X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;ds=inline;f=controller.py;h=826ca495bebb4c3a1e1c0da795b039897a455a53;hb=d3a3b2d3ea98e72183d1cb5497c38badaa0c5863;hp=264b3bb6c3a9f24316df5302972b2aa5b8317dd0;hpb=441aa514e076df6818711447594be7793a3e2a2d;p=nodemanager.git diff --git a/controller.py b/controller.py index 264b3bb..826ca49 100644 --- a/controller.py +++ b/controller.py @@ -1,9 +1,15 @@ -"""Delegate accounts are used to provide secure access to the XMLRPC API. They are normal Unix accounts with a shell that tunnels XMLRPC requests to the API server.""" +# $Id$ +# $URL$ + +"""Delegate accounts are used to provide secure access to the XMLRPC API. +They are normal Unix accounts with a shell that tunnels XMLRPC requests to the API server.""" + +from pwd import getpwnam +from grp import getgrnam -import accounts import logger import tools - +import accounts class Controller(accounts.Account): SHELL = '/usr/bin/forward_api_calls' # tunneling shell @@ -12,10 +18,16 @@ class Controller(accounts.Account): @staticmethod def create(name, vref = None): add_shell(Controller.SHELL) - logger.log_call('/usr/sbin/useradd', '-p', '*', '-s', Controller.SHELL, name) + group = getgrnam("slices")[2] + logger.log_call(['/usr/sbin/useradd', '-p', '*', '-g', str(group), '-s', Controller.SHELL, name, ]) @staticmethod - def destroy(name): logger.log_call('/usr/sbin/userdel', '-r', name) + def destroy(name): logger.log_call(['/usr/sbin/userdel', '-r', name, ]) + + def is_running(self): + logger.verbose("controller: is_running: %s" % self.name) + return getpwnam(self.name)[6] == self.SHELL + def add_shell(shell): """Add to /etc/shells if it's not already there."""