mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
merge
This commit is contained in:
@@ -29,7 +29,6 @@ import sys
|
||||
|
||||
from ipa.ipautil import *
|
||||
import service
|
||||
|
||||
import installutils
|
||||
|
||||
SERVER_ROOT_64 = "/usr/lib64/dirsrv"
|
||||
@@ -188,7 +187,7 @@ class DsInstance(service.Service):
|
||||
try:
|
||||
run(args)
|
||||
logging.debug("done adding user")
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
logging.critical("failed to add user %s" % e)
|
||||
|
||||
def __create_instance(self):
|
||||
@@ -206,13 +205,13 @@ class DsInstance(service.Service):
|
||||
try:
|
||||
run(args)
|
||||
logging.debug("completed creating ds instance")
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
logging.critical("failed to restart ds instance %s" % e)
|
||||
logging.debug("restarting ds instance")
|
||||
try:
|
||||
self.restart()
|
||||
logging.debug("done restarting ds instance")
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
print "failed to restart ds instance", e
|
||||
logging.debug("failed to restart ds instance %s" % e)
|
||||
|
||||
@@ -233,7 +232,7 @@ class DsInstance(service.Service):
|
||||
memberof_fd = write_tmp_file(memberof_txt)
|
||||
try:
|
||||
ldap_mod(memberof_fd, "cn=Directory Manager", self.dm_password)
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
logging.critical("Failed to load memberof-conf.ldif: %s" % str(e))
|
||||
memberof_fd.close()
|
||||
|
||||
@@ -243,7 +242,7 @@ class DsInstance(service.Service):
|
||||
memberof_fd = write_tmp_file(memberof_txt)
|
||||
try:
|
||||
ldap_mod(memberof_fd, "cn=Directory Manager", self.dm_password)
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
logging.critical("Failed to load memberof-conf.ldif: %s" % str(e))
|
||||
memberof_fd.close()
|
||||
|
||||
@@ -253,7 +252,7 @@ class DsInstance(service.Service):
|
||||
referint_fd = write_tmp_file(referint_txt)
|
||||
try:
|
||||
ldap_mod(referint_fd, "cn=Directory Manager", self.dm_password)
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
print "Failed to load referint-conf.ldif", e
|
||||
referint_fd.close()
|
||||
|
||||
@@ -263,7 +262,7 @@ class DsInstance(service.Service):
|
||||
dna_fd = write_tmp_file(dna_txt)
|
||||
try:
|
||||
ldap_mod(dna_fd, "cn=Directory Manager", self.dm_password)
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
print "Failed to load dna-conf.ldif", e
|
||||
dna_fd.close()
|
||||
|
||||
@@ -273,7 +272,7 @@ class DsInstance(service.Service):
|
||||
dna_fd = write_tmp_file(dna_txt)
|
||||
try:
|
||||
ldap_mod(dna_fd, "cn=Directory Manager", self.dm_password)
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
print "Failed to configure Posix uid/gid generation with dna-posix.ldif", e
|
||||
dna_fd.close()
|
||||
|
||||
@@ -283,7 +282,7 @@ class DsInstance(service.Service):
|
||||
master_fd = write_tmp_file(master_txt)
|
||||
try:
|
||||
ldap_mod(master_fd, "cn=Directory Manager", self.dm_password)
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
print "Failed to add master-entry.ldif", e
|
||||
master_fd.close()
|
||||
|
||||
@@ -295,7 +294,7 @@ class DsInstance(service.Service):
|
||||
try:
|
||||
run(args)
|
||||
logging.debug("done configuring ssl for ds instance")
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
logging.critical("Failed to configure ssl in ds instance %s" % e)
|
||||
|
||||
def __add_default_layout(self):
|
||||
@@ -308,7 +307,7 @@ class DsInstance(service.Service):
|
||||
try:
|
||||
run(args)
|
||||
logging.debug("done adding default ds layout")
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
print "Failed to add default ds layout", e
|
||||
logging.critical("Failed to add default ds layout %s" % e)
|
||||
|
||||
@@ -322,7 +321,7 @@ class DsInstance(service.Service):
|
||||
try:
|
||||
run(args)
|
||||
logging.debug("done adding/updating indeces")
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
logging.critical("Failed to add/update indeces %s" % str(e))
|
||||
|
||||
def __certmap_conf(self):
|
||||
@@ -347,7 +346,7 @@ class DsInstance(service.Service):
|
||||
try:
|
||||
run(args)
|
||||
logging.debug("ldappasswd done")
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
print "Unable to set admin password", e
|
||||
logging.debug("Unable to set admin password %s" % e)
|
||||
|
||||
|
||||
@@ -86,7 +86,7 @@ class HTTPInstance(service.Service):
|
||||
if (os.path.exists('/usr/sbin/selinuxenabled')):
|
||||
run(["/usr/sbin/selinuxenabled"])
|
||||
selinux=1
|
||||
except subprocess.CalledProcessError:
|
||||
except ipautil.CalledProcessError:
|
||||
# selinuxenabled returns 1 if not enabled
|
||||
pass
|
||||
|
||||
|
||||
@@ -33,7 +33,6 @@ import time
|
||||
import shutil
|
||||
|
||||
import service
|
||||
from ipa.ipautil import *
|
||||
from ipa import ipaerror
|
||||
|
||||
import ipaldap
|
||||
@@ -47,6 +46,7 @@ import pyasn1.codec.ber.encoder
|
||||
import pyasn1.codec.ber.decoder
|
||||
import struct
|
||||
import base64
|
||||
from ipa.ipautil import *
|
||||
|
||||
def host_to_domain(fqdn):
|
||||
s = fqdn.split(".")
|
||||
@@ -89,7 +89,7 @@ class KrbInstance(service.Service):
|
||||
self.host = host_name.split(".")[0]
|
||||
self.ip = socket.gethostbyname(host_name)
|
||||
self.domain = host_to_domain(host_name)
|
||||
self.suffix = realm_to_suffix(self.realm)
|
||||
self.suffix = realm_to_suffix(self.realm)
|
||||
self.kdc_password = ipa_generate_password()
|
||||
self.admin_password = admin_password
|
||||
|
||||
@@ -133,7 +133,7 @@ class KrbInstance(service.Service):
|
||||
|
||||
self.start_creation(11, "Configuring Kerberos KDC")
|
||||
|
||||
self.__configure_kdc_account_password()
|
||||
self.__configure_kdc_account_password()
|
||||
self.__configure_sasl_mappings()
|
||||
self.__add_krb_entries()
|
||||
self.__create_instance()
|
||||
@@ -245,7 +245,7 @@ class KrbInstance(service.Service):
|
||||
kerberos_fd = write_tmp_file(kerberos_txt)
|
||||
try:
|
||||
ldap_mod(kerberos_fd, "cn=Directory Manager", self.admin_password)
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
logging.critical("Failed to load kerberos.ldif: %s" % str(e))
|
||||
kerberos_fd.close()
|
||||
|
||||
@@ -254,7 +254,7 @@ class KrbInstance(service.Service):
|
||||
aci_fd = write_tmp_file(aci_txt)
|
||||
try:
|
||||
ldap_mod(aci_fd, "cn=Directory Manager", self.admin_password)
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
logging.critical("Failed to load default-aci.ldif: %s" % str(e))
|
||||
aci_fd.close()
|
||||
|
||||
@@ -291,7 +291,7 @@ class KrbInstance(service.Service):
|
||||
args = ["/usr/kerberos/sbin/kdb5_ldap_util", "-D", "uid=kdc,cn=sysaccounts,cn=etc,"+self.suffix, "-w", self.kdc_password, "create", "-s", "-P", self.master_password, "-r", self.realm, "-subtrees", self.suffix, "-sscope", "sub"]
|
||||
try:
|
||||
run(args)
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
print "Failed to populate the realm structure in kerberos", e
|
||||
|
||||
def __write_stash_from_ds(self):
|
||||
@@ -322,7 +322,7 @@ class KrbInstance(service.Service):
|
||||
extop_fd = write_tmp_file(extop_txt)
|
||||
try:
|
||||
ldap_mod(extop_fd, "cn=Directory Manager", self.admin_password)
|
||||
except subprocess.CalledProcessError, e:
|
||||
except ipautil.CalledProcessError, e:
|
||||
logging.critical("Failed to load pwd-extop-conf.ldif: %s" % str(e))
|
||||
extop_fd.close()
|
||||
|
||||
|
||||
Reference in New Issue
Block a user