mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-28 01:41:14 -06:00
b29de6bf27
This disables all but the ldapi listener in DS so it will be quiet when we perform our upgrades. It is expected that any other clients that also use ldapi will be shut down by other already (krb5 and dns). Add ldapi as an option in ipaldap and add the beginning of pure offline support (e.g. direct editing of LDIF files).
133 lines
4.4 KiB
Python
Executable File
133 lines
4.4 KiB
Python
Executable File
#!/usr/bin/env python
|
|
# Authors: Rob Crittenden <rcritten@redhat.com>
|
|
#
|
|
# Copyright (C) 2008 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License as
|
|
# published by the Free Software Foundation; version 2 only
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
#
|
|
|
|
# Documentation can be found at http://freeipa.org/page/LdapUpdate
|
|
|
|
# TODO
|
|
# save undo files?
|
|
|
|
import sys
|
|
try:
|
|
from optparse import OptionParser
|
|
from ipapython import ipautil, config
|
|
from ipaserver.install import installutils
|
|
from ipaserver.install.ldapupdate import LDAPUpdate, BadSyntax, UPDATES_DIR
|
|
from ipaserver.install.upgradeinstance import IPAUpgrade
|
|
import logging
|
|
import krbV
|
|
except ImportError:
|
|
print >> sys.stderr, """\
|
|
There was a problem importing one of the required Python modules. The
|
|
error was:
|
|
|
|
%s
|
|
""" % sys.exc_value
|
|
sys.exit(1)
|
|
|
|
def parse_options():
|
|
usage = "%prog [options] input_file(s)\n"
|
|
usage += "%prog [options]\n"
|
|
parser = OptionParser(usage=usage, formatter=config.IPAFormatter())
|
|
|
|
parser.add_option("-d", "--debug", action="store_true", dest="debug",
|
|
help="Display debugging information about the update(s)")
|
|
parser.add_option("-t", "--test", action="store_true", dest="test",
|
|
help="Run through the update without changing anything")
|
|
parser.add_option("-y", dest="password",
|
|
help="File containing the Directory Manager password")
|
|
parser.add_option("-l", '--ldapi', action="store_true", dest="ldapi",
|
|
default=False, help="Connect to the LDAP server using the ldapi socket")
|
|
parser.add_option("-u", '--upgrade', action="store_true", dest="upgrade",
|
|
default=False, help="Upgrade an installed server in offline mode")
|
|
|
|
config.add_standard_options(parser)
|
|
options, args = parser.parse_args()
|
|
|
|
config.init_config(options)
|
|
|
|
return options, args
|
|
|
|
def get_dirman_password():
|
|
"""Prompt the user for the Directory Manager password and verify its
|
|
correctness.
|
|
"""
|
|
password = installutils.read_password("Directory Manager", confirm=False, validate=False)
|
|
|
|
return password
|
|
|
|
def main():
|
|
loglevel = logging.INFO
|
|
|
|
options, args = parse_options()
|
|
if options.debug:
|
|
loglevel = logging.DEBUG
|
|
|
|
dirman_password = ""
|
|
if options.password:
|
|
pw = ipautil.template_file(options.password, [])
|
|
dirman_password = pw.strip()
|
|
else:
|
|
if not options.ldapi and not options.upgrade:
|
|
dirman_password = get_dirman_password()
|
|
|
|
files = []
|
|
if len(args) > 0:
|
|
files = args
|
|
|
|
if options.upgrade:
|
|
logging.basicConfig(level=loglevel,
|
|
format='%(levelname)s %(message)s',
|
|
filename='/var/log/ipaupgrade.log')
|
|
realm = krbV.default_context().default_realm
|
|
upgrade = IPAUpgrade(realm, files, live_run=not options.test)
|
|
upgrade.create_instance()
|
|
modified = upgrade.modified
|
|
else:
|
|
logging.basicConfig(level=loglevel,
|
|
format='%(levelname)s %(message)s')
|
|
ld = LDAPUpdate(dm_password=dirman_password, sub_dict={}, live_run=not options.test, ldapi=options.ldapi)
|
|
if len(files) < 1:
|
|
files = ld.get_all_files(UPDATES_DIR)
|
|
modified = ld.update(files)
|
|
|
|
if modified and options.test:
|
|
return 2
|
|
else:
|
|
return 0
|
|
|
|
try:
|
|
if __name__ == "__main__":
|
|
sys.exit(main())
|
|
except BadSyntax, e:
|
|
print "There is a syntax error in this update file:"
|
|
print " %s" % e
|
|
sys.exit(1)
|
|
except RuntimeError, e:
|
|
print "%s" % e
|
|
sys.exit(1)
|
|
except SystemExit, e:
|
|
sys.exit(e)
|
|
except KeyboardInterrupt, e:
|
|
sys.exit(1)
|
|
except config.IPAConfigError, e:
|
|
print "An IPA server to update cannot be found. Has one been configured yet?"
|
|
print "The error was: %s" % e
|
|
sys.exit(1)
|