mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-25 08:21:05 -06:00
85286beb5b
Pylint warns about inconsistent return statements when some paths of a function return None implicitly. Make all implicit returns either explicit or raise a proper exception. See: https://pagure.io/freeipa/issue/7758 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
64 lines
2.2 KiB
Python
64 lines
2.2 KiB
Python
# Authors:
|
|
# Rob Crittenden <rcritten@redhat.com>
|
|
# Jason Gerard DeRose <jderose@redhat.com>
|
|
# John Dennis <jdennis@redhat.com>
|
|
#
|
|
# Copyright (C) 2010 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
"""
|
|
WSGI appliction for IPA server.
|
|
"""
|
|
from __future__ import absolute_import
|
|
|
|
import logging
|
|
import os
|
|
import sys
|
|
|
|
# Some dependencies like Dogtag's pki.client library and custodia use
|
|
# python-requsts to make HTTPS connection. python-requests prefers
|
|
# PyOpenSSL over Python's stdlib ssl module. PyOpenSSL is build on top
|
|
# of python-cryptography which trigger a execmem SELinux violation
|
|
# in the context of Apache HTTPD (httpd_execmem).
|
|
# When requests is imported, it always tries to import pyopenssl glue
|
|
# code from urllib3's contrib directory. The import of PyOpenSSL is
|
|
# enough to trigger the SELinux denial.
|
|
# Block any import of PyOpenSSL's SSL module by raising an ImportError
|
|
sys.modules['OpenSSL.SSL'] = None
|
|
|
|
from ipaplatform.paths import paths
|
|
from ipalib import api
|
|
|
|
logger = logging.getLogger(os.path.basename(__file__))
|
|
|
|
api.bootstrap(context='server', confdir=paths.ETC_IPA, log=None)
|
|
try:
|
|
api.finalize()
|
|
except Exception as e:
|
|
logger.error('Failed to start IPA: %s', e)
|
|
else:
|
|
logger.info('*** PROCESS START ***')
|
|
|
|
# This is the WSGI callable:
|
|
def application(environ, start_response):
|
|
if not environ['wsgi.multithread']:
|
|
return api.Backend.wsgi_dispatch(environ, start_response)
|
|
else:
|
|
logger.error("IPA does not work with the threaded MPM, "
|
|
"use the pre-fork MPM")
|
|
raise RuntimeError('threaded MPM detected')
|