mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-28 01:41:14 -06:00
0f88f8fe88
This commit removes unused variables or rename variables as "expected to be unused" by using "_" prefix. This covers only cases where fix was easy or only one unused variable was in a module Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com> Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
79 lines
2.7 KiB
Python
79 lines
2.7 KiB
Python
#
|
|
# Copyright (C) 2014 FreeIPA Contributors see COPYING for license
|
|
#
|
|
|
|
from ipalib import Registry, errors
|
|
from ipalib import Updater
|
|
from ipapython.dn import DN
|
|
from ipapython.ipa_log_manager import root_logger
|
|
from ipaserver.install import sysupgrade
|
|
|
|
register = Registry()
|
|
|
|
|
|
@register()
|
|
class update_passync_privilege_check(Updater):
|
|
|
|
def execute(self, **options):
|
|
update_done = sysupgrade.get_upgrade_state('winsync', 'passsync_privilege_updated')
|
|
if update_done:
|
|
root_logger.debug("PassSync privilege update pre-check not needed")
|
|
return False, []
|
|
|
|
root_logger.debug("Check if there is existing PassSync privilege")
|
|
|
|
passsync_privilege_dn = DN(('cn','PassSync Service'),
|
|
self.api.env.container_privilege,
|
|
self.api.env.basedn)
|
|
|
|
ldap = self.api.Backend.ldap2
|
|
try:
|
|
ldap.get_entry(passsync_privilege_dn, [''])
|
|
except errors.NotFound:
|
|
root_logger.debug("PassSync privilege not found, this is a new update")
|
|
sysupgrade.set_upgrade_state('winsync', 'passsync_privilege_updated', False)
|
|
else:
|
|
root_logger.debug("PassSync privilege found, skip updating PassSync")
|
|
sysupgrade.set_upgrade_state('winsync', 'passsync_privilege_updated', True)
|
|
|
|
return False, []
|
|
|
|
|
|
@register()
|
|
class update_passync_privilege_update(Updater):
|
|
"""
|
|
Add PassSync user as a member of PassSync privilege, if it exists
|
|
"""
|
|
|
|
def execute(self, **options):
|
|
update_done = sysupgrade.get_upgrade_state('winsync', 'passsync_privilege_updated')
|
|
if update_done:
|
|
root_logger.debug("PassSync privilege update not needed")
|
|
return False, []
|
|
|
|
root_logger.debug("Add PassSync user as a member of PassSync privilege")
|
|
ldap = self.api.Backend.ldap2
|
|
passsync_dn = DN(('uid','passsync'), ('cn', 'sysaccounts'), ('cn', 'etc'),
|
|
self.api.env.basedn)
|
|
passsync_privilege_dn = DN(('cn','PassSync Service'),
|
|
self.api.env.container_privilege,
|
|
self.api.env.basedn)
|
|
|
|
try:
|
|
ldap.get_entry(passsync_dn, [''])
|
|
except errors.NotFound:
|
|
root_logger.debug("PassSync user not found, no update needed")
|
|
sysupgrade.set_upgrade_state('winsync', 'passsync_privilege_updated', True)
|
|
return False, []
|
|
else:
|
|
root_logger.debug("PassSync user found, do update")
|
|
|
|
update = {'dn': passsync_privilege_dn,
|
|
'updates': [
|
|
dict(action='add', attr='member', value=passsync_dn),
|
|
]
|
|
}
|
|
|
|
sysupgrade.set_upgrade_state('winsync', 'passsync_privilege_updated', True)
|
|
return False, [update]
|