The keystone.common.ldap.core Module

class keystone.common.ldap.core.BaseLdap(conf)

Bases: object

DEFAULT_FILTER = None
DEFAULT_ID_ATTR = 'cn'
DEFAULT_OBJECTCLASS = None
DEFAULT_OU = None
DEFAULT_STRUCTURAL_CLASSES = None
DEFAULT_SUFFIX = 'dc=example,dc=com'
DUMB_MEMBER_DN = 'cn=dumb,dc=nonexistent'
affirm_unique(values)
attribute_ignore = []
attribute_mapping = {}
create(values)
delete(id)
deleteTree(id)
get(id, filter=None)
get_all(filter=None)
get_connection(user=None, password=None)
get_page(marker, limit)
get_page_markers(marker, limit)
model = None
options_name = None
tree_dn = None
update(id, values, old_obj=None)
class keystone.common.ldap.core.EnabledEmuMixIn(conf)

Bases: keystone.common.ldap.core.BaseLdap

Emulates boolean ‘enabled’ attribute if turned on.

Creates groupOfNames holding all enabled objects of this class, all missing objects are considered disabled.

Options:

  • $name_enabled_emulation - boolean, on/off
  • $name_enabled_emulation_dn - DN of that groupOfNames, default is cn=enabled_$name,$tree_dn

Where $name is self.options_name (‘user’ or ‘tenant’), $tree_dn is self.tree_dn.

create(values)
delete(object_id)
get(object_id, filter=None)
get_all(filter=None)
update(object_id, values, old_obj=None)
class keystone.common.ldap.core.LdapWrapper(url)

Bases: object

add_s(dn, attrs)
delete_ext_s(dn, serverctrls)
delete_s(dn)
modify_s(dn, modlist)
search_s(dn, scope, query, attrlist=None)
simple_bind_s(user, password)
keystone.common.ldap.core.ldap2py(val)
keystone.common.ldap.core.ldap_scope(scope)
keystone.common.ldap.core.py2ldap(val)
keystone.common.ldap.core.safe_iter(attrs)

Previous topic

The keystone.common.kvs Module

Next topic

The keystone.common.ldap.fakeldap Module

This Page