mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
993f76fe60
- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication - Update tools to use kerberos - Add User class
88 lines
2.6 KiB
Python
88 lines
2.6 KiB
Python
#! /usr/bin/python -E
|
|
# Authors: Rob Crittenden <rcritten@redhat.com>
|
|
#
|
|
# Copyright (C) 2007 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License as
|
|
# published by the Free Software Foundation; version 2 or later
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
#
|
|
|
|
#!/usr/bin/python
|
|
|
|
import sys
|
|
sys.path.append("/usr/share/ipa")
|
|
|
|
from ipaserver import funcs
|
|
import ipa.rpcclient as rpcclient
|
|
import user
|
|
import ipa
|
|
import config
|
|
|
|
class IPAClient:
|
|
|
|
def __init__(self,local=None):
|
|
self.local = local
|
|
ipa.config.init_config()
|
|
if local:
|
|
self.transport = funcs.IPAServer()
|
|
# client needs to call set_principal(user@REALM)
|
|
else:
|
|
self.transport = rpcclient.RPCClient()
|
|
|
|
def set_principal(self,princ):
|
|
if self.local:
|
|
self.transport.set_principal(princ)
|
|
|
|
def get_user(self,uid):
|
|
result = self.transport.get_user(uid)
|
|
return user.User(result)
|
|
|
|
def add_user(self,user):
|
|
|
|
realm = config.config.get_realm()
|
|
|
|
# FIXME: This should be dynamic and can include just about anything
|
|
# Let us add in some missing attributes
|
|
if user.get('homeDirectory') is None:
|
|
user['homeDirectory'] ='/home/%s' % user['uid']
|
|
if user.get('gecos') is None:
|
|
user['gecos'] = user['uid']
|
|
|
|
# FIXME: This can be removed once the DS plugin is installed
|
|
user['uidNumber'] ='501'
|
|
|
|
# FIXME: What is the default group for users?
|
|
user['gidNumber'] ='501'
|
|
user['krbPrincipalName'] = "%s@%s" % (user['uid'], realm)
|
|
user['cn'] = "%s %s" % (user['givenName'], user['sn'])
|
|
if user.get('gn'):
|
|
del user['gn']
|
|
|
|
result = self.transport.add_user(user)
|
|
return result
|
|
|
|
def get_all_users(self):
|
|
result = self.transport.get_all_users()
|
|
|
|
all_users = []
|
|
for (attrs) in result:
|
|
if attrs is not None:
|
|
all_users.append(user.User(attrs))
|
|
|
|
return all_users
|
|
|
|
def get_add_schema(self):
|
|
result = self.transport.get_add_schema()
|
|
return result
|