diff options
author | Rob Crittenden <rcritten@redhat.com> | 2007-10-24 13:10:23 -0400 |
---|---|---|
committer | Rob Crittenden <rcritten@redhat.com> | 2007-10-24 13:10:23 -0400 |
commit | 0d80589bcb016e9d2894f8663cfa4fd815586e8e (patch) | |
tree | b607a9e627d31f58d49844320df7fdd4dde52e14 /ipa-admintools/ipa-listdelegation | |
parent | 60d46ac6607b3ba1e2b525b7f2f1a64b08f778c6 (diff) | |
download | freeipa-0d80589bcb016e9d2894f8663cfa4fd815586e8e.tar.gz freeipa-0d80589bcb016e9d2894f8663cfa4fd815586e8e.tar.xz freeipa-0d80589bcb016e9d2894f8663cfa4fd815586e8e.zip |
Command-line delegation tools with man pages
Diffstat (limited to 'ipa-admintools/ipa-listdelegation')
-rw-r--r-- | ipa-admintools/ipa-listdelegation | 91 |
1 files changed, 91 insertions, 0 deletions
diff --git a/ipa-admintools/ipa-listdelegation b/ipa-admintools/ipa-listdelegation new file mode 100644 index 00000000..54ab346b --- /dev/null +++ b/ipa-admintools/ipa-listdelegation @@ -0,0 +1,91 @@ +#! /usr/bin/python -E +# Authors: Rob Crittenden <rcritten@redhat.com> +# +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information +# +# This program is free software; you can redistribute it and/or +# modify it under the terms of the GNU General Public License as +# published by the Free Software Foundation; version 2 only +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program; if not, write to the Free Software +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA +# + +import sys +from optparse import OptionParser +import ipa.ipaclient as ipaclient +import ipa.config + +import xmlrpclib +import kerberos + +import ipa.aci +from ipa import ipaerror + +aci_fields = ['*', 'aci'] +def usage(): + print "ipa-listdelgation" + sys.exit(1) + +def parse_options(): + parser = OptionParser() + parser.add_option("--usage", action="store_true", + help="Program usage") + + args = ipa.config.init_config(sys.argv) + options, args = parser.parse_args(args) + + return options, args + +def main(): + + options, args = parse_options() + + client = ipaclient.IPAClient() + try: + aci_entry = client.get_aci_entry(aci_fields) + except ipaerror.IPAError, e: + print("Delegation list failed: " + str(e)) + return 1 + except kerberos.GSSError, e: + print "Could not initialize GSSAPI: %s/%s" % (e[0][0][0], e[0][1][0]) + return 1 + + aci_str_list = aci_entry.getValues('aci') + if aci_str_list is None: + aci_str_list = [] + if not(isinstance(aci_str_list,list) or isinstance(aci_str_list,tuple)): + aci_str_list = [aci_str_list] + + aci_list = [] + for aci_str in aci_str_list: + try: + aci = ipa.aci.ACI(aci_str) + aci_list.append(aci) + except SyntaxError: + # ignore aci_str's that ACI can't parse + pass + + group_dn_to_cn = ipa.aci.extract_group_cns(aci_list, client) + + for a in aci_list: + labels = client.attrs_to_labels(a.attrs) + print "Delegation Name: " + a.name + print "Group " + group_dn_to_cn[a.source_group] + print " can modify these attributes: " + for l in labels: + print "\t" + labels[l] + print " for group " + group_dn_to_cn[a.dest_group] + print + + return 0 + +if __name__ == "__main__": + sys.exit(main()) |