March 2011 - YaST Commits - openSUSE Mailing Lists

[yast-commit] r63610 - /branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 17:03:54 2011 New Revision: 63610 URL: http://svn.opensuse.org/viewcvs/yast?rev=63610&view=rev Log: write default_realm as realm Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Fri Mar 18 17:03:54 2011 @@ -2094,7 +2094,7 @@ if (is (e,map) && e != $[]) { map kerberos = (map) e; - SCR::Write (add (domain, "krb5_realm"), kerberos["kerberos_client","default_domain"]:nil); + SCR::Write (add (domain, "krb5_realm"), kerberos["kerberos_client","default_realm"]:nil); SCR::Write (add (domain, "krb5_kdcip"), kerberos["kerberos_client","kdc_server"]:nil); } } -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63609 - /branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 17:02:56 2011 New Revision: 63609 URL: http://svn.opensuse.org/viewcvs/yast?rev=63609&view=rev Log: remove pam_krb5 when sssd is configured (fate#308902) Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Fri Mar 18 17:02:56 2011 @@ -2076,6 +2076,7 @@ // In a mixed Kerberos/LDAP setup the following changes are needed in the [domain/default] section: if (Pam::Enabled("krb5")) { +// FIXME: do not test for pam, it may be already off... SCR::Write (add (domain, "auth_provider"), "krb5"); SCR::Write (add (domain, "chpass_provider"), "krb5"); /* @@ -2093,7 +2094,6 @@ if (is (e,map) && e != $[]) { map kerberos = (map) e; -y2internal ("kerberos export map: %1", kerberos); SCR::Write (add (domain, "krb5_realm"), kerberos["kerberos_client","default_domain"]:nil); SCR::Write (add (domain, "krb5_kdcip"), kerberos["kerberos_client","kdc_server"]:nil); } @@ -2614,6 +2614,11 @@ union (nsswitch["passwd"]:[], ["sss"])); Nsswitch::WriteDb ("group", (list<string>) union (nsswitch["group"]:[], ["sss"])); + if (Pam::Enabled("krb5")) + { + y2milestone ("configuring 'sss', so 'krb5' will be removed"); + Pam::Remove ("krb5"); + } } else { -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63608 - in /branches/SuSE-Code-11-SP2-Branch/ldap-client: src/Ldap.ycp src/LdapPopup.ycp src/ui.ycp testsuite/tests/LDAPInit.out testsuite/tests/LDAPInit.ycp
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 17:00:59 2011 New Revision: 63608 URL: http://svn.opensuse.org/viewcvs/yast?rev=63608&view=rev Log: pass certificate data to .ldap agent (bnc#662949) Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp branches/SuSE-Code-11-SP2-Branch/ldap-client/src/LdapPopup.ycp branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/LDAPInit.out branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/LDAPInit.ycp Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Fri Mar 18 17:00:59 2011 @@ -1072,7 +1072,9 @@ "hostname": GetFirstServer (server), "port": GetFirstPort (server), "version": ldap_v2 ? 2 : 3, - "use_tls": ldap_tls ? "yes" : "no" + "use_tls": ldap_tls ? "yes" : "no", + "cacertdir" : Ldap::tls_cacertdir, + "cacertfile": Ldap::tls_cacertfile ]; boolean init = (boolean) SCR::Execute (.ldap, args); if (init == nil) @@ -1154,7 +1156,9 @@ "hostname" : GetFirstServer (server), "port" : GetFirstPort (server), "version" : ldap_v2 ? 2 : 3, - "use_tls" : ldap_tls ? "yes" : "no" + "use_tls" : ldap_tls ? "yes" : "no", + "cacertdir" : Ldap::tls_cacertdir, + "cacertfile" : Ldap::tls_cacertfile ]; boolean init = (boolean) SCR::Execute (.ldap, args); // error message @@ -1171,7 +1175,7 @@ if (args["use_tls"]:"" == "yes" && errmap["tls_error"]:false && ConnectWithoutTLS (errmap)) { - args["use_tls"] = false; + args["use_tls"] = "no"; init = (boolean) SCR::Execute (.ldap, args); if (init == nil) ret = unknown; Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/LdapPopup.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/LdapPopup.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/LdapPopup.ycp Fri Mar 18 17:00:59 2011 @@ -189,7 +189,9 @@ "hostname" : Ldap::GetFirstServer (Ldap::server), "port" : Ldap::GetFirstPort (Ldap::server), "version" : Ldap::ldap_v2 ? 2 : 3, - "use_tls" : Ldap::ldap_tls ? "yes" : "no" + "use_tls" : Ldap::ldap_tls ? "yes" : "no", + "cacertdir" : Ldap::tls_cacertdir, + "cacertfile": Ldap::tls_cacertfile ]; string error = Ldap::LDAPInitWithTLSCheck (args); if (error != "") Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp Fri Mar 18 17:00:59 2011 @@ -374,7 +374,9 @@ "hostname" : Ldap::GetFirstServer (server), "port" : Ldap::GetFirstPort (server), "version" : Ldap::ldap_v2 ? 2 : 3, - "use_tls" : ldap_tls ? "yes" : "no" + "use_tls" : ldap_tls ? "yes" : "no", + "cacertdir" : Ldap::tls_cacertdir, + "cacertfile" : Ldap::tls_cacertfile ]); if (dn != "") UI::ChangeWidget (`id(`ldapbasedn), `Value, dn); @@ -759,7 +761,9 @@ "hostname" : Ldap::GetFirstServer (Ldap::server), "port" : Ldap::GetFirstPort (Ldap::server), "version" : Ldap::ldap_v2 ? 2 : 3, - "use_tls" : Ldap::ldap_tls ? "yes" : "no" + "use_tls" : Ldap::ldap_tls ? "yes" : "no", + "cacertdir" : Ldap::tls_cacertdir, + "cacertfile": Ldap::tls_cacertfile ]) ) { @@ -1055,7 +1059,9 @@ "hostname" : Ldap::GetFirstServer (Ldap::server), "port" : Ldap::GetFirstPort (Ldap::server), "version" : Ldap::ldap_v2 ? 2 : 3, - "use_tls" : Ldap::ldap_tls ? "yes" : "no" + "use_tls" : Ldap::ldap_tls ? "yes" : "no", + "cacertdir" : Ldap::tls_cacertdir, + "cacertfile": Ldap::tls_cacertfile ]); if (dn != "") { @@ -1130,7 +1136,9 @@ "hostname" : Ldap::GetFirstServer (Ldap::server), "port" : Ldap::GetFirstPort (Ldap::server), "version" : Ldap::ldap_v2 ? 2 : 3, - "use_tls" : Ldap::ldap_tls ? "yes" : "no" + "use_tls" : Ldap::ldap_tls ? "yes" : "no", + "cacertdir" : Ldap::tls_cacertdir, + "cacertfile" : Ldap::tls_cacertfile ]); if (suf != "") UI::ReplaceWidget (`id (`rp_suf), `HBox ( Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/LDAPInit.out URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/LDAPInit.out (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/LDAPInit.out Fri Mar 18 17:00:59 2011 @@ -1,16 +1,16 @@ Dump ==== init (one server, no port set) ============== Dump ==== value of server: "localhost" -Execute .ldap $["hostname":"localhost", "port":389, "use_tls":"no", "version":3] true +Execute .ldap $["cacertdir":"", "cacertfile":"", "hostname":"localhost", "port":389, "use_tls":"no", "version":3] true Return Dump ==== init (one server, nonsence port set) ======== Dump ==== value of server: "localhost:sdgfd#$" -Execute .ldap $["hostname":"localhost", "port":389, "use_tls":"no", "version":3] true +Execute .ldap $["cacertdir":"", "cacertfile":"", "hostname":"localhost", "port":389, "use_tls":"no", "version":3] true Return Dump ==== init (more servers set, TLS used) =========== Dump ==== value of server: "chimera.suse.cz:333 localhost" -Execute .ldap $["hostname":"chimera.suse.cz", "port":333, "use_tls":"yes", "version":2] true +Execute .ldap $["cacertdir":"/etc/ssl/certs", "cacertfile":"", "hostname":"chimera.suse.cz", "port":333, "use_tls":"yes", "version":2] true Return Dump ==== init failed ================================= -Execute .ldap $["hostname":"chimera.suse.cz", "port":333, "use_tls":"yes", "version":2] false +Execute .ldap $["cacertdir":"/etc/ssl/certs", "cacertfile":"", "hostname":"chimera.suse.cz", "port":333, "use_tls":"yes", "version":2] false Read .ldap.error $["code":11, "msg":"Initialization failed"] Return Initialization failed Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/LDAPInit.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/LDAPInit.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/LDAPInit.ycp Fri Mar 18 17:00:59 2011 @@ -49,6 +49,7 @@ Ldap::server = "chimera.suse.cz:333 localhost"; Ldap::ldap_v2 = true; Ldap::ldap_tls = true; + Ldap::tls_cacertdir = "/etc/ssl/certs"; DUMP (sformat ("==== value of server: \"%1\"", Ldap::server)); -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63607 - /branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 16:57:30 2011 New Revision: 63607 URL: http://svn.opensuse.org/viewcvs/yast?rev=63607&view=rev Log: do not alow to turn off TLS when SSSD is used Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp Fri Mar 18 16:57:30 2011 @@ -332,6 +332,8 @@ UI::ChangeWidget (`id(`server),`ValidChars, Address::ValidChars + " "); UI::ChangeWidget (`id(`import_cert),`Enabled, ldap_tls); UI::ChangeWidget (`id(`sssd_cache_credentials),`Enabled, Ldap::sssd); + // do not alow to turn off TLS when SSSD is used + UI::ChangeWidget (`id (`ldaps), `Enabled, !Ldap::sssd); symbol result = `not_next; do { -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63606 - in /branches/SuSE-Code-11-SP2-Branch/ldap-client: src/Ldap.ycp testsuite/tests/Export.out testsuite/tests/Export.ycp testsuite/tests/Read.out testsuite/tests/Read.ycp
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 16:56:26 2011 New Revision: 63606 URL: http://svn.opensuse.org/viewcvs/yast?rev=63606&view=rev Log: - write uri instead of just host name to ldap.conf and sssd.conf (bnc#663012) Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.out branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.ycp branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Read.out branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Read.ycp Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Fri Mar 18 16:56:26 2011 @@ -33,6 +33,7 @@ import "Stage"; import "String"; import "Summary"; + import "URL"; /** * show popups with error messages? @@ -678,6 +679,35 @@ return oes; } + // convert list of uri's to list of hosts + string uri2servers (string uri) { + return mergestring (maplist (string u, splitstring (uri, " \t"), { + map url = URL::Parse (u); + string h = url["host"]:""; + if (url["port"]:"" != "") + h = sformat ("%1:%2", h, url["port"]:""); + return h; + }), " "); + } + + /** + * Read values of LDAP hosts from ldap.conf + * get them from 'uri' or 'host' values + */ + global string ReadLdapHosts () { + string ret = ""; + string uri = ReadLdapConfEntry ("uri", ""); + if (uri == "") + { + ret = ReadLdapConfEntry ("host", ""); + } + else + { + ret = uri2servers (uri); + } + return ret; + } + /** * Reads LDAP settings from the SCR * @return success @@ -724,7 +754,8 @@ size (nsswitch["passwd_compat"]:[]) == 0)); nis_available = nis_available && (Service::Status ("ypbind") == 0); - server = ReadLdapConfEntry ("host", ""); + server = ReadLdapHosts (); + base_dn = ReadLdapConfEntry ("base", ""); old_base_dn = base_dn; @@ -1009,7 +1040,7 @@ if (bind_pass == nil && servers == "") { y2milestone ("--- server not read yet or empty, reading now"); - servers = ReadLdapConfEntry ("host", ""); + servers = ReadLdapHosts (); } list l_servers = splitstring (servers, " \t"); @@ -1935,8 +1966,23 @@ map out = (map)SCR::Execute(.target.bash_output, "/bin/rpm -V openldap2-client"); - list open_host = (list) SCR::Read - (.etc.ldap_conf.v."/etc/openldap/ldap.conf".host); + list open_host = []; + list open_uri = (list) SCR::Read + (.etc.ldap_conf.v."/etc/openldap/ldap.conf".uri); + if (open_uri == []) + { + open_uri = (list) SCR::Read + (.etc.ldap_conf.v."/etc/openldap/ldap.conf".URI); + } + if (open_uri == []) + { + open_host = (list) SCR::Read + (.etc.ldap_conf.v."/etc/openldap/ldap.conf".host); + } + else + { + open_host = [ uri2servers (open_uri[0]:"")]; + } list open_base = (list) SCR::Read (.etc.ldap_conf.v."/etc/openldap/ldap.conf".base); @@ -1952,8 +1998,16 @@ if (write_openldap_conf) { // update ldap.conf - SCR::Write (.etc.ldap_conf.v."/etc/openldap/ldap.conf".host, - [server]); + SCR::Write (.etc.ldap_conf.v."/etc/openldap/ldap.conf".host, nil); + + string uri = mergestring ( + maplist (string u, splitstring (server, " \t"), { + return "ldap://" + u; + }), " "); + + SCR::Write (.etc.ldap_conf.v."/etc/openldap/ldap.conf".uri, + [uri]); + SCR::Write(.etc.ldap_conf.v."/etc/openldap/ldap.conf".base, [base_dn]); @@ -1997,7 +2051,7 @@ path domain = add (.etc.sssd_conf.v, "domain/default"); - string uri = sformat ("ldap%1://%2", ldap_tls ? "s" : "", String::FirstChunk (server, " \t")); + string uri = sformat ("ldap://%1", String::FirstChunk (server, " \t")); SCR::Write (add (domain, "ldap_uri"), uri); SCR::Write (add (domain, "ldap_search_base"), base_dn); SCR::Write (add (domain, "ldap_schema"), "rfc2307bis"); @@ -2466,7 +2520,12 @@ if (modified) { // update ldap.conf - WriteLdapConfEntry ("host", server); + WriteLdapConfEntry ("host", nil); + string uri = mergestring ( + maplist (string u, splitstring (server, " \t"), { + return "ldap://" + u; + }), " "); + WriteLdapConfEntry ("uri", uri); WriteLdapConfEntry ("base", base_dn); if (member_attribute != old_member_attribute) Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.out URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.out (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.out Fri Mar 18 16:56:26 2011 @@ -1,4 +1,5 @@ Dump ==== reading... ============================ +Read .etc.ldap_conf.v."/etc/ldap.conf"."uri" nil Read .etc.ldap_conf.v."/etc/ldap.conf"."host" "localhost" Read .etc.ldap_conf.v."/etc/ldap.conf"."base" "dc=suse,dc=cz" Read .etc.ldap_conf.v."/etc/ldap.conf"."ldap_version" nil Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.ycp Fri Mar 18 16:56:26 2011 @@ -31,7 +31,8 @@ "pam_password": "crypt", "tls_cacertdir" : "/etc/openldap/cacerts/", "tls_cacertfile": nil, - "tls_checkpeer" : nil + "tls_checkpeer" : nil, + "uri" : nil ] ] ], Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Read.out URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Read.out (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Read.out Fri Mar 18 16:56:26 2011 @@ -1,5 +1,5 @@ Dump ==== reading... ============================ -Read .etc.ldap_conf.v."/etc/ldap.conf"."host" "localhost" +Read .etc.ldap_conf.v."/etc/ldap.conf"."uri" "ldap://localhost:333" Read .etc.ldap_conf.v."/etc/ldap.conf"."base" "dc=suse,dc=cz" Read .etc.ldap_conf.v."/etc/ldap.conf"."ldap_version" nil Read .etc.ldap_conf.v."/etc/ldap.conf"."ssl" nil @@ -22,3 +22,4 @@ Dump nsswitch: -$["group":["compat"], "group_compat":["ldap"], "passwd":["compat"], "passwd_compat":["ldap"]]- Dump base config DN: -- Dump bind DN: -uid=manager,dc=suse,dc=cz- +Dump server: -localhost:333- Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Read.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Read.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Read.ycp Fri Mar 18 16:56:26 2011 @@ -31,7 +31,8 @@ "pam_password": "crypt", "tls_cacertdir" : "/etc/openldap/cacerts/", "tls_cacertfile": nil, - "tls_checkpeer" : "no" + "tls_checkpeer" : "no", + "uri" : "ldap://localhost:333" ] ] ], @@ -102,4 +103,6 @@ DUMP ( sformat ("base config DN: -%1-", Ldap::base_config_dn) ); DUMP ( sformat ("bind DN: -%1-", Ldap::bind_dn) ); + + DUMP ( sformat ("server: -%1-", Ldap::server) ); } -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63605 - /branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 16:54:34 2011 New Revision: 63605 URL: http://svn.opensuse.org/viewcvs/yast?rev=63605&view=rev Log: typo Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp Fri Mar 18 16:54:34 2011 @@ -509,7 +509,7 @@ list<string> needed_packages = Ldap::sssd ? Ldap::UpdatedArchPackages (Ldap::sssd_packages) : - Ldap::UpdatedArchPackages (Ldap::pam_nss_packages) : + Ldap::UpdatedArchPackages (Ldap::pam_nss_packages); if (start && !Package::InstalledAll (needed_packages)) { -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63604 - in /branches/SuSE-Code-11-SP2-Branch/ldap-client/src: Ldap.ycp ui.ycp
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 16:51:18 2011 New Revision: 63604 URL: http://svn.opensuse.org/viewcvs/yast?rev=63604&view=rev Log: - call c_rehash after downloading certificate (bnc#662937) - do not write into sssd.conf when it does not exist (bnc#662963) Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Fri Mar 18 16:51:18 2011 @@ -1972,6 +1972,12 @@ */ global boolean WriteSSSDConfig () { + if (!FileUtils::Exists ("/etc/sssd/sssd.conf")) + { + y2warning ("file /etc/sssd/sssd.conf does not exists: not writing"); + return false; + } + list<string> sections = SCR::Dir (.etc.sssd_conf.section); SCR::Write (.etc.sssd_conf.v.sssd.domains, "default"); Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp Fri Mar 18 16:51:18 2011 @@ -428,6 +428,12 @@ list <string> l = splitstring (cert_url, "/"); name = l[size(l) - 1]:"downloaded-by-yast2-ldap-client.pem"; success = SCR::Execute (.target.bash, sformat ("/bin/cp -a '%1' '%2/%3'", certTmpFile, dir, name)) == 0; + // rehash cert directory (bnc#662937) + map out = (map)SCR::Execute (.target.bash_output, sformat ("/usr/bin/c_rehash %1", dir)); + if (out["stderr"]:"" != "") + { + y2error ("something went wrong: %1", out); + } break; } } -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63603 - /branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 16:31:41 2011 New Revision: 63603 URL: http://svn.opensuse.org/viewcvs/yast?rev=63603&view=rev Log: ensure that sssd config file is written before starting service Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Fri Mar 18 16:31:41 2011 @@ -2042,6 +2042,10 @@ SCR::Write (add (domain, "auth_provider"), "ldap"); } + if (!SCR::Write(.etc.sssd_conf, nil)) + { + y2error ("error writing ldap.conf file"); + } return true; } -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63602 - in /branches/SuSE-Code-11-SP2-Branch/ldap-client: src/Ldap.ycp src/ui.ycp testsuite/tests/Export.out
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 16:29:21 2011 New Revision: 63602 URL: http://svn.opensuse.org/viewcvs/yast?rev=63602&view=rev Log: added support for SSSD (fate#308902) Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.out Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Fri Mar 18 16:29:21 2011 @@ -31,6 +31,7 @@ import "Report"; import "Service"; import "Stage"; + import "String"; import "Summary"; /** @@ -310,6 +311,18 @@ // map with modifications of Password Policies objects global map<string,map> ppolicies = $[]; + // packages needed for pam_ldap/nss_ldap configuration + global list<string> pam_nss_packages = ["pam_ldap", "nss_ldap"]; + + // packages needed for sssd configuration + global list<string> sssd_packages = [ "sssd" ]; + + // if sssd is used instead of pam_ldap/nss_ldap (fate#308902) + global boolean sssd = true; + + // enable/disable offline authentication ('cache_credentials' key) + global boolean sssd_cache_credentials = false; + //---------------------------------------------------------------- /** @@ -399,7 +412,8 @@ if (start) required_packages = (list<string>) - union (required_packages, ["pam_ldap", "nss_ldap"]); + union (required_packages, sssd ? sssd_packages : pam_nss_packages); + list<string> install_pkgs = UpdatedArchPackages (required_packages); list remove_pkgs = []; return ($["install": install_pkgs, "remove": remove_pkgs]); @@ -434,6 +448,7 @@ tls_cacertfile = settings ["tls_cacertfile"]:""; tls_checkpeer = settings ["tls_checkpeer"]:"yes"; mkhomedir = settings ["mkhomedir"]:mkhomedir; + sssd = settings ["sssd"]:sssd; if (_start_autofs) required_packages = (list<string>) union (required_packages, ["autofs"]); @@ -475,7 +490,8 @@ "member_attribute" : member_attribute, "create_ldap" : create_ldap, "login_enabled" : login_enabled, - "mkhomedir" : mkhomedir + "mkhomedir" : mkhomedir, + "sssd" : sssd ]; if (tls_checkpeer != "yes") e["tls_checkpeer"] = tls_checkpeer; @@ -513,14 +529,15 @@ summary = Summary::AddHeader(summary, _("LDAP Server")); summary = Summary::AddLine(summary,( server!="") ? server : Summary::NotConfigured()); // summary item - summary = Summary::AddHeader(summary, _("LDAP Version 2")); - // summary (LDAP version 2?) - summary = Summary::AddLine(summary, (ldap_v2) ? _("Yes") : Summary::NotConfigured()); - // summary item summary = Summary::AddHeader(summary, _("LDAP TLS/SSL")); // summary (use TLS?) summary = Summary::AddLine(summary, (ldap_tls) ? _("Yes") : Summary::NotConfigured()); + // summary item + summary = Summary::AddHeader(summary, _("System Security Services Daemon (SSSD) Set")); + // summary (LDAP version 2?) + summary = Summary::AddLine(summary, (sssd && start) ? _("Yes") : Summary::NotConfigured()); + return summary; } @@ -549,6 +566,11 @@ // summary summary = summary + "<br>" + _("LDAP TLS/SSL Configured"); } + if (start && sssd) + { + // summary + summary = summary + "<br>" + _("System Security Services Daemon (SSSD) Set"); + } return summary; } @@ -671,11 +693,29 @@ nsswitch[db] = Nsswitch::ReadDb (db); }); + // 'start' means that LDAP is present in nsswitch somehow... either as 'compat'/'ldap'... start = contains (nsswitch["passwd"]:[], "ldap") || (contains (nsswitch["passwd"]:[], "compat") && contains (nsswitch["passwd_compat"]:[], "ldap")) || (oes && contains (nsswitch["passwd"]:[], "nam")); + if (start) + { + // nss_ldap is used + sssd = false; + } + else + { + // ... or as 'sssd' + start = contains (nsswitch["passwd"]:[], "sssd"); + } + + // nothing is configured, but some packages are installed + if (!start && Package::InstalledAll (pam_nss_packages) && !Package::InstalledAll (sssd_packages)) + { + sssd = false; + } + old_start = start; nis_available = contains (nsswitch["passwd"]:[], "nis") || @@ -808,6 +848,7 @@ Autologin::Read (); + // Now check if previous configuration of LDAP server didn't proposed // some better values: if (Stage::cont ()) @@ -1926,6 +1967,83 @@ return write_openldap_conf; } + /** + * Write updated /etc/sssd/sssd.conf file + */ + global boolean WriteSSSDConfig () { + + list<string> sections = SCR::Dir (.etc.sssd_conf.section); + + SCR::Write (.etc.sssd_conf.v.sssd.domains, "default"); + + + // "The "services" setting should have the value "nss, pam" + SCR::Write (.etc.sssd_conf.v.sssd.services, "nss,pam"); + + // " Make sure that "filter_groups" and "filter_users" in the "[nss]" section contains "root". + string f_g = (string) SCR::Read (.etc.sssd_conf.v.nss.filter_groups); + list<string> l = (list<string>) union (splitstring (f_g, ","), ["root"]); + SCR::Write (.etc.sssd_conf.v.nss.filter_groups, mergestring (l, ",")); + + string f_u = (string) SCR::Read (.etc.sssd_conf.v.nss.filter_users); + l = (list<string>) union (splitstring (f_u, ","), ["root"]); + SCR::Write (.etc.sssd_conf.v.nss.filter_users, mergestring (l, ",")); + + path domain = add (.etc.sssd_conf.v, "domain/default"); + + string uri = sformat ("ldap%1://%2", ldap_tls ? "s" : "", String::FirstChunk (server, " \t")); + SCR::Write (add (domain, "ldap_uri"), uri); + SCR::Write (add (domain, "ldap_search_base"), base_dn); + SCR::Write (add (domain, "ldap_schema"), "rfc2307bis"); + SCR::Write (add (domain, "id_provider"), "ldap"); + SCR::Write (add (domain, "ldap_user_uuid"), "entryuuid"); + SCR::Write (add (domain, "ldap_group_uuid"), "entryuuid"); + + SCR::Write (add (domain, "ldap_id_use_start_tls"), ldap_tls ? "True" : "False"); + SCR::Write (add (domain, "cache_credentials"), sssd_cache_credentials ? "True" : "False"); + SCR::Write (add (domain, "ldap_tls_cacertdir"), tls_cacertdir == "" ? nil : tls_cacertdir); + SCR::Write (add (domain, "ldap_tls_cacert"), tls_cacertfile == "" ? nil : tls_cacertfile); + + if (!contains (sections, "domain/default")) + { + SCR::Write (add (.etc.sssd_conf.section_comment, "domain/default"), "\n# Section created by YaST\n"); + } + + // In a mixed Kerberos/LDAP setup the following changes are needed in the [domain/default] section: + if (Pam::Enabled("krb5")) + { + SCR::Write (add (domain, "auth_provider"), "krb5"); + SCR::Write (add (domain, "chpass_provider"), "krb5"); + /* + FIXME how to read krb settings: + a) use agent directly (moved out from yast2-kerberos-client) + b) use Read + Export of Kerberos.ycp + + * Set "krb5_kdcip" to the hostname of the kerberos kdc + * Set "krb5_realm" to kerberos realm + */ + if (Package::Installed ("yast2-kerberos-client")) + { + WFM::CallFunction ("kerberos-client_auto", ["Read"]); + any e = WFM::CallFunction ("kerberos-client_auto",["Export"]); + if (is (e,map) && e != $[]) + { + map kerberos = (map) e; +y2internal ("kerberos export map: %1", kerberos); + SCR::Write (add (domain, "krb5_realm"), kerberos["kerberos_client","default_domain"]:nil); + SCR::Write (add (domain, "krb5_kdcip"), kerberos["kerberos_client","kdc_server"]:nil); + } + } + + } + else + { + SCR::Write (add (domain, "chpass_provider"), "ldap"); + SCR::Write (add (domain, "auth_provider"), "ldap"); + } + + return true; + } /** * If a file does not + entry, add it. @@ -2372,19 +2490,26 @@ AddLdapConfEntry ("pam_filter", "objectClass=posixAccount"); } - // save the user and group bases - user_base = base_dn; - group_base = base_dn; - - WriteLdapConfEntry ("nss_base_passwd", - (nss_base_passwd != base_dn && nss_base_passwd != "") ? - nss_base_passwd : nil); - WriteLdapConfEntry ("nss_base_shadow", - (nss_base_shadow != base_dn && nss_base_shadow != "") ? - nss_base_shadow : nil); - WriteLdapConfEntry ("nss_base_group", - (nss_base_group != base_dn && nss_base_group != "") ? - nss_base_group : nil); + if (sssd) + { + WriteSSSDConfig (); + } + else + { + // save the user and group bases + user_base = base_dn; + group_base = base_dn; + + WriteLdapConfEntry ("nss_base_passwd", + (nss_base_passwd != base_dn && nss_base_passwd != "") ? + nss_base_passwd : nil); + WriteLdapConfEntry ("nss_base_shadow", + (nss_base_shadow != base_dn && nss_base_shadow != "") ? + nss_base_shadow : nil); + WriteLdapConfEntry ("nss_base_group", + (nss_base_group != base_dn && nss_base_group != "") ? + nss_base_group : nil); + } // default value is 'yes' WriteLdapConfEntry ("tls_checkpeer", tls_checkpeer == "yes" ? nil : tls_checkpeer); @@ -2408,38 +2533,52 @@ if (!oes) { - // pam settigs - if (Pam::Enabled("krb5")) + if (sssd) { - // If kerberos is used for authentication we configure - // pam_ldap in a way that we use only the account checking. - // Other configuration would mess up password changing - Pam::Add ("ldap-account_only"); + Pam::Add ("sss"); + // Add "sss" to the passwd and group databases in nsswitch.conf + Nsswitch::WriteDb ("passwd", (list<string>) + union (nsswitch["passwd"]:[], ["sss"])); + Nsswitch::WriteDb ("group", (list<string>) + union (nsswitch["group"]:[], ["sss"])); } else { - Pam::Add ("ldap"); - } - // modify sources in /etc/nsswitch.conf - Nsswitch::WriteDb ("passwd", ["compat"]); - Nsswitch::WriteDb ("passwd_compat", (list<string>) - union (nsswitch["passwd_compat"]:[], ["ldap"])); + // pam settigs + if (Pam::Enabled("krb5")) + { + // If kerberos is used for authentication we configure + // pam_ldap in a way that we use only the account checking. + // Other configuration would mess up password changing + Pam::Add ("ldap-account_only"); + } + else + { + Pam::Add ("ldap"); + } - foreach (string db, ["services","netgroup","aliases"], { - Nsswitch::WriteDb (db, ["files", "ldap"]); - }); + // modify sources in /etc/nsswitch.conf + Nsswitch::WriteDb ("passwd", ["compat"]); + Nsswitch::WriteDb ("passwd_compat", (list<string>) + union (nsswitch["passwd_compat"]:[], ["ldap"])); + + foreach (string db, ["services","netgroup","aliases"], { + Nsswitch::WriteDb (db, ["files", "ldap"]); + }); - if (contains (nsswitch["group"]:[], "compat") && - contains (nsswitch["group_compat"]:[], "ldap")) - { - y2milestone ("group_compat present, not changing"); - } - else - { - Nsswitch::WriteDb ("group", ["files", "ldap"]); + if (contains (nsswitch["group"]:[], "compat") && + contains (nsswitch["group_compat"]:[], "ldap")) + { + y2milestone ("group_compat present, not changing"); + } + else + { + Nsswitch::WriteDb ("group", ["files", "ldap"]); + } } Nsswitch::Write (); + } Autologin::Write (write_only); } @@ -2449,18 +2588,17 @@ foreach (string db, [ "passwd", "group" ], ``{ string new_db = db+"_compat"; nsswitch [db] = filter ( - string v, nsswitch[db]:[], ``(v != "ldap")); + string v, nsswitch[db]:[], ``(v != "ldap" && v != "sss")); if (nsswitch[db]:[] == [] || nsswitch[db]:[] == ["files"]) nsswitch [db] = ["compat"]; nsswitch [new_db] = filter ( - string v, nsswitch[new_db]:[], ``(v != "ldap")); + string v, nsswitch[new_db]:[], ``(v != "ldap" && v != "sss")); Nsswitch::WriteDb (db, nsswitch[db]:["compat"]); Nsswitch::WriteDb (new_db, nsswitch[new_db]:[]); }); - foreach (string db, ["services" ,"netgroup", "aliases" ], { list<string> db_l = (list<string>) filter ( - string v, Nsswitch::ReadDb (db), ``(v != "ldap")); + string v, Nsswitch::ReadDb (db), ``(v != "ldap" && v != "sss")); if (db_l == []) db_l = ["files"]; Nsswitch::WriteDb (db, db_l); @@ -2476,6 +2614,10 @@ { Pam::Remove ("ldap-account_only"); } + if (Pam::Enabled ("sss")) + { + Pam::Remove ("sss"); + } } @@ -2527,6 +2669,20 @@ if (!write_only) { + if (sssd && start) + { + // enable the sssd daemon to be started at bootup + Service::Adjust ("sssd", "enable"); + if (Service::Status ("sssd") == 0) + { + Service::Restart ("sssd"); + } + else + { + Service::Start ("sssd"); + } + } + if (Package::Installed ("nscd") && modified) { SCR::Execute (.target.bash, "/usr/sbin/nscd -i passwd"); @@ -2647,8 +2803,9 @@ block<boolean> abort = ``{ return false; }; - list<string> needed_packages = - UpdatedArchPackages (["pam_ldap", "nss_ldap"]); + list<string> needed_packages = sssd? + UpdatedArchPackages (sssd_packages) : + UpdatedArchPackages (pam_nss_packages); if (_start_autofs && !Package::Installed("autofs")) { Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/ui.ycp Fri Mar 18 16:29:21 2011 @@ -226,11 +226,11 @@ string base_dn = Ldap::GetBaseDN (); string server = Ldap::server; - boolean ldap_tls = Ldap::ldap_tls; + boolean ldap_tls = Ldap::ldap_tls || Ldap::sssd; // force TLS to true if sssd is used string tls_checkpeer = Ldap::tls_checkpeer; boolean login_enabled = Ldap::login_enabled; string certTmpFile = sformat ("%1/__LDAPcert.crt", Directory::tmpdir); - + boolean sssd_cache_credentials = Ldap::sssd_cache_credentials; boolean autofs = Ldap::_start_autofs; term autofs_con = `Empty (); if (Ldap::_autofs_allowed) @@ -248,7 +248,7 @@ Ldap::_autofs_allowed ? `VSpacing (0) : `VSpacing (0.5), `Left(`CheckBox(`id(`mkhomedir), // checkbox label - _("Create Home Directory on Login"), mkhomedir + _("C&reate Home Directory on Login"), mkhomedir )) ); @@ -261,7 +261,7 @@ `Left(`HVSquash(`VBox ( `Left (`RadioButton(`id(`ldapno), `opt (`notify), // radio button label - _("Do N&ot Use LDAP"), !start)), + _("Do &Not Use LDAP"), !start)), `Left(`RadioButton(`id(`ldapyes), `opt (`notify), // radio button label _("&Use LDAP"), start)), @@ -304,12 +304,14 @@ // check box label `Left (`CheckBox (`id(`ldaps), `opt (`notify), _("LDAP &TLS/SSL"), ldap_tls)), // push button label - `PushButton (`id(`import_cert), _("Download CA Certificate")) + `PushButton (`id(`import_cert), _("Do&wnload CA Certificate")) ), `VSpacing (0.2) ), `HSpacing (0.5))), autofs_con, mkhomedir_term, + // check box label + `Left (`CheckBox (`id (`sssd_cache_credentials), _("SSSD O&ffline Authentication"), sssd_cache_credentials)), `VSpacing(0.4), // pushbutton label `PushButton (`id(`advanced), _("&Advanced Configuration...")) @@ -329,6 +331,7 @@ UI::ChangeWidget (`id(`server),`ValidChars, Address::ValidChars + " "); UI::ChangeWidget (`id(`import_cert),`Enabled, ldap_tls); + UI::ChangeWidget (`id(`sssd_cache_credentials),`Enabled, Ldap::sssd); symbol result = `not_next; do { @@ -341,7 +344,8 @@ server = (string) UI::QueryWidget(`id(`server), `Value); ldap_tls = (boolean) UI::QueryWidget(`id(`ldaps), `Value); mkhomedir = (boolean) UI::QueryWidget (`id(`mkhomedir),`Value); - + sssd_cache_credentials = + (boolean) UI::QueryWidget (`id(`sssd_cache_credentials), `Value); UI::ChangeWidget (`id(`import_cert), `Enabled, ldap_tls); if (result == `slp) @@ -497,8 +501,9 @@ } } - list<string> needed_packages = - Ldap::UpdatedArchPackages (["pam_ldap", "nss_ldap"]); + list<string> needed_packages = Ldap::sssd ? + Ldap::UpdatedArchPackages (Ldap::sssd_packages) : + Ldap::UpdatedArchPackages (Ldap::pam_nss_packages) : if (start && !Package::InstalledAll (needed_packages)) { @@ -539,7 +544,8 @@ Ldap::server != server || Ldap::ldap_tls != ldap_tls || Ldap::_start_autofs != autofs || Ldap::login_enabled != login_enabled || - Ldap::mkhomedir != mkhomedir) + Ldap::mkhomedir != mkhomedir || + Ldap::sssd_cache_credentials != sssd_cache_credentials) { if (result == `next) { @@ -594,6 +600,7 @@ Ldap::_start_autofs = autofs; Ldap::login_enabled = login_enabled; Ldap::mkhomedir = mkhomedir; + Ldap::sssd_cache_credentials = sssd_cache_credentials; Ldap::modified = true; } } @@ -695,6 +702,7 @@ boolean ldap_v2 = Ldap::ldap_v2; string tls_cacertdir = Ldap::tls_cacertdir; string tls_cacertfile = Ldap::tls_cacertfile; + boolean sssd = Ldap::sssd; list<term>member_attributes = [ `item (`id("member"), "member", member_attribute == "member"), @@ -815,6 +823,8 @@ term cont = `Top (`HBox(`HSpacing (5), `VBox( `VSpacing(0.4), + `Left (`CheckBox (`id (`sssd), `opt (`notify), _("Use S&ystem Security Services Daemon (SSSD)"), sssd)), + `VSpacing(0.4), // frame label `Frame (_("Naming Contexts"), `HBox( `HSpacing (1), `VBox( @@ -865,7 +875,7 @@ `VSpacing(0.4), `HBox ( `HWeight (1, `HBox ( - `InputField (`id (`tls_cacertdir), `opt (`hstretch), _("Certificate Directory"), + `InputField (`id (`tls_cacertdir), `opt (`hstretch), _("Cer&tificate Directory"), tls_cacertdir ), `VBox ( @@ -874,7 +884,7 @@ `PushButton (`id(`br_tls_cacertdir), _("B&rowse")) ) )), `HWeight (1, `HBox ( - `InputField (`id (`tls_cacertfile), `opt (`hstretch), _("CA Certificate File"), + `InputField (`id (`tls_cacertfile), `opt (`hstretch), _("CA Cert&ificate File"), tls_cacertfile ), `VBox ( @@ -891,6 +901,10 @@ UI::ReplaceWidget (`tabContents, cont); if (has_tabs) UI::ChangeWidget (`id (`tabs), `CurrentItem, `client); + + foreach (symbol ui, [ `nss_base_passwd, `nss_base_group, `nss_base_shadow, `br_passwd, `br_shadow, `br_group ], { + UI::ChangeWidget (`id (ui), `Enabled, UI::QueryWidget (`id (`sssd), `Value) == false); + }); } define void set_admin_term () { @@ -1046,6 +1060,13 @@ UI::ChangeWidget (`id(br2entry[result]:nil), `Value, dn); } } + if (result == `sssd) + { + sssd = (boolean) UI::QueryWidget (`id (`sssd), `Value); + foreach (symbol ui, [ `nss_base_passwd, `nss_base_group, `nss_base_shadow, `br_passwd, `br_shadow, `br_group ], { + UI::ChangeWidget (`id (ui), `Enabled, !sssd); + }); + } if (result == `br_tls_cacertdir) { string dir = UI::AskForExistingDirectory (tls_cacertdir, _("Choose the directory with certificates")); @@ -1230,7 +1251,8 @@ Ldap::nss_base_shadow != nss_base_shadow || Ldap::ldap_v2 != ldap_v2 || Ldap::tls_cacertdir != tls_cacertdir || - Ldap::tls_cacertfile != tls_cacertfile + Ldap::tls_cacertfile != tls_cacertfile || + Ldap::sssd != sssd ) { Ldap::bind_dn = bind_dn; @@ -1245,6 +1267,7 @@ Ldap::ldap_v2 = ldap_v2; Ldap::tls_cacertdir = tls_cacertdir; Ldap::tls_cacertfile = tls_cacertfile; + Ldap::sssd = sssd; Ldap::modified = true; } break; Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.out URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.out (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/testsuite/tests/Export.out Fri Mar 18 16:29:21 2011 @@ -18,4 +18,4 @@ Read .passwd.passwd.pluslines ["+"] Return true Dump ============================================ -Return $["base_config_dn":"", "bind_dn":"uid=manager,dc=suse,dc=cz", "create_ldap":false, "file_server":false, "ldap_domain":"dc=suse,dc=cz", "ldap_server":"localhost", "ldap_tls":false, "ldap_v2":false, "login_enabled":true, "member_attribute":"member", "mkhomedir":true, "nss_base_group":"ou=group,dc=suse,dc=cz", "pam_password":"crypt", "start_autofs":false, "start_ldap":true, "tls_cacertdir":"/etc/openldap/cacerts/"] +Return $["base_config_dn":"", "bind_dn":"uid=manager,dc=suse,dc=cz", "create_ldap":false, "file_server":false, "ldap_domain":"dc=suse,dc=cz", "ldap_server":"localhost", "ldap_tls":false, "ldap_v2":false, "login_enabled":true, "member_attribute":"member", "mkhomedir":true, "nss_base_group":"ou=group,dc=suse,dc=cz", "pam_password":"crypt", "sssd":false, "start_autofs":false, "start_ldap":true, "tls_cacertdir":"/etc/openldap/cacerts/"] -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r63601 - /branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp
by jsuchome＠svn2.opensuse.org 18 Mar '11

18 Mar '11

Author: jsuchome Date: Fri Mar 18 16:15:54 2011 New Revision: 63601 URL: http://svn.opensuse.org/viewcvs/yast?rev=63601&view=rev Log: save certificate info to /etc/openldap/ldap.conf (bnc#629549) Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Modified: branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp URL: http://svn.opensuse.org/viewcvs/yast/branches/SuSE-Code-11-SP2-Branch/ldap-… ============================================================================== --- branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp (original) +++ branches/SuSE-Code-11-SP2-Branch/ldap-client/src/Ldap.ycp Fri Mar 18 16:15:54 2011 @@ -1915,6 +1915,12 @@ [server]); SCR::Write(.etc.ldap_conf.v."/etc/openldap/ldap.conf".base, [base_dn]); + + SCR::Write (.etc.ldap_conf.v."/etc/openldap/ldap.conf".TLS_CACERTDIR, + tls_cacertdir == "" ? nil : [tls_cacertdir]); + SCR::Write (.etc.ldap_conf.v."/etc/openldap/ldap.conf".TLS_CACERT, + tls_cacertfile == "" ? nil : [tls_cacertfile]); + y2milestone ("file /etc/openldap/ldap.conf was modified"); } return write_openldap_conf; -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0