Xc A @ s d Z d d k Z d d k Z d d k Z d d k l Z d d k Z d d k l Z l Z l
Z
d d k l Z l Z l
Z
d d k l Z l Z l Z d d k l Z d d k l Z l Z d d k l Z d d
k l Z d d k l Z l Z d d k l Z l Z e d
d e d e d d e d e d d e d e d d e d e d d e d e d d e d e d d e d e d d e d e d d e d e d d d! e d" d e d# e d$ d e d% e d& d d' e d( d e d) e d* d e d+ e d, d e d- e d. d e d/ e d0 d e d1 e d2 d d3 e d4 d e d5 e d6 d e d7 e d8 d d9 e d: d d; e d< d d= e d> d d? e d@ d e dA e dB d e dC e dD d e dE e dF d e dG e dH d e dI e dJ d e dK e dL d e dM e dN d e dO e dP d e dQ e dR d dS e dT d dU e dV d dW e dX d dY e dZ d d[ e d\ d d] e d^ d e d_ e d` d e da e db d e dc e dd d e de e df d e dg dh di g e dj d e dk e dl d e dm f/ Z dn Z do Z! dp Z" dq Z# e$ dr Z% ds Z& e' dt Z( du Z) dv Z* e dw e* d e dx dh dy g Z+ dz Z, d{ Z- d| Z. d} Z/ d~ e f d YZ0 d Z1 d Z2 d Z3 d e f d YZ4 d e4 e
f d YZ5 d e5 e i6 f d YZ7 d e5 e i8 f d YZ9 d e9 f d YZ: d e9 f d YZ; d e9 e i< f d YZ= d e: f d YZ> d e9 f d YZ? d e? f d YZ@ d e? f d YZA d ZB d e5 e iC f d YZD d e9 f d YZE d eE f d YZF d eE f d YZG d S( s
Base classes for LDAP plugins.
iN( t deepcopy( t apit crudt errors( t Methodt Objectt Command( t Flagt Intt Str( t NameSpace( t to_clit from_cli( t output( t _( t json_serializet validate_hostname( t DNt RDNt has_passwordt labelt Passwordt members Failed memberss member_user?s Member userss
member_group?s
Member groupss memberof_group?s Member of groupss member_host?s Member hostss member_hostgroup?s Member host-groupss memberof_hostgroup?s Member of host-groupss memberof_permission?t Permissionss memberof_privilege?t
Privilegess memberof_role?t Roless memberof_sudocmdgroup?s Sudo Command Groupss member_privilege?s Granted to Privileges member_role?s Granting privilege to roless member_netgroup?s Member netgroupss memberof_netgroup?s Member of netgroupss member_service?s Member servicess member_servicegroup?s Member service groupss memberof_servicegroup?s Member of service groupss member_hbacsvc?s Member HBAC services member_hbacsvcgroup?s Member HBAC service groupss memberof_hbacsvcgroup?s Member of HBAC service groupss member_sudocmd?s Member Sudo commandss memberof_sudorule?s Member of Sudo rules memberof_hbacrule?s Member of HBAC rules memberindirect_user?s Indirect Member userss memberindirect_group?s Indirect Member groupss memberindirect_host?s Indirect Member hostss memberindirect_hostgroup?s Indirect Member host-groupss memberindirect_role?s Indirect Member of roless memberindirect_permission?s Indirect Member permissionss memberindirect_hbacsvc?s Indirect Member HBAC services memberindirect_hbacsvcgrp?s" Indirect Member HBAC service groups memberindirect_netgroup?s Indirect Member netgroupss memberofindirect_group?s Indirect Member of groups memberofindirect_netgroup?s Indirect Member of netgroups memberofindirect_hostgroup?s Indirect Member of host-groups memberofindirect_role?s Indirect Member of roles memberofindirect_sudorule?s Indirect Member of Sudo rules memberofindirect_hbacrule?s Indirect Member of HBAC rulet
sourcehosts Failed source hosts/hostgroupst
memberhosts Failed hosts/hostgroupst
memberusers Failed users/groupst
memberservices Failed service/service groupst faileds Failed to removet flagst suppress_emptyt ipasudorunass Failed RunAst ipasudorunasgroups Failed RunAsGroupc C s t | d | d S( Nt addattr( t validate_attribute( t ugettextt attr( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt validate_add_attribute s c C s t | d | d S( Nt setattr( R$ ( R% R& ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt validate_set_attribute s c C s t | d | d S( Nt delattr( R$ ( R% R& ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt validate_del_attribute s c C sY t i d | } | p t | i d j o" t i d | d t d n d S( Ns \s*(.*?)\s*=\s*(.*?)\s*$i t namet errors$ Invalid format. Should be name=value( t ret matcht lent groupsR t ValidationErrorR ( R% R, R& t m( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR$ s ! c C s t | t p t | d j o d d d g } n | i | | } h } d | d j oa | d d } | d i d } x= | D]1 } | i d \ } } | | | i i / s ( RO RP t get_entryR9 t listt tuplet mapR? ( R@ RA R& t valueRV RW t values( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt wait_for_value s
c C s= y t | d t d t Wn t j
o } t | SXd S( Nt
check_fqdnt allow_underscore( R t Falset Truet
ValueErrort unicode( R% t hostnameRK ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt validate_externalhost9 s s
externalhost*s
External hostt no_optionc C s t | t p t d } | i | o | d j o
| } n t i | i } x | | D]v } y | | Wqb t i j
o$ } t i d | d | i qb t
j
o! } t i d | d | qb Xqb Wn | S( s
Pre callback to validate external members.
This should be called by a command pre callback directly.
membertype is the type of member
c S s t | d t d t d S( NRb Rc ( R Rd Re ( Rh ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt
validate_hostQ s t hostR, R- ( R9 R R: t getR R t primary_keyR R2 R- Rf ( t
membertypeR@ RA RH t optionsRk t validatorR_ RK ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt add_external_pre_callbackF s
%c
O sb t | t p t d }
| i d t } | | j o| | | j o| i | | g \ } } t | t p t | i | g }
| i | g } t d | D } g } x7| | | D]'} | d i } t i | i
| } t | t p t | | j oQ | |
j oD | o | i | n | i | d | i | |
d 7}
q | | j ol | |
j o_ t
t i i } | d | f } | | | i | } | | | | | <| i | q | i | q W|
oP y | i | h | | 6 Wn t i j
o n X| | | | <| | | v s i ( R9 R R: Rm Re R[ t setR? R R t get_dnt appendt addRg R t AlreadyGroupMembert messaget indext update_entryt EmptyModlist( t
memberattrRo t externalattrR@ RR R RA RW RH Rp t completed_externalt normalizet entry_attrs_t memberst external_entriest lc_external_entriest failed_entriesRI t
membernamet member_dnt msgt newerrort ind( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt add_external_post_callbackb sL
c
O sq t | t p t | | j o?| | | j o.| i | | g \ } }
|
i | g } g } d }
x | | | D] } | d i } | | j p | d | j oF y | i | Wn$ t j
o | i | d n X|
d 7}
q} | i | q} W|
oP y | i | h | | 6 Wn t
i j
o n X| | | | <| | | | s Rn i i t aciattrst methods( R t dictt json_friendly_attributesRn R, R R t get_ipa_configRm t possible_objectclassesR t BackendR t schemat attribute_typest iteritemsRw t namesR? t sortR ( R R@ t json_dictt
objectclassest configRB t attrlistt oidR& t _[1]R3 ( ( R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt __json__y s.
(N( R R R ( s Member OfR R ( s Indirect MemberNR ( s Indirect Member OfNR ( s
parent_objects container_dns object_names object_name_plurals object_classs object_class_configs default_attributess labels label_singulars hidden_attributess uuid_attributes attribute_memberss nameR s
rdn_attributes bindables
relationships(/ t __name__t
__module__t __doc__t backend_nameR R Re t normalize_dnR R R R R; R R t limit_object_classest disallow_object_classest search_attributest search_attributes_configR t search_display_attributesR R R R Rd t rdn_is_primary_keyR R R R R t container_not_found_msgt parent_not_found_msgR R Rv R R R R R R R R R R ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s`
c C s xy | i D]k \ } } t | t t f oI t | d j o6 | | j o% | | i o t i d | qx q
q
Wd S( Ni R& ( R R9 R\ R] R0 t
multivalueR t OnlyOneValueAllowed( t paramsRW R RG ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt _check_single_value_attrs s
) c C s x | i D]q \ } } | d j p# t | t oH t | d j o5 | | j o$ | | i o t i d | q~ q
q
Wd S( Ni R, ( R R; R9 t
basestringR0 R R t RequirementError( R RW R RG ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt _check_empty_attrs s
0c C s t | d d j o t | d d j o d St | } x | d i D] \ } } | i d i | j o[ | p6 t i d t d t d | i d i n | i | i d i qP qP Wx | d i D] \ } } | i d i | j o[ | p6 t i d t d t d | i d i n | i | i d i q q Wt | d j o4 | o- t i d t d t d | d n d S( s+
If the set of objectclasses is limited enforce that only those
are updated in entry_attrs (plus dn)
allow_only tells us what mode to check in:
If True then we enforce that the attributes must be in the list of
allowed.
If False then those attributes are not allowed.
i i Nt infos% attribute "%(attribute)s" not allowedt attribute(
R0 R R R R? R t ObjectclassViolationR R R ( t
attributesRB t
allow_onlyt
limitattrsR R& ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt _check_limit_object_class s. . " " t CallbackInterfacec B s8 e Z d Z e Z e d Z e e d Z RS( s Callback registration interface
This class's subclasses allow different types of callbacks to be added and
removed to them.
Registering a callback is done either by ``register_callback``, or by
defining a ``_callback`` method.
Subclasses should define the `_callback_registry` attribute as a dictionary
mapping allowed callback types to (initially) empty dictionaries.
c c ss | i | i | d g } xP | D]H } | d j o0 y t | d | VWqk t j
o qk Xq# | Vq# Wd S( s! Yield callbacks of the given types %s_callbackN( t _callback_registryRm R; R t AttributeError( t clst
callback_typet callbackst callback( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt
get_callbacks s
c C s t | p t y | i | | } Wn+ t j
o d g } | i | | _ s R( R# R* NR& R_ R c s s x | ] } | i Vq Wd S( N( R? ( Rt t n( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pys s R, R- s No such attribute on this entryi i ( s setattrs addattrs delattr(' t allR( R R, Rm Ru RH R; R9 R R: R\ R R R] t extendR Rf R t AttrValueNotFoundt _exc_wrapperR[ R R R R2 t popR R& Rg t base64t b64encodeR R
R R0 R R- t ConversionError( R RW RA RH Rp R@ t adddictt setdictt deldictt setattrst addattrst delattrst
direct_addt
direct_delt
needldapattrsR& t valt delvalt old_entryR t del_nonexistingt changedattrst paramR_ t errR ( ( Rp s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt process_attr_optionsF s
%"
! ) !
@ 1c C s | i d | | d S( s* Shortcut for register_callback('pre', ...)R! N( R ( R R R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt register_pre_callback s c C s | i d | | d S( s+ Shortcut for register_callback('post', ...)R" N( R ( R R R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt register_post_callback s c C s | i d | | d S( s* Shortcut for register_callback('exc', ...)R# N( R ( R R R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt register_exc_callback s c C s | i d | | d S( s9 Shortcut for register_callback('interactive_prompt', ...)R$ N( R ( R R R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt$ register_interactive_prompt_callback s c s f d } | S( s= Function wrapper that automatically calls exception callbacksc s } t i d } xy t oq y | | | SWq t i j
oJ | p n | i d f d } | } q Xq Wd S( NR# i c s | | S( N( ( t argsR ( RK RH R R t call_funcRp ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt exc_func s ( R\ R Re R t ExecutionErrorR2 ( t call_argst call_kwargst funcR RM ( RH R RL Rp ( RK R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt wrapped s ( ( R RH Rp RL RR ( ( RH R RL Rp s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR1 s c c s x" t t | i D] } | Vq W| i i ob x_ | i D]P } t | t i t i f o. t
d d t d d d d d d g VPq< q< Wn d S( Nt
no_membersR s- Suppress processing of membership attributes.R R R Rj t no_output( t superR t get_optionsR( R t
has_outputR9 R
R t
ListOfEntriesR R ( R RD t o( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRV s
( R R R R R) R t setattr_optionR' t addattr_optionR+ t delattr_optionR R R, RF R Rd RG RH RI RJ R1 RV ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s: ! , t
LDAPCreatec B sk e Z d Z e i e i f Z d Z e Z d Z
d Z d Z d Z
d Z d Z d Z RS(
s%
Create a new entry in LDAP.
c c ss x | i i D] } | Vq W| i i o | i i i d t Vn x% t t i | i D] } | Vq` Wd S( NR
( R( R Rn t cloneRe RU R t Createt get_args( R R t arg( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR` s
c O sU | i i } | i | | } | i | d | | t | i i | d <| i i o4 | i d } | i | i i | d | d s t
takes_options( R R R\ t get_json_options( R R ( ( R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s ( Rr ( R R R R RZ R[ Rs R` t global_output_paramst has_output_paramsRl Rm Rn Ro Rq R R ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR] s c t LDAPQueryc B s& e Z d Z d Z d Z d Z RS( sJ
Base class for commands that need to retrieve an existing entry.
c c sy x | i i D] } | Vq W| i i o! | i i i d t d t Vn x% t t i | i D] } | Vqf Wd S( NR
R ( R( R Rn R^ Re RU R t PKQueryR` ( R R Ra ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR` s
! Rr c s9 t f d i D } t i | d <| S( Nc 3 s( x! | ] } | t | f Vq Wd S( N( R ( Rt R ( R ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pys s Rs ( R R R\ Rt ( R R ( ( R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s ( s
takes_args( R R R R` R R ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRw s t LDAPMultiQueryc B s8 e Z d Z e d d d d e d f Z d Z RS( sU
Base class for commands that need to retrieve one or more existing entries.
t continueR R s& Continuous mode: Don't stop on errors.c c s x | i i D] } | Vq W| i i o' | i i i d t d t d t Vn x% t t i | i D] } | Vql Wd S( NR
R R ( R( R Rn R^ Re RU R Rx R` ( R R Ra ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR` s
( R R R R R Rs R` ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRy s
t LDAPRetrievec B sq e Z d Z e i Z e Z e d d e d d e d f Z
d Z d Z d Z
d Z d
Z RS( s!
Retrieve an LDAP entry.
RC R t RightsR sW Display the access rights of this entry (requires --all). See ipa man page for details.c
O sv | i i } | i i | | } t | t p t | i d t o d g | i i } nI t | i i } | i d t o | i
| i i n t | } xI | i
d D]8 } | | | | | | | } t | t p t q WyN | i | | | i | | d | i i \ } } t | t p t Wn& t i j
o | i i | n X| i d t o* | i d t o t | | | d &
c O s t | t p t | S( N( R9 R R: ( R R@ RA Rk RH Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm s c O s t | t p t | S( N( R9 R R: ( R R@ RA RW RH Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRn s c O s
| d S( N( ( R RH Rp R# RL RO RP ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo s c C s d S( N( ( R Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRq s ( R R R R
t standard_entryRW Ru Rv R R Rs Rl Rm Rn Ro Rq ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR{ s ( t
LDAPUpdatec
B s e Z d Z e i e i e i e d d e d d e d f Z e
Z d Z d Z
d Z d Z d
Z d Z d Z RS(
s
Update an LDAP entry.
RC R R| R sW Display the access rights of this entry (requires --all). See ipa man page for details.c
C sb t | i i | i i i } | i d d d d t d t d d t d t d | i i S( Nt renameR R R t RenameR s# Rename the %(ldap_obj_name)s objectR (
R R( R Rn R, t clone_renameRd R R R ( R t rdnparam( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt _get_rename_option s
c c sE x" t t | i D] } | Vq W| i i o | i Vn d S( N( RU R~ RV R( R R ( R t option( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRV s
c O s | i i } t | d j o t i n | i i | | } t | t p t | i | } | i
| | | | | i d t o d g | i i
} n\ t | i i
} | i | i | i d t o | i | i i n t | } t | i | t | i i | xL | i d D]; } | | | | | | | | } t | t p t q8Wt | i i i i i | i i | i d t t | i i i i i | i i | i d t t } yq| i i! oO d | j oB | d p t i" d d d d
n | d | | i i# i$ s
'
'
" ' c O s$ t | t p t | | | f S( N( R9 R R: ( R R@ t filtersRk R R RK Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm s c O s | S( N( ( R R@ R R RK Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRn s c O s
| d S( N( ( R RK Rp R# RL RO RP ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo s c C s d S( N( ( R Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRq s Rr c s9 t f d i D } t i | d <| S( Nc 3 s( x! | ] } | t | f Vq Wd S( N( R ( Rt R ( R ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pys s Rs ( R R R\ Rt ( R R ( ( R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s ( s
takes_args( R R R R R R R Re R R Rd Rs R` R RV R Ru Rv Rl Rm Rn Ro Rq R R ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s:
] t LDAPModReverseMemberc B s8 e Z d Z d g Z e d Z d Z e Z d Z RS( s5
Base class for reverse member manipulation.
R s comma-separated list of %ss %i member processed.s %i members processed.c c s x" t t | i D] } | Vq Wx | i D] } xx | i i | D]f } | i i | } t | } | i | i
} t d | d d | d | d | i d t
d t
VqF Wq/ Wd S( Ns %s*R s %ssR R R R ( RU R RV t reverse_attributesR( t reverse_membersR R R t reverse_param_docR R R Re ( R R R& R R R, R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRV s
( s %i member processed.s %i members processed.(
R R R R R R t reverse_count_outRu Rv RV ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s t LDAPAddReverseMemberc B s e Z d Z e d Z d Z d Z d Z d Z d Z
e i d e i
d d e d e d e i
d d e d e d
f Z e Z d Z d Z d
Z d Z d Z RS( s
Add other LDAP entries to members in reverse.
The call looks like "add A to B" but in fact executes
add B to A to handle reverse membership.
s! comma-separated list of %s to adds %i member added.s %i members added.RM R R% R s Members that could not be addedRR s Number of members addedc O s | i i } | i i | i | d d } | d } t | t p t xF | i d D]5 } | | | | | | } t | t p t q^ W| i d t
o d g | i i } nI t | i i } | i d t
o | i
| i i n t | } | i i | i | d d } d } h h g | i 6d 6}
xh| i | i p g D]M} yh | d d
| i 6} y | i | | | i i | i | | } | d d j o | d } n6 |
d | i i | | d
d | i d d f Wnf t i j
oW } t | }
|
i d d \ } }
|
d | i i | t |
i f n XWqat i j
o- } |
d | i i | t |
f qaXqaWy" t | | | | i d t } Wn9 t j
o- } t i d t d d t | n XxU | i d D]D } | | | | |
| | | | \ } } t | t p t q Wt | t p t | | d R RX Re t Exceptiont ReverseMemberErrorR R ( R RH Rp R@ RM RA R Rk RQ RR R R& RK R RW ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRl s` !
! +9 3-")
c O s t | t p t | S( N( R9 R R: ( R R@ RA RH Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm & s c O s! t | t p t | | f S( N( R9 R R: ( R R@ RR R RA RW RH Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRn * s c O s
| d S( N( ( R RH Rp R# RL RO RP ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo . s c C s d S( N( ( R Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRq 1 s ( s %i member added.s %i members added.N( R R R R R R R; RS R R R R
R R R R RW Ru Rv Rl Rm Rn Ro Rq ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s( > t LDAPRemoveReverseMemberc B s e Z d Z e d Z d Z d Z d Z d Z d Z
e i d e i
d d e d e d e i
d d e d e d
f Z e Z d Z d Z d
Z d Z d Z RS( s
Remove other LDAP entries from members in reverse.
The call looks like "remove A from B" but in fact executes
remove B from A to handle reverse membership.
s$ comma-separated list of %s to removes %i member removed.s %i members removed.RM R R% R s! Members that could not be removedRR s Number of members removedc O s | i i } | i i | i | d d } | d } t | t p t xF | i d D]5 } | | | | | | } t | t p t q^ W| i d t
o d g | i i } nI t | i i } | i d t
o | i
| i i n t | } | i i | i | d d } d } h h g | i 6d 6}
xh| i | i p g D]M} yh | d d
| i 6} y | i | | | i i | i | | } | d d j o | d } n6 |
d | i i | | d
d | i d d f Wnf t i j
oW } t | }
|
i d d \ } }
|
d | i i | t |
i f n XWqat i j
o- } |
d | i i | t |
f qaXqaWy" t | | | | i d t
} Wn9 t j
o- } t i d t d d t | n XxU | i d D]D } | | | | |
| | | | \ } } t | t p t q Wt | t p t | | d R RX R R R R ( R RH Rp R@ RM RA R Rk RQ RR R R& RK R RW ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRl Q s` !
! +9 3-")
c O s t | t p t | S( N( R9 R R: ( R R@ RA RH Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm s c O s! t | t p t | | f S( N( R9 R R: ( R R@ RR R RA RW RH Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRn s c O s
| d S( N( ( R RH Rp R# RL RO RP ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo s c C s d S( N( ( R Rp ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRq s ( s %i member removed.s %i members removed.N( R R R R R R R; RS R R R R
R R R R RW Ru Rv Rl Rm Rn Ro Rq ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR 4 s( > (H R R. t jsonRO t copyR R3 t ipalibR R R R R R R R R t ipalib.baseR
t
ipalib.cliR R R
t ipalib.textR t ipalib.utilR R t ipapython.dnR R Ru R' R) R+ R$ R; R< RL Re RX Ra Ri t external_host_paramRr R R R R R R R R R R_ R] Rx Rw Ry R{ t UpdateR~ R R R R R R R R R R ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt s" , # 9 %4 E Y+be i