mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-24 16:10:02 -06:00
a347c11650
All Python scripts are now generated from a template with a dynamic
shebang.
ipatests/i18n.py is no longer an executable script with shebang. The
module is not executed as script directly, but rather as
$(PYTHON) ipatests/i18n.py
Fixes: https://pagure.io/freeipa/issue/7680
All Python scripts are now template files with a dynamic shebang line.
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
43 lines
1.0 KiB
Plaintext
43 lines
1.0 KiB
Plaintext
@PYTHONSHEBANG@
|
|
|
|
from __future__ import print_function
|
|
|
|
import os
|
|
import sys
|
|
import traceback
|
|
|
|
from ipalib import constants
|
|
from ipalib.config import Env
|
|
from ipaplatform.paths import paths
|
|
from ipaserver.secrets.client import CustodiaClient
|
|
|
|
|
|
def main():
|
|
env = Env()
|
|
env._finalize()
|
|
|
|
keyname = "ca_wrapped/" + sys.argv[1]
|
|
servername = sys.argv[2]
|
|
|
|
service = constants.PKI_GSSAPI_SERVICE_NAME
|
|
client_keyfile = os.path.join(paths.PKI_TOMCAT, service + '.keys')
|
|
client_keytab = os.path.join(paths.PKI_TOMCAT, service + '.keytab')
|
|
|
|
# pylint: disable=no-member
|
|
client = CustodiaClient(
|
|
client_service='%s@%s' % (service, env.host), server=servername,
|
|
realm=env.realm, ldap_uri="ldaps://" + env.host,
|
|
keyfile=client_keyfile, keytab=client_keytab,
|
|
)
|
|
|
|
# Print the response JSON to stdout; it is already in the format
|
|
# that Dogtag's ExternalProcessKeyRetriever expects
|
|
print(client.fetch_key(keyname, store=False))
|
|
|
|
|
|
try:
|
|
main()
|
|
except BaseException:
|
|
traceback.print_exc()
|
|
sys.exit(1)
|