Synchronize PostgreSQL roles from LDAP
Project description
Swiss-army knife to synchronize Postgres roles and ACLs from any LDAP directory.
Features
Creates, alter and drops PostgreSQL roles from LDAP queries.
Creates static roles from YAML to complete LDAP entries.
Manage role members (alias groups).
Grant or revoke custom ACL statically or from LDAP entries.
Dry run.
Logs LDAP queries as ldapsearch commands.
Logs every SQL queries.
Reads settings from YAML config file.
$ cat ldap2pg.yml
sync_map:
ldap:
base: ou=people,dc=ldap2pg,dc=local
filter: "(objectClass=organizationalRole)"
attribute: cn
role:
name_attribute: cn
options: LOGIN
$ ldap2pg --real
Using ./ldap2pg.yml.
Using /home/.../src/dalibo/ldap2pg/ldap2pg.yml.
Starting ldap2pg 1.0.
Running in real mode.
Inspecting Postgres...
Querying LDAP cn=dba,ou=groups,dc=ldap2pg,dc=local...
Querying LDAP ou=groups,dc=ldap2pg,dc=local...
Create alan.
Create dave.
Create david.
Create ldap_users.
Add ldap_users members.
Add missing backend members.
Delete spurious backend members.
Update options of alice.
Would reassign oscar objects and purge ACL on backend.
Would reassign oscar objects and purge ACL on frontend.
Would reassign oscar objects and purge ACL on legacy.
Would reassign oscar objects and purge ACL on postgres.
Would reassign oscar objects and purge ACL on template1.
Drop oscar.
Synchronization complete.
$
See versionned ldap2pg.yml for further options.
Installation
Install it from PyPI tarball:
pip install ldap2pg
ldap2pg is licensed under PostgreSQL license.
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
ldap2pg-2.0.tar.gz
(15.8 kB
view hashes)
Built Distribution
ldap2pg-2.0-py2.py3-none-any.whl
(20.8 kB
view hashes)
Close
Hashes for ldap2pg-2.0-py2.py3-none-any.whl
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | 0d435650ddb214e49d8b0e78e7753b596e5e7a85e6f9ff833c0602e75ccf296e |
|
| MD5 | 21b445a317b2440cb37134d093cd325e |
|
| BLAKE2b-256 | 4564482332b54415c294a13aa17be854b7283a7db9f265af21cdbb0bc2bca6d2 |
