Thanks. It was a pretty long weekend’s work. As for easier, I’ll be honest: I was really only able to do what I did by thoroughly reading the IPA source code. There’s some quite good documentation embedded in some of the Python source files, so the Python side was pretty easy, but I found the JavaScript side to be a real challenge. It was very trial-and-error. I still have no idea why I can’t get an attribute_table to work in place of a multivalue (see install/ui/js/freeipa/widget.js).
I think a quite important thing to pass on to others is how to debug IPA: You can use self.log.debug() calls in Python (to the pre-configured logging framework) if you invoke the ipa command as “ipa -d -e in_server=True” and that’s very helpful … but to make that work I had to install a global anyone all-permissions ACI. Otherwise I got an insufficient-access error that threw me out of the program before any LDAP create/update/delete calls could complete. Maybe I missed a command-line option or something. On the JavaScript side, what worked best for me was to use Firebug with Firefox and make console.log() calls. I gather that you can basically do that without Firebug, but I’m not a web developer, so I went with what I knew — or rather vaguely remembered from the last time I wrote a web page, back in the 90s. As for the rest, it really boiled down to monkey-see-monkey-do mimicry. I can’t find a range validator in the source code, so I want to write my own. Let me go grep the source to find examples of validators and see how they’re written. And so on. The hard parts were when I wanted to do things that I don’t think FreeIPA does itself, like a validator that executes an LDAP query. I had to flail my way through that one and probably did it all wrong. I do have one concrete suggestion. You might maybe consider taking some chunk of functionality and packaging it as a separate, installable “reference plugin.” DNS might be too complex for that, considering it has its tendrils in host.js etc. Maybe automount might be a good candidate. I bring this up because a good example is the best documentation. When somebody asks “How do I write a plugin?” you can just point and say “Why, like this.” Just a thought. On May 11, 2016 at 4:03:04 AM, Petr Vobornik ([email protected]) wrote: On 05/10/2016 09:39 PM, Jeffery Harrell wrote: > As promised yesterday, here’s the link to my bespoke DHCP plugin. It’s really > > nothing, just a little thing I whipped up for my own use. > > https://github.com/jefferyharrell/IPA-dhcp > > Very nice. This is probably the most complex 'external' IPA plugin I've seen. You must have put quite a lot of effort into making it happen. Were there any areas in code/docs/wiki/... you encountered which you would like to see improved in FreeIPA or maybe some obstacles removed so that plugins like this can be made easier? Regards -- Petr Vobornik
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
