+
+ def unconfigure(self, opts, changes):
+ try:
+ sssdconfig = SSSDConfig.SSSDConfig()
+ sssdconfig.import_config()
+ except Exception as e: # pylint: disable=broad-except
+ # Unable to read existing SSSD config so it is probably not
+ # configured.
+ logging.info('Loading SSSD config failed: %s', e)
+ return False
+
+ for domain in changes['domains']:
+ try:
+ sssd_domain = sssdconfig.get_domain(domain.encode('utf-8'))
+ except SSSDConfig.NoDomainError:
+ logging.info('No SSSD domain %s', domain)
+ continue
+ else:
+ if 'ldap_user_extra_attrs' in changes['domains'][domain]:
+ sssd_domain.set_option('ldap_user_extra_attrs',
+ changes['domains'][domain][
+ 'ldap_user_extra_attrs'].encode(
+ 'utf-8'))
+ else:
+ sssd_domain.remove_option('ldap_user_extra_attrs')
+ sssdconfig.save_domain(sssd_domain)
+
+ if changes['ifp']['new']:
+ # We created the service newly, let's remove
+ sssdconfig.delete_service('ifp')
+ else:
+ ifp = sssdconfig.get_service('ifp')
+ if 'allowed_uids' in changes['ifp']:
+ ifp.set_option('allowed_uids',
+ changes['ifp']['allowed_uids'].encode('utf-8'))
+ if 'user_attributes' in changes['ifp']:
+ ifp.set_option('user_attributes',
+ changes['ifp']['user_attributes'].encode(
+ 'utf-8'))
+ sssdconfig.save_service(ifp)
+
+ sssdconfig.write(SSSD_CONF)
+
+ try:
+ subprocess.call(['/sbin/service', 'sssd', 'restart'])
+ except Exception: # pylint: disable=broad-except
+ pass
+
+ # Give SSSD a chance to restart
+ time.sleep(5)