#!/usr/bin/python

import ConfigParser

import sys

from centos import AccountSystem

from centos.client import AuthError

def group_users(account_system_handle):

    fas = account_system_handle

    groups = fas.group_data().keys()

    group_users = {}

    for groupname in groups:

        if not groupname.startswith(GROUP_INCLUDE_PREFIX):

            continue

        group_users[groupname] = [member_entry['username'] for member_entry in

                                  fas.group_members(groupname)]

    return group_users

def write_file(group_membership, filename):

    with open(filename, 'w') as groupfile:

        for groupname, users in group_membership.iteritems():

            signame = groupname[len(GROUP_INCLUDE_PREFIX):]

            print >>groupfile, "{0}:{1}".format(signame, ','.join(users))

if __name__ == '__main__':

    config = ConfigParser.SafeConfigParser()

    config.read('/etc/bsadmin/bsadmin.conf')

    try:

        FAS_TOPURL = config.get('fas', 'topurl')

        FAS_USERNAME = config.get('fas', 'username')

        FAS_PASSWORD = config.get('fas', 'password')

        IGNORE_CERT_VALIDATION = config.getboolean('fas', 'ignore_selfsigned')

        GROUP_INCLUDE_PREFIX = config.get('fas', 'group_prefix')

        GROUP_FILE = config.get('fas', 'group_file')

    except ConfigParser.NoOptionError as e:

        print >> sys.stderr, e.msg

        sys.exit(1)

    try:

        fas = AccountSystem(base_url=FAS_TOPURL,

                            username=FAS_USERNAME,

                            password=FAS_PASSWORD,

                            insecure=IGNORE_CERT_VALIDATION)

    except AuthError as e:

        print >> sys.stderr, e.msg

        sys.exit(1)

    write_file(group_users(fas), GROUP_FILE)