File: //usr/share/authconfig/authinfo.pyc
m
(Nc 4 @ s8 d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k
Z
d k Z d k Z d k
Z
d k Td k Z d k Z e i Z d Z d Z d Z d e e d j o
d Z n d Z e d Z d
Z d Z d Z d
Z d Z d Z d Z d Z! d Z" d Z# d Z$ d Z% d Z& d Z' d Z( d Z) d Z* d Z+ d Z, d Z- d Z. d Z/ d Z0 d! Z1 e d" Z2 e d# Z3 e d$ Z4 e d% Z5 e d& Z6 e d' Z7 e d( Z8 e d) Z9 e d* Z: e d+ Z; e d, Z< e d- Z= e d. Z> e d/ Z? d0 Z@ d1 ZA d2 ZB d3 ZC d4 ZD d5 ZE d6 ZF d7 ZG d8 ZH d9 ZI d: ZJ d; ZK d< ZL d= ZM d> ZN d? ZO d@ ZP dA ZQ dB ZR dC ZS dD ZT dE ZU dF ZV dG ZW dH ZX dI ZY dJ ZZ dK Z[ dL Z\ dM g Z] dM dN g Z^ dO g Z_ dO g Z` dM dP dQ g Za dR g Zb dO g Zc dN g Zd g Ze dS g Zf dO g Zg dO dT g Zh dN g Zi dO g Zj dN g Zk dO g Zl dO dU g Zm dV dW g Zn dX dW g Zo dY dW dZ g Zp d[ dW dZ g Zq dO g Zr dN g Zs dO g Zt dN g Zu d\ g Zv d] d^ d_ d` da g Zw db Zx dc Zy dd Zz de Z{ df dg dh di g Z| db Z} dc Z~ dd Z de Z dj Z e ex eC dk g g e ex eM dl eq g e ex eI dm ee g e ex eF dn eh g e ex eE do g g e ex eE dp e] g e ex eD dl en g e ex eE dq et g e ex eE dr e_ g e ex eE ds e_ g e ex eE dt ec g e ex eE dn eg g e ex eE du ej g e ex eE dv el g e ex eE dw em g e ex eE dx er g e ex eC dy g g e ey eC dz g g e ey eC dp g g e ey eE d{ g g e ey eE dl eo g e ey eG dq g g e ey eG du g g e ey eG dn g g e ey eG dx g g e ey eC do g g e e{ eF dm g g e e{ eD d| ea g e e{ eD d} eb g e e{ eE dp e^ g e e{ eE dq eu g e e{ eE dr e` g e e{ eE ds e` g e e{ eE d~ ed g e e{ eE dn ei g e e{ eE du ek g e e{ eE dx es g e e{ eC dy g g e ez eF d ev g e ez eC d g g e ez eF d g g e ez eM dl ep g e ez eC dp g g e ez eF dq g g e ez eF dr g g e ez eF ds g g e ez eF dn g g e ez eF du g g g0 Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d f d YZ d f d YZ d S( N( t *s /etcs system-auths system-auth-act lib64t acutils /lib64s /libs /securitys
/sbin/portmaps /usr/sbin/pwconvs /usr/sbin/nscds /var/run/nscd/nscd.pids /usr/sbin/dbbinds /var/run/dbbind.pids /usr/sbin/dbibinds /var/run/dbibind.pids /usr/sbin/hesiodbinds /var/run/hesiodbind.pids /usr/sbin/ldapbinds /var/run/ldapbind.pids /usr/sbin/odbcbinds /var/run/odbcbind.pids /usr/sbin/winbindds /var/run/winbindd.pids /usr/sbin/sssds /var/run/sssd.pids /sbin/ypbinds /var/run/ypbind.pids /usr/sbin/setsebools /usr/bin/pkcs11_eventmgrs /var/run/sceventd.pids /usr/bin/pkcs11_setups /libnss_db.so.2s /libnss_ldap.so.2s /libnss_nis.so.2s /libnss_hesiod.so.2s /libnss_odbcbind.so.2s /libnss_winbind.so.2s /libnss_wins.so.2s /libnss_sss.so.2s /pam_krb5.sos /pam_ldap.sos /pam_smb_auth.sos /pam_winbind.sos /pam_pkcs11.sos /pam_sss.sos /usr/bin/nets /etc/openldap/cacertss authconfig_downloaded.pemt requiredt requisitet
sufficientt optionals, [default=bad success=ok user_unknown=ignore]sJ [default=bad success=ok auth_err=ignore user_unknown=ignore ignore=ignore]s@ [success=done authinfo_unavail=ignore ignore=ignore default=die]s( [success=done ignore=ignore default=die]s4 [success=ok authinfo_unavail=2 ignore=2 default=die]s! [success=ok ignore=2 default=die]s [success=1 default=ignore]s [success=3 default=ignore]c C s | i d d d i S( Ns
i i ( t st splitt rstrip( R ( ( t! /usr/share/authconfig/authinfo.pyt
snipStringt s c C s1 | i d d } d i t d | i d S( Ns t t ,( t lstt replaceR t joint filtert NoneR ( R R ( ( R
t cleanListx s c C s0 | i | o | t | i Sn t Sd S( N( t linet
startswitht keyt lent lstript False( R R ( ( R
t matchKey| s c C s: | i | o" | t | i t i d Sn t Sd S( Nt =( R R R R R t stringt
whitespaceR ( R R ( ( R
t matchKeyEquals s "c C s
| i | S( N( R R R ( R R ( ( R
t matchLine s c C s | i i | i S( N( R t lowerR R ( R R ( ( R
t
matchLineI s c C s | o | d | Sn | Sd S( NR
( R t value( R R" ( ( R
t commaAppend s c C s_ | o | o t Sn | p | o t Sn | o | | j Sn | i | i j Sd S( N( t at bR t Truet case_sensitiveR ( R$ R% R' ( ( R
t
stringsDiffer s c C s | i d d } t | d j o | d } n d } t | } x t o | i | | } | d j o d Sn | d j o& | | d i
o | | 7} qH n | | t | j o& | | | i
o | | 7} qH n | SqH Wd S( Nt :i i ( t
configurationR R R t startt candidatet clenR& t findR t isalnum( R* R, R+ R R- ( ( R
t checkNSS s$
"
,
c C s d } y6 t i | t i t i B| } t i | t i Wnb t
j
oV \ } } | d j o+ y t i
| Wq t
j
o q Xn t | | n Xt i | d S( Nis r+( t fdt ost opent filenamet O_RDWRt O_CREATt permst fcntlt lockft LOCK_EXt OSErrort errnot strerrt closet IOErrort fdopen( R4 R7 R= R< R1 ( ( R
t
openLocked s
c C sG d } | i d } x+ | D]# } | o | d | d 7} q q W| S( Nt R
s kdc = s
( t outputt kdclistR t kdc( RD RC RE ( ( R
t krbKdc s c C sM d } | i d } x1 | D]) } | o | d 7} | | d 7} q q W| S( NRB R
s admin_server = s
( RC t adminserversR t adminserver( RG RC RH ( ( R
t krbAdminServer s
c C sQ d } | o@ | d | d 7} | t | 7} | t | 7} | d 7} n | S( NRB R s = {
s }
( RC t realmRF RD RI RG ( RJ RD RG RC ( ( R
t krbRealm s c C s | i d d } t | d j o
d } n | d } | d i i d } | i i d } | | j o | i t
i d Sn t S( NR i i RB i (
R R t linelstR t paramR R R t keylstR R R R ( R R RL RN RM ( ( R
t matchLineSMB s
t try_first_passt use_authtokt use_first_passs retry=3s type=s
enforce=userst
wait_for_cardt no_subsequent_promptt nolocals
uid >= 500t quiets uid < 500s service in crondt use_uidsK service notin login:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensavert revoket descryptt bigcryptt md5t sha256t sha512i i i i t autht accountt sessiont passwordi t envt
succeed_ift pkcs11t krb5t permitt unixt ssst afss afs.krbt eps_autht ldapt otpt smb_autht winbindt denyt accesst localusert cracklibt passwdqct
eps_passwdt keyinitt limitst mkhomedirc C s/ d } | i d } | | i d d 7} | S( Ns DC=t .s ,DC=( RC t domainR R ( Ry RC ( ( R
t domain2dn s i c C s[ | pP | o t i d qW y t i t t i d WqW t j
o qW Xn t S( Ns /sbin/service nscd restarts /sbin/service nscd stop( t nostartt
enableCachingR2 t systemt statt
PATH_NSCD_PIDR; R& ( R| R{ ( ( R
t toggleCachingService s
c C s | o| o t i d | yC t i t t i d t i d | p t i d n Wn t j
o n Xyw t i t t i d t i d | pE y t i t t i d Wq t j
o t i d q Xn Wqt j
o qXn t i d y] t i t | p8 y t i t t i d
Wqet j
o qeXn t i d Wn t j
o n Xt
S( Ns /bin/domainname s /sbin/chkconfig --add portmaps& /sbin/chkconfig --level 345 portmap ons /sbin/service portmap restarts /sbin/chkconfig --add ypbinds% /sbin/chkconfig --level 345 ypbind ons /sbin/service ypbind restarts /sbin/service ypbind starts /bin/domainname "(none)"s /sbin/service ypbind stops& /sbin/chkconfig --level 345 ypbind off( t enableNist nisDomainR2 R} R~ t PATH_PORTMAPR{ R; t PATH_YPBINDt PATH_YPBIND_PIDR& ( R R R{ ( ( R
t toggleNisService sF
c C s | oq yW t i | t i d | t i d | d | p t i d | d n Wq t j
o q Xn ym t i | | p@ y& t i | t i d | d Wq t j
o q Xn t i d | d Wn t j
o n Xt S( Ns /sbin/chkconfig --add s /sbin/chkconfig --level 345 s ons /sbin/service s restarts stops off(
t enableR2 R~ t pathR} t nameR{ R; t pidfileR& ( R R R R R{ ( ( R
t toggleSplatbindService' s*
c C s | o d Sn d Sd S( Nt enabledt disabled( t val( R ( ( R
t
formatBool@ s c C sd y t i \ } } Wn t j
o d Sn X| p t i | t i d n d } y7 t i | t i
} t i | t i | t i
@ Wn t j
o n Xt } x0| p(y7 g } g } t i | g g | g d \ } } } Wn6 t i j
o' \ }
} t i i d | d n X| o" | o t i | t } q n d } y t i | d } Wn t j
o \ }
} |
t i j p |
t i! j o q |
t i" j o t i | t } q t i i d | d t i | t } q n X| o yp | | 7} | o t i i | n | | j o: t i | | t i | d d } t i i d n Wqt j
o: \ }
} t i i d
| d t i | t } qXq t i | t } q Wy t i& | t' i( Wn t j
o n Xy t i) | d \ }
} Wn3 t j
o' \ }
} t i i d | d n Xd S( Ni RB i< s select: s
i s read: s
s <...>
s write: s waitpid: (, R2 t forkptyt pidt masterR; R} t commandt _exitRC R8 t F_GETFLt it F_SETFLt
O_NONBLOCKR? R t eoft ifdst efdst selectt ofdst errort errt textt syst stderrt writeR> R& t ct readR< t EINTRt EAGAINt EIOt echot queryt responset killt signalt SIGTERMt waitpidt childt status( R R R R R R R R R R R R R R R R RC ( ( R
t feedForkF s~
" +
c C s y t i | } Wn t j
o t Sn XxZ | D]R } y6 t i | d | } t i | i
o t Sn Wq4 t j
o q4 Xq4 Wt S( Nt /( R2 t listdirR R R; R& R4 R~ t stt S_ISREGt st_modeR ( R R4 R R ( ( R
t
isEmptyDir s c C s yj t t g | d t } | i d i d } | i d j o d Sn | d d j o | d 3n Wn t
j
o d Sn X| S( Nt stdouti s
iRB ( t Popent PATH_SCSETUPt optionst PIPER t communicateR R t
returncodeR R; ( R R R ( ( R
t callPKCS11Setup s c C s( t d g } | d j o g Sn | S( Nt list_modules( R t modsR ( R ( ( R
t getSmartcardModules s
c C s t d t d g S( Nt Lockt Ignore( t _( ( ( R
t getSmartcardActions s c C s t | } | i | S( N( t AuthInfot msgcbt infoR ( R R ( ( R
R s
t SaveGroupc B s t Z d Z d Z RS( Nc C s | | _ | | _ d S( N( t savefunct selft saveFunctiont attrlist( R R R ( ( R
t __init__ s c C s t } x | i D] \ } } | d j o) | p t | | t | | j } q | d j o/ | p" t t | | t | | t
} q | d j o/ | p" t t | | t | | t } q q W| S( NR% R R ( R t retR R t anamet atypet getattrR$ R% R( R& ( R R$ R% R R R ( ( R
t attrsDiffer s
)
/
3( t __name__t
__module__R R ( ( ( R
R s R c B s t Z d Z d Z d Z d Z d Z d Z d Z d Z d Z
d
Z d Z d Z
d
Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z! d! Z" d" Z# d# Z$ d$ Z% d% Z& d& Z' d' Z( d( Z) d) Z* d* Z+ d+ Z, d, Z- d- Z. d. Z/ d/ Z0 d0 Z1 d1 Z2 d2 Z3 d3 Z4 d4 Z5 d5 Z6 RS(6 Nc C s | | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _
d | _ d | _ d | _
d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _! d | _" d | _# d | _$ d | _% d | _& d | _' d | _( d | _) d | _* d | _+ d | _, d | _- d | _. d | _/ d | _0 d | _1 t2 | _3 d | _4 d | _5 d | _6 d | _7 d | _8 d | _9 d | _: d | _; d | _< d | _= d | _> d | _? d | _@ d | _A d | _B d | _C d | _D d | _E d | _F d | _G d | _H d | _I d | _J d | _K d | _L d | _M d | _N d | _O d | _P d S( NRB (Q R R t messageCBt hesiodLHSt hesiodRHSt
ldapServert
ldapBaseDNt
kerberosRealmR t kerberosRealmviaDNSt kerberosKDCt kerberosKDCviaDNSt kerberosAdminServert nisServerR t nisLocalDomaint smbWorkgroupt smbRealmt
smbServerst smbSecurityt smbIdmapUidt smbIdmapGidt winbindSeparatort winbindTemplateHomedirt winbindTemplatePrimaryGroupt winbindTemplateShellt winbindUseDefaultDomaint winbindOfflinet smartcardModulet smartcardActiont enableCachet enableCompatt enableDBt enableDirectoriest enableHesiodt
enableLDAPt enableLDAPSt enableNISt
enableNIS3t enableDBbindt
enableDBIbindt enableHesiodbindt enableLDAPbindt enableOdbcbindt
enableWinbindt
enableWINSt preferDNSinHostst
enableSSSDt enableAFSt enableAFSKerberosR& t enableNullOkt enableCracklibt enableEPSt enableKerberost enableLDAPAutht passwordAlgorithmt
algoRoundst enableOTPt enablePasswdQCt enableShadowt enableSMBt enableWinbindAutht enableLocAuthorizet enablePAMAccesst enableSysNetAutht enableMkHomeDirt enableSmartcardt enableSSSDAutht brokenShadowt forceBrokenShadowt forceSmartcardt joinUsert joinPasswordt cracklibArgst passwdqcArgst
localuserArgst
pamAccessArgst
mkhomedirArgst
ldapCacertDirt
ldapCacertURL( R R ( ( R
R s c C so y t i t d } Wn t j
o t Sn Xt | i d | _ t | i d | _
| i t S( Ns /hesiod.conft lhst rhs(
t shvfileR t
SYSCONFDIRt shvR? R R t getValueR R R R> R& ( R R( ( ( R
t
readHesiod& s
c C s y t t d d } Wn t j
o t Sn Xt | i | _ | i } t t | } d i t
d | | _ | i t S( Ns
/pam_smb.conft rR
( R3 R' t fR? R R t readlineR R t readlinest serverst mapR R R R R> R& ( R R, R/ ( ( R
t readSMB7 s
c C sL y t t d d } Wn t j
o t Sn Xx
| D]} | i } t | d } | o& | i
o t | i | | _ q8 n t | d } | o | i
d d } t | d j o q8 n | d | i
j o q8 n t | d j o q8 n | d } t | d } | o t | i | | _ q:q8 q8 W| i t S( Ns /yp.confR+ t ypserverRy i i i t server( R3 R' R, R? R R t stripR R" R R R# R R R R R> R& ( R R, R" R ( ( R
t readNISJ s4
!
c C sw | i d } d } x[ | D]S } | oF | o | d 7} n d | j o | | 7} qo | d | d 7} q q W| S( NR
RB s ://s ldap://R ( R R t lR t item( R R R7 R R6 ( ( R
t ldapHostsToURIsr s
c C s6 t | _ d | _ y t t d d } Wn t j
o t Sn Xx | D] } | i
} t | d } | o | | _
qJ n t | d } | o | i | 7_ qJ n t | d } | o | i | 7_ qJ n t | d } | o t | d | _ qJ qJ qJ W| i t | i | _ | i t S( NRB s
/ldap.confR+ t baset hostt urit sslt start_tls( t PATH_LDAP_CACERTSR R" R R3 R' R, R? R R R4 R R" R R R R8 R R> R& ( R R, R" R ( ( R
t readLDAP s8
c C s- y | i | SWn t j
o d Sn Xd S( NRB ( R t allKerberosKDCsRJ t KeyError( R RJ ( ( R
t getKerberosKDC s c C s- y | i | SWn t j
o d Sn Xd S( NRB ( R t allKerberosAdminServersRJ RA ( R RJ ( ( R
t getKerberosAdminServer s c C sz d } h | _ h | _ y t t d d } Wn t j
o t Sn Xx| D]} | i
} | d d !d j o | d d !} d } qP n | d j o t | d } | o | | _ qP n t | d
} | o t | d d j | _ qP n t | d } | o t | d d j | _ qP q0qP | d
j o | p: | i d d } t | d j o qP n | d } q0| d d !d j o
d } qP n | i p
| | _ n t | d } | o& t | i | | | i | <qP n t | d } | o# t | i | | | i | <q0qP qP W| i o. | i | i | _ | i | i | _ n | i t S( NRB s
/krb5.confR+ i i t [it libdefaultst
default_realmt dns_lookup_kdct truet dns_lookup_realmt realmst }RE t admin_server( t sectionR R@ RC R3 R' R, R? R R R4 t
subsectionR R" R R R R R R R R# RB RD R R R> R& ( R R, R" RO R RN ( ( R
t readKerberos sd
+
c C s t } t d g | _ | i d j o t Sn | i d | _ t d g } | d j o t Sn x% | D] } d | j o
t } qk qk W| o t d | _
n t d | _
t S( Nt
use_modulei t rm_actions
lockhelper.shR R ( R t lockR R R R t rmactionst actionR& R R ( R RS RU RT ( ( R
t
readSmartcard s
c C s d } d } y t t d d } Wn t j
o | Sn Xx | D] } | i } t | d o qD n t | d o qD n t | d } | o | i d d i } qD n | p
| d j o qD n t
| | } | o
| } qD qD W| i | S(
NRB s /samba/smb.confR+ t #t ;RE t ]i t global( t resultRN R3 R' R, R? R R4 R R R" R R RO R t resR> ( R R R, R\ R" R[ R RN ( ( R
t readWinbindGlobal s0
c C s] | i | } | oC | i d j p | i d j p
| d j o t SqY t Sn d S( Nt yesRI t 1( R R] R t tmpR R& R R ( R R R` ( ( R
t readWinbindGlobalBool+ s 3c C s | i d } | o
| | _ n | i d } | o
| | _ n | i d } | o
| | _ n | i d } | o
| | _ n | i p
d | _ n | i d } | o
| | _ n | i p
d | _ n | i d } | o
| | _ n | i p
d | _ n | i d } | o
| | _ n | i d
} | o
| | _
n | i d } | o
| | _ n | i d } | o
| | _ n | i p
d
| _ n | i
d } | d j o
| | _ n | i
d } | d j o
| | _ n t S( Nt workgroups password serverRJ t securityt users idmap uids 16777216-33554431s idmap gids winbind separators template homedirs template primary groups template shells
/bin/falses winbind use default domains winbind offline logon( R R] R` R R R R R R R R R R Ra R R R R& ( R R` ( ( R
t readWinbind5 sZ
c C s d } y t t d d } Wn t j
o t Sn Xx | D] } | i } t | d } | o
| } q> t | d } | o t
t | d | _
t | d } | d j o t | d } n t | d } | d j o | d j o | | j | _ q
q> q> W| o t
t | d | _ t
t | d
| _ t
t | d | _ t
t | d | _ t
t | d
| _ t
t | d | _ t
t | d | _ t
t | d | _ n | i t S( NRB s /nsswitch.confR+ s passwd:s hosts:t winst nist dnst compatt dbt directoriest hesiodRk t nisplusRn ( t nssconfigR3 R' R, R? R R R4 R R" t boolR0 R R t nisposR t dnsposR R R R R R R R R R> R& ( R R, Rn R" Rq R Rp ( ( R
t readNSSj s@
c C s; t i d } t i | o t i | d j | _ t S( Ns$ /sbin/chkconfig nscd >/dev/null 2>&1i ( R2 R} t rvt WIFEXITEDt WEXITSTATUSR R R& ( R Rs ( ( R
t readCache s (c C sB y t t d t d } WnH t j
o< y t t d t d } Wqf t j
o t Sqf Xn Xd } xD| D]<} | i d d } t | d j o | d } n | i } | d d j o | | d d 7} qs n | | } d } | i
} d } | i d d } t | d
j o qs n | \ } } | d j o. | d j o! | d
j o | d j o qs n | i d o | i d d } n | i d d } t | d
j o qs n | d d j o qs n | d } | i d o | d 7} n | d } | i d d } t | d j o qs n | d i d d \ } t | d
j o | d } n | i d o$ t | _ | o
| | _ qs qs n | i d o t | _ qs n | i d o t | _ qs n | i d o3 t | _ | t j o
t | _ qs t | _ qs n | i d o$ t | _ | o
| | _ qs qs n | i d o t | _ qs n | i d o t | _ qs n | i d o$ t | _! | o
| | _" qs qs n | i d o$ t | _# | o
| | _$ qs qs n | i d o$ t | _% | o
| | _& qs qs n | d
j o | i d o x1 t' D]) } | i) | d j o
| | _* qeqeWyF | i+ d }
| |
d i d d } t. t/ | d | _0 Wn t1 t2 f j
o n Xy t3 i4 d t | _5 Wq1t6 j
o t | _5 q1Xq5n | d j o0 | i d o | i) d! d j | _7 qrn | d j o0 | i d o | i) d" d j | _8 qqs qs W| i9 yt: i; t d# }
y |
i= d$ | _> Wn t1 j
o n Xy |
i= d% | _? Wn t1 j
o n Xy |
i= d& | _@ Wn t1 j
o n Xy |
i= d' | _ Wn t1 j
o n Xy |
i= d( | _A Wn t1 j
o n Xy |
i= d) | _B Wn t1 j
o n Xy |
i= d* | _C Wn t1 j
o n Xy |
i= d+ | _D Wn t1 j
o n Xy |
i= d, | _E Wn t1 j
o n Xy |
i= d- | _F Wn t1 j
o n Xy |
i= d. | _ Wn t1 j
o n Xy |
i= d/ | _G Wn t1 j
o n Xy |
i= d0 | _ Wn t1 j
o n Xy |
i= d1 | _ Wn t1 j
o n Xy |
i= d2 | _ Wn t1 j
o n Xy |
i= d3 | _H Wn t1 j
o n Xy0 |
i= d4 } | o
d5 | _* n
d6 | _* Wn t1 j
o n Xy |
i= d7 | _J Wn t1 j
o n Xy |
i= d8 | _K Wn t1 j
o n Xy |
i= d9 | _L Wn t1 j
o n Xy |
i= d: | _M Wn t1 j
o n Xy |
i= d; | _ Wn t1 j
o n Xy |
i= d< | _5 Wn t1 j
o n Xy |
i= d= | _ Wn t1 j
o n Xy |
i= d> | _N Wn t1 j
o n Xy |
i= d? | _ Wn t1 j
o n Xy |
i= d@ | _O Wn t1 j
o n Xy |
i= dA | _P Wn t1 j
o n Xy |
i= dB | _% Wn t1 j
o n Xy |
i= dC | _! Wn t1 j
o n Xy |
i= dD | _# Wn t1 j
o n Xy |
i= dE | _Q Wn t1 j
o n X|
iR dF } | t' j o
| | _* n |
i9 Wn t j
o n X| i o | i o
t | _ n | i o | i o
t | _ n | i8 o9 | i o. | i o# | i o | i o
t | _S n t S(G Ns /pam.d/R+ RB RW i i is \R i R^ R_ Ra R` RE RY t includeR t pam_cracklibt pam_krb5t pam_ldapt
pam_pkcs11t pam_passwdqct pam_smbt pam_winbindt
pam_accesst
pam_mkhomedirt
pam_localusert pam_unixs rounds=i s /etc/shadowt nullokt
broken_shadows /sysconfig/authconfigt USEAFSt USEAFSKERBEROSt USEDBt USECRACKLIBt USEDBBINDt
USEDBIBINDt USEDIRECTORIESt USEEPSt USEHESIODt
USEHESIODBINDt USEKERBEROSt USELDAPt USELDAPAUTHt USESMARTCARDt FORCESMARTCARDt USELDAPBINDt USEMD5R[ RY t USENISt
USENISPLUSt USEODBCBINDt USEOTPt USEPASSWDQCt USESHADOWt
USESMBAUTHt
USEWINBINDt USEWINBINDAUTHt USESSSDt USESSSDAUTHt USELOCAUTHORIZEt USEPAMACCESSt USEMKHOMEDIRt
USESYSNETAUTHt PASSWDALGORITHM(T R3 R' t AUTH_PAM_SERVICE_ACR, R? t AUTH_PAM_SERVICER t prevlineR R R R R R t argsR t stackR t controlt moduleR& R R R R R
R t LOGIC_FORCE_PKCS11R R R R R R R R R! R R t password_algorithmst algoR. R t indext ridxt roundst strt intR t
ValueErrort
IndexErrorR2 R~ R R; R R R> R& R R( t getBoolValueR R R R R R R R R R R t enableMD5R t enableNISP3R R
R R R R R) R ( R R R R R R R R R R R( R, R R ( ( R
t readPAM s
4
$
6
c C s| y t i t d } Wn t j
o t Sn X| i d } | o
| | _ n | i
| i o | i | _ n t S( Ns /sysconfig/networkt NISDOMAIN(
R& R R' R( R? R R) R` R R R> R R& ( R R` R( ( ( R
t readNetwork s
c C s t | i | i t pt | i | i t pst | i | i t pZt | i | i t pAt | i | i t p(| i
| i
j pt | i | i t p| i | i j pt | i
| i
t pt | i | i t pt | i | i t pt | i | i t pt | i | i t plt | i | i t pSt | i | i t p:t | i | i t p!t | i | i t pt | i | i t pt | i | i t pt | i | i t pt | i | i t pt | i | i t pt | i | i t prt | i | i t pYt | i | i t p@t | i | i t p'| i | i j p| i | i j p| i! | i! j p| i" | i" j p| i# | i# j p| i$ | i$ j p| i% | i% j p| i& | i& j p| i' | i' j p|| i( | i( j pi| i) | i) j pV| i* | i* j pC| i+ | i+ j p0| i, | i, j p | i- | i- j p
| i. | i. j p| i/ | i/ j p| i0 | i0 j p| i1 | i1 j p| i2 | i2 j p| i3 | i3 j p| i4 | i4 j p| i5 | i5 j pr| i6 | i6 j p_| i7 | i7 j pL| i8 | i8 j p9| i9 | i9 j p&| i: | i: j p| i; | i; j p | i< | i< j p | i= | i= j p | i> | i> j p | i? | i? j p | i@ | i@ j p | iA | iA j p | iB | iB j p{ | iC | iC j ph | iD | iD j pU | iE | iE j pB | iF | iF j p/ t | iG | iG t p t | iH | iH t Sd S( N(I R( R R R% R R R R R& R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R
R R R
R R R R R R R R R R R R ( R R% ( ( R
t differs s -c C s t | i | _ t | i | _ t | i | _ | i d j o$ | i o | i i | _ qj n | i i | _ d S( Nt ads(
R R R R R R R t upperR R ( R ( ( R
t update1 s
c C s| | i | i | i | i | i | i | i | i | i | i
| i | i d S( N(
R R* R1 Re R R5 R? RP RV Rr Rv R R ( R ( ( R
R = s
c C s% t i | } d | _ d | _ | S( NRB ( t copyR R R R ( R R ( ( R
R M s c C s` | i o t i d t i d n5 y t i t t i d Wn t j
o n Xt S( Ns /sbin/chkconfig --add nscds# /sbin/chkconfig --level 345 nscd ons$ /sbin/chkconfig --level 345 nscd off( R R R2 R} R~ t PATH_NSCDR; R& ( R ( ( R
t
writeCacheS s
c C sr y t i t d } Wn t j
o t Sn X| i d | i | i d | i | i
d | i t S( Ns /hesiod.confR$ R% i (
R& t rcreateR' R( R? R t setValueR R R R R> R& ( R R( ( ( R
t writeHesiod_ s
c C s d } z t t d d } | i d | i | i d | i i d d } | i d } t | d j o | i | d n | i d t | d j o | i | d n | i d Wd y | o | i
n Wn t j
o n XXt S( Ns
/pam_smb.confi i s
R
R i ( R R, RA R' t truncateR R R R R R/ R R R> R? R& ( R R, R/ ( ( R
t writeSMBm s(
c C s t } d } d } zt t d d } x| D]} | i } t
| d } | o| i d d } t
| d j o q/ n | d | i j o% | d | i j o | | 7} q/ n | o | i o | d | i 7} | i i d } | i o | d 7} | | d 7} n | d
7} | d 7} | d } x+ | D]# } | o | d | d 7} q<q<Wt } qq/ t | d
ok | o_ | i oT | i oJ | i i d } x+ | D]# } | o | d | d 7} qqWt } qq/ | | 7} q/ W| p | i i d } | i oZ | d | i 7} | d o& | d 7} | | d 7} | d } n | d
7} | d 7} n x/ | D]# } | o | d | d 7} q~q~Wn | i d | i d | i | Wd y | o | i n Wn t j
o n XXt S( NRB s /yp.confi Ry i i s domain R
s server s
broadcasts
s ypserver R2 ( R t writtenR R, RC RA R' R R4 t lsR R" R R R R R R R/ R R& R t seekR R R> R? ( R R, R R" R/ R R RC R ( ( R
t writeNIS s~ (
c C s@ t } t } t } t } t }
d } d } | i
o* | i
d j o | i
d j o
d } n d } zt | d } x | D]}
|
i } t | | o` | oT | i oJ | | d 7} | d i | i | i i d 7} | d 7} t } qq} t | | o | i o | d
|
7} qq} t | | oE | o9 | i o/ | | d 7} | | i 7} | d 7} t } qq} | o[ t | d oK | p@ | d 7} | i o | d
7} n | d 7} | d 7} t } qq} t | d oO |
pD | o | d 7} n | d 7} | d | i 7} | d 7} t }
qq} | o= t | d o- | p" | d | 7} | d 7} t } qq} | |
7} q} W| oN | i oD | | d 7} | d i | i | i i d 7} | d 7} n | o3 | i o) | | d 7} | | i 7} | d 7} n | oB | o: | d 7} | i o | d
7} n | d 7} | d 7} n |
p> | o | d 7} n | d 7} | d | i 7} | d 7} n | o$ | o | d | 7} | d 7} n | i d | i d | i! | Wd y | o | i" n Wn t# j
o n XXt S( NRB RY RZ R[ t crypti R R
s
RW R< s ssl R= t not
tls_cacertdirt
TLS_CACERTDIRt pam_passwords
pam_password i ($ R t wrotebasednt wroteservert wrotesslt wrotepasst wrotecacertdirR R, RC R R t passalgoRA R4 R R4 R R R; R R R8 R R& R: R9 R t writePadlR R! R" R R R R> R? ( R R4 R; R: R9 R R R R R R R R R R, RC ( ( R
t
writeLDAP2 s *
(
(
c C sK | i t d d d d t } | o! | i t d d d d t n | S( Ns
/ldap.confR; R: R9 s /openldap/ldap.conft URIt HOSTt BASE( R R R' R& R R ( R R ( ( R
t writeLDAPE s
c C s] d } | i d j o | d Sn8 | i d j p | i d j o | | i Sn | d Sd S( Ns crypt_style = R[ R\ R] t des( R R R ( R R ( ( R
t
cryptStyleN s c C s t } t } d } d } d } zPt t d d } x | D] } | i
} | d j o1 t | d o! | | i d 7} t } q; n t | d oh | d j o& | o | | i d 7} t } n | d i d d d
} | d j o
t } qn | | 7} q; W| p. | d 7} | | i d 7} t } t } n | i d
| i d
| i | Wd y | o | i n Wn t j
o n XXt S( NRB s
/libuser.confi t defaultst crypt_styles
RE i RY i s [defaults]
( R t wrotecryptstylet
wrotedefaultsRN R R, RC RA R' R R4 R R R R R& R R R R R> R? ( R R, R R RC R R RN ( ( R
t writeLibuserX sJ
c
C s t } t } d } d } d } | i d j o
d } n d } | i d j p | i d j o
d } n d | i i d } z t t
d
d } xr | D]j } | i } t | d o | | 7} t } q n t | d
o | | 7} t } q n | | 7} q W| p | | 7} n | p | | 7} n | i d | i d | i | Wd y | o | i n Wn t j
o n XXt S( NRB R[ s MD5_CRYPT_ENAB yes
s MD5_CRYPT_ENAB no
RY RZ s ENCRYPT_METHOD DES
s ENCRYPT_METHOD s
s /login.defsi t MD5_CRYPT_ENABt ENCRYPT_METHODi ( R t
wrotemd5cryptt wroteencmethodRN R R, RC R R t md5cryptt encmethodR RA R' R R4 R R R& R R R R> R? (
R R, R R R R R RC R RN ( ( R
t writeLogindefs sN
c C sv
t } t } t } t } t } t }
t } t } t } t } t } t }
t } t } t } d } d } d } d } | i o | i o
| i } nE | i p
| i o' | i d j o | i o
| i } n
| i } | i | i j o
t } n zK t t d d } x2| D]*} | i! } | d j o` | oY | | i j oI t# | d o9 | p+ | i$ o | t% | i$ 7} n t } qqn | d j op | i d j o` | oY | | i j oI t# | d o9 | p+ | i& o | t% | i& 7} n t } qqn | d j o` | oY | | i j oI t# | d o9 | p+ | i' o | t( | i' 7} n t } qqn | d j o | o | i) d d } t+ | d j o | | 7} qn | d } | i o | | i j o
t } n | i o | | i j o
t } qn | d j o | o t# | d
o | i o\ | | i j oL | p | t% | i$ 7} t } n | p | t( | i' 7} t } qn | i o8 | | i j o( | p | t% | i& 7} t } qn d } n | d j oN t# | d o> | o0 | o( | d
7} | | 7} | d 7} t } qqn | d j o[ t# | d oK | p= | d 7} | t, t- | i. i/ 7} | d 7} t } qqn | d j o[ t# | d oK |
p= | d 7} | t, t- | i0 i/ 7} | d 7} t }
qqn | d j oW | i oM t# | | i i/ p t# | d | i i/ o | | 7} t } qn t# | d o| d j o; | i o1 | o) | t1 | i | i$ | i' 7} t } n | d j o8 | i o. | o& | t1 | i | i& d 7} t } n | d j o | o0 | o( | d
7} | | 7} | d 7} t } n | p= | d 7} | t, t- | i. i/ 7} | d 7} t } n |
p= | d 7} | t, t- | i0 i/ 7} | d 7} t }
qn | d j o | i ov | on | d | i i/ 7} | d | i 7} | d 7} | d | i i/ 7} | d | i 7} | d 7} t } q~n | oI | d j o
t } q| d j o
t } q| d j o
t } qn | d i) d d d } | d j o
t }
q1| d j o
t } q1| d j o
t } q1n | | 7} qW| p | p | d 7} n | o* | o" | d
7} | | 7} | d 7} n | p7 | d 7} | t, t- | i. i/ 7} | d 7} n |
p7 | d 7} | t, t- | i0 i/ 7} | d 7} q n | pj |
p | d 7} n | p# | t1 | i | i$ | i' 7} n | p | t1 | i | i& d 7} q} n | p | p | d 7} n | i op | oh | d | i i/ 7} | d | i 7} | d 7} | d | i i/ 7} | d | i 7} | d 7} q
n | i2 d | i3 d | i4 | Wd y | o | i5 n Wn t6 j
o n XXt S( NRB R s
/krb5.confi RK RE RM i i RL RF RG s default_realm = s
RJ s dns_lookup_realm = RH s dns_lookup_kdc = t domain_realmRx RE R s = s .RY s [libdefaults]
s [realms]
s [domain_realm]
(7 R t
wroterealmt wrotekdct
wroteadmint
wrotesmbrealmt wrotesmbkdct wroterealmst wrotelibdefaultst wroterealms2t wrotelibdefaults2t wrotedefaultrealmt
wrotednsrealmt wrotednskdct wroteourdomrealmt
wrotedomrealmt wrotedomrealm2RN RO R R, RC R R R t defaultrealmR R R R R& RA R' R R4 R R R RF R R RI R R" R R Ro R R R RK R R R R> R? ( R R R R" R R R RO R R R R R R R R R R R, R R R RC RN ( ( R
t writeKerberos5 s|
.
4
D
4
$
M
$
c C s| | i p t Sn t } d } d } z!t t d d } | | i d 7} x> | i i
d D]* } | o | | i d | d 7} q^ q^ WxH | i i
d D]4 } | o' | | i d | 7} | d d 7} q q WxC | D]; } | p
t } q n t | | i p | | 7} q q W| i d | i d | i | Wd y | o | i n Wn t j
o n XXt S( NRB s /krb.confi s
R
s s
admin serveri ( R R R t readrealmR R, RC RA R' R R RE R t asrvR R& R R R R R> R? ( R R R, RE R RC R ( ( R
t writeKerberos4 sD
!
c C s% | i } | o | i n | S( N( R R R R ( R R ( ( R
t
writeKerberos s c C s` d } d } | i t d j o | d 7} | d 7} n t d | i d | d | g t S( Ns /usr/sbin/gdm-safe-restartR s ,/etc/pkcs11/lockhelper.sh -locks& ,/etc/pkcs11/lockhelper.sh -deactivates use_module=s ins_action=s
rm_action=( t insactt rmactR R R R R R& ( R R R ( ( R
t writeSmartcard s
"c C s d } | d 7} | d t i d d 7} | d 7} | d 7} | d 7} | i o+ | d 7} | | i 7} | d 7} t } n | i o7 | d 7} | | i i d d
7} | d 7} t } n | i
o+ | d 7} | | i
7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d
7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t }
n | d 7} | t t | i i 7} | d 7} | d 7} | t t | i i 7} | d 7} | d 7} | d 7} | S( Ns #--authconfig--start-line--
s
s # Generated by authconfig on s %Y/%m/%d %H:%M:%SsF # DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--)
sE # Any modification may be deleted or altered by authconfig in future
s workgroup = s password server = R
R s realm = s security = s idmap uid = s idmap gid = s winbind separator = s template homedir = s template primary group = s template shell = s winbind use default domain = s winbind offline logon = s #--authconfig--end-line--
( RC t timet strftimeR R R& t wroteworkgroupR R t wroteserversR R R t
wrotesecurityR t
wroteidmapuidR t
wroteidmapgidR t wroteseparatorR t wrotetemplatehR t wrotetemplatepR t wrotetemplatesR Ro R R R ( R R
R
R R R R R R RC R R ( ( R
t
paramsWinbind s
c C s@ d } x) | D]! } t | | o d } Pq
q
W| | 7} | S( NRB RX ( RC R t optRO R R ( R R R R R RC ( ( R
t checkLineWinbind, s
c
C s& t } t } d } d d d d d d d d d
d d d
d d g } d } d } zt t d d } x;| D]3} | i } | o! t
| d o
t } qk qk n t
| d o
t } qk n t
| d p t
| d o | | 7} qk n t | d } | o^ d | j oQ | i d d i } | | 7} | d j o | | i 7} t } qk qk n | d j o | | i | | | 7} qk n | | 7} qk W| p | d 7} | | i 7} n | i d | i d | i | Wd y | o | i n Wn t j
o n XXt S( NRB Rb s password serverRJ Rc s
domain logonss
domain masters idmap uids idmap gids winbind separators template homedirs template primary groups template shells winbind use default domains winbind offline logons /samba/smb.confi s #--authconfig--end-line--s #--authconfig--start-line--RX RW RE RY i RZ s [global]
( R t authsectiont wroteauthsectionRN R R R, RC RA R' R R4 R R R& R R" R R R R R R R R R> R? (
R R, R R" R R RN RC R R ( ( R
t writeWinbind9 s\ 0
c C sP d } d } d } t } t } t }
t } t }
t } d } d } zt
t d d } | i o | d 7} n | d 7} | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d
7} n | i o | d 7} n | i o | d 7} n | i o | d
7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | i d d } n | } | i o | d 7} n | d 7} | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i p | d 7} n x| D]} | i" } t$ | d o3 | p( | d 7} | | 7} | d 7} t% } qqIt$ | d o3 |
p( | d 7} | | 7} | d 7} t% }
qqIt$ | d o3 | p( | d 7} | | 7} | d 7} t% } qqIt$ | d o3 | p( | d 7} | | 7} | d 7} t% } qqIt$ | d o3 |
p( | d 7} | | 7} | d 7} t% }
qqIt$ | d! o3 | p( | d" 7} | | 7} | d 7} t% } qqI| | 7} qIW| p" | d 7} | | 7} | d 7} n |
p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n |
p" | d 7} | | 7} | d 7} n | p" | d" 7} | | 7} | d 7} n | i& d# | i' d# | i( | Wd y | o | i) n Wn t* j
o n XXt% S($ NRB s /nsswitch.confi s dbs filess directoriess odbcbinds nispluss niss ssss ldapbinds ldaps hesiodbinds hesiods dbibinds dbbindt filesRi s winbinds dnss winss passwd:s passwd: s
s shadow:s shadow: s group:s group: s netgroup:s netgroup: s
automount:s automount: s hosts:s hosts: i (+ t userst normalt hostsR t wrotepasswdt
wrotegroupt wroteshadowt
wrotenetgroupt wroteautomountt
wrotehostsR R, RC RA R' R R R R R R R R R R R R R R R R R R R R4 R R R& R R R R> R? ( R R R R R R, R R R R R RC R R ( ( R
t writeNSS s
c C s t | t } | t } d } | o| od } | t d j o\ | d j oO | i
o- | i o
t } n t
} d i t } q | i o
t } q n | t d j o+ | d j o | i o
t } q t } n | t d j o2 | d j o% | t j o | i o
t } q n | d | | | t f 7} | t | i j o[ t i d t | t f t i o6 | i t d
t | t f t | i | t <n | t d j o
| i } n | t d j o
| i } n | t d
j o
| i } n | t d j o
| i! } n | t d j o
| i" } n | o" | t# o d i | t# } n | t d j o | i$ o | d 7} n | t d j o| d j o | i% o% | i% d j o | d | i% 7} n | i& o | d | i& 7} n | i' o | d 7} n | i( o | d 7} n | i) o | d 7} qIn | d j o | i) o | d 7} qrn | d j o: | i* p | i+ p | i p
| i, o | d 7} qqn | o | d | 7} qn | d 7} | S( NRB Rd R^ R Re R_ Rc s %-12s%-13s pam_%s.sos %s/pam_%s.sos^ Authentication module %s/pam_%s.so is missing. Authentication process will not work correctly.Rr Rs Rq Rp Rw Rn s
cached_loginRg Ra RY s rounds=s shadows niss nulloks broken_shadows
(- t
pam_stacksR t STACKR t LOGICt logicRC R t NAMER R R t LOGIC_FORCE_PKCS11_KRB5R R t argv_force_pkcs11_autht LOGIC_PKCS11_KRB5R t LOGIC_IGNORE_AUTH_ERRt LOGIC_IGNORE_UNKNOWNt LOGIC_SKIPNEXTt LOGIC_SKIPNEXT3t module_missingR2 Rp t AUTH_MODULE_DIRt X_OKR R R& R R R R R! t ARGVR R R R R R R R
R ( R R R R R$ RC ( ( R
t formatPAMModule
sz
+
+!
(
c C s t i i | } t i i | } | o | p | o] | oU y t i | Wn t j
o n Xy t i | | Wq t j
o q Xn d S( N( R2 R t isfilet destR, t islinkR6 t unlinkR; t symlinkt src( R R7 R3 R, R6 ( ( R
t linkPAMServicec
s c C s t } h | _ d } zMt t d t d } | d 7} | d 7} | d 7} | d 7} g } xt D]} | o | t | t j o | d 7} n | } | t pw| i
o | t d j p\| i o | t d
j pA| i o | t d j p&| i o | t d j p | i o | t d
j o | t t j p| i oK | i oA | t d
j o | t t j p | t d j o | t t j p| i o | t d j pk| i o0 | t t j o | t d j o | t t j p.| i o | t d j p| i o | t d j p | i o | t d j p | i o | t d j p | i o | t d j p | i o | t d j p | i o | t d j pq | i o | t d j pV | i! o | t d j p; | i" o0 | t t j o | t d j o | t t# j o | | i$ | 7} n qd W| i% d | i& d | i' | Wd y | o | i( n Wn t) j
o n XX| i* t t d t+ t, Sd S( NRB s /pam.d/i s
#%PAM-1.0
s # This file is auto-generated.
s/ # User changes will be destroyed the next time s authconfig is run.
s
Ri s afs.krbRr t epsRe Rf Rk Rc Rd Rl Rs Rm Rn Rh Rq Rp Rw i (- R R, R R- RC RA R' R t
prevmodulet standard_pam_modulesR R" t MANDATORYR R% R R R R R0 t argv_krb5_sc_authR t AUTHR
R# R+ R
R R R R R R R R t LOGIC_REQUISITER1 R R R R> R? R8 R R& ( R R R: R, RC ( ( R
t writePAMr
s<
c C s y t i t d } Wn t j
o t Sn X| i d | i | i d | i | i d | i
| i d | i | i d | i | i d | i
| i d | i | i d | i | i d
| i | i d | i | i d | i | i d
| i | i d | i | i d d | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i t! S( Ns /sysconfig/authconfigR R R R R R R R R R R R R R R R R R R R R R i (" R& R R' R( R? R t setBoolValueR R R R R R R R R R R
R R R R R R R R R R R R R R R> R& ( R R( ( ( R
t writeSysconfig
s:
c C s_ y t i t d } Wn t j
o t Sn X| i d | i | i d | i
t S( Ns /sysconfig/networkR i ( R& R R' R( R? R R R R R R> R& ( R R( ( ( R
t writeNetwork
s
c C s | i y| i } | o
| i } | o
| i } | i o | o
| i } n | i o | o
| i } n | i
p | i o' | i d j o | o
| i
} n | i o | o
| i } n | i o | o
| i } n | i o | o
| i } n | i p
| i o | o
| i } n | o
| i } | o
| i } | o
| i } | o
| i } Wn t j
o t Sn X| S( NR ( R R R R R R R R R R R R R R R R R R R R R R R R@ RB RC R? R ( R R ( ( R
R
s4
$
c . C sN t | i d d f g t | i d d f d d f g t | i d d f d d f g t | i d d f d
d f d d f g t | i d d f d
d f d d f d d f d d f g t | i d d f g t | i d d f g t | i d d f g t | i d d f d d f d d f d d f d d f d d f d d f d d f g t | i
d d f d d f d d f g t | i d d f d d f g t | i d d f d d f d d f d d f d d f d d f d d f d d f d d f d d f d d f d! d f g t | i
d" d f d# d f d$ d f d% d f d& d f d' d f d( d f d) d f d* d f d+ d f d, d f d- d f d. d f d/ d f d0 d f d& d f d' d f d1 d f g t | i d2 d f d3 d f d4 d f d5 d f d6 d f d7 d f d8 d f d9 d f d d f d: d f d' d f d; d f d< d f d= d f d> d f d? d f d@ d f dA d f d8 d f dB d f dC d f dD d f dE d f dF d f dG d f dH d f dI d f dJ d f dK d f d! d f g t | i d d f d: d f d' d f d* d f d= d f d> d f d? d f d@ d f d( d f dI d f dA d f d$ d f d" d f d, d f dD d f dG d f dH d f dJ d f d6 d f d8 d f dK d f g t | i d d f g g } | i t } y? x8 | D]0 } | i | | o | o
| i } n qWWn t j
o t Sn X| Sd S(L NR R% R R R R R R R R R R R R R" R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R! R R R R R R
R R R R R R R R R
R R R R R ( R R R R R R R R R R R R R R R@ RB RC t save_groupsR R& R t groupR t refR R? R ( R RF RD RE R ( ( R
t writeChanged
s /
c C s d } d } g } g } t i d g t i d g t i d g t i d g g } t i } | p d Sn | i
d p | d 7} n | | i d } d | } t i
| t i t i } xL | D]D } | i t i j o+ | i i i d | _ t | | _ q q Wd | } t i
| t i t i } | p) d | } t i
| t i t i } n xC | D]; } | i t i j o" | i i | _ | i o PqqjqjW| i old | i } t i
| t i t i } x | D] } | i t i j oh | i i i d } | i i o | d | i i 7} n | i o | i d
| 7_ qc| | _ qqWd | i } t i
| t i t i } x | D] } | i t i j oh | i i i d } | i i o | d | i i 7} n | i o | i d
| 7_ q| | _ qqWn x | D] } | d | } t i
| | d
t i } xY | D]Q } | i t i j o8 | i | j o( d | d | _ | i d | _! Pq]q]Wq&Wd S( NRB t hst nsRx s
_ldap._tcps
_kerberos.t _kerbeross _kerberos._udp.R) R
s _kerberos-adm._udp.i i (" t hostnamet qnamet resultsR[ t dnsclientt DNS_C_INt DNS_C_HSRl t sockett getfqdnt endswithR. Ry R t DNS_T_SRVt dns_typet rdataR3 R R R Rz R t DNS_T_TXTt dataR t portR R t ht DNS_T_SOAt dns_nameR R ( R Rl RK RL RM R[ Ry RZ ( ( R
t probe4 s| 6
#c C sw d t | i GHd GHd t | i GHd t | i GHd t | i GHd | i GHd | i GHd t | i GHd t | i GHd
| i
GHd | i GHd t | i GHd
| i
GHd | i GHd t | i GHd t | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd t | i GHd t | i GHd GHd t | i GHd | i GHd t | i GHd | i GHd t | i GHd | i GHd! t | i GHd" | i! GHd# t | i" GHd t | i GHd
| i
GHd | i GHd$ t | i# GHd% t | i$ GHd& | i% GHd' | i& GHd( t | i' GHd | i GHd | i GHd) t | i( GHd | i GHd | i GHd | i GHd | i GHd* t | i) GHd+ t | i* | i+ f GHd, t | i, | i- f GHd- t | i. | i/ f GHd. t | i0 | i1 f GHd/ t | i2 | i3 f GHd0 t | i4 GHd S(1 Ns
caching is %ss nss_files is always enableds nss_compat is %ss nss_db is %ss nss_hesiod is %ss hesiod LHS = "%s"s hesiod RHS = "%s"s nss_ldap is %ss LDAP+TLS is %ss LDAP server = "%s"s LDAP base DN = "%s"s
nss_nis is %ss NIS server = "%s"s NIS domain = "%s"s nss_nisplus is %ss nss_winbind is %ss SMB workgroup = "%s"s SMB servers = "%s"s SMB security = "%s"s SMB realm = "%s"s Winbind template shell = "%s"s SMB idmap uid = "%s"s SMB idmap gid = "%s"s nss_sss is %s by defaults nss_wins is %ss pam_unix is always enableds shadow passwords are %ss! password hashing algorithm is %ss pam_krb5 is %ss krb5 realm = "%s"s krb5 realm via dns is %ss krb5 kdc = "%s"s krb5 kdc via dns is %ss krb5 admin server = "%s"s pam_ldap is %s
s pam_pkcs11 is %s
s# use only smartcard for login is %ss smartcard module = "%s"s smartcard removal action = "%s"s pam_smb_auth is %ss pam_winbind is %ss pam_sss is %s by defaults pam_cracklib is %s (%s)s pam_passwdqc is %s (%s)s pam_access is %s (%s)s pam_mkhomedir is %s (%s)s' Always authorize local users is %s (%s)s; Authenticate system accounts against network services is %s(5 R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R
R R R R R R R R R R R R R R R! R R R ( R ( ( R
t printInfo sr c C sF | i o t i d t i d n t i d t i d t S( Ns /usr/sbin/pwconvs /usr/sbin/grpconvs /usr/sbin/pwunconvs /usr/sbin/grpunconv( R R R2 R} R& ( R ( ( R
t toggleShadow s
c C s, | i p
| i o| i o
| i i d d d i d d d i d d d } | i } | i } | p
d } n | d j o | d j o d Sn d | o d p d
| | o d p d
| | i f } | o t
i i d | n | i o t | | d
| i q(t i | n d S( NR
i i R s R Ry s! /usr/bin/net join %s%s %s%s -U %ss -w RB s -S s [%s]
s sword:( R R R R R R R3 R Ry R t protocolt cmdR R R R R R R2 R} ( R R Ry R` Ra R3 ( ( R
t
joinDomain s 9
8
c C s | i t | i | i | t | i p | i t t
d | t | i p | i t
t d | t | i t t d | t | i t t d | t | i t t d | t | i t t d | t | i t t d | t | i | d S( NRn t sssdt dbbindt dbibindt
hesiodbindt ldapbindt odbcbind( R R_ R R R R{ R R R t PATH_WINBINDt PATH_WINBIND_PIDR R t PATH_SSSDt
PATH_SSSD_PIDR t PATH_DBBINDt PATH_DBBIND_PIDR t PATH_DBIBINDt PATH_DBIBIND_PIDR t PATH_HESIODBINDt PATH_HESIODBIND_PIDR t
PATH_LDAPBINDt PATH_LDAPBIND_PIDR t
PATH_ODBCBINDt PATH_ODBCBIND_PIDR R ( R R{ ( ( R
t post s0
c C s | i p
| i oj y t i | i WnB t j
o6 \ } } | t i
j o t i | i d qm n Xt | i Sn t
S( Ni ( R R R
R2 R~ R" R; R R R< t ENOENTt mkdirR R ( R R R ( ( R
t testLDAPCACerts s c C s: | i p
| i o" | i o t i d | i n d S( Ns /usr/sbin/cacertdir_rehash ( R R R
R R2 R} R" ( R ( ( R
t rehashLDAPCACerts
s c C s | i p t Sn | i yW t i | i } t | i d t d } | i | i | i
| i
Wn3 t t t f j
o | i t d t Sn X| i t S( NR i s Error downloading CA certificate( R R# R Rz t urllib2t urlopent readfRA R" t LDAP_CACERT_DOWNLOADEDt writefR R R> R? R; R R R R{ R& ( R R~ R ( ( R
t downloadLDAPCACert s
(7 R R R R* R1 R5 R8 R? RB RD RP RV R] Ra Re Rr Rv R R R R R R R R R R R R R R R R R R R R R R R R1 R8 R@ RB RC R RG R] R^ R_ Rb Rw Rz R{ R ( ( ( R
R sl ` ( , @
5 * & ^ T i
4 5 * F
H E : "
: S @
( R R2 R R8 RQ R R R~ R& RN R R< R| R t
subprocessR t gettextt lgettextR R' R R R t globalst LIBDIRR. R t PATH_PWCONVR R Rm Rn Ro Rp Rq Rr Rs Rt Ru Rv Ri Rj Rk Rl R R t PATH_SEBOOLt
PATH_SCEVENTDt PATH_SCEVENTD_PIDR t PATH_LIBNSS_DBt PATH_LIBNSS_LDAPt PATH_LIBNSS_NISt PATH_LIBNSS_HESIODt PATH_LIBNSS_ODBCBINDt PATH_LIBNSS_WINBINDt PATH_LIBNSS_WINSt PATH_LIBNSS_SSSt
PATH_PAM_KRB5t
PATH_PAM_LDAPt PATH_PAM_SMBt PATH_PAM_WINBINDt PATH_PAM_PKCS11t PATH_PAM_SSSt PATH_WINBIND_NETR> R t LOGIC_REQUIREDR? t LOGIC_SUFFICIENTt LOGIC_OPTIONALR* R) t LOGIC_PKCS11R R( R& R+ R, R R R R R R! R# R( R0 RA RF RI RK RO t argv_unix_autht argv_unix_passwordt
argv_afs_autht argv_afs_passwordt argv_cracklib_passwordt argv_passwdqc_passwordt
argv_eps_autht argv_eps_passwordt argv_pkcs11_authR' t argv_krb5_authR= t argv_krb5_passwordt argv_ldap_autht argv_ldap_passwordt
argv_otp_autht
argv_smb_autht argv_succeed_if_autht argv_succeed_if_accountt argv_succeed_if_sessiont argv_succeed_if_nonlogint argv_winbind_autht argv_winbind_passwordt
argv_sss_autht argv_sss_passwordt argv_keyinit_sessionR R> t ACCOUNTt SESSIONt PASSWORDR! R< R" R# R% R0 R& R R; Rz t DEFAULT_DNS_QUERY_SIZER R R R R R R R R R R R ( RA R R R R R R R R! R R R R Ri R& R? R R R Rr R R R R0 Rt R, R R R R R Rm R R R R R R+ R& R0 R R R Ru R R R' R R R R R R R8 R) R* R R R Rs R RQ R( R R= R R R RF R2 Ro R R R R Rv R R R< R R< R R R R R Rk R Rq RI RK R R R R R R R% R! R R R R R R# Rz R RN R R' R# Rj Rn R R R R> Rl R R R RO R R R" R~ R| R> R R R R R R R R R( R. R; R Rp ( ( R
t ? s$
iu & E