File: //opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/kerberos.cpython-310.pyc
o
�N�g] � @ sv d Z ddlZddlZe�e�Zdd� Zdd� Zdd� Z d d
� Z
d d � Z d
d� Z dd� Z
ddd�Zdd� Zddd�ZdS )a�
Manage Kerberos KDC
:configuration:
In order to manage your KDC you will need to generate a keytab
that can authenticate without requiring a password.
.. code-block:: bash
# ktadd -k /root/secure.keytab kadmin/admin kadmin/changepw
On the KDC minion you will need to add the following to the minion
configuration file so Salt knows what keytab to use and what principal to
authenticate as.
.. code-block:: yaml
auth_keytab: /root/auth.keytab
auth_principal: kadmin/admin
� Nc C s t jj�d�r dS dS )NZkadminT)Fz<The kerberos execution module not loaded: kadmin not in path)�salt�utils�path�which� r r �I/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/kerberos.py� __virtual__ s r c C sj i }t �dd�}t �dd�}td |�r&|r&td d|� d|� d| � d ��S t�d
� d |d < d
|d< |S )z!
Execute kadmin commands
� auth_keytabN�auth_principalzfile.file_existsz cmd.run_allz
kadmin -k -t z -p z -q "�"z(Unable to find kerberos keytab/principal� �retcodez'Missing authentication keytab/principal�comment)Z__opts__�getZ__salt__�log�error)�cmd�retr r
r r r �__execute_kadmin$ s �
r c C �t i } t d�}|d dks|d r |d �� d | d< d| d< | S d g i} |d
�� d d � D ] }| d �|� q.| S )
z�
Get all principals
CLI Example:
.. code-block:: bash
salt 'kde.example.com' kerberos.list_principals
�list_principalsr
r �stderr���r F�resultZ
principals�stdoutr N�r �
splitlines�append�r r �ir r r r 9 �
r c C �| i }t d| � ��}|d dks|d r#|d �� d |d< d|d< |S |d �� d
d � D ]}|�d d
�\}}|||< q-|S )
z�
Get princial details
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.get_principal root/admin
zget_principal r
r r r r Fr r r N�:�r r �split��namer r r �prop�valr r r �
get_principalU �
r) c C r )
zz
List policies
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.list_policies
�
list_policiesr
r r r r Fr Zpoliciesr r Nr r r r r r+ q r r+ c C r! )
z�
Get policy details
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.get_policy my_policy
z get_policy r
r r r r Fr r r Nr" r# r% r r r �
get_policy� r* r, c C s� i } t d�}|d dks|d r |d �� d | d< d| d< | S |d �� d
d � D ]}|�d d
�\}}d
d� |�� D �| |< q*| S )z{
Current privileges
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.get_privs
� get_privsr
r r r r Fr r r Nr" c S s g | ]}|�qS r r )�.0�jr r r �
<listcomp>� s z get_privs.<locals>.<listcomp>r# )r r r r' r( r r r r- � s
r- c C s~ i }d}|r
|d|� �7 }|d| � �7 }t |�}|d dks"|d r=|d �� d �d�s=|d �� d |d < d
|d < |S d S )
z�
Create Principal
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.create_principal host/example.com
zaddprinc -randkey� -e � r
r r r zWARNING:r Fr T)r r �
startswith)r& �enctypesr �krb_cmdr r r r �create_principal� s
r6 c C sJ i }t d| � ��}|d dks|d r#|d �� d |d< d|d< |S d S )
z�
Delete Principal
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.delete_principal host/example.com@EXAMPLE.COM
zdelprinc -force r
r r r r Fr T�r r )r& r r r r r �delete_principal� s
r8 c C sn i }d|� �}|r|d|� �7 }|d| � �7 }t |�}|d dks%|d r5|d �� d |d< d |d
< |S d S ) z�
Create keytab
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.create_keytab host/host1.example.com host1.example.com.keytab
z ktadd -k r1 r2 r
r r r r Fr Tr7 )r& Zkeytabr4 r r5 r r r r �
create_keytab� s
r9 )N)�__doc__�loggingZsalt.utils.pathr � getLogger�__name__r r r r r) r+ r, r- r6 r8 r9 r r r r �<module> s