From: Evan Broder <broder@mit.edu>
Date: Mon, 23 Nov 2009 01:54:11 +0000 (-0500)
Subject: Re-arrange the authz configuration.
X-Git-Tag: 0.2.2~2
X-Git-Url: http://xvm.mit.edu/gitweb/invirt/packages/invirt-database.git/commitdiff_plain/a0b0348e89fc20f5810c5744758a88a7928fef4c?hp=59294cdc7be3c7df5eadcec430c13dfcf6054d96

Re-arrange the authz configuration.

In particular, even if we allow for mixing of multiple authz
mechanisms at some point, you won't have multiple instances of the
locker authz type, so the "type" shouldn't be a property of each of
the cells we specify how to authenticate against.

svn path=/trunk/packages/invirt-database/; revision=2557
---

diff --git a/python/database/validate.py b/python/database/validate.py
index c072367..af964ef 100644
--- a/python/database/validate.py
+++ b/python/database/validate.py
@@ -240,7 +240,7 @@ def testAdmin(user, admin, machine):
             return admin
         admin = 'system:' + admin
     try:
-        if user in getafsgroups.getAfsGroupMembers(admin, config.authz[0].cell):
+        if user in getafsgroups.getAfsGroupMembers(admin, config.authz.cells[0].cell):
             return admin
     except getafsgroups.AfsProcessError, e:
         errmsg = str(e)