crans/crans_bcfg2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[ssh_known_hosts] On ne présupose pas que la valeur d'un attribut lc_ldap est hashable

Browse source 
Par contre, un attribut lc_ldap est maintenant toujours hashable
This commit is contained in:
Valentin Samir 2014-02-18 21:38:55 +01:00
parent 6d4b1daf41
commit 25c30f244b
1 changed files with 10 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

20
Python/etc/ssh/ssh_known_hosts
View file

@ -12,23 +12,23 @@ machines=ldap_conn.search("objectClass=machineCrans")
key_machines={}
for machine in machines:
for key in machine['sshFingerprint']:
if not key.value in key_machines.keys():
key_machines[key.value]=set()
if not key in key_machines:
key_machines[key]=set()
for host in machine['host']:
key_machines[key.value].add(host.value)
key_machines[key].add(host.value)
domains=host.value.split('.')
key_machines[key.value].add(domains[0])
key_machines[key.value].add('.'.join(domains[0:2]))
key_machines[key].add(domains[0])
key_machines[key].add('.'.join(domains[0:2]))
for alias in machine['hostAlias']:
key_machines[key.value].add(alias.value)
key_machines[key].add(alias.value)
domains=alias.value.split('.')
key_machines[key.value].add(domains[0])
key_machines[key.value].add('.'.join(domains[0:2]))
key_machines[key].add(domains[0])
key_machines[key].add('.'.join(domains[0:2]))
for ip in machine['ipHostNumber']:
key_machines[key.value].add("%s" % ip)
key_machines[key].add("%s" % ip)
if len(machine.get('dnsIpv6', []))<1 or machine['dnsIpv6'][0].value:
for ip in machine['ip6HostNumber']:
key_machines[key.value].add("%s" % ip)
key_machines[key].add("%s" % ip)
# On trie pour avoir des diff valident en appliquant bcfg2 sur les machines
output=[]