D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
usr
/
lib
/
python3.9
/
site-packages
/
authselect
/
__pycache__
/
Filename :
authcompat.cpython-39.opt-1.pyc
back
Copy
a ���g�J � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dl m Z ejZ dd� Z G dd� d�Z G d d � d �ZG d d � d �ZG d d� d�ZG dd� d�Zdd� Zedkr�e� dS )� N)�Options)�EnvironmentFile)� ConfigSnippetc O s t | dtji|�� d S )N�file)�print�sys�stderr)�args�kwargs� r �9/usr/lib/python3.9/site-packages/authselect/authcompat.py�eprint% s r c @ s" e Zd ZdZddd�Zdd� ZdS ) �CommandFNTc C s2 |g| | _ |d ur |�� nd | _|| _d | _d S �N)r �encode�input�check�result)�self�commandr r r r r r �__init__, s zCommand.__init__c C sF t td�d�| j� � | jr"d S tj| j| j| jtj tj d�| _ d S )Nz Executing: %s� )r r �stdoutr ) r �_�joinr �TEST� subprocess�runr r �PIPEr �r r r r r 2 s �z Command.run)NT)�__name__� __module__� __qualname__r r r r r r r r ) s r c @ s> e Zd Zdd� Zdd� Zdd� Zdd� Zdd d �Zd d � ZdS )�Servicec C s |d | _ d S )Nz.service��name�r r% r r r r ? s zService.__init__c C s� z |� � W n~ tjy� } zd|r@|j|kr@ttd�| j � n6|j|krvttd�d�|j�|jf � t|j � � � W Y d }~n d }~0 0 d S )Nz5Service %s was not found. Please install the service.�$Command [%s] failed with %d, stderr:r ) r r �CalledProcessError� returncoder r r% r �cmdr �decode)r r �requiredZ enoent_coder r r r � runsystemdB s � �zService.runsystemdc C s( t t�d�d| jg�}| �|dd� d S )N� cmd-systemctl�enableT� �r �Path�Systemr% r- �r r* r r r r/ N s zService.enablec C s( t t�d�d| jg�}| �|dd� d S )Nr. �disableFr0 r1 r4 r r r r5 R s zService.disableTc C s4 |r | � � tt�d�d| jg�}| �|dd� d S )Nr. �startT� )�stopr r2 r3 r% r- )r ZRestartr* r r r r6 V s z Service.startc C s( t t�d�d| jg�}| �|dd� d S )Nr. r8 Fr7 r1 r4 r r r r8 \ s z Service.stopN)T) r r! r" r r- r/ r5 r6 r8 r r r r r# > s r# c @ sb e Zd Zej�ej�e��Ze ed �Z dddddddd d d d d d� Z e dd� �Z e dd� �ZdS )r2 z/authcompat_pathsz/etc/openldap/ldap.confz$/etc/krb5.conf.d/authconfig-krb.confz%/etc/sssd/conf.d/authconfig-sssd.confz/etc/sysconfig/authconfigz/etc/sysconfig/networkz;/etc/security/pwquality.conf.d/10-authconfig-pwquality.confz /etc/yp.confz/usr/bin/systemctlz/usr/bin/authselectz/usr/sbin/realmz/usr/bin/domainnamez/usr/sbin/setsebool) � ldap.conf� krb5.conf� sssd.conf� authconfig�network�pwquality.confzyp.confr. �cmd-authselect� cmd-realmzcmd-domainnamez cmd-setseboolc C s dt j| f S )Nz%s/%s)r2 �LocalDir)�relpathr r r �Localt s z Path.Localc C s t j| S r )r2 �Filesr$ r r r r3 x s z Path.SystemN)r r! r" �os�path�dirname�realpath�__file__rA r ZConfigrD � staticmethodrC r3 r r r r r2 a s& � r2 c @ s| e Zd ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG d d � d e�ZG d d � d e�Z G d d� de�Z dS )� Configurationc @ sx e Zd Zd dd�Zdd� Zdd� Zdd � Zd d � Zd d � Zdd� Z dd� Z dd� Z dd� Z dd� Z d dd�Zdd � ZdS ) zConfiguration.BaseNc C s" || _ d | _|d ur t|�| _d S r )�options�servicer# )r rL � ServiceNamer r r r s zConfiguration.Base.__init__c C s dS )NTr r r r r � isEnabled� s z Configuration.Base.isEnabledc C s | � � S r )rO r r r r � isDisabled� s z Configuration.Base.isDisabledc C s* | j d u rd S | j �� |s&| j �� d S r )rM r/ r6 )r �nostartr r r � enableService� s z Configuration.Base.enableServicec C s* | j d u rd S | j �� |s&| j �� d S r )rM r5 r8 �r Znostopr r r �disableService� s z!Configuration.Base.disableServicec C s d S r r r r r r �cleanup� s zConfiguration.Base.cleanupc C s d S r r r r r r �write� s zConfiguration.Base.writec C s | j �|�S r )rL �getr& r r r rW � s zConfiguration.Base.getc C s | j �|�S r )rL �issetr& r r r rX � s zConfiguration.Base.issetc C s | j �|�S r )rL � getTrueOrNoner& r r r rY � s z Configuration.Base.getTrueOrNonec C s | j �|�S r )rL �getBoolr& r r r rZ � s zConfiguration.Base.getBoolFc C s( |r| � |�sd S | �|�}|r$|S |S r �rX rZ )r r% �if_true�if_false� AllowNone�valuer r r �getBoolAsValue� s z!Configuration.Base.getBoolAsValuec C sH t td�| � | j�d�r d S zt�|� W n tyB Y d S 0 d S )NzRemoving file: %s� test-call)r r rL rZ rE �remove�FileNotFoundError)r �filenamer r r � removeFile� s z Configuration.Base.removeFile)N)F)r r! r" r rO rP rR rT rU rV rW rX rY rZ r` re r r r r �Base~ s rf c s$ e Zd Z� fdd�Zdd� Z� ZS )zConfiguration.LDAPc s t tj| ��|� d S r )�superrK �LDAPr �r rL �� __class__r r r � s zConfiguration.LDAP.__init__c C sZ t t�d�dddd�}| �d�r2|�d| �d�� | �d�rN|�d | �d�� |�� d S ) Nr9 r z\s\tF)Z delimiter_reZquotes� ldapserverZURI� ldapbasednZBASE)r r2 r3 rX �setrW rV )r �configr r r rV � s � zConfiguration.LDAP.write�r r! r" r rV � __classcell__r r rj r rh � s rh c s4 e Zd Z� fdd�Zdd� Zdd� Zdd� Z� ZS ) zConfiguration.Kerberosc s t tj| ��|� d S r )rg rK �Kerberosr ri rj r r r � s z Configuration.Kerberos.__init__c C s0 | � d�s| � d�sd S | �d�dkp.| �d�S )N� krb5realm� krb5realmdns� )rX rW rZ r r r r rO � s z Configuration.Kerberos.isEnabledc C s, | � d�s| � d�sd S | �t�d�� d S )Nrs rt r: )rX re r2 r3 r r r r rU � s z Configuration.Kerberos.cleanupc C s� | � � r d S t�d�}t|t�d��}| �d�}| �d�| �d�| �d�|rV| �d�nd |rf| �d�nd |rt|�� nd d�}|�|� d S ) Nz snippets/authconfig-krb.confr: rs Z krb5kdcdnsrt �krb5kdc�krb5adminserver)�realmzkdc-srvz realm-srvZkdcZ adminserver�domain)rP r2 rC r r3 rW �lowerrV )r rF ro rx �keysr r r rV � s � z Configuration.Kerberos.write�r r! r" r rO rU rV rq r r rj r rr � s rr c s4 e Zd Z� fdd�Zdd� Zdd� Zdd� Z� ZS ) zConfiguration.SSSDc s t tj| �j|dd� d S )N�sssd�rN )rg rK �SSSDr ri rj r r r � s zConfiguration.SSSD.__init__c C s, | � d�s| � d�sd S | �d�p*| �d�S )N�ldapr} r[ r r r r rO � s z Configuration.SSSD.isEnabledc C s | � t�d�� d S )Nr; )re r2 r3 r r r r rU s zConfiguration.SSSD.cleanupc C s� | � d�sd S t�d�}t|t�d��}| � d�r6dnd }| �d�| �d�| �d�|| �d�| �d �| �d �| �d �| �d �| �d �d� }|�|� tj t�d�dd� d S )Nr� z snippets/authconfig-sssd.confr; Z rfc2307bisrl rm Zldaptls�krb5rv rw rs Z cachecreds� smartcard) zldap-uriz ldap-basednzldap-tlsz ldap-schemar� zkdc-uriz kpasswd-urirx z cache-credsz cert-authi� )�mode) rZ r2 rC r r3 rW rY rV rE �chmod)r rF ro Zschemar{ r r r rV s$ � zConfiguration.SSSD.writer| r r rj r r � s r c s, e Zd Z� fdd�Zdd� Zdd� Z� ZS )zConfiguration.Winbindc s t tj| �j|dd� d S )N�winbindr~ )rg rK �Winbindr ri rj r r r s z Configuration.Winbind.__init__c C s, | � d�s| � d�sd S | �d�p*| �d�S )Nr� � winbindauthr[ r r r r rO # s z Configuration.Winbind.isEnabledc C s� | � d�sd S | j�d��dd�}|d }d }t|�dkrF|d d }ddd| d d g}| � d �rr|�| �d �� tt�d �||d �}z |� � W n( t y� t t d�t�d � � Y n0 d S )NZ winbindjoin�%r0 r � r z-Uz"%s"z--client-softwarer� Z smbworkgroupr@ )r z)%s was not found. Please, install realmd.) rX rL rW �split�len�appendr r2 r3 r rc r r )r Zcreds�user�passwordr r* r r r rV ) s( � �zConfiguration.Winbind.write)r r! r" r rO rV rq r r rj r r� s r� c s$ e Zd Z� fdd�Zdd� Z� ZS )zConfiguration.PWQualityc s t tj| ��|� d S r )rg rK � PWQualityr ri rj r r r E s z Configuration.PWQuality.__init__c C s� t t�d��}d}| �d�| �d�| �d�| �d�| jddd d d �| jd dd d d �| jd dd d d �| jddd d d �d�}|�� D ]4\}}|d ur�t|d t|� � |�||� d }q�|r�|� � d S )Nr> FZ passminlenZ passminclassZ passmaxrepeatZpassmaxclassrepeatZreqlower���r T)r^ ZrequpperZreqdigitZreqother)ZminlenZminclassZ maxrepeatZmaxclassrepeatZlcreditZucreditZdcreditZocredit�=) r r2 r3 rW r` �itemsr �strrn rV )r ro Z value_setZpwopts�optr_ r r r rV H s$ � z Configuration.PWQuality.writerp r r rj r r� D s r� c s, e Zd Z� fdd�Zdd� Zdd� Z� ZS )zConfiguration.MakeHomedirc s t tj| �j|dd� d S )NZoddjobdr~ )rg rK � MakeHomedirr ri rj r r r b s z"Configuration.MakeHomedir.__init__c C s | � d�sd S | �d�S )N� mkhomedirr[ r r r r rO e s z#Configuration.MakeHomedir.isEnabledc C s d S r r rS r r r rT k s z(Configuration.MakeHomedir.disableService)r r! r" r rO rT rq r r rj r r� a s r� N) r r! r" �objectrf rh rr r r� r� r� r r r r rK } s E$)% rK c @ sL e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dS )� AuthCompatc C sB t t�d��| _t� | _| j�� | j�| j� | j�| j� d S )Nr< ) r r2 r3 � sysconfigr rL �parseZapplysysconfigZupdatesysconfigr r r r r q s zAuthCompat.__init__c C sl t td�� t td�� t td�� t td�� | j�� }|r`t td�� |D ]}t d| � qNt d� d S )Nz&Running authconfig compatibility tool.z�The purpose of this tool is to enable authentication against chosen services with authselect and minimum configuration. It does not provide all capabilities of authconfig. zLIMPORTANT: authconfig is replaced by authselect, please update your scripts.zHSee man authselect-migration(7) to help you with migration to authselectzDWarning: These options are not supported anymore and have no effect:z --%sru )r r rL ZgetSetButUnsupported)r rL r% r r r � printWarningy s zAuthCompat.printWarningc C s$ t jD ]}td|j|jf � qd S �Nz%s=%s)r �Listr r% r_ )r �optionr r r � printOptions� s zAuthCompat.printOptionsc C s( | j �� D ]}td|j|jf � q d S r� )r� Zgetallr r% r_ )r �liner r r �printSysconfig� s zAuthCompat.printSysconfigc C s� g d�}g d�}| j �d�s8t�� dkr8ttd�� dS |D ]&}| j �|�r<ttd| �� dS q<| j �d�| j �d �kr�ttd �� dS |D ]}| j �|�r� d S q�ttd �� dS ) N)�testZprobeZ restorebackupZrestorelastbackup)�updateZ updateallZ kickstartr� r z"authconfig can only be run as rootFzNError: option --%s is no longer supported and we cannot continue if it is set.r� r� z@Error: Both --enablewinbind and --enablewinbindauth must be set.Tz*Error: Please, provide --updateall option.)rL rZ rE �getuidr r )r Z disallowedr, r� r r r � canContinue� s& � zAuthCompat.canContinuec C s< dddddddd�}| � � \}}| j�d �sP| j�d �sP| j�d �sP| j�d �rVd }n| j�d �rfd }|d u rrd }|�� D ]F\}}| j�|�s�qz| j�|�}|r�|�|� qz||v rz|�|� q�qz| j�d�r�t| j�d��dkr�|�d� n |�d� t t |��}d|g}|� |� |�d� t t �d�|�}|�� d S )Nzwith-smartcardzwith-smartcard-requiredzwith-fingerprintzwith-mkhomedirz with-faillockzwith-pamaccessz with-krb5)r� ZrequiresmartcardZ fingerprintr� ZfaillockZ pamaccessZ winbindkrb5r� Zldapauthr} Zsssdauthr� Zsmartcardactionr z with-smartcard-lock-on-removalZselectz--forcer? )�getCurrentAuthselectConfigrL rZ r� rX r� rb �intrW �listrn �extendr r2 r3 r ) r �mapZprofileZfeaturesr� Zfeature�enabledr r* r r r � runAuthselect� sN � � � � zAuthCompat.runAuthselectc C s~ t t�d�dgdd�}|�� |jd u s4|jjdkr<d g fS t t�d�ddg�}|�� |jj�d��� }|d |d d � fS ) Nr? r F)r r �currentz--rawzutf-8r0 ) r r2 r3 r r r) r r+ r� )r r* r� r r r r� � s z%AuthCompat.getCurrentAuthselectConfigc C s� t �| j�t �| j�t �| j�t �| j�t �| j�t �| j�g}|D ]�}|�� | j� d�}z:|� � }|d u rrW qD|r�|� |� n|� |� |� � W qD tjy� } z8ttd�d�|j�|jf � t|j�� � W Y d }~qDd }~0 0 qDd S )NrQ r' r )rK rh rL rr r r� r� r� rV rZ rO rR rT rU r r( r r r r* r) r r+ )r Zconfigsro rQ r� r r r r �writeConfiguration� s. � �z AuthCompat.writeConfigurationN) r r! r" r r� r� r� r� r� r� r� r r r r r� p s < r� c C s� zt �t jd� W n t jy2 tj�d� Y n0 t� } | �� | j � d�t _ | j � d�t _ | j � d�t_ | �� s~t�d� z | �� | �� | j�� W nR tjy� } z8ttd�d�|j�|jf � t|j�� � W Y d }~n d }~0 0 t�d� d S )Nru z%Warning: Unsupported locale setting. ra r0 r' r r ) �locale� setlocale�LC_ALL�Errorr r rV r� r� rL rZ r r r r r� �exitr� r� r� r r( r r r r* r) r+ )Z authcompatr r r r �main s* �$r� �__main__)rE r r� �gettextr Zauthcompat_Optionsr Zauthcompat_EnvironmentFiler Zauthcompat_ConfigSnippetr r r r r# r2 rK r� r� r r r r r �<module> s& # t ,