security-and-privacy/ldapcherry
security-and-privacy/ldapcherry
1
0
Fork 0
mirror of https://github.com/kakwa/ldapcherry synced 2024-11-22 01:14:21 +01:00
Code Releases Activity
657 Commits 3 Branches 22 Tags 1.6 MiB
Python 46.4%
Less 42.6%
JavaScript 8.1%
Shell 1.6%
CSS 1.3%
10747cff93
Go to file
kakwa 10747cff93 add some python 3 support in the LDAP and AD backends 
python-ldap talks in bytes,
as the rest of ldapcherry talks in unicode utf-8:
* everything passed to python-ldap must be converted to bytes
* everything coming from python-ldap must be converted to unicode

The previous statement was true for python-ldap < version 3.X.
With versions > 3.0.0 and python 3, it gets tricky,
some parts of python-ldap takes string, specially the filters/escaper.

so we have now:
*_byte_p2 (unicode -> bytes conversion for python 2)
*_byte_p3 (unicode -> bytes conversion for python 3)
*_byte_p23 (unicode -> bytes conversion for python AND 3)
2019-02-09 16:08:18 +01:00
conf adding example for unix socket in defautl conf 2017-06-09 23:24:20 +02:00
docs remove duplicated import in docs conf.py 2017-06-12 19:47:43 +02:00
goodies add a small script to generate a local dev config 2019-02-06 22:30:59 +01:00
ldapcherry add some python 3 support in the LDAP and AD backends 2019-02-09 16:08:18 +01:00
misc fix some errors in unused code 2017-01-31 20:59:49 +01:00
resources switch to using lists in templates 2019-02-06 22:26:46 +01:00
tests disable ppolicy in samba test deployment 2019-02-09 15:42:48 +01:00
.gitignore add an ignore on the local dev conf file 2019-02-06 23:03:55 +01:00
.travis.yml cleanup in travis file 2019-02-07 22:59:57 +01:00
ChangeLog.rst changelog 2019-02-08 20:47:15 +01:00
LICENSE Initial commit 2014-06-02 19:46:14 +02:00
MANIFEST.in adding manifest 2015-11-03 22:24:27 +01:00
README.rst Update README.rst 2018-02-07 19:54:23 +01:00
requirements-el7.txt add requirements files for simulating RHEL 7 and Debian 9 2019-02-07 22:07:28 +01:00
requirements-stretch.txt add requirements files for simulating RHEL 7 and Debian 9 2019-02-07 22:07:28 +01:00
requirements.txt changing install order 2015-07-20 00:11:48 +02:00
run_test.sh pretier and cleaner run_test.sh 2015-07-31 20:30:04 +02:00
setup.py limit cherrypy to < 18.0.0 in setup.py 2019-02-09 12:12:24 +01:00

README.rst

LdapCherry

image

Nice and simple application to manage users and groups in multiple directory services.

image

image

PyPI version

Documentation Status

Doc

LdapCherry documentation on ReadTheDoc

Dev

LdapCherry source code on GitHub

PyPI

LdapCherry package on Pypi

License

MIT

Author

Pierre-Francois Carpentier - copyright © 2016

Demo

A demo is accessible here: https://ldapcherry.kakwalab.ovh

The credentials are:

  • as administrator: admin/admin
  • as user: user/user

Please take note that it's not possible to modify/delete the 'admin' and 'user' users.

Also take note that the service will be reseted once per day.

Presentation

LdapCherry is a CherryPY application to manage users and groups in multiple directory services.

Its main features are:

  • manage multiple directories/databases backends in an unified way
  • roles management (as in "groups of groups")
  • autofill forms
  • password policy
  • self modification of some selected fields by normal (non administrator) users
  • nice bootstrap interface
  • modular through pluggable authentication, password policy and backend modules

LdapCherry is not limited to ldap, it can handle virtually any user backend (ex: SQL database, htpasswd file, etc) through the proper plugin (provided that it is implemented ^^).

LdapCherry also aims to be as simple as possible to deploy: no crazy dependencies, few configuration files, extensive debug logs and full documentation.

The default backend plugins permit to manage Ldap and Active Directory.

Screenshots

Screenshots.

Try out

# clone the repository
$ git clone https://github.com/kakwa/ldapcherry && cd ldapcherry

# change the directory where to put the configuration (default: /etc)
$ export SYSCONFDIR=/etc
# change the directory where to put the resource (default: /usr/share)
$ export DATAROOTDIR=/usr/share/

# install ldapcherry
$ python setup.py

# edit configuration files
$ vi /etc/ldapcherry/ldapcherry.ini
$ vi /etc/ldapcherry/roles.yml
$ vi /etc/ldapcherry/attributes.yml

# launch ldapcherry
$ ldapcherryd -c /etc/ldapcherry/ldapcherry.ini -D

License

LdapCherry is published under the MIT Public License.

Discussion / Help / Updates

image

image