Hot-keys on this page

r m x p   toggle line displays

j k   next/prev highlighted chunk

0   (zero) top of page

1   (one) first highlighted chunk

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

# Authors: Rob Crittenden <rcritten@redhat.com> 

# 

# Copyright (C) 2010  Red Hat 

# see file 'COPYING' for use and warranty information 

# 

# This program is free software; you can redistribute it and/or modify 

# it under the terms of the GNU General Public License as published by 

# the Free Software Foundation, either version 3 of the License, or 

# (at your option) any later version. 

# 

# This program is distributed in the hope that it will be useful, 

# but WITHOUT ANY WARRANTY; without even the implied warranty of 

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the 

# GNU General Public License for more details. 

# 

# You should have received a copy of the GNU General Public License 

# along with this program.  If not, see <http://www.gnu.org/licenses/>. 

# 

 

import os 

import sys 

import shutil 

import random 

import traceback 

from ipapython.ipa_log_manager import * 

 

from ipaserver.install import installutils 

from ipaserver.install import dsinstance 

from ipaserver.install import ldapupdate 

from ipaserver.install import service 

 

DSBASE = '/etc/dirsrv/slapd-' 

DSE = 'dse.ldif' 

 

class IPAUpgrade(service.Service): 

    """ 

    Update the LDAP data in an instance by turning off all network 

    listeners and updating over ldapi. This way we know the server is 

    quiet. 

    """ 

    def __init__(self, realm_name, files=[], live_run=True): 

        """ 

        realm_name: kerberos realm name, used to determine DS instance dir 

        files: list of update files to process. If none use UPDATEDIR 

        live_run: boolean that defines if we are in test or live mode. 

        """ 

 

        ext = '' 

        rand = random.Random() 

        for i in range(8): 

            h = "%02x" % rand.randint(0,255) 

            ext += h 

        service.Service.__init__(self, "dirsrv") 

        serverid = dsinstance.realm_to_serverid(realm_name) 

        self.filename = '%s%s/%s' % (DSBASE, serverid, DSE) 

        self.savefilename = '%s%s/%s.ipa.%s' % (DSBASE, serverid, DSE, ext) 

        self.live_run = live_run 

        self.files = files 

        self.modified = False 

        self.badsyntax = False 

        self.upgradefailed = False 

        self.serverid = serverid 

 

    def __start_nowait(self): 

        # Don't wait here because we've turned off port 389. The connection 

        # we make will wait for the socket. 

        super(IPAUpgrade, self).start(wait=False) 

 

    def __stop_instance(self): 

        """Stop only the main DS instance""" 

        super(IPAUpgrade, self).stop(self.serverid) 

 

    def create_instance(self): 

        self.step("stopping directory server", self.__stop_instance) 

        self.step("saving configuration", self.__save_config) 

        self.step("disabling listeners", self.__disable_listeners) 

        self.step("starting directory server", self.__start_nowait) 

        self.step("upgrading server", self.__upgrade) 

        self.step("stopping directory server", self.__stop_instance) 

        self.step("restoring configuration", self.__restore_config) 

        self.step("starting directory server", self.start) 

 

        self.start_creation(start_message="Upgrading IPA:", 

                            show_service_name=False) 

 

    def __save_config(self): 

        shutil.copy2(self.filename, self.savefilename) 

        port = installutils.get_directive(self.filename, 'nsslapd-port', 

               separator=':') 

        security = installutils.get_directive(self.filename, 'nsslapd-security', 

                   separator=':') 

 

        self.backup_state('nsslapd-port', port) 

        self.backup_state('nsslapd-security', security) 

 

    def __restore_config(self): 

        port = self.restore_state('nsslapd-port') 

        security = self.restore_state('nsslapd-security') 

 

        installutils.set_directive(self.filename, 'nsslapd-port', 

            port, quotes=False, separator=':') 

        installutils.set_directive(self.filename, 'nsslapd-security', 

            security, quotes=False, separator=':') 

 

    def __disable_listeners(self): 

        installutils.set_directive(self.filename, 'nsslapd-port', 

            0, quotes=False, separator=':') 

        installutils.set_directive(self.filename, 'nsslapd-security', 

            'off', quotes=False, separator=':') 

        installutils.set_directive(self.filename, 'nsslapd-ldapientrysearchbase', 

            None, quotes=False, separator=':') 

 

    def __upgrade(self): 

        try: 

            ld = ldapupdate.LDAPUpdate(dm_password='', ldapi=True, live_run=self.live_run, plugins=True) 

            if len(self.files) == 0: 

                self.files = ld.get_all_files(ldapupdate.UPDATES_DIR) 

            self.modified = ld.update(self.files, ordered=True) 

        except ldapupdate.BadSyntax, e: 

            root_logger.error('Bad syntax in upgrade %s' % str(e)) 

            self.modified = False 

            self.badsyntax = True 

        except Exception, e: 

            # Bad things happened, return gracefully 

            self.modified = False 

            self.upgradefailed = True 

            root_logger.error('Upgrade failed with %s' % str(e)) 

            root_logger.debug('%s', traceback.format_exc()) 

 

def main(): 

    if os.getegid() != 0: 

        print "Must be root to set up server" 

        return 1 

 

    update = IPAUpgrade('EXAMPLE.COM') 

    update.create_instance() 

 

    return 0 

 

try: 

    if __name__ == "__main__": 

        sys.exit(main()) 

except SystemExit, e: 

    sys.exit(e) 

except KeyboardInterrupt, e: 

    sys.exit(1)