Catch ldap.INSUFFICIENT_ACCESS exception for adding/removing key from…

… LDAP

bin/ssh-ldap-pubkey

@@ -119,6 +119,9 @@ class LdapSSH(object):
             raise ConfigError(
                 "LDAP server doesn't define schema for attribute: %s" % LDAP_PUBKEY_ATTR, 1)
 
+        except ldap.INSUFFICIENT_ACCESS:
+            raise InsufficientAccessError("No rights to add key for %s " % dn, 2)
+
     def find_and_remove_pubkeys(self, login, password, pattern):
         dn = self.find_dn_by_login(login)
         if password:
@@ -173,6 +176,9 @@ class LdapSSH(object):
         except ldap.NO_SUCH_ATTRIBUTE:
             raise NoPubKeyFoundError("No such public key exists: %s." % keyname(pubkey), 1)
 
+        except ldap.INSUFFICIENT_ACCESS:
+            raise InsufficientAccessError("No rights to remove key for %s " % dn, 2)
+
 
 class LdapConfig(object):
 
@@ -230,6 +236,7 @@ class Error(Exception):
 
 
 class ConfigError(Error): pass
+class InsufficientAccessError(Error): pass
 class InvalidCredentialsError(Error): pass
 class InvalidPubKeyError(Error): pass
 class LDAPConnectionError(Error): pass

setup.py

@@ -20,7 +20,7 @@
 
 setup(
     name='ssh-ldap-pubkey',
-    version='0.4.0',
+    version='0.4.1',
     url='https://github.com/jirutka/ssh-ldap-pubkey',
     description='Utility to manage SSH public keys stored in LDAP.',
     long_description=read_md('README.md'),