File: //usr/lib/python3.9/site-packages/ipaplatform/debian/__pycache__/tasks.cpython-39.pyc
a
�N(iw � @ s� d Z ddlmZ ddlZddlZddlZddlmZ ddlm Z ddl
m Z ddl m
Z
ddlmZ dd lmZ dd
lmZ e�e�ZG d d � d e �Ze� ZdS )
zO
This module contains default Debian-specific implementations of system tasks.
� )�absolute_importN)�Path)�BaseTaskNamespace)�RedHatTaskNamespace)�paths)�directivesetter)�ipautil)�DNc @ s� e Zd Zedd� �Zedd� �Zed&dd��Zed d
� �Zed d � �Zed
d� �Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%S )'�DebianTaskNamespacec C s. zt �g d�� W n t jy( Y dS 0 dS )N)�pam-auth-update� --packagez--remove� mkhomedirFT�r �runZCalledProcessError)�fstore�
statestoreZwas_sssd_installedZwas_sssd_configured� r �</usr/lib/python3.9/site-packages/ipaplatform/debian/tasks.py�$restore_pre_ipa_client_configuration s
z8DebianTaskNamespace.restore_pre_ipa_client_configurationc C s dS �NTr )Z nisdomainr r r �
set_nisdomain' s z!DebianTaskNamespace.set_nisdomainTFc C s: |r2zt �g d�� W n t jy, Y dS 0 dS dS d S )N)r r z--enabler
FTr )Zsssdr
r ZsudoZsubidr r r �modify_nsswitch_pam_stack, s z-DebianTaskNamespace.modify_nsswitch_pam_stackc C s dS r r )r r r r �modify_pam_to_use_krb59 s z*DebianTaskNamespace.modify_pam_to_use_krb5c C s dS r r ��pathr r r �backup_auth_configuration> s z-DebianTaskNamespace.backup_auth_configurationc C s dS r r r r r r �restore_auth_configurationC s z.DebianTaskNamespace.restore_auth_configurationc C s dS r r ��selfr r r r �migrate_auth_configurationH s z.DebianTaskNamespace.migrate_auth_configurationc C s d S �Nr �r r r r �configure_httpd_wsgi_confL s z-DebianTaskNamespace.configure_httpd_wsgi_confc C s t �tjddd� d S )NZ SSLProtocolzTLSv1.2F)r Z
set_directiver ZHTTPD_SSL_CONFr! r r r �configure_httpd_protocolP s �z,DebianTaskNamespace.configure_httpd_protocolc C s d S r r r! r r r �setup_httpd_loggingV s z'DebianTaskNamespace.setup_httpd_loggingc C s d S r r �r r r r r �configure_pkcs11_modulesZ s z,DebianTaskNamespace.configure_pkcs11_modulesc C s d S r r r% r r r �restore_pkcs11_modules^ s z*DebianTaskNamespace.restore_pkcs11_modulesc C sP z| � tj|�f W n ty0 t�d� Y n0 t| �tj|�| � tj
�g�S )Nz�Could not create p11-kit anchor trust file. On Debian this file is not
used by ca-certificates and is provided for information only.) Zwrite_p11kit_certsr � IPA_P11_KIT� Exception�logger� exception�any�write_ca_certificates_dir�CA_CERTIFICATES_DIR� remove_ca_certificates_bundle�CA_CERTIFICATES_BUNDLE_PEM)r �ca_certsr r r �platform_insert_ca_certsa s ���z,DebianTaskNamespace.platform_insert_ca_certsc C s� ddl m} t|�}z|jddd� W n tyF t�d|� � Y n0 |D �]P\}}}}} |sbqLt|j�}
t|j �} |
�
� � d|j � d�} || }
zt |
d �}W n ty� t�d|
� � Y n0 |�� zt
�|�� d
� W n ty� t�d |
� � Y n0 zZ|�d |� d
|
�
� � d| �
� � d|j � d|j d�d� � |�|jj��d�}|�|� W n" t�y| t�d|
� � Y n0 W d � qL1 �s�0 Y qLdS )Nr )�x509i� T)�mode�exist_okzCould not create %s� z.crt�wi� zCould not set mode of %sz9This file was created by IPA. Do not edit.
Description: z
Subject: z
Issuer: z
Serial Number (dec): z
Serial Number (hex): z#xz
�asciizCould not write to %s)Zipalibr3 r �mkdirr) r* �errorr �subject�issuerZ ldap_textZ
serial_number�open�os�fchmod�fileno�writeZ public_bytesZEncodingZPEM�decode)r � directoryr1 r3 r ZcertZnicknameZtrustedZ_ext_key_usageZ_serialr; r< �filenameZ cert_path�fZpemr r r r- u sV
�����
*z-DebianTaskNamespace.write_ca_certificates_dirc C s& t | �tj�| �tj�| �tj�g�S r )r, �remove_ca_certificates_dirr r. r/ r( r0 r! r r r �platform_remove_ca_certs� s
��z,DebianTaskNamespace.platform_remove_ca_certsc C sJ t tj�}|�� sdS zt�|� W n tyD t�d|� � Y n0 dS )NFzCould not remove %sT) r r r. �exists�shutil�rmtreer) r* r: )r rC r r r r rF � s
z.DebianTaskNamespace.remove_ca_certificates_dirc C s t �| |�S r )r �disable_ldap_automountr r r r rK � s z*DebianTaskNamespace.disable_ldap_automountN)TF)�__name__�
__module__� __qualname__� staticmethodr r r r r r r r" r# r$ r& r' r2 r- rG rF rK r r r r r
s2
�
C r
)�__doc__Z
__future__r Zloggingr> rI �pathlibr Zipaplatform.base.tasksr Zipaplatform.redhat.tasksr Zipaplatform.pathsr Z ipapythonr r Z ipapython.dnr Z getLoggerrL r* r
Ztasksr r r r �<module> s
8