Class: Puppet::Util::ADSI::Group

Inherits:
Object
  • Object
show all
Extended by:
Enumerable
Defined in:
lib/puppet/util/adsi.rb

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(name, native_group = nil) ⇒ Group

Returns a new instance of Group.



247
248
249
250
 
# File 'lib/puppet/util/adsi.rb', line 247

def initialize(name, native_group = nil)
  @name = name
  @native_group = native_group
end

Instance Attribute Details

#name ⇒ Object (readonly) 



246
247
248
 
# File 'lib/puppet/util/adsi.rb', line 246

def name
  @name
end

#native_group ⇒ Object 



245
246
247
 
# File 'lib/puppet/util/adsi.rb', line 245

def native_group
  @native_group
end

Class Method Details

.create(name) ⇒ Object

Raises:



343
344
345
346
347
 
# File 'lib/puppet/util/adsi.rb', line 343

def self.create(name)
  # Windows error 2224: The account already exists.
  raise Puppet::Error.new( "Cannot create group if user '#{name}' exists." ) if Puppet::Util::ADSI::User.exists? name
  new(name, Puppet::Util::ADSI.create(name, 'group'))
end

.delete(name) ⇒ Object 



353
354
355
 
# File 'lib/puppet/util/adsi.rb', line 353

def self.delete(name)
  Puppet::Util::ADSI.delete(name, 'group')
end

.each(&block) ⇒ Object 



357
358
359
360
361
362
363
364
365
366
 
# File 'lib/puppet/util/adsi.rb', line 357

def self.each(&block)
  wql = Puppet::Util::ADSI.execquery( 'select name from win32_group where localaccount = "TRUE"' )

  groups = []
  wql.each do |g|
    groups << new(g.name)
  end

  groups.each(&block)
end

.exists?(name) ⇒ Boolean

Returns:

  • (Boolean) 


349
350
351
 
# File 'lib/puppet/util/adsi.rb', line 349

def self.exists?(name)
  Puppet::Util::ADSI.connectable?(Group.uri(name))
end

.name_sid_hash(names) ⇒ Object 



275
276
277
278
279
280
281
282
283
284
285
 
# File 'lib/puppet/util/adsi.rb', line 275

def self.name_sid_hash(names)
  return [] if names.nil? or names.empty?

  sids = names.map do |name|
    sid = Puppet::Util::Windows::Security.name_to_sid_object(name)
    raise Puppet::Error.new( "Could not resolve username: #{name}" ) if !sid
    [sid.to_s, sid]
  end

  Hash[ sids ]
end

.uri(name, host = '.') ⇒ Object 



256
257
258
259
260
 
# File 'lib/puppet/util/adsi.rb', line 256

def self.uri(name, host = '.')
  if sid_uri = Puppet::Util::ADSI.sid_uri_safe(name) then return sid_uri end

  Puppet::Util::ADSI.uri(name, 'group', host)
end

Instance Method Details

#add_member_sids(*sids) ⇒ Object 



301
302
303
304
305
 
# File 'lib/puppet/util/adsi.rb', line 301

def add_member_sids(*sids)
  sids.each do |sid|
    native_group.Add(Puppet::Util::ADSI.sid_uri(sid))
  end
end

#add_members(*names) ⇒ Object Also known as: add_member 



287
288
289
290
291
 
# File 'lib/puppet/util/adsi.rb', line 287

def add_members(*names)
  Puppet.deprecation_warning('Puppet::Util::ADSI::Group#add_members is deprecated; please use Puppet::Util::ADSI::Group#add_member_sids')
  sids = self.class.name_sid_hash(names)
  add_member_sids(*sids.values)
end

#commit ⇒ Object 



266
267
268
269
270
271
272
273
 
# File 'lib/puppet/util/adsi.rb', line 266

def commit
  begin
    native_group.SetInfo unless native_group.nil?
  rescue Exception => e
    raise Puppet::Error.new( "Group update failed: #{e}", e )
  end
  self
end

#member_sids ⇒ Object 



320
321
322
323
324
325
326
 
# File 'lib/puppet/util/adsi.rb', line 320

def member_sids
  sids = []
  native_group.Members.each do |m|
    sids << Puppet::Util::Windows::Security.octet_string_to_sid_object(m.objectSID)
  end
  sids
end

#members ⇒ Object 



313
314
315
316
317
318
 
# File 'lib/puppet/util/adsi.rb', line 313

def members
  # WIN32OLE objects aren't enumerable, so no map
  members = []
  native_group.Members.each {|m| members << m.Name}
  members
end

#remove_member_sids(*sids) ⇒ Object 



307
308
309
310
311
 
# File 'lib/puppet/util/adsi.rb', line 307

def remove_member_sids(*sids)
  sids.each do |sid|
    native_group.Remove(Puppet::Util::ADSI.sid_uri(sid))
  end
end

#remove_members(*names) ⇒ Object Also known as: remove_member 



294
295
296
297
298
 
# File 'lib/puppet/util/adsi.rb', line 294

def remove_members(*names)
  Puppet.deprecation_warning('Puppet::Util::ADSI::Group#remove_members is deprecated; please use Puppet::Util::ADSI::Group#remove_member_sids')
  sids = self.class.name_sid_hash(names)
  remove_member_sids(*sids.values)
end

#set_members(desired_members) ⇒ Object 



328
329
330
331
332
333
334
335
336
337
338
339
340
341
 
# File 'lib/puppet/util/adsi.rb', line 328

def set_members(desired_members)
  return if desired_members.nil? or desired_members.empty?

  current_hash = Hash[ self.member_sids.map { |sid| [sid.to_s, sid] } ]
  desired_hash = self.class.name_sid_hash(desired_members)

  # First we add all missing members
  members_to_add = (desired_hash.keys - current_hash.keys).map { |sid| desired_hash[sid] }
  add_member_sids(*members_to_add)

  # Then we remove all extra members
  members_to_remove = (current_hash.keys - desired_hash.keys).map { |sid| current_hash[sid] }
  remove_member_sids(*members_to_remove)
end

#uri ⇒ Object 



252
253
254
 
# File 'lib/puppet/util/adsi.rb', line 252

def uri
  self.class.uri(name)
end