2008-10-02 20:09:13 -05:00
|
|
|
# Authors:
|
|
|
|
# Jason Gerard DeRose <jderose@redhat.com>
|
|
|
|
#
|
|
|
|
# Copyright (C) 2008 Red Hat
|
|
|
|
# see file 'COPYING' for use and warranty information
|
|
|
|
#
|
|
|
|
# This program is free software; you can redistribute it and/or
|
|
|
|
# modify it under the terms of the GNU General Public License as
|
|
|
|
# published by the Free Software Foundation; version 2 only
|
|
|
|
#
|
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
# GNU General Public License for more details.
|
|
|
|
#
|
|
|
|
# You should have received a copy of the GNU General Public License
|
|
|
|
# along with this program; if not, write to the Free Software
|
|
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
|
|
|
|
"""
|
|
|
|
Various utility functions.
|
|
|
|
"""
|
2008-10-27 01:23:43 -05:00
|
|
|
|
|
|
|
import os
|
|
|
|
import imp
|
2008-10-31 21:25:33 -05:00
|
|
|
import logging
|
|
|
|
import time
|
2009-02-18 16:12:27 -06:00
|
|
|
import socket
|
2010-10-08 12:15:03 -05:00
|
|
|
import re
|
2010-08-10 15:40:00 -05:00
|
|
|
from types import NoneType
|
|
|
|
|
2009-04-23 07:51:59 -05:00
|
|
|
from ipalib import errors
|
2010-07-22 13:16:22 -05:00
|
|
|
from ipapython import dnsclient
|
2008-10-28 02:39:02 -05:00
|
|
|
|
2008-10-02 20:09:13 -05:00
|
|
|
|
2010-08-09 15:45:26 -05:00
|
|
|
def json_serialize(obj):
|
2010-08-10 15:40:00 -05:00
|
|
|
if isinstance(obj, (list, tuple)):
|
|
|
|
return [json_serialize(o) for o in obj]
|
|
|
|
if isinstance(obj, dict):
|
|
|
|
return dict((k, json_serialize(v)) for (k, v) in obj.iteritems())
|
|
|
|
if isinstance(obj, (bool, float, int, unicode, NoneType)):
|
|
|
|
return obj
|
|
|
|
if isinstance(obj, str):
|
|
|
|
return obj.decode('utf-8')
|
2010-08-09 15:45:26 -05:00
|
|
|
if not callable(getattr(obj, '__json__', None)):
|
|
|
|
# raise TypeError('%r is not JSON serializable')
|
|
|
|
return ''
|
2010-08-10 15:40:00 -05:00
|
|
|
return json_serialize(obj.__json__())
|
2010-08-09 15:45:26 -05:00
|
|
|
|
2008-10-22 16:54:04 -05:00
|
|
|
def get_current_principal():
|
|
|
|
try:
|
2010-09-10 14:57:40 -05:00
|
|
|
# krbV isn't necessarily available on client machines, fail gracefully
|
|
|
|
import krbV
|
2009-04-20 12:58:26 -05:00
|
|
|
return unicode(krbV.default_context().default_ccache().principal().name)
|
2010-09-10 14:57:40 -05:00
|
|
|
except ImportError:
|
|
|
|
raise RuntimeError('python-krbV is not available.')
|
2008-10-22 16:54:04 -05:00
|
|
|
except krbV.Krb5Error:
|
2009-04-20 12:58:26 -05:00
|
|
|
#TODO: do a kinit?
|
2009-04-23 07:51:59 -05:00
|
|
|
raise errors.CCacheError()
|
2008-10-27 01:23:43 -05:00
|
|
|
|
2009-02-18 16:12:27 -06:00
|
|
|
def get_fqdn():
|
|
|
|
fqdn = ""
|
|
|
|
try:
|
|
|
|
fqdn = socket.getfqdn()
|
|
|
|
except:
|
|
|
|
try:
|
|
|
|
fqdn = socket.gethostname()
|
|
|
|
except:
|
|
|
|
fqdn = ""
|
|
|
|
return fqdn
|
2008-10-27 01:23:43 -05:00
|
|
|
|
|
|
|
# FIXME: This function has no unit test
|
|
|
|
def find_modules_in_dir(src_dir):
|
|
|
|
"""
|
|
|
|
Iterate through module names found in ``src_dir``.
|
|
|
|
"""
|
2009-04-20 12:58:26 -05:00
|
|
|
if not (os.path.abspath(src_dir) == src_dir and os.path.isdir(src_dir)):
|
2008-10-27 01:23:43 -05:00
|
|
|
return
|
2009-04-20 12:58:26 -05:00
|
|
|
if os.path.islink(src_dir):
|
2008-10-27 01:23:43 -05:00
|
|
|
return
|
|
|
|
suffix = '.py'
|
|
|
|
for name in sorted(os.listdir(src_dir)):
|
|
|
|
if not name.endswith(suffix):
|
|
|
|
continue
|
2009-04-20 12:58:26 -05:00
|
|
|
pyfile = os.path.join(src_dir, name)
|
|
|
|
if os.path.islink(pyfile) or not os.path.isfile(pyfile):
|
2008-10-27 01:23:43 -05:00
|
|
|
continue
|
|
|
|
module = name[:-len(suffix)]
|
|
|
|
if module == '__init__':
|
|
|
|
continue
|
2009-02-12 03:10:12 -06:00
|
|
|
yield (module, pyfile)
|
2008-10-27 01:23:43 -05:00
|
|
|
|
|
|
|
|
|
|
|
# FIXME: This function has no unit test
|
|
|
|
def load_plugins_in_dir(src_dir):
|
|
|
|
"""
|
|
|
|
Import each Python module found in ``src_dir``.
|
|
|
|
"""
|
|
|
|
for module in find_modules_in_dir(src_dir):
|
|
|
|
imp.load_module(module, *imp.find_module(module, [src_dir]))
|
|
|
|
|
|
|
|
|
|
|
|
# FIXME: This function has no unit test
|
|
|
|
def import_plugins_subpackage(name):
|
|
|
|
"""
|
|
|
|
Import everythig in ``plugins`` sub-package of package named ``name``.
|
|
|
|
"""
|
|
|
|
try:
|
|
|
|
plugins = __import__(name + '.plugins').plugins
|
|
|
|
except ImportError:
|
|
|
|
return
|
2009-04-20 12:58:26 -05:00
|
|
|
src_dir = os.path.dirname(os.path.abspath(plugins.__file__))
|
2008-10-27 01:23:43 -05:00
|
|
|
for name in find_modules_in_dir(src_dir):
|
|
|
|
full_name = '%s.%s' % (plugins.__name__, name)
|
|
|
|
__import__(full_name)
|
2008-10-31 19:17:08 -05:00
|
|
|
|
|
|
|
|
2008-10-31 21:25:33 -05:00
|
|
|
class LogFormatter(logging.Formatter):
|
|
|
|
"""
|
|
|
|
Log formatter that uses UTC for all timestamps.
|
|
|
|
"""
|
|
|
|
converter = time.gmtime
|
2008-11-13 22:07:47 -06:00
|
|
|
|
|
|
|
|
|
|
|
def make_repr(name, *args, **kw):
|
|
|
|
"""
|
|
|
|
Construct a standard representation of a class instance.
|
|
|
|
"""
|
|
|
|
args = [repr(a) for a in args]
|
|
|
|
kw = ['%s=%r' % (k, kw[k]) for k in sorted(kw)]
|
|
|
|
return '%s(%s)' % (name, ', '.join(args + kw))
|
2009-02-04 09:53:34 -06:00
|
|
|
|
|
|
|
def realm_to_suffix(realm_name):
|
|
|
|
s = realm_name.split(".")
|
|
|
|
terms = ["dc=" + x.lower() for x in s]
|
|
|
|
return ",".join(terms)
|
2010-07-22 13:16:22 -05:00
|
|
|
|
|
|
|
def validate_host_dns(log, fqdn):
|
|
|
|
"""
|
|
|
|
See if the hostname has a DNS A record.
|
|
|
|
"""
|
|
|
|
rs = dnsclient.query(fqdn + '.', dnsclient.DNS_C_IN, dnsclient.DNS_T_A)
|
|
|
|
if len(rs) == 0:
|
|
|
|
log.debug(
|
|
|
|
'IPA: DNS A record lookup failed for %s' % fqdn
|
|
|
|
)
|
|
|
|
raise errors.DNSNotARecordError()
|
|
|
|
else:
|
|
|
|
log.debug(
|
|
|
|
'IPA: found %d records for %s' % (len(rs), fqdn)
|
|
|
|
)
|
2010-10-08 12:15:03 -05:00
|
|
|
|
|
|
|
def isvalid_base64(data):
|
|
|
|
"""
|
|
|
|
Validate the incoming data as valid base64 data or not.
|
|
|
|
|
|
|
|
The character set must only include of a-z, A-Z, 0-9, + or / and
|
|
|
|
be padded with = to be a length divisible by 4 (so only 0-2 =s are
|
|
|
|
allowed). Its length must be divisible by 4. White space is
|
|
|
|
not significant so it is removed.
|
|
|
|
|
|
|
|
This doesn't guarantee we have a base64-encoded value, just that it
|
|
|
|
fits the base64 requirements.
|
|
|
|
"""
|
|
|
|
|
|
|
|
data = ''.join(data.split())
|
|
|
|
|
|
|
|
if len(data) % 4 > 0 or \
|
|
|
|
re.match('^[a-zA-Z0-9\+\/]+\={0,2}$', data) is None:
|
|
|
|
return False
|
|
|
|
else:
|
|
|
|
return True
|