如何使用LDAP-Monitoring-Watchdog实时监控 LDAP 目录中记录修改

git clone https://github.com/MegaManSec/LDAP-Monitoring-Watchdog.git

$ sudo ./install.sh "https://hooks.slack.com/services/[...]"ldap-watchdog has been installed, the service is started, and log rotation is set up.

CONTROL_UUID = 'a71c6e4c-8881-4a03-95bf-4fc25d5e6359' # The entryUUID of an entry in the directory which must always have some type of modification.CONTROL_USER_ATTRIBUTE = '' # Specifically, if this is set, this is the attribute that must have changed.LDAP_SERVER = 'ldaps://ldaps.intra.lan' # The LDAP(S) server.BASE_DN = 'dc=mouse,dc=com' # The basename used by the directory.SEARCH_FILTER = '(&(|(objectClass=inetOrgPerson)(objectClass=groupOfNames)))'SEARCH_ATTRIBUTE = ['*', '+']  # replace with the attributes you want to retrieveREFRESH_RATE = 60 # Refresh the directory every 60 seconds.LDAP_USERNAME = 'Emily'LDAP_PASSWORD = 'qwerty123'USE_SSL = TrueDISABLE_COLOR_OUTPUT = FalseSLACK_BULLETPOINT = ' u2022   ' # Prepend this to each change if sending notifications via Slack.IGNORED_UUIDS = ['e191c564-6e6d-42c1-ae51-bda0509fe846', '8655e0d9-ecdc-46ce-ba42-1fa3dfbf5faa'] # Ignore any changes users with these UUIDs.IGNORED_ATTRIBUTES = ['modifyTimestamp', 'phoneNumber', 'officeLocation', 'gecos'] # Ignore any modifications of these attributes.CONDITIONAL_IGNORED_ATTRIBUTES = {  'objectClass': ['posixAccount'], # Ignore changes to the objectClass attribute if the new or old value is posixAccount.  'memberOf': ['cn=mailing-list-user,ou=Accessgroups,dc=mouse,dc=com', 'cn=interns,ou=Accessgroups,dc=mouse,dc=com'], # Ignore changes to the memberOf attribute if the new or old value is either "cn=mailing-list-user,ou=Accessgroups,dc=mouse,dc=com" or "cn=interns,ou=Accessgroups,dc=mouse,dc=com".  'organizationalStatus': ['researcher'], # Ignore changes to the organizationalStatus attribute if the new or old value is 'researcher'.}SLACK_WEBHOOK = os.getenv('SLACK_WEBHOOK_URL') # Use a Slack webhook, and retrieve it from the environmental value.

python3 ldap-watchdog.py