A simple connector pool for python-ldap and related LDAP libraries.
Go to file
Takashi Kajinami ebf3206892 Remove Python 3.8 support
Python 3.8 was removed from the tested runtimes for 2024.2[1] and has
not been tested since then.

Also add Python 3.12 which is part of the tested runtimes for 2025.1.
Now unit tests job with Python 3.12 is voting.

[1] https://governance.openstack.org/tc/reference/runtimes/2024.2.html

Change-Id: I657fa65af42e41ca2f57b726cc70a7fc2569e3d9
2024-10-24 22:30:00 +09:00
doc Remove old excludes 2024-04-30 18:17:29 +09:00
ldappool Retry or failover when using TLS 2024-08-08 09:28:57 -07:00
releasenotes Remove Python 3.8 support 2024-10-24 22:30:00 +09:00
.gitignore Switch to stestr 2018-07-17 08:17:25 +07:00
.gitreview OpenDev Migration Patch 2019-04-19 19:40:48 +00:00
.stestr.conf Switch to stestr 2018-07-17 08:17:25 +07:00
.zuul.yaml Update CI to use unversioned jobs template 2022-07-16 22:58:20 +09:00
bindep.txt Add bindep.txt 2019-07-03 12:29:11 -07:00
CHANGES.rst starting 1.1 2012-02-27 23:08:32 +01:00
CONTRIBUTORS preparing 1.0 2012-02-27 23:05:12 +01:00
MANIFEST.in preparing 1.0 2012-02-27 23:05:12 +01:00
README.rst Allow pool status to be printed as a table 2018-11-02 06:43:16 -07:00
requirements.txt Remove usage of six library 2023-05-23 10:30:49 +02:00
setup.cfg Remove Python 3.8 support 2024-10-24 22:30:00 +09:00
setup.py Cleanup py27 support 2020-04-05 09:37:51 +02:00
test-requirements.txt Remove old excludes 2024-04-30 18:17:29 +09:00
tox.ini Fix pep8 gate 2023-05-05 08:59:21 -07:00

ldappool

A simple connector pool for python-ldap.

The pool keeps LDAP connectors alive and let you reuse them, drastically reducing the time spent to initiate a ldap connection.

The pool has useful features like:

  • transparent reconnection on failures or server restarts
  • configurable pool size and connectors timeouts
  • configurable max lifetime for connectors
  • a context manager to simplify acquiring and releasing a connector

You need python-ldap in order to use this library

Quickstart

To work with the pool, you just need to create it, then use it as a context manager with the connection method:

from ldappool import ConnectionManager

cm = ConnectionManager('ldap://localhost')

with cm.connection('uid=adminuser,ou=logins,dc=mozilla', 'password') as conn:
    .. do something with conn ..

The connector returned by connection is a LDAPObject, that's binded to the server. See https://pypi.org/project/python-ldap/ for details on how to use a connector.

It is possible to check the state of the pool by representing the pool as a string:

from ldappool import ConnectionManager

cm = ConnectionManager('ldap://localhost', size=2)

.. do something with cm ..

print(cm)

This will result in output similar to this table:

+--------------+-----------+----------+------------------+--------------------+------------------------------+
| Slot (2 max) | Connected |  Active  |       URI        | Lifetime (600 max) |           Bind DN            |
+--------------+-----------+----------+------------------+--------------------+------------------------------+
|      1       | connected | inactive | ldap://localhost |  0.00496101379395  | uid=tuser,dc=example,dc=test |
|      2       | connected | inactive | ldap://localhost |  0.00532603263855  | uid=tuser,dc=example,dc=test |
+--------------+-----------+----------+------------------+--------------------+------------------------------+

ConnectionManager options

Here are the options you can use when instanciating the pool:

  • uri: ldap server uri [mandatory]
  • bind: default bind that will be used to bind a connector. default: None
  • passwd: default password that will be used to bind a connector. default: None
  • size: pool size. default: 10
  • retry_max: number of attempts when a server is down. default: 3
  • retry_delay: delay in seconds before a retry. default: .1
  • use_tls: activate TLS when connecting. default: False
  • timeout: connector timeout. default: -1
  • use_pool: activates the pool. If False, will recreate a connector each time. default: True

The uri option will accept a comma or whitespace separated list of LDAP server URIs to allow for failover behavior when connection errors are encountered. Connections will be attempted against the servers in order, with retry_max attempts per URI before failing over to the next server.

The connection method takes two options:

  • bind: bind used to connect. If None, uses the pool default's. default: None
  • passwd: password used to connect. If None, uses the pool default's. default: None