raw-paste-data.txt
No One
Actions

Authored By

	taavi
	Oct 9 2022, 9:52 AM

Size

1 KB

Referenced Files

None

Subscribers

None

raw-paste-data.txt
View Options

	# SPDX-License-Identifier: AGPL-3.0
	# (c) Taavi Väänänen <hi@taavi.wtf>, 2022

	import ldap3
	import yaml

	with open("/etc/ldap.yaml", "r") as f:
	ldap_config = yaml.safe_load(f.read())

	conn = ldap3.Connection(
	ldap_config["servers"],
	user=ldap_config["user"],
	password=ldap_config["password"],
	auto_bind=True,
	auto_range=True,
	read_only=True,
	)

	not_locked_toolforge_users = [
	user["dn"]
	for user in conn.extend.standard.paged_search(
	"ou=people,dc=wikimedia,dc=org",
	"(&(objectclass=posixAccount)(memberOf=cn=project-tools,ou=groups,dc=wikimedia,dc=org)(!(pwdPolicySubentry=cn=disabled,ou=ppolicies,dc=wikimedia,dc=org)))",
	attributes=["dn"],
	time_limit=5,
	paged_size=256,
	generator=True,
	)
	]

	tools = conn.extend.standard.paged_search(
	"ou=servicegroups,dc=wikimedia,dc=org",
	"(&(objectClass=groupOfNames)(cn=tools.*))",
	attributes=["cn", "member"],
	time_limit=5,
	paged_size=256,
	generator=True,
	)

	for tool in tools:
	found = False
	for maintainer in tool["attributes"]["member"]:
	if maintainer in not_locked_toolforge_users:
	found = True
	break
	if not found:
	print(tool["attributes"]["cn"][0])