summaryrefslogtreecommitdiffstats
path: root/ipa-admintools/ipa-deldelegation
diff options
context:
space:
mode:
Diffstat (limited to 'ipa-admintools/ipa-deldelegation')
-rw-r--r--ipa-admintools/ipa-deldelegation143
1 files changed, 0 insertions, 143 deletions
diff --git a/ipa-admintools/ipa-deldelegation b/ipa-admintools/ipa-deldelegation
deleted file mode 100644
index f11cf4b4..00000000
--- a/ipa-admintools/ipa-deldelegation
+++ /dev/null
@@ -1,143 +0,0 @@
-#! /usr/bin/python -E
-# Authors: Rob Crittenden <rcritten@redhat.com>
-#
-# Copyright (C) 2007 Red Hat
-# see file 'COPYING' for use and warranty information
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of the GNU General Public License as
-# published by the Free Software Foundation; version 2 only
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
-#
-import sys
-try:
- from optparse import OptionParser
- import ipa.ipaclient as ipaclient
- import ipa.config
- import ipa.ipautil as ipautil
-
- import xmlrpclib
- import kerberos
- import copy
- import errno
- import socket
-
- import ipa.aci
- from ipa import ipaerror
-except ImportError:
- print >> sys.stderr, """\
-There was a problem importing one of the required Python modules. The
-error was:
-
- %s
-""" % sys.exc_value
- sys.exit(1)
-
-aci_fields = ['*', 'aci']
-
-def parse_options():
- usage = "%prog [-v|--verbose] name"
- parser = OptionParser(usage=usage)
- parser.add_option("-v", "--verbose", action="store_true", dest="verbose",
- help="Verbose output of the XML-RPC connection")
-
- ipa.config.add_standard_options(parser)
- options, args = parser.parse_args()
- ipa.config.verify_args(parser, args, "name")
- ipa.config.init_config(options)
-
- return options, args
-
-def main():
-
- options, args = parse_options()
-
- client = ipaclient.IPAClient(verbose=options.verbose)
- aci_entry = client.get_aci_entry(aci_fields)
-
- aci_str_list = aci_entry.getValues('aci')
- if aci_str_list is None:
- aci_str_list = []
- if not(isinstance(aci_str_list,list) or isinstance(aci_str_list,tuple)):
- aci_str_list = [aci_str_list]
-
- acistr = None
- aci_list = []
- for aci_str in aci_str_list:
- try:
- aci = ipa.aci.ACI(aci_str)
- if aci.name == args[0]:
- acistr = aci_str
- source_group = aci.source_group
- else:
- aci_list.append(aci)
- except SyntaxError:
- # ignore aci_str's that ACI can't parse
- pass
-
- if acistr is None:
- print "No delegation '%s' found." % args[0]
- return 2
-
- old_aci_index = aci_str_list.index(acistr)
-
- new_aci_str_list = copy.deepcopy(aci_str_list)
- del new_aci_str_list[old_aci_index]
- aci_entry.setValue('aci', new_aci_str_list)
-
- client.update_entry(aci_entry)
-
- last = True
- # If this is the last delegation for a group, remove it from editors
- for a in aci_list:
- if source_group == a.source_group:
- last = False
- break
-
- if last:
- group = client.get_entry_by_cn("editors")
- client.remove_member_from_group(source_group, group.dn)
-
- print "Delegation removed."
-
- return 0
-
-try:
- if __name__ == "__main__":
- sys.exit(main())
-except SystemExit, e:
- sys.exit(e)
-except KeyboardInterrupt, e:
- sys.exit(1)
-except xmlrpclib.Fault, fault:
- if fault.faultCode == errno.ECONNREFUSED:
- print "The IPA XML-RPC service is not responding."
- else:
- print fault.faultString
- sys.exit(1)
-except (SyntaxError, ipaerror.IPAError), e:
- print "Delegation deletion failed: " + str(e)
- sys.exit(1)
-except kerberos.GSSError, e:
- print "Could not initialize GSSAPI: %s/%s" % (ipautil.get_gsserror(e))
- sys.exit(1)
-except xmlrpclib.ProtocolError, e:
- print "Unable to connect to IPA server: %s" % (e.errmsg)
- sys.exit(1)
-except ipa.ipaerror.IPAError, e:
- print "%s" % (e.message)
- sys.exit(1)
-except socket.error, e:
- print e[1]
- print "Re-run with -v flag for more details."
-except Exception, e:
- print "%s" % str(e)
- sys.exit(1)