mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-25 08:21:05 -06:00
7a482b7c72
Deprecate `ipa_log_manager.root_logger` and replace all calls to it with module-level logger calls. Reviewed-By: Martin Basti <mbasti@redhat.com>
93 lines
3.1 KiB
Python
93 lines
3.1 KiB
Python
#
|
|
# Copyright (C) 2014 FreeIPA Contributors see COPYING for license
|
|
#
|
|
|
|
import logging
|
|
|
|
from ipalib import Registry, errors
|
|
from ipalib import Updater
|
|
from ipapython.dn import DN
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
register = Registry()
|
|
|
|
|
|
@register()
|
|
class update_referint(Updater):
|
|
"""
|
|
Update referential integrity configuration to new style
|
|
http://directory.fedoraproject.org/docs/389ds/design/ri-plugin-configuration.html
|
|
|
|
old attr -> new attr
|
|
nsslapd-pluginArg0 -> referint-update-delay
|
|
nsslapd-pluginArg1 -> referint-logfile
|
|
nsslapd-pluginArg2 -> referint-logchanges
|
|
nsslapd-pluginArg3..N -> referint-membership-attr [3..N]
|
|
|
|
Old and new style cannot be mixed, all nslapd-pluginArg* attrs have to be removed
|
|
"""
|
|
|
|
referint_dn = DN(('cn', 'referential integrity postoperation'),
|
|
('cn', 'plugins'), ('cn', 'config'))
|
|
|
|
def execute(self, **options):
|
|
|
|
logger.debug("Upgrading referential integrity plugin configuration")
|
|
ldap = self.api.Backend.ldap2
|
|
try:
|
|
entry = ldap.get_entry(self.referint_dn)
|
|
except errors.NotFound:
|
|
logger.error("Referential integrity configuration not found")
|
|
return False, []
|
|
|
|
referint_membership_attrs = []
|
|
|
|
logger.debug("Initial value: %s", repr(entry))
|
|
|
|
# nsslapd-pluginArg0 -> referint-update-delay
|
|
update_delay = entry.get('nsslapd-pluginArg0')
|
|
if update_delay:
|
|
logger.debug("add: referint-update-delay: %s", update_delay)
|
|
entry['referint-update-delay'] = update_delay
|
|
entry['nsslapd-pluginArg0'] = None
|
|
else:
|
|
logger.debug("Plugin already uses new style, skipping")
|
|
return False, []
|
|
|
|
# nsslapd-pluginArg1 -> referint-logfile
|
|
logfile = entry.get('nsslapd-pluginArg1')
|
|
if logfile:
|
|
logger.debug("add: referint-logfile: %s", logfile)
|
|
entry['referint-logfile'] = logfile
|
|
entry['nsslapd-pluginArg1'] = None
|
|
|
|
# nsslapd-pluginArg2 -> referint-logchanges
|
|
logchanges = entry.get('nsslapd-pluginArg2')
|
|
if logchanges:
|
|
logger.debug("add: referint-logchanges: %s", logchanges)
|
|
entry['referint-logchanges'] = logchanges
|
|
entry['nsslapd-pluginArg2'] = None
|
|
|
|
# nsslapd-pluginArg3..N -> referint-membership-attr [3..N]
|
|
for key in list(entry):
|
|
if key.lower().startswith('nsslapd-pluginarg'):
|
|
arg_val = entry.single_value[key]
|
|
if arg_val:
|
|
referint_membership_attrs.append(arg_val)
|
|
entry[key] = None
|
|
|
|
if referint_membership_attrs:
|
|
# entry['referint-membership-attr'] is None, plugin doesn't allow
|
|
# mixing old and new style
|
|
entry['referint-membership-attr'] = referint_membership_attrs
|
|
|
|
logger.debug("Final value: %s", repr(entry))
|
|
try:
|
|
ldap.update_entry(entry)
|
|
except errors.EmptyModlist:
|
|
logger.debug("No modifications required")
|
|
return False, []
|
|
|
|
return False, []
|