diff options
Diffstat (limited to 'ipa-admintools/ipa-adduser')
| -rw-r--r-- | ipa-admintools/ipa-adduser | 290 |
1 files changed, 290 insertions, 0 deletions
diff --git a/ipa-admintools/ipa-adduser b/ipa-admintools/ipa-adduser new file mode 100644 index 00000000..cf1f4324 --- /dev/null +++ b/ipa-admintools/ipa-adduser @@ -0,0 +1,290 @@ +#! /usr/bin/python -E +# Authors: Rob Crittenden <rcritten@redhat.com> +# +# Copyright (C) 2007 Red Hat +# see file 'COPYING' for use and warranty information +# +# This program is free software; you can redistribute it and/or +# modify it under the terms of the GNU General Public License as +# published by the Free Software Foundation; version 2 only +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program; if not, write to the Free Software +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA +# +import sys +try: + from optparse import OptionParser + import ipa + import ipa.user + import ipa.ipaclient as ipaclient + import ipa.ipavalidate as ipavalidate + import ipa.ipautil as ipautil + import ipa.config + import ipa.ipaadminutil as ipaadminutil + + import xmlrpclib + import kerberos + import krbV + import ldap + import getpass + import errno + import socket +except ImportError: + print >> sys.stderr, """\ +There was a problem importing one of the required Python modules. The +error was: + + %s +""" % sys.exc_value + sys.exit(1) + +def set_add_usage(which): + print "%s option usage: --%s NAME=VALUE" % (which, which) + +def parse_options(): + usage = "%prog [options] [user]" + parser = OptionParser(usage=usage) + parser.add_option("-c", "--gecos", dest="gecos", + help="Set the GECOS field") + parser.add_option("-d", "--directory", dest="directory", + help="Set the User's home directory") + parser.add_option("-f", "--firstname", dest="gn", + help="User's first name") + parser.add_option("-l", "--lastname", dest="sn", + help="User's last name") + parser.add_option("-p", "--password", dest="password", + help="Set user's password") + parser.add_option("-P", dest="password_prompt", action="store_true", + help="Prompt on the command-line for the user's password") + parser.add_option("-s", "--shell", dest="shell", + help="Set user's login shell to shell") + parser.add_option("-G", "--groups", dest="groups", + help="Add account to one or more groups (comma-separated)") + parser.add_option("-k", "--krb-principal", dest="principal", + help="Set user's Kerberos Principal Name") + parser.add_option("-M", "--mailAddress", dest="mail", + help="Set user's e-mail address") + parser.add_option("-v", "--verbose", action="store_true", dest="verbose", + help="Verbose output of the XML-RPC connection") + parser.add_option("--addattr", dest="addattr", + help="Adds an attribute or values to that attribute, attr=value", + action="append") + parser.add_option("--setattr", dest="setattr", + help="Set an attribute, dropping any existing values that may exist", + action="append") + + ipa.config.add_standard_options(parser) + options, args = parser.parse_args() + + if len(args) > 1: + parser.error("too many arguments") + + ipa.config.init_config(options) + + return options, args + +def main(): + # The following fields are required + givenname = "" + lastname = "" + username = "" + principal = "" + password = "" + mail = "" + gecos = "" + directory = "" + shell = "" + groups = "" + + match = False + + all_interactive = False + + user=ipa.user.User() + options, args = parse_options() + + if len(args) != 1: + all_interactive = True + + if not options.gn: + givenname = ipautil.user_input("First name", allow_empty = False) + else: + givenname = options.gn + if not ipavalidate.String(givenname, notEmpty=True): + print "Please enter a value" + return 1 + + if not options.sn: + lastname = ipautil.user_input("Last name", allow_empty = False) + else: + lastname = options.sn + if not ipavalidate.String(lastname, notEmpty=True): + print "Please enter a value" + return 1 + + if len(args) != 1: + username = ipautil.user_input_name("Login name") + else: + username = args[0] + try: + ipaadminutil.check_name(username) + except ValueError, e: + print "Login name " + str(e) + return 1 + + if options.password_prompt: + while match != True: + password = getpass.getpass(" Password: ") + confirm = getpass.getpass(" Password (again): ") + if password != confirm: + print "Passwords do not match" + match = False + else: + match = True + if len(password) < 1: + print "Password cannot be empty" + match = False + else: + password = options.password + + if options.mail: + mail = options.mail + if not ipavalidate.Email(mail): + print "The email provided seem not a valid email." + return 1 + + # Ask the questions we don't normally force. We don't require answers + # for these. + if all_interactive is True: + if not options.gecos: + gecos = ipautil.user_input("gecos") + if not options.directory: + directory = ipautil.user_input_path("Home directory", "/home/" + username, allow_empty = True) + if not options.shell: + shell = ipautil.user_input("Shell", "/bin/sh", allow_empty = False) + + else: + gecos = options.gecos + directory = options.directory + shell = options.shell + groups = options.groups + + if options.principal: + principal = options.principal + else: + ctx = krbV.default_context() + principal = username + "@" + ctx.default_realm + + user.setValue('givenname', givenname) + user.setValue('sn', lastname) + user.setValue('uid', username) + user.setValue('krbprincipalname', principal) + if mail: + user.setValue('mail', mail) + if gecos: + user.setValue('gecos', gecos) + if directory: + user.setValue('homedirectory', directory) + if shell: + user.setValue('loginshell', shell) + + if options.setattr: + for s in options.setattr: + s = s.split('=', 1) + if len(s) != 2: + set_add_usage("set") + sys.exit(1) + (attr,value) = s + user.setValue(attr, value) + + if options.addattr: + for a in options.addattr: + a = a.split('=', 1) + if len(a) != 2: + set_add_usage("add") + sys.exit(1) + (attr,value) = a + cvalue = user.getValue(attr) + if cvalue: + if isinstance(cvalue,str): + cvalue = [cvalue] + value = cvalue + [value] + user.setValue(attr, value) + + client = ipaclient.IPAClient(verbose=options.verbose) + + # get group dns and verify they exist + groups_to_add = [] + if groups: + for group in groups.split(','): + group_dn = get_group_dn(client, group) + if not group_dn: + print "group %s doesn't exist" % group + return 1 + groups_to_add.append(group_dn) + + # add the user + client.add_user(user) + + # add the user to all the groups + for group in groups_to_add: + client.add_user_to_group(username, group) + + # Set the User's password + if password is not None: + try: + client.modifyPassword(principal, '', password) + except ipa.ipaerror.IPAError, e: + print "User added but setting the password failed." + print "%s" % (e.message) + return 1 + + print username + " successfully added" + return 0 + +def get_group_dn(client, group_name): + if not group_name: + return None + + found = client.find_groups(group_name) + if len(found) < 2: + return None + for group in found[1:]: + if group.cn == group_name: + return group.dn + return None + +try: + if __name__ == "__main__": + sys.exit(main()) +except SystemExit, e: + sys.exit(e) +except KeyboardInterrupt, e: + sys.exit(1) +except xmlrpclib.Fault, fault: + if fault.faultCode == errno.ECONNREFUSED: + print "The IPA XML-RPC service is not responding." + else: + print fault.faultString + sys.exit(1) +except kerberos.GSSError, e: + print "Could not initialize GSSAPI: %s/%s" % (ipautil.get_gsserror(e)) + sys.exit(1) +except xmlrpclib.ProtocolError, e: + print "Unable to connect to IPA server: %s" % (e.errmsg) + sys.exit(1) +except ipa.ipaerror.IPAError, e: + print "%s" % (e.message) + sys.exit(1) +except socket.error, e: + print e[1] + print "Re-run with -v flag for more details." +except Exception, e: + print "%s" % str(e) + sys.exit(1) |