keystone.identity.backends.ldap.core module¶

class keystone.identity.backends.ldap.core.GroupApi(conf)[source]¶

Bases: keystone.identity.backends.ldap.common.BaseLdap

DEFAULT_ID_ATTR = 'cn'¶

DEFAULT_MEMBER_ATTRIBUTE = 'member'¶

DEFAULT_OBJECTCLASS = 'groupOfNames'¶

DEFAULT_OU = 'ou=UserGroups'¶

DEFAULT_STRUCTURAL_CLASSES = []¶

NotFound¶

alias of GroupNotFound

add_user(user_dn, group_id, user_id)[source]¶

attribute_options_names = {'description': 'desc', 'name': 'name'}¶

create(values)[source]¶

get_all_filtered(hints, query=None)[source]¶

get_filtered(group_id)[source]¶

get_filtered_by_name(group_name)[source]¶

immutable_attrs = ['name']¶

list_group_users(group_id)[source]¶

Return a list of user dns which are members of a group.

list_user_groups(user_dn)[source]¶

Return a list of groups for which the user is a member.

list_user_groups_filtered(user_dn, hints)[source]¶

Return a filtered list of groups for which the user is a member.

model¶

alias of Group

options_name = 'group'¶

update(group_id, values)[source]¶

class keystone.identity.backends.ldap.core.Identity(conf=None)[source]¶

Bases: keystone.identity.backends.base.IdentityDriverBase

add_user_to_group(user_id, group_id)[source]¶

authenticate(user_id, password)[source]¶

change_password(user_id, new_password)[source]¶

check_user_in_group(user_id, group_id)[source]¶

create_group(group_id, group)[source]¶

create_user(user_id, user)[source]¶

delete_group(group_id)[source]¶

delete_user(user_id)[source]¶

generates_uuids()[source]¶

get_group(group_id)[source]¶

get_group_by_name(group_name, domain_id)[source]¶

get_user(user_id)[source]¶

get_user_by_name(user_name, domain_id)[source]¶

is_domain_aware()[source]¶

list_groups(hints)[source]¶

list_groups_for_user(user_id, hints)[source]¶

list_users(hints)[source]¶

list_users_in_group(group_id, hints)[source]¶

remove_user_from_group(user_id, group_id)[source]¶

unset_default_project_id(project_id)[source]¶

update_group(group_id, group)[source]¶

update_user(user_id, user)[source]¶

class keystone.identity.backends.ldap.core.UserApi(conf)[source]¶

Bases: keystone.identity.backends.ldap.common.EnabledEmuMixIn, keystone.identity.backends.ldap.common.BaseLdap

DEFAULT_ID_ATTR = 'cn'¶

DEFAULT_OBJECTCLASS = 'inetOrgPerson'¶

DEFAULT_OU = 'ou=Users'¶

DEFAULT_STRUCTURAL_CLASSES = ['person']¶

NotFound¶

alias of UserNotFound

attribute_options_names = {'description': 'description', 'enabled': 'enabled', 'default_project_id': 'default_project_id', 'password': 'pass', 'email': 'mail', 'name': 'name'}¶

create(values)[source]¶

filter_attributes(user)[source]¶

get(user_id, ldap_filter=None)[source]¶

get_all(ldap_filter=None, hints=None)[source]¶

get_all_filtered(hints)[source]¶

get_filtered(user_id)[source]¶

immutable_attrs = ['id']¶

is_user(dn)[source]¶

Return True if the entry is a user.

mask_enabled_attribute(values)[source]¶

model¶

alias of User

options_name = 'user'¶

update(user_id, values, old_obj=None)[source]¶