Skip to content
Projects
Groups
Snippets
Help
Loading...
Sign in
Toggle navigation
J
jumpserver
Project
Project
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
ops
jumpserver
Commits
b237cbb2
Commit
b237cbb2
authored
May 24, 2019
by
ibuler
Browse files
Options
Browse Files
Download
Plain Diff
Merge branch 'dev' of github.com:jumpserver/jumpserver into dev
parents
9b5b48dd
b7eac837
Expand all
Hide whitespace changes
Inline
Side-by-side
Showing
21 changed files
with
351 additions
and
115 deletions
+351
-115
const.py
apps/applications/const.py
+1
-1
remote_app.py
apps/applications/forms/remote_app.py
+21
-0
remote_app_create_update.html
...ions/templates/applications/remote_app_create_update.html
+41
-8
ldap.py
apps/authentication/backends/ldap.py
+16
-9
settings.py
apps/jumpserver/settings.py
+6
-0
django.mo
apps/locale/zh/LC_MESSAGES/django.mo
+0
-0
django.po
apps/locale/zh/LC_MESSAGES/django.po
+0
-0
user_permission.py
apps/perms/api/user_permission.py
+1
-0
api.py
apps/settings/api.py
+4
-4
forms.py
apps/settings/forms.py
+23
-0
_ldap_list_users_modal.html
apps/settings/templates/settings/_ldap_list_users_modal.html
+3
-0
basic_setting.html
apps/settings/templates/settings/basic_setting.html
+3
-0
email_content_setting.html
apps/settings/templates/settings/email_content_setting.html
+72
-0
email_setting.html
apps/settings/templates/settings/email_setting.html
+3
-0
ldap_setting.html
apps/settings/templates/settings/ldap_setting.html
+8
-5
security_setting.html
apps/settings/templates/settings/security_setting.html
+3
-0
terminal_setting.html
apps/settings/templates/settings/terminal_setting.html
+3
-0
view_urls.py
apps/settings/urls/view_urls.py
+1
-0
utils.py
apps/settings/utils.py
+61
-64
views.py
apps/settings/views.py
+27
-1
utils.py
apps/users/utils.py
+54
-23
No files found.
apps/applications/const.py
View file @
b237cbb2
...
...
@@ -28,7 +28,7 @@ REMOTE_APP_TYPE_CHOICES = (
(
_
(
'Virtualization tools'
),
(
(
REMOTE_APP_TYPE_VMWARE_CLIENT
,
'
VMwa
re Client'
),
(
REMOTE_APP_TYPE_VMWARE_CLIENT
,
'
vSphe
re Client'
),
)
),
(
REMOTE_APP_TYPE_CUSTOM
,
_
(
'Custom'
)),
...
...
apps/applications/forms/remote_app.py
View file @
b237cbb2
...
...
@@ -8,6 +8,7 @@ from orgs.mixins import OrgModelForm
from
assets.models
import
Asset
,
SystemUser
from
..models
import
RemoteApp
from
..
import
const
__all__
=
[
...
...
@@ -109,3 +110,23 @@ class RemoteAppCreateUpdateForm(RemoteAppTypeForms, OrgModelForm):
})
}
def
_clean_params
(
self
):
app_type
=
self
.
data
.
get
(
'type'
)
fields
=
const
.
REMOTE_APP_TYPE_MAP_FIELDS
.
get
(
app_type
,
[])
params
=
{}
for
field
in
fields
:
name
=
field
[
'name'
]
value
=
self
.
cleaned_data
[
name
]
params
.
update
({
name
:
value
})
return
params
def
_save_params
(
self
,
instance
):
params
=
self
.
_clean_params
()
instance
.
params
=
params
instance
.
save
()
return
instance
def
save
(
self
,
commit
=
True
):
instance
=
super
()
.
save
(
commit
=
commit
)
instance
=
self
.
_save_params
(
instance
)
return
instance
apps/applications/templates/applications/remote_app_create_update.html
View file @
b237cbb2
...
...
@@ -64,28 +64,60 @@
{% block custom_foot_js %}
<script
type=
"text/javascript"
>
var
type_id
=
'#'
+
'{{ form.type.id_for_label }}'
;
var
app_type_id
=
'#'
+
'{{ form.type.id_for_label }}'
;
var
app_path_id
=
'#'
+
'{{ form.path.id_for_label }}'
;
var
all_type_fields
=
[
'.chrome-fields'
,
'.mysql_workbench-fields'
,
'.vmware_client-fields'
,
'.custom-fields'
];
function
appTypeChange
(){
var
app_type_map_default_fields_value
=
{
'chrome'
:
{
'app_path'
:
'C:
\\
Program Files (x86)
\\
Google
\\
Chrome
\\
Application
\\
chrome.exe'
},
'mysql_workbench'
:
{
'app_path'
:
'C:
\\
Program Files
\\
MySQL
\\
MySQL Workbench 8.0 CE
\\
MySQLWorkbench.exe'
},
'vmware_client'
:
{
'app_path'
:
'C:
\\
Program Files (x86)
\\
VMware
\\
Infrastructure
\\
Virtual Infrastructure Client
\\
Launcher
\\
VpxClient.exe'
},
'custom'
:
{
'app_path'
:
''
}
};
function
getAppType
(){
return
$
(
app_type_id
+
" option:selected"
).
val
();
}
function
initialDefaultValue
(){
var
app_type
=
getAppType
();
var
app_path
=
$
(
app_path_id
).
val
();
if
(
app_path
){
app_type_map_default_fields_value
[
app_type
][
'app_path'
]
=
app_path
}
}
function
setDefaultValue
(){
// 设置类型相关字段的默认值
var
app_type
=
getAppType
();
var
app_path
=
app_type_map_default_fields_value
[
app_type
][
'app_path'
];
$
(
app_path_id
).
val
(
app_path
)
}
function
hiddenFields
(){
var
app_type
=
getAppType
();
$
.
each
(
all_type_fields
,
function
(
index
,
value
){
$
(
value
).
addClass
(
'hidden'
)
});
var
type
=
$
(
type_id
+
" option:selected"
).
val
();
$
(
'.'
+
type
+
'-fields'
).
removeClass
(
'hidden'
);
$
(
'.'
+
app_type
+
'-fields'
).
removeClass
(
'hidden'
);
}
$
(
document
).
ready
(
function
()
{
$
(
'.select2'
).
select2
({
closeOnSelect
:
true
});
appTypeChange
()
});
initialDefaultValue
();
hiddenFields
();
setDefaultValue
();
})
.
on
(
'change'
,
type_id
,
function
(){
appTypeChange
();
.
on
(
'change'
,
app_type_id
,
function
(){
hiddenFields
();
setDefaultValue
();
});
</script>
{% endblock %}
\ No newline at end of file
apps/authentication/backends/ldap.py
View file @
b237cbb2
...
...
@@ -7,6 +7,8 @@ from django.core.exceptions import ImproperlyConfigured, ObjectDoesNotExist
from
django_auth_ldap.backend
import
_LDAPUser
,
LDAPBackend
from
django_auth_ldap.config
import
_LDAPConfig
,
LDAPSearch
,
LDAPSearchUnion
from
users.utils
import
construct_user_email
logger
=
_LDAPConfig
.
get_logger
()
...
...
@@ -86,13 +88,18 @@ class LDAPUser(_LDAPUser):
return
user_dn
def
_populate_user_from_attributes
(
self
):
super
()
.
_populate_user_from_attributes
()
if
not
hasattr
(
self
.
_user
,
'email'
)
or
'@'
not
in
self
.
_user
.
email
:
if
'@'
not
in
self
.
_user
.
username
:
email
=
'{}@{}'
.
format
(
self
.
_user
.
username
,
settings
.
EMAIL_SUFFIX
)
for
field
,
attr
in
self
.
settings
.
USER_ATTR_MAP
.
items
():
try
:
value
=
self
.
attrs
[
attr
][
0
]
except
LookupError
:
logger
.
warning
(
"{} does not have a value for the attribute {}"
.
format
(
self
.
dn
,
attr
))
else
:
email
=
self
.
_user
.
username
setattr
(
self
.
_user
,
'email'
,
email
)
if
not
hasattr
(
self
.
_user
,
field
):
continue
if
isinstance
(
getattr
(
self
.
_user
,
field
),
bool
):
value
=
value
.
lower
()
in
[
'true'
,
'1'
]
setattr
(
self
.
_user
,
field
,
value
)
email
=
getattr
(
self
.
_user
,
'email'
,
''
)
email
=
construct_user_email
(
email
,
self
.
_user
.
username
)
setattr
(
self
.
_user
,
'email'
,
email
)
apps/jumpserver/settings.py
View file @
b237cbb2
...
...
@@ -357,6 +357,12 @@ EMAIL_USE_SSL = False
EMAIL_USE_TLS
=
False
EMAIL_SUBJECT_PREFIX
=
'[JMS] '
#Email custom content
EMAIL_CUSTOM_USER_CREATED_SUBJECT
=
''
EMAIL_CUSTOM_USER_CREATED_HONORIFIC
=
''
EMAIL_CUSTOM_USER_CREATED_BODY
=
''
EMAIL_CUSTOM_USER_CREATED_SIGNATURE
=
''
REST_FRAMEWORK
=
{
# Use Django's standard `django.contrib.auth` permissions,
# or allow read-only access for unauthenticated users.
...
...
apps/locale/zh/LC_MESSAGES/django.mo
View file @
b237cbb2
No preview for this file type
apps/locale/zh/LC_MESSAGES/django.po
View file @
b237cbb2
This diff is collapsed.
Click to expand it.
apps/perms/api/user_permission.py
View file @
b237cbb2
...
...
@@ -512,6 +512,7 @@ class UserGrantedRemoteAppsAsTreeApi(ListAPIView):
class
ValidateUserRemoteAppPermissionApi
(
APIView
):
permission_classes
=
(
IsOrgAdminOrAppUser
,)
def
get
(
self
,
request
,
*
args
,
**
kwargs
):
user_id
=
request
.
query_params
.
get
(
'user_id'
,
''
)
...
...
apps/settings/api.py
View file @
b237cbb2
...
...
@@ -79,7 +79,7 @@ class LDAPTestingAPI(APIView):
util
=
self
.
get_ldap_util
(
serializer
)
try
:
users
=
util
.
get_
search_user_items
()
users
=
util
.
search_user_items
()
except
Exception
as
e
:
return
Response
({
"error"
:
str
(
e
)},
status
=
401
)
...
...
@@ -95,7 +95,7 @@ class LDAPUserListApi(APIView):
def
get
(
self
,
request
):
util
=
LDAPUtil
()
try
:
users
=
util
.
get_
search_user_items
()
users
=
util
.
search_user_items
()
except
Exception
as
e
:
users
=
[]
logger
.
error
(
e
,
exc_info
=
True
)
...
...
@@ -108,11 +108,11 @@ class LDAPUserSyncAPI(APIView):
permission_classes
=
(
IsOrgAdmin
,)
def
post
(
self
,
request
):
user
_names
=
request
.
data
.
get
(
'user_names'
,
''
)
user
name_list
=
request
.
data
.
get
(
'username_list'
,
[]
)
util
=
LDAPUtil
()
try
:
result
=
util
.
sync_users
(
username_
set
=
user_names
)
result
=
util
.
sync_users
(
username_
list
)
except
Exception
as
e
:
logger
.
error
(
e
,
exc_info
=
True
)
return
Response
({
'error'
:
str
(
e
)},
status
=
401
)
...
...
apps/settings/forms.py
View file @
b237cbb2
...
...
@@ -242,3 +242,26 @@ class SecuritySettingForm(BaseForm):
'and resets must contain special characters'
)
)
class
EmailContentSettingForm
(
BaseForm
):
EMAIL_CUSTOM_USER_CREATED_SUBJECT
=
forms
.
CharField
(
max_length
=
1024
,
required
=
False
,
label
=
_
(
"Create user email subject"
),
help_text
=
_
(
"Tips: When creating a user, send the subject of the email"
" (eg:Create account successfully)"
)
)
EMAIL_CUSTOM_USER_CREATED_HONORIFIC
=
forms
.
CharField
(
max_length
=
1024
,
required
=
False
,
label
=
_
(
"Create user honorific"
),
help_text
=
_
(
"Tips: When creating a user, send the honorific of the "
"email (eg:Hello)"
)
)
EMAIL_CUSTOM_USER_CREATED_BODY
=
forms
.
CharField
(
max_length
=
4096
,
required
=
False
,
widget
=
forms
.
Textarea
(),
label
=
_
(
'Create user email content'
),
help_text
=
_
(
'Tips:When creating a user, send the content of the email'
)
)
EMAIL_CUSTOM_USER_CREATED_SIGNATURE
=
forms
.
CharField
(
max_length
=
512
,
required
=
False
,
label
=
_
(
"Signature"
),
help_text
=
_
(
"Tips: Email signature (eg:jumpserver)"
)
)
apps/settings/templates/settings/_ldap_list_users_modal.html
View file @
b237cbb2
...
...
@@ -58,6 +58,9 @@ function initLdapUsersTable() {
ele
:
$
(
'#ldap_list_users_table'
),
ajax_url
:
'{% url "api-settings:ldap-user-list" %}'
,
columnDefs
:
[
{
targets
:
0
,
createdCell
:
function
(
td
,
cellData
,
rowData
)
{
$
(
td
).
html
(
"<input type='checkbox' class='text-center ipt_check' id='ID_USERNAME'>"
.
replace
(
"ID_USERNAME"
,
cellData
))
}},
{
targets
:
4
,
createdCell
:
function
(
td
,
cellData
,
rowData
)
{
if
(
cellData
){
$
(
td
).
html
(
'<i class="fa fa-check text-navy"></i>'
)
...
...
apps/settings/templates/settings/basic_setting.html
View file @
b237cbb2
...
...
@@ -17,6 +17,9 @@
<li>
<a
href=
"{% url 'settings:email-setting' %}"
class=
"text-center"
><i
class=
"fa fa-envelope"
></i>
{% trans 'Email setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:email-content-setting' %}"
class=
"text-center"
><i
class=
"fa fa-file-text"
></i>
{% trans 'Email content setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:ldap-setting' %}"
class=
"text-center"
><i
class=
"fa fa-archive"
></i>
{% trans 'LDAP setting' %}
</a>
</li>
...
...
apps/settings/templates/settings/email_content_setting.html
0 → 100644
View file @
b237cbb2
{% extends 'base.html' %}
{% load static %}
{% load bootstrap3 %}
{% load i18n %}
{% load common_tags %}
{% block content %}
<div
class=
"wrapper wrapper-content animated fadeInRight"
>
<div
class=
"row"
>
<div
class=
"col-sm-12"
>
<div
class=
"ibox float-e-margins"
>
<div
class=
"panel-options"
>
<ul
class=
"nav nav-tabs"
>
<li>
<a
href=
"{% url 'settings:basic-setting' %}"
class=
"text-center"
><i
class=
"fa fa-cubes"
></i>
{% trans 'Basic setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:email-setting' %}"
class=
"text-center"
><i
class=
"fa fa-envelope"
></i>
{% trans 'Email setting' %}
</a>
</li>
<li
class=
"active"
>
<a
href=
"{% url 'settings:email-content-setting' %}"
class=
"text-center"
><i
class=
"fa fa-file-text"
></i>
{% trans 'Email content setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:ldap-setting' %}"
class=
"text-center"
><i
class=
"fa fa-archive"
></i>
{% trans 'LDAP setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:terminal-setting' %}"
class=
"text-center"
><i
class=
"fa fa-hdd-o"
></i>
{% trans 'Terminal setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:security-setting' %}"
class=
"text-center"
><i
class=
"fa fa-lock"
></i>
{% trans 'Security setting' %}
</a>
</li>
</ul>
</div>
<div
class=
"tab-content"
>
<div
class=
"col-sm-12"
style=
"padding-left:0"
>
<div
class=
"ibox-content"
style=
"border-width: 0;padding-top: 40px;"
>
<form
action=
""
method=
"post"
class=
"form-horizontal"
>
{% if form.non_field_errors %}
<div
class=
"alert alert-danger"
>
{{ form.non_field_errors }}
</div>
{% endif %}
{% csrf_token %}
<h3>
{% trans "Create User setting" %}
</h3>
{% bootstrap_field form.EMAIL_CUSTOM_USER_CREATED_SUBJECT layout="horizontal" %}
{% bootstrap_field form.EMAIL_CUSTOM_USER_CREATED_HONORIFIC layout="horizontal" %}
{% bootstrap_field form.EMAIL_CUSTOM_USER_CREATED_BODY layout="horizontal" %}
{% bootstrap_field form.EMAIL_CUSTOM_USER_CREATED_SIGNATURE layout="horizontal" %}
<div
class=
"hr-line-dashed"
></div>
<div
class=
"form-group"
>
<div
class=
"col-sm-4 col-sm-offset-2"
>
<button
class=
"btn btn-default"
type=
"reset"
>
{% trans 'Reset' %}
</button>
<button
id=
"submit_button"
class=
"btn btn-primary"
type=
"submit"
>
{% trans 'Submit' %}
</button>
</div>
</div>
</form>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
{% endblock %}
{% block custom_foot_js %}
<script>
</script>
{% endblock %}
apps/settings/templates/settings/email_setting.html
View file @
b237cbb2
...
...
@@ -17,6 +17,9 @@
<li
class=
"active"
>
<a
href=
"{% url 'settings:email-setting' %}"
class=
"text-center"
><i
class=
"fa fa-envelope"
></i>
{% trans 'Email setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:email-content-setting' %}"
class=
"text-center"
><i
class=
"fa fa-file-text"
></i>
{% trans 'Email content setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:ldap-setting' %}"
class=
"text-center"
><i
class=
"fa fa-archive"
></i>
{% trans 'LDAP setting' %}
</a>
</li>
...
...
apps/settings/templates/settings/ldap_setting.html
View file @
b237cbb2
...
...
@@ -17,6 +17,9 @@
<li>
<a
href=
"{% url 'settings:email-setting' %}"
class=
"text-center"
><i
class=
"fa fa-envelope"
></i>
{% trans 'Email setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:email-content-setting' %}"
class=
"text-center"
><i
class=
"fa fa-file-text"
></i>
{% trans 'Email content setting' %}
</a>
</li>
<li
class=
"active"
>
<a
href=
"{% url 'settings:ldap-setting' %}"
class=
"text-center"
><i
class=
"fa fa-archive"
></i>
{% trans 'LDAP setting' %}
</a>
</li>
...
...
@@ -107,13 +110,13 @@ $(document).ready(function () {
});
})
.
on
(
"click"
,
"#btn_ldap_modal_confirm"
,
function
()
{
var
user
_names
=
[];
var
user
name_list
=
[];
$
(
"tbody input[type='checkbox']:checked"
).
each
(
function
()
{
user
_names
.
push
(
$
(
this
).
attr
(
'id'
));
user
name_list
.
push
(
$
(
this
).
attr
(
'id'
));
});
if
(
user
_names
.
length
===
0
){
var
msg
=
"{% trans 'User is not currently selected, please check the user you want to import'%}"
if
(
user
name_list
.
length
===
0
){
var
msg
=
"{% trans 'User is not currently selected, please check the user you want to import'%}"
;
toastr
.
error
(
msg
);
return
}
...
...
@@ -129,7 +132,7 @@ $(document).ready(function () {
}
APIUpdateAttr
({
url
:
the_url
,
body
:
JSON
.
stringify
({
'user
_names'
:
user_names
}),
body
:
JSON
.
stringify
({
'user
name_list'
:
username_list
}),
method
:
"POST"
,
flash_message
:
false
,
success
:
success
,
...
...
apps/settings/templates/settings/security_setting.html
View file @
b237cbb2
...
...
@@ -16,6 +16,9 @@
</li>
<li>
<a
href=
"{% url 'settings:email-setting' %}"
class=
"text-center"
><i
class=
"fa fa-envelope"
></i>
{% trans 'Email setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:email-content-setting' %}"
class=
"text-center"
><i
class=
"fa fa-file-text"
></i>
{% trans 'Email content setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:ldap-setting' %}"
class=
"text-center"
><i
class=
"fa fa-archive"
></i>
{% trans 'LDAP setting' %}
</a>
...
...
apps/settings/templates/settings/terminal_setting.html
View file @
b237cbb2
...
...
@@ -18,6 +18,9 @@
<li>
<a
href=
"{% url 'settings:email-setting' %}"
class=
"text-center"
><i
class=
"fa fa-envelope"
></i>
{% trans 'Email setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:email-content-setting' %}"
class=
"text-center"
><i
class=
"fa fa-file-text"
></i>
{% trans 'Email content setting' %}
</a>
</li>
<li>
<a
href=
"{% url 'settings:ldap-setting' %}"
class=
"text-center"
><i
...
...
apps/settings/urls/view_urls.py
View file @
b237cbb2
...
...
@@ -9,6 +9,7 @@ app_name = 'common'
urlpatterns
=
[
url
(
r'^$'
,
views
.
BasicSettingView
.
as_view
(),
name
=
'basic-setting'
),
url
(
r'^email/$'
,
views
.
EmailSettingView
.
as_view
(),
name
=
'email-setting'
),
url
(
r'^email-content/$'
,
views
.
EmailContentSettingView
.
as_view
(),
name
=
'email-content-setting'
),
url
(
r'^ldap/$'
,
views
.
LDAPSettingView
.
as_view
(),
name
=
'ldap-setting'
),
url
(
r'^terminal/$'
,
views
.
TerminalSettingView
.
as_view
(),
name
=
'terminal-setting'
),
url
(
r'^terminal/replay-storage/create$'
,
views
.
ReplayStorageCreateView
.
as_view
(),
name
=
'replay-storage-create'
),
...
...
apps/settings/utils.py
View file @
b237cbb2
...
...
@@ -5,7 +5,9 @@ from ldap3 import Server, Connection
from
django.utils.translation
import
ugettext_lazy
as
_
from
users.models
import
User
from
users.utils
import
construct_user_email
from
common.utils
import
get_logger
from
.models
import
settings
...
...
@@ -17,11 +19,11 @@ class LDAPOUGroupException(Exception):
class
LDAPUtil
:
_conn
=
None
def
__init__
(
self
,
use_settings_config
=
True
,
server_uri
=
None
,
bind_dn
=
None
,
password
=
None
,
use_ssl
=
None
,
search_ougroup
=
None
,
search_filter
=
None
,
attr_map
=
None
,
auth_ldap
=
None
):
# config
if
use_settings_config
:
self
.
_load_config_from_settings
()
...
...
@@ -45,6 +47,15 @@ class LDAPUtil:
self
.
attr_map
=
settings
.
AUTH_LDAP_USER_ATTR_MAP
self
.
auth_ldap
=
settings
.
AUTH_LDAP
@property
def
connection
(
self
):
if
self
.
_conn
is
None
:
server
=
Server
(
self
.
server_uri
,
use_ssl
=
self
.
use_ssl
)
conn
=
Connection
(
server
,
self
.
bind_dn
,
self
.
password
)
conn
.
bind
()
self
.
_conn
=
conn
return
self
.
_conn
@staticmethod
def
get_user_by_username
(
username
):
try
:
...
...
@@ -55,36 +66,64 @@ class LDAPUtil:
else
:
return
user
def
_ldap_entry_to_user_item
(
self
,
entry
):
user_item
=
{}
for
attr
,
mapping
in
self
.
attr_map
.
items
():
if
not
hasattr
(
entry
,
mapping
):
continue
user_item
[
attr
]
=
getattr
(
entry
,
mapping
)
.
value
or
''
return
user_item
def
search_user_items
(
self
):
user_items
=
[]
for
search_ou
in
str
(
self
.
search_ougroup
)
.
split
(
"|"
):
ok
=
self
.
connection
.
search
(
search_ou
,
self
.
search_filter
%
({
"user"
:
"*"
}),
attributes
=
list
(
self
.
attr_map
.
values
())
)
if
not
ok
:
error
=
_
(
"Search no entry matched in ou {}"
.
format
(
search_ou
))
raise
LDAPOUGroupException
(
error
)
for
entry
in
self
.
connection
.
entries
:
user_item
=
self
.
_ldap_entry_to_user_item
(
entry
)
user
=
self
.
get_user_by_username
(
user_item
[
'username'
])
user_item
[
'existing'
]
=
bool
(
user
)
user_items
.
append
(
user_item
)
return
user_items
def
search_filter_user_items
(
self
,
username_list
):
user_items
=
self
.
search_user_items
()
if
username_list
:
user_items
=
[
u
for
u
in
user_items
if
u
[
'username'
]
in
username_list
]
return
user_items
@staticmethod
def
_updat
e_user
(
user
,
user_item
):
def
sav
e_user
(
user
,
user_item
):
for
field
,
value
in
user_item
.
items
():
if
not
hasattr
(
user
,
field
):
continue
if
isinstance
(
getattr
(
user
,
field
),
bool
):
value
=
value
.
lower
()
in
[
'true'
,
1
]
setattr
(
user
,
field
,
value
)
user
.
save
()
def
update_user
(
self
,
user_item
):
user
=
self
.
get_user_by_username
(
user_item
[
'username'
])
if
not
user
:
msg
=
_
(
'User does not exist'
)
return
False
,
msg
if
user
.
source
!=
User
.
SOURCE_LDAP
:
msg
=
_
(
'The user source is not LDAP'
)
return
False
,
msg
try
:
self
.
_updat
e_user
(
user
,
user_item
)
self
.
sav
e_user
(
user
,
user_item
)
except
Exception
as
e
:
logger
.
error
(
e
,
exc_info
=
True
)
return
False
,
str
(
e
)
else
:
return
True
,
None
@staticmethod
def
create_user
(
user_item
):
user_item
[
'source'
]
=
User
.
SOURCE_LDAP
def
create_user
(
self
,
user_item
):
user
=
User
(
source
=
User
.
SOURCE_LDAP
)
try
:
User
.
objects
.
create
(
**
user_item
)
self
.
save_user
(
user
,
user_item
)
except
Exception
as
e
:
logger
.
error
(
e
,
exc_info
=
True
)
return
False
,
str
(
e
)
...
...
@@ -92,26 +131,21 @@ class LDAPUtil:
return
True
,
None
@staticmethod
def
get_or_construct_email
(
user_item
):
if
not
user_item
.
get
(
'email'
,
None
):
if
'@'
in
user_item
[
'username'
]:
email
=
user_item
[
'username'
]
else
:
email
=
'{}@{}'
.
format
(
user_item
[
'username'
],
settings
.
EMAIL_SUFFIX
)
else
:
email
=
user_item
[
'email'
]
def
construct_user_email
(
user_item
):
username
=
user_item
[
'username'
]
email
=
user_item
.
get
(
'email'
,
''
)
email
=
construct_user_email
(
username
,
email
)
return
email
def
create_or_update_users
(
self
,
user_items
,
force_update
=
True
):
succeed
=
failed
=
0
for
user_item
in
user_items
:
user_item
[
'email'
]
=
self
.
get_or_construct_email
(
user_item
)
exist
=
user_item
.
pop
(
'existing'
,
None
)
if
exist
:
ok
,
error
=
self
.
update_user
(
user_item
)
else
:
exist
=
user_item
.
pop
(
'existing'
,
False
)
user_item
[
'email'
]
=
self
.
construct_user_email
(
user_item
)
if
not
exist
:
ok
,
error
=
self
.
create_user
(
user_item
)
else
:
ok
,
error
=
self
.
update_user
(
user_item
)
if
not
ok
:
failed
+=
1
else
:
...
...
@@ -119,44 +153,7 @@ class LDAPUtil:
result
=
{
'total'
:
len
(
user_items
),
'succeed'
:
succeed
,
'failed'
:
failed
}
return
result
def
_ldap_entry_to_user_item
(
self
,
entry
):
user_item
=
{}
for
attr
,
mapping
in
self
.
attr_map
.
items
():
if
not
hasattr
(
entry
,
mapping
):
continue
user_item
[
attr
]
=
getattr
(
entry
,
mapping
)
.
value
or
''
return
user_item
def
get_connection
(
self
):
server
=
Server
(
self
.
server_uri
,
use_ssl
=
self
.
use_ssl
)
conn
=
Connection
(
server
,
self
.
bind_dn
,
self
.
password
)
conn
.
bind
()
return
conn
def
get_search_user_items
(
self
):
conn
=
self
.
get_connection
()
user_items
=
[]
search_ougroup
=
str
(
self
.
search_ougroup
)
.
split
(
"|"
)
for
search_ou
in
search_ougroup
:
ok
=
conn
.
search
(
search_ou
,
self
.
search_filter
%
({
"user"
:
"*"
}),
attributes
=
list
(
self
.
attr_map
.
values
())
)
if
not
ok
:
error
=
_
(
"Search no entry matched in ou {}"
.
format
(
search_ou
))
raise
LDAPOUGroupException
(
error
)
for
entry
in
conn
.
entries
:
user_item
=
self
.
_ldap_entry_to_user_item
(
entry
)
user
=
self
.
get_user_by_username
(
user_item
[
'username'
])
user_item
[
'existing'
]
=
bool
(
user
)
user_items
.
append
(
user_item
)
return
user_items
def
sync_users
(
self
,
username_set
):
user_items
=
self
.
get_search_user_items
()
if
username_set
:
user_items
=
[
u
for
u
in
user_items
if
u
[
'username'
]
in
username_set
]
def
sync_users
(
self
,
username_list
):
user_items
=
self
.
search_filter_user_items
(
username_list
)
result
=
self
.
create_or_update_users
(
user_items
)
return
result
apps/settings/views.py
View file @
b237cbb2
...
...
@@ -6,7 +6,7 @@ from django.utils.translation import ugettext as _
from
common.permissions
import
SuperUserRequiredMixin
from
common
import
utils
from
.forms
import
EmailSettingForm
,
LDAPSettingForm
,
BasicSettingForm
,
\
TerminalSettingForm
,
SecuritySettingForm
TerminalSettingForm
,
SecuritySettingForm
,
EmailContentSettingForm
class
BasicSettingView
(
SuperUserRequiredMixin
,
TemplateView
):
...
...
@@ -166,3 +166,29 @@ class SecuritySettingView(SuperUserRequiredMixin, TemplateView):
context
=
self
.
get_context_data
()
context
.
update
({
"form"
:
form
})
return
render
(
request
,
self
.
template_name
,
context
)
class
EmailContentSettingView
(
SuperUserRequiredMixin
,
TemplateView
):
template_name
=
"settings/email_content_setting.html"
form_class
=
EmailContentSettingForm
def
get_context_data
(
self
,
**
kwargs
):
context
=
{
'app'
:
_
(
'Settings'
),
'action'
:
_
(
'Email content setting'
),
'form'
:
self
.
form_class
(),
}
kwargs
.
update
(
context
)
return
super
()
.
get_context_data
(
**
kwargs
)
def
post
(
self
,
request
):
form
=
self
.
form_class
(
request
.
POST
)
if
form
.
is_valid
():
form
.
save
()
msg
=
_
(
"Update setting successfully"
)
messages
.
success
(
request
,
msg
)
return
redirect
(
'settings:email-content-setting'
)
else
:
context
=
self
.
get_context_data
()
context
.
update
({
"form"
:
form
})
return
render
(
request
,
self
.
template_name
,
context
)
apps/users/utils.py
View file @
b237cbb2
...
...
@@ -34,29 +34,24 @@ class AdminUserRequiredMixin(UserPassesTestMixin):
return
True
def
send_user_created_mail
(
user
):
subject
=
_
(
'Create account successfully'
)
recipient_list
=
[
user
.
email
]
message
=
_
(
"""
Hello
%(name)
s:
</br>
Your account has been created successfully
</br>
Username:
%(username)
s
</br>
<a href="
%(rest_password_url)
s?token=
%(rest_password_token)
s">click here to set your password</a>
</br>
This link is valid for 1 hour. After it expires, <a href="
%(forget_password_url)
s?email=
%(email)
s">request new one</a>
</br>
---
</br>
<a href="
%(login_url)
s">Login direct</a>
</br>
"""
)
%
{
'name'
:
user
.
name
,
def
construct_user_created_email_body
(
user
):
default_body
=
_
(
"""
<link rel="stylesheet" href="//maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css">
<p style="text-indent:2em;">
<span>
Username:
%(username)
s.
</span>
<span>
<a href="
%(rest_password_url)
s?token=
%(rest_password_token)
s">click here to set your password</a>
</span>
<span>
This link is valid for 1 hour. After it expires, <a href="
%(forget_password_url)
s?email=
%(email)
s">request new one</a>
</span>
<span>
<a href="
%(login_url)
s">Login direct</a>
</span>
</p>
"""
)
%
{
'username'
:
user
.
username
,
'rest_password_url'
:
reverse
(
'users:reset-password'
,
external
=
True
),
'rest_password_token'
:
user
.
generate_reset_token
(),
...
...
@@ -64,6 +59,32 @@ def send_user_created_mail(user):
'email'
:
user
.
email
,
'login_url'
:
reverse
(
'authentication:login'
,
external
=
True
),
}
if
settings
.
EMAIL_CUSTOM_USER_CREATED_BODY
:
custom_body
=
'<p style="text-indent:2em">'
+
settings
.
EMAIL_CUSTOM_USER_CREATED_BODY
+
'</p>'
else
:
custom_body
=
''
body
=
custom_body
+
default_body
return
body
def
send_user_created_mail
(
user
):
recipient_list
=
[
user
.
email
]
subject
=
_
(
'Create account successfully'
)
if
settings
.
EMAIL_CUSTOM_USER_CREATED_SUBJECT
:
subject
=
settings
.
EMAIL_CUSTOM_USER_CREATED_SUBJECT
honorific
=
'<p>'
+
_
(
'Hello
%(name)
s'
)
%
{
'name'
:
user
.
name
}
+
':</p>'
if
settings
.
EMAIL_CUSTOM_USER_CREATED_HONORIFIC
:
honorific
=
'<p>'
+
settings
.
EMAIL_CUSTOM_USER_CREATED_HONORIFIC
+
':</p>'
body
=
construct_user_created_email_body
(
user
)
signature
=
'<p style="float:right">jumpserver</p>'
if
settings
.
EMAIL_CUSTOM_USER_CREATED_SIGNATURE
:
signature
=
'<p style="float:right">'
+
settings
.
EMAIL_CUSTOM_USER_CREATED_SIGNATURE
+
'</p>'
message
=
honorific
+
body
+
signature
if
settings
.
DEBUG
:
try
:
print
(
message
)
...
...
@@ -313,3 +334,13 @@ def is_need_unblock(key_block):
if
not
cache
.
get
(
key_block
):
return
False
return
True
def
construct_user_email
(
username
,
email
):
if
'@'
not
in
email
:
if
'@'
in
username
:
email
=
username
else
:
email
=
'{}@{}'
.
format
(
username
,
settings
.
EMAIL_SUFFIX
)
return
email
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment