| Server IP : 182.53.201.61 / Your IP : 216.73.217.175 Web Server : Apache/2.2.15 (Fedora) System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686 User : apache ( 48) PHP Version : 5.3.3 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /proc/3628/root/usr/share/authconfig/ |
Upload File : |
ʼJc D @ sR d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k
Z
d d k Z d d k Z d d k
Z
d d k Td d k Z d d k Z e i Z d Z d Z d Z d Z d Z d Z d Z d
Z d Z d e e d
j o
d Z n d Z e d Z d Z d Z! d Z" d Z# d Z$ d Z% d Z& d Z' d Z( d Z) d Z* d Z+ d Z, d Z- d Z. d Z/ d! Z0 d" Z1 d# Z2 d$ Z3 d% Z4 d& Z5 e d' Z6 d( e d) Z7 e d* Z8 e d+ Z9 e d, Z: e d- Z; e d. Z< e d/ Z= e d0 Z> e d1 Z? e d2 Z@ e d3 ZA e d4 ZB d5 ZC d6 ZD d7 ZE d8 ZF d9 ZG d: ZH d; ZI d< ZJ d= ZK d> ZL d? ZM d@ ZN dA ZO dB ZP dC ZQ dD ZR dE ZS dF ZT dG ZU dH ZV dI ZW dJ ZX dK ZY dL ZZ dM Z[ dN Z\ dO Z] dP Z^ dQ Z_ dR Z` dS Za dT g Zb dT dU g Zc dV g Zd dV g Ze dT dW dX g Zf dY g Zg dV g Zh dU g Zi g Zj g Zk dZ g Zl dV g Zm dV d[ g Zn dU g Zo dV g Zp dU g Zq dV g Zr dV d\ g Zs d] d^ g Zt d_ d^ g Zu d` d^ da g Zv db d^ da g Zw dV g Zx dU g Zy dc g Zz dd de df dg dh g Z{ e| di dj \ Z} Z~ Z Z dk dl dm dn g Z e| di do \ Z Z Z Z Z e| di dj \ Z Z Z Z g Z e e e e f D]
Z e g q[ Z e e} eG dp g g e e} eQ dq ew g e e} eM dr ek g e e} eJ ds en g e e} eI dt g g e e} eI du g g e e} eI dv eb g e e} eH dq et g e e} eI dw ed g e e} eI dx ed g e e} eI dy eh g e e} eI ds em g e e} eI dz ep g e e} eI d{ er g e e} eI d| es g e e} eI d} ex g e e} eG d~ g g e e~ eG d g g e e~ eG dv g g e e~ eI d g g e e~ eI dq eu g e e~ eK dz g g e e~ eK ds g g e e~ eK d} g g e e~ eG dt g g e e eJ dr g g e e eH d ef g e e eH d eg g e e eI dv ec g e e eI dw ee g e e eI dx ee g e e eI d ei g e e eI ds eo g e e eI dz eq g e e eI d} ey g e e eG d~ g g e e eJ d ez g e e eG d g g e e eJ d g g e e eQ dq ev g e e eG dv g g e e eJ dw g g e e eJ dx g g e e eJ ds g g e e eJ dz g g g- e e <e e} eG dp g g e e} eI dv eb g e e} eH dq et g e e} eI dw ed g e e} eI dx ed g e e} eI dy eh g e e} eI ds em g e e} eI dz ep g e e} eI d{ er g e e} eI d| es g e e} eI d} ex g e e} eG d~ g g e e~ eG d g g e e~ eG dv g g e e~ eI d g g e e~ eI dq eu g e e~ eK dz g g e e~ eK ds g g e e~ eK d} g g e e~ eG dt g g e e eH d ef g e e eH d eg g e e eI dv ec g e e eI dw ee g e e eI dx ee g e e eI d ei g e e eI ds eo g e e eI dz eq g e e eI d} ey g e e eG d~ g g e e eJ d ez g e e eG d g g e e eJ d g g e e eQ dq ev g e e eG dv g g e e eJ dw g g e e eJ dx g g e e eJ ds g g e e eJ dz g g g' e e <e e} eG dp g g e e} eI du g g e e} eG d~ g g e e~ eG d g g e e~ eG dv g g e e~ eI d g g e e~ eI dq eu g e e~ eK dz g g e e~ eK ds g g e e~ eK d} g g e e~ eG dt g g e e eG d~ g g e e eJ d ez g e e eG d g g e e eJ d g g e e eQ dq ev g e e eG dv g g e e eJ dw g g e e eJ dx g g e e eJ ds g g e e eJ dz g g g e e <e e} eG dp g g e e} eM dr ek g e e} eJ ds en g e e} eI dt g g e e} eG d~ g g e e~ eG d g g e e~ eG dv g g e e~ eI d g g e e~ eI dq eu g e e~ eK dz g g e e~ eK ds g g e e~ eK d} g g e e~ eG dt g g e e eG dr g g e e eJ d ez g e e eG d g g e e eJ d g g e e eQ dq ev g e e eG dv g g e e eJ dw g g e e eJ dx g g e e eJ ds g g e e eJ dz g g g e e <d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d d d YZ d d d YZ d Z d Z d e f d YZ e| di d \ Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d e d d e d e d e e d e d e e d e d e e d e d e e d e d e d e d e d e d e d e d g Z d d d YZ d S( iN( t *s /etcs system-auths system-auth-acs
password-auths password-auth-acs fingerprint-auths fingerprint-auth-acs smartcard-auths smartcard-auth-act lib64t acutils /lib64s /libs /securitys
/sbin/portmaps /usr/sbin/pwconvs /usr/sbin/nscds /var/run/nscd/nscd.pids /usr/sbin/dbbinds /var/run/dbbind.pids /usr/sbin/dbibinds /var/run/dbibind.pids /usr/sbin/hesiodbinds /var/run/hesiodbind.pids /usr/sbin/ldapbinds /var/run/ldapbind.pids /usr/sbin/odbcbinds /var/run/odbcbind.pids /usr/sbin/winbindds /var/run/winbindd.pids /sbin/ypbinds /var/run/ypbind.pids /usr/sbin/setsebools /usr/bin/pkcs11_eventmgrs /var/run/sceventd.pids /usr/bin/pkcs11_setups /libnss_db.so.2s /usrs /libnss_ldap.so.2s /libnss_nis.so.2s /libnss_hesiod.so.2s /libnss_odbcbind.so.2s /libnss_winbind.so.2s /libnss_wins.so.2s /pam_krb5.sos /pam_ldap.sos /pam_smb_auth.sos /pam_winbind.sos /pam_pkcs11.sos /pam_fprintd.sos /usr/bin/nets /etc/openldap/cacertss authconfig_downloaded.pems /var/lib/authconfigt requiredt requisitet
sufficientt optionals, [default=bad success=ok user_unknown=ignore]sJ [default=bad success=ok auth_err=ignore user_unknown=ignore ignore=ignore]s@ [success=done authinfo_unavail=ignore ignore=ignore default=die]s( [success=done ignore=ignore default=die]s4 [success=ok authinfo_unavail=2 ignore=2 default=die]s! [success=ok ignore=2 default=die]s [success=1 default=ignore]s [success=3 default=ignore]c C s | i d d d i S( Ns
i i ( t splitt rstrip( t s( ( s! /usr/share/authconfig/authinfo.pyt
snipString| s c C s1 | i d d } d i t d | i d S( Ns t t ,( t replacet joint filtert NoneR ( t lstR ( ( s! /usr/share/authconfig/authinfo.pyt cleanList s c C s- | i | o | t | i St Sd S( N( t
startswitht lent lstript False( t linet key( ( s! /usr/share/authconfig/authinfo.pyt matchKey s c C s7 | i | o | t | i t i d St Sd S( Nt =( R R R t stringt
whitespaceR ( R R ( ( s! /usr/share/authconfig/authinfo.pyt matchKeyEquals s c C s
| i | S( N( R ( R R ( ( s! /usr/share/authconfig/authinfo.pyt matchLine s c C s | i i | i S( N( t lowerR ( R R ( ( s! /usr/share/authconfig/authinfo.pyt
matchLineI s c C s | o
| d | S| Sd S( NR ( ( R t value( ( s! /usr/share/authconfig/authinfo.pyt commaAppend s
c C sV | o
| o t S| p | o t S| o | | j S| i | i j Sd S( N( R t TrueR ( t at bt case_sensitive( ( s! /usr/share/authconfig/authinfo.pyt
stringsDiffer s c C s | i d d } t | d j o | d } n d } t | } x t o | i | | } | d j o d S| d j o& | | d i o | | 7} qH n | | t | j o& | | | i o | | 7} qH n | SWd S( Nt :i i ( R R R# t findR t isalnum( t
configurationt candidateR t startt clen( ( s! /usr/share/authconfig/authinfo.pyt checkNSS s$
"
,
c C s d } yS t i | | | } | t i j o t i | t i n t i | t i Wnb t j
oV \ } } | d j o+ y t i | Wq t j
o q Xn t | | n X| S( Ni(
t ost opent O_RDONLYt fcntlt lockft LOCK_SHt LOCK_EXt OSErrort closet IOError( t filenamet modet permst fdt errnot strerr( ( s! /usr/share/authconfig/authinfo.pyt openfdLocked s
c C s& t i t | t i t i B| d S( Ns r+( R0 t fdopenR@ t O_RDWRt O_CREAT( R: R< ( ( s! /usr/share/authconfig/authinfo.pyt
openLocked s c C sG d } | i d } x+ | D]# } | o | d | d 7} q q W| S( Nt R s kdc = s
( R ( t kdclistt outputt kdc( ( s! /usr/share/authconfig/authinfo.pyt krbKdc s c C sM d } | i d } x1 | D]) } | o | d 7} | | d 7} q q W| S( NRE R s admin_server = s
( R ( t adminserversRG t adminserver( ( s! /usr/share/authconfig/authinfo.pyt krbAdminServer s
c C sQ d } | o@ | d | d 7} | t | 7} | t | 7} | d 7} n | S( NRE R s = {
s }
( RI RL ( t realmRF RJ RG ( ( s! /usr/share/authconfig/authinfo.pyt krbRealm s c C s | i d d } t | d j o
d } n | d } | d i i d } | i i d } | | j o | i t i d St S( NR i i RE i ( R R R R R R R R ( R R t linelstt paramt keylst( ( s! /usr/share/authconfig/authinfo.pyt matchLineSMB s
t try_first_passt use_authtokt use_first_passs retry=3s type=s
enforce=userst
wait_for_cardt no_subsequent_promptt nolocals
uid >= 500t quiets uid < 500s service in crondt use_uidsK service notin login:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensavert revoket descryptt bigcryptt md5t sha256t sha512i i t autht accountt sessiont passwordi t envt
succeed_ift pkcs11t krb5t permitt fprintdt unixt afss afs.krbt eps_autht ldapt otpt smb_autht winbindt denyt accesst localusert cracklibt passwdqct
eps_passwdt keyinitt limitst mkhomedirc C s/ d } | i d } | | i d d 7} | S( Ns DC=t .s ,DC=( R R
( t domainRG ( ( s! /usr/share/authconfig/authinfo.pyt domain2dn s i c C sh | p] | o t i d t i d qd y t i t t i d Wqd t j
o qd Xn t S( Ns' /sbin/service nscd stop >/dev/null 2>&1s /sbin/service nscd starts /sbin/service nscd stop( R0 t systemt statt
PATH_NSCD_PIDR7 R# ( t
enableCachingt nostart( ( s! /usr/share/authconfig/authinfo.pyt toggleCachingService s
c C s | o| o| p t i d | n yP t i t t i d t i d | p t i d t i d n Wn t j
o n Xyw t i t t i d t i d | pE y t i t t i d Wqt j
o t i d qXn Wqt j
o qXn | p t i d
n y] t i t | p8 y t i t t i d Wqt j
o qXn t i d Wn t j
o n Xt S(
Ns /bin/domainname s /sbin/chkconfig --add portmaps& /sbin/chkconfig --level 345 portmap ons* /sbin/service portmap stop >/dev/null 2>&1s /sbin/service portmap starts /sbin/chkconfig --add ypbinds% /sbin/chkconfig --level 345 ypbind ons /sbin/service ypbind restarts /sbin/service ypbind starts /bin/domainname "(none)"s /sbin/service ypbind stops& /sbin/chkconfig --level 345 ypbind off( R0 R~ R t PATH_PORTMAPR7 t PATH_YPBINDt PATH_YPBIND_PIDR# ( t enableNist nisDomainR ( ( s! /usr/share/authconfig/authinfo.pyt toggleNisService sL
c C s | o yl t i | t i d | t i d | d | p. t i d | d t i d | d n Wqt j
o qXn ym t i | | p@ y& t i | t i d | d Wq t j
o q Xn t i d | d Wn t j
o n Xt S( Ns /sbin/chkconfig --add s /sbin/chkconfig --level 345 s ons /sbin/service s stop >/dev/null 2>&1s starts stops off( R0 R R~ R7 R# ( t enablet patht pidfilet nameR ( ( s! /usr/share/authconfig/authinfo.pyt toggleSplatbindService s,
c C s | o d Sd Sd S( Nt enabledt disabled( ( t val( ( s! /usr/share/authconfig/authinfo.pyt
formatBool s c C sa y t i \ } } Wn t j
o d SX| p t i | t i d n d } y7 t i | t i } t i | t i | t i @ Wn t j
o n Xt
} x0| p(y7 g } g }
t i | g g | g d \ } } }
Wn6 t i j
o' \ } }
t
i i d |
d n X| o" |
o t i | t } q n d } y t i | d } Wn t j
o \ } }
| t i j p | t i j o q | t i j o t i | t } q t
i i d |
d t i | t } q n X| o yp | | 7} | o t
i i | n | | j o: t i | | t i | d d } t
i i d n Wqt j
o: \ } }
t
i i d
|
d t i | t } qXq t i | t } q Wy t i | t i Wn t j
o n Xy t i | d \ } } Wn3 t j
o' \ } }
t
i i d |
d n Xd S( Ni RE i< s select: s
i s read: s
s <...>
s write: s waitpid: ( R0 t forkptyR7 R~ t _exitR3 t F_GETFLt F_SETFLt
O_NONBLOCKR9 R t selectt errort syst stderrt writeR8 R# t readR> t EINTRt EAGAINt EIOt killt signalt SIGTERMt waitpid( t commandt echot queryt responset pidt masterRG t it eoft ifdst efdst ofdst errt textt ct childt status( ( s! /usr/share/authconfig/authinfo.pyt feedFork s~
" +
c
C s y t i | } Wn t j
o t SXxW | D]O } y3 t i | d | } t i | i o t SWq1 t j
o q1 Xq1 Wt S( Nt /( R0 t listdirR7 R# R t S_ISREGt st_modeR ( R R R: t st( ( s! /usr/share/authconfig/authinfo.pyt
isEmptyDir< s c C s yg t t g | d t } | i d i d } | i d j o d S| d d j o | d 3n Wn t j
o d SX| S( Nt stdouti s
iRE ( t Popent PATH_SCSETUPt PIPEt communicateR t
returncodeR R7 ( t optionsR R ( ( s! /usr/share/authconfig/authinfo.pyt callPKCS11SetupL s c C s% t d g } | d j o g S| S( Nt list_modules( R R ( t mods( ( s! /usr/share/authconfig/authinfo.pyt getSmartcardModulesX s
c C s t d t d g S( Nt Lockt Ignore( t _( ( ( s! /usr/share/authconfig/authinfo.pyt getSmartcardActions^ s c C s t | } | i | S( N( t AuthInfoR ( t msgcbt info( ( s! /usr/share/authconfig/authinfo.pyR a s
t SaveGroupc B s e Z d Z d Z RS( c C s | | _ | | _ d S( N( t saveFunctiont attrlist( t selft savefuncR ( ( s! /usr/share/authconfig/authinfo.pyt __init__g s c C s t } x | i D] \ } } | d j o) | p t | | t | | j } q | d j o/ | p" t t | | t | | t } q | d j o/ | p" t t | | t | | t } q q W| S( NR% R R ( R R t getattrR' R# ( R R$ R% t rett anamet atype( ( s! /usr/share/authconfig/authinfo.pyt attrsDifferk s
)
/
3( t __name__t
__module__R R ( ( ( s! /usr/share/authconfig/authinfo.pyR f s t
FileBackupc B s, e Z d Z d Z d Z d Z RS( c C s | | _ | | _ d S( N( t
backupNamet origPath( R t
backupnamet origpath( ( s! /usr/share/authconfig/authinfo.pyR w s c C sn d } t } d } d } y5 t | t i t i Bd } t | t i d } Wn! t j
o \ } } t } n XyG x@ | o8 t i | d } | p t } Pn t i
| | qw WWn t t f j
o
t } n X| t i
j o
t } n y | o t i | n Wn t t f j
o n Xy | o t i | n Wn t t f j
o
t } n X| S( Ni i i ( R# R R@ R0 RB RC R2 R9 R R R R7 R> t ENOENTR8 ( R t srct destR t rvt srcfdt destfdR? R% ( ( s! /usr/share/authconfig/authinfo.pyt safeCopy{ sB
c C s d } t } y( t i i | p t i | n Wn! t j
o \ } } t } n X| d | i } | o | i | i | } n | p+ y t i
| Wq t j
o q Xn | S( Ni R ( R# R0 R t isdirt mkdirR9 R R R R t unlinkR7 ( R t destdirR R R? t
backuppath( ( s! /usr/share/authconfig/authinfo.pyt backup s"
c C s d } t } y t i i | p t SWn! t j
o \ } } t } n X| d | i } | o, t i i | o | i | | i } n | S( Ni R (
R# R0 R R R R9 R t isfileR R ( R t backupdirR R R? R ( ( s! /usr/share/authconfig/authinfo.pyt restore s ( R R R R R R ( ( ( s! /usr/share/authconfig/authinfo.pyR v s " c C s2 t i d } t i | o t i | d j S( Ns$ /sbin/chkconfig nscd >/dev/null 2>&1i ( R0 R~ t WIFEXITEDt WEXITSTATUS( R ( ( s! /usr/share/authconfig/authinfo.pyt readCache s c C s] | o t i d t i d n5 y t i t t i d Wn t j
o n Xt S( Ns /sbin/chkconfig --add nscds# /sbin/chkconfig --level 345 nscd ons$ /sbin/chkconfig --level 345 nscd off( R0 R~ R t PATH_NSCDR7 R# ( R ( ( s! /usr/share/authconfig/authinfo.pyt
writeCache s
t CacheBackupc B s e Z d Z d Z RS( c C s d } t } y( t i i | p t i | n Wn! t j
o \ } } t } n X| d | i } | op d } y5 t } t
| d } | i t t
| Wn t j
o
t } n X| o | i q n | p+ y t i | Wqt j
o qXn | S( Ni R t w( R# R0 R R R R9 R R R R R1 R t strt intR8 R R7 ( R R R R R? R R R ( ( s! /usr/share/authconfig/authinfo.pyR s0 c
C s d } t } y t i i | p t SWn! t j
o \ } } t } n X| d | i } | o t i i | os d } y/ t | d } t
| i } t | Wn" t t
t f j
o
t } n X| o | i q n | S( Ni R t r( R# R0 R R R R9 R R R R1 R R R R7 t
ValueErrorR8 ( R R R R R? R R R ( ( s! /usr/share/authconfig/authinfo.pyR s& ( R R R R ( ( ( s! /usr/share/authconfig/authinfo.pyR s i s hesiod.confs /hesiod.confs pam_smb.confs
/pam_smb.confs yp.confs /yp.confs ldap.confs
/ldap.confs
openldap.confs /openldap/ldap.confs krb5.confs
/krb5.confs krb.confs /krb.confs pam_pkcs11.confs /pam_pkcs11/pam_pkcs11.confs smb.confs /samba/smb.confs
nsswitch.confs /nsswitch.confs cacheenabled.confRE s /pam.d/t
authconfigs /sysconfig/authconfigt networks /sysconfig/networks libuser.confs
/libuser.confs
login.defss /login.defsR c B s e Z d Z d Z d Z d Z d Z d Z d Z d Z d Z
d Z d
Z d Z
d Z d
Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z! d Z" d! Z# d" Z$ d# Z% d$ Z& d% Z' d& Z( d' Z) d( Z* d) Z+ d* Z, d+ Z- d, Z. d- Z/ d. Z0 d/ Z1 d0 Z2 d1 Z3 d2 Z4 d3 Z5 d4 Z6 d5 Z7 d6 Z8 d7 Z9 d8 Z: d9 Z; d: Z< RS(; c C s | | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _
d | _ d | _ d | _
d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _! d | _" d | _# d | _$ d | _% d | _& d | _' d | _( d | _) d | _* d | _+ d | _, d | _- d | _. d | _/ t0 | _1 d | _2 d | _3 d | _4 d | _5 d | _6 d | _7 d | _8 d | _9 d | _: d | _; d | _< d | _= d | _> d | _? d | _@ d | _A d | _B d | _C d | _D d | _E d | _F d | _G d | _H d | _I d | _J d | _K d | _L d | _M d | _N t0 | _O d S( NRE (P t messageCBt backupDirt hesiodLHSt hesiodRHSt
ldapServert
ldapBaseDNt
kerberosRealmR t kerberosRealmviaDNSt kerberosKDCt kerberosKDCviaDNSt kerberosAdminServert nisServerR t nisLocalDomaint smbWorkgroupt smbRealmt
smbServerst smbSecurityt smbIdmapUidt smbIdmapGidt winbindSeparatort winbindTemplateHomedirt winbindTemplatePrimaryGroupt winbindTemplateShellt winbindUseDefaultDomaint winbindOfflinet smartcardModulet smartcardActiont enableCachet enableCompatt enableDBt enableDirectoriest enableHesiodt
enableLDAPt enableLDAPSt enableNISt
enableNIS3t enableDBbindt
enableDBIbindt enableHesiodbindt enableLDAPbindt enableOdbcbindt
enableWinbindt
enableWINSt preferDNSinHostst enableAFSt enableAFSKerberosR# t enableNullOkt enableCracklibt enableEPSt enableKerberost enableLDAPAutht passwordAlgorithmt
algoRoundst enableOTPt enablePasswdQCt enableShadowt enableSMBt enableWinbindAutht enableLocAuthorizet enablePAMAccesst enableSysNetAutht enableMkHomeDirt enableSmartcardt brokenShadowt forceBrokenShadowt forceSmartcardt
enableFprintdt joinUsert joinPasswordt cracklibArgst passwdqcArgst
localuserArgst
pamAccessArgst
mkhomedirArgst
ldapCacertDirt
ldapCacertURLt pamLinked( R R ( ( s! /usr/share/authconfig/authinfo.pyR s c C so y t i t t i } Wn t j
o t SXt | i d | _ t | i d | _
| i t S( Nt lhst rhs(
t shvfileR t all_configst
CFG_HESIODR R9 R R
t getValueR R R8 R# ( R t shv( ( s! /usr/share/authconfig/authinfo.pyt
readHesiod s
c C s y t t t i d } Wn t j
o t SXt | i | _ | i } t
t | } d i t d | | _ | i t S( NR R ( R1 RM t CFG_PAM_SMBR R9 R R
t readlineR
t readlinest mapR R R R R8 R# ( R t ft servers( ( s! /usr/share/authconfig/authinfo.pyt readSMB s
c C sL y t t t i d } Wn t j
o t SXx
| D]} | i } t | d } | o& | i o t | i
| | _
q8 n t | d } | o | i d d } t
| d j o q8 n | d | i j o q8 n t
| d j o q8 n | d } t | d } | o t | i
| | _
q:q8 q8 W| i t S( NR t ypserverR| i i i t server( R1 RM t CFG_YPR R9 R t stripR R R" R R R R R8 R# ( R RV R R! ( ( s! /usr/share/authconfig/authinfo.pyt readNIS s4
!
c C sw | i d } d } x[ | D]S } | oF | o | d 7} n d | j o | | 7} qo | d | d 7} q q W| S( NR RE s ://s ldap://R ( R ( R R t lR t item( ( s! /usr/share/authconfig/authinfo.pyt ldapHostsToURIs s
c C s6 t | _ d | _ y t t t i d } Wn t j
o t SXx | D] } | i } t
| d } | o | | _ qJ n t
| d } | o | i | 7_ qJ n t
| d } | o | i | 7_ qJ n t
| d } | o t | d | _
qJ qJ qJ W| i t | i | _ | i t S( NRE R t baset hostt urit sslt start_tls( t PATH_LDAP_CACERTSRG R R1 RM t CFG_LDAPR R9 R R\ R R R R R` R R8 R# ( R RV R R! ( ( s! /usr/share/authconfig/authinfo.pyt readLDAP s8
c C s* y | i | SWn t j
o d SXd S( NRE ( t allKerberosKDCst KeyError( R RM ( ( s! /usr/share/authconfig/authinfo.pyt getKerberosKDC s c C s* y | i | SWn t j
o d SXd S( NRE ( t allKerberosAdminServersRj ( R RM ( ( s! /usr/share/authconfig/authinfo.pyt getKerberosAdminServer s c C sz d } h | _ h | _ y t t t i d } Wn t j
o t SXx| D]} | i } | d d !d j o | d d !} d } qP n | d j o t | d } | o | | _
qP n t | d } | o t | d
d j | _ qP n t | d } | o t | d
d j | _
qP q0qP | d j o | p: | i d d } t | d j o qP n | d } q0| d d !d
j o
d } qP n | i
p
| | _
n t | d } | o& t | i | | | i | <qP n t | d } | o# t | i | | | i | <q0qP qP W| i
o. | i | i
| _ | i | i
| _ n | i t S( NRE R i i t [it libdefaultst
default_realmt dns_lookup_kdct truet dns_lookup_realmt realmst }RH t admin_server( Ri Rl R1 RM t CFG_KRB5R R9 R R\ R R R R R R R R R" Rk Rm R R R8 R# ( R t sectionRV R t
subsectionR! ( ( s! /usr/share/authconfig/authinfo.pyt readKerberos sd
+
c C s t } t d g | _ | i d j o t S| i d | _ t d g } | d j o t Sx% | D] } d | j o
t } qe qe W| o t d | _ n t d | _ t S( Nt
use_modulei t rm_actions
lockhelper.shR R ( R R R R R# R R ( R t lockt rmactionst action( ( s! /usr/share/authconfig/authinfo.pyt
readSmartcardT s
c C s d } d } y t t t i d } Wn t j
o | SXx | D] } | i } t | d o qD n t | d o qD n t | d } | o | i d d i } qD n | p
| d j o qD n t
| | } | o
| } qD qD W| i | S( NRE R t #t ;Rn t ]i t global( R1 RM t CFG_SMBR R9 R\ R R R R RR R8 ( R R t resultRx RV R R! t res( ( s! /usr/share/authconfig/authinfo.pyt readWinbindGlobalg s0
c C sZ | i | } | o@ | i d j p | i d j p
| d j o t St Sn d S( Nt yesRr t 1( R R R# R R ( R R t tmp( ( s! /usr/share/authconfig/authinfo.pyt readWinbindGlobalBool s 3c C s | i d } | o
| | _ n | i d } | o
| | _ n | i d } | o
| | _ n | i d } | o
| | _ n | i p
d | _ n | i d } | o
| | _ n | i p
d | _ n | i d } | o
| | _ n | i p
d | _ n | i d } | o
| | _ n | i d
} | o
| | _ n | i d } | o
| | _ n | i d } | o
| | _
n | i
p
d
| _
n | i d } | d j o
| | _
n | i d } | d j o
| | _ n t S( Nt workgroups password serverRM t securityt users idmap uids 16777216-33554431s idmap gids winbind separators template homedirs template primary groups template shells
/bin/falses winbind use default domains winbind offline logon( R R
R R R
R R R R R R R R R R R# ( R R ( ( s! /usr/share/authconfig/authinfo.pyt readWinbind sZ
c C s d } y t t t i d } Wn t j
o t SXx | D] } | i } t | d } | o
| } q> t | d } | o t t | d | _
t | d } | d j o t | d } n t | d } | d j o | d j o | | j | _ q
q> q> W| o t t | d | _
t t | d | _ t t | d
| _ t t | d | _ t t | d | _ t t | d | _ t t | d
| _ t t | d | _ n | i t S( NRE R s passwd:s hosts:t winst nist dnst compatt dbt directoriest hesiodRn t nisplusRq ( R1 RM t CFG_NSSWITCHR R9 R R\ R t boolR/ R' R R( R R R R R R R R& R8 R# ( R t nssconfigRV R R! t nispost dnspos( ( s! /usr/share/authconfig/authinfo.pyt readNSS s@
c C s t | _ t S( N( R R R# ( R ( ( s! /usr/share/authconfig/authinfo.pyR s c g C s5 y t t t i d } WnE t j
o9 y t t d t d } Wqb t j
o t SXn Xd } xd| D]\} | i d d } t | d j o | d } n | i
} | d d j o | | d d 7} qo n | | } d } | i } d } | i d d } t | d
j o qo n | \ } } | d j o. | d j o! | d
j o | d j o qo n | i
d o | i d d } n | i d d } t | d
j o qo n | d d j o qo n | d } | i
d o | d 7} n | d } | i d d } t | d j o qo n | d i d d \ } t | d
j o | d } n | i
d o$ t | _ | o
| | _ qo qo n | i
d o t | _ qo n | i
d o t | _ qo n | i
d o3 t | _ | t j o
t | _ qo t | _ qo n | i
d o t | _ qo n | i
d o$ t | _ | o
| | _ qo qo n | i
d o t | _ qo n | i
d o t | _ qo n | i
d o$ t | _ | o
| | _ qo qo n | i
d o$ t | _ | o
| | _ qo qo n | i
d o$ t | _ | o
| | _ qo qo n | d
j o | i
d o x1 t! D]) } | i" | d j o
| | _# qqWyF | i$ d }
| |
d i d d } t% t& | d | _' Wn t( t) f j
o n Xy t* i+ d! t | _, WqMt- j
o t | _, qMXqQn | d j o0 | i
d o | i" d" d j | _. qn | d j o0 | i
d o | i" d# d j | _/ qqo qo W| i0 yt1 i2 t t3 i } y | i4 d$ | _5 Wn t( j
o n Xy | i4 d% | _6 Wn t( j
o n Xy | i4 d& | _7 Wn t( j
o n Xy | i4 d' | _ Wn t( j
o n Xy | i4 d( | _8 Wn t( j
o n Xy | i4 d) | _9 Wn t( j
o n Xy | i4 d* | _: Wn t( j
o n Xy | i4 d+ | _; Wn t( j
o n Xy | i4 d, | _< Wn t( j
o n Xy | i4 d- | _= Wn t( j
o n Xy | i4 d. | _ Wn t( j
o n Xy | i4 d/ | _> Wn t( j
o n Xy | i4 d0 | _ Wn t( j
o n Xy | i4 d1 | _ Wn t( j
o n Xy | i4 d2 | _ Wn t( j
o n Xy | i4 d3 | _ Wn t( j
o n Xy | i4 d4 | _? Wn t( j
o n Xy0 | i4 d5 }
|
o
d6 | _# n
d7 | _# Wn t( j
o n Xy | i4 d8 | _@ Wn t( j
o n Xy | i4 d9 | _A Wn t( j
o n Xy | i4 d: | _B Wn t( j
o n Xy | i4 d; | _C Wn t( j
o n Xy | i4 d< | _ Wn t( j
o n Xy | i4 d= | _, Wn t( j
o n Xy | i4 d> | _ Wn t( j
o n Xy | i4 d? | _D Wn t( j
o n Xy | i4 d@ | _ Wn t( j
o n Xy | i4 dA | _ Wn t( j
o n Xy | i4 dB | _ Wn t( j
o n Xy | i4 dC | _ Wn t( j
o n Xy | i4 dD | _E Wn t( j
o n X| iF dE } | t! j o
| | _# n | i0 Wn t j
o n X| i o | i o
t | _ n | i o | i o
t | _ n | i/ o9 | i o. | i o# | i o | i o
t | _G n t S(F NR s /pam.d/RE R i i is \R i Ra Rb Rd Rc Rn R t includeR t pam_cracklibt pam_krb5t pam_ldapt
pam_pkcs11t pam_fprintdt pam_passwdqct pam_smbt pam_winbindt
pam_accesst
pam_mkhomedirt
pam_localusert pam_unixs rounds=i s /etc/shadowt nullokt
broken_shadowt USEAFSt USEAFSKERBEROSt USEDBt USECRACKLIBt USEDBBINDt
USEDBIBINDt USEDIRECTORIESt USEEPSt USEHESIODt
USEHESIODBINDt USEKERBEROSt USELDAPt USELDAPAUTHt USESMARTCARDt
USEFPRINTDt FORCESMARTCARDt USELDAPBINDt USEMD5R^ R\ t USENISt
USENISPLUSt USEODBCBINDt USEOTPt USEPASSWDQCt USESHADOWt
USESMBAUTHt
USEWINBINDt USEWINBINDAUTHt USELOCAUTHORIZEt USEPAMACCESSt USEMKHOMEDIRt
USESYSNETAUTHt PASSWDALGORITHM(H R1 RM t CFG_PAMR R9 t
SYSCONFDIRt AUTH_PAM_SERVICER R R R R R R R# R, RB R. R/ R; t LOGIC_FORCE_PKCS11R> R? R3 RC R5 R6 R8 RE R: RF R7 RD t password_algorithmsR) R0 t indexR R R1 R t
IndexErrorR0 R R4 R7 R+ R< R8 RL R t CFG_AUTHCONFIGt getBoolValueR) R* R R! R" R R- R R# R R$ R t enableNISP3R% R2 R& R9 RO R= ( R RV t prevlineR R t argst stackt controlt modulet algot ridxt roundsRP t enableMD5( ( s! /usr/share/authconfig/authinfo.pyt readPAM s
$
c C s| y t i t t i } Wn t j
o t SX| i d } | o
| | _ n | i | i o | i | _
n t S( Nt NISDOMAIN( RL R RM t CFG_NETWORKR R9 R RO R R8 R R# ( R RP R ( ( s! /usr/share/authconfig/authinfo.pyt readNetwork s
c C s t | i | i t pyt | i | i t p`t | i | i t pGt | i | i t p.t | i | i t p| i | i j pt | i | i t p| i
| i
j pt | i | i t pt | i | i t pt | i
| i
t pt | i | i t prt | i | i t pYt | i | i t p@t | i | i t p't | i | i t pt | i | i t pt | i | i t pt | i | i t pt | i | i t pt | i | i t pt | i | i t pxt | i | i t p_t | i | i t pFt | i | i t p-t | i | i t p| i | i j p| i | i j p| i | i j p| i | i j p| i! | i! j p| i" | i" j p| i# | i# j p| i$ | i$ j p|| i% | i% j pi| i& | i& j pV| i' | i' j pC| i( | i( j p0| i) | i) j p | i* | i* j p
| i+ | i+ j p| i, | i, j p| i- | i- j p| i. | i. j p| i/ | i/ j p| i0 | i0 j p| i1 | i1 j p| i2 | i2 j pr| i3 | i3 j p_| i4 | i4 j pL| i5 | i5 j p9| i6 | i6 j p&| i7 | i7 j p| i8 | i8 j p | i9 | i9 j p | i: | i: j p | i; | i; j p | i< | i< j p | i= | i= j p | i> | i> j p | i? | i? j p{ | i@ | i@ j ph | iA | iA j pU | iB | iB j pB | iC | iC j p/ t | iD | iD t p t | iE | iE t S( N(F R' R R R R R R# R R R R R R R R R R R
R R R
R R R R R R R0 R1 R R R R R R R R R R R! R" R# R$ R% R& R6 R' R( R) R* R+ R, R- R. R/ R; R? R> R2 R3 R4 R5 R7 R8 R: R9 R< R= R@ RA ( R R% ( ( s! /usr/share/authconfig/authinfo.pyt differs- s c C s t | i | _ t | i | _ t | i | _ | i d j o$ | i o | i i | _ qj n | i i | _ d S( Nt ads( R R R R R
R t upperR0 R ( R ( ( s! /usr/share/authconfig/authinfo.pyt update s
c C s| | i | i | i | i | i | i | i | i | i | i | i
| i d S( N( RQ RX R R R] Rh Rz R R R R R ( R ( ( s! /usr/share/authconfig/authinfo.pyR s
c C s% t i | } d | _ d | _ | S( NRE ( t copyR@ RA ( R R ( ( s! /usr/share/authconfig/authinfo.pyR s c C s% t t i | i t | i t S( N( RM t CFG_CACHER R R R R# ( R ( ( s! /usr/share/authconfig/authinfo.pyR s
c C s t t i | i y t i t t i } Wn t j
o t SX| i d | i
| i d | i | i d | i
t S( NRJ RK i ( RM RN R R RL t rcreateR R9 R t setValueR R R R8 R# ( R RP ( ( s! /usr/share/authconfig/authinfo.pyt writeHesiod s
c C s d } t t i | i z t t t i d } | i d | i | i d | i
i d d } | i d } t
| d j o | i | d n | i d t
| d j o | i | d n | i d Wd y | o | i n Wn t j
o n XXt S( Ni i s
R R i ( R RM RR R R RD R t truncateR R
R R
R R R8 R9 R# ( R RV RW ( ( s! /usr/share/authconfig/authinfo.pyt writeSMB s(
c C s t } d } d } t t i | i zt t t i d } x| D]} | i } t | d } | o| i
d d } t | d j o qF n | d | i j o% | d | i
j o | | 7} qF n | o | i o | d | i 7} | i i
d } | i o | d 7} | | d 7} n | d 7} | d
7} | d } x+ | D]# } | o | d | d
7} qSqSWt } q
qF t | d ok | o_ | i oT | i oJ | i i
d } x+ | D]# } | o | d | d
7} qqWt } q
qF | | 7} qF W| p | i i
d } | i oZ | d | i 7} | d o& | d 7} | | d 7} | d } n | d 7} | d
7} n x/ | D]# } | o | d | d
7} qqWn | i d | i d | i | Wd y | o | i n Wn t j
o n XXt S(
NRE i R| i i s domain R s server s
broadcasts
s ypserver RY ( R R RM R[ R R RD R R\ R R R R R R R# R t seekR R R8 R9 ( R t writtenRV RG R t lsR! RW R ( ( s! /usr/share/authconfig/authinfo.pyt writeNIS s~ (
c C s@ t } t } t } t } t }
d } d } | i o* | i d j o | i d j o
d }
n d }
zt | d } x | D]} | i } t | | o` | oT | i oJ | | d 7} | d i | i | i i d 7} | d 7} t
} qq} t | | o | i o | d
| 7} qq} t | | oE | o9 | i o/ | | d 7} | | i 7} | d 7} t
} qq} | o[ t | d oK | p@ | d 7} | i o | d
7} n | d 7} | d 7} t
} qq} t
| d oO |
pD | o | d 7} n | d 7} | d | i 7} | d 7} t
}
qq} | o= t | d o- | p" | d |
7} | d 7} t
} qq} | | 7} q} W| oN | i oD | | d 7} | d i | i | i i d 7} | d 7} n | o3 | i o) | | d 7} | | i 7} | d 7} n | oB | o: | d 7} | i o | d
7} n | d 7} | d 7} n |
p> | o | d 7} n | d 7} | d | i 7} | d 7} n | o$ | o | d |
7} | d 7} n | i d | i d | i | Wd y | o | i n Wn t j
o n XXt
S( NRE R\ R] R^ t crypti R R s
R Rd s ssl Re t not
tls_cacertdirt
TLS_CACERTDIRt pam_passwords
pam_password i ( R R R0 RD R\ R R R R` R R# R R R RG R R R R8 R9 ( R R: Rc Rb Ra t writePadlt wrotebasednt wroteservert wrotesslt wrotepasst wrotecacertdirRV RG t passalgoR R ( ( s! /usr/share/authconfig/authinfo.pyt
writeLDAP21 s
(
(
c C sy t t i | i t t i | i | i t t i d d d t } | o$ | i t t i d d d t n | S( NRc Rb Ra t URIt HOSTt BASE( RM Rg R R t CFG_OPENLDAPR R R# R ( R R ( ( s! /usr/share/authconfig/authinfo.pyt writeLDAP s c C sW d } | i d j o | d S| i d j p | i d j o | | i S| d Sd S( Ns crypt_style = R^ R_ R` t des( R0 ( R R ( ( s! /usr/share/authconfig/authinfo.pyt
cryptStyle s c C s t } t } d } d } d } t t i | i zSt t t i d } x | D] } | i } | d j o1 t | d o! | | i
d 7} t } qR n t | d oh | d j o& | o | | i
d 7} t } n | d i d d d } | d j o
t } qn | | 7} qR W| p. | d
7} | | i
d 7} t } t } n | i
d | i d | i | Wd y | o | i n Wn t j
o n XXt S( NRE i t defaultst crypt_styles
Rn i R i s [defaults]
( R R RM t CFG_LIBUSERR R RD R R\ R R R# R R R R R8 R9 ( R t wrotecryptstylet
wrotedefaultsRx RV RG R R ( ( s! /usr/share/authconfig/authinfo.pyt writeLibuser sJ
c
C s t } t } d } d } d } t t i | i | i d j o
d } n d } | i d j p | i d j o
d } n d | i i d } z t t t i d
} xr | D]j } | i
} t | d o | | 7} t } q n t | d o | | 7} t } q n | | 7} q W| p | | 7} n | p | | 7} n | i
d
| i d
| i | Wd y | o | i n Wn t j
o n XXt S( NRE R^ s MD5_CRYPT_ENAB yes
s MD5_CRYPT_ENAB no
R\ R] s ENCRYPT_METHOD DES
s ENCRYPT_METHOD s
i t MD5_CRYPT_ENABt ENCRYPT_METHODi ( R R RM t CFG_LOGIN_DEFSR R R0 R RD R R\ R R# R R R R8 R9 (
R t
wrotemd5cryptt wroteencmethodRx RV RG t md5cryptt encmethodR R ( ( s! /usr/share/authconfig/authinfo.pyt writeLogindefs sN
c C s
t } t } t } t } t } t } t } t } t } t }
t } t } t }
t } t } d } d } d } d } t t i | i | i o | i o
| i } nE | i p
| i o' | i
d j o | i o
| i } n
| i } | i | i j o
t } n zN t
t t i d } x2| D]*} | i } | d j o` | oY | | i j oI t | d o9 | p+ | i o | t | i 7} n t } q(q(n | d j op | i
d j o` | oY | | i j oI t | d o9 | p+ | i o | t | i 7} n t } q(q(n | d j o` | oY | | i j oI t | d o9 | p+ | i o | t | i 7} n t } q(q(n | d j o | o | i d d } t | d j o | | 7} q(n | d } | i o | | i j o
t } n | i o | | i j o
t } q2n | d j o | o t | d o | i o\ | | i j oL | p | t | i 7} t } n | p | t | i 7} t } qn | i o8 | | i j o( | p | t | i 7} t } qn d } n | d
j oN t | d o> | o0 |
o( | d 7} | | 7} | d
7} t }
q(q(n | d
j o[ t | d oK | p= | d 7} | t t | i i 7} | d
7} t } q(q(n | d
j o[ t | d oK | p= | d 7} | t t | i i 7} | d
7} t } q(q(n | d j oW | i oM t | | i i p t | d | i i o | | 7} t }
q(n t | d o| d j o; | i o1 | o) | t | i | i | i 7} t } n | d j o8 | i o. | o& | t | i | i d 7} t } n | d
j o | o0 |
o( | d 7} | | 7} | d
7} t }
n | p= | d 7} | t t | i i 7} | d
7} t } n | p= | d 7} | t t | i i 7} | d
7} t } qn | d j o | i ov |
on | d | i i 7} | d | i 7} | d
7} | d | i i 7} | d | i 7} | d
7} t }
qn | oI | d j o
t } q| d
j o
t } q| d j o
t } qn | d i d d d } | d j o
t } qH| d
j o
t } qH| d j o
t } qHn | | 7} q(W| p | p | d 7} n | o* |
o" | d 7} | | 7} | d
7} n | p7 | d 7} | t t | i i 7} | d
7} n | p7 | d 7} | t t | i i 7} | d
7} q# n | pj | p | d 7} n | p# | t | i | i | i 7} n | p | t | i | i d 7} q n | p | p | d 7} n | i op |
oh | d | i i 7} | d | i 7} | d
7} | d | i i 7} | d | i 7} | d
7} q.
n | i d | i d | i | Wd y | o | i! n Wn t" j
o n XXt S( NRE R i Rt RH Rv i i Ru Ro Rp s default_realm = s
Rs s dns_lookup_realm = Rq s dns_lookup_kdc = t domain_realmR{ Rn R s = s .R s [libdefaults]
s [realms]
s [domain_realm]
(# R R RM Rw R R R. R R& R6 R
R R# RD R R\ R R RI R R RL R R R R R R R RN R R R R8 R9 ( R t
wroterealmt wrotekdct
wroteadmint
wrotesmbrealmt wrotesmbkdct wroterealmst wrotelibdefaultst wroterealms2t wrotelibdefaults2t wrotedefaultrealmt
wrotednsrealmt wrotednskdct wroteourdomrealmt
wrotedomrealmt wrotedomrealm2Rx Ry RV RG t defaultrealmR R R! ( ( s! /usr/share/authconfig/authinfo.pyt writeKerberos5 s
$
$
$
$
$
0
$
c C s | i p t St } d } d } t t i | i z t t t i d } | | i d 7} x> | i i
d D]* } | o | | i d | d 7} qr qr WxD | i i
d D]0 } | o# | | i d | 7} | d 7} q q WxC | D]; } | p
t } q n t
| | i p | | 7} q q W| i d | i d | i | Wd y | o | i n Wn t j
o n XXt S( NRE i s
R s s
admin serveri s admin server
( R R R RM t CFG_KRBR R RD R R R R R# R R R R R8 R9 ( R t readrealmRV RG RH t asrvR ( ( s! /usr/share/authconfig/authinfo.pyt writeKerberos4
sD
!
c C s% | i } | o | i n | S( N( R' R+ ( R R ( ( s! /usr/share/authconfig/authinfo.pyt
writeKerberos0
s c C st t t i | i d } d } | i t d j o | d 7} | d 7} n t d | i d | d | g t S( Ns /usr/sbin/gdm-safe-restartR s ,/etc/pkcs11/lockhelper.sh -locks& ,/etc/pkcs11/lockhelper.sh -deactivates use_module=s ins_action=s
rm_action=( RM t CFG_PAM_PKCS11R R R R R R R# ( R t insactt rmact( ( s! /usr/share/authconfig/authinfo.pyt writeSmartcard6
s
c C s d } | d 7} | d t i d d 7} | d 7} | d 7} | d 7} | i o+ | d 7} | | i 7} | d 7} t } n | i o7 | d 7} | | i i d d
7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d
7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i
o+ | d 7} | | i
7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t }
n | i
o+ | d 7} | | i
7} | d 7} t } n | d 7} | t t | i i 7} | d 7} | d 7} | t t | i i 7} | d 7} | d 7} | d 7} | S( Ns #--authconfig--start-line--
s
s # Generated by authconfig on s %Y/%m/%d %H:%M:%SsF # DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--)
sE # Any modification may be deleted or altered by authconfig in future
s workgroup = s password server = R R s realm = s security = s idmap uid = s idmap gid = s winbind separator = s template homedir = s template primary group = s template shell = s winbind use default domain = s winbind offline logon = s #--authconfig--end-line--
( t timet strftimeR
R# R R
R R
R R R R R R R R R R R ( R RG t wroteworkgroupt wroteserversR t
wrotesecurityt
wroteidmapuidt
wroteidmapgidt wroteseparatort wrotetemplateht wrotetemplatept wrotetemplates( ( s! /usr/share/authconfig/authinfo.pyt
paramsWinbindB
s
c C s@ d } x) | D]! } t | | o d } Pq
q
W| | 7} | S( NRE R ( RR ( R R R R RG t opt( ( s! /usr/share/authconfig/authinfo.pyt checkLineWinbind
s
c
C s= t } t } d } t t i | i d d d d d d d d d
d d d
d d g } d } d } zt t t i d } x;| D]3} | i } | o! t | d o
t } q q n t | d o
t
} q n t | d p t | d o | | 7} q n t | d } | o^ d | j oQ | i d d i
} | | 7} | d j o | | i 7} t
} q q n | d j o | | i | | | 7} q n | | 7} q W| p | d 7} | | i 7} n | i d | i d | i | Wd y | o | i n Wn t j
o n XXt
S( NRE R s password serverRM R s
domain logonss
domain masters idmap uids idmap gids winbind separators template homedirs template primary groups template shells winbind use default domains winbind offline logoni s #--authconfig--end-line--s #--authconfig--start-line--R R Rn R i R s [global]
( R RM R R R R RD R R\ R R# R R R R< R> R R R R8 R9 (
R t authsectiont wroteauthsectionRx R RV RG R R R! ( ( s! /usr/share/authconfig/authinfo.pyt writeWinbind
sf
c C sO d } d } d } t } t } t } t } t } t } d }
d } t t i | i zt t t i d }
| i o | d 7} n | d 7} | i o | d 7} n | i
o | d 7} n | i o | d 7} n | i o | d 7} n | i
o | d 7} n | i o | d
7} n | i o | d 7} n | i o | d 7} n | i o | d
7} n | i o | d 7} n | i o | i d d } n | } | i o | d 7} n | d 7} | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i p | d 7} n x|
D]} | i }
t |
d o3 | p( | d 7} | | 7} | d 7} t } qqHt |
d o3 | p( | d 7} | | 7} | d 7} t } qqHt |
d o3 | p( | d 7} | | 7} | d 7} t } qqHt |
d o3 | p( | d 7} | | 7} | d 7} t } qqHt |
d o3 | p( | d 7} | | 7} | d 7} t } qqHt |
d o3 | p( | d 7} | | 7} | d 7} t } qqH| | 7} qHW| p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n |
i d! |
i d! |
i | Wd y |
o |
i n Wn t j
o n XXt S(" NRE i s dbs filess directoriess odbcbinds nispluss niss ldapbinds ldaps hesiodbinds hesiods dbibinds dbbindt filesR s winbinds dnss winss passwd:s passwd: s
s shadow:s shadow: s group:s group: s netgroup:s netgroup: s
automount:s automount: s hosts:s hosts: i ( R R RM R R R RD R R R R% R R R$ R R# R R" R! R R
R& R( R' R\ R R# R R R R8 R9 ( R t userst normalt hostst wrotepasswdt
wrotegroupt wroteshadowt
wrotenetgroupt wroteautomountt
wrotehostsRV RG R R ( ( s! /usr/share/authconfig/authinfo.pyt writeNSS
s
c C s t | t } | t } d } | o| od } | t d j oY | d j oL | o- | i o
t } n t } d i t } q | i o
t } q n | t d j o+ | d j o | i
o
t } q t } n | t d j o2 | d j o% | t
j o | i o
t } qn | d | | | t f 7} | t | i j o[ t i d t | t f t i o6 | i t d
t | t f t | i | t <n | t d j o
| i } n | t d j o
| i } n | t d
j o
| i } n | t d j o
| i } n | t d j o
| i } n | o" | t o d i | t } n | t d j o | i o | d 7} n | t d j o| d j o | i o% | i d j o | d | i 7} n | i o | d | i 7} n | i o | d 7} n | i! o | d 7} n | i" o | d 7} qFn | d j o | i" o | d 7} qon | d j o: | i# p | i$ p | i p
| i% o | d 7} qqn | o | d | 7} qn | d 7} | S( NRE Rg Ra R Rh Rb Rf s %-12s%-13s pam_%s.sos %s/pam_%s.sos_ Authentication module %s/pam_%s.so is missing. Authentication process might not work correctly.Ru Rv Rt Rs Rz Rq s
cached_loginRk Rd R\ s rounds=s shadows niss nulloks broken_shadows
(& t
pam_stackst STACKt LOGICt NAMER. t LOGIC_FORCE_PKCS11_KRB5R R t argv_force_pkcs11_autht LOGIC_PKCS11_KRB5R; t LOGIC_IGNORE_AUTH_ERRt LOGIC_IGNORE_UNKNOWNt LOGIC_SKIPNEXTt LOGIC_SKIPNEXT3t module_missingR0 Rs t AUTH_MODULE_DIRt X_OKR R R# RB RC RD RE RF t ARGVR R0 R1 R4 R R+ R= R/ R6 ( R R t
forcescardR t logicRG R ( ( s! /usr/share/authconfig/authinfo.pyt formatPAMModulez s
+
c C s t i i | } t i i | } | o | p | o] | oU y t i | Wn t j
o n Xy t i | | Wq t j
o q Xn d S( N( R0 R R t islinkR R7 t symlink( R R R RV R^ ( ( s! /usr/share/authconfig/authinfo.pyt linkPAMService s c C s xx t t t t g D]d } t d | } t i i | } t i i | } | o | p | o | o t | _
d Sq Wd S( Ns /pam.d/( R t PASSWORD_AUTH_PAM_SERVICEt FINGERPRINT_AUTH_PAM_SERVICEt SMARTCARD_AUTH_PAM_SERVICER R0 R R R_ R RI ( R R RV R^ ( ( s! /usr/share/authconfig/authinfo.pyt checkPAMLinked s c C s d } d } t | i | i zt t | i d } | d 7} | d 7} | d 7} | d 7} | i } | i } | i } | t j o
t
} n | t j o t
} t
} n g }
xt | D]} |
o# | t
|
t
j o | d 7} n | }
| t pn| i o | t d j pS| i o | t d j p8| i o | t d
j p | i o | t d j p| i o# | t d j o | t t j p| i oK | oD | t d j o | t t j p| t d
j o | t
t j p| i o | t d j pe| o3 | t
t j o" | t d j o | t t j p+| o | t d j p| o | t d j p | i o | t d j p | i o | t d j p | i o | t d j p | i o | t d j p | i o | t d j pt | i o | t d j pY | i! o | t d j p> | i" oM | t
t j o< | t d j o+ | t t# j o | | i$ | | 7} q q W| i% d | i& d | i' | Wd y | o | i( n Wn t) j
o n XX| i* | t+ d | t
S( NRE i s
#%PAM-1.0
s # This file is auto-generated.
s/ # User changes will be destroyed the next time s authconfig is run.
s
Rl s afs.krbRu t epsRh Ri Rn Rf Rg Rj Ro Rv Rp Rq Rt Rs Rz i s /pam.d/(, R RM R R RD R R> R; R? t FINGERPRINTR# t SMARTCARDt pam_modulesRN t MANDATORYR) RP R* R, R- R. R[ t argv_krb5_sc_autht AUTHR/ RO RV R2 R3 R5 R6 R7 R8 R: R9 t LOGIC_REQUISITER^ R R R R8 R9 Ra R ( R t servicet cfgt cfg_basenamet cfg_linkRV RG R> R; R? t
prevmoduleR ( ( s! /usr/share/authconfig/authinfo.pyt writePAMService st
""" "
c C se h | _ | i t t t t | i t t t t | i t
t t t
| i t t t t t S( N( RX Rs t STANDARDR t AUTH_PAM_SERVICE_ACR t
PASSWORD_ONLYt CFG_PASSWORD_PAMt PASSWORD_AUTH_PAM_SERVICE_ACRb Rg t CFG_FINGERPRINT_PAMt FINGERPRINT_AUTH_PAM_SERVICE_ACRc Rh t CFG_SMARTCARD_PAMt SMARTCARD_AUTH_PAM_SERVICE_ACRd R# ( R ( ( s! /usr/share/authconfig/authinfo.pyt writePAM s c C s t t i | i y t i t t i } Wn t j
o t SX| i d | i
| i d | i | i d | i | i d | i
| i d | i | i d | i | i d | i | i d | i | i d | i | i d
| i | i d | i | i d | i | i d
| i | i d d | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i! t" S( NR R R R R R R R R R R R R R R R R R R R R i (# RM R R R RL R R R9 R t setBoolValueR, R R R R R3 R& R. R/ R; R> R? R R0 R R4 R5 R6 R7 R8 R: R9 R R8 R# ( R RP ( ( s! /usr/share/authconfig/authinfo.pyt writeSysconfig# s:
c C ss t t i | i y t i t t i } Wn t j
o t SX| i d | i
| i d | i t
S( NR i ( RM R R R RL R R R9 R R R R R8 R# ( R RP ( ( s! /usr/share/authconfig/authinfo.pyt writeNetworkE s
c C s | i | i t d y| i } | o
| i } | o
| i } | i o | o
| i } n | i p
| i o | o
| i
} n | i p | i o' | i
d j o | o
| i } n | i o | o
| i } n | i o | o
| i } n | i o | o
| i } n | i p
| i o | o
| i } n | o
| i } | o
| i } | o
| i } | o
| i } Wn t j
o t SX| S( Ns /lastR ( R t setupBackupt PATH_CONFIG_BACKUPSR
R R R R R R/ R R. R6 R
R, R; R0 R R R5 R R& RA RL R} R R R9 R ( R R ( ( s! /usr/share/authconfig/authinfo.pyR S s:
c / C s t | i dM g t | i dN dO g t | i dP dQ g t | i dR dS dT g t | i dU dV dW dX dY g t | i dZ g t | i d[ g t | i d\ g t | i d] d^ d_ d` da db dc dd g t | i de df dg g t | i
dh di g t | i dj dk dl dm dn do dp dq dr ds dt du g t | i dv dw dx dy dz d{ d| d} d~ d d d d d d d d g t | i
d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d g t | i d d d d d d d d d d d d d d d d d d d d g t | i d g g } | i | i | i t dL t } y? x8 | D]0 } | i | | o | o
| i } ququWWn t j
o t SX| S( NR R% R R R R
R R R R R R R R RG R0 R R R
R R R R R R R R R R R R R R R R R& R% R R R$ R R# R R" R! R R' R( RB RC RD RE R8 RF R: R1 R4 R+ R= R/ R. R; R> R6 R) R* R, R- R2 R3 R5 R7 R9 R? RI s /last( s enableCacheR% ( s hesiodLHSR ( s hesiodRHSR ( s smbWorkgroupR ( s
smbServersR ( s nisDomainR ( s nisLocalDomainR ( s nisServerR ( s
ldapServerR ( s
ldapBaseDNR ( s enableLDAPSR% ( s
ldapCacertDirR ( s passwordAlgorithmR ( s enableCacheR% ( s passwordAlgorithmR ( s passwordAlgorithmR ( s
kerberosRealmR ( s kerberosKDCR ( s smbSecurityR ( s smbRealmR ( s
smbServersR ( s kerberosAdminServerR ( s kerberosRealmviaDNSR% ( s kerberosKDCviaDNSR% ( s
kerberosRealmR ( s kerberosKDCR ( s kerberosAdminServerR ( s smartcardActionR ( s smartcardModuleR ( s smbWorkgroupR ( s
smbServersR ( s smbRealmR ( s smbSecurityR ( s smbIdmapUidR ( s smbIdmapGidR ( s winbindSeparatorR ( s winbindTemplateHomedirR ( s winbindTemplatePrimaryGroupR ( s winbindTemplateShellR ( s winbindUseDefaultDomainR% ( s winbindOfflineR% ( s enableDBR% ( s enableDirectoriesR% ( s
enableWinbindR% ( s enableOdbcbindR% ( s
enableNIS3R% ( s enableNISR% ( s enableLDAPbindR% ( s
enableLDAPR% ( s enableHesiodbindR% ( s enableHesiodR% ( s
enableDBIbindR% ( s enableDBbindR% ( s enableCompatR% ( s
enableWINSR% ( s
enableNIS3R% ( s enableNISR% ( s preferDNSinHostsR% ( s cracklibArgsR ( s passwdqcArgsR ( s
localuserArgsR ( s
pamAccessArgsR ( s enablePAMAccessR% ( s
mkhomedirArgsR ( s enableMkHomeDirR% ( s
algoRoundsR ( s passwordAlgorithmR ( s enableShadowR% ( s enableNISR% ( s enableNullOkR% ( s forceBrokenShadowR% ( s enableLDAPAuthR% ( s enableKerberosR% ( s enableSmartcardR% ( s forceSmartcardR% ( s enableWinbindAuthR% ( s enableMkHomeDirR% ( s enableAFSR% ( s enableAFSKerberosR% ( s enableCracklibR% ( s enableEPSR% ( s enableOTPR% ( s enablePasswdQCR% ( s enableSMBR% ( s enableLocAuthorizeR% ( s enableSysNetAuthR% ( s winbindOfflineR% ( s
enableFprintdR% ( s pamLinkedR% ( s passwordAlgorithmR ( s enableShadowR% ( s enableNISR% ( s
enableLDAPR% ( s enableLDAPAuthR% ( s enableKerberosR% ( s enableSmartcardR% ( s forceSmartcardR% ( s enableWinbindAuthR% ( s
enableWinbindR% ( s enableDBR% ( s enableHesiodR% ( s enableCracklibR% ( s enablePasswdQCR% ( s enableSMBR% ( s enableLocAuthorizeR% ( s enablePAMAccessR% ( s enableMkHomeDirR% ( s enableSysNetAuthR% ( s
enableFprintdR% ( s nisDomainR ( R R R R R R R
R R' R+ R0 RA RL R} R R Re R R R R# R R R9 R ( R t reft save_groupsR t group( ( s! /usr/share/authconfig/authinfo.pyt writeChangeds st
c C s d } d } g } g } t i d g t i d g t i d g t i d g g } t i } | p d S| i d p | d 7} n | | i d } d | } t i | t i t i } xL | D]D } | i t i j o+ | i
i i d | _
t | | _ q q Wd | } t i | t i t i } | p) d | } t i | t i t i } n xC | D]; } | i t i j o" | i
i | _ | i o PqqgqgW| i old | i } t i | t i t i } x | D] } | i t i j oh | i
i i d } | i
i o | d | i
i 7} n | i o | i d
| 7_ q`| | _ qqWd | i } t i | t i t i } x | D] } | i t i j oh | i
i i d } | i
i o | d | i
i 7} n | i o | i d
| 7_ q| | _ qqWn x | D] } | d | } t i | | d
t i } xY | D]Q } | i t i j o8 | i | j o( d | d | _ | i d | _ PqZqZWq#Wd S( NRE t hst nsR{ s
_ldap._tcps
_kerberos.t _kerbeross _kerberos._udp.R( R s _kerberos-adm._udp.i i ( t dnsclientt DNS_C_INt DNS_C_HSt sockett getfqdnt endswithR) R t DNS_T_SRVt dns_typet rdataRZ R R R} R t DNS_T_TXTt dataR t portR R t DNS_T_SOAt dns_nameR R ( R t hostnamet qnamet resultsR R R| t h( ( s! /usr/share/authconfig/authinfo.pyt probe s
c C sw d t | i GHd GHd t | i GHd t | i GHd t | i GHd | i GHd | i GHd t | i GHd t | i GHd
| i GHd | i
GHd t | i GHd
| i GHd | i
GHd t | i GHd t | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd t | i GHd t | i GHd GHd t | i GHd | i GHd t | i GHd | i GHd t | i GHd | i GHd! t | i GHd" | i GHd# t | i! GHd t | i GHd
| i GHd | i
GHd$ t | i" GHd% t | i# GHd& | i$ GHd' | i% GHd( t | i& GHd) t | i' GHd | i GHd | i GHd* t | i( GHd | i GHd | i GHd | i GHd | i GHd+ t | i) | i* f GHd, t | i+ | i, f GHd- t | i- | i. f GHd. t | i/ | i0 f GHd/ t | i1 | i2 f GHd0 t | i3 GHd S(1 Ns
caching is %ss nss_files is always enableds nss_compat is %ss nss_db is %ss nss_hesiod is %ss hesiod LHS = "%s"s hesiod RHS = "%s"s nss_ldap is %ss LDAP+TLS is %ss LDAP server = "%s"s LDAP base DN = "%s"s
nss_nis is %ss NIS server = "%s"s NIS domain = "%s"s nss_nisplus is %ss nss_winbind is %ss SMB workgroup = "%s"s SMB servers = "%s"s SMB security = "%s"s SMB realm = "%s"s Winbind template shell = "%s"s SMB idmap uid = "%s"s SMB idmap gid = "%s"s nss_wins is %ss% DNS preference over NSS or WINS is %ss pam_unix is always enableds shadow passwords are %ss! password hashing algorithm is %ss pam_krb5 is %ss krb5 realm = "%s"s krb5 realm via dns is %ss krb5 kdc = "%s"s krb5 kdc via dns is %ss krb5 admin server = "%s"s pam_ldap is %ss pam_pkcs11 is %ss# use only smartcard for login is %ss smartcard module = "%s"s smartcard removal action = "%s"s pam_fprintd is %ss pam_smb_auth is %ss pam_winbind is %ss pam_cracklib is %s (%s)s pam_passwdqc is %s (%s)s pam_access is %s (%s)s pam_mkhomedir is %s (%s)s' Always authorize local users is %s (%s)s; Authenticate system accounts against network services is %s(4 R R R R R R R R R R R R R R R R& R
R R
R R R R R' R( R4 R0 R. R R R R R R/ R; R> R R R? R5 R6 R, RB R3 RC R8 RE R: RF R7 RD R9 ( R ( ( s! /usr/share/authconfig/authinfo.pyt printInfo
s| c C sF | i o t i d t i d n t i d t i d t S( Ns /usr/sbin/pwconvs /usr/sbin/grpconvs /usr/sbin/pwunconvs /usr/sbin/grpunconv( R4 R0 R~ R# ( R ( ( s! /usr/share/authconfig/authinfo.pyt toggleShadowC
s
c C s) | i p
| i o| i o| i i d d d i d d d i d d d } | i } | i } | p
d } n | d j o | d j o d Sd | o d p d
| | o d p d
| | i f } | o t i i d | n | i
o t | | d
| i
q%t i
| n d S( NR i i R s R R| s! /usr/bin/net join %s%s %s%s -U %ss -w RE s -S s [%s]
s sword:( R& R6 R@ R R R
R
R R R RA R R0 R~ ( R R RZ R| t protocolt cmd( ( s! /usr/share/authconfig/authinfo.pyt
joinDomainM
s" 9
c C s | i t | i | i | t | i p | i t t d | t | i t
t d | t | i t
t d | t | i t t d | t | i t t d | t | i t t d | t | i | d S( NRq t dbbindt dbibindt
hesiodbindt ldapbindt odbcbind( R R R R R R& R6 t PATH_WINBINDt PATH_WINBIND_PIDR! t PATH_DBBINDt PATH_DBBIND_PIDR" t PATH_DBIBINDt PATH_DBIBIND_PIDR# t PATH_HESIODBINDt PATH_HESIODBIND_PIDR$ t
PATH_LDAPBINDt PATH_LDAPBIND_PIDR% t
PATH_ODBCBINDt PATH_ODBCBIND_PIDR R ( R R ( ( s! /usr/share/authconfig/authinfo.pyt postd
s*
c C s | i p
| i og y t i | i WnB t j
o6 \ } } | t i j o t i | i d qm n Xt | i St
S( Ni ( R R/ R0 R RG R7 R> R R R R ( R R R ( ( s! /usr/share/authconfig/authinfo.pyt testLDAPCACerts{
s c C s: | i p
| i o" | i o t i d | i n d S( Ns /usr/sbin/cacertdir_rehash ( R R/ R R0 R~ RG ( R ( ( s! /usr/share/authconfig/authinfo.pyt rehashLDAPCACerts
s
c C s | i p t S| i yW t i | i } t | i d t d } | i | i | i
| i
Wn0 t t t
f j
o | i t d t SX| i t S( NR i s Error downloading CA certificate( RH R R t urllib2t urlopenRD RG t LDAP_CACERT_DOWNLOADEDR R R8 R9 R7 R R R R R# ( R t readft writef( ( s! /usr/share/authconfig/authinfo.pyt downloadLDAPCACert
s
c
C s | d d j o t d | } n | | _ t | pm yS t i | } x= | D]5 } y t i | d | WqR t j
o qR XqR WWq t j
o q Xn d S( Ni R s /backup-( R R R R0 R R R7 ( R R R R: ( ( s! /usr/share/authconfig/authinfo.pyR
s
c C sA | i | t } x' t D] } | i | i o | } q W| S( N( R R# RM R R ( R R R Ro ( ( s! /usr/share/authconfig/authinfo.pyt
saveBackup
s
c C sT | d d j o t d | } n t } x$ t D] } | i | o | } q0 W| S( Ni R s /backup-( R R# RM R ( R R R Ro ( ( s! /usr/share/authconfig/authinfo.pyt
restoreBackup
s c C s | i t d S( Ns /last( R R ( R ( ( s! /usr/share/authconfig/authinfo.pyt restoreLast
s (= R R R RQ RX R] R` Rh Rk Rm Rz R R R R R R R R R R R R R R R R R R R R
R R' R+ R, R0 R< R> RA RL R^ Ra Re Rs R} R R R R R R R R R R R R R R R R ( ( ( s! /usr/share/authconfig/authinfo.pyR sx b ( , @
5 + $ ] U i
5 6 + F
I E
D " = S @
( ( ( ( R R0 R R3 R R R R RL R R R> R R1 t
subprocessR t gettextt lgettextR R R Ru Rb Rx Rc Rz Rd R| R t globalst LIBDIRRY R t PATH_PWCONVR R R R R R R R R R R R R R R R t PATH_SEBOOLt
PATH_SCEVENTDt PATH_SCEVENTD_PIDR t PATH_LIBNSS_DBt PATH_LIBNSS_LDAPt PATH_LIBNSS_NISt PATH_LIBNSS_HESIODt PATH_LIBNSS_ODBCBINDt PATH_LIBNSS_WINBINDt PATH_LIBNSS_WINSt
PATH_PAM_KRB5t
PATH_PAM_LDAPt PATH_PAM_SMBt PATH_PAM_WINBINDt PATH_PAM_PKCS11t PATH_PAM_FPRINTDt PATH_WINBIND_NETRf R R t LOGIC_REQUIREDRm t LOGIC_SUFFICIENTt LOGIC_OPTIONALRU RT t LOGIC_PKCS11R RS RQ RV RW R
R R R R R R" R' R/ R@ RD RI RL RN RR t argv_unix_autht argv_unix_passwordt
argv_afs_autht argv_afs_passwordt argv_cracklib_passwordt argv_passwdqc_passwordt
argv_eps_autht argv_eps_passwordt argv_fprintd_autht argv_pkcs11_authRR t argv_krb5_authRk t argv_krb5_passwordt argv_ldap_autht argv_ldap_passwordt
argv_otp_autht
argv_smb_autht argv_succeed_if_autht argv_succeed_if_accountt argv_succeed_if_sessiont argv_succeed_if_nonlogint argv_winbind_autht argv_winbind_passwordt argv_keyinit_sessionR t rangeRl t ACCOUNTt SESSIONt PASSWORDRM Rj RN RO RP R[ Rt Rv Rg Rh t _[1]Rn Ri R# R R} t DEFAULT_DNS_QUERY_SIZER R R R R R R R R R R R R R R RN RR R[ Rg R Rw R( R- R R R R Rw Ry R{ R R R
R RM R ( ( ( s! /usr/share/authconfig/authinfo.pyt <module> s`
-
) E K 8H