diff options
Diffstat (limited to 'ipa-admintools/ipa-adduser')
| -rw-r--r-- | ipa-admintools/ipa-adduser | 290 |
1 files changed, 0 insertions, 290 deletions
diff --git a/ipa-admintools/ipa-adduser b/ipa-admintools/ipa-adduser deleted file mode 100644 index cf1f4324..00000000 --- a/ipa-admintools/ipa-adduser +++ /dev/null @@ -1,290 +0,0 @@ -#! /usr/bin/python -E -# Authors: Rob Crittenden <rcritten@redhat.com> -# -# Copyright (C) 2007 Red Hat -# see file 'COPYING' for use and warranty information -# -# This program is free software; you can redistribute it and/or -# modify it under the terms of the GNU General Public License as -# published by the Free Software Foundation; version 2 only -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program; if not, write to the Free Software -# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA -# -import sys -try: - from optparse import OptionParser - import ipa - import ipa.user - import ipa.ipaclient as ipaclient - import ipa.ipavalidate as ipavalidate - import ipa.ipautil as ipautil - import ipa.config - import ipa.ipaadminutil as ipaadminutil - - import xmlrpclib - import kerberos - import krbV - import ldap - import getpass - import errno - import socket -except ImportError: - print >> sys.stderr, """\ -There was a problem importing one of the required Python modules. The -error was: - - %s -""" % sys.exc_value - sys.exit(1) - -def set_add_usage(which): - print "%s option usage: --%s NAME=VALUE" % (which, which) - -def parse_options(): - usage = "%prog [options] [user]" - parser = OptionParser(usage=usage) - parser.add_option("-c", "--gecos", dest="gecos", - help="Set the GECOS field") - parser.add_option("-d", "--directory", dest="directory", - help="Set the User's home directory") - parser.add_option("-f", "--firstname", dest="gn", - help="User's first name") - parser.add_option("-l", "--lastname", dest="sn", - help="User's last name") - parser.add_option("-p", "--password", dest="password", - help="Set user's password") - parser.add_option("-P", dest="password_prompt", action="store_true", - help="Prompt on the command-line for the user's password") - parser.add_option("-s", "--shell", dest="shell", - help="Set user's login shell to shell") - parser.add_option("-G", "--groups", dest="groups", - help="Add account to one or more groups (comma-separated)") - parser.add_option("-k", "--krb-principal", dest="principal", - help="Set user's Kerberos Principal Name") - parser.add_option("-M", "--mailAddress", dest="mail", - help="Set user's e-mail address") - parser.add_option("-v", "--verbose", action="store_true", dest="verbose", - help="Verbose output of the XML-RPC connection") - parser.add_option("--addattr", dest="addattr", - help="Adds an attribute or values to that attribute, attr=value", - action="append") - parser.add_option("--setattr", dest="setattr", - help="Set an attribute, dropping any existing values that may exist", - action="append") - - ipa.config.add_standard_options(parser) - options, args = parser.parse_args() - - if len(args) > 1: - parser.error("too many arguments") - - ipa.config.init_config(options) - - return options, args - -def main(): - # The following fields are required - givenname = "" - lastname = "" - username = "" - principal = "" - password = "" - mail = "" - gecos = "" - directory = "" - shell = "" - groups = "" - - match = False - - all_interactive = False - - user=ipa.user.User() - options, args = parse_options() - - if len(args) != 1: - all_interactive = True - - if not options.gn: - givenname = ipautil.user_input("First name", allow_empty = False) - else: - givenname = options.gn - if not ipavalidate.String(givenname, notEmpty=True): - print "Please enter a value" - return 1 - - if not options.sn: - lastname = ipautil.user_input("Last name", allow_empty = False) - else: - lastname = options.sn - if not ipavalidate.String(lastname, notEmpty=True): - print "Please enter a value" - return 1 - - if len(args) != 1: - username = ipautil.user_input_name("Login name") - else: - username = args[0] - try: - ipaadminutil.check_name(username) - except ValueError, e: - print "Login name " + str(e) - return 1 - - if options.password_prompt: - while match != True: - password = getpass.getpass(" Password: ") - confirm = getpass.getpass(" Password (again): ") - if password != confirm: - print "Passwords do not match" - match = False - else: - match = True - if len(password) < 1: - print "Password cannot be empty" - match = False - else: - password = options.password - - if options.mail: - mail = options.mail - if not ipavalidate.Email(mail): - print "The email provided seem not a valid email." - return 1 - - # Ask the questions we don't normally force. We don't require answers - # for these. - if all_interactive is True: - if not options.gecos: - gecos = ipautil.user_input("gecos") - if not options.directory: - directory = ipautil.user_input_path("Home directory", "/home/" + username, allow_empty = True) - if not options.shell: - shell = ipautil.user_input("Shell", "/bin/sh", allow_empty = False) - - else: - gecos = options.gecos - directory = options.directory - shell = options.shell - groups = options.groups - - if options.principal: - principal = options.principal - else: - ctx = krbV.default_context() - principal = username + "@" + ctx.default_realm - - user.setValue('givenname', givenname) - user.setValue('sn', lastname) - user.setValue('uid', username) - user.setValue('krbprincipalname', principal) - if mail: - user.setValue('mail', mail) - if gecos: - user.setValue('gecos', gecos) - if directory: - user.setValue('homedirectory', directory) - if shell: - user.setValue('loginshell', shell) - - if options.setattr: - for s in options.setattr: - s = s.split('=', 1) - if len(s) != 2: - set_add_usage("set") - sys.exit(1) - (attr,value) = s - user.setValue(attr, value) - - if options.addattr: - for a in options.addattr: - a = a.split('=', 1) - if len(a) != 2: - set_add_usage("add") - sys.exit(1) - (attr,value) = a - cvalue = user.getValue(attr) - if cvalue: - if isinstance(cvalue,str): - cvalue = [cvalue] - value = cvalue + [value] - user.setValue(attr, value) - - client = ipaclient.IPAClient(verbose=options.verbose) - - # get group dns and verify they exist - groups_to_add = [] - if groups: - for group in groups.split(','): - group_dn = get_group_dn(client, group) - if not group_dn: - print "group %s doesn't exist" % group - return 1 - groups_to_add.append(group_dn) - - # add the user - client.add_user(user) - - # add the user to all the groups - for group in groups_to_add: - client.add_user_to_group(username, group) - - # Set the User's password - if password is not None: - try: - client.modifyPassword(principal, '', password) - except ipa.ipaerror.IPAError, e: - print "User added but setting the password failed." - print "%s" % (e.message) - return 1 - - print username + " successfully added" - return 0 - -def get_group_dn(client, group_name): - if not group_name: - return None - - found = client.find_groups(group_name) - if len(found) < 2: - return None - for group in found[1:]: - if group.cn == group_name: - return group.dn - return None - -try: - if __name__ == "__main__": - sys.exit(main()) -except SystemExit, e: - sys.exit(e) -except KeyboardInterrupt, e: - sys.exit(1) -except xmlrpclib.Fault, fault: - if fault.faultCode == errno.ECONNREFUSED: - print "The IPA XML-RPC service is not responding." - else: - print fault.faultString - sys.exit(1) -except kerberos.GSSError, e: - print "Could not initialize GSSAPI: %s/%s" % (ipautil.get_gsserror(e)) - sys.exit(1) -except xmlrpclib.ProtocolError, e: - print "Unable to connect to IPA server: %s" % (e.errmsg) - sys.exit(1) -except ipa.ipaerror.IPAError, e: - print "%s" % (e.message) - sys.exit(1) -except socket.error, e: - print e[1] - print "Re-run with -v flag for more details." -except Exception, e: - print "%s" % str(e) - sys.exit(1) |