LDAP3 Python中属性修改“只读”错误的解决方案

from ldap3 import Connection, Server, SUBTREE, MODIFY_REPLACE, ALL_ATTRIBUTES, ALL_OPERATIONAL_ATTRIBUTES

# 假设已经建立了LDAP连接
# server = Server('your_ldap_server', port=389, use_ssl=False)
# conn = Connection(server, user='cn=admin,dc=test,dc=local', password='your_password', auto_bind=True)
# conn.start_tls() # 如果使用TLS

# 模拟一个已建立的连接对象
class MockLdapConnection:
    def __init__(self):
        self.entries = []
        self.result = None # 用于存储操作结果
        self.is_bound = True

    def search(self, search_base, search_filter, search_scope, attributes):
        print(f"Searching: {search_filter}")
        # 模拟搜索结果
        if "serialNumber=12345678901" in search_filter:
            # 模拟找到一个用户
            class MockEntry:
                def __init__(self):
                    self.entry_dn = 'cn=Test User,dc=test,dc=local'
                    self.sAMAccountName = MockAttribute('testuser')
                    self.givenName = MockAttribute('Test')
                    self.sn = MockAttribute('OldLastName')
                    self.serialNumber = MockAttribute('12345678901')
                    self.cn = MockAttribute('Test User')

                @property
                def entry_attributes_as_dict(self):
                    return {
                        'sAMAccountName': ['testuser'],
                        'givenName': ['Test'],
                        'sn': ['OldLastName'],
                        'serialNumber': ['12345678901'],
                        'cn': ['Test User']
                    }
            self.entries = [MockEntry()]
            return True
        self.entries = []
        return False

    def modify(self, dn, modifications):
        print(f"Attempting to modify DN: {dn} with modifications: {modifications}")
        # 模拟修改成功
        if dn == 'cn=Test User,dc=test,dc=local' and 'sn' in modifications:
            self.result = {'description': 'success', 'dn': dn}
            print("Modification successful (simulated).")
            return True
        else:
            self.result = {'description': 'operation error', 'dn': dn, 'message': 'Simulated error'}
            print("Modification failed (simulated).")
            return False

    def unbind(self):
        print("Unbinding connection.")
        self.is_bound = False

class MockAttribute:
    def __init__(self, value):
        self.value = value

# 假设 ldap_connection 已经是一个有效的 ldap3 Connection 对象
# 在此示例中，我们使用一个模拟对象
ldap_connection = MockLdapConnection()

def is_valid_serial_number(pesel):
    # 模拟PESEL验证逻辑
    return len(pesel) == 11 and pesel.isdigit()

while True:
    pesel = input("Wprowadź PESEL użytkownika dla którego chcesz zmienić nazwisko: ")
    if not is_valid_serial_number(pesel):
        print("Nieprawidłowy numer PESEL.")
        continue
    break

# 假设LDAP的搜索基准是 'dc=test,dc=local'
search_base = 'dc=test,dc=local'
search_filter = f'(serialNumber={pesel})'

ldap_connection.search(search_base=search_base, search_filter=search_filter, search_scope=SUBTREE, attributes=['sAMAccountName', 'givenName', 'sn', 'serialNumber', 'cn'])

if not ldap_connection.entries:
    print(f"未找到PESEL为 {pesel} 的用户。")
else:
    entry = ldap_connection.entries[0]
    dn = entry.entry_dn
    print(f"找到用户 DN: {dn}")

    new_last_name = input("Wprowadź nowe nazwisko: ")

    # 打印当前属性，确认获取到的值
    print(f"当前用户属性: {entry.entry_attributes_as_dict}")

    old_last_name = entry['sn'].value if 'sn' in entry.entry_attributes_as_dict else "无"
    print(f"Potwierdź, czy chcesz zmienić nazwisko dla użytkownika {entry.sAMAccountName.value} z {old_last_name} na {new_last_name}.")

    confirmation = input("1. Tak\n2. Nie\nWybierz opcję: ")

    if confirmation == '1':
        # 构建正确的修改字典
        modifications = {'sn': [(MODIFY_REPLACE, [new_last_name])]}

        # 执行修改操作，并检查结果
        if ldap_connection.modify(entry.entry_dn, modifications):
            print("Nazwisko użytkownika zostało zmienione.")
        else:
            print("Wystąpił błąd podczas zmiany nazwiska: ", ldap_connection.result)
    else:
        print("Anulowano zmianę nazwiska.")

ldap_connection.unbind()