Dockerfile

@@ -2,10 +2,9 @@ FROM python:3-alpine
 
 COPY requirements.txt /code/requirements.txt
 RUN pip install -r /code/requirements.txt
-RUN echo '0 1,13 * * * python3 /code/main.py' | crontab -
+RUN echo '*/5 * * * * python3 /code/main.py' | crontab -
 COPY . /code
 
 WORKDIR /code
 
-EXPOSE 5000
+CMD ["/usr/sbin/crond", "-f", "-d", "0"]
-ENTRYPOINT ["/code/entrypoint.sh"]

entrypoint.sh

@@ -1,3 +0,0 @@
-#!/usr/bin/env sh
-crond
-flask --app main run -h 0.0.0.0

main.py

@@ -1,8 +1,7 @@
 #!/usr/bin/env python3
 
 from dolibarrpy import Dolibarrpy
-from flask import Flask, abort, request
+from ldap3 import ALL, Connection, ObjectDef, Reader, Server, Writer
-from ldap3 import ALL, Connection, ObjectDef, Reader, Server, WritableEntry, Writer
 
 import config
 
@@ -21,127 +20,70 @@ def main():
 
 def manage_users_extra_fields(ldap_conn: Connection, dolibarr_client: Dolibarrpy):
     dolibarr_users = dolibarr_client.find_all_users()
-    for dolibarr_user in dolibarr_users:
-        manage_user_extra_fields(ldap_conn, dolibarr_user)
 
-
+    obj_inetorgperson = ObjectDef(['inetOrgPerson'] + config.LDAP_USERS_EXTRA_OBJECT_CLASSES, ldap_conn)
-def manage_user_extra_fields(ldap_conn: Connection, dolibarr_user: dict):
+    users_reader = Reader(ldap_conn, obj_inetorgperson, config.LDAP_USERS_OU)
-    login = dolibarr_user['login']
-    obj_inetorgperson = ObjectDef(['top', 'inetOrgPerson', 'posixAccount'], ldap_conn)
-    obj_user = ObjectDef(['top', 'inetOrgPerson', 'posixAccount'] + config.LDAP_GROUPS_EXTRA_OBJECT_CLASSES, ldap_conn)
-    users_reader = Reader(ldap_conn, obj_inetorgperson, config.LDAP_USERS_OU, f"uid:={login}")
     users_reader.search()
-    users_writer = Writer.from_cursor(users_reader, object_def=obj_user)
+    users_writer = Writer.from_cursor(users_reader)
-    if users_writer.entries:
+    for ldap_user in users_writer:
-        ldap_user = users_writer[0]
+        uid = ldap_user.uid
-    else:
+        for dolibarr_user in dolibarr_users:
-        attrs = {
+            if dolibarr_user['login'] == uid:
-            'cn': f"{dolibarr_user['firstname']} {dolibarr_user['lastname']}".strip(),
+                break
-            'givenName': dolibarr_user['firstname'],
-            'sn': dolibarr_user['lastname'],
-            'mail': dolibarr_user['email'],
-            'street': dolibarr_user['address'],
-            'postalCode': dolibarr_user['zip'],
-            'l': dolibarr_user['town'],
-            'mobile': dolibarr_user['user_mobile'],
-            'uidNumber': dolibarr_user['id'],
-            'gidNumber': dolibarr_user['id'],
-            'homeDirectory': f"/home/{login}",
-        }
-        for key, value in list(attrs.items()):
-            if not value:
-                del attrs[key]
-        ldap_conn.add(f"uid={login},{config.LDAP_USERS_OU}", ["top", "inetOrgPerson", "posixAccount", "shadowAccount"], attrs)
-        users_reader.search()
-        users_writer = Writer.from_cursor(users_reader, object_def=obj_user)
-        ldap_user = users_writer[0]
-    append_extra_fields_to_ldap_user(ldap_user, dolibarr_user)
-    users_writer.commit()
-
-
-def append_extra_fields_to_ldap_user(ldap_user: WritableEntry, dolibarr_user: dict):
-    for extra_object_class in config.LDAP_USERS_EXTRA_OBJECT_CLASSES:
-        if extra_object_class not in ldap_user.objectClass:
-            ldap_user.objectClass += extra_object_class
-
-    for extra_field in config.LDAP_USERS_EXTRA_FIELDS:
-        dolibarr_attr, ldap_attr = extra_field.split(':')
-        if dolibarr_attr.endswith('[]'):
-            dolibarr_attr = dolibarr_attr[:-2]
-            value = dolibarr_user['array_options'][f'options_{dolibarr_attr}']
-            value = value.split() if value else []
-            setattr(ldap_user, ldap_attr, value)
         else:
-            value = dolibarr_user['array_options'][f'options_{dolibarr_attr}'] or ""
+            continue
-            setattr(ldap_user, ldap_attr, value)
+
+        for extra_object_class in config.LDAP_USERS_EXTRA_OBJECT_CLASSES:
+            if extra_object_class not in ldap_user.objectClass:
+                ldap_user.objectClass.append(extra_object_class)
+
+        for extra_field in config.LDAP_USERS_EXTRA_FIELDS:
+            dolibarr_attr, ldap_attr = extra_field.split(':')
+            if dolibarr_attr.endswith('[]'):
+                dolibarr_attr = dolibarr_attr[:-2]
+                value = dolibarr_user['array_options'][f'options_{dolibarr_attr}']
+                value = value.split() if value else []
+                setattr(ldap_user, ldap_attr, value)
+            else:
+                value = dolibarr_user['array_options'][f'options_{dolibarr_attr}'] or ""
+                setattr(ldap_user, ldap_attr, value)
+    users_writer.commit()
 
 
 def manage_groups_extra_fields(ldap_conn: Connection, dolibarr_client: Dolibarrpy):
     dolibarr_groups = dolibarr_client.call_list_api('users/groups')
-    for dolibarr_group in dolibarr_groups:
-        manage_group_extra_fields(ldap_conn, dolibarr_group)
 
-
+    obj_posixgroup = ObjectDef(['posixGroup'] + config.LDAP_GROUPS_EXTRA_OBJECT_CLASSES, ldap_conn)
-def manage_group_extra_fields(ldap_conn: Connection, dolibarr_group: dict):
+    groups_reader = Reader(ldap_conn, obj_posixgroup, config.LDAP_GROUPS_OU)
-    name = dolibarr_group['name']
-    obj_posixgroup = ObjectDef(['posixGroup'], ldap_conn)
-    obj_group = ObjectDef(['posixGroup'] + config.LDAP_GROUPS_EXTRA_OBJECT_CLASSES, ldap_conn)
-    groups_reader = Reader(ldap_conn, obj_posixgroup, config.LDAP_GROUPS_OU, f"cn:={name}")
     groups_reader.search()
-    groups_writer = Writer.from_cursor(groups_reader, object_def=obj_group)
+    groups_writer = Writer.from_cursor(groups_reader)
-    if groups_writer.entries:
+    for ldap_group in groups_writer:
-        ldap_group = groups_writer[0]
+        print(ldap_group)
-    else:
+        name = ldap_group.cn
-        attrs = {
+        for dolibarr_group in dolibarr_groups:
-            'cn': name,
+            if dolibarr_group['nom'] == name:
-            'gidNumber': dolibarr_group['id'],
+                break
-        }
-        for key, value in list(attrs.items()):
-            if not value:
-                del attrs[key]
-        ldap_conn.add(f"cn={name},{config.LDAP_GROUPS_OU}", ["top", "posixGroup"], attrs)
-        groups_reader.search()
-        groups_writer = Writer.from_cursor(groups_reader, object_def=obj_group)
-        ldap_group = groups_writer[0]
-    append_extra_fields_to_ldap_group(ldap_group, dolibarr_group)
-    groups_writer.commit()
-
-def append_extra_fields_to_ldap_group(ldap_group: WritableEntry, dolibarr_group: dict):
-    for extra_object_class in config.LDAP_GROUPS_EXTRA_OBJECT_CLASSES:
-        if extra_object_class not in ldap_group.objectClass:
-            ldap_group.objectClass += extra_object_class
-
-    for extra_field in config.LDAP_GROUPS_EXTRA_FIELDS:
-        dolibarr_attr, ldap_attr = extra_field.split(':')
-        if dolibarr_attr.endswith('[]'):
-            dolibarr_attr = dolibarr_attr[:-2]
-            value = dolibarr_group['array_options'][f'options_{dolibarr_attr}']
-            value = value.split() if value else []
-            setattr(ldap_group, ldap_attr, value)
         else:
-            value = dolibarr_group['array_options'][f'options_{dolibarr_attr}'] or ""
+            continue
-            setattr(ldap_group, ldap_attr, value)
 
+        for extra_object_class in config.LDAP_GROUPS_EXTRA_OBJECT_CLASSES:
+            if extra_object_class not in ldap_group.objectClass:
+                ldap_group.objectClass.append(extra_object_class)
 
-flask_app = Flask(__name__)
+        for extra_field in config.LDAP_GROUPS_EXTRA_FIELDS:
-
+            dolibarr_attr, ldap_attr = extra_field.split(':')
-@flask_app.post('/webhook')
+            if dolibarr_attr.endswith('[]'):
-def webhook_receiver():
+                dolibarr_attr = dolibarr_attr[:-2]
-    data = request.json
+                print(dolibarr_group)
-    if 'triggercode' not in data or 'object' not in data:
+                value = dolibarr_group['array_options'][f'options_{dolibarr_attr}']
-        abort(400)
+                value = value.split() if value else []
-    triggercode = data['triggercode']
+                print(ldap_attr, value)
-    obj = data['object']
+                setattr(ldap_group, ldap_attr, value)
-    ldap_server = Server(config.LDAP_HOST, config.LDAP_PORT, get_info=ALL)
+            else:
-    if triggercode.startswith('USER_'):
+                value = dolibarr_group['array_options'][f'options_{dolibarr_attr}'] or ""
-        with Connection(ldap_server, config.LDAP_BIND_USER, config.LDAP_BIND_PASSWORD) as ldap_conn:
+                print(ldap_attr, value)
-            manage_user_extra_fields(ldap_conn, obj)
+                setattr(ldap_group, ldap_attr, value)
-    elif triggercode.startswith('GROUP_'):
+    groups_writer.commit()
-        with Connection(ldap_server, config.LDAP_BIND_USER, config.LDAP_BIND_PASSWORD) as ldap_conn:
-            manage_group_extra_fields(ldap_conn, obj)
-    else:
-        abort(400)
-    return "", 204
 
 
 if __name__ == '__main__':

requirements.txt

@@ -1,4 +1,3 @@
-flask
 ldap3
 dolibarrpy
 icecream