rc/servers
2
0
Fork 0
Code Issues Pull requests Actions Packages Projects 1 Releases Wiki Activity

proxmox: fix handling empty values in LDAP sync script

Browse source 
Don’t put "None" for email and such.
This commit is contained in:
Timotej Lazar 2024-08-20 15:08:57 +02:00
parent 2b4a196e4d
commit c3d1a6c4b1
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/proxmox/templates/sync-ldap.py.j2
View file

@ -33,7 +33,7 @@ all_users = {}
all_groups = collections.defaultdict(set)
for e in ldap.entries:
user = f'{e.userPrincipalName.value}@{realm}'
all_users[user] = { k: e[k].value for k in e.entry_attributes }
all_users[user] = { k: (e[k].value or '') for k in e.entry_attributes }
for group in e.memberOf:
if m := re.match(r'^CN=([^,]*)', group.replace('\\,', '-')):
group = re.sub(r'[^A-Za-z0-9_.-]', '-', m[1])