Xc A @ s d Z d d k Z d d k Z d d k Z d d k l Z d d k Z d d k l Z l Z l
Z
d d k l Z l Z l
Z
d d k l Z l Z l Z d d k l Z d d k l Z l Z d d k l Z d d
k l Z d d k l Z l Z d d k l Z l Z e d
d e d e d d e d e d d e d e d d e d e d d e d e d d e d e d d e d e d d e d e d d e d e d d d! e d" d e d# e d$ d e d% e d& d d' e d( d e d) e d* d e d+ e d, d e d- e d. d e d/ e d0 d e d1 e d2 d d3 e d4 d e d5 e d6 d e d7 e d8 d d9 e d: d d; e d< d d= e d> d d? e d@ d e dA e dB d e dC e dD d e dE e dF d e dG e dH d e dI e dJ d e dK e dL d e dM e dN d e dO e dP d e dQ e dR d dS e dT d dU e dV d dW e dX d dY e dZ d d[ e d\ d d] e d^ d e d_ e d` d e da e db d e dc e dd d e de e df d e dg dh di g e dj d e dk e dl d e dm f/ Z dn Z do Z! dp Z" dq Z# e$ dr Z% ds Z& e' dt Z( du Z) dv Z* e dw e* d e dx dh dy g Z+ dz Z, d{ Z- d| Z. d} Z/ d~ e f d YZ0 d Z1 d Z2 d Z3 d e f d YZ4 d e4 e
f d YZ5 d e5 e i6 f d YZ7 d e5 e i8 f d YZ9 d e9 f d YZ: d e9 f d YZ; d e9 e i< f d YZ= d e: f d YZ> d e9 f d YZ? d e? f d YZ@ d e? f d YZA d ZB d e5 e iC f d YZD d e9 f d YZE d eE f d YZF d eE f d YZG d S( s
Base classes for LDAP plugins.
iN( t deepcopy( t apit crudt errors( t Methodt Objectt Command( t Flagt Intt Str( t NameSpace( t to_clit from_cli( t output( t _( t json_serializet validate_hostname( t DNt RDNt has_passwordt labelt Passwordt members Failed memberss member_user?s Member userss
member_group?s
Member groupss memberof_group?s Member of groupss member_host?s Member hostss member_hostgroup?s Member host-groupss memberof_hostgroup?s Member of host-groupss memberof_permission?t Permissionss memberof_privilege?t
Privilegess memberof_role?t Roless memberof_sudocmdgroup?s Sudo Command Groupss member_privilege?s Granted to Privileges member_role?s Granting privilege to roless member_netgroup?s Member netgroupss memberof_netgroup?s Member of netgroupss member_service?s Member servicess member_servicegroup?s Member service groupss memberof_servicegroup?s Member of service groupss member_hbacsvc?s Member HBAC services member_hbacsvcgroup?s Member HBAC service groupss memberof_hbacsvcgroup?s Member of HBAC service groupss member_sudocmd?s Member Sudo commandss memberof_sudorule?s Member of Sudo rules memberof_hbacrule?s Member of HBAC rules memberindirect_user?s Indirect Member userss memberindirect_group?s Indirect Member groupss memberindirect_host?s Indirect Member hostss memberindirect_hostgroup?s Indirect Member host-groupss memberindirect_role?s Indirect Member of roless memberindirect_permission?s Indirect Member permissionss memberindirect_hbacsvc?s Indirect Member HBAC services memberindirect_hbacsvcgrp?s" Indirect Member HBAC service groups memberindirect_netgroup?s Indirect Member netgroupss memberofindirect_group?s Indirect Member of groups memberofindirect_netgroup?s Indirect Member of netgroups memberofindirect_hostgroup?s Indirect Member of host-groups memberofindirect_role?s Indirect Member of roles memberofindirect_sudorule?s Indirect Member of Sudo rules memberofindirect_hbacrule?s Indirect Member of HBAC rulet
sourcehosts Failed source hosts/hostgroupst
memberhosts Failed hosts/hostgroupst
memberusers Failed users/groupst
memberservices Failed service/service groupst faileds Failed to removet flagst suppress_emptyt ipasudorunass Failed RunAst ipasudorunasgroups Failed RunAsGroupc C s t | d | d S( Nt addattr( t validate_attribute( t ugettextt attr( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt validate_add_attribute s c C s t | d | d S( Nt setattr( R$ ( R% R& ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt validate_set_attribute s c C s t | d | d S( Nt delattr( R$ ( R% R& ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt validate_del_attribute s c C sY t i d | } | p t | i d j o" t i d | d t d n d S( Ns \s*(.*?)\s*=\s*(.*?)\s*$i t namet errors$ Invalid format. Should be name=value( t ret matcht lent groupsR t ValidationErrorR ( R% R, R& t m( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR$ s ! c C s | d j o d d d g } n | i | | } h } d | d j oa | d d } | d i d } x= | D]1 } | i d \ } } | | | i i / s ( RM RN t get_entryt
isinstancet listt tuplet mapR= ( R> R? R& t valueRT RU t values( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt wait_for_value s
c C s= y t | d t d t Wn t j
o } t | SXd S( Nt
check_fqdnt allow_underscore( R t Falset Truet
ValueErrort unicode( R% t hostnameRI ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt validate_externalhost9 s s
externalhost*s
External hostt no_optionc C s d } | i | o | d j o
| } n t i | i } x | | D]v } y | | WqK t i j
o$ } t i d | d | i qK t j
o! } t i d | d | qK XqK Wn | S( s
Pre callback to validate external members.
This should be called by a command pre callback directly.
membertype is the type of member
c S s t | d t d t d S( NRa Rb ( R Rc Rd ( Rg ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt
validate_hostQ s t hostR, R- ( t getR R t primary_keyR R2 R- Re ( t
membertypeR> R? RF t optionsRj t validatorR^ RI ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt add_external_pre_callbackF s
%c
O s d }
| i d t } | | j o| | | j o| i | | g \ } } | i | g }
| i | g } t d | D } g } x | | | D]} | d i } t i | i | } | | j oQ | |
j oD | o | i | n | i | d | i | |
d 7}
q | | j ol | |
j o_ t
t i i
} | d | f } | | | i | } | | | | | <| i | q | i | q W|
oP y | i | h | | 6 Wn t i j
o n X| | | | <| | | v s i ( Rl Rd RY t setR= R R t get_dnt appendt addRf R t AlreadyGroupMembert messaget indext update_entryt EmptyModlist( t
memberattrRn t externalattrR> RP R R? RU RF Ro t completed_externalt normalizet entry_attrs_t memberst external_entriest lc_external_entriest failed_entriesRG t
membernamet member_dnt msgt newerrort ind( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt add_external_post_callbackb sF
c
O sZ | | j o?| | | j o.| i | | g \ } }
|
i | g } g } d }
x | | | D] } | d i } | | j p | d | j oF y | i | Wn$ t j
o | i | d n X|
d 7}
qf | i | qf W|
oP y | i | h | | 6 Wn t i j
o n X| | | | <| | | RP R R? RU RF Ro R R R R RG R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt remove_external_post_callback s. c C s t d | f d d d
t i i } y= | i | d g \ } } t i d d d t d Wn t i j
o d
SXd
S( sq
Check to see if this host is a master.
Raises an exception if a master, otherwise returns nothing.
t cnt masterst ipat etct objectclassR, Rg R- s0 An IPA master host cannot be deleted or disabledN( R R ( R R ( R R ( R R t envt basednRY R R2 R t NotFound( R> t fqdnt master_dnR? RU ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt host_is_master s $"t
LDAPObjectc B sn e Z d Z d Z d Z d Z e Z e d Z e d Z
g Z d4 Z
g Z g Z g Z g Z d4 Z g Z g Z d d g Z d Z d Z h Z e Z g Z e Z h d5 d 6d6 d
6d7 d 6d8 d 6Z e d Z e d Z e d Z e d Z! e d Z" e d Z# d Z$ d Z% d Z& d Z' d Z( d Z) d Z* d Z+ d! Z, d9 Z- d3 Z. RS(: s+
Object representing a LDAP entry.
t ldap2t RG t entriesR t acit Membert no_R s Member Oft in_t not_in_RL s Indirect Membert no_indirect_t memberindirects Indirect Member Oft not_in_indirect_t memberofindirectt Entrys) container entry (%(container)s) not founds %(parent)s: %(oname)s not founds %(pkey)s: %(oname)s not founds- %(oname)s with name "%(pkey)s" already existsc
O s | i o$ | i i | i i | d } n
| i } | i o\ y; | i i | i i | d | i
d g | i \ } } Wn t i j
o q X| Sn | i o2 | d d j o! | i i | i i | d | S| S( NiR ( t
parent_objectR R Ru t container_dnt
rdn_attributet backendt find_entry_by_attrRm R, t object_classR R R9 t make_dn_from_attr( t selfRF t kwargst parent_dnR? RU ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRu s
$
c O s4 | i | | } | i i | d g \ } } | S( NR ( Ru R RY ( R RF R R? RU ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt get_dn_if_exists s c C s yi | i o[ | i i | | i i g \ } } y | | i i d SWqh t t f j
o d SXn Wn t i j
o n Xy | | i i SWn t j
o t | SXd S( Ni R (
R R RY Rm R, t KeyErrort
IndexErrorR R Rf ( R R? RU ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt get_primary_key_from_dn s
c c s | i o | i i | i } x | i D] } | Vq* W| i oC | i } | i | i | i d t d t d | i d | i Vq n d S( Nt requiredt queryt cli_nameR ( R R R t get_ancestor_primary_keysRm t __class__R, Rd R ( R t
parent_objt keyt pkey( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR , s
c C s" t d | } | i | j S( Nc S s
| i S( ( R= ( RT ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRX 9 s ( R] R= ( R t classesR t oc( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt has_objectclass8 s c O s | i d t o d Sx | i D] } x | i | g D]w } xn | i | D]_ } | i i | } | i | j o9 d | | i f } | i | g i | i | qO qO Wq; W| | =q" Wd S( Nt raws %s_%s(
Rl Rc t attribute_memberst
setdefaultR R R R, Rv R ( R RU RF Ro R& R t
ldap_obj_namet ldap_objt new_attr( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt convert_attribute_members< s
c C s} xv | i D]k \ } } d | } y2 | i | | g | | i \ } } t | | R? RU t pwattrR& t
search_filterR t truncated( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt get_password_attributesJ s
c G sL d } | i o | d } n t i d | i h | d 6| i d 6 d S( NR it reasonR t oname( Rm R R t object_not_found_msgt object_name( R RF R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt handle_not_found] s
c G sL d } | i o | d } n t i d | i h | d 6| i d 6 d S( NR iRy R R ( Rm R t DuplicateEntryt already_exists_msgR ( R RF R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt handle_duplicate_entryg s
R R R t object_name_pluralR t object_class_configt default_attributesR t label_singulart hidden_attributest uuid_attributeR R, t takes_paramsR t bindablet
relationshipsc
sf i } t f d i D } i o i i | d | s Rm i i t aciattrst methods( R t dictt json_friendly_attributesRm R, R R t get_ipa_configRl t possible_objectclassesR t BackendR t schemat attribute_typest iteritemsRv t namesR= t sortR ( R R> t json_dictt
objectclassest configR@ t attrlistt oidR& t _[1]R3 ( ( R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt __json__y s.
(N( R R R ( s Member OfR R ( s Indirect MemberNR ( s Indirect Member OfNR ( s
parent_objects container_dns object_names object_name_plurals object_classs object_class_configs default_attributess labels label_singulars hidden_attributess uuid_attributes attribute_memberss nameR s
rdn_attributes bindables
relationships(/ t __name__t
__module__t __doc__t backend_nameR R Rd t normalize_dnR R R R R9 R R t limit_object_classest disallow_object_classest search_attributest search_attributes_configR t search_display_attributesR R R R Rc t rdn_is_primary_keyR R R R R t container_not_found_msgt parent_not_found_msgR R Ru R R R R R R R R R R ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s`
c C s xy | i D]k \ } } t | t t f oI t | d j o6 | | j o% | | i o t i d | qx q
q
Wd S( Ni R& ( R RZ R[ R\ R0 t
multivalueR t OnlyOneValueAllowed( t paramsRU R RE ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt _check_single_value_attrs s
) c C s x | i D]q \ } } | d j p# t | t oH t | d j o5 | | j o$ | | i o t i d | q~ q
q
Wd S( Ni R, ( R R9 RZ t
basestringR0 R R t RequirementError( R RU R RE ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt _check_empty_attrs s
0c C s t | d d j o t | d d j o d St | } x | d i D] \ } } | i d i | j o[ | p6 t i d t d t d | i d i n | i | i d i qP qP Wx | d i D] \ } } | i d i | j o[ | p6 t i d t d t d | i d i n | i | i d i q q Wt | d j o4 | o- t i d t d t d | d n d S( s+
If the set of objectclasses is limited enforce that only those
are updated in entry_attrs (plus dn)
allow_only tells us what mode to check in:
If True then we enforce that the attributes must be in the list of
allowed.
If False then those attributes are not allowed.
i i Nt infos% attribute "%(attribute)s" not allowedt attribute(
R0 R R R R= R t ObjectclassViolationR R R ( t
attributesR@ t
allow_onlyt
limitattrsR R& ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt _check_limit_object_class s. . " " t CallbackInterfacec B s8 e Z d Z e Z e d Z e e d Z RS( s Callback registration interface
This class's subclasses allow different types of callbacks to be added and
removed to them.
Registering a callback is done either by ``register_callback``, or by
defining a ``_callback`` method.
Subclasses should define the `_callback_registry` attribute as a dictionary
mapping allowed callback types to (initially) empty dictionaries.
c c ss | i | i | d g } xP | D]H } | d j o0 y t | d | VWqk t j
o qk Xq# | Vq# Wd S( s! Yield callbacks of the given types %s_callbackN( t _callback_registryRl R9 R t AttributeError( t clst
callback_typet callbackst callback( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt
get_callbacks s
c C so y | i | | } Wn+ t j
o d g } | i | | R@ t newdictR R3 R& R^ ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt _convert_2_dict s8
#
c s t f d d D o d S| i i } | i | i d g } | i | i d g } | i | i d g } t | i } t | i }
t | i } | d j o |
} | }
g } n) | |
@} | | @}
t |
| B| } x$ | i D] \ } } | | | _ s R( R# R* NR& R^ R c s s x | ] } | i Vq Wd S( N( R= ( Rs t n( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pys s R, R- s No such attribute on this entryi i ( s setattrs addattrs delattr(% t allR& R R* Rl Rt RF R9 R[ R R RZ R\ t extendR Re R t AttrValueNotFoundt _exc_wrapperRY R R R R2 t popR R$ Rf t base64t b64encodeR R R R0 R R- t ConversionError( R RU R? RF Ro R> t adddictt setdictt deldictt setattrst addattrst delattrst
direct_addt
direct_delt
needldapattrsR& t valt delvalt old_entryR t del_nonexistingt changedattrst paramR^ t errR ( ( Ro s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt process_attr_optionsF s
%"
! ) !
@ 1c C s | i d | | d S( s* Shortcut for register_callback('pre', ...)R N( R ( R R R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt register_pre_callback s c C s | i d | | d S( s+ Shortcut for register_callback('post', ...)R N( R ( R R R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt register_post_callback s c C s | i d | | d S( s* Shortcut for register_callback('exc', ...)R! N( R ( R R R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt register_exc_callback s c C s | i d | | d S( s9 Shortcut for register_callback('interactive_prompt', ...)R" N( R ( R R R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt$ register_interactive_prompt_callback s c s f d } | S( s= Function wrapper that automatically calls exception callbacksc s } t i d } xy t oq y | | | SWq t i j
oJ | p n | i d f d } | } q Xq Wd S( NR! i c s | | S( N( ( t argsR ( RI RF R R t call_funcRo ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt exc_func s ( R[ R Rd R t ExecutionErrorR0 ( t call_argst call_kwargst funcR RK ( RF R RJ Ro ( RI R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt wrapped s ( ( R RF Ro RJ RP ( ( RF R RJ Ro s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR/ s c c s x" t t | i D] } | Vq W| i i ob x_ | i D]P } t | t i t i f o. t
d d t d d d d d d g VPq< q< Wn d S( Nt
no_membersR s- Suppress processing of membership attributes.R R R Ri t no_output( t superR t get_optionsR& R t
has_outputRZ R
R t
ListOfEntriesR R ( R RB t o( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRT s
( R R R R R) R t setattr_optionR' t addattr_optionR+ t delattr_optionR R R* RD R Rc RE RF RG RH R/ RT ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s: ! , t
LDAPCreatec B sk e Z d Z e i e i f Z d Z e Z d Z
d Z d Z d Z
d Z d Z d Z RS(
s%
Create a new entry in LDAP.
c c ss x | i i D] } | Vq W| i i o | i i i d t Vn x% t t i | i D] } | Vq` Wd S( NR ( R& R Rm t cloneRd RS R t Createt get_args( R R t arg( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR^ s
c O s | i i } | i | | } | i | d | | t | i i | d <| i i o4 | i d } | i | i i | d | d RU R R? t dn_attrt
attrs_listR Ra R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt execute s
44/
c O s | S( N( ( R R> R? RU Ri RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt pre_callbackt s c O s | S( N( ( R R> R? RU RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt
post_callbackx s c O s
| d S( N( ( R RF Ro R! RJ RM RN ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt exc_callback| s c C s d S( N( ( R t kw( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt interactive_prompt_callback s t
takes_argsc s9 t f d i D } t i | d <| S( Nc 3 s( x! | ] } | t | f Vq Wd S( N( R ( Rs R ( R ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pys s t
takes_options( R R R[ t get_json_options( R R ( ( R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s ( Rp ( R R R R RX RY Rq R^ t global_output_paramst has_output_paramsRj Rk Rl Rm Ro R R ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR[ s c t LDAPQueryc B s& e Z d Z d Z d Z d Z RS( sJ
Base class for commands that need to retrieve an existing entry.
c c sy x | i i D] } | Vq W| i i o! | i i i d t d t Vn x% t t i | i D] } | Vqf Wd S( NR R ( R& R Rm R\ Rd RS R t PKQueryR^ ( R R R_ ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR^ s
! Rp c s9 t f d i D } t i | d <| S( Nc 3 s( x! | ] } | t | f Vq Wd S( N( R ( Rs R ( R ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pys s Rq ( R R R[ Rr ( R R ( ( R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s ( s
takes_args( R R R R^ R R ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRu s t LDAPMultiQueryc B s8 e Z d Z e d d d d e d f Z d Z RS( sU
Base class for commands that need to retrieve one or more existing entries.
t continueR R s& Continuous mode: Don't stop on errors.c c s x | i i D] } | Vq W| i i o' | i i i d t d t d t Vn x% t t i | i D] } | Vql Wd S( NR R R ( R& R Rm R\ Rd RS R Rv R^ ( R R R_ ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR^ s
( R R R R R Rq R^ ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRw s
t LDAPRetrievec B sq e Z d Z e i Z e Z e d d e d d e d f Z
d Z d Z d Z
d Z d
Z RS( s!
Retrieve an LDAP entry.
RA R t RightsR sW Display the access rights of this entry (requires --all). See ipa man page for details.c
O s | i i } | i i | | } | i d t o d g | i i } nI t | i i } | i d t o | i | i i n t | } x2 | i
d D]! } | | | | | | | } q Wy7 | i | | | i | | d | i i
\ } } Wn& t i j
o | i i | n X| i d t o* | i d t o t | | | d R? Ri R RU ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRj s: &
c O s | S( N( ( R R> R? Ri RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRk s c O s | S( N( ( R R> R? RU RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRl s c O s
| d S( N( ( R RF Ro R! RJ RM RN ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm s c C s d S( N( ( R Rn ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo s ( R R R R
t standard_entryRU Rs Rt R R Rq Rj Rk Rl Rm Ro ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRy s ( t
LDAPUpdatec
B s e Z d Z e i e i e i e d d e d d e d f Z e
Z d Z d Z
d Z d Z d
Z d Z d Z RS(
s
Update an LDAP entry.
RA R Rz R sW Display the access rights of this entry (requires --all). See ipa man page for details.c
C sb t | i i | i i i } | i d d d d t d t d d t d t d | i i S( Nt renameR R R t RenameR s# Rename the %(ldap_obj_name)s objectR (
R R& R Rm R, t clone_renameRc R R R ( R t rdnparam( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt _get_rename_option s
c c sE x" t t | i D] } | Vq W| i i o | i Vn d S( N( RS R| RT R& R R ( R t option( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRT s
c O s | i i } t | d j o t i n | i i | | } | i | } | i | | | | | i d t o d g | i i
} n\ t | i i
} | i | i
| i d t o | i | i i n t | } t | i | t | i i | x5 | i d D]$ } | | | | | | | | } q!Wt | i i i i i | i i | i
d t t | i i i i i | i i | i
d t t } yC| i i oO d | j oB | d p t i d d d d
n | d | | i i i! R? RU Ri R R t rdnkeysRI ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRj # st 44 #)
/" & c O s | S( N( ( R R> R? RU Ri RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRk w s c O s | S( N( ( R R> R? RU RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRl { s c O s
| d S( N( ( R RF Ro R! RJ RM RN ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm s c C s d S( N( ( R Rn ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo s ( R R R R RX RY RZ R R Rq Rs Rt R RT Rj Rk Rl Rm Ro ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR| s T t
LDAPDeletec B sJ e Z d Z e i Z e Z d Z d Z d Z
d Z d Z RS( s@
Delete an LDAP entry and all of its direct subentries.
c s\ i i f d } i i p t d t t f o d f } n d } g } g } t } xv | D]n } y | | p
t } n Wn= t i j
o. i
d t p n | i | q X| i | q W i i o@ | d d j o/ t
d t
d d i | d d i | St
d t
d d d d S(
Nc s d | f i i } x/ i d D] } | | } q6 W f d y, i i | d i i WnE t i j
o i i n! t i j
o | n Xx/ i d D] } | | } q W| S( NiR c s t } xo | og y( i d d g | i \ } } Wn t i j
o Pq Xx | D] \ } } | qY Wq Wy, i i | d i i Wn& t i j
o i i
n Xd S( NR R ( Rd R R9 t SCOPE_ONELEVELR R R/ t delete_entryR& R R ( t base_dnR t
subentriest dn_RU ( t delete_subtreeR R> t nkeysRo ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s " ,R R (
R& Ru R R/ R R R R R t NotAllowedOnNonLeaf( R R? R RK ( RF R R> Ro ( R R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s" , iRx i RK R u ,R^ u ( R& R Rm RZ R[ R\ Rd Rc R RL Rl Rv R9 R t join( R RF Ro R t pkeyitert deletedR RK R ( ( RF R R> Ro s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRj s* ()
/c O s | S( N( ( R R> R? RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRk s c O s t S( N( Rd ( R R> R? RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRl s c O s
| d S( N( ( R RF Ro R! RJ RM RN ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm s c C s d S( N( ( R Rn ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo s (
R R R R
t standard_deleteRU Rs Rt Rj Rk Rl Rm Ro ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s B t
LDAPModMemberc B s; e Z d Z d g Z e d Z d Z d Z d Z RS( s-
Base class for member manipulation.
R s comma-separated list of %ss %i member processed.s %i members processed.c c s x" t t | i D] } | Vq Wx | i D] } x | i i | D]p } | i i | } t | } | i | i
} t d | d d | d | d t d | i
d t d t VqF Wq/ Wd S( Ns %s*R s %ssR R s member %st csvt alwaysask( RS R RT t member_attributesR& R R R R t member_param_docR R R R Rd ( R R R& R R R, R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRT s
c
K s( h } h } x| i D]} h | | | i d D]- } | | | | | | | | | \ } } q=W| | d
<| i i | | | t d | d | d
| S( NR i t
allow_samei R, R4 RQ R R R? RP R RK ( R& R R Ru R R t add_entry_to_groupR R R R R Rv R Rf Rl Rc R Rt Re RF Rf R R[ R/ RY R R R R R ( R RF Ro R> t
member_dnsR R? R RP R& t objsR t m_dnRI R Ri RU ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRj s`
"
c O s | S( N( ( R R> R? t foundt not_foundRF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRk ] s c O s
| | f S( N( ( R R> RP R R? RU RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRl a s c O s
| d S( N( ( R RF Ro R! RJ RM RN ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm e s c C s d S( N( ( R Rn ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo h s ( s %i member added.s %i members added.( R R R R R R Rc R R
R t OutputR t intRU Rs Rt Rj Rk Rl Rm Ro ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR
s" = t LDAPRemoveMemberc B s e Z d Z e d Z d Z e i d e i d d e d e d e i d d e
d e d
f Z e Z
d Z d Z d
Z d Z d Z RS( s+
Remove LDAP entries from members.
s$ comma-separated list of %s to removes %i member removed.s %i members removed.RK R R# R s! Members that could not be removedRP s Number of members removedc O s | i i } | i | \ } } | i i | | } x5 | i d D]$ } | | | | | | | | } qF Wd } x | i D] \ } }
x |
i D] \ } } x | D] }
|
p q n y | i |
| | WnR t i j
oC } | i i
| } | | | i | i |
t
| f q X| d 7} q Wq Wq W| i d t o d g | i i } n\ t | i i } | i | i | i d t o | i | i i n t | } t i d y7 | i | | | i | | d | i i \ } } Wn& t i j
o | i i | n Xx> | i d D]- } | | | | | | | | | \ } } qEW| | d
<| i i | | | t d | d | d
| S( NR i i R, R4 RQ g333333?R R R? RP R RK ( R& R R Ru R R t remove_entry_from_groupR R R R Rv R Rf Rl Rc R Rt Re RF Rf R R[ RM RN R/ RY R R R R R ( R RF Ro R> R R R? R RP R& R R t m_dnsR RI R Ri RU ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRj sb
"
c O s | S( N( ( R R> R? R R RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRk s c O s
| | f S( N( ( R R> RP R R? RU RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRl s c O s
| d S( N( ( R RF Ro R! RJ RM RN ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm s c C s d S( N( ( R Rn ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo s ( s %i member removed.s %i members removed.( R R R R R R R
R R R R RU Rs Rt Rj Rk Rl Rm Ro ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR l s A c C s, t d d t d d t d t | S( Ns
pkey_only?R s Primary key onlyR s8 Results should contain primary key attribute only ("%s")( R R R ( R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt gen_pkey_only_option s t
LDAPSearchc
B s
e Z d Z g Z e d Z e d Z e Z e d d e d d e d d d g d
d d e
e d
d e d d e d d d g d
d d e
f Z d Z d Z
d Z d Z e Z d Z d Z d Z d Z d Z d Z d Z RS( s@
Retrieve all LDAP entries matching the given criteria.
sK Search for %(searched_object)s with these %(relationship)s %(ldap_object)s.sN Search for %(searched_object)s without these %(relationship)s %(ldap_object)s.s
timelimit?R s
Time LimitR s Time limit of search in secondsR t
no_displayt minvaluei t autofills
sizelimit?s
Size Limits" Maximum number of entries returnedc c sh x | i i D] } | Vq Wt d d t d t d Vx% t t i | i D] } | VqU Wd S( Ns criteria?t noextrawhitespaceR s3 A string searched in all relevant object attributes( R& R R Rc R RS R t SearchR^ ( R R R_ ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR^ s c c sJ xC| i i | D]1} | i i | } | i i i | d d d g } | i t d | i i d | d i d | i } d | d t
| f } t d
| d d | d
| d | i d t
V| i t d | i i d | d i d | i } d | d t
| f } t d
| d d | d
| d | i d t
Vq Wd S( NR R R t searched_objectt relationshipi t ldap_objects %s%si s %s*R s %ssR R R i ( R& R R R R Rl t member_param_incl_docR R R= R R R Rd t member_param_excl_doc( R R& R R R R R, ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt get_member_options s*
c c s x" t t | i D] } | Vq W| i i o. d | i i i j o t | i i i Vn x0 | i D]% } x | i | D] } | Vq Wqj Wd S( NRR (
RS R RT R& Rm R R R R R ( R R R& ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRT s
c
K s1 d } x$| i D]} x| i i | D] } | i i | } | i i i | d d d g } | d } | i | i f } x t | | D] \ }
} d |
t
| f } | i | oe g }
x( | | D] } |
i | i | q W| i
| |
| } | i | | f | i } q q Wq' Wq W| S( NR R R i s %s%s( R R& R R R R Rl t MATCH_ALLt
MATCH_NONEt zipR Rv Ru t make_filter_from_attrt combine_filters( R R> Ro t filterR& R R R t param_prefixest rulest param_prefixt rulet
param_nameR R t flt( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt get_member_filter$ s,
%c sG i i } | d } i i o' i i i i i | d } n
i i } i | } i i o i i } n
i i } | i
d t o i i i
g } nz | i
d t o d g | } nV t | } | i | i | i
d t o | i i i n t | } i i o i i } n
i i } i i oj | i d }
|
i
i i g } t | d j o+ t | d t o | d i d } qn i i | d <| i | d
| i } h } x | D] }
| | |
t termR t search_kwt defattrsRi t search_attrsR t config_attrst attr_filterR t term_filtert
member_filterR t scopeR R R R RI R R? ( ( R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRj > s
'
'
" ' c O s
| | | f S( N( ( R R> t filtersRi R R RI Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRk s c O s | S( N( ( R R> R R RI Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRl s c O s
| d S( N( ( R RI Ro R! RJ RM RN ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm s c C s d S( N( ( R Rn ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo s Rp c s9 t f d i D } t i | d <| S( Nc 3 s( x! | ] } | t | f Vq Wd S( N( R ( Rs R ( R ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pys s Rq ( R R R[ Rr ( R R ( ( R s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s ( s
takes_args( R R R R R R R Rd R R Rc Rq R^ R RT R Rs Rt Rj Rk Rl Rm Ro R R ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s:
] t LDAPModReverseMemberc B s8 e Z d Z d g Z e d Z d Z e Z d Z RS( s5
Base class for reverse member manipulation.
R s comma-separated list of %ss %i member processed.s %i members processed.c c s x" t t | i D] } | Vq Wx | i D] } xx | i i | D]f } | i i | } t | } | i | i
} t d | d d | d | d | i d t
d t
VqF Wq/ Wd S( Ns %s*R s %ssR R R R ( RS R RT t reverse_attributesR& t reverse_membersR R R t reverse_param_docR R R Rd ( R R R& R R R, R ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRT s
( s %i member processed.s %i members processed.(
R R R R R R t reverse_count_outRs Rt RT ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s t LDAPAddReverseMemberc B s e Z d Z e d Z d Z d Z d Z d Z d Z
e i d e i
d d e d e d e i
d d e d e d
f Z e Z d Z d Z d
Z d Z d Z RS( s
Add other LDAP entries to members in reverse.
The call looks like "add A to B" but in fact executes
add B to A to handle reverse membership.
s! comma-separated list of %s to adds %i member added.s %i members added.RK R R# R s Members that could not be addedRP s Number of members addedc O sF | i i } | i i | i | d d } | d } x/ | i d D] } | | | | | | } qG W| i d t o d g | i i } nI t | i i } | i d t o | i
| i i n t | } | i i | i | d d } d } h h g | i
6d 6}
xh| i | i
p g D]M} yh | d d
| i 6} y | i | | | i i | i | | } | d d j o | d } n6 |
d | i
i | | d
d | i d d f Wnf t i j
oW } t | }
|
i d d \ } }
|
d | i
i | t |
i f n XWq3t i j
o- } |
d | i
i | t |
f q3Xq3Wy" t | | | | i d t } Wn9 t j
o- } t i d t d d t | n Xx> | i d D]- } | | | | |
| | | | \ } } qW| | d RK R? R Ri RO RP R R& RI R RU ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRj s\ !
! +9 3-")
c O s | S( N( ( R R> R? RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRk & s c O s
| | f S( N( ( R R> RP R R? RU RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRl * s c O s
| d S( N( ( R RF Ro R! RJ RM RN ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm . s c C s d S( N( ( R Rn ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo 1 s ( s %i member added.s %i members added.N( R R R R R R R9 RQ R R R R
R R R R RU Rs Rt Rj Rk Rl Rm Ro ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR s( > t LDAPRemoveReverseMemberc B s e Z d Z e d Z d Z d Z d Z d Z d Z
e i d e i
d d e d e d e i
d d e d e d
f Z e Z d Z d Z d
Z d Z d Z RS( s
Remove other LDAP entries from members in reverse.
The call looks like "remove A from B" but in fact executes
remove B from A to handle reverse membership.
s$ comma-separated list of %s to removes %i member removed.s %i members removed.RK R R# R s! Members that could not be removedRP s Number of members removedc O sF | i i } | i i | i | d d } | d } x/ | i d D] } | | | | | | } qG W| i d t o d g | i i } nI t | i i } | i d t o | i
| i i n t | } | i i | i | d d } d } h h g | i
6d 6}
xh| i | i
p g D]M} yh | d d
| i 6} y | i | | | i i | i | | } | d d j o | d } n6 |
d | i
i | | d
d | i d d f Wnf t i j
oW } t | }
|
i d d \ } }
|
d | i
i | t |
i f n XWq3t i j
o- } |
d | i
i | t |
f q3Xq3Wy" t | | | | i d t } Wn9 t j
o- } t i d t d d t | n Xx> | i d D]- } | | | | |
| | | | \ } } qW| | d RK R? R Ri RO RP R R& RI R RU ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRj Q s\ !
! +9 3-")
c O s | S( N( ( R R> R? RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRk s c O s
| | f S( N( ( R R> RP R R? RU RF Ro ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRl s c O s
| d S( N( ( R RF Ro R! RJ RM RN ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRm s c C s d S( N( ( R Rn ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyRo s ( s %i member removed.s %i members removed.N( R R R R R R R9 RQ R R R R
R R R R RU Rs Rt Rj Rk Rl Rm Ro ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyR 4 s( > (H R R. t jsonRM t copyR R1 t ipalibR R R R R R R R R t ipalib.baseR
t
ipalib.cliR R R
t ipalib.textR t ipalib.utilR R t ipapython.dnR R Rs R' R) R+ R$ R9 R: RJ Rd RV R` Rh t external_host_paramRq R R R R R R R R R R] R[ Rv Ru Rw Ry t UpdateR| R R R R R R R R R R ( ( ( s; /usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.pyt s" , # 9 %4 E Y+be i