Ñò
Ã#xPc @ sp d Z d d k l Z d d k l Z d d k l Z d d k l Z d d k l Z d e f d YZ d S(
s,
Base classes for non-LDAP backend plugins.
iÿÿÿÿ( t api( t Command( t errors( t DN( t _t VirtualCommandc B s e Z d Z d Z d d Z RS( sÅ
A command that doesn't use the LDAP backend but wants to use the
LDAP access control system to make authorization decisions.
The class variable operation is the commonName attribute of the
entry to be tested against.
In advance, you need to create an entry of the form:
cn=, api.env.container_virtual, api.env.basedn
Ex.
cn=request certificate, cn=virtual operations,cn=etc, dc=example, dc=com
c C s | i d j o) | d j o t i d t d n | d j o
| i } n | i i i } | i i d | t
d | f | i i i | i i i
} y3 | i | d p t i d t d n Wn. t i j
o t i d t d n Xt S( s
Perform an LDAP query to determine authorization.
This should be executed before any actual work is done.
t infos operation not defineds IPA: virtual verify %st cnt objectclasss# not allowed to perform this commands No such virtual commandN( t operationt NoneR t ACIErrorR R t Backendt ldap2t logt debugR t envt container_virtualt basednt can_writet NotFoundt True( t selfR t ldapt operationdn( ( s: /usr/lib/python2.6/site-packages/ipalib/plugins/virtual.pyt check_access- s
* N( t __name__t
__module__t __doc__R
R R ( ( ( s: /usr/lib/python2.6/site-packages/ipalib/plugins/virtual.pyR s
N(
R t ipalibR R R t ipapython.dnR t ipalib.textR R ( ( ( s: /usr/lib/python2.6/site-packages/ipalib/plugins/virtual.pyt s