summaryrefslogtreecommitdiffstats
path: root/ipa-admintools/ipa-moduser
diff options
context:
space:
mode:
Diffstat (limited to 'ipa-admintools/ipa-moduser')
-rw-r--r--ipa-admintools/ipa-moduser272
1 files changed, 272 insertions, 0 deletions
diff --git a/ipa-admintools/ipa-moduser b/ipa-admintools/ipa-moduser
new file mode 100644
index 000000000..81ad71987
--- /dev/null
+++ b/ipa-admintools/ipa-moduser
@@ -0,0 +1,272 @@
+#! /usr/bin/python -E
+# Authors: Rob Crittenden <rcritten@redhat.com>
+#
+# Copyright (C) 2007 Red Hat
+# see file 'COPYING' for use and warranty information
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License as
+# published by the Free Software Foundation; version 2 only
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
+#
+
+import sys
+from optparse import OptionParser
+import ipa
+import ipa.user
+import ipa.ipaclient as ipaclient
+import ipa.ipavalidate as ipavalidate
+import ipa.config
+
+import xmlrpclib
+import kerberos
+import ldap
+import errno
+
+def usage():
+ print "ipa-moduser [-a|--activate] [-c|--gecos STRING] [-d|--directory STRING] [-f|--firstname STRING] [-l|--lastname STRING] [-s|--shell STRING] [--add attribute=value] [--del attribute] [--set attribute=value] user"
+ sys.exit(1)
+
+def set_add_usage(which):
+ print "%s option usage: --%s NAME=VALUE" % (which, which)
+
+def parse_options():
+ parser = OptionParser()
+ parser.add_option("-a", "--activate", dest="activate", action="store_true",
+ help="Activate the user")
+ parser.add_option("-c", "--gecos", dest="gecos",
+ help="Set the GECOS field")
+ parser.add_option("-d", "--directory", dest="directory",
+ help="Set the User's home directory")
+ parser.add_option("-f", "--firstname", dest="gn",
+ help="User's first name")
+ parser.add_option("-l", "--lastname", dest="sn",
+ help="User's last name")
+ parser.add_option("-s", "--shell", dest="shell",
+ help="Set user's login shell to shell")
+ parser.add_option("--addattr", dest="addattr",
+ help="Adds an attribute or values to that attribute, attr=value",
+ action="append")
+ parser.add_option("--delattr", dest="delattr",
+ help="Remove an attribute", action="append")
+ parser.add_option("--setattr", dest="setattr",
+ help="Set an attribute, dropping any existing values that may exist",
+ action="append")
+ parser.add_option("-M", "--mailAddress", dest="mail",
+ help="Set user's e-mail address")
+ parser.add_option("--usage", action="store_true",
+ help="Program usage")
+
+ args = ipa.config.init_config(sys.argv)
+ options, args = parser.parse_args(args)
+
+ return options, args
+
+def main():
+ # The following fields are required
+ givenname = ""
+ lastname = ""
+ username = ""
+ mail = ""
+ gecos = ""
+ directory = ""
+ groups = ""
+ shell = ""
+
+ match = False
+ cont = False
+
+ options, args = parse_options()
+
+ if len(args) != 2:
+ usage()
+
+ username = args[1]
+
+ client = ipaclient.IPAClient()
+ try:
+ attrs = ['*']
+
+ # in case any attributes being modified are operational such as
+ # nsaccountlock. Any attribute to be deleted needs to be included
+ # in the original record so it can be seen as being removed.
+ if options.delattr:
+ for d in options.delattr:
+ attrs.append(d)
+ user = client.get_user_by_uid(username, sattrs=attrs)
+ except ipa.ipaerror.exception_for(ipa.ipaerror.LDAP_NOT_FOUND):
+ print "User %s not found" % username
+ return 1
+ except ipa.ipaerror.IPAError, e:
+ print "%s" % e.message
+ return 1
+ except kerberos.GSSError, e:
+ print "Could not initialize GSSAPI: %s/%s" % (e[0][0][0], e[0][1][0])
+ return 1
+
+ # If any options are set we use just those. Otherwise ask for all of them.
+ if options.gn or options.sn or options.directory or options.gecos or options.mail or options.shell or options.addattr or options.delattr or options.setattr or options.activate:
+ givenname = options.gn
+ lastname = options.sn
+ gecos = options.gecos
+ directory = options.directory
+ mail = options.mail
+ shell = options.shell
+ else:
+ if not options.gn:
+ while (cont != True):
+ givenname = raw_input("First name: [%s] " % user.getValue('givenname'))
+ if (ipavalidate.String(givenname, notEmpty=False)):
+ print "Please enter a value"
+ else:
+ cont = True
+ if len(givenname) < 1:
+ givenname = None
+ cont = True
+ else:
+ givenname = options.gn
+ if (ipavalidate.String(givenname, notEmpty=True)):
+ print "Please enter a value"
+ return 1
+
+ cont = False
+ if not options.sn:
+ while (cont != True):
+ lastname = raw_input(" Last name: [%s] " % user.getValue('sn'))
+ if (ipavalidate.String(lastname, notEmpty=False)):
+ print "Please enter a value"
+ else:
+ cont = True
+ if len(lastname) < 1:
+ lastname = None
+ cont = True
+ else:
+ lastname = options.sn
+ if (ipavalidate.String(lastname, notEmpty=True)):
+ print "Please enter a value"
+ return 1
+
+ cont = False
+ if not options.mail:
+ while (cont != True):
+ mail = raw_input("E-mail addr: [%s]" % user.getValue('mail'))
+ if (ipavalidate.Email(mail, notEmpty=False)):
+ print "E-mail must include a user and domain name"
+ else:
+ cont = True
+ else:
+ mail = options.mail
+ if (ipavalidate.Email(mail)):
+ print "E-mail must include a user and domain name"
+ return 1
+
+ # Ask the questions we don't normally force. We don't require answers
+ # for these.
+ cont = False
+ if not options.gecos:
+ while (cont != True):
+ gecos = raw_input("gecos: [%s] " % user.getValue('gecos'))
+ if (ipavalidate.String(gecos, notEmpty=False)):
+ print "Please enter a value"
+ else:
+ cont = True
+
+ cont = False
+ if not options.directory:
+ while (cont != True):
+ directory = raw_input("home directory: [%s] " % user.getValue('homeDirectory'))
+ if (ipavalidate.Path(gecos, notEmpty=False)):
+ print "Valid path is required"
+ else:
+ cont = True
+ cont = False
+ if not options.shell:
+ while (cont != True):
+ shell = raw_input("shell: [%s] " % user.getValue('loginshell'))
+
+ if len(shell) < 1:
+ shell = None
+ cont = True
+ cont = False
+
+ if givenname:
+ user.setValue('givenname', givenname)
+ if lastname:
+ user.setValue('sn', lastname)
+ if mail:
+ user.setValue('mail', mail)
+
+ if gecos:
+ user.setValue('gecos', gecos)
+ if directory:
+ user.setValue('homedirectory', directory)
+ if shell:
+ user.setValue('loginshell', shell)
+
+ if options.delattr:
+ for d in options.delattr:
+ user.delValue(d)
+
+ if options.setattr:
+ for s in options.setattr:
+ s = s.split('=')
+ if len(s) != 2:
+ set_add_usage("set")
+ sys.exit(1)
+ (attr,value) = s
+ user.setValue(attr, value)
+
+ if options.addattr:
+ for a in options.addattr:
+ a = a.split('=')
+ if len(a) != 2:
+ set_add_usage("add")
+ sys.exit(1)
+ (attr,value) = a
+ cvalue = user.getValue(attr)
+ if cvalue:
+ if isinstance(cvalue,str):
+ cvalue = [cvalue]
+ value = cvalue + [value]
+ user.setValue(attr, value)
+
+ try:
+ if options.activate:
+ try:
+ client.mark_user_active(user.getValues('uid'))
+ print "User activated successfully."
+ except ipa.ipaerror.exception_for(ipa.ipaerror.LDAP_EMPTY_MODLIST):
+ print "User is already marked active"
+ return 0
+ except:
+ raise
+ client.update_user(user)
+ except xmlrpclib.Fault, fault:
+ if fault.faultCode == errno.ECONNREFUSED:
+ print "The IPA XML-RPC service is not responding."
+ else:
+ print fault.faultString
+ return 1
+ except kerberos.GSSError, e:
+ print "Could not initialize GSSAPI: %s/%s" % (e[0][0][0], e[0][1][0])
+ return 1
+ except xmlrpclib.ProtocolError, e:
+ print "Unable to connect to IPA server: %s" % (e.errmsg)
+ return 1
+ except ipa.ipaerror.IPAError, e:
+ print "%s" % (e.message)
+ return 1
+
+ print username + " successfully updated"
+ return 0
+
+if __name__ == "__main__":
+ sys.exit(main())
generated by cgit (git 2.34.1) at 2024-11-19 17:26:32 +0000