IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Make hosts more like real services so we can issue certs for host principals

Browse Source 
This patch should make joining a client to the domain and using certmonger
to get an initial certificate work.
This commit is contained in:
Rob Crittenden
2009-12-16 16:04:53 -05:00
committed by Jason Gerard DeRose
parent 585540e0a2
commit c3f9ec14d9
5 changed files with 70 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
ipaserver/plugins/join.py
View File

@@ -91,13 +91,14 @@ class join(Command):
try:
# First see if the host exists
kw = {'fqdn': hostname, 'all': True}
(dn, attrs_list) = api.Command['host_show'](**kw)
attrs_list = api.Command['host_show'](**kw)['result']
dn = attrs_list['dn']
# If no principal name is set yet we need to try to add
# one.
if 'krbprincipalname' not in attrs_list:
service = "host/%s@%s" % (hostname, api.env.realm)
(d, a) = api.Command['host_mod'](hostname, krbprincipalname=service)
api.Command['host_mod'](hostname, krbprincipalname=service)
# It exists, can we write the password attributes?
allowed = ldap.can_write(dn, 'krblastpwdchange')
@@ -105,9 +106,11 @@ class join(Command):
raise errors.ACIError(info="Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry '%s'." % dn)
kw = {'fqdn': hostname, 'all': True}
(dn, attrs_list) = api.Command['host_show'](**kw)
attrs_list = api.Command['host_show'](**kw)['result']
dn = attrs_list['dn']
except errors.NotFound:
(dn, attrs_list) = api.Command['host_add'](hostname)
attrs_list = api.Command['host_add'](hostname)['result']
dn = attrs_list['dn']
return (dn, attrs_list)