X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=controller.py;h=b754e6ac866436262cdff3a8d841e7100651dfc2;hb=3224c1906c82596a86ae734181488ed14a0f0976;hp=17268d2107e1a18e42a91895c53ef55a43e8635e;hpb=4cbb63bed934afd59fd6131961e2cca9089ed8ce;p=nodemanager.git diff --git a/controller.py b/controller.py index 17268d2..b754e6a 100644 --- a/controller.py +++ b/controller.py @@ -1,9 +1,13 @@ +# $Id$ +# $URL$ + """Delegate accounts are used to provide secure access to the XMLRPC API. They are normal Unix accounts with a shell that tunnels XMLRPC requests to the API server.""" import accounts import logger import tools from pwd import getpwnam +from grp import getgrnam class Controller(accounts.Account): SHELL = '/usr/bin/forward_api_calls' # tunneling shell @@ -12,7 +16,8 @@ class Controller(accounts.Account): @staticmethod def create(name, vref = None): add_shell(Controller.SHELL) - logger.log_call('/usr/sbin/useradd', '-p', '*', '-s', Controller.SHELL, name) + group = getgrnam("slices")[2] + logger.log_call('/usr/sbin/useradd', '-p', '*', '-g', str(group), '-s', Controller.SHELL, name) @staticmethod def destroy(name): logger.log_call('/usr/sbin/userdel', '-r', name)