IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Add usercategory and hostcategory and fix displaying members in netgroup_show

Browse Source 
ticket 443
This commit is contained in:
Rob Crittenden 2010-11-04 15:19:14 -04:00
parent a874d5f8e5
commit 537f4074d1
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
ipalib/plugins/netgroup.py
View File

@ -42,8 +42,10 @@ EXAMPLES:
""" """
from ipalib import api, errors from ipalib import api, errors
from ipalib import Str, StrEnum
from ipalib.plugins.baseldap import * from ipalib.plugins.baseldap import *
from ipalib import _, ngettext from ipalib import _, ngettext
from ipalib.plugins.hbac import is_all
output_params = ( output_params = (
@ -72,6 +74,7 @@ class netgroup(LDAPObject):
default_attributes = [ default_attributes = [
'cn', 'description', 'memberof', 'externalhost', 'nisdomainname', 'cn', 'description', 'memberof', 'externalhost', 'nisdomainname',
'memberuser', 'memberhost', 'member', 'memberindirect', 'memberuser', 'memberhost', 'member', 'memberindirect',
'usercategory', 'hostcategory',
] ]
uuid_attribute = 'ipauniqueid' uuid_attribute = 'ipauniqueid'
rdn_attribute = 'ipauniqueid' rdn_attribute = 'ipauniqueid'
@ -107,6 +110,18 @@ class netgroup(LDAPObject):
doc=_('IPA unique ID'), doc=_('IPA unique ID'),
flags=['no_create', 'no_update'], flags=['no_create', 'no_update'],
), ),
StrEnum('usercategory?',
cli_name='usercat',
label=_('User category'),
doc=_('User category the rule applies to'),
values=(u'all', ),
),
StrEnum('hostcategory?',
cli_name='hostcat',
label=_('Host category'),
doc=_('Host category the rule applies to'),
values=(u'all', ),
),
) )
api.register(netgroup) api.register(netgroup)
@ -141,6 +156,14 @@ class netgroup_mod(LDAPUpdate):
has_output_params = LDAPUpdate.has_output_params + output_params has_output_params = LDAPUpdate.has_output_params + output_params
msg_summary = _('Modified netgroup "%(value)s"') msg_summary = _('Modified netgroup "%(value)s"')
def pre_callback(self, ldap, dn, entry_attrs, attrs_list, *keys, **options):
(dn, entry_attrs) = ldap.get_entry(dn, attrs_list)
if is_all(options, 'usercategory') and 'memberuser' in entry_attrs:
raise errors.MutuallyExclusiveError(reason="user category cannot be set to 'all' while there are allowed users")
if is_all(options, 'hostcategory') and 'memberhost' in entry_attrs:
raise errors.MutuallyExclusiveError(reason="host category cannot be set to 'all' while there are allowed hosts")
return dn
api.register(netgroup_mod) api.register(netgroup_mod)
@ -160,6 +183,7 @@ class netgroup_show(LDAPRetrieve):
""" """
Display information about a netgroup. Display information about a netgroup.
""" """
has_output_params = LDAPRetrieve.has_output_params + output_params
api.register(netgroup_show) api.register(netgroup_show)