X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=controller.py;h=1fc48470f37cf7daf09a8b054fe17e67ea185d4b;hb=refs%2Fheads%2F1.8;hp=65da89f8e196b0a806232e4256930f3a77e9f524;hpb=c08013dc2fc32582e8636d84be3e2f68dafe11a0;p=nodemanager.git diff --git a/controller.py b/controller.py index 65da89f..1fc4847 100644 --- a/controller.py +++ b/controller.py @@ -1,22 +1,29 @@ -"""NM-Controller accounts are used to provide secure access to the XMLRPC API. They are normal Unix accounts with a shell that tunnels XMLRPC requests to the API server.""" +"""Delegate accounts are used to provide secure access to the XMLRPC API. They are normal Unix accounts with a shell that tunnels XMLRPC requests to the API server.""" import accounts import logger import tools - +from pwd import getpwnam +from grp import getgrnam class Controller(accounts.Account): SHELL = '/usr/bin/forward_api_calls' # tunneling shell - TYPE = 'controller' + TYPE = 'controller.Controller' @staticmethod def create(name, vref = None): add_shell(Controller.SHELL) - logger.log_call('/usr/sbin/useradd', '-p', '*', '-s', Controller.SHELL, name) + group = getgrnam("slices")[2] + logger.log_call('/usr/sbin/useradd', '-p', '*', '-g', str(group), '-s', Controller.SHELL, name) @staticmethod def destroy(name): logger.log_call('/usr/sbin/userdel', '-r', name) + def is_running(self): + logger.verbose("Delegate: %s" % self.name) + return getpwnam(self.name)[6] == self.SHELL + + def add_shell(shell): """Add to /etc/shells if it's not already there.""" etc_shells = open('/etc/shells')