#!/usr/bin/python2
# coding=utf-8

import ldap
from proxmoxer import ProxmoxAPI

pve_hosts = ['10.3.1.1', '10.2.1.1', '10.1.1.1']
#pve_hosts = ['10.3.1.1']


l = ldap.initialize("ldap://10.3.2.32:389")
l.simple_bind_s("m.grebenkin@techgrow.local", "F5apmJ75GagMxc")
ldap_result = l.search("CN=Users,DC=techgrow,DC=local", ldap.SCOPE_SUBTREE,
                       "(&(objectClass=Person)(memberOf=CN=proxmox-admins,CN=Users,DC=techgrow,DC=local))", None)
res_type, data = l.result(ldap_result)
users = []
# res_type
for u in data:
    name = u[0].split(',')[0].split('=')[1]
    if u[1]['userAccountControl'][0] == '66048' or u[1]['userAccountControl'][0] == '512':
        users.append(name)

#print users

for host in pve_hosts:
    #print host
    proxmox = ProxmoxAPI(host, user='root@pam', password='Band@2014', verify_ssl=False)
    pve_users = proxmox.access.users.get()
    pve_usernames = []
    for u in pve_users:
        if 'techgrow.local' in u['userid']:
            pve_usernames.append(str(u['userid'].split('@')[0]))
    #print pve_usernames
    for u in users:
        userid = u + '@techgrow.local'
        if u not in pve_usernames:
            proxmox.access.users.post(userid=userid, groups='Admin')
    for u in pve_usernames:
        userid = u + '@techgrow.local'
        if u not in users:
            #print userid
            proxmox.access.users.delete(userid)