#!/usr/bin/python

from centos import AccountSystem

from centos import defaults

FAS_USERNAME = ''

FAS_PASSWORD = ''

GROUP_INCLUDE_PREFIX = 'sig-'

GROUP_FILE = '/etc/bsadmin/groups'

IGNORE_CERT_VALIDATION = True

def group_users(account_system_handle):

    fas = account_system_handle

    groups = fas.group_data().keys()

    group_users = {}

    for groupname in groups:

        if not groupname.startswith(GROUP_INCLUDE_PREFIX):

            continue

        group_users[groupname] = [member_entry['username'] for member_entry in

                                  fas.group_members(groupname)]

    return group_users

def write_file(group_membership, filename=GROUP_FILE):

    with open(filename, 'w') as groupfile:

        for groupname, users in group_membership.iteritems():

            signame = groupname[len(GROUP_INCLUDE_PREFIX):]

            print >>groupfile, "{}:{}".format(signame, ','.join(users))

if __name__ == '__main__':

    fas = AccountSystem(base_url=defaults.FAS_TOPURL,

                        username=FAS_USERNAME,

                        password=FAS_PASSWORD,

                        insecure=IGNORE_CERT_VALIDATION)

    write_file(group_users(fas))