Changeset 3390

Timestamp:

08/15/13 15:18:38 (11 years ago)

Author:

sanmai

Message:

• Use setuid to allow check_clarin_ldap.py to switch to the 'opendj' Unix user, which is required by the OpenDJ command line utilities.

File:

• monitoring/plugins/mpi/generic_tla_monitoring.py (modified) (3 diffs)

monitoring/plugins/mpi/generic_tla_monitoring.py

@@ -1 +1 @@
 #!/usr/bin/python2
 
-import sys, getopt, httplib, xml.etree.ElementTree, subprocess, os, re, pdb, traceback, datetime, urlparse, urllib
+import sys, getopt, httplib, xml.etree.ElementTree, subprocess, re, pdb, traceback, datetime, urlparse, urllib
 import simplejson as json
+import pwd, os
+
 
 nagios_codes    = {
@@ -189 +191 @@
     # Run OpenDJ's "ldapsearch" command line utility
     #pdb.set_trace()
-    
+
+    OpenDJ_uid = pwd.getpwnam('opendj')[2]
+    Nagios_uid = pwd.getpwnam('nagios')[2]
+    
+    try :
+        os.setuid(OpenDJ_uid)
+    except error as e :
+        raise e
+
     process = subprocess.Popen(command, 
                                stdout = subprocess.PIPE, 
@@ -195 +205 @@
 
     stdout, stderr = process.communicate()
+
+    try :
+        os.setuid(Nagios_uid)
+    except error as e :
+        raise e
 
     #print stdout