ubccr/goipa

FreeIPA client library in Go

goipa - FreeIPA client library

===============================================================================

goipa is a FreeIPA client library written in Go. It interfaces with the FreeIPA JSON api over HTTPS.

Usage

Install using go tools:

$ go get github.com/ubccr/goipa

Example calling FreeIPA user-show:

package main

import (
    "fmt"

    "github.com/ubccr/goipa"
)

func main() {
    client := ipa.NewDefaultClient()

    err := client.LoginWithKeytab("/path/to/user.keytab", "username")
    if err != nil {
        panic(err)
    }

    rec, err := client.UserShow("username")
    if err != nil {
        panic(err)
    }

    fmt.Println("%s - %s", rec.Username, rec.Uid)
}

Hacking

Development and testing goipa uses docker-compose. The scripts to spin up a FreeIPA test server in docker were copied/adopted from this great repository. Most of the scripts in container/ directory are written by Jan Pazdziora and licensed under Apache 2.0 and modified for use with goipa.

NOTE: The containers are NOT meant to be run in production and used solely for development.

To get started hacking on goipa and running the test suite:

$ cp .env.sample .env
[edit to taste. add passwords and ssh key]

$ docker-compose build
$ docker-compose up -d
$ ssh -p 9022 localhost
$ kinit admin
$ cd /app
$ go test

To run a specific test with trace debugging:

$ go test -v -run UserShow

License

goipa is released under a BSD style License. See the LICENSE file.

goipa's Issues

Sync repo from fiveai

Hello,

fiveai repo has more features like group management, any chances to you get it merge ? @fiveai @tustvold what do you think ?

I added features from fiveai fork but it will be more simple if everyone merge contribs in one place ?

get hosts

Hello

how can i request to upload hosts in json format? Please set an example

example via ipa : ipa host_show

switching to tehwalris/go-freeipa instead of ubccr/goipa

hi,

would you mind switching to the other ipa library, it is created based on the IPA api definition, that is available via there API endpoint.

this means that the "go-freeipa" client more or less supports all available JSON RPC methods of the API offers, where goipa only supports methods that that have been implemented manually.

with this, it would be possible to create more resources for this provider.

i would do it myself, but i am not familiar with go.

Multiple mail adresses

Hi,

it's possible to define multiple mail adresses within ipa. The command "ipa user_show" displays all of them, however, goipa only uses an string and just displays one of them.

It would be great if goipa could also handle multiple mail adresses.

Regards,
Andi