Changeset 2566 for trunk/packages/invirt-dev/invirt-build-conf

Timestamp:

Nov 25, 2009, 11:43:21 PM (15 years ago)

Author:

broder

Message:

Until we switch to storing krb5 principals in the database, we need to
convert the AFS-style principals in the database to krb5 principals.

Hopefully this code can be torn out one of these days in the
not-so-distant future.

File:

• trunk/packages/invirt-dev/invirt-build-conf (modified) (2 diffs)

trunk/packages/invirt-dev/invirt-build-conf

@@ -15 +15 @@
 
 
+def userToPrinc(user):
+    """Convert an AFS principal to a Kerberos v5 principal."""
+    if '@' in user:
+        (princ, realm) = user.split('@')
+    else:
+        princ = user
+        realm = config.kerberos.realm
+
+    return princ.replace('.', '/') + '@' + realm
+
+
 def main():
     # Python could really use a file-like object that gets written to
@@ -26 +37 @@
 
         acl_fd = tempfile.NamedTemporaryFile(delete=False)
-        print >>acl_fd, '\n'.join(acl)
+        print >>acl_fd, '\n'.join(user(a) for a in acl)
 
         acl_path = os.path.join('/etc/remctl/acl/build-%s' % pocket)