File: //lib/python3.6/site-packages/authselect/__pycache__/authcompat.cpython-36.pyc
3
��*e)V � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dl m
Z
ejZ dd� Z G dd� d�Z
G d d
� d
�ZG d d � d �ZG d
d� d�ZG dd� d�Zdd� Zedkr�e� dS )� N)�Options)�EnvironmentFile)�
ConfigSnippetc O s t | dtji|�� d S )N�file)�print�sys�stderr)�args�kwargs� r � /usr/lib/python3.6/authcompat.py�eprint% s r
c @ s" e Zd ZdZddd�Zdd� ZdS ) �CommandFNTc C s2 |g| | _ |d k r |j� nd | _|| _d | _d S )N)r �encode�input�check�result)�self�commandr r r r r r �__init__, s zCommand.__init__c C sF t td�dj| j� � | jr"d S tj| j| j| jtj tj d�| _
d S )Nz
Executing: %s� )r r �stdoutr ) r �_�joinr �TEST�
subprocess�runr r �PIPEr )r r r r r 2 s z Command.run)NT)�__name__�
__module__� __qualname__r r r r r r r r ) s
r c @ s> e Zd Zdd� Zdd� Zdd� Zdd� Zdd
d �Zd d
� ZdS )�Servicec C s |d | _ d S )Nz.service)�name)r r" r r r r ? s zService.__init__c C s� y |j � W n| tjk
r� } z^|rB|j|krBttd�| j � n6|j|krxttd�dj|j�|jf � t|j j
� � W Y d d }~X nX d S )Nz5Service %s was not found. Please install the service.z$Command [%s] failed with %d, stderr:r ) r r �CalledProcessError�
returncoder
r r" r �cmdr �decode)r r �requiredZ enoent_coder r r r �
runsystemdB s
zService.runsystemdc C s( t tjd�d| jg�}| j|dd� d S )Nz
cmd-systemctl�enableT� )r �Path�Systemr" r( )r r% r r r r) N s zService.enablec C s( t tjd�d| jg�}| j|dd� d S )Nz
cmd-systemctl�disableFr* )r r+ r, r" r( )r r% r r r r- R s zService.disableTc C s4 |r | j � ttjd�d| jg�}| j|dd� d S )Nz
cmd-systemctl�startT� )�stopr r+ r, r" r( )r �Restartr% r r r r. V s z
Service.startc C s( t tjd�d| jg�}| j|dd� d S )Nz
cmd-systemctlr0 Fr/ )r r+ r, r" r( )r r% r r r r0 \ s z Service.stopN)T) r r r r r( r) r- r. r0 r r r r r! > s
r! c
@ sb e Zd Zejjejje��Ze ed �Z
dddddddd d
d d d
d� Z e dd� �Z
e dd� �ZdS )r+ z/authcompat_pathsz/etc/openldap/ldap.confz$/etc/krb5.conf.d/authconfig-krb.confz%/etc/sssd/conf.d/authconfig-sssd.confz/etc/sysconfig/authconfigz/etc/sysconfig/networkz;/etc/security/pwquality.conf.d/10-authconfig-pwquality.confz /etc/yp.confz/usr/bin/systemctlz/usr/bin/authselectz/usr/sbin/realmz/usr/bin/domainnamez/usr/sbin/setsebool) z ldap.confz krb5.confz sssd.conf�
authconfig�networkzpwquality.confzyp.confz
cmd-systemctlzcmd-authselectz cmd-realmzcmd-domainnamez
cmd-setseboolc C s dt j| f S )Nz%s/%s)r+ �LocalDir)�relpathr r r �Localt s z
Path.Localc C s
t j| S )N)r+ �Files)r" r r r r, x s z Path.SystemN)r r r �os�path�dirname�realpath�__file__r4 r ZConfigr7 � staticmethodr6 r, r r r r r+ a s r+ c @ s� e Zd ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG d d
� d
e�ZG d d � d e�Z G d
d� de�Z
G dd� de�Z G dd� de�Z dS )�
Configurationc @ sx e Zd Zd dd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Zdd� Z dd� Z
dd� Z dd� Z dd� Z
d dd�Zdd � ZdS ) zConfiguration.BaseNc C s" || _ d | _|d k r t|�| _d S )N)�options�servicer! )r r? � ServiceNamer r r r s zConfiguration.Base.__init__c C s dS )NTr )r r r r � isEnabled� s z Configuration.Base.isEnabledc C s
| j � S )N)rB )r r r r �
isDisabled� s z Configuration.Base.isDisabledc C s* | j d krd S | j j� |s&| j j� d S )N)r@ r) r. )r �nostartr r r �
enableService� s
z Configuration.Base.enableServicec C s* | j d krd S | j j� |s&| j j� d S )N)r@ r- r0 )r �nostopr r r �disableService� s
z!Configuration.Base.disableServicec C s d S )Nr )r r r r �cleanup� s zConfiguration.Base.cleanupc C s d S )Nr )r r r r �write� s zConfiguration.Base.writec C s | j j|�S )N)r? �get)r r" r r r rJ � s zConfiguration.Base.getc C s | j j|�S )N)r? �isset)r r" r r r rK � s zConfiguration.Base.issetc C s | j j|�S )N)r? �
getTrueOrNone)r r" r r r rL � s z Configuration.Base.getTrueOrNonec C s | j j|�S )N)r? �getBool)r r" r r r rM � s zConfiguration.Base.getBoolFc C s* |r| j |� rd S | j|�}|r&|S |S )N)rK rM )r r" Zif_trueZif_false� AllowNone�valuer r r �getBoolAsValue� s
z!Configuration.Base.getBoolAsValuec C sH t td�| � | jjd�r d S ytj|� W n tk
rB d S X d S )NzRemoving file: %sz test-call)r r r? rM r8 �remove�FileNotFoundError)r �filenamer r r �
removeFile� s z Configuration.Base.removeFile)N)F)r r r r rB rC rE rG rH rI rJ rK rL rM rP rT r r r r �Base~ s
rU c s$ e Zd Z� fdd�Zdd� Z� ZS )zConfiguration.LDAPc s t tj| �j|� d S )N)�superr> �LDAPr )r r? )� __class__r r r � s zConfiguration.LDAP.__init__c C sZ t tjd�dddd�}| jd�r2|jd| jd�� | jd�rN|jd | jd�� |j� d S )
Nz ldap.confr z\s\tF)Z delimiter_reZquotes�
ldapserverZURI�
ldapbasednZBASE)r r+ r, rK �setrJ rI )r �configr r r rI � s
zConfiguration.LDAP.write)r r r r rI �
__classcell__r r )rX r rW � s rW c s4 e Zd Z� fdd�Zdd� Zdd� Zdd� Z� ZS ) zConfiguration.Kerberosc s t tj| �j|� d S )N)rV r> �Kerberosr )r r? )rX r r r � s z Configuration.Kerberos.__init__c C s4 | j d� r | j d� r d S | jd�dkp2| jd�S )N� krb5realm� krb5realmdns� )rK rJ rM )r r r r rB � s z Configuration.Kerberos.isEnabledc C s0 | j d� r | j d� r d S | jtjd�� d S )Nr_ r` z krb5.conf)rK rT r+ r, )r r r r rH � s z Configuration.Kerberos.cleanupc C s� | j � r d S tjd�}t|tjd��}| jd�}| jd�| jd�| jd�|rV| jd�nd |rf| jd�nd |rt|j� nd d�}|j|� d S ) Nz snippets/authconfig-krb.confz krb5.confr_ Z
krb5kdcdnsr` �krb5kdc�krb5adminserver)�realmzkdc-srvz realm-srvZkdcZ adminserverZdomain)rC r+ r6 r r, rJ �lowerrI )r r9 r\ rd �keysr r r rI � s
z Configuration.Kerberos.write)r r r r rB rH rI r] r r )rX r r^ � s r^ c s$ e Zd Z� fdd�Zdd� Z� ZS )zConfiguration.Networkc s t tj| �j|� d S )N)rV r> �Networkr )r r? )rX r r r � s z Configuration.Network.__init__c C s< | j d�}ttjd��}|d kr$d S |jd|� |j� d S )N� nisdomainr3 Z NISDOMAIN)rJ r r+ r, r[ rI )r rh r\ r r r rI � s
zConfiguration.Network.write)r r r r rI r] r r )rX r rg � s rg c s4 e Zd Z� fdd�Zdd� Zdd� Zdd� Z� ZS ) zConfiguration.SSSDc s t tj| �j|dd� d S )N�sssd)rA )rV r> �SSSDr )r r? )rX r r r s zConfiguration.SSSD.__init__c C s0 | j d� r | j d� r d S | jd�p.| jd�S )N�ldapri )rK rM )r r r r rB s z Configuration.SSSD.isEnabledc C s | j tjd�� d S )Nz sssd.conf)rT r+ r, )r r r r rH s zConfiguration.SSSD.cleanupc C s� | j d�sd S tjd�}t|tjd��}| j d�r6dnd }| jd�| jd�| jd�|| jd�| jd �| jd
�| jd �| jd �| jd
�d�
}|j|� tj tjd�dd� d S )Nrk z snippets/authconfig-sssd.confz sssd.confZ
rfc2307bisrY rZ Zldaptls�krb5rb rc r_ Z
cachecreds� smartcard)
zldap-uriz ldap-basednzldap-tlsz ldap-schemarl zkdc-uriz kpasswd-urird z cache-credsz cert-authi� )�mode)
rM r+ r6 r r, rJ rL rI r8 �chmod)r r9 r\ Zschemarf r r r rI s"
zConfiguration.SSSD.write)r r r r rB rH rI r] r r )rX r rj s rj c s, e Zd Z� fdd�Zdd� Zdd� Z� ZS )zConfiguration.Winbindc s t tj| �j|dd� d S )N�winbind)rA )rV r> �Winbindr )r r? )rX r r r . s z Configuration.Winbind.__init__c C s0 | j d� r | j d� r d S | jd�p.| jd�S )Nrp � winbindauth)rK rM )r r r r rB 1 s z Configuration.Winbind.isEnabledc C s� | j d�sd S | jjd�jdd�}|d }d }t|�dkrF|d d }ddd| d d
g}| j d �rr|j| jd �� ttjd �||d
�}y |j � W n* t
k
r� t t d�tjd � � Y nX d S )NZ winbindjoin�%r* r �
r z-Uz"%s"z--client-softwarerp Z smbworkgroupz cmd-realm)r z)%s was not found. Please, install realmd.)
rK r? rJ �split�len�appendr r+ r, r rR r
r )r Zcreds�userZpasswordr r% r r r rI 7 s$
zConfiguration.Winbind.write)r r r r rB rI r] r r )rX r rq - s rq c s$ e Zd Z� fdd�Zdd� Z� ZS )zConfiguration.PWQualityc s t tj| �j|� d S )N)rV r> � PWQualityr )r r? )rX r r r S s z Configuration.PWQuality.__init__c
C s� t tjd��}d}| jd�| jd�| jd�| jd�| jddd d
d �| jd dd d
d �| jd
dd d
d �| jddd d
d �d�}x@|j� D ]4\}}|d k r�t|d t|� � |j||� d
}q�W |r�|j � d S )Nzpwquality.confFZ
passminlenZ passminclassZ
passmaxrepeatZpassmaxclassrepeatZreqlowerr* r T)rN ZrequpperZreqdigitZreqother)ZminlenZminclassZ maxrepeatZmaxclassrepeatZlcreditZucreditZdcreditZocredit�=���r{ r{ r{ )
r r+ r, rJ rP �itemsr �strr[ rI )r r\ Z value_setZpwopts�optrO r r r rI V s" z Configuration.PWQuality.write)r r r r rI r] r r )rX r ry R s ry c s, e Zd Z� fdd�Zdd� Zdd� Z� ZS )zConfiguration.MakeHomedirc s t tj| �j|dd� d S )NZoddjobd)rA )rV r> � MakeHomedirr )r r? )rX r r r p s z"Configuration.MakeHomedir.__init__c C s | j d�sd S | jd�S )N� mkhomedir)rK rM )r r r r rB s s
z#Configuration.MakeHomedir.isEnabledc C s d S )Nr )r rF r r r rG y s z(Configuration.MakeHomedir.disableService)r r r r rB rG r] r r )rX r r o s r c s< e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Z� ZS ) zConfiguration.NISc s* t tj| �j|� td�| _td�| _d S )N�rpcbind�ypbind)rV r> �NISr r! r� r� )r r? )rX r r r s
zConfiguration.NIS.__init__c C s | j d�sd S | jd�S )N�nis)rK rM )r r r r rB � s
zConfiguration.NIS.isEnabledc C s� | j d�sd S | jd�}|s6ttjd�|g�}|j� ttjd�dddg�}|j� | jj� | jj� |s�| jj dd� | jj � d S ) Nrh zcmd-domainnamez
cmd-setseboolz-P� allow_ypbind�1F)r1 )
rK rJ r r+ r, r r� r) r� r. )r rD Znisdomr% r r r rE � s
z Configuration.NIS.enableServicec C sl |s t tjd�dg�}|j� t tjd�dddg�}|j� | jj� | jj� |sh| jj� | jj� d S )Nzcmd-domainnamez(none)z
cmd-setseboolz-Pr� �0)r r+ r, r r� r- r� r0 )r rF r% r r r rG � s
z Configuration.NIS.disableServicec C s� | j d�sd S d| jd� }g }| j d�r\| jd�jd�}|dd � }|d|d d 7 }n|d 7 }x |D ]}|d
| d 7 }qjW tjd �}| jd �r�td
| � t|� td| � d S t|d��}|j|� W d Q R X d S )Nrh zdomain Z nisserver�,r* z server r rt z broadcast
z ypserver zyp.confz test-callz+========== BEGIN Content of [%s] ==========z,========== END Content of [%s] ==========
�w) rK rJ ru r+ r, rM r �openrI )r �outputZadditional_serversZserversZserverrS �fr r r rI � s&
zConfiguration.NIS.write) r r r r rB rE rG rI r] r r )rX r r� ~ s
r� N)
r r r �objectrU rW r^ rg rj rq ry r r� r r r r r> } s E$)% r> c @ sL e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dS )�
AuthCompatc C sB t tjd��| _t� | _| jj� | jj| j� | jj| j� d S )Nr2 ) r r+ r, � sysconfigr r? �parseZapplysysconfigZupdatesysconfig)r r r r r � s
zAuthCompat.__init__c C sp t td�� t td�� t td�� t td�� | jj� }|rdt td�� x|D ]}t d| � qPW t d� d S )Nz&Running authconfig compatibility tool.z�The purpose of this tool is to enable authentication against chosen services with authselect and minimum configuration. It does not provide all capabilities of authconfig.
zLIMPORTANT: authconfig is replaced by authselect, please update your scripts.zHSee man authselect-migration(7) to help you with migration to authselectzDWarning: These options are not supported anymore and have no effect:z --%sra )r r r? ZgetSetButUnsupported)r r? r" r r r � printWarning� s
zAuthCompat.printWarningc C s( x"t jD ]}td|j|jf � qW d S )Nz%s=%s)r ZListr r" rO )r �optionr r r � printOptions� s zAuthCompat.printOptionsc C s, x&| j j� D ]}td|j|jf � q W d S )Nz%s=%s)r� Zgetallr r" rO )r �liner r r �printSysconfig� s zAuthCompat.printSysconfigc C s� ddddg}dddg}| j jd� r@tj� dkr@ttd �� d
S x,|D ]$}| j j|�rFttd | �� d
S qFW | j jd �| j jd
�kr�ttd�� d
S x |D ]}| j j|�r�dS q�W ttd�� d
S )NZtestZprobeZ
restorebackupZrestorelastbackup�updateZ updateallZ kickstartr z"authconfig can only be run as rootFzNError: option --%s is no longer supported and we cannot continue if it is set.rp rr z@Error: Both --enablewinbind and --enablewinbindauth must be set.Tz*Error: Please, provide --updateall option.)r? rM r8 �getuidr r )r Z
disallowedr' r� r r r � canContinue� s$
zAuthCompat.canContinuec C sZ dddddddd�}| j � \}}| jjd �sP| jjd
�sP| jjd �sP| jjd �rVd }n"| jjd
�rhd
}n| jjd�rxd}|d kr�d }xV|j� D ]J\}}| jj|�s�q�| jj|�}|r�|j|� q�x||kr�|j|� q�W q�W | jjd��rt| jjd��dk�r |jd� n
|jd� t t
|��}d|g}|j |� |jd� t t
jd�|�}|j� d S )Nzwith-smartcardzwith-smartcard-requiredzwith-fingerprintzwith-mkhomedirz
with-faillockzwith-pamaccessz with-krb5)rm ZrequiresmartcardZ fingerprintr� ZfaillockZ pamaccessZ winbindkrb5rk Zldapauthri Zsssdauthr� rp Zsmartcardactionr z with-smartcard-lock-on-removalZselectz--forcezcmd-authselect)�getCurrentAuthselectConfigr? rM r| rK rw rQ �intrJ �listr[ �extendr r+ r, r ) r �mapZprofileZfeaturesr� Zfeature�enabledr r% r r r �
runAuthselect
sJ
zAuthCompat.runAuthselectc C s~ t tjd�dgdd�}|j� |jd ks4|jjdkr<d g fS t tjd�ddg�}|j� |jjjd�j� }|d |d d � fS )
Nzcmd-authselectr F)r r �currentz--rawzutf-8r* ) r r+ r, r r r$ r r& ru )r r% r� r r r r� H s z%AuthCompat.getCurrentAuthselectConfigc C s t j| j�t j| j�t j| j�t j| j�t j| j�t j| j�t j| j�t j | j�g}x�|D ]�}|j
� | jj d�}y8|j � }|d kr�wZ|r�|j
|� n|j|� |j� W qZ tjk
r� } z2ttd�dj|j�|jf � t|jj� � W Y d d }~X qZX qZW d S )NrD z$Command [%s] failed with %d, stderr:r )r> rW r? rg r^ rj rq ry r r� rI rM rB rE rG rH r r# r
r r r% r$ r r& )r Zconfigsr\ rD r� r r r r �writeConfigurationU s.
z AuthCompat.writeConfigurationN) r r r r r� r� r� r� r� r� r� r r r r r� � s >
r� c C s� yt jt jd� W n" t jk
r4 tjjd� Y nX t� } | j� | j j
d�t _ | j j
d�t
_ | j j
d�t_ | j� s�tjd� y | j� | j� | jj� W nP tjk
r� } z2ttd�dj|j�|jf � t|jj� � W Y d d }~X nX tjd� d S )Nra z%Warning: Unsupported locale setting.
z test-callr* z$Command [%s] failed with %d, stderr:r r ) �locale� setlocale�LC_ALL�Errorr r rI r� r� r? rM r r r r r� �exitr� r� r� r r# r
r r r% r$ r& )Z
authcompatr r r r �mainz s(
r� �__main__)r8 r r� �gettextr Zauthcompat_Optionsr Zauthcompat_EnvironmentFiler Zauthcompat_ConfigSnippetr r r
r r! r+ r> r� r� r r r r r �<module> s( # P 0