3 cdef import from "afs/ptuser.h":
9 ctypedef char prname[PR_MAXNAMELEN]
12 unsigned int namelist_len
16 unsigned int prlist_len
20 unsigned int idlist_len
31 int ubik_PR_NameToID(ubik_client *, afs_int32, namelist *, idlist *)
32 int ubik_PR_IDToName(ubik_client *, afs_int32, idlist *, namelist *)
33 int ubik_PR_INewEntry(ubik_client *, afs_int32, char *, afs_int32, afs_int32)
34 int ubik_PR_NewEntry(ubik_client *, afs_int32, char *, afs_int32, afs_int32, afs_int32 *)
35 int ubik_PR_Delete(ubik_client *, afs_int32, afs_int32)
36 int ubik_PR_AddToGroup(ubik_client *, afs_int32, afs_int32, afs_int32)
37 int ubik_PR_RemoveFromGroup(ubik_client *, afs_int32, afs_int32, afs_int32)
38 int ubik_PR_ListElements(ubik_client *, afs_int32, afs_int32, prlist *, afs_int32 *)
39 int ubik_PR_ListOwned(ubik_client *, afs_int32, afs_int32, prlist *, afs_int32 *)
40 int ubik_PR_ListEntry(ubik_client *, afs_int32, afs_int32, prcheckentry *)
41 int ubik_PR_ChangeEntry(ubik_client *, afs_int32, afs_int32, char *, afs_int32, afs_int32)
43 cdef import from "afs/pterror.h":
48 void initialize_PT_error_table()
51 cdef public afs_int32 flags
52 cdef public afs_int32 id
53 cdef public afs_int32 owner
54 cdef public afs_int32 creator
55 cdef public afs_int32 ngroups
56 cdef public afs_int32 count
58 cdef int _ptentry_from_c(PTEntry p_entry, prcheckentry c_entry) except -1:
63 p_entry.flags = c_entry.flags
64 p_entry.id = c_entry.id
65 p_entry.owner = c_entry.owner
66 p_entry.creator = c_entry.creator
67 p_entry.ngroups = c_entry.ngroups
68 p_entry.count = c_entry.count
71 cdef int _ptentry_to_c(prcheckentry * c_entry, PTEntry p_entry) except -1:
76 c_entry.flags = p_entry.flags
77 c_entry.id = p_entry.id
78 c_entry.owner = p_entry.owner
79 c_entry.creator = p_entry.creator
80 c_entry.ngroups = p_entry.ngroups
81 c_entry.count = p_entry.count
86 A PTS object is essentially a handle to talk to the server in a
89 cell defaults to None. If no argument is passed for cell, PTS
90 connects to the home cell.
92 sec is the security level, an integer from 0 to 3:
93 - 0: unauthenticated connection
94 - 1: try authenticated, then fall back to unauthenticated
95 - 2: fail if an authenticated connection can't be established
96 - 3: same as 2, plus encrypt all traffic to the protection
99 cdef ubik_client * client
101 def __cinit__(self, cell=None, sec=1):
103 cdef afsconf_dir *cdir
104 cdef afsconf_cell info
106 cdef ktc_principal prin
108 cdef rx_securityClass *sc
109 cdef rx_connection *serverconns[MAXSERVERS]
112 initialize_PT_error_table()
123 raise Exception(code, "Error initializing Rx")
125 cdir = afsconf_Open(AFSDIR_CLIENT_ETC_DIRPATH)
128 "Error opening configuration directory (%s): %s" % \
129 (AFSDIR_CLIENT_ETC_DIRPATH, strerror(errno)))
130 code = afsconf_GetCellInfo(cdir, c_cell, "afsprot", &info)
132 raise Exception(code, "GetCellInfo: %s" % afs_error_message(code))
135 strncpy(prin.cell, info.name, sizeof(prin.cell))
137 strncpy(prin.name, "afs", sizeof(prin.name))
139 code = ktc_GetToken(&prin, &token, sizeof(token), NULL);
142 # No really - we wanted authentication
143 raise Exception(code, "Failed to get token for service AFS: %s" % afs_error_message(code))
150 sc = rxkad_NewClientSecurityObject(level, &token.sessionKey,
151 token.kvno, token.ticketLen,
155 sc = rxnull_NewClientSecurityObject()
159 memset(serverconns, 0, sizeof(serverconns))
160 for 0 <= i < info.numServers:
161 serverconns[i] = rx_NewConnection(info.hostAddr[i].sin_addr.s_addr,
162 info.hostAddr[i].sin_port,
167 code = ubik_ClientInit(serverconns, &self.client)
169 raise Exception("Failed to initialize ubik connection to Protection server: %s" % afs_error_message(code))
171 code = rxs_Release(sc)
173 def __dealloc__(self):
174 ubik_ClientDestroy(self.client)
177 def NameToId(self, name):
179 Converts a user or group to an AFS ID.
183 cdef afs_int32 code, id
187 lids.idlist_val = NULL
188 lnames.namelist_len = 1
189 lnames.namelist_val = <prname *>malloc(PR_MAXNAMELEN)
190 strncpy(lnames.namelist_val[0], name, PR_MAXNAMELEN)
191 code = ubik_PR_NameToID(self.client, 0, &lnames, &lids)
192 if lids.idlist_val is not NULL:
193 id = lids.idlist_val[0]
194 free(lids.idlist_val)
195 if id == ANONYMOUSID:
198 raise Exception("Failed to lookup PTS name: %s" % afs_error_message(code))
201 def IdToName(self, id):
203 Convert an AFS ID to the name of a user or group.
208 cdef char name[PR_MAXNAMELEN]
211 lids.idlist_val = <afs_int32 *>malloc(sizeof(afs_int32))
212 lids.idlist_val[0] = id
213 lnames.namelist_len = 0
214 lnames.namelist_val = NULL
215 code = ubik_PR_IDToName(self.client, 0, &lids, &lnames)
216 if lnames.namelist_val is not NULL:
217 strncpy(name, lnames.namelist_val[0], sizeof(name))
218 free(lnames.namelist_val)
219 if lids.idlist_val is not NULL:
220 free(lids.idlist_val)
224 raise Exception("Failed to lookup PTS ID: %s" % afs_error_message(code))
227 def CreateUser(self, name, id=None):
229 Create a new user in the protection database. If an ID is
230 provided, that one will be used.
234 name = name[:PR_MAXNAMELEN].lower()
240 code = ubik_PR_INewEntry(self.client, 0, name, cid, 0)
242 code = ubik_PR_NewEntry(self.client, 0, name, 0, 0, &cid)
245 raise Exception("Failed to create user: %s" % afs_error_message(code))
248 def CreateGroup(self, name, owner, id=None):
250 Create a new group in the protection database. If an ID is
251 provided, that one will be used.
253 cdef afs_int32 code, cid
255 name = name[:PR_MAXNAMELEN].lower()
256 oid = self.NameToId(owner)
260 code = ubik_PR_INewEntry(self.client, 0, name, cid, oid)
262 code = ubik_PR_NewEntry(self.client, 0, name, PRGRP, oid, &cid)
265 raise Exception("Failed to create group: %s" % afs_error_message(code))
268 def Delete(self, id):
270 Delete the protection database entry with the provided ID.
274 code = ubik_PR_Delete(self.client, 0, id)
276 raise Exception("Failed to delete user: %s" % afs_error_message(code))
278 def AddToGroup(self, uid, gid):
280 Add the user with the given ID to the group with the given ID.
284 code = ubik_PR_AddToGroup(self.client, 0, uid, gid)
286 raise Exception("Failed to add user to group: %s" % afs_error_message(code))
288 def RemoveFromGroup(self, uid, gid):
290 Remove the user with the given ID from the group with the given ID.
294 code = ubik_PR_RemoveFromGroup(self.client, 0, uid, gid)
296 raise Exception("Failed to remove user from group: %s" % afs_error_message(code))
298 def ListMembers(self, id):
300 Get the membership of an entity.
302 If id is a group ID, this returns the users that are in that
305 If id is a user ID, this returns the list of groups that user
308 This returns a list of PTS IDs.
310 cdef afs_int32 code, over
313 cdef object members = []
316 alist.prlist_val = NULL
318 code = ubik_PR_ListElements(self.client, 0, id, &alist, &over)
320 if alist.prlist_val is not NULL:
321 for i in range(alist.prlist_len):
322 members.append(alist.prlist_val[i])
323 free(alist.prlist_val)
328 raise Exception("Failed to get group membership: %s" % afs_error_message(code))
332 def ListOwned(self, oid):
334 Get all groups owned by an entity.
336 cdef afs_int32 code, over
339 cdef object owned = []
342 alist.prlist_val = NULL
344 code = ubik_PR_ListOwned(self.client, 0, oid, &alist, &over)
346 if alist.prlist_val is not NULL:
347 for i in range(alist.prlist_len):
348 owned.append(alist.prlist_val[i])
349 free(alist.prlist_val)
354 raise Exception("Failed to get owned entities: %s" % afs_error_message(code))
358 def ListEntry(self, id):
360 Load a PTEntry instance with information about the provided
364 cdef prcheckentry centry
365 cdef object entry = PTEntry()
367 code = ubik_PR_ListEntry(self.client, 0, id, ¢ry)
369 raise Exception("Error getting entity info: %s" % afs_error_message(code))
371 _ptentry_from_c(entry, centry)
374 def ChangeEntry(self, id, newname=None, newid=None, newoid=None):
376 Change the name, ID, and/or owner of a PTS entity.
378 For any of newname, newid, and newoid which aren't specified
379 or ar None, the value isn't changed.
382 cdef afs_int32 c_newid = 0, c_newoid = 0
383 cdef char * c_newname
386 newname = self.IdToName(id)
388 if newid is not None:
390 if newoid is not None:
393 code = ubik_PR_ChangeEntry(self.client, 0, id, c_newname, c_newoid, c_newid)
395 raise Exception("Error changing entity info: %s" % afs_error_message(code))