Ñò
Ã#xPc @ s d d k l Z l Z d d k l Z l Z d d k Td d k l Z l Z d d k l Z d d k
Z d d k l
Z
e d ƒ Z d Z d
Z e d d d
d e d ƒ d e d ƒ d e d e ƒe d d d d e d ƒ d e d ƒ d e d e ƒe d d e d ƒ d e d ƒ d d d d g ƒf Z e d d e d ƒ d e d ƒ d d? ƒf Z e d# d d$ d e d% ƒ d e d% ƒ d& d' „ ƒf Z d( e f d) „ ƒ YZ e i e ƒ d* „ Z d+ e f d, „ ƒ YZ e i e ƒ d- e f d. „ ƒ YZ e i e ƒ d/ e f d0 „ ƒ YZ e i e ƒ d1 e f d2 „ ƒ YZ e i e ƒ d3 e f d4 „ ƒ YZ e i e ƒ d5 e! f d6 „ ƒ YZ" e i e" ƒ d7 e# f d8 „ ƒ YZ$ e i e$ ƒ d9 e f d: „ ƒ YZ% e i e% ƒ d; e f d< „ ƒ YZ& e i e& ƒ d= e# f d> „ ƒ YZ' e i e' ƒ d S(@ iÿÿÿÿ( t apit errors( t Strt StrEnum( t *( t _t ngettext( t contextN( t DNsU
Auto Membership Rule.
Bring clarity to the membership of hosts and users by configuring inclusive
or exclusive regex patterns, you can automatically assign a new entries into
a group or hostgroup based upon attribute information.
A rule is directly associated with a group by name, so you cannot create
a rule without an accompanying group or hostgroup.
A condition is a regular expression used by 389-ds to match a new incoming
entry with an automember rule. If it matches an inclusive rule then the
entry is added to the appropriate group or hostgroup.
A default group or hostgroup could be specified for entries that do not
match any rule. In case of user entries this group will be a fallback group
because all users are by default members of group specified in IPA config.
EXAMPLES:
Add the initial group or hostgroup:
ipa hostgroup-add --desc="Web Servers" webservers
ipa group-add --desc="Developers" devel
Add the initial rule:
ipa automember-add --type=hostgroup webservers
ipa automember-add --type=group devel
Add a condition to the rule:
ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-regex=^web[1-9]+\.example\.com webservers
ipa automember-add-condition --key=manager --type=group --inclusive-regex=^uid=mscott devel
Add an exclusive condition to the rule to prevent auto assignment:
ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-regex=^web5\.example\.com webservers
Add a host:
ipa host-add web1.example.com
Add a user:
ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott
Verify automembership:
ipa hostgroup-show webservers
Host-group: webservers
Description: Web Servers
Member hosts: web1.example.com
ipa group-show devel
Group name: devel
Description: Developers
GID: 1004200000
Member users: tuser
Remove a condition from the rule:
ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-regex=^web[1-9]+\.example\.com webservers
Modify the automember rule:
ipa automember-mod
Set the default (fallback) target group:
ipa automember-default-group-set --default-group=webservers --type=hostgroup
ipa automember-default-group-set --default-group=ipausers --type=group
Remove the default (fallback) target group:
ipa automember-default-group-remove --type=hostgroup
ipa automember-default-group-remove --type=group
Show the default (fallback) target group:
ipa automember-default-group-show --type=hostgroup
ipa automember-default-group-show --type=group
Find all of the automember rules:
ipa automember-find
Display a automember rule:
ipa automember-show --type=hostgroup webservers
ipa automember-show --type=group devel
Delete an automember rule:
ipa automember-del --type=hostgroup webservers
ipa automember-del --type=group devel
t automemberinclusiveregext automemberexclusiveregexs automemberinclusiveregex*t cli_namet inclusive_regext labels Inclusive Regext doct csvt alwaysasks automemberexclusiveregex*t exclusive_regexs Exclusive Regext keys
Attribute KeysQ Attribute to filter via regex. For example fqdn for a host, or manager for a usert flagst no_createt no_updatet no_searcht types
Grouping Types" Grouping to which the rule appliest valuesu groupu hostgroupt cnt automember_rules Automember Rulet
normalizerc C s
| i ƒ S( ( t lower( t value( ( s= /usr/lib/python2.6/site-packages/ipalib/plugins/automember.pyt — s t
automemberc
B sÔ e Z d Z e i i Z d Z d Z d d g Z d d d d d d
g Z
e d ƒ Z e
d d
d d e d ƒ d e d ƒ ƒe
d d
d d e d ƒ d e d ƒ d d d d g ƒf Z d „ Z d „ Z d „ Z RS( sG
Bring automember to a hostgroup with an Auto Membership Rule.
t auto_member_rulet auto_member_rulest topt automemberregexruleR R
R t automembertargetgroupt descriptiont automemberdefaultgroups Auto Membership Rules description?R t descR
t DescriptionR s& A description of this auto member rules automemberdefaultgroup?t
default_groups Default (fallback) Groups! Default group for entries to landR R R R c G s} | i i i } | i i | i | ƒ } y | i | g ƒ \ } } Wn2 t i j
o# t i d t d ƒ | ƒ ‚ n X| S( Nt reasonu Group: %s not found!( R t Backendt ldap2t Objectt get_dnt get_entryR t NotFoundR ( t selft grouptypet groupnamet keyst ldapt dnt gdnt entry_attrs( ( s= /usr/lib/python2.6/site-packages/ipalib/plugins/automember.pyt dn_exists» s !c O s– | i o$ | i i | i i | d Œ } n
| i } | d } y& t d | d f d | f | ƒ } Wn( t j
o t d | f | ƒ } n X| S( NiÿÿÿÿR R ( t
parent_objectR R- R. t container_dnR t
IndexError( R1 R4 t optionst parent_dnR2 t ndn( ( s= /usr/lib/python2.6/site-packages/ipalib/plugins/automember.pyR. Ä s
$
&c C s\ | i i i } | i i t i i | ƒ } | d j o | St i d t
d ƒ | ƒ ‚ d S( sV
Verify that the user supplied key is a valid attribute in the schema
R* s %s is not a valid attribute.N( R R+ R, t schemat get_objt _ldapt
AttributeTypet NoneR R0 R ( R1 t attrR5 t obj( ( s= /usr/lib/python2.6/site-packages/ipalib/plugins/automember.pyt
check_attrÐ s
( t __name__t
__module__t __doc__R t envt container_automemberR; t object_namet object_name_pluralt object_classt default_attributesR R
R t takes_paramsR9 R. RG ( ( ( s= /usr/lib/python2.6/site-packages/ipalib/plugins/automember.pyR › s( c C s8 y | i t i i g ƒ Wn t i j
o t SXt S( N( R/ R RK RL R R0 t Falset True( R5 ( ( s= /usr/lib/python2.6/site-packages/ipalib/plugins/automember.pyt automember_container_existsÞ s
t automember_addc B sE e Z e d ƒ Z e i e Z e Z e d ƒ Z d „ Z
d „ Z RS( s!
Add an automember rule.
s! Added automember rule "%(value)s"c O s| t | t ƒ p t ‚ | d | d st
R @
[
W
!