=========
libnfldap
=========

A Python module to generate IPTables and IPSet rules from LDAP records.
See example.py for a demo.

Installation
------------

Use PyPi:

.. code:: bash

	$ sudo pip install libnfldap

Or build a RPM using:

.. code:: bash

	$ python setup.py bdist_rpm

The latter will include an RPM dependency for `python-ldap`.

Example
-------

The script at `example_allusers.py` will build iptables and ipset rules for all
users in LDAP. You can provide the script an ldap filter as argv[1] to limit the
scope.

.. code:: bash

	$ time python example_allusers.py '(uid=jvehent)'
	IPTables rules written in /tmp/tmpT7JgOW
	IPSet rules written in /tmp/tmpJYtWM5

	real    0m0.605s
	user    0m0.061s
	sys     0m0.014s

`example.py` does something similar but for a single user identified by its
uidNumber (unix user ID).

.. code:: bash

	$ python example.py 2297
	#Generating rules for user ID 1664
	#====== ACL details ======
	jvehent has access to .....

Authors
-------
Julien Vehent & Guillaume Destuynder (@ mozilla)