D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
lib
/
python3.9
/
site-packages
/
ipaplatform
/
redhat
/
__pycache__
/
Filename :
authconfig.cpython-39.pyc
back
Copy
a }�f>4 � @ s� d dl mZ d dlZd dlZd dlZd dlmZ d dlmZ d dl m Z d dl Z d dl Z g d�Z e�e�Zdd� Ze�ej�G d d � d ��ZG d d � d e�ZG d d� de�ZdS )� )�absolute_importN)�paths)�ipautil)� ScriptError)�passwd�groupZshadowZgshadowc C s t � S �N)�RedHatAuthSelect� r r �A/usr/lib/python3.9/site-packages/ipaplatform/redhat/authconfig.py� get_auth_tool% s r c @ sT e Zd Zejd dd��Zejdd� �Zejdd� �Zejdd � �Zejd d � �Z d S )�RedHatAuthToolBaseTc C s d S r r ��self�sssd� mkhomedir� statestore�sudor r r � configure, s z RedHatAuthToolBase.configurec C s d S r r �r �fstorer �was_sssd_installed�was_sssd_configuredr r r � unconfigure0 s z RedHatAuthToolBase.unconfigurec C s dS )z� Backup the system authentication resources configuration :param path: directory where the backup will be stored Nr �r �pathr r r �backup6 s zRedHatAuthToolBase.backupc C s dS )z� Restore the system authentication resources configuration from a backup :param path: directory where the backup is stored Nr r r r r �restore= s zRedHatAuthToolBase.restorec C s d S r r �r � nisdomainr r r � set_nisdomainD s z RedHatAuthToolBase.set_nisdomainN)T) �__name__� __module__� __qualname__�abc�abstractmethodr r r r r r r r r r ) s r c @ sH e Zd Zdd� Zddd�Zddd �Zd d � Zd d � Zdd� Zdd� Z dS )r c C sB zt �tjddg�}W n t jy6 t�d� Y d S 0 |j�� S )N�currentz--rawz/Current configuration not managed by authselect) r �runr � AUTHSELECT�CalledProcessError�logger�debugZ raw_output�decode)r r& r r r � _get_authselect_current_outputK s � z/RedHatAuthSelect._get_authselect_current_outputNc C sR |du r | � � }|du r dS |�� }|s,dS |�d�}|d }|dd� }||fS )z� Parses the output_text to extract the profile and options. When no text is provided, runs the 'authselect profile' command to generate the text to be parsed. N� r � )r- �strip�split)r Z output_textZ output_items�profile�featuresr r r �_parse_authselect_outputU s z)RedHatAuthSelect._parse_authselect_outputTFc C s� d� t�d��}|�dd|� tjddg}|rF|�d� |�ddd � |rT|�d � |rb|�d � |�d � |�d � |�� t�|� d S )Nzpre_ipaclient_{}z %Y%m%d%H%M%S� authselectr �selectr zwith-mkhomedirr Tz with-sudoz with-subid�--forcez --backup={}) �format�time�strftime� backup_stater r( �appendr r' )r r r r r ZsubidZ backup_name�cmdr r r r h s zRedHatAuthSelect.configurec C s< |� dd�}|d ur&|s&|�d�s&d S |�d�stt�d� t� }|�||||� |�� }t�dd�|�� d}g } np|�dd�}|s�d}|�dd �} |� dd � |� t j �r�t� d � |�t j � | d ur�d d � | �d�D �} ng } |�dd�} | �rt jd| g} t�| � n*t jd|g} | �| � | �d� t�| � d S )NZ installation�completer5 z�WARNING: Unable to revert to the pre-installation state ('authconfig' tool has been deprecated in favor of 'authselect'). The default sssd profile will be used instead.z7The authconfig arguments would have been: authconfig %sr. r r2 Z features_listr z Restoring user-nsswitch.confc S s g | ]}|� � r|� � �qS r )r0 ��.0�fr r r � <listcomp>� s z0RedHatAuthSelect.unconfigure.<locals>.<listcomp>r zbackup-restorer6 r7 )Z get_state� has_stater* Zwarning�RedHatAuthConfig�prepare_unconfigure� build_args�join� restore_stateZ delete_stateZhas_filer Z NSSWITCH_CONF�infoZ restore_filer1 r( r r' �extendr< ) r r r r r r> � authconfig�argsr2 r3 Zfeatures_stater r= r r r r � sV � � �� � � z RedHatAuthSelect.unconfigurec C sl | � � }|d u rd S tj�|�s*t�|� ttj�|d�d��}|�|� W d � n1 s^0 Y d S )N�authselect.backup�w)r- �osr �exists�makedirs�openrG �write)r r r& rA r r r r � s zRedHatAuthSelect.backupc C s� t tj�|d�d�� }| �|�� �}W d � n1 s80 Y |r||d }tjd|g}|�|d � |� d� t � |� d S )NrM �rr r6 r/ r7 ) rR rO r rG r4 �readr r( rJ r< r r' )r r rA Zcfgr2 r= r r r r � s , zRedHatAuthSelect.restorec C s� z>t tjd�� }dd� |D �}W d � n1 s20 Y W n tyT g }Y n0 |�d�|�� t tjd��}|�|� W d � n1 s�0 Y d S )NrT c S s" g | ]}|� � �� �d �s|�qS )Z NISDOMAIN)r0 �upper� startswith)r@ �liner r r rB � s �z2RedHatAuthSelect.set_nisdomain.<locals>.<listcomp>z NISDOMAIN={} rN )rR r ZSYSCONF_NETWORK�IOErrorr< r8 � writelines)r r rA Zcontentr r r r � s �( z RedHatAuthSelect.set_nisdomain)N)TF) r! r" r# r- r4 r r r r r r r r r r I s � < r c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z d dd�Z d!dd�Z dd� Z dd� Zdd� Zdd � Zd d � Zd S )"rD aE AuthConfig class implements system-independent interface to configure system authentication resources. In Red Hat systems this is done with authconfig(8) utility. AuthConfig class is nothing more than a tool to gather configuration options and execute their processing. These options then converted by an actual implementation to series of a system calls to appropriate utilities performing real configuration. If you need to re-use existing AuthConfig instance for multiple runs, make sure to call 'AuthConfig.reset()' between the runs. c C s i | _ d S r �� parameters�r r r r �__init__� s zRedHatAuthConfig.__init__c C s d| j |< | S )NTr[ �r �optionr r r �enable� s zRedHatAuthConfig.enablec C s d| j |< | S )NFr[ r_ r r r �disable� s zRedHatAuthConfig.disablec C s d | j |< | S r r[ r_ r r r � add_option s zRedHatAuthConfig.add_optionc C s |g| j |< | S r r[ )r r` �valuer r r � add_parameter s z RedHatAuthConfig.add_parameterc C s i | _ | S r r[ r] r r r �reset s zRedHatAuthConfig.resetc C s� g }| j �� D ]�\}}t|�tu rF|r6|�d| � q�|�d| � qt|�ttfv rx|�d| � |�d|d � q|d u r�|�d| � q|�d||f � q|S )Nz --enable%sz --disable%sz--%sz%sr z--%s%s)r\ �items�type�boolr< �tuple�list)r rL r` rd r r r rF s zRedHatAuthConfig.build_argsTc C sN |r| � d� | �� }zt�tjg| � W n tjyH td��Y n0 d S )N�update�$Failed to execute authconfig command)rc rF r r' r � AUTHCONFIGr) r )r rl rL r r r �execute! s zRedHatAuthConfig.executec C s� |r6|� ddd� |� ddd� | �d� | �d� nD|� ddd� | �d� | �d� |� ddd� | �d� | �d� |r�|� dd d� | �d � | �� | �� d S ) NrK r T�sssdauth�ldapZ forcelegacy�krb5Znostartr )r; ra rc ro rf r r r r r + s zRedHatAuthConfig.configurec C sl |� d�r8dD ]&}|�d|�}|r|dkr| �|� qn0| �d� | �d� |rT|s^| �d� | �d� d S )NrK )rq rr r rp r r rq rr rp r )rC rH rb )r r r r r ZconfZcnfr r r rE A s z$RedHatAuthConfig.prepare_unconfigurec C s$ | � ||||� | �� | �� d S r )rE ro rf r r r r r Y s �z RedHatAuthConfig.unconfigurec sv zt �tjd� g� W n t jy2 td��Y n0 � fdd�tD �}|D ]&}zt�|� W qJ t yn Y qJ0 qJd S )Nz --savebackuprm c s g | ]}t j�� |��qS r )rO r rG r? �r r r rB j � z+RedHatAuthConfig.backup.<locals>.<listcomp>) r r' r rn r) r �FILES_TO_NOT_BACKUPrO �remove�OSError)r r Zfiles_to_remove�filenamer rs r r a s zRedHatAuthConfig.backupc C s8 zt �tjd|g� W n t jy2 td��Y n0 d S )Nz--restorebackuprm )r r' r rn r) r r r r r r q s zRedHatAuthConfig.restorec C s | � � | �d|� | �� d S )Nr )rf re ro r r r r r w s z RedHatAuthConfig.set_nisdomainN)T)T)r! r" r# �__doc__r^ ra rb rc re rf rF ro r rE r r r r r r r r rD � s rD )Z __future__r ZloggingZsixr$ Zipaplatform.pathsr Z ipapythonr Zipapython.admintoolr rO r9 ru Z getLoggerr! r* r Z add_metaclass�ABCMetar r rD r r r r �<module> s