|
Server : Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 System : Linux server.jackjohnson.com 2.6.32-279.5.2.el6.x86_64 #1 SMP Fri Aug 24 01:07:11 UTC 2012 x86_64 User : jackjohn ( 502) PHP Version : 5.3.17 Disable Function : NONE Directory : /usr/share/authconfig/ |
Upload File : |
E&Qc K @ sR d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k
Z
d d k Z d d k Z d d k
Z
d d k Z d d k Td d k Z d d k Z e i Z y d d k a Wn e j
o
d a n Xd Z d Z d Z d Z d Z d Z d Z d
Z d Z d Z d
e! e" d j o
d Z# n d Z# e# d Z$ d Z% d Z& d Z' d Z( d Z) d Z* d Z+ d Z, d Z- d Z. d Z/ d Z0 d Z1 d Z2 d Z3 d! Z4 d" Z5 d# Z6 d$ Z7 d% Z8 d& Z9 d' Z: d( Z; d) Z< d* Z= d+ Z> d, Z? d- Z@ e# d. ZA d/ e# d0 ZB e iC iD eB p e# d0 ZB n e# d1 ZE e# d2 ZF e# d3 ZG e# d4 ZH e# d5 ZI e# d6 ZJ e$ d7 ZK e$ d8 ZL e$ d9 ZM e$ d: ZN e$ d; ZO e$ d< ZP d= ZQ d> ZR d? ZS d@ ZT dA ZU e dB ZV dC ZW dD ZX dE ZY dF ZZ dG Z[ dH Z\ dI Z] dJ Z^ dK Z_ dL Z` dM Za dN Zb dO Zc dP Zd dQ Ze dR Zf dS Zg dT Zh dU Zi dV Zj dW Zk dX Zl dY Zm dZ Zn d[ Zo d\ Zp d] Zq d^ g Zr d^ d_ g Zs d` g Zt d` g Zu d^ da db g Zv dc g Zw d` g Zx d_ g Zy g Zz dd g Z{ de dd g Z| d` g Z} d` df g Z~ d_ g Z d` g Z d_ g Z d` g Z dg dh g Z di dh g Z dj dh dk g Z dl dh dk g Z d` g Z d_ g Z d` g Z d_ g Z dm g Z dn do dp dq dr g Z e ds dt \ Z Z Z Z du dv dw dx g Z e ds dy \ Z Z Z Z Z e ds dt \ Z Z Z Z g Z e e e e f D]
Z e g qe[ Z e e eW dz g g e e ea d{ e g e e e] d| e{ g e e eZ d} e~ g e e eY d~ g g e e eY d g g e e eY d er g e e eX d{ e g e e eY d e g e e eY d et g e e eY d et g e e eY d ex g e e eY d} e} g e e eY d e g e e eY d e g e e eY d e g e e eW d g g e e eW d g g e e eW d g g e e eY d g g e e eY d{ e g e e e[ d g g e e e[ d g g e e e[ d} g g e e e[ d g g e e eW d~ g g e e eX d ev g e e eX d ew g e e eY d es g e e eY d e g e e eY d eu g e e eY d eu g e e eY d ey g e e eY d} e g e e eY d e g e e eY d e g e e eW d g g e e eZ d e g e e eW d g g e e eZ d g g e e ea d{ e g e e eW d g g e e eZ d g g e e eZ d g g e e eZ d g g e e eZ d} g g e e eZ d g g g/ e e <e e eW dz g g e e eW d g g e e eY d er g e e eX d{ e g e e eY d e g e e eY d et g e e eY d et g e e eY d ex g e e eY d} e} g e e eY d e g e e eY d e g e e eY d e g e e eW d g g e e eW d g g e e eW d g g e e eY d g g e e eY d{ e g e e e[ d g g e e e[ d g g e e e[ d} g g e e e[ d g g e e eW d~ g g e e eX d ev g e e eX d ew g e e eY d es g e e eY d e g e e eY d eu g e e eY d eu g e e eY d ey g e e eY d} e g e e eY d e g e e eY d e g e e eW d g g e e eZ d e g e e eW d g g e e eZ d g g e e ea d{ e g e e eW d g g e e eZ d g g e e eZ d g g e e eZ d g g e e eZ d} g g e e eZ d g g g+ e e <e e eW dz g g e e eW d g g e e eY d g g e e eW d g g e e eW d g g e e eW d g g e e eY d g g e e eY d{ e g e e e[ d g g e e e[ d g g e e e[ d} g g e e e[ d g g e e eW d~ g g e e eW d g g e e eZ d e g e e eW d g g e e eZ d g g e e ea d{ e g e e eW d g g e e eZ d g g e e eZ d g g e e eZ d g g e e eZ d} g g e e eZ d g g g e e <e e eW dz g g e e e] d| e| g e e eZ d} e~ g e e eY d~ g g e e eW d g g e e eW d g g e e eW d g g e e eY d g g e e eY d{ e g e e e[ d g g e e e[ d g g e e e[ d} g g e e e[ d g g e e eW d~ g g e e eW d| g g e e eZ d e g e e eW d g g e e eZ d g g e e ea d{ e g e e eW d g g e e eZ d g g e e eZ d g g e e eZ d g g e e eZ d} g g e e eZ d g g g e e <d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d d d YZ d d d YZ d d d YZ d Z d Z d e f d YZ e ds d \ Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d d e d e d e e d e d e e d e d e e d e d e e d e d e d e d e d e d e d e d e d e dB g Z h d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6Z d d d YZ d S( iN( t *s /etcs system-auths system-auth-acs
password-auths password-auth-acs fingerprint-auths fingerprint-auth-acs smartcard-auths smartcard-auth-act defaultt lib64t acutils /lib64s /libs /securitys /usr/sbin/pwconvs
/sbin/rpcbinds /usr/sbin/nscds /var/run/nscd/nscd.pids /usr/sbin/nslcds /var/run/nslcd/nslcd.pids /usr/sbin/dbbinds /var/run/dbbind.pids /usr/sbin/dbibinds /var/run/dbibind.pids /usr/sbin/hesiodbinds /var/run/hesiodbind.pids /usr/sbin/ldapbinds /var/run/ldapbind.pids /usr/sbin/odbcbinds /var/run/odbcbind.pids /usr/sbin/winbindds /var/run/winbindd.pids /usr/sbin/sssds /var/run/sssd.pids /usr/sbin/ypbinds /var/run/ypbind.pids /usr/sbin/oddjobds /var/run/oddjobd.pids /usr/sbin/setsebools /usr/bin/pkcs11_eventmgrs /var/run/sceventd.pids /usr/bin/pkcs11_setups /libnss_db.so.2s /usrs /libnss_ldap.so.2s /libnss_nis.so.2s /libnss_hesiod.so.2s /libnss_odbcbind.so.2s /libnss_winbind.so.2s /libnss_wins.so.2s /libnss_sss.so.2s /pam_krb5.sos /pam_ldap.sos /pam_winbind.sos /pam_pkcs11.sos /pam_fprintd.sos /pam_sss.sos /usr/bin/nets /usr/sbin/ipa-client-installs /etc/openldap/cacertss authconfig_downloaded.pems /var/lib/authconfigs /sssd/sssd.conft requiredt requisitet
sufficientt optionals, [default=bad success=ok user_unknown=ignore]sJ [default=bad success=ok auth_err=ignore user_unknown=ignore ignore=ignore]s@ [success=done authinfo_unavail=ignore ignore=ignore default=die]s( [success=done ignore=ignore default=die]s4 [success=ok authinfo_unavail=2 ignore=2 default=die]s! [success=ok ignore=2 default=die]s [success=1 default=ignore]s [success=3 default=ignore]c C s | i d d d i S( Ns
i i ( t splitt rstrip( t s( ( s! /usr/share/authconfig/authinfo.pyt
snipString s c C s= | p | S| i d d } d i t d | i d S( Ns t t ,( t replacet joint filtert NoneR ( t lstR
( ( s! /usr/share/authconfig/authinfo.pyt cleanList s c C s- | i | o | t | i St Sd S( N( t
startswitht lent lstript False( t linet key( ( s! /usr/share/authconfig/authinfo.pyt matchKey s c C s7 | i | o | t | i t i d St Sd S( Nt =( R R R t stringt
whitespaceR ( R R ( ( s! /usr/share/authconfig/authinfo.pyt matchKeyEquals s c C s
| i | S( N( R ( R R ( ( s! /usr/share/authconfig/authinfo.pyt matchLine s c C s | i i | i S( N( t lowerR ( R R ( ( s! /usr/share/authconfig/authinfo.pyt
matchLineI s c C s | o
| d | S| Sd S( NR
( ( R t value( ( s! /usr/share/authconfig/authinfo.pyt commaAppend s
c C sV | o
| o t S| p | o t S| o | | j S| i | i j Sd S( N( R t TrueR ( t at bt case_sensitive( ( s! /usr/share/authconfig/authinfo.pyt
stringsDiffer s c C s | i d d } t | d j o | d } n d } t | } x t o | i | | } | d j o d S| d j o& | | d i o | | 7} qH n | | t | j o& | | | i o | | 7} qH n | SWd S( Nt :i i ( R R R$ t findR t isalnum( t
configurationt candidateR t startt clen( ( s! /usr/share/authconfig/authinfo.pyt checkNSS s$
"
,
c C s d } yS t i | | | } | t i j o t i | t i n t i | t i Wnb t j
oV \ } } | d j o+ y t i | Wq t j
o q Xn t | | n X| S( Ni(
t ost opent O_RDONLYt fcntlt lockft LOCK_SHt LOCK_EXt OSErrort closet IOError( t filenamet modet permst fdt errnot strerr( ( s! /usr/share/authconfig/authinfo.pyt openfdLocked s
c C s& t i t | t i t i B| d S( Ns r+( R1 t fdopenRA t O_RDWRt O_CREAT( R; R= ( ( s! /usr/share/authconfig/authinfo.pyt
openLocked s c C sG d } | i d } x+ | D]# } | o | d | d 7} q q W| S( Nt R
s kdc = s
( R ( t kdclistt outputt kdc( ( s! /usr/share/authconfig/authinfo.pyt krbKdc s c C sM d } | i d } x1 | D]) } | o | d 7} | | d 7} q q W| S( NRF R
s admin_server = s
( R ( t adminserversRH t adminserver( ( s! /usr/share/authconfig/authinfo.pyt krbAdminServer s
c C sQ d } | o@ | d | d 7} | t | 7} | t | 7} | d 7} n | S( NRF R s = {
s }
( RJ RM ( t realmRG RK RH ( ( s! /usr/share/authconfig/authinfo.pyt krbRealm s c C s | i d d } t | d j o
d } n | d } | d i i d } | i i d } | | j o | i t i d St S( NR i i RF i ( R R R R R R R R ( R R t linelstt paramt keylst( ( s! /usr/share/authconfig/authinfo.pyt matchLineSMB s
t try_first_passt use_authtokt use_first_passs retry=3s type=s
enforce=userst card_onlyt
wait_for_cardt no_subsequent_prompts
uid >= 500t quiets uid < 500s service in crondt use_uidsK service notin login:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensavert revoket descryptt bigcryptt md5t sha256t sha512i i t autht accountt sessiont passwordi t envt
succeed_ift pkcs11t krb5t permitt fprintdt unixt ssst afss afs.krbt eps_autht ldapt otpt winbindt denyt accesst localusert cracklibt passwdqct
eps_passwdt keyinitt limitst mkhomedirc C s/ d } | i d } | | i d d 7} | S( Ns DC=t .s ,DC=( R R ( t domainRH ( ( s! /usr/share/authconfig/authinfo.pyt domain2dn s i c C ss | ph | o) | p t i d n t i d qo y t i t t i d Wqo t j
o qo Xn t S( Ns' /sbin/service nscd stop >/dev/null 2>&1s /sbin/service nscd starts /sbin/service nscd stop( R1 t systemt statt
PATH_NSCD_PIDR8 R$ ( t
enableCachingt nostartt onlystart( ( s! /usr/share/authconfig/authinfo.pyt toggleCachingService s
c C s | o0| o)| p t i d | n y[ t i t t i d t i d | p) | p t i d n t i d n Wn t j
o n Xy t i t t i d t i d | pP y) t i t | p t i d n Wq t j
o t i d q Xn Wqt j
o qXn | p t i d
n y] t i t | p8 y t i t t i d Wqt j
o qXn t i d Wn t j
o n Xt S(
Ns /bin/domainname s /sbin/chkconfig --add rpcbinds& /sbin/chkconfig --level 345 rpcbind ons* /sbin/service rpcbind stop >/dev/null 2>&1s /sbin/service rpcbind starts /sbin/chkconfig --add ypbinds% /sbin/chkconfig --level 345 ypbind ons /sbin/service ypbind restarts /sbin/service ypbind starts /bin/domainname "(none)"s /sbin/service ypbind stops& /sbin/chkconfig --level 345 ypbind off( R1 R R t PATH_RPCBINDR8 t PATH_YPBINDt PATH_YPBIND_PIDR$ ( t enableNist nisDomainR R ( ( s! /usr/share/authconfig/authinfo.pyt toggleNisService sP
c C s | o yw t i | t i d | t i d | d | p9 | p t i d | d n t i d | d n Wqt j
o qXn ym t i | | p@ y& t i | t i d | d Wq t j
o q Xn t i d | d Wn t j
o n Xt S( Ns /sbin/chkconfig --add s /sbin/chkconfig --level 345 s ons /sbin/service s stop >/dev/null 2>&1s starts stops off( R1 R R R8 R$ ( t enablet patht pidfilet nameR R ( ( s! /usr/share/authconfig/authinfo.pyt toggleSplatbindService
s.
c C s | o d Sd Sd S( Nt enabledt disabled( ( t val( ( s! /usr/share/authconfig/authinfo.pyt
formatBool% s c C si y t i \ } } Wn t j
o d SX| p t i | } t i | n d } y7 t i | t i } t i | t i | t i @ Wn t j
o n Xt
} x0| p(y7 g }
g } t i | g g | g d \ }
} } Wn6 t i j
o' \ }
} t
i i d | d n X|
o" | o t i | t } q n d } y t i | d } Wn t j
o \ }
} |
t i j p |
t i j o q |
t i j o t i | t } q t
i i d | d t i | t } q n X| o yp | | 7} | o t
i i | n | | j o: t i | | t i | d d } t
i i d n Wqt j
o: \ }
} t
i i d
| d t i | t } qXq t i | t } q Wy t i | t i Wn t j
o n Xd } y t i | d \ } } Wn3 t j
o' \ }
} t
i i d | d n X| S(
Ni RF i< s select: s
i s read: s
s <...>
s write: i s waitpid: ( R1 t forkptyR8 R t _exitR4 t F_GETFLt F_SETFLt
O_NONBLOCKR: R t selectt errort syst stderrt writeR9 R$ t readR? t EINTRt EAGAINt EIOt killt signalt SIGTERMt waitpid( t commandt echot queryt responset pidt mastert statusRH t it eoft ifdst efdst ofdst errt textt ct child( ( s! /usr/share/authconfig/authinfo.pyt feedFork+ s " +
c
C s y t i | } Wn t j
o t SXxW | D]O } y3 t i | d | } t i | i o t SWq1 t j
o q1 Xq1 Wt S( Nt /( R1 t listdirR8 R$ R t S_ISREGt st_modeR ( R R R; t st( ( s! /usr/share/authconfig/authinfo.pyt
isEmptyDirr s c C s yg t t g | d t } | i d i d } | i d j o d S| d d j o | d 3n Wn t j
o d SX| S( Nt stdouti s
iRF ( t Popent PATH_SCSETUPt PIPEt communicateR t
returncodeR R8 ( t optionsR R ( ( s! /usr/share/authconfig/authinfo.pyt callPKCS11Setup s c C s% t d g } | d j o g S| S( Nt list_modules( R R ( t mods( ( s! /usr/share/authconfig/authinfo.pyt getSmartcardModules s
c C s t d t d g S( Nt Lockt Ignore( t _( ( ( s! /usr/share/authconfig/authinfo.pyt getSmartcardActions s c C s t | } | i | S( N( t AuthInfoR ( t msgcbt info( ( s! /usr/share/authconfig/authinfo.pyR s
t SaveGroupc B s e Z d Z d Z RS( c C s | | _ | | _ d S( N( t saveFunctiont attrlist( t selft savefuncR ( ( s! /usr/share/authconfig/authinfo.pyt __init__ s c C s x | i D] \ } } | | i j o t S| d j o( t | | t | | j o t Sq
| d j o. t t | | t | | t o t Sq
| d j o. t t | | t | | t o t Sq
q
Wt S( NR& R R ( R t inconsistentAttrsR$ t getattrR( R ( R R% R& t anamet atype( ( s! /usr/share/authconfig/authinfo.pyt attrsDiffer s
%
%
( t __name__t
__module__R R ( ( ( s! /usr/share/authconfig/authinfo.pyR s t SafeFilec B s5 e Z d Z d Z d Z d Z d Z RS( c C s t i i | \ } } t i d | d | d t | _ t d d | | i i g d t i d t i
d j o t i | i i | n | | _
d S( Nt dirt prefixt deletes /bin/cps -afR s /dev/nulli ( R1 R R t tempfilet NamedTemporaryFileR$ t filet callR R2 t O_WRONLYt fchmodt filenoR; ( R R; t default_modet baseR ( ( s! /usr/share/authconfig/authinfo.pyR s ! c C s@ | i i t i | i i t i | i i | i d S( N( R t flushR1 t fsyncR t renameR R; ( R ( ( s! /usr/share/authconfig/authinfo.pyt save s
c C s+ y | i i Wn t j
o n Xd S( N( R R9 R8 ( R ( ( s! /usr/share/authconfig/authinfo.pyR9 s c C s | i i | S( N( R R ( R R
( ( s! /usr/share/authconfig/authinfo.pyR s c C s$ | i i d | i i d d S( Ni ( R t seekt truncate( R ( ( s! /usr/share/authconfig/authinfo.pyt rewind s ( R R R R R9 R R ( ( ( s! /usr/share/authconfig/authinfo.pyR s
t
FileBackupc B s, e Z d Z d Z d Z d Z RS( c C s | | _ | | _ d S( N( t
backupNamet origPath( R t
backupnamet origpath( ( s! /usr/share/authconfig/authinfo.pyR s c C su t } d } d } y t | t i d } Wn t j
o t SXy t | d } | i Wn t j
o
t } n XyP xI | oA t i | d } | p t } Pn t i
| i i | q WWn t t
f j
o
t } n Xy | o t i | n Wn t t
f j
o n Xy* | o | o | i | i n Wn t t
f j
o
t } n X| S( Ni i i ( R$ R RA R1 R3 R: R R R R R R R R8 R9 R ( R t srct destt rvt srcfdt destfileR& ( ( s! /usr/share/authconfig/authinfo.pyt safeCopy sD "
c C s t } y( t i i | p t i | n Wn t t f j
o
t } n X| d | i } | o | i | i
| } n | S( NR ( R$ R1 R t isdirt mkdirR8 R: R R R R ( R t destdirR t
backuppath( ( s! /usr/share/authconfig/authinfo.pyt backup s
c C s t } y t i i | p t SWn t t f j
o
t } n X| d | i } | o, t i i | o | i | | i
} n | S( NR ( R$ R1 R R R R: R8 R t isfileR R ( R t backupdirR R ( ( s! /usr/share/authconfig/authinfo.pyt restore s ( R R R R R R ( ( ( s! /usr/share/authconfig/authinfo.pyR s % c C s2 t i d } t i | o t i | d j S( Ns$ /sbin/chkconfig nscd >/dev/null 2>&1i ( R1 R t WIFEXITEDt WEXITSTATUS( R ( ( s! /usr/share/authconfig/authinfo.pyt readCache s c C s] | o t i d t i d n5 y t i t t i d Wn t j
o n Xt S( Ns /sbin/chkconfig --add nscds# /sbin/chkconfig --level 345 nscd ons$ /sbin/chkconfig --level 345 nscd off( R1 R R t PATH_NSCDR8 R$ ( R ( ( s! /usr/share/authconfig/authinfo.pyt
writeCache s
t CacheBackupc B s e Z d Z d Z RS( c C s t } y( t i i | p t i | n Wn t t f j
o
t } n X| d | i } | op d } y5 t
} t | d } | i t
t | Wn t j
o
t } n X| o | i q n | p+ y t i | Wq
t j
o q
Xn | S( NR t w( R$ R1 R R R R8 R: R R R R R2 R t strt intR9 t unlink( R R R R R R ( ( s! /usr/share/authconfig/authinfo.pyR & s. c
C s t } y t i i | p t SWn t t f j
o
t } n X| d | i } | o t i i | os d } y/ t
| d } t | i } t
| Wn" t t t f j
o
t } n X| o | i q n | S( NR t r( R$ R1 R R R R: R8 R R R R2 R R R t
ValueErrorR9 ( R R R R R R ( ( s! /usr/share/authconfig/authinfo.pyR B s$ ( R R R R ( ( ( s! /usr/share/authconfig/authinfo.pyR % s i s hesiod.confs /hesiod.confs yp.confs /yp.confs ldap.confs
/ldap.confs
nss_ldap.confs /nss_ldap.confs
pam_ldap.confs /pam_ldap.confs
nslcd.confs /nslcd.confs
openldap.confs /openldap/ldap.confs krb5.confs
/krb5.confs krb.confs /krb.confs pam_pkcs11.confs /pam_pkcs11/pam_pkcs11.confs smb.confs /samba/smb.confs
nsswitch.confs /nsswitch.confs cacheenabled.confRF s /pam.d/t
authconfigs /sysconfig/authconfigt networks /sysconfig/networks libuser.confs
/libuser.confs
login.defss /login.defss sssd.conft ldap_urit
ldapServert ldap_search_baset
ldapBaseDNt ldap_id_use_start_tlst enableLDAPSt ldap_schemat
ldapSchemat ldap_tls_cacertdirt
ldapCacertDirt krb5_servert kerberosKDCt krb5_kpasswdt kerberosAdminServert
krb5_realmt
kerberosRealmt cache_credentialst enableCacheCredsR c B sQ e Z d Z d Z d Z d Z d Z d Z d Z d Z d Z
d Z d
Z d Z
d Z d
Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z! d Z" d! Z# d" Z$ d# Z% d$ Z& d% Z' d& Z( d' Z) d( Z* d) Z+ d* Z, d+ Z- d, Z. d- Z/ d. Z0 d/ Z1 d0 Z2 d1 Z3 d2 Z4 d3 Z5 d4 Z6 d5 Z7 d6 Z8 d7 Z9 d8 Z: d9 Z; d: Z< d; Z= d< Z> d= Z? d> Z@ d? ZA d@ ZB RS(A c 2 C s | | _ d | _ g | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _
d | _ d | _ d | _
d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ t | _ d | _! d | _" d | _# d | _$ d | _% d | _& d | _' d | _( d | _) d | _* d | _+ d | _, d | _- d | _. d | _/ d | _0 d | _1 d | _2 d | _3 d | _4 d | _5 d | _6 d | _7 d | _8 t9 | _: d | _; d | _< d | _= d | _> d | _? d | _@ d | _A d | _B d | _C d | _D d | _E d | _F d | _G d | _H d | _I d | _J d | _K d | _L d | _M d | _N d | _O t | _P t | _Q d | _R d | _S d | _T d | _U d | _V d | _W d | _X d | _Y d | _Z d | _[ d | _\ t9 | _] d | _^ d | __ d | _` t | _a tb o- y tb ib | _^ Wqtc j
o qXn td | ie dZ d[ g td | if d\ d] g td | ig d^ d_ d` g td | ih da db dc dd de df g td | ii dg g td | ij dh g td | ik di dj dk dl dm dn do dp g td | il dq dr ds dt du dv dw dx dy dz d{ d| d} d~ g td | im d d g td | in d d d d d d d d d d d g td | io d d d d d d d d d d d d d d d d d d d d d g td | ip d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d g! td | iq d d d d d d d d d d d d d d d d d d d d d d d d d d d d d g td | ir d g g | _s d S( NRF t enableCacheR& t implicitSSSDt hesiodLHSR t hesiodRHSR R t nisLocalDomaint nisServerR R R R R t passwordAlgorithmR! R t smbSecurityt smbRealmt
smbServersR t kerberosRealmviaDNSt kerberosKDCviaDNSR# t forceSSSDUpdatet
enableLDAPt enableKerberost enableLDAPAutht enableIPAv2t smartcardActiont smartcardModulet smbWorkgroupt
smbIdmapRanget winbindSeparatort winbindTemplateHomedirt winbindTemplatePrimaryGroupt winbindTemplateShellt winbindUseDefaultDomaint winbindOfflinet enableDBt enableDirectoriest
enableWinbindt enableOdbcbindt
enableNIS3t enableNISt enableLDAPbindt enableHesiodbindt enableHesiodt
enableDBIbindt enableDBbindt enableCompatt
enableWINSt
enableMDNSt
enableSSSDt preferDNSinHostst cracklibArgst passwdqcArgst
localuserArgst
pamAccessArgst enablePAMAccesst
mkhomedirArgst enableMkHomeDirt
algoRoundst enableShadowt enableNullOkt forceBrokenShadowt enableSmartcardt forceSmartcardt enableWinbindAutht enableAFSt enableAFSKerberost enableCracklibt enableEPSt enableOTPt enablePasswdQCt enableLocAuthorizet enableSysNetAutht enableSSSDAutht
enableFprintdt pamLinkedt implicitSSSDAutht enableForceLegacyt ipav2Servert ipav2Domaint
ipav2Realmt ipaDomainJoinedt
ipav2NoNTP( s enableCacheR& ( s implicitSSSDR& ( s hesiodLHSR ( s hesiodRHSR ( s nisDomainR ( s nisLocalDomainR ( s nisServerR ( s
ldapServerR ( s
ldapBaseDNR ( s enableLDAPSR& ( s
ldapSchemaR ( s
ldapCacertDirR ( s passwordAlgorithmR ( s passwordAlgorithmR ( s passwordAlgorithmR ( s
kerberosRealmR ( s kerberosKDCR ( s smbSecurityR ( s smbRealmR ( s
smbServersR ( s kerberosAdminServerR ( s kerberosRealmviaDNSR& ( s kerberosKDCviaDNSR& ( s
ldapServerR ( s
ldapBaseDNR ( s enableLDAPSR& ( s
ldapSchemaR ( s
ldapCacertDirR ( s enableCacheCredsR& ( s
kerberosRealmR ( s kerberosKDCR ( s kerberosAdminServerR ( s forceSSSDUpdateR& ( s
enableLDAPR& ( s enableKerberosR& ( s enableLDAPAuthR& ( s enableIPAv2R& ( s smartcardActionR ( s smartcardModuleR ( s smbWorkgroupR ( s
smbServersR ( s smbRealmR ( s smbSecurityR ( s
smbIdmapRangeR ( s winbindSeparatorR ( s winbindTemplateHomedirR ( s winbindTemplatePrimaryGroupR ( s winbindTemplateShellR ( s winbindUseDefaultDomainR& ( s winbindOfflineR& ( s enableDBR& ( s enableDirectoriesR& ( s
enableWinbindR& ( s enableOdbcbindR& ( s
enableNIS3R& ( s enableNISR& ( s enableLDAPbindR& ( s
enableLDAPR& ( s enableHesiodbindR& ( s enableHesiodR& ( s
enableDBIbindR& ( s enableDBbindR& ( s enableCompatR& ( s
enableWINSR& ( s
enableMDNSR& ( s
enableNIS3R& ( s enableNISR& ( s enableIPAv2R& ( s
enableSSSDR& ( s preferDNSinHostsR& ( s implicitSSSDR& ( s cracklibArgsR ( s passwdqcArgsR ( s
localuserArgsR ( s
pamAccessArgsR ( s enablePAMAccessR& ( s
mkhomedirArgsR ( s enableMkHomeDirR& ( s
algoRoundsR ( s passwordAlgorithmR ( s enableShadowR& ( s enableNISR& ( s enableNullOkR& ( s forceBrokenShadowR& ( s enableLDAPAuthR& ( s enableKerberosR& ( s enableSmartcardR& ( s forceSmartcardR& ( s enableWinbindAuthR& ( s enableMkHomeDirR& ( s enableAFSR& ( s enableAFSKerberosR& ( s enableCracklibR& ( s enableEPSR& ( s enableOTPR& ( s enablePasswdQCR& ( s enableLocAuthorizeR& ( s enableSysNetAuthR& ( s winbindOfflineR& ( s enableSSSDAuthR& ( s
enableFprintdR& ( s pamLinkedR& ( s implicitSSSDAuthR& ( s enableIPAv2R& ( s passwordAlgorithmR ( s enableShadowR& ( s enableNISR& ( s
enableLDAPR& ( s enableLDAPAuthR& ( s enableKerberosR& ( s enableSmartcardR& ( s forceSmartcardR& ( s enableWinbindAuthR& ( s
enableWinbindR& ( s enableDBR& ( s enableHesiodR& ( s enableCracklibR& ( s enablePasswdQCR& ( s enableLocAuthorizeR& ( s enablePAMAccessR& ( s enableCacheCredsR& ( s enableMkHomeDirR& ( s enableSysNetAuthR& ( s
enableFprintdR& ( s
enableSSSDR& ( s enableSSSDAuthR& ( s enableForceLegacyR& ( s ipav2ServerR ( s ipav2DomainR ( s
ipav2RealmR ( s enableIPAv2R& ( s ipaDomainJoinedR& ( s
ipav2NoNTPR& ( s nisDomainR (t t messageCBt backupDirR R& R' R R R! R R. R R/ R R) R R( R7 R, R- R+ R8 R9 R: R; R< R= R> Rj Rk Rl Rn R Rm R6 R5 R$ RJ R? R@ RG R1 R RD RC RI RH RF RE RB RA RK RL RN RM R4 R] R^ R$ RX R_ R` R2 R3 R* RV Ra Rb RW R\ Rc RS Rd RU RZ Re t brokenShadowRY R[ Rf Ri R% Rh R# t joinUsert joinPasswordRO RP RQ RR RT R t
ldapCacertURLR Rg t
sssdConfigt
sssdDomainR0 t confChangedt
SSSDConfigR: R R t writeHesiodt writeNISt writeLDAPt writeLibusert writeLogindefst
writeKerberost writeSSSDt writeSmartcardt writeWinbindt writeNSSt writePAMt writeSysconfigt writeNetworkt save_groups( R R ( ( s! /usr/share/authconfig/authinfo.pyR s0 c C s^ t | | } | | j o> t | | | | t | | j o | i i | qZ n d S( N( R t setattrR t append( R t attrR" t reft oldval( ( s! /usr/share/authconfig/authinfo.pyt setParam/ s
c C s | i p | i o t Sd
} d } d } d } d
} xB | D]: } t | d | o | | j o t S| d 7} q? q? W| d j o t Sd
} xB | D]: } t | d | o | | j o t S| d 7} q q W| d j o t S| i o | i o t St S( Nt NISt LDAPt Winbindt Hesiodt IPAv2t Kerberost LDAPAutht WinbindAutht Smartcardi R i ( R R R R R ( R R R R ( R R ( Ri Ru R R R2 R. R$ ( R t nssallt pamallt idsupportedt
authsupportedt numt t( ( s! /usr/share/authconfig/authinfo.pyt
sssdSupported6 s6
c C s y t i t t i } Wn t j
o t SX| i d t | i d | | i d t | i d | | i
t S( NR& t lhsR' t rhs( t shvfileR t all_configst
CFG_HESIODR R: R R R t getValueR9 R$ ( R R t shv( ( s! /usr/share/authconfig/authinfo.pyt
readHesiodU s ""
c C sY y t t t i d } Wn t j
o t SXd } x | D] } | i } t | d } | o | i o t | | } q> n t | d } | o | i
d d } t | d j o q> n | d | i j o q> n t | d j o q> n | d } t | d } | o t | | } q4q> q> W| i
d | | | i t S(
NR RF t ypserverR} i i i t serverR) ( R2 R t CFG_YPR R: R t stripR R( R# R R R R R9 R$ ( R R t ft nisserverR R" ( ( s! /usr/share/authconfig/authinfo.pyt readNISf s8
c C sw | i d } d } x[ | D]S } | oF | o | d 7} n d | j o | | 7} qo | d | d 7} q q W| S( NR
RF s ://s ldap://R ( R ( R R
t lt rett item( ( s! /usr/share/authconfig/authinfo.pyt ldapHostsToURIs s
c C s t | _ y t t t i d } Wn t j
o y t t t i d } Wq t j
oh y t t t i d } Wq t j
o8 y t t t i d } Wq t j
o t
SXq Xq Xn Xx| D] } | i } t | d } | o | i
d | | q n t | d } | o | i
d | | q n t | d } | o | i
d | | q n t | d } | o# | i
d t | d | q n t | d
} | o | i
d | | q q q W| i t | i | _ | i t S( NR R R t hostR t urit sslR t start_tlst
nss_schemaR ( t PATH_LDAP_CACERTSR R2 R t CFG_NSSLDAPR R: t CFG_NSLCDt CFG_PAMLDAPt CFG_LDAPR R R R R R R R R9 R$ ( R R R R R" ( ( s! /usr/share/authconfig/authinfo.pyt readLDAP sP
c C s* y | i | SWn t j
o d SXd S( NRF ( t allKerberosKDCst KeyError( R RN ( ( s! /usr/share/authconfig/authinfo.pyt getKerberosKDC s c C s* y | i | SWn t j
o d SXd S( NRF ( t allKerberosAdminServersR ( R RN ( ( s! /usr/share/authconfig/authinfo.pyt getKerberosAdminServer s c
C s d } h | _ h | _ y t t t i d } Wn t j
o t SXx| D]} | i } | d d !d j o | d d !} d } qP n | d j o t | d } | o | i
d | | qP n t | d
} | o) | i
d t | d d j | qP n t | d
} | o) | i
d t | d d j | qP qNqP | d j o | p: | i d d } t | d j o qP n | d } qN| d d !d j o
d } qP n | i p
| | _ n t | d } | o& t | i | | | i | <qP n t | d } | o# t | i | | | i | <qNqP qP W| i oB | i
d | i | i | | i
d | i | i | n | i t S( NRF R i i t [it libdefaultst
default_realmR! t dns_lookup_kdcR/ t truet dns_lookup_realmR. t realmst }RI t admin_serverR R ( R R R2 R t CFG_KRB5R R: R R R R R R R R R! R# R R R9 R$ ( R R t sectionR R t
subsectionR" ( ( s! /usr/share/authconfig/authinfo.pyt readKerberos sd
""
+
#
c C s d } y t t t i d } Wn t j
o t SXx | D] } | i } | d d !d j o | d d !} d } q> n | d j o: t | d } | o | i d | i | q> q q> q> W| i
t S(
NRF R i i R it defaultst crypt_styleR* ( R2 R t CFG_LIBUSERR R: R R R R R R9 R$ ( R R R R R R R" ( ( s! /usr/share/authconfig/authinfo.pyt readLibuser$ s&
c C s y t t t i d } Wn t j
o t SXx | D] } | i } t | d } | d j o | i d d | q8 n t | d } | o7 | d j o
d } n | i d | i | q8 q8 q8 W| i
t S( NR t MD5_CRYPT_ENABt yesR* R_ t ENCRYPT_METHODt DESR] ( R2 R t CFG_LOGIN_DEFSR R: R R R R R R9 R$ ( R R R R R" ( ( s! /usr/share/authconfig/authinfo.pyt
readLogindefs? s&
c C s | i p t Sy | i i t t i Wn) t t i f j
o | i i n Xy | i i
t } | _ Wn t i
j
o y | i i d } WnA t j
o5 y | i i d } Wq t j
o t SXn X| i i
| } y | i d } Wn t i j
o
d } n Xy | i d } Wq]t i j
o
d } q]Xn Xx t i D] \ } } yp | i | } | d j o d i | i d } n" | d j o | d j o wjn | i | | | Wqjt i j
o qjXqjWd S( Ni t id_providert
auth_providerR R R
R t rfc2307( Ru R$ t
import_configR t CFG_SSSDR R: Rx t ParsingErrort
new_configt
get_domaint SSSD_AUTHCONFIG_DOMAINRv t
NoDomainErrort list_active_domainst
IndexErrort list_domainst
get_optiont
NoOptionErrorR t sssdopt_mapt iteritemsR R R ( R R R} t domnamet idprovt authprovR t optR ( ( s! /usr/share/authconfig/authinfo.pyt readSSSDW sH
c C s t } t d g } | d j o d | _ t S| i d | d | t d g } | d j o t Sx% | D] } d | j o
t } qo qo W| o | i d t d | n | i d t d | t S(
Nt
use_moduleRF R6 i t rm_actions
lockhelper.shR5 R R ( R R R R6 R R$ R ( R R t lockt smartcardmodulet rmactionst action( ( s! /usr/share/authconfig/authinfo.pyt
readSmartcard| s"
c C s d } d } y t t t i d } Wn t j
o | SXx | D] } | i } t | d o qD n t | d o qD n t | d } | o | i d d i } qD n | p
| d j o qD n t
| | } | o
| } qD qD W| i | S( NRF R t #t ;R t ]i t global( R2 R t CFG_SMBR R: R R R R R RS R9 ( R R t resultR R R R" t res( ( s! /usr/share/authconfig/authinfo.pyt readWinbindGlobal s0
c C sZ | i | } | o@ | i d j p | i d j p
| d j o t St Sn d S( NR R t 1( R R R$ R R ( R R t tmp( ( s! /usr/share/authconfig/authinfo.pyt readWinbindGlobalBool s 3c C sD | i d } | o | i d | | n | i d } | o | i d | | n | i d } | o | i d | | n | i d } | o | i d | | n | i p
d | _ n | i d
} | o | i d | | n | i p
d | _ n | i d
} | o | i d | | n | i d } | o | i d | | n | i d } | o | i d | | n | i d } | o | i d | | n | i p
d | _ n | i d } | d j o | i d | | n | i d } | d j o | i d | | n t S( Nt workgroupR7 s password serverR- RN R, t securityR+ t users idmap config * : rangeR8 s 16777216-33554431s winbind separatorR9 s template homedirR: s template primary groupR; s template shellR< s
/bin/falses winbind use default domainR= s winbind offline logonR> ( R R R+ R8 R< R R R$ ( R R R ( ( s! /usr/share/authconfig/authinfo.pyt readWinbind sP
c C s d } y t t t i d } Wn t j
o t SXx| D]} | i } t | d } | o
| } q> t | d } | o t | d o | i d t
| n t | d o | i d t
| n t | d } | d j o t | d } n t | d
} | d j o* | d j o | i d | | j | qMq> q> W| o d d d d! d" d# d$ d% f } x? | D]7 \ } }
t | |
o | i d | t
| q}q}W| i d t t | d | n | i
t
S(& NRF R s passwd:s hosts:t winsRK s mdns4_minimal [NOTFOUND=return]RL t nist dnsRN t Compatt compatt DBt dbt Directoriest directoriesR t hesiodR Rp R t NIS3t nisplusR Rr R R% Rm ( R R ( R R ( R
R ( s Hesiods hesiod( s LDAPRp ( s NISR ( R
R ( s WinbindRr ( R2 R t CFG_NSSWITCHR R: R R R R0 R R$ R t boolR9 ( R R t nssconfigR R R" t nispost dnspost nssmapR t nssentry( ( s! /usr/share/authconfig/authinfo.pyt readNSS sF
% &
c C s | i d t | t S( NR$ ( R R R$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyR s c
C s y t t t i d } WnE t j
o9 y t t d t d } Wqb t j
o t SXn Xd } xd| D]\} | i d d } t | d j o | d } n | i
} | d d j o | | d d 7} qo n | | } d } | i } d } | i d d } t | d
j o qo n | \ } } | d j o. | d j o! | d
j o | d j o qo n | i
d o | i d d } n | i d d } t | d
j o qo n | d d j o qo n | d } | i
d o | d 7} n | d } | i d d } t | d j o qo n | d i d d \ } t | d
j o | d } n | i
d o8 | i d t | | o | i d | | qo qo n | i
d o | i d t | qo n | i
d o | i d t | qo n | i
d oQ | i d t | d | j o | i d t | qo | i d t | qo n | i
d o | i d t | qo n | i
d o8 | i d! t | | o | i d" | | qo qo n | i
d# o | i d$ t | qo n | i
d% o | i d& t | qo n | i
d' o8 | i d( t | | o | i d) | | qo qo n | i
d* p | i
d+ o8 | i d, t | | o | i d- | | qo qo n | i
d. o8 | i d/ t | | o | i d0 | | qo qo n | d
j o| i
d1 o x; t D]3 }
| i |
d j o | i d2 |
| qEqEWyP | i d3 } | | d4 i d d } | i d5 t t | d | Wn t t f j
o n Xy$ t i d6 | i d7 t | Wq9t j
o | i d7 t | q9Xq=n | d j o: | i
d1 o& | i d8 | i d9 d j | qn | d j o: | i
d1 o& | i d: | i d; d j | qqo qo W| i | i o! | i o | i d! t | n | i o" | i o | i d t | n | i oD | i o9 | i o. | i o# | i! o | i" o
t | _# n t S(< NR s /pam.d/RF R i i is \R i Rb Rc Re Rd R R t includeR t pam_cracklibR_ RO t pam_krb5R2 t pam_ldapR3 t
pam_pkcs11RZ t authinfo_unavailR[ t pam_fprintdRf t pam_passwdqcRb RP t pam_winbindR\ t pam_sssRh t
pam_accessRS RR t
pam_mkhomedirt pam_oddjob_mkhomedirRU RT t
pam_localuserRc RQ t pam_unixR* s rounds=i RV s /etc/shadowRW RX t nullokRq t
broken_shadow($ R2 R t CFG_PAMR R: t
SYSCONFDIRt AUTH_PAM_SERVICER R R R R R R R R$ t password_algorithmsR* t indexR R R R R1 R R8 R9 R_ Rb Rq R3 R2 R\ Re RZ RY (
R R R t prevlineR R t argst stackt controlt modulet algot ridxt rounds( ( s! /usr/share/authconfig/authinfo.pyt readPAM s
'
*
.
c t C s yt i t t i } y | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _
Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _
Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d
| _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d
| _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy0 | i d } | o
d | _ n
d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _! Wn t j
o n Xy | i d | _" Wn t j
o n Xy | i d | _# Wn t j
o n Xy | i d | _$ Wn t j
o n Xy | i d! | _% Wn t j
o n Xy | i d" | _& Wn t j
o n Xy | i d# | _' Wn t j
o n Xy | i d$ | _( Wn t j
o n Xy | i d% | _) Wn t j
o n Xy | i d& | _* Wn t j
o n Xy | i d' | _+ Wn t j
o n X| i, d( | _- | i, d) | _. | i, d* | _/ | i, d+ } | t0 j o
| | _ n | i1 Wn t2 j
o n Xt3 S(, Nt USEAFSt USEAFSKERBEROSt USEDBt USECRACKLIBt USEDBBINDt
USEDBIBINDt USEDIRECTORIESt USEEPSt USEHESIODt
USEHESIODBINDt USEKERBEROSt USELDAPt USELDAPAUTHt USESMARTCARDt
USEFPRINTDt FORCESMARTCARDt USELDAPBINDt USEMD5R_ R] t USENISt
USENISPLUSt USEODBCBINDt USEOTPt USEPASSWDQCt USESHADOWt
USEWINBINDt USEWINBINDAUTHt USESSSDt USESSSDAUTHt USELOCAUTHORIZEt USEPAMACCESSt USEMKHOMEDIRt
USESYSNETAUTHt FORCELEGACYt CACHECREDENTIALSt USEIPAV2t IPADOMAINJOINEDt
IPAV2NONTPt IPAV2SERVERt IPAV2DOMAINt
IPAV2REALMt PASSWDALGORITHM(4 R R R t CFG_AUTHCONFIGR t getBoolValueR] R R^ R? R_ RI RH R@ R` RG RF R2 R1 R3 RZ Rf R[ RE R* RD t enableNISP3RB Ra Rb RW RA R\ RM Re Rc RS RU Rd Ri R# R4 Rm Rn R Rj Rk Rl R+ R9 R: R$ ( R R t enableMD5R2 ( ( s! /usr/share/authconfig/authinfo.pyt
readSysconfig sF
c C s y t i t t i } Wn t j
o t SX| i d } | o
| | _ n | i | i o | i
d | i | n t S( Nt NISDOMAINR ( R R R t CFG_NETWORKR R: R R R( R9 R R$ ( R R R R ( ( s! /usr/share/authconfig/authinfo.pyt readNetwork\ s
c C sm | i } t | i | j p t | i | j o t Sx) | i D] } | i | | o t SqG Wt S( N( R R R% Rh R$ R R R ( R R& t
sssdsupportedt group( ( s! /usr/share/authconfig/authinfo.pyt differsp s ,
c C s t | i | _ t | i | _ t | i | _ t | i | _ | i | i | _ | i d j o$ | i o | i i | _ q n | i
i | _
| i d j o
t | _ n d S( Nt ads( R R- Rj R R R R R+ R, t upperR* R R# R R$ ( R ( ( s! /usr/share/authconfig/authinfo.pyt update s
c C s | i } | i | i | | i | | i | | i | | i | | i | | i | | i | | i
o | i o | i | n | i
| | i | | i
p
| i o | i | n | i | | i | | i d S( N( t copyRc R R R R5 R R Rf R R% Rh R R R R R Rl ( R R ( ( s! /usr/share/authconfig/authinfo.pyR s&
c C s% t i | } d | _ d | _ | S( NRF ( Rm Rr Rs ( R R ( ( s! /usr/share/authconfig/authinfo.pyRm s c C s0 t t i | i t | i o | i t S( N( R t CFG_CACHER Rp R R$ R% R$ ( R ( ( s! /usr/share/authconfig/authinfo.pyR s c C s t t i | i y t i t t i } Wn t j
o t SX| i d | i
| i d | i | i d | i
t S( NR R i ( R R R Rp R t rcreateR R: R t setValueR& R' R R9 R$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyRy s
c C s t } d } d } t t i | i zt t t i d } x| i D]} | i } t
| d } | o| i d d } t | d j o qI n | d | i
j o% | d | i j o | | 7} qI n | o | i
o | d | i
7} | i i d } | i o | d 7} | | d 7} n | d 7} | d
7} | d } x+ | D]# } | o | d | d
7} qVqVWt } qqI t | d ok | o_ | i
oT | i oJ | i i d } x+ | D]# } | o | d | d
7} qqWt } qqI | | 7} qI W| p | i i d } | i
oZ | d | i
7} | d o& | d 7} | | d 7} | d } n | d 7} | d
7} n x/ | D]# } | o | d | d
7} qqWn | i | i | | i Wd y | o | i n Wn t j
o n XXt S(
NRF i R} i i s domain R
s server s
broadcasts
s ypserver R ( R R R R R Rp R R R R R R R R R( R) R$ R R R R R9 R: ( R t writtenR RH R t lsR" t serversR
( ( s! /usr/share/authconfig/authinfo.pyRz s~
(
c C s t } t } t }
t } t } t }
d } d } | i o* | i d j o | i d j o
d } n d } z&t | d } xp| i D]e} | i } t | | oW | oK | i oA | | d 7} | d i | i i d 7} | d 7} t
} qq t | | o | i o | d
| 7} qq t | | oE | o9 | i o/ | | d 7} | | i 7} | d 7} t
} qq | o[ t | d oK |
p@ | d 7} | i o | d
7} n | d 7} | d 7} t
}
qq | oQ t | d oA | o5 | i
o+ | d 7} | | i
7} | d 7} t
} qq t | d oO |
pD | o | d 7} n | d 7} | d | i 7} | d 7} t
}
qq | o= t | d o- | p" | d | 7} | d 7} t
} qq | | 7} q W| oE | i o; | | d 7} | d i | i i d 7} | d 7} n | o3 | i o) | | d 7} | | i 7} | d 7} n | oB |
o: | d 7} | i o | d
7} n | d 7} | d 7} n | o7 | o/ | i
o% | d 7} | | i
7} | d 7} n |
p> | o | d 7} n | d 7} | d | i 7} | d 7} n | o$ | o | d | 7} | d 7} n | i | i | | i Wd y | o | i n Wn t j
o n XXt
S( NRF R] R^ R_ t crypti R R
s
R R s ssl R t noR s nss_schema t
tls_cacertdirt
TLS_CACERTDIRt pam_passwords
pam_password ( R R R* R R R R R R R R$ R R R R! R R R R R9 R: ( R R; R R R t writepadlt writeschemat writepamt wrotebasednt wroteservert wrotesslt wroteschemat wrotepasst wrotecacertdirR RH t passalgoR Rr ( ( s! /usr/share/authconfig/authinfo.pyt
writeLDAP2 s
c C s t i i t t i o> t t i | i | i t t i d d d t t t n t i i t t
i o> t t
i | i | i t t
i d d d t t t n t i i t t i o> t t i | i | i t t i d d d t t t n t i i t t
i o> t t
i | i | i t t
i d d d t t t n t t i | i | i t t i d d d t t t } | S( NR R R t URIt HOSTt BASE( R1 R R R R R R Rp R R$ R R R R t CFG_OPENLDAP( R R ( ( s! /usr/share/authconfig/authinfo.pyR{ s( c C sW d } | i d j o | d S| i d j p | i d j o | | i S| d Sd S( Ns crypt_style = R_ R` Ra t des( R* ( R R ( ( s! /usr/share/authconfig/authinfo.pyt
cryptStyle s c C s t } t } d } d } d } t t i | i zPt t t i d } x | i D] } | i } | d j o1 t
| d o! | | i d 7} t } qU n t
| d oh | d j o& | o | | i d 7} t } n | d i
d d d } | d j o
t } q n | | 7} qU W| p. | d
7} | | i d 7} t } t } n | i | i | | i Wd y | o | i n Wn t j
o n XXt S( NRF i R R s
R i R i s [defaults]
( R R R R R Rp R R R R R R R$ R R R R R9 R: ( R t wrotecryptstylet
wrotedefaultsR R RH R Rr ( ( s! /usr/share/authconfig/authinfo.pyR| sJ
c
C s t } t } d } d } d } t t i | i | i d j o
d } n d } | i d j p | i d j o
d } n d | i i d } z t t t i d
} xu | i
D]j } | i } t | d o | | 7} t
} q n t | d o | | 7} t
} q n | | 7} q W| p | | 7} n | p | | 7} n | i | i | | i Wd y | o | i n Wn t j
o n XXt
S(
NRF R_ s MD5_CRYPT_ENAB yes
s MD5_CRYPT_ENAB no
R] R^ s ENCRYPT_METHOD DES
s ENCRYPT_METHOD s
i R R ( R R R R R Rp R* Rk R R R R R R$ R R R R9 R: (
R t
wrotemd5cryptt wroteencmethodR R RH t md5cryptt encmethodR Rr ( ( s! /usr/share/authconfig/authinfo.pyR} sN
c C s
t } t } t } t } t } t } t } t } t } t }
t } t } t }
t } t } d } d } d } d } t t i | i | i o | i o
| i } nE | i p
| i o' | i
d j o | i o
| i } n
| i } | i | i j o
t } n zK t
t t i d } x5| i D]*} | i } | d j o` | oY | | i j oI t | d o9 | p+ | i o | t | i 7} n t } q+q+n | d j op | i
d j o` | oY | | i j oI t | d o9 | p+ | i o | t | i 7} n t } q+q+n | d j o` | oY | | i j oI t | d o9 | p+ | i o | t | i 7} n t } q+q+n | d j o | o | i d d } t | d j o | | 7} q+n | d } | i o | | i j o
t } n | i o | | i j o
t } q5n | d j o | o t | d o | i o\ | | i j oL | p | t | i 7} t } n | p | t | i 7} t } qn | i o8 | | i j o( | p | t | i 7} t } qn d } n | d
j oN t | d o> | o0 |
o( | d 7} | | 7} | d
7} t }
q+q+n | d
j o[ t | d oK | p= | d 7} | t t | i i 7} | d
7} t } q+q+n | d
j o[ t | d oK | p= | d 7} | t t | i i 7} | d
7} t } q+q+n | d j oW | i oM t | | i i p t | d | i i o | | 7} t }
q+n t | d o| d j o; | i o1 | o) | t | i | i | i 7} t } n | d j o8 | i o. | o& | t | i | i d 7} t } n | d
j o | o0 |
o( | d 7} | | 7} | d
7} t }
n | p= | d 7} | t t | i i 7} | d
7} t } n | p= | d 7} | t t | i i 7} | d
7} t } qn | d j o | i ov |
on | d | i i 7} | d | i 7} | d
7} | d | i i 7} | d | i 7} | d
7} t }
qn | oI | d j o
t } q| d
j o
t } q| d j o
t } qn | d i d d d } | d j o
t } qK| d
j o
t } qK| d j o
t } qKn | | 7} q+W| p | p | d 7} n | o* |
o" | d 7} | | 7} | d
7} n | p7 | d 7} | t t | i i 7} | d
7} n | p7 | d 7} | t t | i i 7} | d
7} q& n | pj | p | d 7} n | p# | t | i | i | i 7} n | p | t | i | i d 7} q n | p | p | d 7} n | i op |
oh | d | i i 7} | d | i 7} | d
7} | d | i i 7} | d | i 7} | d
7} q1
n | i | i | | i! Wd y | o | i" n Wn t# j
o n XXt S( NRF Rj i R RI R i i R R R s default_realm = s
R s dns_lookup_realm = R s dns_lookup_kdc = t domain_realmR| R R s = s .R s [libdefaults]
s [realms]
s [domain_realm]
($ R R R R R Rp R2 R! RA R\ R+ R, R$ R R R R R R RJ R- R RM R R R R R. R R/ RO R R R R9 R: ( R t
wroterealmt wrotekdct
wroteadmint
wrotesmbrealmt wrotesmbkdct wroterealmst wrotelibdefaultst wroterealms2t wrotelibdefaults2t wrotedefaultrealmt
wrotednsrealmt wrotednskdct wroteourdomrealmt
wrotedomrealmt wrotedomrealm2R R R RH t defaultrealmR Rr R" ( ( s! /usr/share/authconfig/authinfo.pyR~
s
$
$
$
$
$
0
$
c C sy y | i | d } Wn t i j
o
d } n X| | j o2 | d j o | i | n | i | | n d S( Nt _provider( R Rx R R t remove_providert add_provider( R R} t newprovidert subtypet prov( ( s! /usr/share/authconfig/authinfo.pyt changeProvider s
c C s | i p t St t i | i | i o t S| i pZ | i p t Sy | i i t
| _ Wq t i j
o | i i
t
| _ q Xn | i } t } | i o t } | i | d d n | i o* | i | d d | i | d d n5 | i o* | i | d d | i | d d n x t i D] \ } } y t | | } | d j o t | } n t | t j o | i | | nM t | t j o, | o | i | | q| i | n | i | WqAt i j
o qAXqAW| i i | | o | i i | i n | i i | i y | i i! t t i" Wn t# j
o n Xt S( NRp t idRi Rb t chpassR ($ Ru R$ R R R Rp R4 Rv R% t
new_domainR Rx t DomainAlreadyExistsErrorR R R1 R R2 R3 R R R R t typeR t
set_optionR t
remove_optionR t save_domaint activate_domaint get_namet deactivate_domainR R R: ( R R} t activateR t optionR ( ( s! /usr/share/authconfig/authinfo.pyR s^
c C s | i d j o t St t i | i d } d } d } | i t d j o | d 7} | d 7} d } n t d | i d | d | g t
i d
d d | t S(
Ns /usr/sbin/gdm-safe-restartt noneR s ,/etc/pkcs11/lockhelper.sh -locks& ,/etc/pkcs11/lockhelper.sh -deactivatet lock_screens use_module=s ins_action=s
rm_action=s gconftool-2 --directs= --config-source=xml:readwrite:/etc/gconf/gconf.xml.mandatorysH -s /desktop/gnome/peripherals/smartcard/removal_action %s --type string( R6 R R$ R t CFG_PAM_PKCS11R Rp R5 R R R1 R ( R t insactt rmactR ( ( s! /usr/share/authconfig/authinfo.pyR J s
c C s d } | d 7} | d t i d d 7} | d 7} | d 7} | d 7} | i o+ | d 7} | | i 7} | d 7} t } n | i o7 | d 7} | | i i d d
7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d
7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i
o+ | d 7} | | i
7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t }
n | d 7} | t
t | i i 7} | d 7} | d 7} | t
t | i i 7} | d 7} | d 7} | d 7} | S( Ns #--authconfig--start-line--
s
s # Generated by authconfig on s %Y/%m/%d %H:%M:%SsF # DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--)
sE # Any modification may be deleted or altered by authconfig in future
s workgroup = s password server = R
R s realm = s security = s idmap config * : range = s winbind separator = s template homedir = s template primary group = s template shell = s winbind use default domain = s winbind offline logon = s #--authconfig--end-line--
( t timet strftimeR7 R$ R- R R, R+ R8 R9 R: R; R< R R R= R R> ( R RH t wroteworkgroupt wroteserversR t
wrotesecurityt wroteidmapranget wroteseparatort wrotetemplateht wrotetemplatept wrotetemplates( ( s! /usr/share/authconfig/authinfo.pyt
paramsWinbind_ sx
c C s@ d } x) | D]! } t | | o d } Pq
q
W| | 7} | S( NRF R ( RS ( R R Rr R RH R ( ( s! /usr/share/authconfig/authinfo.pyt checkLineWinbind s
c
C s: t } t } d } t t i | i d d d d d d d d d
d d d
d d g } d } d } zt t t i d } x>| i D]3} | i } | o! t
| d o
t } q q n t
| d o
t } q n t
| d p t
| d o | | 7} q n t | d } | o^ d | j oQ | i
d d i } | | 7} | d j o | | i 7} t } q q n | d j o | | i | | | 7} q n | | 7} q W| p | d 7} | | i 7} n | i | i | | i Wd y | o | i n Wn t j
o n XXt S( NRF R s password serverRN R s
domain logonss
domain masters idmap uids idmap gids winbind separators template homedirs template primary groups template shells winbind use default domains winbind offline logoni s #--authconfig--end-line--s #--authconfig--start-line--R R R R i R s [global]
( R R R R Rp R R R R R R R$ R R R R R R R R R9 R: (
R t authsectiont wroteauthsectionR R R RH R Rr R" ( ( s! /usr/share/authconfig/authinfo.pyR sf
c C s_ d } d } d } t } t } t } t } t } t } t }
d } d } t t i | i zt t t i d } | i o | d 7} n | d 7} | }
| i o | d 7} n | i
o | d 7} n | i o | d 7} n | i o | d 7} n | i
p | i p
| i o | d 7} |
d 7}
n | i o | d
7} n | i o | i o | d 7} n | i o | d 7} n | i o | d
7} n | i o | d 7} n | i o | d 7} n | } | i o | i d d } n | } | i o | d 7} n | i o | i o | i d d } n | i d d } | d 7} | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i p | d 7} n x| i D]} | i } t | d o3 | p( | d 7} | | 7} | d 7} t } qqt | d o3 | p( | d 7} | | 7} | d 7} t } qqt | d o3 | p( | d 7} | | 7} | d 7} t } qqt | d o3 | p( | d 7} | | 7} | d 7} t } qqt | d! o3 | p( | d" 7} | | 7} | d 7} t } qqt | d# o3 | p( | d$ 7} | | 7} | d 7} t } qqt | d% o3 |
p( | d& 7} | |
7} | d 7} t }
qq| | 7} qW| p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d" 7} | | 7} | d 7} n | p" | d$ 7} | | 7} | d 7} n |
p" | d& 7} | |
7} | d 7} n | i | i! | | i" Wd y | o | i# n Wn t$ j
o n XXt S(' NRF i s dbs filess directoriess odbcbinds nispluss niss ssss ldapbinds ldaps hesiodbinds hesiods dbibinds dbbindt filesR s winbindRm Rp s mdns4_minimal [NOTFOUND=return]s dnss winss passwd:s passwd: s
s shadow:s shadow: s group:s group: s netgroup:s netgroup: s
automount:s automount: s hosts:s hosts: s services:s services: (% R R R R R Rp R R R? R@ RB RC RD RM R% R4 RE R1 RF RG RH RI RJ R RA RL RN RK R R R R$ R R R R9 R: ( R t userst normalt hostst wrotepasswdt
wrotegroupt wroteshadowt
wrotenetgroupt wroteautomountt
wrotehostst
wroteservicesR RH t servicest netgroupR Rr ( ( s! /usr/share/authconfig/authinfo.pyR s&
c C s t | t } | t } | t } d } | o| od } | d j oY | d j oL | o- | i o
t } n t } d i t } q | i o
t } q n | d j o+ | d j o | i
o
t } q t } n | d j o2 | d j o% | t
j o | i o
t } qn | d j o* t i d t d
f t i o
d
} n | d | | | f 7} | o_ | | i j oO t i d t | f t i o. | i t d t | f t | i | <n | d
j o
| i } n | d j o
| i } n | d j o
| i } n | d j o
| i } n | d j p
| d
j o
| i } n | o" | t o d i | t } n | d j o | i o | d 7} n | d j o| d j o | i o% | i d j o | d | i 7} n | i o | d | i 7} n | i o | d 7} n | i! o | d 7} n | i" o | d 7} q_n | d j o | i" o | d 7} qn | d j o: | i# p | i$ p | i p
| i% o | d 7} qqn | o | d | 7} qn | d 7} | S( NRF Rh Rb R Ri Rc Rg R{ s %s/pam_%s.sot oddjob_mkhomedirs %-12s%-13s pam_%s.sos_ Authentication module %s/pam_%s.so is missing. Authentication process might not work correctly.Rv Rw Ru Rt Rr s
cached_loginRl Re R] s rounds=s shadows niss nulloks broken_shadows
(& t
pam_stackst STACKt LOGICt NAMER2 t LOGIC_FORCE_PKCS11_KRB5t LOGIC_FORCE_PKCS11R t argv_force_pkcs11_autht LOGIC_PKCS11_KRB5RZ t LOGIC_IGNORE_AUTH_ERRt LOGIC_IGNORE_UNKNOWNt LOGIC_SKIPNEXTt LOGIC_SKIPNEXT3R1 Rt t AUTH_MODULE_DIRt X_OKt module_missingRo R R$ RO RP RQ RR RT t ARGVR> R* RV RW RD RX RY R3 R\ ( R R1 t
forcescardt warnR/ t logicR RH R. ( ( s! /usr/share/authconfig/authinfo.pyt formatPAMModule s
'
c C s t i i | } t i i | } | o | p | o] | oU y t i | Wn t j
o n Xy t i | | Wq t j
o q Xn d S( N( R1 R R t islinkR
R8 t symlink( R R R R R ( ( s! /usr/share/authconfig/authinfo.pyt linkPAMService s c C s xx t t t t g D]d } t d | } t i i | } t i i | } | o | p | o | o t | _
d Sq Wd S( Ns /pam.d/( R* t PASSWORD_AUTH_PAM_SERVICEt FINGERPRINT_AUTH_PAM_SERVICEt SMARTCARD_AUTH_PAM_SERVICER) R1 R R R R Rg ( R R R R ( ( s! /usr/share/authconfig/authinfo.pyt checkPAMLinked
s c
C sh d } d } t | i | i zt t | i d } | d 7} | d 7} | d 7} | d 7} | i } | i } | i } t }
| t
j o
t }
n | t j o
t } n | t
j o t } t } n g } x!t | D]} | o# | t | t j o | d 7} n | } | t p| i o | t d j p| i o | t d j p| i o | t d
j pf| i o | t d j pK| i o+ | i o# | t d j o | t t j p| i oK | oD | t d j o | t t j p| t d
j o | t t j p| i o | i o | t d j p| o3 | t t j o" | t d j o | t t j p^| o | t d j pF| o | o | t d j p'| o | t d j p| i o | t d j p | i o | t d j p | i o | t d j p | i! p | i p
| i" o | t d j p | i# o | t d j pt | i$ o | t d j pY | i% o | t d j p> | i& oP | t t j o? | t d j o. | t t' j o | | i( | | |
7} q q W| i) | i* | | i+ Wd y | o | i, n Wn t- j
o n XX| i. | t/ d | t S( NRF i s
#%PAM-1.0
s # This file is auto-generated.
s/ # User changes will be destroyed the next time s authconfig is run.
s
Rn s afs.krbRv t epsRi Rj Rp Rg Rh Rs Rk Rq Rw Rr Rm Ru Rt R{ s /pam.d/(0 R R R Rp R R R[ RZ Rf R t STANDARDR$ t FINGERPRINTt SMARTCARDt pam_modulesR t MANDATORYR] R R^ R_ R` R2 Rh R t argv_krb5_sc_autht AUTHR3 R R Ra Rb R\ Re R4 Rc RS RU Rd t LOGIC_REQUISITER R R R R9 R: R R) (
R t servicet cfgt cfg_basenamet cfg_linkR RH R[ RZ Rf R t
prevmoduleR1 ( ( s! /usr/share/authconfig/authinfo.pyt writePAMService
s|
&""&" / "!
c C se h | _ | i t t t t | i t t t t | i t
t t t
| i t t t t t S( N( R R R R( t AUTH_PAM_SERVICE_ACR* t
PASSWORD_ONLYt CFG_PASSWORD_PAMt PASSWORD_AUTH_PAM_SERVICE_ACR R t CFG_FINGERPRINT_PAMt FINGERPRINT_AUTH_PAM_SERVICE_ACR R t CFG_SMARTCARD_PAMt SMARTCARD_AUTH_PAM_SERVICE_ACR R$ ( R ( ( s! /usr/share/authconfig/authinfo.pyR X
s c C s t t i | i y t i t t i } Wn t j
o t SX| i d | i
| i d | i | i d | i | i d | i
| i d | i | i d | i | i d | i | i d | i | i d | i | i d
| i | i d | i | i d | i | i d
| i | i d | i | i d d | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i! | i d | i" | i d | i# | i d | i$ | i d | i% | i d | i& | i d | i' | i d | i( | i) d | i* t+ S( NR9 R8 R> RA RH RL RN RP R@ RB RC RE RD R^ RG RM RO RQ RR RS RT RU RV RW RX RY RZ R[ R\ R] i (, R R_ R Rp R Ro R R: R t setBoolValueR_ R? RG R1 RD Rb RA RM R2 R3 RZ R[ Rf Rp R* R RW R\ Re Rc RS RU Rd Ri R# R4 Rm Rn Rj Rk Rl R R9 R$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyR `
sL
c C ss t t i | i y t i t t i } Wn t j
o t SX| i d | i
| i d | i t
S( NRd i ( R Re R Rp R Ro R R: R Rp R R R9 R$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyR
s
c C s | i } | i | _ | _ | i o5 | i o* | i o | o | i i d q_ n t } t | d j o! | i | j o | d | _ n d S( NR0 i (
R% R Rh RM Re R R R R R6 ( R t oldimplicitt modules( ( s! /usr/share/authconfig/authinfo.pyt prewriteUpdate
s #c C s | i | i | i t d t | _ y| i } | o
| i } | o
| i } | i o | o
| i
} n | i p
| i o | o
| i
} n | i p | i o' | i d j o | o
| i } n | i o | o
| i } n | i o | o
| i } n | i p
| i o | o
| i } n | i p
| i o | o
| i } n | o
| i } | o
| i } | o
| i } | o
| i } Wn t t f j
o t! SX| S( Ns /lastRj (" Rl R t setupBackupt PATH_CONFIG_BACKUPSR$ Rw R| R} R RG Ry R1 R3 R{ R2 R\ R+ R~ RZ R RD Rz RA R R% Rh R R R R R R8 R: R ( R R ( ( s! /usr/share/authconfig/authinfo.pyR
s>
c C s | i | i | i | i t d t } yK xD | i D]9 } | i | | o t | _ | o
| i } qB qB WWn t
t f j
o t SX| S( Ns /last(
R Rl R R R
R$ R R Rw R R8 R: R ( R R R Rh ( ( s! /usr/share/authconfig/authinfo.pyt writeChanged
s
c C s d } d } g } g } t i d g t i d g t i d g t i d g g } t i } | p d S| i d p | d 7} n | | i d } d | } t i | t i t i } xL | D]D } | i t i j o+ | i
i i d | _
t | | _ q q Wd | } t i | t i t i } | p) d | } t i | t i t i } n xC | D]; } | i t i j o" | i
i | _ | i o PqqgqgW| i old | i } t i | t i t i } x | D] } | i t i j oh | i
i i d } | i
i o | d | i
i 7} n | i o | i d
| 7_ q`| | _ qqWd | i } t i | t i t i } x | D] } | i t i j oh | i
i i d } | i
i o | d | i
i 7} n | i o | i d
| 7_ q| | _ qqWn x | D] } | d | } t i | | d
t i } xY | D]Q } | i t i j o8 | i | j o( d | d | _ | i d | _ PqZqZWq#Wd S( NRF t hst nsR| s
_ldap._tcps
_kerberos.t _kerbeross _kerberos._udp.R) R
s _kerberos-adm._udp.i i ( t dnsclientt DNS_C_INt DNS_C_HSt sockett getfqdnt endswithR* R t DNS_T_SRVt dns_typet rdataR R R R~ R t DNS_T_TXTt dataR! t portR R t DNS_T_SOAt dns_nameR& R' ( R t hostnamet qnamet resultsR R R} t h( ( s! /usr/share/authconfig/authinfo.pyt probe
s
c C s d t | i GHd GHd t | i GHd t | i GHd t | i GHd | i GHd | i GHd t | i GHd t | i GHd
| i GHd | i
GHd t | i GHd
| i GHd | i
GHd t | i GHd t | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd t | i GHd t | i GHd t | i GHd t | i GHd GHd t | i GHd | i GHd t | i GHd | i GHd t | i GHd! | i GHd" t | i GHd# | i! GHd$ t | i" GHd t | i GHd
| i GHd | i
GHd% | i# p d& GHd' t | i$ GHd( t | i% GHd) | i& GHd* | i' GHd+ t | i( GHd, t | i) GHd | i GHd | i GHd | i GHd | i GHd- t | i* GHd. t | i+ GHd/ t | i, GHd0 t | i- GHd1 | i. o d2 p d3 GHd4 | i/ GHd5 | i0 GHd6 | i1 GHd7 t | i2 | i3 f GHd8 t | i4 | i5 f GHd9 t | i6 | i7 f GHd: t | i8 | i9 f GHd; t | i: | i; f GHd< t | i< GHd S(= Ns
caching is %ss nss_files is always enableds nss_compat is %ss nss_db is %ss nss_hesiod is %ss hesiod LHS = "%s"s hesiod RHS = "%s"s nss_ldap is %ss LDAP+TLS is %ss LDAP server = "%s"s LDAP base DN = "%s"s
nss_nis is %ss NIS server = "%s"s NIS domain = "%s"s nss_nisplus is %ss nss_winbind is %ss SMB workgroup = "%s"s SMB servers = "%s"s SMB security = "%s"s SMB realm = "%s"s Winbind template shell = "%s"s SMB idmap range = "%s"s nss_sss is %s by defaults nss_wins is %ss nss_mdns4_minimal is %ss% DNS preference over NSS or WINS is %ss pam_unix is always enableds shadow passwords are %ss! password hashing algorithm is %ss pam_krb5 is %ss krb5 realm = "%s"s krb5 realm via dns is %ss krb5 kdc = "%s"s krb5 kdc via dns is %ss krb5 admin server = "%s"s pam_ldap is %ss LDAP schema = "%s"R s pam_pkcs11 is %ss# use only smartcard for login is %ss smartcard module = "%s"s smartcard removal action = "%s"s pam_fprintd is %ss pam_winbind is %ss pam_sss is %s by defaults! credential caching in SSSD is %ss6 SSSD use instead of legacy services if possible is %ss IPAv2 is %ss IPAv2 domain was %sjoineds not RF s IPAv2 server = "%s"s IPAv2 realm = "%s"s IPAv2 domain = "%s"s pam_cracklib is %s (%s)s pam_passwdqc is %s (%s)s pam_access is %s (%s)s0 pam_mkhomedir or pam_oddjob_mkhomedir is %s (%s)s' Always authorize local users is %s (%s)s; Authenticate system accounts against network services is %s(= R R$ RJ R? RG R& R' R1 R R R RD R) R RC RA R7 R- R+ R, R< R8 RM RK RL RN RW R* R2 R! R. R R/ R R3 R RZ R[ R6 R5 Rf R\ Re R# Ri R4 Rm Rj Rl Rk R_ RO Rb RP RS RR RU RT Rc RQ Rd ( R ( ( s! /usr/share/authconfig/authinfo.pyt printInfo' s c C sF | i o t i d t i d n t i d t i d t S( Ns /usr/sbin/pwconvs /usr/sbin/grpconvs /usr/sbin/pwunconvs /usr/sbin/grpunconv( RW R1 R R$ ( R ( ( s! /usr/share/authconfig/authinfo.pyt toggleShadown s
c C s) | i p
| i o| i o| i i d d d i d d d i d d d } | i } | i } | p
d } n | d j o | d j o d Sd | o d p d
| | o d p d
| | i f } | o t i i d | n | i
o t | | d
| i
q%t i
| n d S( NR
i i R s Rj R} s! /usr/bin/net join %s%s %s%s -U %ss -w RF s -S s [%s]
s sword:( RA R\ Rr R- R R7 R+ R R R Rs R R1 R ( R R R R} t protocolt cmd( ( s! /usr/share/authconfig/authinfo.pyt
joinDomainx s" 9
c
C sL | i o>| i } | i } | i } | i } | i } | i o
d } n d } t d | o d p d | | o d p d | | o d p d | | o d p d | | | o d p d f
} | o t i i
d | n | i o t | | d
| i } n t i
| } | d j o
t | _ qH| i t d n d S(
Ns -NRF s! --noac %s%s %s%s %s%s %s%s %s %ss --domain=s --server=s --realm=s --principal=s -Ws [%s]
s sword:i sK IPAv2 domain join was not succesful. The ipa-client-install command failed.( R4 Rj Rk Rl Rr Rs Rn t PATH_IPA_CLIENT_INSTALLR R R R R1 R R$ Rm Ro R (
R R R R} RN t principalRe t nontpR( R ( ( s! /usr/share/authconfig/authinfo.pyt
joinIPADomain s0
c C s | i | i } t | i | i | | t | i p | i t t d | | t | i
p | i p | i t
t d | | t | i p
| i o | i
t t d | | t | i t t d | | t | i t t d | | t | i t t d | | t | i t t d | | t | i t t! d | | | i" o= t# i$ d t% d
f t# i& o t t' t( t) d | | n t* | i+ | | d S( NRr t sssdt nslcdt dbbindt dbibindt
hesiodbindt ldapbindt odbcbinds %s/pam_%s.soR t oddjobd(, R& Rw R RD R R RA R\ t PATH_WINBINDt PATH_WINBIND_PIDR% Rh R4 t PATH_SSSDt
PATH_SSSD_PIDR1 R3 t
PATH_NSLCDt PATH_NSLCD_PIDRI t PATH_DBBINDt PATH_DBBIND_PIDRH t PATH_DBIBINDt PATH_DBIBIND_PIDRF t PATH_HESIODBINDt PATH_HESIODBIND_PIDRE t
PATH_LDAPBINDt PATH_LDAPBIND_PIDRB t
PATH_ODBCBINDt PATH_ODBCBIND_PIDRU R1 Rt R R R$ t PATH_ODDJOBDt PATH_ODDJOBD_PIDR R$ ( R R R ( ( s! /usr/share/authconfig/authinfo.pyt post sF
c C s | i p
| i og y t i | i WnB t j
o6 \ } } | t i j o t i | i d qm n Xt | i St
S( Ni ( R1 R3 R1 R R R8 R? t ENOENTR R R ( R R R ( ( s! /usr/share/authconfig/authinfo.pyt testLDAPCACerts s c C sJ | i p
| i o2 | i p d | i j o t i d | i n d S( Ns ldaps:s /usr/sbin/cacertdir_rehash ( R1 R3 R R R1 R R ( R ( ( s! /usr/share/authconfig/authinfo.pyt rehashLDAPCACerts s c C s | i p t S| i yW t i | i } t | i d t d } | i | i | i
| i
Wn0 t t t
f j
o | i t d t SX| i t S( NR i s Error downloading CA certificate( Rt R RJ t urllib2t urlopenRE R t LDAP_CACERT_DOWNLOADEDR R R9 R: R8 R Ro R RK R$ ( R t readft writef( ( s! /usr/share/authconfig/authinfo.pyt downloadLDAPCACert s
c
C s | d d j o t d | } n | | _ t | pm yS t i | } x= | D]5 } y t i | d | WqR t j
o qR XqR WWq t j
o q Xn d S( Ni R s /backup-( R
Rp R R1 R R
R8 ( R R R R; ( ( s! /usr/share/authconfig/authinfo.pyR s
c C sA | i | t } x' t D] } | i | i o | } q W| S( N( R R$ R R Rp ( R R R R ( ( s! /usr/share/authconfig/authinfo.pyt
saveBackup s
c C sT | d d j o t d | } n t } x$ t D] } | i | o | } q0 W| S( Ni R s /backup-( R
R$ R R ( R R R R ( ( s! /usr/share/authconfig/authinfo.pyt
restoreBackup s c C s | i t d S( Ns /last( RS R
( R ( ( s! /usr/share/authconfig/authinfo.pyt restoreLast s (C R R R R R R R R R R R R R R R R R R R R R R5 Rc Rf Ri Rl R Rm R Ry Rz R R{ R R| R} R~ R R R R R R R R R R R R R R R R R R$ R% R& R) R- RH RJ RK RQ R RR RS RT ( ( ( s! /usr/share/authconfig/authinfo.pyR s * 9 A %
. . U u
5 6
< A
I J
H +
" S G
& ( ( ( ( ( R R1 Rm R4 R R R R R R R R? RL R R t
subprocessR t gettextt lgettextR Rx t ImportErrorR R) R* R R R R R R R R R t globalst LIBDIRR t PATH_PWCONVR R R R: R; R< R= R> R? R@ RA RB RC RD RE R6 R7 R8 R9 R R RF RG t PATH_SEBOOLt
PATH_SCEVENTDt PATH_SCEVENTD_PIDR t PATH_LIBNSS_DBt PATH_LIBNSS_LDAPR R t PATH_LIBNSS_NISt PATH_LIBNSS_HESIODt PATH_LIBNSS_ODBCBINDt PATH_LIBNSS_WINBINDt PATH_LIBNSS_WINSt PATH_LIBNSS_SSSt
PATH_PAM_KRB5t
PATH_PAM_LDAPt PATH_PAM_WINBINDt PATH_PAM_PKCS11t PATH_PAM_FPRINTDt PATH_PAM_SSSt PATH_WINBIND_NETR* R RN R
t PATH_SSSD_CONFIGt LOGIC_REQUIREDR t LOGIC_SUFFICIENTt LOGIC_OPTIONALR R t LOGIC_PKCS11R R R R R R R R R R R! R# R( R0 RA RE RJ RM RO RS t argv_unix_autht argv_unix_passwordt
argv_afs_autht argv_afs_passwordt argv_cracklib_passwordt argv_passwdqc_passwordt
argv_eps_autht argv_eps_passwordt argv_fprintd_autht argv_pkcs11_authR t argv_krb5_authR t argv_krb5_passwordt argv_ldap_autht argv_ldap_passwordt
argv_otp_autht argv_succeed_if_autht argv_succeed_if_accountt argv_succeed_if_sessiont argv_succeed_if_nonlogint argv_winbind_autht argv_winbind_passwordt
argv_sss_autht argv_sss_passwordt argv_keyinit_sessionR+ t rangeR t ACCOUNTt SESSIONt PASSWORDR R R R R R R R R R t _[1]R R R$ R R~ t DEFAULT_DNS_QUERY_SIZER R R R R R R R R R R R R R R R R R R R R R R R t CFG_KRBR R R Rn R( R R R R_ Re R R R R R R ( ( ( s! /usr/share/authconfig/authinfo.pyt <module> s
- + G G 7Q