planetstack/observer/steps/sync_users.py

   1 import os
   2 import base64
   3 from planetstack.config import Config
   4
   5 class SyncUsers(OpenStackSyncStep):
   6         provides=[User]
   7         requested_interval=0
   8         def sync_record(self, user):
   9         name = user.email[:user.email.find('@')]
  10         user_fields = {'name': name,
  11                        'email': user.email,
  12                        'password': hashlib.md5(user.password).hexdigest()[:6],
  13                        'enabled': True}
  14         if not user.kuser_id:
  15             keystone_user = self.driver.create_user(**user_fields)
  16             user.kuser_id = keystone_user.id
  17         else:
  18             self.driver.update_user(user.kuser_id, user_fields)
  19
  20         if user.site:
  21             self.driver.add_user_role(user.kuser_id, user.site.tenant_id, 'user')
  22             if user.is_admin:
  23                 self.driver.add_user_role(user.kuser_id, user.site.tenant_id, 'admin')
  24             else:
  25                 # may have admin role so attempt to remove it
  26                 self.driver.delete_user_role(user.kuser_id, user.site.tenant_id, 'admin')
  27
  28         if user.public_key:
  29             self.init_caller(user, user.site.login_base)
  30             self.save_key(user.public_key, user.keyname)
  31             self.init_admin()
  32
  33         user.save()