o jd@sdZddlmZddlmZddlmZddlmZddlm Z ddl m Z m Z m Z d d l mZmZmZmZmZmZmZmZd d lmZdd lmZmZmZdd lmZddlmZddl m!Z!m"Z"d dl#m$Z$m%Z%d dl&m'Z'd dl(m)Z)d dl*m+Z+m,Z,d dl-m.Z.d dl/mZd dl0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6d dl7m8Z8m9Z9m:Z:m;Z;eddZGddde?Z@Gd d!d!e@ZAGd"d#d#e@ZBd$S)% ) namedtuple)deepcopy)datetime)linesep)sleep)STATUS_VIRTUAL STATUS_READSTATUS_WRITABLE)SUBTREELEVEL DEREF_ALWAYS DEREF_NEVERBASESEQUENCE_TYPES STRING_TYPESget_config_parameter)STATUS_PENDING_CHANGES) AttributeOperationalAttributeWritableAttribute)AttrDef) ObjectDef)Entry WritableEntry)LDAPCursorErrorLDAPObjectDereferenceError)RESULT_SUCCESS)CaseInsensitiveWithAliasDict)safe_dnsafe_rdn)to_raw)r)log log_enabledERRORBASICPROTOCOLEXTENDED)ATTRIBUTE_DIRECTORY_OPERATIONATTRIBUTE_DISTRIBUTED_OPERATIONATTRIBUTE_DSA_OPERATIONCLASS_AUXILIARY Operation)requestresultresponsecCs4|ddvr|ddkr|dd|ddS|S)Nrz<>~r=)valuer3r3/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/ldap3/abstract/cursor.py_ret_search_value2s4r6cCsHt}|r"|dD]}d|vr!|d}|d||d<q |S)zu Create a dictionary with query key:value definitions query_text is a comma delimited key:value sequence ,:rr)dictsplitstrip) query_text query_dict arg_value_strarg_value_listr3r3r5_create_query_dict6s r@c@seZdZd)ddZddZddZd d Zd d Zd dZe e ur&ddZ nddZ ddZ ddZddZddZddZddZdd Zd!d"Zed#d$Zed%d&Zed'd(ZdS)*CursorFNc Cs,ddtdD}||_||_|js|jr|t|ttfr0|j r'| t ||j j |d}||_|rmg}t|tr?|g}|D]} | |jjvrT| |vrT|| qA|rmdd|} ttrittd| |t| |rst|n tdd|jD|_||_d|_g|_|jj j |_ d |_t|_dS) NcSg|]}|qSr3lower.0vr3r3r5 Mz#Cursor.__init__..#ATTRIBUTES_EXCLUDED_FROM_OBJECT_DEF)auxiliary_classz!Attributes '%s' non in definition, %s for <%s>cSg|]}|jqSr3)name)rFattrr3r3r5rHgF)r connectionget_operational_attributes_deferred_bind_deferred_open_fire_deferred isinstancerrclosedbindrserverschema definition _attributesrDappendjoinr%r&r$rset attributescontrolsexecution_timeentries _do_not_resetlist_operation_history) selfrR object_defrSrarbrK(conf_attributes_excluded_from_object_defnot_defined_attributes attribute error_messager3r3r5__init__Ls<   "  zCursor.__init__cCs4d|jjt}|dt|jt7}|dd|jj7}|jjr/|dd|jjd7}|t7}t |drL|dt t |j |j rFd nd t7}t|trt |d rh|d t |j|jrbd ndt7}t |dr|jr|dt |jd|jvr~d n|jrdndt7}t |dr|jr|dt |jd|jvrd n|jrdndt7}t |dr|jr|dt |jt7}t |dr|jr|dtt|j7}|dt|jdt7}|jr|dtt|jdt|jdkrdnd dt|jdkrd nd!dd"d#t|jDd7}|S)$Nz CURSOR : z CONN : z DEFS : rLz [AUX: ]raz ATTRS : z [OPERATIONAL]basez BASE : z [SUB]z [LEVEL]_queryz QUERY : (z [AND]z [OR]validated_queryz PARSED : query_filterz FILTER : rcz ENTRIES: z [executed at: zLAST OPERATION FAILED [z failurersz at operationzs  cSs&g|]\}}|jdtkrt|qSr0)r0rstr)rFierrorr3r3r5rHs&z#Cursor.__repr__..) __class____name__rryrRr_r\ _object_class_auxiliary_classhasattrreprsortedrarSrWReaderrqsub_treerrcomponents_in_andrtrurclenrd isoformatfailederrors enumerate operations)rhrr3r3r5__repr__os. (  $22jzCursor.__repr__cCs|SN)rrhr3r3r5__str__szCursor.__str__cCs |jSr)rd__iter__rr3r3r5r zCursor.__iter__cCsz|j|WStyYnwt|trU||}t|dkr$|dSt|dkrUdt|t|dkr7dn dddd |Dd }ttrQt td ||t |d }ttrbt td ||t |) aPReturn indexed item, if index is not found then try to sequentially search in DN of entries. If only one entry is found return it else raise a KeyError exception. The exception message includes the number of entries that matches, if less than 10 entries match then show the DNs in the exception message. rrz7Multiple entries found: %d entries match the text in dn rpz [z; cSrNr3)entry_dn)rFer3r3r5rHrQz&Cursor.__getitem__..rorMzno entry found) rd TypeErrorrWrmatch_dnrr_r%r&r$KeyError)rhitemfoundrmr3r3r5 __getitem__s$      8zCursor.__getitem__cCs t|jSr)rrdrr3r3r5__len__rzCursor.__len__cCdSNTr3rr3r3r5__bool__zCursor.__bool__cCrrr3rr3r3r5 __nonzero__rzCursor.__nonzero__cCs@td}ddtdD}t}t}|D]}||} d} |dD]} | j| kr0| } nq!| s9| jtur|| ||} || _| rK|d| nd| _ | j rl| j|dvrl|dt krl| | j |d| | _ n&| jtus|| r|d| t kr|d| | _ nt| jtr| jn| jg| _ t| j t s| j g| _ | jr| j rt|j| jd|j|jd } g}| j D]'}|j|kr|| |qd |j| jjf}ttrttd ||t|~ || _ | || j <| jr|| j | j| jr|| j | j|| q|j r |!|j |dD]} | |vrd }| |j"j#vr8|j"j#| j$s5|j"j#| j%t&t't(fvr7d }nd }|sf| |vrf| |vrfd| d)|j*j+|jf}ttrbttd ||t,|t-t.|| ||} |d| | _ t|d| tr|d| n|d| g| _ || |vr| ||| <q|S)aAssign the result of the LDAP query to the Entry object dictionary. If the optional 'post_query' callable is present in the AttrDef it is called with each value of the attribute and the callable result is stored in the attribute. Returns the default value for missing attributes. If the 'dereference_dn' in AttrDef is a ObjectDef then the attribute values are treated as distinguished name and the relevant entry is retrieved and stored in the attribute value. (ABSTRACTION_OPERATIONAL_ATTRIBUTE_PREFIXcSrBr3rCrEr3r3r5rHrIz*Cursor._get_attributes..rJNraraw_attributesrp)rqrSrbz5object %s is referencing itself in the '%s' attributerMFTz4attribute '%s' not in object class '%s' for entry %srL)/rr r`rOrDdefaultNotImplementedattribute_classr1 raw_values post_queryrfkeyvaluesrWrdereference_dnrrRrSrbrr^ search_objectr\r%r&r$r other_names set_aliasaddraupdater[attribute_typesno_user_modificationusager*r+r,r_entry_definitionr~rrr)rhr1 attr_defsentry!conf_operational_attribute_prefixrjraused_attribute_namesrPattr_defattribute_name attr_namerl temp_reader temp_valueselementrmoperational_attributer3r3r5_get_attributess  "          * 0 zCursor._get_attributescCs0g}|jD]}||jvr||q|S)zReturn entries with text in DN)rdrDrr^)rhdnmatchedrr3r3r5r s   zCursor.match_dnc Csg}t|ts |g}|jD]x}d}|D]q}||vr||jD]&}t|dr5t|dr5||vr5d}n||kr;d}|rD||nq|rIn search_base search_filter search_scopedereference_aliasesrarSrbT get_requestr objectClass)(rRr%r&r$rrrru_create_query_filterr(rqsearchrrfrarSrbstrategysync get_response thread_safer1r0r/_store_operation_in_historyrerrdr^rr[object_classeskindr-r\r_populate_attr_defsrrrc) rh query_scoperarmold_query_filterr0r1r/_rr object_classr3r3r5_execute_queryFsb       $   zCursor._execute_querycCs&ttr ttd|||j|dS)Nzremoving entry <%s> in <%s>)r%r(r$rdremoverhrr3r3r5r|sz Cursor.removecCs t|_dSr)rfrgrr3r3r5_reset_historys zCursor._reset_historycCs|jt|||dSr)rgr^r.)rhr/r0r1r3r3r5rsz"Cursor._store_operation_in_historycC|jSrrgrr3r3r5rzCursor.operationscCsdd|jDS)NcSsg|] }|jdtkr|qSrxr0rrFr{r3r3r5rHsz!Cursor.errors..rrr3r3r5rsz Cursor.errorscCs"t|drtdd|jDSdS)NrgcSsg|] }|jdtkqSrxrrr3r3r5rHsz!Cursor.failed..)ranyrgrr3r3r5rs z Cursor.failedFNNN)r} __module__ __qualname__rnrrrrrryrrrrrrrrrrrpropertyrrrr3r3r3r5rAEs0 #! P#6  rAc@seZdZdZeZeZeZ d"ddZ e dd Z e j d d Z e d d Zej d d ZddZddZddZddZd#ddZd$ddZd#ddZd#ddZddZd%d d!ZdS)&raqReader object to perform searches: :param connection: the LDAP connection object to use :type connection: LDAPConnection :param object_def: the ObjectDef of the LDAP object returned :type object_def: ObjectDef :param query: the simplified query (will be transformed in an LDAP filter) :type query: str :param base: starting base of the search :type base: str :param components_in_and: specify if assertions in the query must all be satisfied or not (AND/OR) :type components_in_and: bool :param sub_tree: specify if the search must be performed ad Single Level (False) or Whole SubTree (True) :type sub_tree: bool :param get_operational_attributes: specify if operational attributes are returned or not :type get_operational_attributes: bool :param controls: controls to be used in search :type controls: tuple rpTFNc Cstt|||||| | ||_||_||_||_t|_d|_t |_ t |_ d|_ | ttr8ttd|dSdS)Nz instantiated Reader Cursor: <%r>)rArn_components_in_andrrrrqrrrtr9 _query_dict_validated_query_dictruresetr%r'r$) rhrRrirqqueryrrrSrarbrKr3r3r5rnszReader.__init__cCrr)rrrr3r3r5rrz Reader.querycC||_|dSr)rrrrhr4r3r3r5r cCrr)rrr3r3r5rrzReader.components_in_andcCrr)rrrr3r3r5rrcCst|_|dS)z,Clear the Reader search parameters N)rrrrr3r3r5clears z Reader.clearcCs<|d|_t|_t|_d|_d|_g|_|dS)z)Clear all the Reader parameters N) rrtr9rrrcrurdrrr3r3r5rs z Reader.resetc CsP|js t|j|_d}t|jD]}|ddvr|ddn|}|jD]}d||jkr9|j}nq$||jvrt|j|d}||ddvrW|d|n|d7}|D]}| }|ddkrld nd }d }|r|dd dd vr|dd } n.|dd d}|dd dd} n|dd vr| } n |d}|dd } |j|j r|j| | } | d urd ||f} t t rtt d| |t| | d ur| } |r|d|t| 7}n||t| 7}|d7}q^|ddd}qd|} t t rtt d| |t| |dd|_t|j|_dS)zProcesses the text query and verifies that the requested friendly names are in the Reader dictionary If the AttrDef has a 'validate' property the callable is executed and if it returns False an Exception is raised rpr&|rN;z: !TFr2z=<>~z/validation failed for attribute %s and value %srMrLz attribute '%s' not in definition)rr@rrrr\r_r:rDrr;lstripvalidater%r&r$rryrtr) rhrdrPrvalsvalval_notval_search_operatorr4 validatedrmr3r3r5_validate_querys\   $      zReader._validate_queryc Cs<d|_|jjrf|jd7_t|jjtr-t|jjdkr-|jd|jjdd7_n9t|jjtrU|jd7_|jjD] }|jd|d7_q?|jd7_nd}ttrbttd||t ||j r|j d r|j drd |j vr|j|j d7_d S|j |_d S|j r|js|jd 7_n |jjs|jd7_|d}t|jD]}|d7}d |j|vrdnd}t|j|d }|ddvr|j|dd n|j|}|jrg}|D]} || d||j| dd q|}|r|ddvr|jd |d7_n|jd 7_|D]0} | ddkr?|jd|jt| dd d7_q |jd |jt| d7_q |r[|jd7_q|jsh|jd7_n|jd7_|jjs|dkr|jdd|_|jdks|jdkrd|_d Sd S|jdd |_d S)z0Converts the query dictionary to the filter textrpz(&rz (objectClass=r)z'object class must be a string or a listrMrs objectclassNz(|rTFrrz(!(z))r rz(|)z(&))rur\r~rWrrr%r&r$rrr startswithendswithrDrrrrr: pre_queryr^rrOr6) rhrrm attr_counterrPmultir rmodvalsr r3r3r5r sr  (&,$ zReader._create_query_filtercCs<||jr tnt}ttrttd|||||jS)zKPerform the LDAP search :return: Entries found in search zperforming search in <%s>) rrr rr%r(r$rrd)rhrarr3r3r5rgs   z Reader.searchcCshttr ttd|||r |j}||_|t|||_n|t|t|jdkr2|jdSdS)zgPerform the LDAP search operation SINGLE_OBJECT scope :return: Entry found in search z performing object search in <%s>rN) r%r(r$rrqrrrrd)rhrraold_baser3r3r5rus   zReader.search_objectcC.ttr ttd|||t||jS)zmPerform the LDAP search operation with SINGLE_LEVEL scope :return: Entries found in search z&performing single level search in <%s>)r%r(r$rrrrdrhrar3r3r5 search_level   zReader.search_levelcCr)ziPerform the LDAP search operation WHOLE_SUBTREE scope :return: Entries found in search z'performing whole subtree search in <%s>)r%r(r$rrr rdrr3r3r5search_subtreerzReader.search_subtreeccs|D]}||VqdSr)r)rh responsesr1r3r3r5_entries_generatorszReader._entries_generatorc Csttr ttd|t||js!d}ttrttd||t|||g|_ t |_ |jj jj|j|j|jr?tnt|j|rF|n|j|j|j|||d }|rY||St||S)aPerform a paged search, can be called as an Iterator :param attributes: optional attributes to search :param paged_size: number of entries returned in each search :type paged_size: int :param paged_criticality: specify if server must not execute the search if it is not capable of paging searches :type paged_criticality: bool :param generator: if True the paged searches are executed while generating the entries, if False all the paged searches are execute before returning the generator :type generator: bool :return: Entries found in search z2performing paged search in <%s> with paged size %srrM) rrrrrarSrb paged_sizepaged_criticality generator)r%r(r$ryrRr&rrrrdrrrcextendstandard paged_searchrqrurr rrrarSrbrrf)rhrr r!rarmr1r3r3r5 search_pageds2    zReader.search_paged)rpTTFNNNr)NN)TTN)r}rr__doc__rrrrr rrnrrsetterrrrrrrrrrrr%r3r3r3r5rs0      < G    rc@sleZdZeZeZeZe dddZ e dddZ dddZ dd d Z d d ZdddZddZdddZdS)WriterNcCs|dur|j}|dur|j}t|||jd}|jD]+}t|tr)|j|||dqt|tr/qdtt |}t t rAt t d|t ||j|_t trTt td|||S)N)ra)custom_validatorzunknown cursor type %s%sz0instantiated Writer Cursor <%r> from cursor <%r>)rRr\r(rardrWrentry_writableryrr%r&r$rrcr')cursorrRrir)writerrrmr3r3r5 from_cursors$    zWriter.from_cursorcCs|dur/|jjsd}ttrttd|t||jr|j}nd}ttr+ttd|t|t||}|D]}|ddkrI||}|j |q6tt rTtt d||S)Nz7with asynchronous strategies response must be specifiedr*zresponse not presentrrz-instantiated Writer Cursor <%r> from response) rrr%r&r$rr1r(rrdr^r')rRrir1rmr-resprr3r3r5 from_responses*       zWriter.from_responseFc Cs8t|||||||t|_ttrttd|dSdS)Nz instantiated Writer Cursor: <%r>)rArnrrr%r'r$)rhrRrirSrarbrKr3r3r5rns zWriter.__init__TcCsPttr ttd||d}|jD] }|j||jdds d}qt|_ |S)Nzcommitted changes for <%s>TF)refreshrb clear_history) r%r(r$rrdentry_commit_changesrbrrrc)rhr1 successfulrr3r3r5commit s   z Writer.commitcCs,ttr ttd||jD]}|q dS)Nzdiscarded changes for <%s>)r%r(r$rdentry_discard_changesrr3r3r5discards    zWriter.discardr c Csnttr ttd|||jsd}ttrttd||t|g}|jed}||kr|jj|dtt|r6|n|j |j |d} |jj j sO|jj | dd\}} } n|jj jr[| \} } }} n |jj}|jj} |jj} | d tfvront||d 7}|| | |||ks+Wd n1swYt|d kr||dSt|dkrd Sd }ttrttd||t|) zhPerforms the LDAP search operation SINGLE_OBJECT scope :return: Entry found in search zrefreshing object <%s> for <%s>rrMrrrTrr0rNz5more than 1 entry returned for a single object search)r%r(r$rRr&rrrrrarSrrrrr1r0r/rrrrr) rhrratriessecondsrbrmr1counterr0r/rr3r3r5_refresh_objectsT     zWriter._refresh_objectcCsttr ttd||t|}|jD]}|j|kr*d}ttr&ttd||t|qt|dd}| ||}|j D]}| |j j ||||j j|<|j j||j|<q:|j|j j|D]R}|d|j j jvr|j j j|dj}||j jvr| |j j ||||j j|<|j j||j|<|j||dq_d|d}ttrttd||t||j t|j t|j||S) Nz creating new entry <%s> for <%s>zdn already present in cursorrMT) decomposerrz,rdn type '%s' not in object class definition)r%r'r$r!rdrr&rr"rentry_mandatory_attributesrrr\rarrr`r~r]rOrr rr^)rhrrrmrdnsrPrdnrdn_namer3r3r5newQs>          z Writer.newcCsJtd}d|_g}ttrttd|||jjD](}||r$q|jj |j r6| |jj |j q| |jj |j q|j |j|||d}d|_|r|jj|j_|j|j|jd<|jjD] }|jj||j|<qe|jD]$}||jjvr||jjvrt|j||||jj|<|jj||j|<qt|j|jjdSdS)NrTzrefreshing entry <%s> for <%s>)r:Fr)rrer%r(r$rrarDrr\rOr^rr<roriginrrentry_attributesrr]rr_initial_status)rhrr9r:r attr_listrP temp_entryr3r3r5 refresh_entryrs6      zWriter.refresh_entry)NNNrr)T)Nr8r N)r8r )r}rrrrrrr r staticmethodr.r0rnr5r7r<rBrHr3r3r3r5r(s     3!r(N)Cr& collectionsrcopyrrosrtimerrpr r r r rrrrrrrabstractrrlrrrattrDefr objectDefrrrrcore.exceptionsrr core.resultsr utils.ciDictr utils.dnr!r" utils.convr# utils.config utils.logr$r%r&r'r(r) protocol.oidr*r+r,r-r.r6r@objectrArr(r3r3r3r5s>     (         R=