Changeset 2119 for trunk/packages/invirt-web/code/getafsgroups.py

Timestamp:

Feb 14, 2009, 10:18:26 PM (15 years ago)

Author:

broder

Message:

Don't encrypt requests to the PRDB if config.authz.auth is set to False.

File:

• trunk/packages/invirt-web/code/getafsgroups.py (modified) (2 diffs, 1 prop)

trunk/packages/invirt-web/code/getafsgroups.py

@@ -2 +2 @@
 import pprint
 import subprocess
+from invirt.config import structs as config
 
 # import ldap
@@ -29 +30 @@
 
 def getAfsGroupMembers(group, cell):
+    encrypt = True
+    for c in config.authz:
+        if c.type == 'afs' and c.cell == cell and hasattr(c, 'auth'):
+            encrypt = c.auth
     subprocess.check_call(['aklog', cell], stdout=subprocess.PIPE, stderr=subprocess.PIPE)
-    p = subprocess.Popen(["pts", "membership", "-encrypt", group, '-c', cell],
+    p = subprocess.Popen(["pts", "membership", "-encrypt" if encrypt else '-noauth', group, '-c', cell],
                          stdout=subprocess.PIPE, stderr=subprocess.PIPE)
     err = p.stderr.read()