File: //usr/lib/python3.9/site-packages/ipaplatform/redhat/__pycache__/authconfig.cpython-39.pyc
a
}�f>4 � @ s� d dl mZ d dlZd dlZd dlZd dlmZ d dlmZ d dl m
Z
d dl Z d dl Z g d�Z
e�e�Zdd� Ze�ej�G d d
� d
��ZG d d � d e�ZG d
d� de�ZdS )� )�absolute_importN)�paths)�ipautil)� ScriptError)�passwd�groupZshadowZgshadowc C s t � S �N)�RedHatAuthSelect� r
r
�A/usr/lib/python3.9/site-packages/ipaplatform/redhat/authconfig.py�
get_auth_tool% s r c @ sT e Zd Zejd
dd��Zejdd� �Zejdd� �Zejdd � �Zejd
d � �Z d S )�RedHatAuthToolBaseTc C s d S r r
��self�sssd� mkhomedir�
statestore�sudor
r
r � configure, s z RedHatAuthToolBase.configurec C s d S r r
�r �fstorer �was_sssd_installed�was_sssd_configuredr
r
r � unconfigure0 s z RedHatAuthToolBase.unconfigurec C s dS )z�
Backup the system authentication resources configuration
:param path: directory where the backup will be stored
Nr
�r �pathr
r
r �backup6 s zRedHatAuthToolBase.backupc C s dS )z�
Restore the system authentication resources configuration from a backup
:param path: directory where the backup is stored
Nr
r r
r
r �restore= s zRedHatAuthToolBase.restorec C s d S r r
�r � nisdomainr
r
r �
set_nisdomainD s z RedHatAuthToolBase.set_nisdomainN)T)
�__name__�
__module__� __qualname__�abc�abstractmethodr r r r r r
r
r
r r
) s
r
c @ sH e Zd Zdd� Zddd�Zddd �Zd
d � Zd d
� Zdd� Zdd� Z dS )r c C sB zt �tjddg�}W n t jy6 t�d� Y d S 0 |j�� S )N�currentz--rawz/Current configuration not managed by authselect) r �runr �
AUTHSELECT�CalledProcessError�logger�debugZ
raw_output�decode)r r& r
r
r � _get_authselect_current_outputK s
�
z/RedHatAuthSelect._get_authselect_current_outputNc C sR |du r | � � }|du r dS |�� }|s,dS |�d�}|d }|dd� }||fS )z�
Parses the output_text to extract the profile and options.
When no text is provided, runs the 'authselect profile' command to
generate the text to be parsed.
N� r � )r- �strip�split)r Z output_textZ output_items�profile�featuresr
r
r �_parse_authselect_outputU s
z)RedHatAuthSelect._parse_authselect_outputTFc C s� d� t�d��}|�dd|� tjddg}|rF|�d� |�ddd � |rT|�d
� |rb|�d � |�d � |�d
� |�� t�|� d S )Nzpre_ipaclient_{}z %Y%m%d%H%M%S�
authselectr �selectr zwith-mkhomedirr Tz with-sudoz
with-subid�--forcez --backup={}) �format�time�strftime� backup_stater r( �appendr r' )r r r r r ZsubidZ backup_name�cmdr
r
r r h s
zRedHatAuthSelect.configurec
C s< |� dd�}|d ur&|s&|�d�s&d S |�d�stt�d� t� }|�||||� |�� }t�dd�|�� d}g } np|�dd�}|s�d}|�dd �}
|� dd
� |�
t j �r�t�
d � |�t j � |
d ur�d d
� |
�d�D �} ng } |�dd�} | �rt jd| g} t�| � n*t jd|g} | �| � | �d� t�| � d S )NZ installation�completer5 z�WARNING: Unable to revert to the pre-installation state ('authconfig' tool has been deprecated in favor of 'authselect'). The default sssd profile will be used instead.z7The authconfig arguments would have been: authconfig %sr. r r2 Z
features_listr z Restoring user-nsswitch.confc S s g | ]}|� � r|� � �qS r
)r0 ��.0�fr
r
r �
<listcomp>� s z0RedHatAuthSelect.unconfigure.<locals>.<listcomp>r zbackup-restorer6 r7 )Z get_state� has_stater* Zwarning�RedHatAuthConfig�prepare_unconfigure�
build_args�join�
restore_stateZ delete_stateZhas_filer Z
NSSWITCH_CONF�infoZ restore_filer1 r( r r' �extendr< )
r r r r r r> �
authconfig�argsr2 r3 Zfeatures_stater r= r
r
r r � sV �
� �� �
�
z RedHatAuthSelect.unconfigurec C sl | � � }|d u rd S tj�|�s*t�|� ttj�|d�d��}|�|� W d � n1 s^0 Y d S )N�authselect.backup�w)r- �osr �exists�makedirs�openrG �write)r r r& rA r
r
r r � s
zRedHatAuthSelect.backupc C s� t tj�|d�d�� }| �|�� �}W d � n1 s80 Y |r||d }tjd|g}|�|d � |� d� t
� |� d S )NrM �rr r6 r/ r7 ) rR rO r rG r4 �readr r( rJ r< r r' )r r rA Zcfgr2 r= r
r
r r � s ,
zRedHatAuthSelect.restorec C s� z>t tjd�� }dd� |D �}W d � n1 s20 Y W n tyT g }Y n0 |�d�|�� t tjd��}|�|� W d � n1 s�0 Y d S )NrT c S s" g | ]}|� � �� �d �s|�qS )Z NISDOMAIN)r0 �upper�
startswith)r@ �liner
r
r rB � s �z2RedHatAuthSelect.set_nisdomain.<locals>.<listcomp>z
NISDOMAIN={}
rN )rR r ZSYSCONF_NETWORK�IOErrorr< r8 �
writelines)r r rA Zcontentr
r
r r � s �(
z RedHatAuthSelect.set_nisdomain)N)TF)
r! r" r# r- r4 r r r r r r
r
r
r r I s
�
< r c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
d dd�Z d!dd�Z dd� Z
dd� Zdd� Zdd � Zd d � Zd S )"rD aE
AuthConfig class implements system-independent interface to configure
system authentication resources. In Red Hat systems this is done with
authconfig(8) utility.
AuthConfig class is nothing more than a tool to gather configuration
options and execute their processing. These options then converted by
an actual implementation to series of a system calls to appropriate
utilities performing real configuration.
If you need to re-use existing AuthConfig instance for multiple runs,
make sure to call 'AuthConfig.reset()' between the runs.
c C s
i | _ d S r ��
parameters�r r
r
r �__init__� s zRedHatAuthConfig.__init__c C s d| j |< | S )NTr[ �r �optionr
r
r �enable� s
zRedHatAuthConfig.enablec C s d| j |< | S )NFr[ r_ r
r
r �disable� s
zRedHatAuthConfig.disablec C s d | j |< | S r r[ r_ r
r
r �
add_option s
zRedHatAuthConfig.add_optionc C s |g| j |< | S r r[ )r r` �valuer
r
r �
add_parameter s z RedHatAuthConfig.add_parameterc C s
i | _ | S r r[ r] r
r
r �reset
s zRedHatAuthConfig.resetc C s� g }| j �� D ]�\}}t|�tu rF|r6|�d| � q�|�d| � qt|�ttfv rx|�d| � |�d|d � q|d u r�|�d| � q|�d||f � q|S )Nz
--enable%sz --disable%sz--%sz%sr z--%s%s)r\ �items�type�boolr< �tuple�list)r rL r` rd r
r
r rF s zRedHatAuthConfig.build_argsTc C sN |r| � d� | �� }zt�tjg| � W n tjyH td��Y n0 d S )N�update�$Failed to execute authconfig command)rc rF r r' r �
AUTHCONFIGr) r )r rl rL r
r
r �execute! s
zRedHatAuthConfig.executec C s� |r6|� ddd� |� ddd� | �d� | �d� nD|� ddd� | �d� | �d� |� ddd� | �d� | �d� |r�|� dd d� | �d � | �� | �� d S )
NrK r T�sssdauth�ldapZ forcelegacy�krb5Znostartr )r; ra rc ro rf r r
r
r r + s
zRedHatAuthConfig.configurec C sl |� d�r8dD ]&}|�d|�}|r|dkr| �|� qn0| �d� | �d� |rT|s^| �d� | �d� d S )NrK )rq rr r rp r r rq rr rp r )rC rH rb )r r r r r ZconfZcnfr
r
r rE A s
z$RedHatAuthConfig.prepare_unconfigurec C s$ | � ||||� | �� | �� d S r )rE ro rf r r
r
r r Y s
�z RedHatAuthConfig.unconfigurec sv zt �tjd� g� W n t jy2 td��Y n0 � fdd�tD �}|D ]&}zt�|� W qJ t yn Y qJ0 qJd S )Nz --savebackuprm c s g | ]}t j�� |��qS r
)rO r rG r? �r r
r rB j � z+RedHatAuthConfig.backup.<locals>.<listcomp>)
r r' r rn r) r �FILES_TO_NOT_BACKUPrO �remove�OSError)r r Zfiles_to_remove�filenamer
rs r r a s zRedHatAuthConfig.backupc C s8 zt �tjd|g� W n t jy2 td��Y n0 d S )Nz--restorebackuprm )r r' r rn r) r r r
r
r r q s zRedHatAuthConfig.restorec C s | � � | �d|� | �� d S )Nr )rf re ro r r
r
r r w s z RedHatAuthConfig.set_nisdomainN)T)T)r! r" r# �__doc__r^ ra rb rc re rf rF ro r rE r r r r r
r
r
r rD � s
rD )Z
__future__r ZloggingZsixr$ Zipaplatform.pathsr Z ipapythonr Zipapython.admintoolr rO r9 ru Z getLoggerr! r* r Z
add_metaclass�ABCMetar
r rD r
r
r
r �<module> s