mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-30 10:47:08 -06:00
6083df1b02
The object_name attribute was used as both an identifier and a label which sometimes require different values (e.g. hbacrule vs. HBAC rule). The code that uses object_name as an identifier has been changed to use the 'name' attribute instead. The values of the object_name attribute have been fixed to become proper labels. Ticket #1217
142 lines
3.4 KiB
Python
142 lines
3.4 KiB
Python
# Authors:
|
|
# Jr Aquino <jr.aquino@citrixonline.com>
|
|
#
|
|
# Copyright (C) 2010 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
"""
|
|
Sudo Commands
|
|
|
|
Commands used as building blocks for sudo
|
|
|
|
EXAMPLES:
|
|
|
|
Create a new command
|
|
ipa sudocmd-add --desc='For reading log files' /usr/bin/less
|
|
|
|
Remove a command
|
|
ipa sudocmd-del /usr/bin/less
|
|
|
|
"""
|
|
|
|
import platform
|
|
import os
|
|
import sys
|
|
|
|
from ipalib import api, errors, util
|
|
from ipalib import Str
|
|
from ipalib.plugins.baseldap import *
|
|
from ipalib import _, ngettext
|
|
|
|
topic = ('sudo', 'commands for controlling sudo configuration')
|
|
|
|
class sudocmd(LDAPObject):
|
|
"""
|
|
Sudo Command object.
|
|
"""
|
|
container_dn = api.env.container_sudocmd
|
|
object_name = 'sudo command'
|
|
object_name_plural = 'sudo commands'
|
|
object_class = ['ipaobject', 'ipasudocmd']
|
|
# object_class_config = 'ipahostobjectclasses'
|
|
search_attributes = [
|
|
'sudocmd', 'description',
|
|
]
|
|
default_attributes = [
|
|
'sudocmd', 'description', 'memberof',
|
|
]
|
|
attribute_members = {
|
|
'memberof': ['sudocmdgroup'],
|
|
}
|
|
uuid_attribute = 'ipauniqueid'
|
|
label = _('Sudo Commands')
|
|
label_singular = _('sudo command')
|
|
|
|
takes_params = (
|
|
Str('sudocmd',
|
|
cli_name='command',
|
|
label=_('Sudo Command'),
|
|
primary_key=True,
|
|
),
|
|
Str('description?',
|
|
cli_name='desc',
|
|
label=_('Description'),
|
|
doc=_('A description of this command'),
|
|
),
|
|
)
|
|
|
|
def get_dn(self, *keys, **options):
|
|
if keys[-1].endswith('.'):
|
|
keys[-1] = keys[-1][:-1]
|
|
dn = super(sudocmd, self).get_dn(*keys, **options)
|
|
try:
|
|
self.backend.get_entry(dn, [''])
|
|
except errors.NotFound:
|
|
try:
|
|
(dn, entry_attrs) = self.backend.find_entry_by_attr(
|
|
'sudocmd', keys[-1], self.object_class, [''],
|
|
self.container_dn
|
|
)
|
|
except errors.NotFound:
|
|
pass
|
|
return dn
|
|
|
|
api.register(sudocmd)
|
|
|
|
class sudocmd_add(LDAPCreate):
|
|
"""
|
|
Create new sudo command.
|
|
"""
|
|
|
|
msg_summary = _('Added sudo command "%(value)s"')
|
|
|
|
api.register(sudocmd_add)
|
|
|
|
class sudocmd_del(LDAPDelete):
|
|
"""
|
|
Delete sudo command.
|
|
"""
|
|
|
|
msg_summary = _('Deleted sudo command "%(value)s"')
|
|
|
|
api.register(sudocmd_del)
|
|
|
|
class sudocmd_mod(LDAPUpdate):
|
|
"""
|
|
Modify command.
|
|
"""
|
|
|
|
msg_summary = _('Modified sudo command "%(value)s"')
|
|
|
|
api.register(sudocmd_mod)
|
|
|
|
class sudocmd_find(LDAPSearch):
|
|
"""
|
|
Search for commands.
|
|
"""
|
|
|
|
msg_summary = ngettext(
|
|
'%(count)d sudo command matched', '%(count)d sudo command matched', 0
|
|
)
|
|
|
|
api.register(sudocmd_find)
|
|
|
|
class sudocmd_show(LDAPRetrieve):
|
|
"""
|
|
Display sudo command.
|
|
"""
|
|
|
|
api.register(sudocmd_show)
|