Current File : //lib/python2.7/site-packages/salt/states/user.pyo
�
���^c # @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l
Z d d l Z d d l m
Z
d d l m Z m Z e j e � Z e d � Z e e e e e e e e e e e d d d d d e e d d d d e e e e e e e d
� Z e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e d �" Z e e d � Z d S(
u�
Management of user accounts
===========================
The user module is used to create and manage user settings, users can be set
as either absent or present
.. code-block:: yaml
fred:
user.present:
- fullname: Fred Jones
- shell: /bin/zsh
- home: /home/fred
- uid: 4000
- gid: 4000
- groups:
- wheel
- storage
- games
testuser:
user.absent
i ( t absolute_importt print_functiont unicode_literalsN( t CommandExecutionError( t string_typest iteritemsc C@ sI t | � } t | � } | r* | | k sA | rE | j | � rE t St S( u4
Determine if the groups need to be changed
( t sett issubsett Truet False( t curt wantedt removet oldt new( ( s4 /usr/lib/python2.7/site-packages/salt/states/user.pyt _group_changes, s
)u i?B i c & " C@ sx d t k r t d | � } n t d | � } | s9 t Si } | d1 k rX | d } n t t | pg g | pp g � � }! | r� | d | k r� | | d <n | d1 k r� | d | t d | � f k r� | | d <n t d | d1 k r� | n | d � }" |" | d k r | d j |" � n | | d k rP| |! k rP| d j | � n |" |! k rl|! j |" � n t | d |! | � r�|! | d <n | r�| d | k r�| | d <n | r�| r�| n | d }# |# d1 k r�t j j |# � r�|# | d <q�n | r | d
| k r | | d
<n d t k r�d t k r�| r�|
r�t d � }$ | d |$ k sx| d |$ k r�| r�| d | k r�| | d <q�q�n |
r�| d d
k r�t
| d <n | d1 k r�| d | k r�| | d <n | d1 k r| d | k r| | d <n | d1 k r9| d | k r9| | d <n | d1 k rb| d | k rb| | d <n | d1 k r�| d | k r�| | d <n | r | d | k r | | d <q nn d t k r t j j
j � r | r | d k r t j j j | d � t j j j | � k r | | d <q n t j j j | � } t j j j | d � | d <| d1 k rz| d | k rz| | d <n | r�| d | k r�| | d <n | r�| d | k r�| | d <n | r�| d | k r�| | d <n | r| d | k r| | d <n d t k rp|
d1 k rpt j j j |
� }
t j j j | d! � | d! <| d! |
k rp|
| d! <qpn d" t k r�| d1 k r�t j j j | � } t j j j | d# � | d# <| d# | k r�| | d# <q�n d$ t k rD| d1 k rDt j j j | � } t j j j | d% � | d% <| d% | k rD| | d% <qDn d& t k r�| d1 k r�t j j j | � } t j j j | d' � | d' <| d' | k r�| | d' <q�n t d( d2 k r�| r�t d+ | � | k r�| | d, <q�q�n g }% | r&d | k r&|% j d- j | d | � � n | rYd | k rY|% j d. j | d | � � n |% rtt d/ d0 |% �� n | S(3 uU
Return a dict of the changes required for a user if the user is present,
otherwise return False.
Updated in 2015.8.0 to include support for windows homedrive, profile,
logonscript, and description fields.
Updated in 2014.7.0 to include support for shadow attributes, all
attributes supported as integers only.
u shadow.infou user.infou groupsu uidu gidu file.group_to_gidu file.gid_to_groupu homeu homeDoesNotExistu shellu shadow.default_hashu passwdu u empty_passwordu lstchgu dateu minu mindaysu maxu maxdaysu inactu inactdaysu warnu warndaysu expirei����u fullnameu homedriveu profileu logonscriptu descriptionu user.chroomnumberu
roomnumberu user.chworkphoneu workphoneu user.chhomephoneu homephoneu user.chotheru otheru kernelu OpenBSDu FreeBSDu user.get_loginclassu
loginclassu� Changing uid ({0} -> {1}) not permitted, set allow_uid_change to True to force this change. Note that this will not change file ownership.u� Changing gid ({0} -> {1}) not permitted, set allow_gid_change to True to force this change. Note that this will not change file ownership.u- Encountered error checking for needed changest infoN( u OpenBSDu FreeBSD( t __salt__R t Nonet sortedR R R t ost patht isdirR t saltt utilst platformt
is_windowst dateutilst strftimet datat decodet
__grains__t appendt formatR (& t namet uidt gidt groupst optional_groupst
remove_groupst homet
createhomet passwordt enforce_passwordt empty_passwordt shellt fullnamet
roomnumbert workphonet homephonet othert
loginclasst datet mindayst maxdayst inactdayst warndayst expiret
win_homedrivet win_profilet win_logonscriptt win_descriptiont allow_uid_changet allow_gid_changet lshadt lusrt changet
wanted_groupst default_grpt newhomet default_hasht errors( ( s4 /usr/lib/python2.7/site-packages/salt/states/user.pyt _changes7 s� )
"
,
@
c# : % C@ s� | r� |
r� t j d � i d d 6d d 6d d 6d d 6}# y� t d
| � d j d d
� \ }$ }% }& }' |% d k r� t j d � n t j d j |# j |% � � � t d | d |& d |# j |% � �} Wq� t k
r� t j d � t d | � } q� Xn | dz k r#t
j j j
| � } n | dz k rGt
j j j
| � } n | dz k rkt
j j j
| � } n | dz k r�t
j j j
| � } n | dz k r�t
j j j
| � } n t d d{ k r�t } n i | d 6i d 6t d 6d j | � d 6}( xS | | | g D]B }) t |) t � rd |) k rd j |) � |( d <t |( d <|( SqW| r�g | D] }* t d |* � sZ|* ^ qZ}+ |+ r�d j d j |+ � � |( d <t |( d <|( Sn | r$g | D] }* t d |* � r�|* ^ q�}, xI g | D] }* |* |, k r�|* ^ q�D] }- t j d |- | � qWn dz }, | rl| rlx3 t | � j | � D] }. t j d! |. | � qLWn | r�t d" | � } | d# k r�d$ j | � |( d <t |( d <|( Sn yg t | | | | |, | | | | | | |
| | | | | | | | | | | | | | | | |! |" � }/ Wn+ t k
rF}0 t |( d <|0 j |( d <|( SX|/ r<
t d% r�dz |( d <d& |( d <xg t |/ � D]Y \ }1 }2 |1 d k r�d' }2 n |1 d( k r�| r�d) }1 n |( d c d* j |1 |2 � 7<qxW|( Sd
t k r�t d
| � }3 n t d d| k rt d- | � }4 n t d. | � }5 x&t |/ � D]\ }1 }2 |1 d k rn| rnt d/ | | � q8n |1 d k r�| r�t j d0 � q8n |1 d1 k r�|2 r�t d2 | � q8n |1 d3 k r�t d4 | | � q8n |1 d5 k r5d6 |/ k r5t d d} k rt d7 | |2 � q8t d7 | |2 d8 t �q8n |1 d6 k r�t d d~ k ret d7 | |2 � n t d7 | |2 d8 t �t j j |2 � s8t d9 |2 |5 d: |5 d; d< � q8q8n |1 d= k r�t d> | | � q8n |1 d? k r�t d@ | | � q8n |1 dA k r t dB | | � q8n |1 dC k rBt dD | | � q8n |1 dE k ret dF | | � q8n |1 dG k r�t dH dI | dJ |2 � q8n |1 dK k r�t dH dI | dL |2 � q8n |1 dM k r�t dH dI | dN |2 � q8n |1 dO k r t dH dI | dP |2 � q8n |1 dQ k r6t dR j |1 � | |2 | � q8t dR j |1 � | |2 � q8Wt d. | � }6 i }7 d
t k r�|3 d | k r�t d
| � }7 n t d d k r�t d- | � }8 n x7 |6 D]/ }1 |6 |1 |5 |1 k r�|6 |1 |( d |1 <q�q�Wd
t k r\ xW |7 D]L }1 |3 |1 |7 |1 k r |1 d k r@ d' |( d |1 <qU |7 |1 |( d |1 <q q Wn t d d� k r� |8 |4 k r� |8 |( d dS <n |( d r� dT j | � |( d <n t | | | | |, | | | | | | |
| | | | | | | | | | | | | | | | dU t dV t � }/ |/ r8
dW j |/ � |( d <t |( d <n |( S|/ t k r�t d% rs
dz |( d <dX j | � |( d <|( S| r�
|, r�
| j |, � n |, r�
|, } n t
j j j � s* i | d 6| d: 6| d; 6| dQ 6| d5 6|
dY 6| dZ 6| d[ 6| d\ 6| d] 6| d^ 6| d_ 6| d` 6| da 6| db 6| dS 6}9 nE i | d 6| dc 6| d\ 6| dd 6| dQ 6| d5 6| de 6| df 6| dg 6}9 t dh |9 � r�di j | � |( d <t d. | � |( d <| s� d# |( d d5 <n d
t k rXt
j j j � rXt
j j j! � rX| ra | ra t d/ | | � t d
| � }7 |7 d | k rP dj j | d' � |( d <t |( d <n d' |( d dc <n | r� | r� t d2 | � t d
| � }7 |7 d d# k r� dk j | � |( d <t |( d <n d# |( d dc <n | dz k r>
t d4 | | � t d
| � }7 |7 dl | k r-
dm j | | � |( d <t |( d <n | |( d d3 <n | r�
t d> | | � t d
| � }7 |7 dn | k r�
do j | | � |( d <t |( d <n | |( d d= <n | rt d@ | | � t d
| � }7 |7 dp | k rdq j | | � |( d <t |( d <n | |( d d? <n | rt dB | | � t d
| � }7 |7 dr | k rnds j | | � |( d <t |( d <n | |( d dA <n | r�t dD | | � t d
| � }7 |7 dt | k r�du j | | � |( d <t |( d <n | |( d dC <n | r�t dF | | � t d
| � }7 |7 dE | k rDdv j | | � |( d <t |( d <n | |( d dE <q�q�t
j j j � rN| r�| r�t dw | | � s�dj j | d' � |( d <t |( d <n d' |( d d <n | r�t dF | | � t d
| � }7 t
j j" j# |7 dE � t
j j" j# | � k r6dv j | | � |( d <t |( d <n |7 dE |( d dx <q�q�t
j j j! � r�| r�| r�t d/ | | � s�dj j | d' � |( d <t |( d <n d' |( d d <q�q�dy j | � |( d <t |( d <n |( S(� u
Ensure that the named user is present with the specified properties
name
The name of the user to manage
uid
The user id to assign. If not specified, and the user does not exist,
then the next available uid will be assigned.
gid
The id of the default group to assign to the user. Either a group name
or gid can be used. If not specified, and the user does not exist, then
he next available gid will be assigned.
gid_from_name : False
If ``True``, the default group id will be set to the id of the group
with the same name as the user. If the group does not exist the state
will fail.
allow_uid_change : False
Set to ``True`` to allow the state to update the uid.
.. versionadded:: 2018.3.1
allow_gid_change : False
Set to ``True`` to allow the state to update the gid.
.. versionadded:: 2018.3.1
groups
A list of groups to assign the user to, pass a list object. If a group
specified here does not exist on the minion, the state will fail.
If set to the empty list, the user will be removed from all groups
except the default group. If unset, salt will assume current groups
are still wanted (see issue #28706).
optional_groups
A list of groups to assign the user to, pass a list object. If a group
specified here does not exist on the minion, the state will silently
ignore it.
NOTE: If the same group is specified in both "groups" and
"optional_groups", then it will be assumed to be required and not optional.
remove_groups
Remove groups that the user is a member of that weren't specified in
the state, Default is ``True``.
home
The custom login directory of user. Uses default value of underlying
system if not set. Notice that this directory does not have to exist.
This also the location of the home directory to create if createhome is
set to True.
createhome : True
If set to ``False``, the home directory will not be created if it
doesn't already exist.
.. warning::
Not supported on Windows or Mac OS.
Additionally, parent directories will *not* be created. The parent
directory for ``home`` must already exist.
nologinit : False
If set to ``True``, it will not add the user to lastlog and faillog
databases.
.. note::
Not supported on Windows or Mac OS.
password
A password hash to set for the user. This field is only supported on
Linux, FreeBSD, NetBSD, OpenBSD, and Solaris. If the ``empty_password``
argument is set to ``True`` then ``password`` is ignored.
For Windows this is the plain text password.
For Linux, the hash can be generated with ``openssl passwd -1``.
.. versionchanged:: 0.16.0
BSD support added.
hash_password
Set to True to hash the clear text password. Default is ``False``.
enforce_password
Set to False to keep the password from being changed if it has already
been set and the password hash differs from what is specified in the
"password" field. This option will be ignored if "password" is not
specified, Default is ``True``.
empty_password
Set to True to enable password-less login for user, Default is ``False``.
shell
The login shell, defaults to the system default shell
unique
Require a unique UID, Default is ``True``.
system
Choose UID in the range of FIRST_SYSTEM_UID and LAST_SYSTEM_UID, Default is
``False``.
loginclass
The login class, defaults to empty
(BSD only)
User comment field (GECOS) support (currently Linux, BSD, and MacOS
only):
The below values should be specified as strings to avoid ambiguities when
the values are loaded. (Especially the phone and room number fields which
are likely to contain numeric data)
fullname
The user's full name
roomnumber
The user's room number (not supported in MacOS)
workphone
The user's work phone number (not supported in MacOS)
homephone
The user's home phone number (not supported in MacOS)
other
The user's other attribute (not supported in MacOS)
If GECOS field contains more than 4 commas, this field will have the rest of 'em
.. versionchanged:: 2014.7.0
Shadow attribute support added.
Shadow attributes support (currently Linux only):
The below values should be specified as integers.
date
Date of last change of password, represented in days since epoch
(January 1, 1970).
mindays
The minimum number of days between password changes.
maxdays
The maximum number of days between password changes.
inactdays
The number of days after a password expires before an account is
locked.
warndays
Number of days prior to maxdays to warn users.
expire
Date that account expires, represented in days since epoch (January 1,
1970).
The below parameters apply to windows only:
win_homedrive (Windows Only)
The drive letter to use for the home directory. If not specified the
home directory will be a unc path. Otherwise the home directory will be
mapped to the specified drive. Must be a letter followed by a colon.
Because of the colon, the value must be surrounded by single quotes. ie:
- win_homedrive: 'U:
.. versionchanged:: 2015.8.0
win_profile (Windows Only)
The custom profile directory of the user. Uses default value of
underlying system if not set.
.. versionchanged:: 2015.8.0
win_logonscript (Windows Only)
The full path to the logon script to run when the user logs in.
.. versionchanged:: 2015.8.0
win_description (Windows Only)
A brief description of the purpose of the users account.
.. versionchanged:: 2015.8.0
u Hashing a clear text passwordu md5u 1u blowfishu 2au sha256u 5u sha512u 6u shadow.infou passwdu $i u7 Using MD5 for hashing passwords is considered insecure!u; Re-using existing shadow salt for hashing password using {}u shadow.gen_passwordt
crypt_saltt algorithmuI No existing shadow salt found, defaulting to a randomly generated new oneu kernelu Darwinu Windowsu nameu changesu resultu" User {0} is present and up to dateu commentu ,u Unsupported char ',' in {0}u
group.infou+ The following group(s) are not present: {0}u0 Optional group "%s" for user "%s" is not presentuC Group "%s" specified in both groups and optional_groups for user %su file.group_to_gidu u, Default group with name "{0}" is not presentu testu5 The following user attributes are set to be changed:
u XXX-REDACTED-XXXu groupu
ensure groupsu {0}: {1}
u OpenBSDu FreeBSDu user.get_loginclassu user.infou shadow.set_passwordu0 No password will be set when empty_password=Trueu empty_passwordu shadow.del_passwordu dateu shadow.set_dateu homeu homeDoesNotExistu user.chhomet persistu
file.mkdiru uidu gidi� u mindaysu shadow.set_mindaysu maxdaysu shadow.set_maxdaysu inactdaysu shadow.set_inactdaysu warndaysu shadow.set_warndaysu expireu shadow.set_expireu
win_homedriveu user.updateR" t homedriveu win_profilet profileu win_logonscriptt logonscriptu win_descriptiont descriptionu groupsu
user.ch{0}u
loginclassu Updated user {0}R> R? u& These values could not be changed: {0}u User {0} set to be addedu shellu uniqueu systemu fullnameu
roomnumberu workphoneu homephoneu otheru
createhomeu nologinitu passwordu descriptionu homedriveu profileu logonscriptu user.addu New user {0} createdu2 User {0} created but failed to set password to {1}u- User {0} created but failed to empty passwordu lstchgu: User {0} created but failed to set last change date to {1}u minu6 User {0} created but failed to set minimum days to {1}u maxu6 User {0} created but failed to set maximum days to {1}u inactu7 User {0} created but failed to set inactive days to {1}u warnu3 User {0} created but failed to set warn days to {1}u5 User {0} created but failed to set expire days to {1}u user.setpasswordu expiration_dateu Failed to create new user {0}N( u Darwinu Windows( u OpenBSDu FreeBSD( u Darwinu Windows( u Darwinu Windows( u OpenBSDu FreeBSD( u OpenBSDu FreeBSD($ t logt debugR t splitt warningR! t gett
ValueErrorR R R R R R R R R t
isinstanceR t joinR t intersectionRH R t strerrort __opts__R R R R t extendR R t is_darwinR R (: R" R# R$ t
gid_from_nameR% R& R' R( R) R* t
hash_passwordR+ R, R- t uniquet systemR. R/ R0 R1 R2 R3 R4 R5 R6 R7 R8 R9 R: R; R< R= t nologinitR> R? t
algorithmst _t algot shadow_saltt shadow_hasht rett gecos_fieldt xt missing_groupst present_optgroupst missing_optgroupt isectedt changest exct keyt valR@ t lcpret pret postt spostt lcpostt params( ( s4 /usr/lib/python2.7/site-packages/salt/states/user.pyt present� s� �
, )
)
"
.
c C@ sc i | d 6i d 6t d 6d d 6} t d | � } | rLt d rc d | d <d j | � | d <| St t j j j | � � } t d | | | � | d <t g | D] } t d
| � r� | ^ q� � } | d r+i | d <x) | | D] } d | d d j | � <q� Wd | d | <d
j | � | d <n t
| d <d j | � | d <| Sd j | � | d <| S( u�
Ensure that the named user is absent
name
The name of the user to remove
purge
Set purge to True to delete all of the user's files as well as the user,
Default is ``False``.
force
If the user is logged in, the absent state will fail. Set the force
option to True to remove the user even if they are logged in. Not
supported in FreeBSD and Solaris, Default is ``False``.
u nameu changesu resultu u commentu user.infou testu User {0} set for removalu user.deleteu
group.infou removedu {0} groupu Removed user {0}u Failed to remove user {0}u User {0} is not presentN( R R RZ R R! R R R t usert get_group_listR ( R" t purget forceRg RA t beforegroupst gt aftergroups( ( s4 /usr/lib/python2.7/site-packages/salt/states/user.pyt absentc s0
/
( t __doc__t
__future__R R R R t loggingt salt.utils.dataR t salt.utils.dateutilst salt.utils.platformt salt.utils.usert salt.exceptionsR t salt.ext.sixR R t getLoggert __name__RP R R R R RH Rx R� ( ( ( s4 /usr/lib/python2.7/site-packages/salt/states/user.pyt <module> s� � � � b
Mini Shell