/usr/lib/python3.6/site-packages/authselect/__pycache__
Edit: /usr/lib/python3.6/site-packages/authselect/__pycache__/authcompat.cpython-36.pyc (19892B)
3
*e)V @ s d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dl m
Z
ejZ dd Z G dd dZ
G d d
d
ZG d d d ZG d
d dZG dd dZdd Zedkre dS ) N)Options)EnvironmentFile)
ConfigSnippetc O s t | dtji| d S )Nfile)printsysstderr)argskwargs r /usr/lib/python3.6/authcompat.pyeprint% s r
c @ s" e Zd ZdZdddZdd ZdS ) CommandFNTc C s2 |g| | _ |d k r |j nd | _|| _d | _d S )N)r encodeinputcheckresult)selfcommandr r r r r r __init__, s zCommand.__init__c C sF t tddj| j | jr"d S tj| j| j| jtj tj d| _
d S )Nz
Executing: %s )r r stdoutr ) r _joinr TEST
subprocessrunr r PIPEr )r r r r r 2 s z Command.run)NT)__name__
__module__ __qualname__r r r r r r r r ) s
r c @ s> e Zd Zdd Zdd Zdd Zdd Zdd
d Zd d
ZdS )Servicec C s |d | _ d S )Nz.service)name)r r" r r r r ? s zService.__init__c C s y |j W n| tjk
r } z^|rB|j|krBttd| j n6|j|krxttddj|j|jf t|j j
W Y d d }~X nX d S )Nz5Service %s was not found. Please install the service.z$Command [%s] failed with %d, stderr:r ) r r CalledProcessError
returncoder
r r" r cmdr decode)r r requiredZ enoent_coder r r r
runsystemdB s
zService.runsystemdc C s( t tjdd| jg}| j|dd d S )Nz
cmd-systemctlenableT )r PathSystemr" r( )r r% r r r r) N s zService.enablec C s( t tjdd| jg}| j|dd d S )Nz
cmd-systemctldisableFr* )r r+ r, r" r( )r r% r r r r- R s zService.disableTc C s4 |r | j ttjdd| jg}| j|dd d S )Nz
cmd-systemctlstartT )stopr r+ r, r" r( )r Restartr% r r r r. V s z
Service.startc C s( t tjdd| jg}| j|dd d S )Nz
cmd-systemctlr0 Fr/ )r r+ r, r" r( )r r% r r r r0 \ s z Service.stopN)T) r r r r r( r) r- r. r0 r r r r r! > s
r! c
@ sb e Zd ZejjejjeZe ed Z
dddddddd d
d d d
d Z e dd Z
e dd ZdS )r+ z/authcompat_pathsz/etc/openldap/ldap.confz$/etc/krb5.conf.d/authconfig-krb.confz%/etc/sssd/conf.d/authconfig-sssd.confz/etc/sysconfig/authconfigz/etc/sysconfig/networkz;/etc/security/pwquality.conf.d/10-authconfig-pwquality.confz /etc/yp.confz/usr/bin/systemctlz/usr/bin/authselectz/usr/sbin/realmz/usr/bin/domainnamez/usr/sbin/setsebool) z ldap.confz krb5.confz sssd.conf
authconfignetworkzpwquality.confzyp.confz
cmd-systemctlzcmd-authselectz cmd-realmzcmd-domainnamez
cmd-setseboolc C s dt j| f S )Nz%s/%s)r+ LocalDir)relpathr r r Localt s z
Path.Localc C s
t j| S )N)r+ Files)r" r r r r, x s z Path.SystemN)r r r ospathdirnamerealpath__file__r4 r ZConfigr7 staticmethodr6 r, r r r r r+ a s r+ c @ s e Zd ZG dd deZG dd deZG dd deZG dd deZG d d
d
eZG d d d eZ G d
d deZ
G dd deZ G dd deZ dS )
Configurationc @ sx e Zd Zd ddZdd Zdd Zdd Zd
d Zd d
Zdd Z dd Z
dd Z dd Z dd Z
d ddZdd ZdS ) zConfiguration.BaseNc C s" || _ d | _|d k r t|| _d S )N)optionsservicer! )r r? ServiceNamer r r r s zConfiguration.Base.__init__c C s dS )NTr )r r r r isEnabled s z Configuration.Base.isEnabledc C s
| j S )N)rB )r r r r
isDisabled s z Configuration.Base.isDisabledc C s* | j d krd S | j j |s&| j j d S )N)r@ r) r. )r nostartr r r
enableService s
z Configuration.Base.enableServicec C s* | j d krd S | j j |s&| j j d S )N)r@ r- r0 )r nostopr r r disableService s
z!Configuration.Base.disableServicec C s d S )Nr )r r r r cleanup s zConfiguration.Base.cleanupc C s d S )Nr )r r r r write s zConfiguration.Base.writec C s | j j|S )N)r? get)r r" r r r rJ s zConfiguration.Base.getc C s | j j|S )N)r? isset)r r" r r r rK s zConfiguration.Base.issetc C s | j j|S )N)r?
getTrueOrNone)r r" r r r rL s z Configuration.Base.getTrueOrNonec C s | j j|S )N)r? getBool)r r" r r r rM s zConfiguration.Base.getBoolFc C s* |r| j | rd S | j|}|r&|S |S )N)rK rM )r r" Zif_trueZif_false AllowNonevaluer r r getBoolAsValue s
z!Configuration.Base.getBoolAsValuec C sH t td| | jjdr d S ytj| W n tk
rB d S X d S )NzRemoving file: %sz test-call)r r r? rM r8 removeFileNotFoundError)r filenamer r r
removeFile s z Configuration.Base.removeFile)N)F)r r r r rB rC rE rG rH rI rJ rK rL rM rP rT r r r r Base~ s
rU c s$ e Zd Z fddZdd Z ZS )zConfiguration.LDAPc s t tj| j| d S )N)superr> LDAPr )r r? ) __class__r r r s zConfiguration.LDAP.__init__c C sZ t tjddddd}| jdr2|jd| jd | jdrN|jd | jd |j d S )
Nz ldap.confr z\s\tF)Z delimiter_reZquotes
ldapserverZURI
ldapbasednZBASE)r r+ r, rK setrJ rI )r configr r r rI s
zConfiguration.LDAP.write)r r r r rI
__classcell__r r )rX r rW s rW c s4 e Zd Z fddZdd Zdd Zdd Z ZS ) zConfiguration.Kerberosc s t tj| j| d S )N)rV r> Kerberosr )r r? )rX r r r s z Configuration.Kerberos.__init__c C s4 | j d r | j d r d S | jddkp2| jdS )N krb5realm krb5realmdns )rK rJ rM )r r r r rB s z Configuration.Kerberos.isEnabledc C s0 | j d r | j d r d S | jtjd d S )Nr_ r` z krb5.conf)rK rT r+ r, )r r r r rH s z Configuration.Kerberos.cleanupc C s | j r d S tjd}t|tjd}| jd}| jd| jd| jd|rV| jdnd |rf| jdnd |rt|j nd d}|j| d S ) Nz snippets/authconfig-krb.confz krb5.confr_ Z
krb5kdcdnsr` krb5kdckrb5adminserver)realmzkdc-srvz realm-srvZkdcZ adminserverZdomain)rC r+ r6 r r, rJ lowerrI )r r9 r\ rd keysr r r rI s
z Configuration.Kerberos.write)r r r r rB rH rI r] r r )rX r r^ s r^ c s$ e Zd Z fddZdd Z ZS )zConfiguration.Networkc s t tj| j| d S )N)rV r> Networkr )r r? )rX r r r s z Configuration.Network.__init__c C s< | j d}ttjd}|d kr$d S |jd| |j d S )N nisdomainr3 Z NISDOMAIN)rJ r r+ r, r[ rI )r rh r\ r r r rI s
zConfiguration.Network.write)r r r r rI r] r r )rX r rg s rg c s4 e Zd Z fddZdd Zdd Zdd Z ZS ) zConfiguration.SSSDc s t tj| j|dd d S )Nsssd)rA )rV r> SSSDr )r r? )rX r r r s zConfiguration.SSSD.__init__c C s0 | j d r | j d r d S | jdp.| jdS )Nldapri )rK rM )r r r r rB s z Configuration.SSSD.isEnabledc C s | j tjd d S )Nz sssd.conf)rT r+ r, )r r r r rH s zConfiguration.SSSD.cleanupc C s | j dsd S tjd}t|tjd}| j dr6dnd }| jd| jd| jd|| jd| jd | jd
| jd | jd | jd
d
}|j| tj tjddd d S )Nrk z snippets/authconfig-sssd.confz sssd.confZ
rfc2307bisrY rZ Zldaptlskrb5rb rc r_ Z
cachecreds smartcard)
zldap-uriz ldap-basednzldap-tlsz ldap-schemarl zkdc-uriz kpasswd-urird z cache-credsz cert-authi )mode)
rM r+ r6 r r, rJ rL rI r8 chmod)r r9 r\ Zschemarf r r r rI s"
zConfiguration.SSSD.write)r r r r rB rH rI r] r r )rX r rj s rj c s, e Zd Z fddZdd Zdd Z ZS )zConfiguration.Winbindc s t tj| j|dd d S )Nwinbind)rA )rV r> Winbindr )r r? )rX r r r . s z Configuration.Winbind.__init__c C s0 | j d r | j d r d S | jdp.| jdS )Nrp winbindauth)rK rM )r r r r rB 1 s z Configuration.Winbind.isEnabledc C s | j dsd S | jjdjdd}|d }d }t|dkrF|d d }ddd| d d
g}| j d rr|j| jd ttjd ||d
}y |j W n* t
k
r t t dtjd Y nX d S )NZ winbindjoin%r* r
r z-Uz"%s"z--client-softwarerp Z smbworkgroupz cmd-realm)r z)%s was not found. Please, install realmd.)
rK r? rJ splitlenappendr r+ r, r rR r
r )r ZcredsuserZpasswordr r% r r r rI 7 s$
zConfiguration.Winbind.write)r r r r rB rI r] r r )rX r rq - s rq c s$ e Zd Z fddZdd Z ZS )zConfiguration.PWQualityc s t tj| j| d S )N)rV r> PWQualityr )r r? )rX r r r S s z Configuration.PWQuality.__init__c
C s t tjd}d}| jd| jd| jd| jd| jddd d
d | jd dd d
d | jd
dd d
d | jddd d
d d}x@|j D ]4\}}|d k rt|d t| |j|| d
}qW |r|j d S )Nzpwquality.confFZ
passminlenZ passminclassZ
passmaxrepeatZpassmaxclassrepeatZreqlowerr* r T)rN ZrequpperZreqdigitZreqother)ZminlenZminclassZ maxrepeatZmaxclassrepeatZlcreditZucreditZdcreditZocredit=r{ r{ r{ )
r r+ r, rJ rP itemsr strr[ rI )r r\ Z value_setZpwoptsoptrO r r r rI V s" z Configuration.PWQuality.write)r r r r rI r] r r )rX r ry R s ry c s, e Zd Z fddZdd Zdd Z ZS )zConfiguration.MakeHomedirc s t tj| j|dd d S )NZoddjobd)rA )rV r> MakeHomedirr )r r? )rX r r r p s z"Configuration.MakeHomedir.__init__c C s | j dsd S | jdS )N mkhomedir)rK rM )r r r r rB s s
z#Configuration.MakeHomedir.isEnabledc C s d S )Nr )r rF r r r rG y s z(Configuration.MakeHomedir.disableService)r r r r rB rG r] r r )rX r r o s r c s< e Zd Z fddZdd Zdd Zdd Zd d
Z ZS ) zConfiguration.NISc s* t tj| j| td| _td| _d S )Nrpcbindypbind)rV r> NISr r! r r )r r? )rX r r r s
zConfiguration.NIS.__init__c C s | j dsd S | jdS )Nnis)rK rM )r r r r rB s
zConfiguration.NIS.isEnabledc C s | j dsd S | jd}|s6ttjd|g}|j ttjddddg}|j | jj | jj |s| jj dd | jj d S ) Nrh zcmd-domainnamez
cmd-setseboolz-P allow_ypbind1F)r1 )
rK rJ r r+ r, r r r) r r. )r rD Znisdomr% r r r rE s
z Configuration.NIS.enableServicec C sl |s t tjddg}|j t tjddddg}|j | jj | jj |sh| jj | jj d S )Nzcmd-domainnamez(none)z
cmd-setseboolz-Pr 0)r r+ r, r r r- r r0 )r rF r% r r r rG s
z Configuration.NIS.disableServicec C s | j dsd S d| jd }g }| j dr\| jdjd}|dd }|d|d d 7 }n|d 7 }x |D ]}|d
| d 7 }qjW tjd }| jd rtd
| t| td| d S t|d}|j| W d Q R X d S )Nrh zdomain Z nisserver,r* z server r rt z broadcast
z ypserver zyp.confz test-callz+========== BEGIN Content of [%s] ==========z,========== END Content of [%s] ==========
w) rK rJ ru r+ r, rM r openrI )r outputZadditional_serversZserversZserverrS fr r r rI s&
zConfiguration.NIS.write) r r r r rB rE rG rI r] r r )rX r r ~ s
r N)
r r r objectrU rW r^ rg rj rq ry r r r r r r r> } s E$)% r> c @ sL e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
d Z dd Z
dS )
AuthCompatc C sB t tjd| _t | _| jj | jj| j | jj| j d S )Nr2 ) r r+ r, sysconfigr r? parseZapplysysconfigZupdatesysconfig)r r r r r s
zAuthCompat.__init__c C sp t td t td t td t td | jj }|rdt td x|D ]}t d| qPW t d d S )Nz&Running authconfig compatibility tool.zThe purpose of this tool is to enable authentication against chosen services with authselect and minimum configuration. It does not provide all capabilities of authconfig.
zLIMPORTANT: authconfig is replaced by authselect, please update your scripts.zHSee man authselect-migration(7) to help you with migration to authselectzDWarning: These options are not supported anymore and have no effect:z --%sra )r r r? ZgetSetButUnsupported)r r? r" r r r printWarning s
zAuthCompat.printWarningc C s( x"t jD ]}td|j|jf qW d S )Nz%s=%s)r ZListr r" rO )r optionr r r printOptions s zAuthCompat.printOptionsc C s, x&| j j D ]}td|j|jf q W d S )Nz%s=%s)r Zgetallr r" rO )r liner r r printSysconfig s zAuthCompat.printSysconfigc C s ddddg}dddg}| j jd r@tj dkr@ttd d
S x,|D ]$}| j j|rFttd | d
S qFW | j jd | j jd
krttd d
S x |D ]}| j j|rdS qW ttd d
S )NZtestZprobeZ
restorebackupZrestorelastbackupupdateZ updateallZ kickstartr z"authconfig can only be run as rootFzNError: option --%s is no longer supported and we cannot continue if it is set.rp rr z@Error: Both --enablewinbind and --enablewinbindauth must be set.Tz*Error: Please, provide --updateall option.)r? rM r8 getuidr r )r Z
disallowedr' r r r r canContinue s$
zAuthCompat.canContinuec C sZ dddddddd}| j \}}| jjd sP| jjd
sP| jjd sP| jjd rVd }n"| jjd
rhd
}n| jjdrxd}|d krd }xV|j D ]J\}}| jj|sq| jj|}|r|j| qx||kr|j| qW qW | jjdrt| jjddkr |jd n
|jd t t
|}d|g}|j | |jd t t
jd|}|j d S )Nzwith-smartcardzwith-smartcard-requiredzwith-fingerprintzwith-mkhomedirz
with-faillockzwith-pamaccessz with-krb5)rm ZrequiresmartcardZ fingerprintr ZfaillockZ pamaccessZ winbindkrb5rk Zldapauthri Zsssdauthr rp Zsmartcardactionr z with-smartcard-lock-on-removalZselectz--forcezcmd-authselect)getCurrentAuthselectConfigr? rM r| rK rw rQ intrJ listr[ extendr r+ r, r ) r mapZprofileZfeaturesr Zfeatureenabledr r% r r r
runAuthselect
sJ
zAuthCompat.runAuthselectc C s~ t tjddgdd}|j |jd ks4|jjdkr
rW r? rg r^ rj rq ry r r rI rM rB rE rG rH r r# r
r r r% r$ r r& )r Zconfigsr\ rD r r r r r writeConfigurationU s.
z AuthCompat.writeConfigurationN) r r r r r r r r r r r r r r r r s >
r c C s yt jt jd W n" t jk
r4 tjjd Y nX t } | j | j j
dt _ | j j
dt
_ | j j
dt_ | j stjd y | j | j | jj W nP tjk
r } z2ttddj|j|jf t|jj W Y d d }~X nX tjd d S )Nra z%Warning: Unsupported locale setting.
z test-callr* z$Command [%s] failed with %d, stderr:r r ) locale setlocaleLC_ALLErrorr r rI r r r? rM r r r r r exitr r r r r# r
r r r% r$ r& )Z
authcompatr r r r mainz s(
r __main__)r8 r r gettextr Zauthcompat_Optionsr Zauthcompat_EnvironmentFiler Zauthcompat_ConfigSnippetr r r
r r! r+ r> r r r r r r r s( # P 0