Added support for LDAPObject.get_option(ldap.OPT_X_TLS_VERSION)

Demo/initialize.py

@@ -0,0 +1,95 @@
+"""
+Various examples how to connect to a LDAP host with the new
+factory function ldap.initialize() introduced in OpenLDAP 2 API.
+
+Assuming you have LDAP servers running on
+ldap://localhost:1390 (LDAP with StartTLS)
+ldaps://localhost:1391 (LDAP over SSL)
+ldapi://%2ftmp%2fopenldap2 (domain socket /tmp/openldap2)
+"""
+
+import sys,os,ldap
+
+# Switch off processing .ldaprc or ldap.conf
+os.environ['LDAPNOINIT']='1'
+
+# Set debugging level
+#ldap.set_option(ldap.OPT_DEBUG_LEVEL,255)
+ldapmodule_trace_level = 1
+ldapmodule_trace_file = sys.stderr
+
+ldap._trace_level = ldapmodule_trace_level
+
+# Complete path name of the file containing all trusted CA certs
+CACERTFILE='/etc/ssl/ca-bundle.pem'
+
+print """##################################################################
+# LDAPv3 connection with StartTLS ext. op.
+##################################################################
+"""
+
+# Create LDAPObject instance
+l = ldap.initialize('ldap://localhost:1390',trace_level=ldapmodule_trace_level,trace_file=ldapmodule_trace_file)
+
+# Set LDAP protocol version used
+l.protocol_version=ldap.VERSION3
+
+# Force cert validation
+l.set_option(ldap.OPT_X_TLS_REQUIRE_CERT,ldap.OPT_X_TLS_DEMAND)
+# Set path name of file containing all trusted CA certificates
+l.set_option(ldap.OPT_X_TLS_CACERTFILE,CACERTFILE)
+# Force libldap to create a new SSL context (must be last TLS option!)
+l.set_option(ldap.OPT_X_TLS_NEWCTX,0)
+
+# Now try StartTLS extended operation
+l.start_tls_s()
+
+print '***ldap.OPT_X_TLS_VERSION',l.get_option(ldap.OPT_X_TLS_VERSION)
+print '***ldap.OPT_X_TLS_CIPHER',l.get_option(ldap.OPT_X_TLS_CIPHER)
+
+# Try an explicit anon bind to provoke failure
+l.simple_bind_s('','')
+
+# Close connection
+l.unbind_s()
+
+print """##################################################################
+# LDAPv3 connection over SSL
+##################################################################
+"""
+
+# Create LDAPObject instance
+l = ldap.initialize('ldaps://localhost:1391',trace_level=ldapmodule_trace_level,trace_file=ldapmodule_trace_file)
+
+# Set LDAP protocol version used
+l.protocol_version=ldap.VERSION3
+
+# Force cert validation
+l.set_option(ldap.OPT_X_TLS_REQUIRE_CERT,ldap.OPT_X_TLS_DEMAND)
+# Set path name of file containing all trusted CA certificates
+l.set_option(ldap.OPT_X_TLS_CACERTFILE,CACERTFILE)
+# Force libldap to create a new SSL context (must be last TLS option!)
+l.set_option(ldap.OPT_X_TLS_NEWCTX,0)
+
+# Try an explicit anon bind to provoke failure
+l.simple_bind_s('','')
+
+print '***ldap.OPT_X_TLS_VERSION',l.get_option(ldap.OPT_X_TLS_VERSION)
+print '***ldap.OPT_X_TLS_CIPHER',l.get_option(ldap.OPT_X_TLS_CIPHER)
+
+# Close connection
+l.unbind_s()
+
+print """##################################################################
+# LDAPv3 connection over Unix domain socket
+##################################################################
+"""
+
+# Create LDAPObject instance
+l = ldap.initialize('ldapi://%2ftmp%2fopenldap-socket',trace_level=ldapmodule_trace_level,trace_file=ldapmodule_trace_file)
+# Set LDAP protocol version used
+l.protocol_version=ldap.VERSION3
+# Try an explicit anon bind to provoke failure
+l.simple_bind_s('','')
+# Close connection
+l.unbind_s()