': ldap_connect_and_search()