Hot-keys on this page

r m x p   toggle line displays

j k   next/prev highlighted chunk

0   (zero) top of page

1   (one) first highlighted chunk

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

# Authors: 

#   Rob Crittenden <rcritten@redhat.com> 

# 

# Copyright (C) 2010  Red Hat 

# see file 'COPYING' for use and warranty information 

# 

# This program is free software; you can redistribute it and/or modify 

# it under the terms of the GNU General Public License as published by 

# the Free Software Foundation, either version 3 of the License, or 

# (at your option) any later version. 

# 

# This program is distributed in the hope that it will be useful, 

# but WITHOUT ANY WARRANTY; without even the implied warranty of 

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the 

# GNU General Public License for more details. 

# 

# You should have received a copy of the GNU General Public License 

# along with this program.  If not, see <http://www.gnu.org/licenses/>. 

 

from ipalib import api 

from ipalib import Str 

from ipalib.plugins.baseldap import LDAPObject, LDAPCreate, LDAPDelete 

from ipalib.plugins.baseldap import LDAPUpdate, LDAPSearch, LDAPRetrieve 

 

from ipalib import _, ngettext 

 

__doc__ = _(""" 

HBAC Services 

 

The PAM services that HBAC can control access to. The name used here 

must match the service name that PAM is evaluating. 

 

EXAMPLES: 

 

Add a new HBAC service: 

   ipa hbacsvc-add tftp 

 

Modify an existing HBAC service: 

   ipa hbacsvc-mod --desc="TFTP service" tftp 

 

Search for HBAC services. This example will return two results, the FTP 

service and the newly-added tftp service: 

   ipa hbacsvc-find ftp 

 

Delete an HBAC service: 

   ipa hbacsvc-del tftp 

 

""") 

 

topic = ('hbac', _('Host based access control commands')) 

 

class hbacsvc(LDAPObject): 

    """ 

    HBAC Service object. 

    """ 

    container_dn = api.env.container_hbacservice 

    object_name = _('HBAC service') 

    object_name_plural = _('HBAC services') 

    object_class = [ 'ipaobject', 'ipahbacservice' ] 

    default_attributes = ['cn', 'description', 'memberof'] 

    uuid_attribute = 'ipauniqueid' 

    attribute_members = { 

        'memberof': ['hbacsvcgroup'], 

    } 

 

    label = _('HBAC Services') 

    label_singular = _('HBAC Service') 

 

    takes_params = ( 

        Str('cn', 

            cli_name='service', 

            label=_('Service name'), 

            doc=_('HBAC service'), 

            primary_key=True, 

            normalizer=lambda value: value.lower(), 

        ), 

        Str('description?', 

            cli_name='desc', 

            label=_('Description'), 

            doc=_('HBAC service description'), 

        ), 

    ) 

 

api.register(hbacsvc) 

 

 

class hbacsvc_add(LDAPCreate): 

    __doc__ = _('Add a new HBAC service.') 

 

    msg_summary = _('Added HBAC service "%(value)s"') 

 

api.register(hbacsvc_add) 

 

 

class hbacsvc_del(LDAPDelete): 

    __doc__ = _('Delete an existing HBAC service.') 

 

    msg_summary = _('Deleted HBAC service "%(value)s"') 

 

api.register(hbacsvc_del) 

 

 

class hbacsvc_mod(LDAPUpdate): 

    __doc__ = _('Modify an HBAC service.') 

 

    msg_summary = _('Modified HBAC service "%(value)s"') 

 

api.register(hbacsvc_mod) 

 

 

class hbacsvc_find(LDAPSearch): 

    __doc__ = _('Search for HBAC services.') 

 

    msg_summary = ngettext( 

        '%(count)d HBAC service matched', '%(count)d HBAC services matched', 0 

    ) 

 

api.register(hbacsvc_find) 

 

 

class hbacsvc_show(LDAPRetrieve): 

    __doc__ = _('Display information about an HBAC service.') 

 

api.register(hbacsvc_show)