{"id":11367,"date":"2024-11-13T19:25:00","date_gmt":"2024-11-14T00:25:00","guid":{"rendered":"https:\/\/www.rushworth.us\/lisa\/?p=11367"},"modified":"2025-01-15T16:59:45","modified_gmt":"2025-01-15T21:59:45","slug":"python-getting-active-directory-subnets","status":"publish","type":"post","link":"https:\/\/www.rushworth.us\/lisa\/?p=11367","title":{"rendered":"Python: Getting Active Directory Subnets"},"content":{"rendered":"\n

Like my script that pulls the AD site information<\/a> – this lets me see what subnets are defined and which sites are assigned to those subnets. I was able to quickly confirm that the devices that had problems communicating with Active Directory don’t<\/em> have a site defined. Way back in 2000, we created a “catch all” 10.0.0.0\/8 subnet and assigned it to the user authentication site. New networks on a whole different addressing scheme don’t have a site assignment. It should<\/em> still work, but the application in question has historically had issues with going the “Ok, list ’em all” route. <\/p>\n\n\n

\nfrom ldap3 import Server, Connection, ALL, SUBTREE, Tls\nimport ssl\nimport getpass\n\n# Attempt to import USERNAME and PASSWORD from config.py\ntry:\n    from config import USERNAME, PASSWORD\nexcept ImportError:\n    USERNAME, PASSWORD = None, None\n\n# Define constants\nLDAP_SERVER = 'ad.example.com'\nLDAP_PORT = 636\n\ndef get_subnets_and_sites(username, password):\n    # Set up TLS configuration\n    tls_configuration = Tls(validate=ssl.CERT_REQUIRED, version=ssl.PROTOCOL_TLSv1_2)\n\n    # Connect to the LDAP server\n    server = Server(LDAP_SERVER, port=LDAP_PORT, use_ssl=True, tls=tls_configuration, get_info=ALL)\n    connection = Connection(server, user=username, password=password, authentication='SIMPLE', auto_bind=True)\n\n    # Define the search base for subnets\n    search_base = 'CN=Subnets,CN=Sites,CN=Configuration,DC=example,DC=com'  # Change this to match your domain's DN\n    search_filter = '(objectClass=subnet)'  # Filter to find all subnet objects\n    search_attributes = ['cn', 'siteObject']  # Retrieve the common name and site object references\n\n    # Perform the search\n    connection.search(search_base, search_filter, SUBTREE, attributes=search_attributes)\n\n    # Extract and return subnets and their site assignments\n    subnets_sites = []\n    for entry in connection.entries:\n        subnet_name = entry.cn.value\n        site_dn = entry.siteObject.value if entry.siteObject else "No site assigned"\n        subnets_sites.append((subnet_name, site_dn))\n\n    return subnets_sites\n\ndef print_subnets_and_sites(subnets_sites):\n    if subnets_sites:\n        print("\\nSubnets and their Site Assignments:")\n        for subnet, site in subnets_sites:\n            print(f"Subnet: {subnet}, Site: {site}")\n    else:\n        print("No subnets found in the domain.")\n\ndef main():\n    # Prompt for username and password if not available in config.py\n    username = USERNAME if USERNAME else input("Enter your LDAP username: ")\n    password = PASSWORD if PASSWORD else getpass.getpass("Enter your LDAP password: ")\n\n    subnets_sites = get_subnets_and_sites(username, password)\n    print_subnets_and_sites(subnets_sites)\n\nif __name__ == "__main__":\n    main()\n<\/pre><\/div>","protected":false},"excerpt":{"rendered":"
Like my script that pulls the AD site information – this lets me see what subnets are defined and which sites are assigned to those subnets. I was able to quickly confirm that the devices that had problems communicating with Active Directory don’t have a site defined. Way back in 2000, we created a “catch …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1945],"tags":[],"class_list":["post-11367","post","type-post","status-publish","format-standard","hentry","category-python"],"_links":{"self":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/11367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11367"}],"version-history":[{"count":1,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/11367\/revisions"}],"predecessor-version":[{"id":11368,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/11367\/revisions\/11368"}],"wp:attachment":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}