mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-26 00:41:25 -06:00
a1f260d021
The dnssec and secrets subpackages and the p11helper module depend on ipaplatform. Move them to ipaserver as they are used only on the server. https://fedorahosted.org/freeipa/ticket/6474 Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
116 lines
4.4 KiB
Python
116 lines
4.4 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
# Copyright (C) 2014 FreeIPA Contributors see COPYING for license
|
|
#
|
|
"""
|
|
This script implements a syncrepl consumer which syncs data from server
|
|
to a local dict.
|
|
"""
|
|
|
|
# Import the python-ldap modules
|
|
import ldap
|
|
# Import specific classes from python-ldap
|
|
from ldap.cidict import cidict
|
|
from ldap.ldapobject import ReconnectLDAPObject
|
|
from ldap.syncrepl import SyncreplConsumer
|
|
|
|
from ipapython import ipa_log_manager
|
|
|
|
|
|
class SyncReplConsumer(ReconnectLDAPObject, SyncreplConsumer):
|
|
"""
|
|
Syncrepl Consumer interface
|
|
"""
|
|
|
|
def __init__(self, *args, **kwargs):
|
|
self.log = ipa_log_manager.log_mgr.get_logger(self)
|
|
# Initialise the LDAP Connection first
|
|
ldap.ldapobject.ReconnectLDAPObject.__init__(self, *args, **kwargs)
|
|
# Now prepare the data store
|
|
self.__data = cidict()
|
|
self.__data['uuids'] = cidict()
|
|
# We need this for later internal use
|
|
self.__presentUUIDs = cidict()
|
|
|
|
def close_db(self):
|
|
# This is useless for dict
|
|
pass
|
|
|
|
def syncrepl_get_cookie(self):
|
|
if 'cookie' in self.__data:
|
|
cookie = self.__data['cookie']
|
|
self.log.debug('Current cookie is: %s', cookie)
|
|
return cookie
|
|
else:
|
|
self.log.debug('Current cookie is: None (not received yet)')
|
|
|
|
def syncrepl_set_cookie(self, cookie):
|
|
self.log.debug('New cookie is: %s', cookie)
|
|
self.__data['cookie'] = cookie
|
|
|
|
def syncrepl_entry(self, dn, attributes, uuid):
|
|
attributes = cidict(attributes)
|
|
# First we determine the type of change we have here
|
|
# (and store away the previous data for later if needed)
|
|
previous_attributes = cidict()
|
|
if uuid in self.__data['uuids']:
|
|
change_type = 'modify'
|
|
previous_attributes = self.__data['uuids'][uuid]
|
|
else:
|
|
change_type = 'add'
|
|
# Now we store our knowledge of the existence of this entry
|
|
# (including the DN as an attribute for convenience)
|
|
attributes['dn'] = dn
|
|
self.__data['uuids'][uuid] = attributes
|
|
# Debugging
|
|
self.log.debug('Detected %s of entry: %s %s', change_type, dn, uuid)
|
|
if change_type == 'modify':
|
|
self.application_sync(uuid, dn, attributes, previous_attributes)
|
|
else:
|
|
self.application_add(uuid, dn, attributes)
|
|
|
|
def syncrepl_delete(self, uuids):
|
|
# Make sure we know about the UUID being deleted, just in case...
|
|
uuids = [uuid for uuid in uuids if uuid in self.__data['uuids']]
|
|
# Delete all the UUID values we know of
|
|
for uuid in uuids:
|
|
attributes = self.__data['uuids'][uuid]
|
|
dn = attributes['dn']
|
|
self.log.debug('Detected deletion of entry: %s %s', dn, uuid)
|
|
self.application_del(uuid, dn, attributes)
|
|
del self.__data['uuids'][uuid]
|
|
|
|
def syncrepl_present(self, uuids, refreshDeletes=False):
|
|
# If we have not been given any UUID values,
|
|
# then we have received all the present controls...
|
|
if uuids is None:
|
|
# We only do things if refreshDeletes is false
|
|
# as the syncrepl extension will call syncrepl_delete instead
|
|
# when it detects a delete notice
|
|
if refreshDeletes is False:
|
|
deletedEntries = [uuid for uuid in self.__data['uuids'].keys()
|
|
if uuid not in self.__presentUUIDs]
|
|
self.syncrepl_delete(deletedEntries)
|
|
# Phase is now completed, reset the list
|
|
self.__presentUUIDs = {}
|
|
else:
|
|
# Note down all the UUIDs we have been sent
|
|
for uuid in uuids:
|
|
self.__presentUUIDs[uuid] = True
|
|
|
|
def application_add(self, uuid, dn, attributes):
|
|
self.log.info('Performing application add for: %s %s', dn, uuid)
|
|
self.log.debug('New attributes: %s', attributes)
|
|
return True
|
|
|
|
def application_sync(self, uuid, dn, attributes, previous_attributes):
|
|
self.log.info('Performing application sync for: %s %s', dn, uuid)
|
|
self.log.debug('Old attributes: %s', previous_attributes)
|
|
self.log.debug('New attributes: %s', attributes)
|
|
return True
|
|
|
|
def application_del(self, uuid, dn, previous_attributes):
|
|
self.log.info('Performing application delete for: %s %s', dn, uuid)
|
|
self.log.debug('Old attributes: %s', previous_attributes)
|
|
return True
|