134 lines
4.2 KiB
Text
134 lines
4.2 KiB
Text
info["owner"] = "postgres"
|
|
info["group"] = "postgres"
|
|
info["mode"] = 0640
|
|
|
|
|
|
import sys
|
|
sys.path.append('/usr/scripts')
|
|
import lc_ldap.shortcuts
|
|
|
|
conn = lc_ldap.shortcuts.lc_ldap_readonly()
|
|
|
|
comment_start = "#"
|
|
header("Gestion des acces ident pour les utilisateurs")
|
|
|
|
# Liste des nounous/apprentis
|
|
adm_objects = conn.search(u'droits=nounou')
|
|
nounous = [adm['uid'][0] for adm in adm_objects]
|
|
apprentis_objects = conn.search(u'droits=apprenti')
|
|
apprentis = [appr['uid'][0] for appr in apprentis_objects]
|
|
|
|
out("""# PostgreSQL User Name Maps
|
|
# =========================
|
|
#
|
|
# Refer to the PostgreSQL documentation, chapter "Client
|
|
# Authentication" for a complete description. A short synopsis
|
|
# follows.
|
|
#
|
|
# This file controls PostgreSQL user name mapping. It maps external
|
|
# user names to their corresponding PostgreSQL user names. Records
|
|
# are of the form:
|
|
#
|
|
# MAPNAME SYSTEM-USERNAME PG-USERNAME
|
|
#
|
|
# (The uppercase quantities must be replaced by actual values.)
|
|
#
|
|
# MAPNAME is the (otherwise freely chosen) map name that was used in
|
|
# pg_hba.conf. SYSTEM-USERNAME is the detected user name of the
|
|
# client. PG-USERNAME is the requested PostgreSQL user name. The
|
|
# existence of a record specifies that SYSTEM-USERNAME may connect as
|
|
# PG-USERNAME.
|
|
#
|
|
# If SYSTEM-USERNAME starts with a slash (/), it will be treated as a
|
|
# regular expression. Optionally this can contain a capture (a
|
|
# parenthesized subexpression). The substring matching the capture
|
|
# will be substituted for 1 (backslash-one) if present in
|
|
# PG-USERNAME.
|
|
#
|
|
# Multiple maps may be specified in this file and used by pg_hba.conf.
|
|
#
|
|
# No map names are defined in the default configuration. If all
|
|
# system user names and PostgreSQL user names are the same, you don't
|
|
# need anything in this file.
|
|
#
|
|
# This file is read on server startup and when the postmaster receives
|
|
# a SIGHUP signal. If you edit the file on a running system, you have
|
|
# to SIGHUP the postmaster for the changes to take effect. You can
|
|
# use "pg_ctl reload" to do that.
|
|
|
|
# Put your actual configuration here""")
|
|
|
|
if has("pgsql-server-test"):
|
|
out("""# MAPNAME SYSTEM-USERNAME PG-USERNAME
|
|
intranet www-data crans_ro
|
|
intranet www-data crans""")
|
|
for nounou in nounous:
|
|
out("""intranet """ + str(nounou) + """ crans""")
|
|
for apprenti in apprentis:
|
|
out("""intranet """ + str(apprenti) + """ crans""")
|
|
|
|
else:
|
|
|
|
#Syslog
|
|
out("""# MAPNAME SYSTEM-USERNAME PG-USERNAME
|
|
syslog postgres rsyslog
|
|
syslog root rsyslog""")
|
|
|
|
#Ensuite les nounous
|
|
|
|
for nounou in nounous:
|
|
out("""syslog """ + str(nounou) + """ crans""")
|
|
|
|
#Db django rw
|
|
out("""
|
|
django www-data crans
|
|
django asterisk crans
|
|
django respbats crans
|
|
django root crans""")
|
|
|
|
# Etherpad
|
|
out("""
|
|
etherpad etherpad crans""")
|
|
|
|
|
|
# mac_prises
|
|
out("""
|
|
mac_prises root crans""")
|
|
for nounou in nounous:
|
|
out("""mac_prises """ + str(nounou) + """ crans""")
|
|
|
|
|
|
#Filtrage
|
|
out("""filtrage root crans""")
|
|
|
|
#Sqlgrey
|
|
out("""sqlgrey postgres sqlgrey""")
|
|
|
|
# cluebringer
|
|
out("""cluebringer www-data cluebringer
|
|
cluebringer cluebringer cluebringer""")
|
|
|
|
#Webmail
|
|
out("""webmail www-data roundcube""")
|
|
|
|
#horde
|
|
out("""horde www-data www-data""")
|
|
|
|
#Mediadrop
|
|
|
|
out("""mediadrop root mediadrop
|
|
mediadrop www-data mediadrop""")
|
|
|
|
#Db django ro
|
|
out("""
|
|
django_ro respbats crans_ro
|
|
django_ro freerad crans_ro
|
|
django_ro arpwatch crans_ro
|
|
django_ro munin crans_ro
|
|
django_ro asterisk crans_ro
|
|
django_ro www-data crans_ro
|
|
django_ro root crans_ro""")
|
|
|
|
for nounou in nounous:
|
|
out("""django_ro """ + str(nounou) + """ crans_ro""")
|
|
|