IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

trustdomain-find: report status of the (sub)domain

Browse Source 
Show status of each enumerated domain

trustdomain-find shows list of domains associated with the trust.
Each domain except the trust forest root can be enabled or disabled
with the help of trustdomain-enable and trustdomain-disable commands.

https://fedorahosted.org/freeipa/ticket/4096
This commit is contained in:
Alexander Bokovoy 2014-01-15 15:42:10 +02:00 committed by Martin Kosek
parent 0e2cda9da7
commit 0cad0fa111
1 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
ipalib/plugins/trust.py
View File

@ -21,7 +21,7 @@
from ipalib.plugins.baseldap import * from ipalib.plugins.baseldap import *
from ipalib.plugins.dns import dns_container_exists from ipalib.plugins.dns import dns_container_exists
from ipapython.ipautil import realm_to_suffix from ipapython.ipautil import realm_to_suffix
from ipalib import api, Str, StrEnum, Password, _, ngettext from ipalib import api, Str, StrEnum, Password, Bool, _, ngettext
from ipalib import Command from ipalib import Command
from ipalib import errors from ipalib import errors
from ldap import SCOPE_SUBTREE from ldap import SCOPE_SUBTREE
@ -1183,8 +1183,24 @@ api.register(trustdomain)
class trustdomain_find(LDAPSearch): class trustdomain_find(LDAPSearch):
__doc__ = _('Search domains of the trust') __doc__ = _('Search domains of the trust')
has_output_params = LDAPSearch.has_output_params + (
Flag('domain_enabled', label= _('Domain enabled')),
)
def pre_callback(self, ldap, filters, attrs_list, base_dn, scope, *args, **options): def pre_callback(self, ldap, filters, attrs_list, base_dn, scope, *args, **options):
return (filters, base_dn, ldap.SCOPE_SUBTREE) return (filters, base_dn, ldap.SCOPE_SUBTREE)
def post_callback(self, ldap, entries, truncated, *args, **options):
trust_dn = self.obj.get_dn(args[0], trust_type=u'ad')
trust_entry = ldap.get_entry(trust_dn)
for entry in entries:
sid = entry['ipanttrusteddomainsid'][0]
if sid in trust_entry['ipantsidblacklistincoming']:
entry['domain_enabled'] = [False]
else:
entry['domain_enabled'] = [True]
return truncated
api.register(trustdomain_find) api.register(trustdomain_find)
class trustdomain_mod(LDAPUpdate): class trustdomain_mod(LDAPUpdate):