| Server IP : 198.38.94.13 / Your IP : 216.73.217.33 Web Server : Apache System : Linux d4744.dxb1.stableserver.net 5.14.0-611.49.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Apr 21 16:39:08 EDT 2026 x86_64 User : revivere ( 1140) PHP Version : 8.2.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /lib/python3.9/site-packages/authselect/__pycache__/ |
Upload File : |
a
���g�J � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dl m
Z
ejZ dd� Z G dd� d�Z
G d d
� d
�ZG d d � d �ZG d
d� d�ZG dd� d�Zdd� Zedkr�e� dS )� N)�Options)�EnvironmentFile)�
ConfigSnippetc O s t | dtji|�� d S )N�file)�print�sys�stderr)�args�kwargs� r �9/usr/lib/python3.9/site-packages/authselect/authcompat.py�eprint% s r
c @ s" e Zd ZdZddd�Zdd� ZdS ) �CommandFNTc C s2 |g| | _ |d ur |�� nd | _|| _d | _d S �N)r �encode�input�check�result)�self�commandr r r r r r �__init__, s zCommand.__init__c C sF t td�d�| j� � | jr"d S tj| j| j| jtj tj d�| _
d S )Nz
Executing: %s� )r r �stdoutr ) r �_�joinr �TEST�
subprocess�runr r �PIPEr �r r r r r 2 s �z Command.run)NT)�__name__�
__module__� __qualname__r r r r r r r r ) s
r c @ s> e Zd Zdd� Zdd� Zdd� Zdd� Zdd
d �Zd d
� ZdS )�Servicec C s |d | _ d S )Nz.service��name�r r% r r r r ? s zService.__init__c
C s� z |� � W n~ tjy� } zd|r@|j|kr@ttd�| j � n6|j|krvttd�d�|j�|jf � t|j �
� � W Y d }~n
d }~0 0 d S )Nz5Service %s was not found. Please install the service.�$Command [%s] failed with %d, stderr:r ) r r �CalledProcessError�
returncoder
r r% r �cmdr �decode)r r �requiredZ enoent_coder r r r �
runsystemdB s �
�zService.runsystemdc C s( t t�d�d| jg�}| �|dd� d S )N�
cmd-systemctl�enableT� �r �Path�Systemr% r- �r r* r r r r/ N s zService.enablec C s( t t�d�d| jg�}| �|dd� d S )Nr. �disableFr0 r1 r4 r r r r5 R s zService.disableTc C s4 |r | � � tt�d�d| jg�}| �|dd� d S )Nr. �startT� )�stopr r2 r3 r% r- )r ZRestartr* r r r r6 V s z
Service.startc C s( t t�d�d| jg�}| �|dd� d S )Nr. r8 Fr7 r1 r4 r r r r8 \ s z Service.stopN)T) r r! r" r r- r/ r5 r6 r8 r r r r r# > s
r# c
@ sb e Zd Zej�ej�e��Ze ed �Z
dddddddd d
d d d
d� Z e dd� �Z
e dd� �ZdS )r2 z/authcompat_pathsz/etc/openldap/ldap.confz$/etc/krb5.conf.d/authconfig-krb.confz%/etc/sssd/conf.d/authconfig-sssd.confz/etc/sysconfig/authconfigz/etc/sysconfig/networkz;/etc/security/pwquality.conf.d/10-authconfig-pwquality.confz /etc/yp.confz/usr/bin/systemctlz/usr/bin/authselectz/usr/sbin/realmz/usr/bin/domainnamez/usr/sbin/setsebool) � ldap.conf� krb5.conf� sssd.conf�
authconfig�network�pwquality.confzyp.confr. �cmd-authselect� cmd-realmzcmd-domainnamez
cmd-setseboolc C s dt j| f S )Nz%s/%s)r2 �LocalDir)�relpathr r r �Localt s z
Path.Localc C s
t j| S r )r2 �Filesr$ r r r r3 x s z Path.SystemN)r r! r" �os�path�dirname�realpath�__file__rA r ZConfigrD � staticmethodrC r3 r r r r r2 a s& �
r2 c @ s| e Zd ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG d d
� d
e�ZG d d � d e�Z G d
d� de�Z
dS )�
Configurationc @ sx e Zd Zd dd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Zdd� Z dd� Z
dd� Z dd� Z dd� Z
d dd�Zdd � ZdS ) zConfiguration.BaseNc C s" || _ d | _|d ur t|�| _d S r )�options�servicer# )r rL � ServiceNamer r r r s zConfiguration.Base.__init__c C s dS )NTr r r r r � isEnabled� s z Configuration.Base.isEnabledc C s
| � � S r )rO r r r r �
isDisabled� s z Configuration.Base.isDisabledc C s* | j d u rd S | j �� |s&| j �� d S r )rM r/ r6 )r �nostartr r r �
enableService� s
z Configuration.Base.enableServicec C s* | j d u rd S | j �� |s&| j �� d S r )rM r5 r8 �r Znostopr r r �disableService� s
z!Configuration.Base.disableServicec C s d S r r r r r r �cleanup� s zConfiguration.Base.cleanupc C s d S r r r r r r �write� s zConfiguration.Base.writec C s | j �|�S r )rL �getr& r r r rW � s zConfiguration.Base.getc C s | j �|�S r )rL �issetr& r r r rX � s zConfiguration.Base.issetc C s | j �|�S r )rL �
getTrueOrNoner& r r r rY � s z Configuration.Base.getTrueOrNonec C s | j �|�S r )rL �getBoolr& r r r rZ � s zConfiguration.Base.getBoolFc C s( |r| � |�sd S | �|�}|r$|S |S r �rX rZ )r r% �if_true�if_false� AllowNone�valuer r r �getBoolAsValue� s
z!Configuration.Base.getBoolAsValuec C sH t td�| � | j�d�r d S zt�|� W n tyB Y d S 0 d S )NzRemoving file: %s� test-call)r r rL rZ rE �remove�FileNotFoundError)r �filenamer r r �
removeFile� s z Configuration.Base.removeFile)N)F)r r! r" r rO rP rR rT rU rV rW rX rY rZ r` re r r r r �Base~ s
rf c s$ e Zd Z� fdd�Zdd� Z� ZS )zConfiguration.LDAPc s t tj| ��|� d S r )�superrK �LDAPr �r rL �� __class__r r r � s zConfiguration.LDAP.__init__c C sZ t t�d�dddd�}| �d�r2|�d| �d�� | �d�rN|�d | �d�� |�� d S )
Nr9 r z\s\tF)Z delimiter_reZquotes�
ldapserverZURI�
ldapbasednZBASE)r r2 r3 rX �setrW rV )r �configr r r rV � s �
zConfiguration.LDAP.write�r r! r" r rV �
__classcell__r r rj r rh � s rh c s4 e Zd Z� fdd�Zdd� Zdd� Zdd� Z� ZS ) zConfiguration.Kerberosc s t tj| ��|� d S r )rg rK �Kerberosr ri rj r r r � s z Configuration.Kerberos.__init__c C s0 | � d�s| � d�sd S | �d�dkp.| �d�S )N� krb5realm� krb5realmdns� )rX rW rZ r r r r rO � s z Configuration.Kerberos.isEnabledc C s, | � d�s| � d�sd S | �t�d�� d S )Nrs rt r: )rX re r2 r3 r r r r rU � s z Configuration.Kerberos.cleanupc C s� | � � r d S t�d�}t|t�d��}| �d�}| �d�| �d�| �d�|rV| �d�nd |rf| �d�nd |rt|�� nd d�}|�|� d S ) Nz snippets/authconfig-krb.confr: rs Z
krb5kdcdnsrt �krb5kdc�krb5adminserver)�realmzkdc-srvz realm-srvZkdcZ adminserver�domain)rP r2 rC r r3 rW �lowerrV )r rF ro rx �keysr r r rV � s
� z Configuration.Kerberos.write�r r! r" r rO rU rV rq r r rj r rr � s rr c s4 e Zd Z� fdd�Zdd� Zdd� Zdd� Z� ZS ) zConfiguration.SSSDc s t tj| �j|dd� d S )N�sssd�rN )rg rK �SSSDr ri rj r r r � s zConfiguration.SSSD.__init__c C s, | � d�s| � d�sd S | �d�p*| �d�S )N�ldapr} r[ r r r r rO � s z Configuration.SSSD.isEnabledc C s | � t�d�� d S )Nr; )re r2 r3 r r r r rU s zConfiguration.SSSD.cleanupc C s� | � d�sd S t�d�}t|t�d��}| � d�r6dnd }| �d�| �d�| �d�|| �d�| �d �| �d
�| �d �| �d �| �d
�d�
}|�|� tj t�d�dd� d S )Nr� z snippets/authconfig-sssd.confr; Z
rfc2307bisrl rm Zldaptls�krb5rv rw rs Z
cachecreds� smartcard)
zldap-uriz ldap-basednzldap-tlsz ldap-schemar� zkdc-uriz kpasswd-urirx z cache-credsz cert-authi� )�mode)
rZ r2 rC r r3 rW rY rV rE �chmod)r rF ro Zschemar{ r r r rV s$
�
zConfiguration.SSSD.writer| r r rj r r � s r c s, e Zd Z� fdd�Zdd� Zdd� Z� ZS )zConfiguration.Winbindc s t tj| �j|dd� d S )N�winbindr~ )rg rK �Winbindr ri rj r r r s z Configuration.Winbind.__init__c C s, | � d�s| � d�sd S | �d�p*| �d�S )Nr� � winbindauthr[ r r r r rO # s z Configuration.Winbind.isEnabledc C s� | � d�sd S | j�d��dd�}|d }d }t|�dkrF|d d }ddd| d d
g}| � d �rr|�| �d �� tt�d �||d
�}z |� � W n( t
y� t t d�t�d � � Y n0 d S )NZ winbindjoin�%r0 r �
r z-Uz"%s"z--client-softwarer� Z smbworkgroupr@ )r z)%s was not found. Please, install realmd.)
rX rL rW �split�len�appendr r2 r3 r rc r
r )r Zcreds�user�passwordr r* r r r rV ) s(
�
�zConfiguration.Winbind.write)r r! r" r rO rV rq r r rj r r� s r� c s$ e Zd Z� fdd�Zdd� Z� ZS )zConfiguration.PWQualityc s t tj| ��|� d S r )rg rK � PWQualityr ri rj r r r E s z Configuration.PWQuality.__init__c
C s� t t�d��}d}| �d�| �d�| �d�| �d�| jddd d
d �| jd dd d
d �| jd
dd d
d �| jddd d
d �d�}|�� D ]4\}}|d ur�t|d t|� � |�||� d
}q�|r�|� � d S )Nr> FZ
passminlenZ passminclassZ
passmaxrepeatZpassmaxclassrepeatZreqlower���r T)r^ ZrequpperZreqdigitZreqother)ZminlenZminclassZ maxrepeatZmaxclassrepeatZlcreditZucreditZdcreditZocredit�=)
r r2 r3 rW r` �itemsr �strrn rV )r ro Z value_setZpwopts�optr_ r r r rV H s$ � z Configuration.PWQuality.writerp r r rj r r� D s r� c s, e Zd Z� fdd�Zdd� Zdd� Z� ZS )zConfiguration.MakeHomedirc s t tj| �j|dd� d S )NZoddjobdr~ )rg rK � MakeHomedirr ri rj r r r b s z"Configuration.MakeHomedir.__init__c C s | � d�sd S | �d�S )N� mkhomedirr[ r r r r rO e s
z#Configuration.MakeHomedir.isEnabledc C s d S r r rS r r r rT k s z(Configuration.MakeHomedir.disableService)r r! r" r rO rT rq r r rj r r� a s r� N) r r! r" �objectrf rh rr r r� r� r� r r r r rK } s E$)% rK c @ sL e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dS )�
AuthCompatc C sB t t�d��| _t� | _| j�� | j�| j� | j�| j� d S )Nr< ) r r2 r3 � sysconfigr rL �parseZapplysysconfigZupdatesysconfigr r r r r q s
zAuthCompat.__init__c C sl t td�� t td�� t td�� t td�� | j�� }|r`t td�� |D ]}t d| � qNt d� d S )Nz&Running authconfig compatibility tool.z�The purpose of this tool is to enable authentication against chosen services with authselect and minimum configuration. It does not provide all capabilities of authconfig.
zLIMPORTANT: authconfig is replaced by authselect, please update your scripts.zHSee man authselect-migration(7) to help you with migration to authselectzDWarning: These options are not supported anymore and have no effect:z --%sru )r r rL ZgetSetButUnsupported)r rL r% r r r � printWarningy s
zAuthCompat.printWarningc C s$ t jD ]}td|j|jf � qd S �Nz%s=%s)r �Listr r% r_ )r �optionr r r � printOptions� s
zAuthCompat.printOptionsc C s( | j �� D ]}td|j|jf � q
d S r� )r� Zgetallr r% r_ )r �liner r r �printSysconfig� s zAuthCompat.printSysconfigc C s� g d�}g d�}| j �d�s8t�� dkr8ttd�� dS |D ]&}| j �|�r<ttd| �� dS q<| j �d�| j �d �kr�ttd
�� dS |D ]}| j �|�r� d S q�ttd �� dS )
N)�testZprobeZ
restorebackupZrestorelastbackup)�updateZ updateallZ kickstartr� r z"authconfig can only be run as rootFzNError: option --%s is no longer supported and we cannot continue if it is set.r� r� z@Error: Both --enablewinbind and --enablewinbindauth must be set.Tz*Error: Please, provide --updateall option.)rL rZ rE �getuidr r )r Z
disallowedr, r� r r r � canContinue� s& � zAuthCompat.canContinuec C s< dddddddd�}| � � \}}| j�d �sP| j�d
�sP| j�d �sP| j�d �rVd }n| j�d
�rfd
}|d u rrd }|�� D ]F\}}| j�|�s�qz| j�|�}|r�|�|� qz||v rz|�|� q�qz| j�d�r�t| j�d��dkr�|�d� n
|�d� t t
|��}d|g}|� |� |�d� t t
�d�|�}|�� d S )Nzwith-smartcardzwith-smartcard-requiredzwith-fingerprintzwith-mkhomedirz
with-faillockzwith-pamaccessz with-krb5)r� ZrequiresmartcardZ fingerprintr� ZfaillockZ pamaccessZ winbindkrb5r� Zldapauthr} Zsssdauthr� Zsmartcardactionr z with-smartcard-lock-on-removalZselectz--forcer? )�getCurrentAuthselectConfigrL rZ r� rX r� rb �intrW �listrn �extendr r2 r3 r ) r �mapZprofileZfeaturesr� Zfeature�enabledr r* r r r �
runAuthselect� sN �
�
�
�
zAuthCompat.runAuthselectc C s~ t t�d�dgdd�}|�� |jd u s4|jjdkr<d g fS t t�d�ddg�}|�� |jj�d��� }|d |d d � fS )
Nr? r F)r r �currentz--rawzutf-8r0 ) r r2 r3 r r r) r r+ r� )r r* r� r r r r� � s z%AuthCompat.getCurrentAuthselectConfigc C s� t �| j�t �| j�t �| j�t �| j�t �| j�t �| j�g}|D ]�}|�� | j� d�}z:|�
� }|d u rrW qD|r�|� |� n|� |� |�
� W qD tjy� } z8ttd�d�|j�|jf � t|j�� � W Y d }~qDd }~0 0 qDd S )NrQ r' r )rK rh rL rr r r� r� r� rV rZ rO rR rT rU r r( r
r r r* r) r r+ )r Zconfigsro rQ r� r r r r �writeConfiguration� s.
�
�z AuthCompat.writeConfigurationN) r r! r" r r� r� r� r� r� r� r� r r r r r� p s <
r� c
C s� zt �t jd� W n t jy2 tj�d� Y n0 t� } | �� | j �
d�t _ | j �
d�t
_ | j �
d�t_ | �� s~t�d� z | �� | �� | j�� W nR tjy� } z8ttd�d�|j�|jf � t|j�� � W Y d }~n
d }~0 0 t�d� d S )Nru z%Warning: Unsupported locale setting.
ra r0 r' r r ) �locale� setlocale�LC_ALL�Errorr r rV r� r� rL rZ r r r r r� �exitr� r� r� r r( r
r r r* r) r+ )Z
authcompatr r r r �main s*
�$r� �__main__)rE r r� �gettextr Zauthcompat_Optionsr Zauthcompat_EnvironmentFiler Zauthcompat_ConfigSnippetr r r
r r# r2 rK r� r� r r r r r �<module> s& # t ,