| Server IP : 198.38.94.13 / Your IP : 216.73.217.33 Web Server : Apache System : Linux d4744.dxb1.stableserver.net 5.14.0-611.49.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Apr 21 16:39:08 EDT 2026 x86_64 User : revivere ( 1140) PHP Version : 8.2.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /lib/python3.9/site-packages/ipaplatform/debian/__pycache__/ |
Upload File : |
a
�ji� � @ s� d Z ddlmZ ddlZddlZddlZddlmZ ddlm Z ddl
m Z ddl m
Z
ddlmZ dd lmZ dd
lmZ e�e�ZG d d � d e �Ze� ZdS )
zO
This module contains default Debian-specific implementations of system tasks.
� )�absolute_importN)�Path)�BaseTaskNamespace)�RedHatTaskNamespace)�paths)�directivesetter)�ipautil)�DNc @ s� e Zd Zedd� �Zedd� �Zed&dd��Zed d
� �Zed d � �Zed
d� �Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%S )'�DebianTaskNamespacec C s. zt �g d�� W n t jy( Y dS 0 dS )N)�pam-auth-update� --packagez--remove� mkhomedirFT�r �runZCalledProcessError)�fstore�
statestoreZwas_sssd_installedZwas_sssd_configured� r �</usr/lib/python3.9/site-packages/ipaplatform/debian/tasks.py�$restore_pre_ipa_client_configuration s
z8DebianTaskNamespace.restore_pre_ipa_client_configurationc C s dS �NTr )Z nisdomainr r r �
set_nisdomain' s z!DebianTaskNamespace.set_nisdomainTFc C s: |r2zt �g d�� W n t jy, Y dS 0 dS dS d S )N)r r z--enabler
FTr )Zsssdr
r ZsudoZsubidr r r �modify_nsswitch_pam_stack, s z-DebianTaskNamespace.modify_nsswitch_pam_stackc C s dS r r )r r r r �modify_pam_to_use_krb59 s z*DebianTaskNamespace.modify_pam_to_use_krb5c C s dS r r ��pathr r r �backup_auth_configuration> s z-DebianTaskNamespace.backup_auth_configurationc C s dS r r r r r r �restore_auth_configurationC s z.DebianTaskNamespace.restore_auth_configurationc C s dS r r ��selfr r r r �migrate_auth_configurationH s z.DebianTaskNamespace.migrate_auth_configurationc C s d S �Nr �r r r r �configure_httpd_wsgi_confL s z-DebianTaskNamespace.configure_httpd_wsgi_confc C s t �tjddd� d S )NZ SSLProtocolzTLSv1.2F)r Z
set_directiver ZHTTPD_SSL_CONFr! r r r �configure_httpd_protocolP s �z,DebianTaskNamespace.configure_httpd_protocolc C s d S r r r! r r r �setup_httpd_loggingV s z'DebianTaskNamespace.setup_httpd_loggingc C s d S r r �r r r r r �configure_pkcs11_modulesZ s z,DebianTaskNamespace.configure_pkcs11_modulesc C s d S r r r% r r r �restore_pkcs11_modules^ s z*DebianTaskNamespace.restore_pkcs11_modulesc C sP z| � tj|�f W n ty0 t�d� Y n0 t| �tj|�| � tj
�g�S )Nz�Could not create p11-kit anchor trust file. On Debian this file is not
used by ca-certificates and is provided for information only.) Zwrite_p11kit_certsr � IPA_P11_KIT� Exception�logger� exception�any�write_ca_certificates_dir�CA_CERTIFICATES_DIR� remove_ca_certificates_bundle�CA_CERTIFICATES_BUNDLE_PEM)r �ca_certsr r r �platform_insert_ca_certsa s ���z,DebianTaskNamespace.platform_insert_ca_certsc s� ddl m} t|�}z|jddd� W n tyF t�d|� � Y n0 |D �]x\}}}}} |sbqLt|j�}
t|j �} |
�
� � d|j � d�} h d �� d
� � fd d �| D ��}
t
j� ||
�}zt|d
�}W n ty� t�d|� � Y n0 |�� zt
�|�� d� W n" t�y& t�d|� � Y n0 zZ|�d|� d|
�
� � d| �
� � d|j � d|j d�d� � |�|jj��d�}|�|� W n" t�y� t�d|� � Y n0 W d � qL1 �s�0 Y qLdS )Nr )�x509i� T)�mode�exist_okzCould not create %s� z.crt> �/� �:� c 3 s | ]}|� v rd n|V qdS )�-Nr )�.0�c�Z bad_charsr r � <genexpr>� � z@DebianTaskNamespace.write_ca_certificates_dir.<locals>.<genexpr>�wi� zCould not set mode of %sz9This file was created by IPA. Do not edit.
Description: z
Subject: z
Issuer: z
Serial Number (dec): z
Serial Number (hex): z#xz
�asciizCould not write to %s)Zipalibr3 r �mkdirr) r* �errorr �subject�issuerZ ldap_textZ
serial_number�join�osr �open�fchmod�fileno�writeZ public_bytesZEncodingZPEM�decode)r � directoryr1 r3 r ZcertZnicknameZtrustedZ_ext_key_usageZ_serialrE rF �filenameZ
safe_filenameZ cert_path�fZpemr r> r r- u s^
� �����
*z-DebianTaskNamespace.write_ca_certificates_dirc C s& t | �tj�| �tj�| �tj�g�S r )r, �remove_ca_certificates_dirr r. r/ r( r0 r! r r r �platform_remove_ca_certs� s
��z,DebianTaskNamespace.platform_remove_ca_certsc C sJ t tj�}|�� sdS zt�|� W n tyD t�d|� � Y n0 dS )NFzCould not remove %sT) r r r. �exists�shutil�rmtreer) r* rD )r rN r r r r rQ � s
z.DebianTaskNamespace.remove_ca_certificates_dirc C s t �| |�S r )r �disable_ldap_automountr r r r rV � s z*DebianTaskNamespace.disable_ldap_automountN)TF)�__name__�
__module__� __qualname__� staticmethodr r r r r r r r" r# r$ r& r' r2 r- rR rQ rV r r r r r
s2
�
I r
)�__doc__Z
__future__r ZloggingrH rT �pathlibr Zipaplatform.base.tasksr Zipaplatform.redhat.tasksr Zipaplatform.pathsr Z ipapythonr r Z ipapython.dnr Z getLoggerrW r* r
Ztasksr r r r �<module> s
>