summaryrefslogtreecommitdiffstats
path: root/ipa-radius-server/plugins
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2011-01-13 16:57:23 -0500
committerSimo Sorce <ssorce@redhat.com>2011-01-14 14:06:56 -0500
commit7ee490e35c00626f5b62778977e6132dbdb86d98 (patch)
tree66aca524cd7a9ed6ebb447c289f12537ebe0849d /ipa-radius-server/plugins
parentda7eb1155ec34941d71ad2449fd7e5de8a648d49 (diff)
downloadfreeipa-7ee490e35c00626f5b62778977e6132dbdb86d98.tar.gz
freeipa-7ee490e35c00626f5b62778977e6132dbdb86d98.tar.xz
freeipa-7ee490e35c00626f5b62778977e6132dbdb86d98.zip
Remove radius options completely.
This has been completely abandoned since ipa v1 and is not built by default. Instead of carrying dead weight, let's remove it for now. Fixes: https://fedorahosted.org/freeipa/ticket/761
Diffstat (limited to 'ipa-radius-server/plugins')
-rw-r--r--ipa-radius-server/plugins/__init__.py1
-rw-r--r--ipa-radius-server/plugins/radiusinstance.py170
2 files changed, 0 insertions, 171 deletions
diff --git a/ipa-radius-server/plugins/__init__.py b/ipa-radius-server/plugins/__init__.py
deleted file mode 100644
index 636bc1a8a..000000000
--- a/ipa-radius-server/plugins/__init__.py
+++ /dev/null
@@ -1 +0,0 @@
-# intentionally empty
diff --git a/ipa-radius-server/plugins/radiusinstance.py b/ipa-radius-server/plugins/radiusinstance.py
deleted file mode 100644
index e673a35e8..000000000
--- a/ipa-radius-server/plugins/radiusinstance.py
+++ /dev/null
@@ -1,170 +0,0 @@
-# Authors: John Dennis <jdennis@redhat.com>
-#
-# Copyright (C) 2007 Red Hat
-# see file 'COPYING' for use and warranty information
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program. If not, see <http://www.gnu.org/licenses/>.
-#
-
-import subprocess
-import string
-import tempfile
-import shutil
-import logging
-import pwd
-import time
-import sys
-from ipa import ipautil
-from ipa import radius_util
-
-from ipaserver import service
-
-import os
-import re
-
-IPA_RADIUS_VERSION = '0.0.0'
-
-# FIXME there should a utility to get the user base dn
-from ipaserver.funcs import DefaultUserContainer, DefaultGroupContainer
-
-#-------------------------------------------------------------------------------
-
-def get_radius_version():
- version = None
- try:
- p = subprocess.Popen([radius_util.RADIUSD, '-v'], stdout=subprocess.PIPE,
- stderr=subprocess.PIPE)
- stdout, stderr = p.communicate()
- status = p.returncode
-
- if status == 0:
- match = re.search("radiusd: FreeRADIUS Version (.+), for host", stdout)
- if match:
- version = match.group(1)
- except Exception, e:
- pass
- return version
-
-
-#-------------------------------------------------------------------------------
-
-class RadiusInstance(service.Service):
- def __init__(self):
- service.Service.__init__(self, "radiusd")
- self.fqdn = None
- self.realm = None
- self.principal = None
-
- def create_instance(self, realm_name, host_name, ldap_server):
- self.realm = realm_name.upper()
- self.suffix = ipautil.realm_to_suffix(self.realm)
- self.fqdn = host_name
- self.ldap_server = ldap_server
- self.principal = "%s/%s@%s" % (radius_util.RADIUS_SERVICE_NAME, self.fqdn, self.realm)
- self.basedn = self.suffix
- self.user_basedn = "%s,%s" % (DefaultUserContainer, self.basedn) # FIXME, should be utility to get this
- self.radius_version = get_radius_version()
-
- try:
- self.stop()
- except:
- # It could have been not running
- pass
-
- self.step("create radiusd keytab", self.__create_radius_keytab)
- self.step("configuring radiusd.conf for radius instance", self.__radiusd_conf)
- self.step("starting radiusd", self.__start_instance)
- self.step("configuring radiusd to start on boot", self.chkconfig_on)
-
- # FIXME:
- # self.step("setting ldap encrypted attributes", self.__set_ldap_encrypted_attributes)
-
- self.start_creation("Configuring radiusd")
-
- def __start_instance(self):
- try:
- self.start()
- except:
- logging.error("radiusd service failed to start")
-
- def __radiusd_conf(self):
- version = 'IPA_RADIUS_VERSION=%s FREE_RADIUS_VERSION=%s' % (IPA_RADIUS_VERSION, self.radius_version)
- sub_dict = {'CONFIG_FILE_VERSION_INFO' : version,
- 'LDAP_SERVER' : self.ldap_server,
- 'RADIUS_KEYTAB' : radius_util.RADIUS_IPA_KEYTAB_FILEPATH,
- 'RADIUS_PRINCIPAL' : self.principal,
- 'RADIUS_USER_BASE_DN' : self.user_basedn,
- 'ACCESS_ATTRIBUTE' : '',
- 'ACCESS_ATTRIBUTE_DEFAULT' : 'TRUE',
- 'CLIENTS_BASEDN' : radius_util.radius_clients_basedn(None, self.suffix),
- 'SUFFIX' : self.suffix,
- }
- try:
- radiusd_conf = ipautil.template_file(radius_util.RADIUSD_CONF_TEMPLATE_FILEPATH, sub_dict)
- radiusd_fd = open(radius_util.RADIUSD_CONF_FILEPATH, 'w+')
- radiusd_fd.write(radiusd_conf)
- radiusd_fd.close()
- except Exception, e:
- logging.error("could not create %s: %s", radius_util.RADIUSD_CONF_FILEPATH, e)
-
- def __create_radius_keytab(self):
- try:
- if ipautil.file_exists(radius_util.RADIUS_IPA_KEYTAB_FILEPATH):
- os.remove(radius_util.RADIUS_IPA_KEYTAB_FILEPATH)
- except os.error:
- logging.error("Failed to remove %s", radius_util.RADIUS_IPA_KEYTAB_FILEPATH)
-
- (kwrite, kread, kerr) = os.popen3("/usr/kerberos/sbin/kadmin.local")
- kwrite.write("addprinc -randkey %s\n" % (self.principal))
- kwrite.flush()
- kwrite.write("ktadd -k %s %s\n" % (radius_util.RADIUS_IPA_KEYTAB_FILEPATH, self.principal))
- kwrite.flush()
- kwrite.close()
- kread.close()
- kerr.close()
-
- # give kadmin time to actually write the file before we go on
- retry = 0
- while not ipautil.file_exists(radius_util.RADIUS_IPA_KEYTAB_FILEPATH):
- time.sleep(1)
- retry += 1
- if retry > 15:
- print "Error timed out waiting for kadmin to finish operations\n"
- sys.exit(1)
- try:
- pent = pwd.getpwnam(radius_util.RADIUS_USER)
- os.chown(radius_util.RADIUS_IPA_KEYTAB_FILEPATH, pent.pw_uid, pent.pw_gid)
- except Exception, e:
- logging.error("could not chown on %s to %s: %s", radius_util.RADIUS_IPA_KEYTAB_FILEPATH, radius_util.RADIUS_USER, e)
-
- def __ldap_mod(self, ldif):
- txt = iputil.template_file(ipautil.SHARE_DIR + ldif, self.sub_dict)
- fd = ipautil.write_tmp_file(txt)
-
- args = ["/usr/bin/ldapmodify", "-h", "127.0.0.1", "-xv",
- "-D", "cn=Directory Manager", "-w", self.dm_password, "-f", fd.name]
-
- try:
- ipautil.run(args)
- except ipautil.CalledProcessError, e:
- logging.critical("Failed to load %s: %s" % (ldif, str(e)))
-
- fd.close()
-
- #FIXME, should use IPAdmin method
- def __set_ldap_encrypted_attributes(self):
- self.__ldap_mod("encrypted_attribute.ldif", {"ENCRYPTED_ATTRIBUTE" : "radiusClientSecret"})
-
-#-------------------------------------------------------------------------------
-