mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
1daf319a19
In order for this to work against a v1 database the update host.update needs to be applied
103 lines
3.3 KiB
Python
103 lines
3.3 KiB
Python
# Authors:
|
|
# Jason Gerard DeRose <jderose@redhat.com>
|
|
# Rob Crittenden <rcritten@redhat.com>
|
|
#
|
|
# Copyright (C) 2008 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License as
|
|
# published by the Free Software Foundation; version 2 only
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
"""
|
|
Backend plugin for XML-RPC client.
|
|
|
|
This provides a lightwieght XML-RPC client using Python standard library
|
|
``xmlrpclib`` module.
|
|
"""
|
|
|
|
import xmlrpclib
|
|
import socket
|
|
import httplib
|
|
import kerberos
|
|
from ipalib.backend import Backend
|
|
from ipalib.util import xmlrpc_marshal
|
|
from ipalib import api
|
|
from ipalib import errors
|
|
|
|
class xmlrpc(Backend):
|
|
"""
|
|
Kerberos backend plugin.
|
|
"""
|
|
|
|
def get_client(self, verbose=False):
|
|
# FIXME: The server uri should come from self.api.env.server_uri
|
|
if api.env.get('kerberos'):
|
|
server = api.env.server.next()
|
|
if verbose: print "Connecting to %s" % server
|
|
return xmlrpclib.ServerProxy('https://%s/ipa/xml' % server, transport=KerbTransport(), verbose=verbose)
|
|
else:
|
|
return xmlrpclib.ServerProxy('http://localhost:8888', verbose=verbose)
|
|
|
|
def forward_call(self, name, *args, **kw):
|
|
"""
|
|
Forward a call over XML-RPC to an IPA server.
|
|
"""
|
|
client = self.get_client(verbose=api.env.get('verbose', False))
|
|
command = getattr(client, name)
|
|
params = xmlrpc_marshal(*args, **kw)
|
|
try:
|
|
return command(*params)
|
|
except socket.error, e:
|
|
print e[1]
|
|
except xmlrpclib.Fault, e:
|
|
err = errors.convertFault(e)
|
|
code = getattr(err,'faultCode',None)
|
|
faultString = getattr(err,'faultString',None)
|
|
if not code:
|
|
raise err
|
|
if code < errors.IPA_ERROR_BASE:
|
|
print "%s: %s" % (code, faultString)
|
|
else:
|
|
print "%s: %s" % (code, getattr(err,'__doc__',''))
|
|
return
|
|
|
|
api.register(xmlrpc)
|
|
|
|
class KerbTransport(xmlrpclib.SafeTransport):
|
|
"""Handles Kerberos Negotiation authentication to an XML-RPC server."""
|
|
|
|
def get_host_info(self, host):
|
|
|
|
host, extra_headers, x509 = xmlrpclib.Transport.get_host_info(self, host)
|
|
|
|
# Set the remote host principal
|
|
h = host
|
|
hostinfo = h.split(':')
|
|
service = "HTTP@" + hostinfo[0]
|
|
|
|
try:
|
|
rc, vc = kerberos.authGSSClientInit(service);
|
|
except kerberos.GSSError, e:
|
|
raise kerberos.GSSError(e)
|
|
|
|
try:
|
|
kerberos.authGSSClientStep(vc, "");
|
|
except kerberos.GSSError, e:
|
|
raise kerberos.GSSError(e)
|
|
|
|
extra_headers = [
|
|
("Authorization", "negotiate %s" % kerberos.authGSSClientResponse(vc) )
|
|
]
|
|
|
|
return host, extra_headers, x509
|