Changeset b42118c

Timestamp:

Sep 17, 2012, 2:08:56 AM (13 years ago)

Author:

Alex Dehnert <adehnert@…>

Branches:

master, space-access, stable, stage

Children:

49724e4

Parents:

ac9b167

git-author:

Alex Dehnert <adehnert@…> (09/17/12 02:08:56)

git-committer:

Alex Dehnert <adehnert@…> (09/17/12 02:08:56)

Message:

kinit when creating a MoiraList? object

This allows group/diffs.py to work without kinit'ing outside the script, fixing
the key deficiency in ac9b167bcf85a9f723e27967649c2c033f2259da.

Location:

asadb

Files:

• mit/__init__.py (modified) (3 diffs)
• util/mailinglist.py (modified) (4 diffs)

asadb/mit/__init__.py

@@ -1 +1 @@
 import os
 import subprocess
+import tempfile
 import ldap
 import ldap.filter
@@ -13 +14 @@
 from django.core.validators import URLValidator, ValidationError
 
-import settings
+from django.conf import settings
 
 def zephyr(msg, clas='message', instance='log', rcpt='nobody',):
@@ -56 +57 @@
 def pag_check_output(args, **kwargs):
     return pag_check_helper(subprocess.check_output, args, **kwargs)
+
+def kinit(keytab=None, principal=None, autodelete=True, ):
+    if not keytab:
+        keytab = settings.KRB_KEYTAB
+    if not principal:
+        principal = settings.KRB_PRINCIPAL
+    assert keytab and principal
+    fd = tempfile.NamedTemporaryFile(mode='rb', prefix="krb5cc_djmit_", delete=autodelete, )
+    env = dict(KRB5CCNAME=fd.name)
+    kinit_cmd = ['kinit', '-k', '-t', keytab, principal, ]
+    subprocess.check_call(kinit_cmd, env=env)
+    return fd
 
 class ScriptsRemoteUserMiddleware(RemoteUserMiddleware):

asadb/util/mailinglist.py

@@ -1 +1 @@
 import subprocess
+
+import mit
 
 
@@ -15 +17 @@
 BLANCHE_PATH="/usr/bin/blanche"
 class MoiraList(MailingList):
+    def __init__(self, *args, **kwargs):
+        super(MoiraList, self).__init__(*args, **kwargs)
+        self.ccache = mit.kinit()
+
     def list_members(self, ):
         raise NotImplementedError
@@ -55 +61 @@
         # changes, and use -al / -dl with a tempfile as appropriate.
 
+        env = dict(KRB5CCNAME=self.ccache.name)
         cmdline = [BLANCHE_PATH, self.name, ]
 
@@ -72 +79 @@
             stdout=subprocess.PIPE,
             stderr=subprocess.STDOUT,
+            env=env,
         )
         stdout, stderr = res.communicate()