Tryag File Manager
Home
-
Turbo Force
Current Path :
/
usr
/
share
/
authconfig
/
Upload File :
New :
File
Dir
//usr/share/authconfig/authinfo.pyc
m ۈMc 4 @ s8 d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Td k Z d k Z e i Z d Z d Z d Z d e e d j o d Z n d Z e d Z d Z d Z d Z d Z d Z d Z d Z d Z! d Z" d Z# d Z$ d Z% d Z& d Z' d Z( d Z) d Z* d Z+ d Z, d Z- d Z. d Z/ d Z0 d! Z1 e d" Z2 e d# Z3 e d$ Z4 e d% Z5 e d& Z6 e d' Z7 e d( Z8 e d) Z9 e d* Z: e d+ Z; e d, Z< e d- Z= e d. Z> e d/ Z? d0 Z@ d1 ZA d2 ZB d3 ZC d4 ZD d5 ZE d6 ZF d7 ZG d8 ZH d9 ZI d: ZJ d; ZK d< ZL d= ZM d> ZN d? ZO d@ ZP dA ZQ dB ZR dC ZS dD ZT dE ZU dF ZV dG ZW dH ZX dI ZY dJ ZZ dK Z[ dL Z\ dM g Z] dM dN g Z^ dO g Z_ dO g Z` dM dP dQ g Za dR g Zb dO g Zc dN g Zd g Ze dS g Zf dO g Zg dO dT g Zh dN g Zi dO g Zj dN g Zk dO g Zl dO dU g Zm dV dW g Zn dX dW g Zo dY dW dZ g Zp d[ dW dZ g Zq dO g Zr dN g Zs dO g Zt dN g Zu d\ g Zv d] d^ d_ d` da g Zw db Zx dc Zy dd Zz de Z{ df dg dh di g Z| db Z} dc Z~ dd Z de Z dj Z e ex eC dk g g e ex eM dl eq g e ex eI dm ee g e ex eF dn eh g e ex eE do g g e ex eE dp e] g e ex eD dl en g e ex eE dq et g e ex eE dr e_ g e ex eE ds e_ g e ex eE dt ec g e ex eE dn eg g e ex eE du ej g e ex eE dv el g e ex eE dw em g e ex eE dx er g e ex eC dy g g e ey eC dz g g e ey eC dp g g e ey eE d{ g g e ey eE dl eo g e ey eG dq g g e ey eG du g g e ey eG dn g g e ey eG dx g g e ey eC do g g e e{ eF dm g g e e{ eD d| ea g e e{ eD d} eb g e e{ eE dp e^ g e e{ eE dq eu g e e{ eE dr e` g e e{ eE ds e` g e e{ eE d~ ed g e e{ eE dn ei g e e{ eE du ek g e e{ eE dx es g e e{ eC dy g g e ez eF d ev g e ez eC d g g e ez eF d g g e ez eM dl ep g e ez eC dp g g e ez eF dq g g e ez eF dr g g e ez eF ds g g e ez eF dn g g e ez eF du g g g0 Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d f d YZ d f d YZ d S( N( t *s /etcs system-auths system-auth-act lib64t acutils /lib64s /libs /securitys /sbin/portmaps /usr/sbin/pwconvs /usr/sbin/nscds /var/run/nscd/nscd.pids /usr/sbin/dbbinds /var/run/dbbind.pids /usr/sbin/dbibinds /var/run/dbibind.pids /usr/sbin/hesiodbinds /var/run/hesiodbind.pids /usr/sbin/ldapbinds /var/run/ldapbind.pids /usr/sbin/odbcbinds /var/run/odbcbind.pids /usr/sbin/winbindds /var/run/winbindd.pids /usr/sbin/sssds /var/run/sssd.pids /sbin/ypbinds /var/run/ypbind.pids /usr/sbin/setsebools /usr/bin/pkcs11_eventmgrs /var/run/sceventd.pids /usr/bin/pkcs11_setups /libnss_db.so.2s /libnss_ldap.so.2s /libnss_nis.so.2s /libnss_hesiod.so.2s /libnss_odbcbind.so.2s /libnss_winbind.so.2s /libnss_wins.so.2s /libnss_sss.so.2s /pam_krb5.sos /pam_ldap.sos /pam_smb_auth.sos /pam_winbind.sos /pam_pkcs11.sos /pam_sss.sos /usr/bin/nets /etc/openldap/cacertss authconfig_downloaded.pemt requiredt requisitet sufficientt optionals, [default=bad success=ok user_unknown=ignore]sJ [default=bad success=ok auth_err=ignore user_unknown=ignore ignore=ignore]s@ [success=done authinfo_unavail=ignore ignore=ignore default=die]s( [success=done ignore=ignore default=die]s4 [success=ok authinfo_unavail=2 ignore=2 default=die]s! [success=ok ignore=2 default=die]s [success=1 default=ignore]s [success=3 default=ignore]c C s | i d d d i S( Ns i i ( t st splitt rstrip( R ( ( t! /usr/share/authconfig/authinfo.pyt snipStringt s c C s1 | i d d } d i t d | i d S( Ns t t ,( t lstt replaceR t joint filtert NoneR ( R R ( ( R t cleanListx s c C s0 | i | o | t | i Sn t Sd S( N( t linet startswitht keyt lent lstript False( R R ( ( R t matchKey| s c C s: | i | o" | t | i t i d Sn t Sd S( Nt =( R R R R R t stringt whitespaceR ( R R ( ( R t matchKeyEquals s "c C s | i | S( N( R R R ( R R ( ( R t matchLine s c C s | i i | i S( N( R t lowerR R ( R R ( ( R t matchLineI s c C s | o | d | Sn | Sd S( NR ( R t value( R R" ( ( R t commaAppend s c C s_ | o | o t Sn | p | o t Sn | o | | j Sn | i | i j Sd S( N( t at bR t Truet case_sensitiveR ( R$ R% R' ( ( R t stringsDiffer s c C s | i d d } t | d j o | d } n d } t | } x t o | i | | } | d j o d Sn | d j o& | | d i o | | 7} qH n | | t | j o& | | | i o | | 7} qH n | SqH Wd S( Nt :i i ( t configurationR R R t startt candidatet clenR& t findR t isalnum( R* R, R+ R R- ( ( R t checkNSS s$ " , c C s d } y6 t i | t i t i B| } t i | t i Wnb t j oV \ } } | d j o+ y t i | Wq t j o q Xn t | | n Xt i | d S( Nis r+( t fdt ost opent filenamet O_RDWRt O_CREATt permst fcntlt lockft LOCK_EXt OSErrort errnot strerrt closet IOErrort fdopen( R4 R7 R= R< R1 ( ( R t openLocked s c C sG d } | i d } x+ | D]# } | o | d | d 7} q q W| S( Nt R s kdc = s ( t outputt kdclistR t kdc( RD RC RE ( ( R t krbKdc s c C sM d } | i d } x1 | D]) } | o | d 7} | | d 7} q q W| S( NRB R s admin_server = s ( RC t adminserversR t adminserver( RG RC RH ( ( R t krbAdminServer s c C sQ d } | o@ | d | d 7} | t | 7} | t | 7} | d 7} n | S( NRB R s = { s } ( RC t realmRF RD RI RG ( RJ RD RG RC ( ( R t krbRealm s c C s | i d d } t | d j o d } n | d } | d i i d } | i i d } | | j o | i t i d Sn t S( NR i i RB i ( R R t linelstR t paramR R R t keylstR R R R ( R R RL RN RM ( ( R t matchLineSMB s t try_first_passt use_authtokt use_first_passs retry=3s type=s enforce=userst wait_for_cardt no_subsequent_promptt nolocals uid >= 500t quiets uid < 500s service in crondt use_uidsK service notin login:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensavert revoket descryptt bigcryptt md5t sha256t sha512i i i i t autht accountt sessiont passwordi t envt succeed_ift pkcs11t krb5t permitt unixt ssst afss afs.krbt eps_autht ldapt otpt smb_autht winbindt denyt accesst localusert cracklibt passwdqct eps_passwdt keyinitt limitst mkhomedirc C s/ d } | i d } | | i d d 7} | S( Ns DC=t .s ,DC=( RC t domainR R ( Ry RC ( ( R t domain2dn s i c C s[ | pP | o t i d qW y t i t t i d WqW t j o qW Xn t S( Ns /sbin/service nscd restarts /sbin/service nscd stop( t nostartt enableCachingR2 t systemt statt PATH_NSCD_PIDR; R& ( R| R{ ( ( R t toggleCachingService s c C s | o| o t i d | yC t i t t i d t i d | p t i d n Wn t j o n Xyw t i t t i d t i d | pE y t i t t i d Wq t j o t i d q Xn Wqt j o qXn t i d y] t i t | p8 y t i t t i d Wqet j o qeXn t i d Wn t j o n Xt S( Ns /bin/domainname s /sbin/chkconfig --add portmaps& /sbin/chkconfig --level 345 portmap ons /sbin/service portmap restarts /sbin/chkconfig --add ypbinds% /sbin/chkconfig --level 345 ypbind ons /sbin/service ypbind restarts /sbin/service ypbind starts /bin/domainname "(none)"s /sbin/service ypbind stops& /sbin/chkconfig --level 345 ypbind off( t enableNist nisDomainR2 R} R~ t PATH_PORTMAPR{ R; t PATH_YPBINDt PATH_YPBIND_PIDR& ( R R R{ ( ( R t toggleNisService sF c C s | oq yW t i | t i d | t i d | d | p t i d | d n Wq t j o q Xn ym t i | | p@ y& t i | t i d | d Wq t j o q Xn t i d | d Wn t j o n Xt S( Ns /sbin/chkconfig --add s /sbin/chkconfig --level 345 s ons /sbin/service s restarts stops off( t enableR2 R~ t pathR} t nameR{ R; t pidfileR& ( R R R R R{ ( ( R t toggleSplatbindService' s* c C s | o d Sn d Sd S( Nt enabledt disabled( t val( R ( ( R t formatBool@ s c C sd y t i \ } } Wn t j o d Sn X| p t i | t i d n d } y7 t i | t i } t i | t i | t i @ Wn t j o n Xt } x0| p(y7 g } g } t i | g g | g d \ } } } Wn6 t i j o' \ } } t i i d | d n X| o" | o t i | t } q n d } y t i | d } Wn t j o \ } } | t i j p | t i! j o q | t i" j o t i | t } q t i i d | d t i | t } q n X| o yp | | 7} | o t i i | n | | j o: t i | | t i | d d } t i i d n Wqt j o: \ } } t i i d | d t i | t } qXq t i | t } q Wy t i& | t' i( Wn t j o n Xy t i) | d \ } } Wn3 t j o' \ } } t i i d | d n Xd S( Ni RB i< s select: s i s read: s s <...> s write: s waitpid: (, R2 t forkptyt pidt masterR; R} t commandt _exitRC R8 t F_GETFLt it F_SETFLt O_NONBLOCKR? R t eoft ifdst efdst selectt ofdst errort errt textt syst stderrt writeR> R& t ct readR< t EINTRt EAGAINt EIOt echot queryt responset killt signalt SIGTERMt waitpidt childt status( R R R R R R R R R R R R R R R R RC ( ( R t feedForkF s~ " + c C s y t i | } Wn t j o t Sn XxZ | D]R } y6 t i | d | } t i | i o t Sn Wq4 t j o q4 Xq4 Wt S( Nt /( R2 t listdirR R R; R& R4 R~ t stt S_ISREGt st_modeR ( R R4 R R ( ( R t isEmptyDir s c C s yj t t g | d t } | i d i d } | i d j o d Sn | d d j o | d 3n Wn t j o d Sn X| S( Nt stdouti s iRB ( t Popent PATH_SCSETUPt optionst PIPER t communicateR R t returncodeR R; ( R R R ( ( R t callPKCS11Setup s c C s( t d g } | d j o g Sn | S( Nt list_modules( R t modsR ( R ( ( R t getSmartcardModules s c C s t d t d g S( Nt Lockt Ignore( t _( ( ( R t getSmartcardActions s c C s t | } | i | S( N( t AuthInfot msgcbt infoR ( R R ( ( R R s t SaveGroupc B s t Z d Z d Z RS( Nc C s | | _ | | _ d S( N( t savefunct selft saveFunctiont attrlist( R R R ( ( R t __init__ s c C s t } x | i D] \ } } | d j o) | p t | | t | | j } q | d j o/ | p" t t | | t | | t } q | d j o/ | p" t t | | t | | t } q q W| S( NR% R R ( R t retR R t anamet atypet getattrR$ R% R( R& ( R R$ R% R R R ( ( R t attrsDiffer s ) / 3( t __name__t __module__R R ( ( ( R R s R c B s t Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z! d! Z" d" Z# d# Z$ d$ Z% d% Z& d& Z' d' Z( d( Z) d) Z* d* Z+ d+ Z, d, Z- d- Z. d. Z/ d/ Z0 d0 Z1 d1 Z2 d2 Z3 d3 Z4 d4 Z5 d5 Z6 RS(6 Nc C s | | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _! d | _" d | _# d | _$ d | _% d | _& d | _' d | _( d | _) d | _* d | _+ d | _, d | _- d | _. d | _/ d | _0 d | _1 t2 | _3 d | _4 d | _5 d | _6 d | _7 d | _8 d | _9 d | _: d | _; d | _< d | _= d | _> d | _? d | _@ d | _A d | _B d | _C d | _D d | _E d | _F d | _G d | _H d | _I d | _J d | _K d | _L d | _M d | _N d | _O d | _P d S( NRB (Q R R t messageCBt hesiodLHSt hesiodRHSt ldapServert ldapBaseDNt kerberosRealmR t kerberosRealmviaDNSt kerberosKDCt kerberosKDCviaDNSt kerberosAdminServert nisServerR t nisLocalDomaint smbWorkgroupt smbRealmt smbServerst smbSecurityt smbIdmapUidt smbIdmapGidt winbindSeparatort winbindTemplateHomedirt winbindTemplatePrimaryGroupt winbindTemplateShellt winbindUseDefaultDomaint winbindOfflinet smartcardModulet smartcardActiont enableCachet enableCompatt enableDBt enableDirectoriest enableHesiodt enableLDAPt enableLDAPSt enableNISt enableNIS3t enableDBbindt enableDBIbindt enableHesiodbindt enableLDAPbindt enableOdbcbindt enableWinbindt enableWINSt preferDNSinHostst enableSSSDt enableAFSt enableAFSKerberosR& t enableNullOkt enableCracklibt enableEPSt enableKerberost enableLDAPAutht passwordAlgorithmt algoRoundst enableOTPt enablePasswdQCt enableShadowt enableSMBt enableWinbindAutht enableLocAuthorizet enablePAMAccesst enableSysNetAutht enableMkHomeDirt enableSmartcardt enableSSSDAutht brokenShadowt forceBrokenShadowt forceSmartcardt joinUsert joinPasswordt cracklibArgst passwdqcArgst localuserArgst pamAccessArgst mkhomedirArgst ldapCacertDirt ldapCacertURL( R R ( ( R R s c C so y t i t d } Wn t j o t Sn Xt | i d | _ t | i d | _ | i t S( Ns /hesiod.conft lhst rhs( t shvfileR t SYSCONFDIRt shvR? R R t getValueR R R R> R& ( R R( ( ( R t readHesiod& s c C s y t t d d } Wn t j o t Sn Xt | i | _ | i } t t | } d i t d | | _ | i t S( Ns /pam_smb.conft rR ( R3 R' t fR? R R t readlineR R t readlinest serverst mapR R R R R> R& ( R R, R/ ( ( R t readSMB7 s c C sL y t t d d } Wn t j o t Sn Xx | D]} | i } t | d } | o& | i o t | i | | _ q8 n t | d } | o | i d d } t | d j o q8 n | d | i j o q8 n t | d j o q8 n | d } t | d } | o t | i | | _ q:q8 q8 W| i t S( Ns /yp.confR+ t ypserverRy i i i t server( R3 R' R, R? R R t stripR R" R R R# R R R R R> R& ( R R, R" R ( ( R t readNISJ s4 ! c C sw | i d } d } x[ | D]S } | oF | o | d 7} n d | j o | | 7} qo | d | d 7} q q W| S( NR RB s ://s ldap://R ( R R t lR t item( R R R7 R R6 ( ( R t ldapHostsToURIsr s c C s6 t | _ d | _ y t t d d } Wn t j o t Sn Xx | D] } | i } t | d } | o | | _ qJ n t | d } | o | i | 7_ qJ n t | d } | o | i | 7_ qJ n t | d } | o t | d | _ qJ qJ qJ W| i t | i | _ | i t S( NRB s /ldap.confR+ t baset hostt urit sslt start_tls( t PATH_LDAP_CACERTSR R" R R3 R' R, R? R R R4 R R" R R R R8 R R> R& ( R R, R" R ( ( R t readLDAP s8 c C s- y | i | SWn t j o d Sn Xd S( NRB ( R t allKerberosKDCsRJ t KeyError( R RJ ( ( R t getKerberosKDC s c C s- y | i | SWn t j o d Sn Xd S( NRB ( R t allKerberosAdminServersRJ RA ( R RJ ( ( R t getKerberosAdminServer s c C sz d } h | _ h | _ y t t d d } Wn t j o t Sn Xx| D]} | i } | d d !d j o | d d !} d } qP n | d j o t | d } | o | | _ qP n t | d } | o t | d d j | _ qP n t | d } | o t | d d j | _ qP q0qP | d j o | p: | i d d } t | d j o qP n | d } q0| d d !d j o d } qP n | i p | | _ n t | d } | o& t | i | | | i | <qP n t | d } | o# t | i | | | i | <q0qP qP W| i o. | i | i | _ | i | i | _ n | i t S( NRB s /krb5.confR+ i i t [it libdefaultst default_realmt dns_lookup_kdct truet dns_lookup_realmt realmst }RE t admin_server( t sectionR R@ RC R3 R' R, R? R R R4 t subsectionR R" R R R R R R R R# RB RD R R R> R& ( R R, R" RO R RN ( ( R t readKerberos sd + c C s t } t d g | _ | i d j o t Sn | i d | _ t d g } | d j o t Sn x% | D] } d | j o t } qk qk W| o t d | _ n t d | _ t S( Nt use_modulei t rm_actions lockhelper.shR R ( R t lockR R R R t rmactionst actionR& R R ( R RS RU RT ( ( R t readSmartcard s c C s d } d } y t t d d } Wn t j o | Sn Xx | D] } | i } t | d o qD n t | d o qD n t | d } | o | i d d i } qD n | p | d j o qD n t | | } | o | } qD qD W| i | S( NRB s /samba/smb.confR+ t #t ;RE t ]i t global( t resultRN R3 R' R, R? R R4 R R R" R R RO R t resR> ( R R R, R\ R" R[ R RN ( ( R t readWinbindGlobal s0 c C s] | i | } | oC | i d j p | i d j p | d j o t SqY t Sn d S( Nt yesRI t 1( R R] R t tmpR R& R R ( R R R` ( ( R t readWinbindGlobalBool+ s 3c C s | i d } | o | | _ n | i d } | o | | _ n | i d } | o | | _ n | i d } | o | | _ n | i p d | _ n | i d } | o | | _ n | i p d | _ n | i d } | o | | _ n | i p d | _ n | i d } | o | | _ n | i d } | o | | _ n | i d } | o | | _ n | i d } | o | | _ n | i p d | _ n | i d } | d j o | | _ n | i d } | d j o | | _ n t S( Nt workgroups password serverRJ t securityt users idmap uids 16777216-33554431s idmap gids winbind separators template homedirs template primary groups template shells /bin/falses winbind use default domains winbind offline logon( R R] R` R R R R R R R R R R Ra R R R R& ( R R` ( ( R t readWinbind5 sZ c C s d } y t t d d } Wn t j o t Sn Xx | D] } | i } t | d } | o | } q> t | d } | o t t | d | _ t | d } | d j o t | d } n t | d } | d j o | d j o | | j | _ q q> q> W| o t t | d | _ t t | d | _ t t | d | _ t t | d | _ t t | d | _ t t | d | _ t t | d | _ t t | d | _ n | i t S( NRB s /nsswitch.confR+ s passwd:s hosts:t winst nist dnst compatt dbt directoriest hesiodRk t nisplusRn ( t nssconfigR3 R' R, R? R R R4 R R" t boolR0 R R t nisposR t dnsposR R R R R R R R R R> R& ( R R, Rn R" Rq R Rp ( ( R t readNSSj s@ c C s; t i d } t i | o t i | d j | _ t S( Ns$ /sbin/chkconfig nscd >/dev/null 2>&1i ( R2 R} t rvt WIFEXITEDt WEXITSTATUSR R R& ( R Rs ( ( R t readCache s (c C sB y t t d t d } WnH t j o< y t t d t d } Wqf t j o t Sqf Xn Xd } xD| D]<} | i d d } t | d j o | d } n | i } | d d j o | | d d 7} qs n | | } d } | i } d } | i d d } t | d j o qs n | \ } } | d j o. | d j o! | d j o | d j o qs n | i d o | i d d } n | i d d } t | d j o qs n | d d j o qs n | d } | i d o | d 7} n | d } | i d d } t | d j o qs n | d i d d \ } t | d j o | d } n | i d o$ t | _ | o | | _ qs qs n | i d o t | _ qs n | i d o t | _ qs n | i d o3 t | _ | t j o t | _ qs t | _ qs n | i d o$ t | _ | o | | _ qs qs n | i d o t | _ qs n | i d o t | _ qs n | i d o$ t | _! | o | | _" qs qs n | i d o$ t | _# | o | | _$ qs qs n | i d o$ t | _% | o | | _& qs qs n | d j o | i d o x1 t' D]) } | i) | d j o | | _* qeqeWyF | i+ d } | | d i d d } t. t/ | d | _0 Wn t1 t2 f j o n Xy t3 i4 d t | _5 Wq1t6 j o t | _5 q1Xq5n | d j o0 | i d o | i) d! d j | _7 qrn | d j o0 | i d o | i) d" d j | _8 qqs qs W| i9 yt: i; t d# } y | i= d$ | _> Wn t1 j o n Xy | i= d% | _? Wn t1 j o n Xy | i= d& | _@ Wn t1 j o n Xy | i= d' | _ Wn t1 j o n Xy | i= d( | _A Wn t1 j o n Xy | i= d) | _B Wn t1 j o n Xy | i= d* | _C Wn t1 j o n Xy | i= d+ | _D Wn t1 j o n Xy | i= d, | _E Wn t1 j o n Xy | i= d- | _F Wn t1 j o n Xy | i= d. | _ Wn t1 j o n Xy | i= d/ | _G Wn t1 j o n Xy | i= d0 | _ Wn t1 j o n Xy | i= d1 | _ Wn t1 j o n Xy | i= d2 | _ Wn t1 j o n Xy | i= d3 | _H Wn t1 j o n Xy0 | i= d4 } | o d5 | _* n d6 | _* Wn t1 j o n Xy | i= d7 | _J Wn t1 j o n Xy | i= d8 | _K Wn t1 j o n Xy | i= d9 | _L Wn t1 j o n Xy | i= d: | _M Wn t1 j o n Xy | i= d; | _ Wn t1 j o n Xy | i= d< | _5 Wn t1 j o n Xy | i= d= | _ Wn t1 j o n Xy | i= d> | _N Wn t1 j o n Xy | i= d? | _ Wn t1 j o n Xy | i= d@ | _O Wn t1 j o n Xy | i= dA | _P Wn t1 j o n Xy | i= dB | _% Wn t1 j o n Xy | i= dC | _! Wn t1 j o n Xy | i= dD | _# Wn t1 j o n Xy | i= dE | _Q Wn t1 j o n X| iR dF } | t' j o | | _* n | i9 Wn t j o n X| i o | i o t | _ n | i o | i o t | _ n | i8 o9 | i o. | i o# | i o | i o t | _S n t S(G Ns /pam.d/R+ RB RW i i is \R i R^ R_ Ra R` RE RY t includeR t pam_cracklibt pam_krb5t pam_ldapt pam_pkcs11t pam_passwdqct pam_smbt pam_winbindt pam_accesst pam_mkhomedirt pam_localusert pam_unixs rounds=i s /etc/shadowt nullokt broken_shadows /sysconfig/authconfigt USEAFSt USEAFSKERBEROSt USEDBt USECRACKLIBt USEDBBINDt USEDBIBINDt USEDIRECTORIESt USEEPSt USEHESIODt USEHESIODBINDt USEKERBEROSt USELDAPt USELDAPAUTHt USESMARTCARDt FORCESMARTCARDt USELDAPBINDt USEMD5R[ RY t USENISt USENISPLUSt USEODBCBINDt USEOTPt USEPASSWDQCt USESHADOWt USESMBAUTHt USEWINBINDt USEWINBINDAUTHt USESSSDt USESSSDAUTHt USELOCAUTHORIZEt USEPAMACCESSt USEMKHOMEDIRt USESYSNETAUTHt PASSWDALGORITHM(T R3 R' t AUTH_PAM_SERVICE_ACR, R? t AUTH_PAM_SERVICER t prevlineR R R R R R t argsR t stackR t controlt moduleR& R R R R R R t LOGIC_FORCE_PKCS11R R R R R R R R R! R R t password_algorithmst algoR. R t indext ridxt roundst strt intR t ValueErrort IndexErrorR2 R~ R R; R R R> R& R R( t getBoolValueR R R R R R R R R R R t enableMD5R t enableNISP3R R R R R R R) R ( R R R R R R R R R R R( R, R R ( ( R t readPAM s 4 $ 6 c C s| y t i t d } Wn t j o t Sn X| i d } | o | | _ n | i | i o | i | _ n t S( Ns /sysconfig/networkt NISDOMAIN( R& R R' R( R? R R) R` R R R> R R& ( R R` R( ( ( R t readNetwork s c C s t | i | i t pt | i | i t pst | i | i t pZt | i | i t pAt | i | i t p(| i | i j pt | i | i t p| i | i j pt | i | i t pt | i | i t pt | i | i t pt | i | i t pt | i | i t plt | i | i t pSt | i | i t p:t | i | i t p!t | i | i t pt | i | i t pt | i | i t pt | i | i t pt | i | i t pt | i | i t pt | i | i t prt | i | i t pYt | i | i t p@t | i | i t p'| i | i j p| i | i j p| i! | i! j p| i" | i" j p| i# | i# j p| i$ | i$ j p| i% | i% j p| i& | i& j p| i' | i' j p|| i( | i( j pi| i) | i) j pV| i* | i* j pC| i+ | i+ j p0| i, | i, j p | i- | i- j p | i. | i. j p| i/ | i/ j p| i0 | i0 j p| i1 | i1 j p| i2 | i2 j p| i3 | i3 j p| i4 | i4 j p| i5 | i5 j pr| i6 | i6 j p_| i7 | i7 j pL| i8 | i8 j p9| i9 | i9 j p&| i: | i: j p| i; | i; j p | i< | i< j p | i= | i= j p | i> | i> j p | i? | i? j p | i@ | i@ j p | iA | iA j p | iB | iB j p{ | iC | iC j ph | iD | iD j pU | iE | iE j pB | iF | iF j p/ t | iG | iG t p t | iH | iH t Sd S( N(I R( R R R% R R R R R& R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R ( R R% ( ( R t differs s -c C s t | i | _ t | i | _ t | i | _ | i d j o$ | i o | i i | _ qj n | i i | _ d S( Nt ads( R R R R R R R t upperR R ( R ( ( R t update1 s c C s| | i | i | i | i | i | i | i | i | i | i | i | i d S( N( R R* R1 Re R R5 R? RP RV Rr Rv R R ( R ( ( R R = s c C s% t i | } d | _ d | _ | S( NRB ( t copyR R R R ( R R ( ( R R M s c C s` | i o t i d t i d n5 y t i t t i d Wn t j o n Xt S( Ns /sbin/chkconfig --add nscds# /sbin/chkconfig --level 345 nscd ons$ /sbin/chkconfig --level 345 nscd off( R R R2 R} R~ t PATH_NSCDR; R& ( R ( ( R t writeCacheS s c C sr y t i t d } Wn t j o t Sn X| i d | i | i d | i | i d | i t S( Ns /hesiod.confR$ R% i ( R& t rcreateR' R( R? R t setValueR R R R R> R& ( R R( ( ( R t writeHesiod_ s c C s d } z t t d d } | i d | i | i d | i i d d } | i d } t | d j o | i | d n | i d t | d j o | i | d n | i d Wd y | o | i n Wn t j o n XXt S( Ns /pam_smb.confi i s R R i ( R R, RA R' t truncateR R R R R R/ R R R> R? R& ( R R, R/ ( ( R t writeSMBm s( c C s t } d } d } zt t d d } x| D]} | i } t | d } | o| i d d } t | d j o q/ n | d | i j o% | d | i j o | | 7} q/ n | o | i o | d | i 7} | i i d } | i o | d 7} | | d 7} n | d 7} | d 7} | d } x+ | D]# } | o | d | d 7} q<q<Wt } qq/ t | d ok | o_ | i oT | i oJ | i i d } x+ | D]# } | o | d | d 7} qqWt } qq/ | | 7} q/ W| p | i i d } | i oZ | d | i 7} | d o& | d 7} | | d 7} | d } n | d 7} | d 7} n x/ | D]# } | o | d | d 7} q~q~Wn | i d | i d | i | Wd y | o | i n Wn t j o n XXt S( NRB s /yp.confi Ry i i s domain R s server s broadcasts s ypserver R2 ( R t writtenR R, RC RA R' R R4 t lsR R" R R R R R R R/ R R& R t seekR R R> R? ( R R, R R" R/ R R RC R ( ( R t writeNIS s~ ( c C s@ t } t } t } t } t } d } d } | i o* | i d j o | i d j o d } n d } zt | d } x | D]} | i } t | | o` | oT | i oJ | | d 7} | d i | i | i i d 7} | d 7} t } qq} t | | o | i o | d | 7} qq} t | | oE | o9 | i o/ | | d 7} | | i 7} | d 7} t } qq} | o[ t | d oK | p@ | d 7} | i o | d 7} n | d 7} | d 7} t } qq} t | d oO | pD | o | d 7} n | d 7} | d | i 7} | d 7} t } qq} | o= t | d o- | p" | d | 7} | d 7} t } qq} | | 7} q} W| oN | i oD | | d 7} | d i | i | i i d 7} | d 7} n | o3 | i o) | | d 7} | | i 7} | d 7} n | oB | o: | d 7} | i o | d 7} n | d 7} | d 7} n | p> | o | d 7} n | d 7} | d | i 7} | d 7} n | o$ | o | d | 7} | d 7} n | i d | i d | i! | Wd y | o | i" n Wn t# j o n XXt S( NRB RY RZ R[ t crypti R R s RW R< s ssl R= t not tls_cacertdirt TLS_CACERTDIRt pam_passwords pam_password i ($ R t wrotebasednt wroteservert wrotesslt wrotepasst wrotecacertdirR R, RC R R t passalgoRA R4 R R4 R R R; R R R8 R R& R: R9 R t writePadlR R! R" R R R R> R? ( R R4 R; R: R9 R R R R R R R R R R, RC ( ( R t writeLDAP2 s * ( ( c C sK | i t d d d d t } | o! | i t d d d d t n | S( Ns /ldap.confR; R: R9 s /openldap/ldap.conft URIt HOSTt BASE( R R R' R& R R ( R R ( ( R t writeLDAPE s c C s] d } | i d j o | d Sn8 | i d j p | i d j o | | i Sn | d Sd S( Ns crypt_style = R[ R\ R] t des( R R R ( R R ( ( R t cryptStyleN s c C s t } t } d } d } d } zPt t d d } x | D] } | i } | d j o1 t | d o! | | i d 7} t } q; n t | d oh | d j o& | o | | i d 7} t } n | d i d d d } | d j o t } qn | | 7} q; W| p. | d 7} | | i d 7} t } t } n | i d | i d | i | Wd y | o | i n Wn t j o n XXt S( NRB s /libuser.confi t defaultst crypt_styles RE i RY i s [defaults] ( R t wrotecryptstylet wrotedefaultsRN R R, RC RA R' R R4 R R R R R& R R R R R> R? ( R R, R R RC R R RN ( ( R t writeLibuserX sJ c C s t } t } d } d } d } | i d j o d } n d } | i d j p | i d j o d } n d | i i d } z t t d d } xr | D]j } | i } t | d o | | 7} t } q n t | d o | | 7} t } q n | | 7} q W| p | | 7} n | p | | 7} n | i d | i d | i | Wd y | o | i n Wn t j o n XXt S( NRB R[ s MD5_CRYPT_ENAB yes s MD5_CRYPT_ENAB no RY RZ s ENCRYPT_METHOD DES s ENCRYPT_METHOD s s /login.defsi t MD5_CRYPT_ENABt ENCRYPT_METHODi ( R t wrotemd5cryptt wroteencmethodRN R R, RC R R t md5cryptt encmethodR RA R' R R4 R R R& R R R R> R? ( R R, R R R R R RC R RN ( ( R t writeLogindefs sN c C sv t } t } t } t } t } t } t } t } t } t } t } t } t } t } t } d } d } d } d } | i o | i o | i } nE | i p | i o' | i d j o | i o | i } n | i } | i | i j o t } n zK t t d d } x2| D]*} | i! } | d j o` | oY | | i j oI t# | d o9 | p+ | i$ o | t% | i$ 7} n t } qqn | d j op | i d j o` | oY | | i j oI t# | d o9 | p+ | i& o | t% | i& 7} n t } qqn | d j o` | oY | | i j oI t# | d o9 | p+ | i' o | t( | i' 7} n t } qqn | d j o | o | i) d d } t+ | d j o | | 7} qn | d } | i o | | i j o t } n | i o | | i j o t } qn | d j o | o t# | d o | i o\ | | i j oL | p | t% | i$ 7} t } n | p | t( | i' 7} t } qn | i o8 | | i j o( | p | t% | i& 7} t } qn d } n | d j oN t# | d o> | o0 | o( | d 7} | | 7} | d 7} t } qqn | d j o[ t# | d oK | p= | d 7} | t, t- | i. i/ 7} | d 7} t } qqn | d j o[ t# | d oK | p= | d 7} | t, t- | i0 i/ 7} | d 7} t } qqn | d j oW | i oM t# | | i i/ p t# | d | i i/ o | | 7} t } qn t# | d o| d j o; | i o1 | o) | t1 | i | i$ | i' 7} t } n | d j o8 | i o. | o& | t1 | i | i& d 7} t } n | d j o | o0 | o( | d 7} | | 7} | d 7} t } n | p= | d 7} | t, t- | i. i/ 7} | d 7} t } n | p= | d 7} | t, t- | i0 i/ 7} | d 7} t } qn | d j o | i ov | on | d | i i/ 7} | d | i 7} | d 7} | d | i i/ 7} | d | i 7} | d 7} t } q~n | oI | d j o t } q| d j o t } q| d j o t } qn | d i) d d d } | d j o t } q1| d j o t } q1| d j o t } q1n | | 7} qW| p | p | d 7} n | o* | o" | d 7} | | 7} | d 7} n | p7 | d 7} | t, t- | i. i/ 7} | d 7} n | p7 | d 7} | t, t- | i0 i/ 7} | d 7} q n | pj | p | d 7} n | p# | t1 | i | i$ | i' 7} n | p | t1 | i | i& d 7} q} n | p | p | d 7} n | i op | oh | d | i i/ 7} | d | i 7} | d 7} | d | i i/ 7} | d | i 7} | d 7} q n | i2 d | i3 d | i4 | Wd y | o | i5 n Wn t6 j o n XXt S( NRB R s /krb5.confi RK RE RM i i RL RF RG s default_realm = s RJ s dns_lookup_realm = RH s dns_lookup_kdc = t domain_realmRx RE R s = s .RY s [libdefaults] s [realms] s [domain_realm] (7 R t wroterealmt wrotekdct wroteadmint wrotesmbrealmt wrotesmbkdct wroterealmst wrotelibdefaultst wroterealms2t wrotelibdefaults2t wrotedefaultrealmt wrotednsrealmt wrotednskdct wroteourdomrealmt wrotedomrealmt wrotedomrealm2RN RO R R, RC R R R t defaultrealmR R R R R& RA R' R R4 R R R RF R R RI R R" R R Ro R R R RK R R R R> R? ( R R R R" R R R RO R R R R R R R R R R R, R R R RC RN ( ( R t writeKerberos5 s| . 4 D 4 $ M $ c C s| | i p t Sn t } d } d } z!t t d d } | | i d 7} x> | i i d D]* } | o | | i d | d 7} q^ q^ WxH | i i d D]4 } | o' | | i d | 7} | d d 7} q q WxC | D]; } | p t } q n t | | i p | | 7} q q W| i d | i d | i | Wd y | o | i n Wn t j o n XXt S( NRB s /krb.confi s R s s admin serveri ( R R R t readrealmR R, RC RA R' R R RE R t asrvR R& R R R R R> R? ( R R R, RE R RC R ( ( R t writeKerberos4 sD ! c C s% | i } | o | i n | S( N( R R R R ( R R ( ( R t writeKerberos s c C s` d } d } | i t d j o | d 7} | d 7} n t d | i d | d | g t S( Ns /usr/sbin/gdm-safe-restartR s ,/etc/pkcs11/lockhelper.sh -locks& ,/etc/pkcs11/lockhelper.sh -deactivates use_module=s ins_action=s rm_action=( t insactt rmactR R R R R R& ( R R R ( ( R t writeSmartcard s "c C s d } | d 7} | d t i d d 7} | d 7} | d 7} | d 7} | i o+ | d 7} | | i 7} | d 7} t } n | i o7 | d 7} | | i i d d 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | d 7} | t t | i i 7} | d 7} | d 7} | t t | i i 7} | d 7} | d 7} | d 7} | S( Ns #--authconfig--start-line-- s s # Generated by authconfig on s %Y/%m/%d %H:%M:%SsF # DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--) sE # Any modification may be deleted or altered by authconfig in future s workgroup = s password server = R R s realm = s security = s idmap uid = s idmap gid = s winbind separator = s template homedir = s template primary group = s template shell = s winbind use default domain = s winbind offline logon = s #--authconfig--end-line-- ( RC t timet strftimeR R R& t wroteworkgroupR R t wroteserversR R R t wrotesecurityR t wroteidmapuidR t wroteidmapgidR t wroteseparatorR t wrotetemplatehR t wrotetemplatepR t wrotetemplatesR Ro R R R ( R R R R R R R R R RC R R ( ( R t paramsWinbind s c C s@ d } x) | D]! } t | | o d } Pq q W| | 7} | S( NRB RX ( RC R t optRO R R ( R R R R R RC ( ( R t checkLineWinbind, s c C s& t } t } d } d d d d d d d d d d d d d d g } d } d } zt t d d } x;| D]3} | i } | o! t | d o t } qk qk n t | d o t } qk n t | d p t | d o | | 7} qk n t | d } | o^ d | j oQ | i d d i } | | 7} | d j o | | i 7} t } qk qk n | d j o | | i | | | 7} qk n | | 7} qk W| p | d 7} | | i 7} n | i d | i d | i | Wd y | o | i n Wn t j o n XXt S( NRB Rb s password serverRJ Rc s domain logonss domain masters idmap uids idmap gids winbind separators template homedirs template primary groups template shells winbind use default domains winbind offline logons /samba/smb.confi s #--authconfig--end-line--s #--authconfig--start-line--RX RW RE RY i RZ s [global] ( R t authsectiont wroteauthsectionRN R R R, RC RA R' R R4 R R R& R R" R R R R R R R R R> R? ( R R, R R" R R RN RC R R ( ( R t writeWinbind9 s\ 0 c C sP d } d } d } t } t } t } t } t } t } d } d } zt t d d } | i o | d 7} n | d 7} | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | i d d } n | } | i o | d 7} n | d 7} | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i p | d 7} n x| D]} | i" } t$ | d o3 | p( | d 7} | | 7} | d 7} t% } qqIt$ | d o3 | p( | d 7} | | 7} | d 7} t% } qqIt$ | d o3 | p( | d 7} | | 7} | d 7} t% } qqIt$ | d o3 | p( | d 7} | | 7} | d 7} t% } qqIt$ | d o3 | p( | d 7} | | 7} | d 7} t% } qqIt$ | d! o3 | p( | d" 7} | | 7} | d 7} t% } qqI| | 7} qIW| p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d" 7} | | 7} | d 7} n | i& d# | i' d# | i( | Wd y | o | i) n Wn t* j o n XXt% S($ NRB s /nsswitch.confi s dbs filess directoriess odbcbinds nispluss niss ssss ldapbinds ldaps hesiodbinds hesiods dbibinds dbbindt filesRi s winbinds dnss winss passwd:s passwd: s s shadow:s shadow: s group:s group: s netgroup:s netgroup: s automount:s automount: s hosts:s hosts: i (+ t userst normalt hostsR t wrotepasswdt wrotegroupt wroteshadowt wrotenetgroupt wroteautomountt wrotehostsR R, RC RA R' R R R R R R R R R R R R R R R R R R R R4 R R R& R R R R> R? ( R R R R R R, R R R R R RC R R ( ( R t writeNSS s c C s t | t } | t } d } | o| od } | t d j o\ | d j oO | i o- | i o t } n t } d i t } q | i o t } q n | t d j o+ | d j o | i o t } q t } n | t d j o2 | d j o% | t j o | i o t } q n | d | | | t f 7} | t | i j o[ t i d t | t f t i o6 | i t d t | t f t | i | t <n | t d j o | i } n | t d j o | i } n | t d j o | i } n | t d j o | i! } n | t d j o | i" } n | o" | t# o d i | t# } n | t d j o | i$ o | d 7} n | t d j o| d j o | i% o% | i% d j o | d | i% 7} n | i& o | d | i& 7} n | i' o | d 7} n | i( o | d 7} n | i) o | d 7} qIn | d j o | i) o | d 7} qrn | d j o: | i* p | i+ p | i p | i, o | d 7} qqn | o | d | 7} qn | d 7} | S( NRB Rd R^ R Re R_ Rc s %-12s%-13s pam_%s.sos %s/pam_%s.sos^ Authentication module %s/pam_%s.so is missing. Authentication process will not work correctly.Rr Rs Rq Rp Rw Rn s cached_loginRg Ra RY s rounds=s shadows niss nulloks broken_shadows (- t pam_stacksR t STACKR t LOGICt logicRC R t NAMER R R t LOGIC_FORCE_PKCS11_KRB5R R t argv_force_pkcs11_autht LOGIC_PKCS11_KRB5R t LOGIC_IGNORE_AUTH_ERRt LOGIC_IGNORE_UNKNOWNt LOGIC_SKIPNEXTt LOGIC_SKIPNEXT3t module_missingR2 Rp t AUTH_MODULE_DIRt X_OKR R R& R R R R R! t ARGVR R R R R R R R R ( R R R R R$ RC ( ( R t formatPAMModule sz + +! ( c C s t i i | } t i i | } | o | p | o] | oU y t i | Wn t j o n Xy t i | | Wq t j o q Xn d S( N( R2 R t isfilet destR, t islinkR6 t unlinkR; t symlinkt src( R R7 R3 R, R6 ( ( R t linkPAMServicec s c C s t } h | _ d } zMt t d t d } | d 7} | d 7} | d 7} | d 7} g } xt D]} | o | t | t j o | d 7} n | } | t pw| i o | t d j p\| i o | t d j pA| i o | t d j p&| i o | t d j p | i o | t d j o | t t j p| i oK | i oA | t d j o | t t j p | t d j o | t t j p| i o | t d j pk| i o0 | t t j o | t d j o | t t j p.| i o | t d j p| i o | t d j p | i o | t d j p | i o | t d j p | i o | t d j p | i o | t d j p | i o | t d j pq | i o | t d j pV | i! o | t d j p; | i" o0 | t t j o | t d j o | t t# j o | | i$ | 7} n qd W| i% d | i& d | i' | Wd y | o | i( n Wn t) j o n XX| i* t t d t+ t, Sd S( NRB s /pam.d/i s #%PAM-1.0 s # This file is auto-generated. s/ # User changes will be destroyed the next time s authconfig is run. s Ri s afs.krbRr t epsRe Rf Rk Rc Rd Rl Rs Rm Rn Rh Rq Rp Rw i (- R R, R R- RC RA R' R t prevmodulet standard_pam_modulesR R" t MANDATORYR R% R R R R R0 t argv_krb5_sc_authR t AUTHR R# R+ R R R R R R R R R t LOGIC_REQUISITER1 R R R R> R? R8 R R& ( R R R: R, RC ( ( R t writePAMr s< c C s y t i t d } Wn t j o t Sn X| i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d d | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i t! S( Ns /sysconfig/authconfigR R R R R R R R R R R R R R R R R R R R R R i (" R& R R' R( R? R t setBoolValueR R R R R R R R R R R R R R R R R R R R R R R R R R> R& ( R R( ( ( R t writeSysconfig s: c C s_ y t i t d } Wn t j o t Sn X| i d | i | i d | i t S( Ns /sysconfig/networkR i ( R& R R' R( R? R R R R R R> R& ( R R( ( ( R t writeNetwork s c C s | i y| i } | o | i } | o | i } | i o | o | i } n | i o | o | i } n | i p | i o' | i d j o | o | i } n | i o | o | i } n | i o | o | i } n | i o | o | i } n | i p | i o | o | i } n | o | i } | o | i } | o | i } | o | i } Wn t j o t Sn X| S( NR ( R R R R R R R R R R R R R R R R R R R R R R R R@ RB RC R? R ( R R ( ( R R s4 $ c . C sN t | i d d f g t | i d d f d d f g t | i d d f d d f g t | i d d f d d f d d f g t | i d d f d d f d d f d d f d d f g t | i d d f g t | i d d f g t | i d d f g t | i d d f d d f d d f d d f d d f d d f d d f d d f g t | i d d f d d f d d f g t | i d d f d d f g t | i d d f d d f d d f d d f d d f d d f d d f d d f d d f d d f d d f d! d f g t | i d" d f d# d f d$ d f d% d f d& d f d' d f d( d f d) d f d* d f d+ d f d, d f d- d f d. d f d/ d f d0 d f d& d f d' d f d1 d f g t | i d2 d f d3 d f d4 d f d5 d f d6 d f d7 d f d8 d f d9 d f d d f d: d f d' d f d; d f d< d f d= d f d> d f d? d f d@ d f dA d f d8 d f dB d f dC d f dD d f dE d f dF d f dG d f dH d f dI d f dJ d f dK d f d! d f g t | i d d f d: d f d' d f d* d f d= d f d> d f d? d f d@ d f d( d f dI d f dA d f d$ d f d" d f d, d f dD d f dG d f dH d f dJ d f d6 d f d8 d f dK d f g t | i d d f g g } | i t } y? x8 | D]0 } | i | | o | o | i } n qWWn t j o t Sn X| Sd S(L NR R% R R R R R R R R R R R R R" R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R! R R R R R R R R R R R R R R R R R R R R ( R R R R R R R R R R R R R R R@ RB RC t save_groupsR R& R t groupR t refR R? R ( R RF RD RE R ( ( R t writeChanged s / c C s d } d } g } g } t i d g t i d g t i d g t i d g g } t i } | p d Sn | i d p | d 7} n | | i d } d | } t i | t i t i } xL | D]D } | i t i j o+ | i i i d | _ t | | _ q q Wd | } t i | t i t i } | p) d | } t i | t i t i } n xC | D]; } | i t i j o" | i i | _ | i o PqqjqjW| i old | i } t i | t i t i } x | D] } | i t i j oh | i i i d } | i i o | d | i i 7} n | i o | i d | 7_ qc| | _ qqWd | i } t i | t i t i } x | D] } | i t i j oh | i i i d } | i i o | d | i i 7} n | i o | i d | 7_ q| | _ qqWn x | D] } | d | } t i | | d t i } xY | D]Q } | i t i j o8 | i | j o( d | d | _ | i d | _! Pq]q]Wq&Wd S( NRB t hst nsRx s _ldap._tcps _kerberos.t _kerbeross _kerberos._udp.R) R s _kerberos-adm._udp.i i (" t hostnamet qnamet resultsR[ t dnsclientt DNS_C_INt DNS_C_HSRl t sockett getfqdnt endswithR. Ry R t DNS_T_SRVt dns_typet rdataR3 R R R Rz R t DNS_T_TXTt dataR t portR R t ht DNS_T_SOAt dns_nameR R ( R Rl RK RL RM R[ Ry RZ ( ( R t probe4 s| 6 #c C sw d t | i GHd GHd t | i GHd t | i GHd t | i GHd | i GHd | i GHd t | i GHd t | i GHd | i GHd | i GHd t | i GHd | i GHd | i GHd t | i GHd t | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd t | i GHd t | i GHd GHd t | i GHd | i GHd t | i GHd | i GHd t | i GHd | i GHd! t | i GHd" | i! GHd# t | i" GHd t | i GHd | i GHd | i GHd$ t | i# GHd% t | i$ GHd& | i% GHd' | i& GHd( t | i' GHd | i GHd | i GHd) t | i( GHd | i GHd | i GHd | i GHd | i GHd* t | i) GHd+ t | i* | i+ f GHd, t | i, | i- f GHd- t | i. | i/ f GHd. t | i0 | i1 f GHd/ t | i2 | i3 f GHd0 t | i4 GHd S(1 Ns caching is %ss nss_files is always enableds nss_compat is %ss nss_db is %ss nss_hesiod is %ss hesiod LHS = "%s"s hesiod RHS = "%s"s nss_ldap is %ss LDAP+TLS is %ss LDAP server = "%s"s LDAP base DN = "%s"s nss_nis is %ss NIS server = "%s"s NIS domain = "%s"s nss_nisplus is %ss nss_winbind is %ss SMB workgroup = "%s"s SMB servers = "%s"s SMB security = "%s"s SMB realm = "%s"s Winbind template shell = "%s"s SMB idmap uid = "%s"s SMB idmap gid = "%s"s nss_sss is %s by defaults nss_wins is %ss pam_unix is always enableds shadow passwords are %ss! password hashing algorithm is %ss pam_krb5 is %ss krb5 realm = "%s"s krb5 realm via dns is %ss krb5 kdc = "%s"s krb5 kdc via dns is %ss krb5 admin server = "%s"s pam_ldap is %s s pam_pkcs11 is %s s# use only smartcard for login is %ss smartcard module = "%s"s smartcard removal action = "%s"s pam_smb_auth is %ss pam_winbind is %ss pam_sss is %s by defaults pam_cracklib is %s (%s)s pam_passwdqc is %s (%s)s pam_access is %s (%s)s pam_mkhomedir is %s (%s)s' Always authorize local users is %s (%s)s; Authenticate system accounts against network services is %s(5 R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R! R R R ( R ( ( R t printInfo sr c C sF | i o t i d t i d n t i d t i d t S( Ns /usr/sbin/pwconvs /usr/sbin/grpconvs /usr/sbin/pwunconvs /usr/sbin/grpunconv( R R R2 R} R& ( R ( ( R t toggleShadow s c C s, | i p | i o| i o | i i d d d i d d d i d d d } | i } | i } | p d } n | d j o | d j o d Sn d | o d p d | | o d p d | | i f } | o t i i d | n | i o t | | d | i q(t i | n d S( NR i i R s R Ry s! /usr/bin/net join %s%s %s%s -U %ss -w RB s -S s [%s] s sword:( R R R R R R R3 R Ry R t protocolt cmdR R R R R R R2 R} ( R R Ry R` Ra R3 ( ( R t joinDomain s 9 8 c C s | i t | i | i | t | i p | i t t d | t | i p | i t t d | t | i t t d | t | i t t d | t | i t t d | t | i t t d | t | i t t d | t | i | d S( NRn t sssdt dbbindt dbibindt hesiodbindt ldapbindt odbcbind( R R_ R R R R{ R R R t PATH_WINBINDt PATH_WINBIND_PIDR R t PATH_SSSDt PATH_SSSD_PIDR t PATH_DBBINDt PATH_DBBIND_PIDR t PATH_DBIBINDt PATH_DBIBIND_PIDR t PATH_HESIODBINDt PATH_HESIODBIND_PIDR t PATH_LDAPBINDt PATH_LDAPBIND_PIDR t PATH_ODBCBINDt PATH_ODBCBIND_PIDR R ( R R{ ( ( R t post s0 c C s | i p | i oj y t i | i WnB t j o6 \ } } | t i j o t i | i d qm n Xt | i Sn t S( Ni ( R R R R2 R~ R" R; R R R< t ENOENTt mkdirR R ( R R R ( ( R t testLDAPCACerts s c C s: | i p | i o" | i o t i d | i n d S( Ns /usr/sbin/cacertdir_rehash ( R R R R R2 R} R" ( R ( ( R t rehashLDAPCACerts s c C s | i p t Sn | i yW t i | i } t | i d t d } | i | i | i | i Wn3 t t t f j o | i t d t Sn X| i t S( NR i s Error downloading CA certificate( R R# R Rz t urllib2t urlopent readfRA R" t LDAP_CACERT_DOWNLOADEDt writefR R R> R? R; R R R R{ R& ( R R~ R ( ( R t downloadLDAPCACert s (7 R R R R* R1 R5 R8 R? RB RD RP RV R] Ra Re Rr Rv R R R R R R R R R R R R R R R R R R R R R R R R1 R8 R@ RB RC R RG R] R^ R_ Rb Rw Rz R{ R ( ( ( R R sl ` ( , @ 5 * & ^ T i 4 5 * F H E : " : S @ ( R R2 R R8 RQ R R R~ R& RN R R< R| R t subprocessR t gettextt lgettextR R' R R R t globalst LIBDIRR. R t PATH_PWCONVR R Rm Rn Ro Rp Rq Rr Rs Rt Ru Rv Ri Rj Rk Rl R R t PATH_SEBOOLt PATH_SCEVENTDt PATH_SCEVENTD_PIDR t PATH_LIBNSS_DBt PATH_LIBNSS_LDAPt PATH_LIBNSS_NISt PATH_LIBNSS_HESIODt PATH_LIBNSS_ODBCBINDt PATH_LIBNSS_WINBINDt PATH_LIBNSS_WINSt PATH_LIBNSS_SSSt PATH_PAM_KRB5t PATH_PAM_LDAPt PATH_PAM_SMBt PATH_PAM_WINBINDt PATH_PAM_PKCS11t PATH_PAM_SSSt PATH_WINBIND_NETR> R t LOGIC_REQUIREDR? t LOGIC_SUFFICIENTt LOGIC_OPTIONALR* R) t LOGIC_PKCS11R R( R& R+ R, R R R R R R! R# R( R0 RA RF RI RK RO t argv_unix_autht argv_unix_passwordt argv_afs_autht argv_afs_passwordt argv_cracklib_passwordt argv_passwdqc_passwordt argv_eps_autht argv_eps_passwordt argv_pkcs11_authR' t argv_krb5_authR= t argv_krb5_passwordt argv_ldap_autht argv_ldap_passwordt argv_otp_autht argv_smb_autht argv_succeed_if_autht argv_succeed_if_accountt argv_succeed_if_sessiont argv_succeed_if_nonlogint argv_winbind_autht argv_winbind_passwordt argv_sss_autht argv_sss_passwordt argv_keyinit_sessionR R> t ACCOUNTt SESSIONt PASSWORDR! R< R" R# R% R0 R& R R; Rz t DEFAULT_DNS_QUERY_SIZER R R R R R R R R R R R ( RA R R R R R R R R! R R R R Ri R& R? R R R Rr R R R R0 Rt R, R R R R R Rm R R R R R R+ R& R0 R R R Ru R R R' R R R R R R R8 R) R* R R R Rs R RQ R( R R= R R R RF R2 Ro R R R R Rv R R R< R R< R R R R R Rk R Rq RI RK R R R R R R R% R! R R R R R R# Rz R RN R R' R# Rj Rn R R R R> Rl R R R RO R R R" R~ R| R> R R R R R R R R R( R. R; R Rp ( ( R t ? s$ iu & E