D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
usr
/
lib
/
python3.9
/
site-packages
/
ipaplatform
/
debian
/
__pycache__
/
Filename :
tasks.cpython-39.pyc
back
Copy
a � �iw � @ s� d Z ddlmZ ddlZddlZddlZddlmZ ddlm Z ddl m Z ddl m Z ddlmZ dd lmZ dd lmZ e�e�ZG d d � d e �Ze� ZdS ) zO This module contains default Debian-specific implementations of system tasks. � )�absolute_importN)�Path)�BaseTaskNamespace)�RedHatTaskNamespace)�paths)�directivesetter)�ipautil)�DNc @ s� e Zd Zedd� �Zedd� �Zed&dd��Zed d � �Zed d � �Zed d� �Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%S )'�DebianTaskNamespacec C s. zt �g d�� W n t jy( Y dS 0 dS )N)�pam-auth-update� --packagez--remove� mkhomedirFT�r �runZCalledProcessError)�fstore� statestoreZwas_sssd_installedZwas_sssd_configured� r �</usr/lib/python3.9/site-packages/ipaplatform/debian/tasks.py�$restore_pre_ipa_client_configuration s z8DebianTaskNamespace.restore_pre_ipa_client_configurationc C s dS �NTr )Z nisdomainr r r � set_nisdomain' s z!DebianTaskNamespace.set_nisdomainTFc C s: |r2zt �g d�� W n t jy, Y dS 0 dS dS d S )N)r r z--enabler FTr )Zsssdr r ZsudoZsubidr r r �modify_nsswitch_pam_stack, s z-DebianTaskNamespace.modify_nsswitch_pam_stackc C s dS r r )r r r r �modify_pam_to_use_krb59 s z*DebianTaskNamespace.modify_pam_to_use_krb5c C s dS r r ��pathr r r �backup_auth_configuration> s z-DebianTaskNamespace.backup_auth_configurationc C s dS r r r r r r �restore_auth_configurationC s z.DebianTaskNamespace.restore_auth_configurationc C s dS r r ��selfr r r r �migrate_auth_configurationH s z.DebianTaskNamespace.migrate_auth_configurationc C s d S �Nr �r r r r �configure_httpd_wsgi_confL s z-DebianTaskNamespace.configure_httpd_wsgi_confc C s t �tjddd� d S )NZ SSLProtocolzTLSv1.2F)r Z set_directiver ZHTTPD_SSL_CONFr! r r r �configure_httpd_protocolP s �z,DebianTaskNamespace.configure_httpd_protocolc C s d S r r r! r r r �setup_httpd_loggingV s z'DebianTaskNamespace.setup_httpd_loggingc C s d S r r �r r r r r �configure_pkcs11_modulesZ s z,DebianTaskNamespace.configure_pkcs11_modulesc C s d S r r r% r r r �restore_pkcs11_modules^ s z*DebianTaskNamespace.restore_pkcs11_modulesc C sP z| � tj|�f W n ty0 t�d� Y n0 t| �tj|�| � tj �g�S )Nz�Could not create p11-kit anchor trust file. On Debian this file is not used by ca-certificates and is provided for information only.) Zwrite_p11kit_certsr � IPA_P11_KIT� Exception�logger� exception�any�write_ca_certificates_dir�CA_CERTIFICATES_DIR� remove_ca_certificates_bundle�CA_CERTIFICATES_BUNDLE_PEM)r �ca_certsr r r �platform_insert_ca_certsa s ���z,DebianTaskNamespace.platform_insert_ca_certsc C s� ddl m} t|�}z|jddd� W n tyF t�d|� � Y n0 |D �]P\}}}}} |sbqLt|j�} t|j �} | � � � d|j � d�} || } zt | d �}W n ty� t�d| � � Y n0 |�� zt �|�� d � W n ty� t�d | � � Y n0 zZ|�d |� d | � � � d| � � � d|j � d|j d�d� � |�|jj��d�}|�|� W n" t�y| t�d| � � Y n0 W d � qL1 �s�0 Y qLdS )Nr )�x509i� T)�mode�exist_okzCould not create %s� z.crt�wi� zCould not set mode of %sz9This file was created by IPA. Do not edit. Description: z Subject: z Issuer: z Serial Number (dec): z Serial Number (hex): z#xz �asciizCould not write to %s)Zipalibr3 r �mkdirr) r* �errorr �subject�issuerZ ldap_textZ serial_number�open�os�fchmod�fileno�writeZ public_bytesZEncodingZPEM�decode)r � directoryr1 r3 r ZcertZnicknameZtrustedZ_ext_key_usageZ_serialr; r< �filenameZ cert_path�fZpemr r r r- u sV ����� *z-DebianTaskNamespace.write_ca_certificates_dirc C s& t | �tj�| �tj�| �tj�g�S r )r, �remove_ca_certificates_dirr r. r/ r( r0 r! r r r �platform_remove_ca_certs� s ��z,DebianTaskNamespace.platform_remove_ca_certsc C sJ t tj�}|�� sdS zt�|� W n tyD t�d|� � Y n0 dS )NFzCould not remove %sT) r r r. �exists�shutil�rmtreer) r* r: )r rC r r r r rF � s z.DebianTaskNamespace.remove_ca_certificates_dirc C s t �| |�S r )r �disable_ldap_automountr r r r rK � s z*DebianTaskNamespace.disable_ldap_automountN)TF)�__name__� __module__� __qualname__� staticmethodr r r r r r r r" r# r$ r& r' r2 r- rG rF rK r r r r r s2 � C r )�__doc__Z __future__r Zloggingr> rI �pathlibr Zipaplatform.base.tasksr Zipaplatform.redhat.tasksr Zipaplatform.pathsr Z ipapythonr r Z ipapython.dnr Z getLoggerrL r* r Ztasksr r r r �<module> s 8