You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
63 lines
2.5 KiB
63 lines
2.5 KiB
#-*- coding: utf-8 -*-
|
|
|
|
# Copyright 2008-2010 Mir Calculate Ltd. http://www.calculate-linux.org
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
import os
|
|
from cl_datavars import glob_attr
|
|
from cl_utils import genpassword
|
|
from encrypt import getHash
|
|
|
|
class fillVars(glob_attr):
|
|
addDn = lambda x,*y: ",".join(y)
|
|
genDn = lambda x,*y: "=".join(y)
|
|
|
|
def get_ld_temp_dn(self):
|
|
#DN временного пользователя root (для инициализации базы данных)
|
|
return self.addDn(self.genDn("cn", "ldaproot"), self.Get('ld_base_dn'))
|
|
|
|
def get_ld_temp_pw(self):
|
|
"""пароль временного пользователя root"""
|
|
return genpassword()
|
|
|
|
def get_ld_temp_hash(self):
|
|
"""hash пароля временного root"""
|
|
return getHash(self.Get('ld_temp_pw'), self.Get('ld_encrypt'))
|
|
|
|
def get_ld_ldap_access_pw_conf(self):
|
|
"""строки доступа к аттрибуту userPassword в slapd.conf"""
|
|
return ' by dn="%s" write' %self.Get("ld_admin_dn")
|
|
|
|
def get_ld_ldap_access_dn_conf(self):
|
|
"""строки доступа к LDAP DN сервиса в slapd.conf"""
|
|
templStart = 'access to dn.regex=".*%(repl_dn)s$"\n'\
|
|
' by dn="%(admin_dn)s" write\n'\
|
|
' by dn="%(repl_dn)s" write\n'\
|
|
' by dn="%(bind_dn)s" read\n'
|
|
templMail = ' by dn="%(mail_dn)s" read\n'
|
|
templEnd = ' by * none'
|
|
templ = ""
|
|
if self.Get("ld_repl_set")=="on" and self.Get("ld_repl_id")!="":
|
|
templ += templStart
|
|
templDict = {'admin_dn':self.Get("ld_admin_dn"),
|
|
'repl_dn':self.Get("ld_repl_dn"),
|
|
'bind_dn':self.Get("ld_bind_dn")}
|
|
mailDn = self.clGetVar("calculate-mail", "cl_mail_dn")
|
|
if mailDn:
|
|
templDict.update({'mail_dn':mailDn})
|
|
templ += templMail
|
|
templ += templEnd
|
|
return templ%templDict
|
|
return ""
|