Current File : //lib/python2.7/site-packages/salt/auth/django.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l m Z y& d d l
Z
d d l m Z e
Z Wn e k
r� Z e Z n Xd a e j e � Z d Z d � Z d � Z d � Z d
� Z d � Z d S( u�
Provide authentication using Django Web Framework
:depends: - Django Web Framework
Django authentication depends on the presence of the django framework in the
``PYTHONPATH``, the Django project's ``settings.py`` file being in the
``PYTHONPATH`` and accessible via the ``DJANGO_SETTINGS_MODULE`` environment
variable.
Django auth can be defined like any other eauth module:
.. code-block:: yaml
external_auth:
django:
fred:
- .*
- '@runner'
This will authenticate Fred via Django and allow him to run any execution
module and all runners.
The authorization details can optionally be located inside the Django database.
The relevant entry in the ``models.py`` file would look like this:
.. code-block:: python
class SaltExternalAuthModel(models.Model):
user_fk = models.ForeignKey(User, on_delete=models.CASCADE)
minion_or_fn_matcher = models.CharField(max_length=255)
minion_fn = models.CharField(max_length=255)
The :conf_master:`external_auth` clause in the master config would then look
like this:
.. code-block:: yaml
external_auth:
django:
^model: <fully-qualified reference to model class>
When a user attempts to authenticate via Django, Salt will import the package
indicated via the keyword ``^model``. That model must have the fields
indicated above, though the model DOES NOT have to be named
'SaltExternalAuthModel'.
i ( t absolute_importt print_functiont unicode_literalsN( t six( t
connectionu djangoc C@ s t r
t St S( N( t
HAS_DJANGOt __virtualname__t False( ( ( s4 /usr/lib/python2.7/site-packages/salt/auth/django.pyt __virtual__N s c C@ s. y t j j � Wn t k
r% t SXt Sd S( N( R t pingt ExceptionR t True( ( ( s4 /usr/lib/python2.7/site-packages/salt/auth/django.pyt is_connection_usableT s
c C@ s� t j d k r t j � n t d k r, d Sd t d d k r� t d d d } | j d � d } d j | j d � d d !� } t | t � t
� d
� } d j | � } t | � a n d S(
uG
Prepare the connection to the Django authentication framework
i i Nu ^modelu
external_authu djangou .i����i u SaltExternalAuthModelu django_auth_module.{0}( i i (
t djangot VERSIONt setupt DJANGO_AUTH_CLASSt Nonet __opts__t splitt joint
__import__t globalst localst formatt eval( t django_model_fullnamet django_model_namet django_module_namet django_auth_modulet DJANGO_AUTH_CLASS_str( ( s4 /usr/lib/python2.7/site-packages/salt/auth/django.pyt __django_auth_setup] s
c C@ s� t d } | t j k r, t j j | � n t j j d t d � t � t � s` t j
� n d d l } | j j
j d | d | � } | d k r� | j r� t j d � t St j d � n
t j d
� t S( u
Simple Django auth
u django_auth_pathu DJANGO_SETTINGS_MODULEu django_auth_settingsi Nt usernamet passwordu Django authentication successfuluI Django authentication: the password is valid but the account is disabled.u Django authentication failed.( R t syst patht appendt ost environt
setdefaultR R R t closet django.contrib.autht contribt autht authenticateR t is_activet logt debugR R ( R R! t django_auth_pathR
t user( ( s4 /usr/lib/python2.7/site-packages/salt/auth/django.pyR+ w s
c C@ s� t � | d k r% t j j � } n t j j d | � } i } x8| D]0} | j j | k rr g | | j j <n | j r� | j r� | | j j j
| j � qG | j r� | j r� | | j j j
| j � qG t } xl | | j j D]Z } t | t
� r� | j t j | � k rC| | j j | j j
| j � t } qCq� q� W| sG | | j j j
i | j g | j 6� qG qG Wt j d | � | S( u�
:param username: Username to filter for
:return: Dictionary that can be slotted into the ``__opts__`` structure for
eauth that designates the user associated ACL
Database records such as:
=========== ==================== =========
username minion_or_fn_matcher minion_fn
=========== ==================== =========
fred test.ping
fred server1 network.interfaces
fred server1 raid.list
fred server2 .*
guru .*
smartadmin server1 .*
=========== ==================== =========
Should result in an eauth config such as:
.. code-block:: yaml
fred:
- test.ping
- server1:
- network.interfaces
- raid.list
- server2:
- .*
guru:
- .*
smartadmin:
- server1:
- .*
t user_fk__usernameu django auth_dict is %sN( R R R t objectst allt filtert user_fkR t minion_or_fn_matchert minion_fnR$ R t
isinstancet dictR t iterkeysR R. R/ ( R t
db_recordst auth_dictt at foundt d( ( s4 /usr/lib/python2.7/site-packages/salt/auth/django.pyt acl� s, &
!.( t __doc__t
__future__R R R t loggingR% R" t salt.extR R
t django.dbR R R R
t excR R R t getLoggert __name__R. R R R R R+ RA ( ( ( s4 /usr/lib/python2.7/site-packages/salt/auth/django.pyt <module>0 s&
Mini Shell