#!/usr/bin/env python3
# -*- coding: utf-8 -*-
#
# Copyright (c) 2019 Wikimedia Foundation and contributors
#
# This program is free software: you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by the Free
# Software Foundation, either version 3 of the License, or (at your option)
# any later version.
#
# This program is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
# more details.
#
# You should have received a copy of the GNU General Public License along
# with this program.  If not, see <https://www.gnu.org/licenses/>.
import operator
import sys
import time

import ldap3
import validate_email


def ldap_conn():
    """Get an ldap connection

    Return value can be used as a context manager
    """
    servers = ldap3.ServerPool([
        ldap3.Server('ldap-labs.eqiad.wikimedia.org'),
        ldap3.Server('ldap-labs.codfw.wikimedia.org'),
    ], ldap3.ROUND_ROBIN, active=True, exhaust=True)
    return ldap3.Connection(
        servers, read_only=True, auto_bind=True)


def get_wmf_users():
    data = []
    with ldap_conn() as conn:
        results = conn.extend.standard.paged_search(
            'ou=people,dc=wikimedia,dc=org',
            '(&(objectClass=posixAccount)(mail=*@wikimedia.org))',
            ldap3.SUBTREE,
            attributes=['uid', 'cn', 'mail'],
            paged_size=100,
            time_limit=5,
            generator=True,
        )
        for resp in results:
            attribs = resp.get('attributes')
            # LDAP attributes come back as a dict of lists. We know that
            # there is only one value for each list, so unwrap it
            data.append({
                'uid': attribs['uid'][0],
                'cn': attribs['cn'][0],
                'mail': attribs['mail'][0],
            })
    return data


def is_valid(email):
    if '+' in email:
        # Strip out sorting tags, these don't seem to validate well
        local, host = email.split('@')
        user, _ = local.split('+', 1)
        email = "{}@{}".format(user, host)
    return validate_email.validate_email(email, verify=True)


def main():
    for r in sorted(get_wmf_users(), key=operator.itemgetter('uid')):
        if not is_valid(r['mail']):
            print(
                "* [[{osb}/{uid}|{uid}]] ([[{wt}:{cn}|{cn}]])".format(
                    osb="https://tools.wmflabs.org/openstack-browser/user",
                    wt="https://wikitech.wikimedia.org/wiki/User",
                    **r))
        else:
            print("OK: {}".format(r['mail']), file=sys.stderr)
        time.sleep(0.5)


if __name__ == "__main__":
    main()

ldap3
py3dns
validate_email