Current File : //usr/lib/python2.7/site-packages/salt/auth/pam.pyc
�
���^c @@ s
d Z d d l m Z m Z m Z d d l Z d d l m Z m Z m Z m
Z
m Z m Z m
Z
d d l m Z m Z m Z m Z m Z d d l m Z d d l Z d d l m Z d d l m Z e j e � Z y[ e e d � � Z e j Z e e _! e e g e _" e j# Z$ e g e$ _% e e � e$ _! Wn* e& k
r\e j' d
d e( �e) Z* n Xe( Z* d Z+ d
Z, d Z- d Z. d e f d � � YZ/ d e f d � � YZ0 d e f d � � YZ1 e
e e e e e0 � � e e e1 � � e � Z2 d e f d � � YZ3 y� e e d � � Z4 e4 j5 Z6 e e6 _! e e e e3 � e e/ � g e6 _" e4 j7 Z8 e e8 _! e/ e g e8 _" e4 j9 Z: e e: _! e/ e g e: _" e4 j; Z< e e< _! e/ e g e< _" Wn* e& k
r�e j' d d e( �e) Z= n Xe( Z= d � Z> d � Z? d � Z@ d � ZA d S( u�
Authenticate against PAM
Provides an authenticate function that will allow the caller to authenticate
a user against the Pluggable Authentication Modules (PAM) on the system.
Implemented using ctypes, so no compilation is necessary.
There is one extra configuration option for pam. The `pam_service` that is
authenticated against. This defaults to `login`
.. code-block:: yaml
auth.pam.service: login
.. note:: Solaris-like (SmartOS, OmniOS, ...) systems may need ``auth.pam.service`` set to ``other``.
.. note:: PAM authentication will not work for the ``root`` user.
The Python interface to PAM does not support authenticating as ``root``.
.. note:: Using PAM groups with SSSD groups on python2.
To use sssd with the PAM eauth module and groups the `pysss` module is
needed. On RedHat/CentOS this is `python-sss`.
This should not be needed with python >= 3.3, because the `os` modules has the
`getgrouplist` function.
i ( t absolute_importt print_functiont unicode_literalsN( t CDLLt POINTERt Structuret CFUNCTYPEt castt pointert sizeof( t c_void_pt c_uintt c_char_pt c_chart c_int( t find_library( t range( t sixu cu Failed to load libc using ctypest exc_infoi i i i t PamHandlec B@ s& e Z d Z d e f g Z d � Z RS( u(
Wrapper class for pam_handle_t
u handlec C@ s t j | � d | _ d S( Ni ( R t __init__t handle( t self( ( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyR U s
( t __name__t
__module__t __doc__R
t _fields_R ( ( ( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyR M s t
PamMessagec B@ s/ e Z d Z d e f d e f g Z d � Z RS( u1
Wrapper class for pam_message structure
u msg_styleu msgc C@ s d j | j | j � S( Nu <PamMessage {0} '{1}'>( t formatt msg_stylet msg( R ( ( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyt __repr__c s ( R R R R R R R ( ( ( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyR Z s t PamResponsec B@ s/ e Z d Z d e f d e f g Z d � Z RS( u2
Wrapper class for pam_response structure
u respu resp_retcodec C@ s d j | j | j � S( Nu <PamResponse {0} '{1}'>( R t resp_retcodet resp( R ( ( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyR p s ( R R R R R R R ( ( ( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyR g s t PamConvc B@ s& e Z d Z d e f d e f g Z RS( u.
Wrapper class for pam_conv structure
u convu appdata_ptr( R R R t CONV_FUNCR
R ( ( ( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyR# | s u pamu Failed to load pam using ctypesc C@ s
t o t S( u$
Only load on Linux systems
( t HAS_LIBCt HAS_PAM( ( ( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyt __virtual__� s c @ s+ t j d d � } t | t j � r6 | j t � } n t � t j � rZ � j t � � n t | t j � r~ | j t � } n t � f d � � } t � } t | d � } t
| | t | � t | � � } | d k r� t | | � t
St | d � } | d k rt | d � n t | d � | d k S( u�
Returns True if the given username and password authenticate for the
given service. Returns False otherwise
``username``: the username to authenticate
``password``: the password in plain text
u auth.pam.serviceu loginc @ s� t | t t � � } t | t t � � | d <xb t | � D]T } | | j j t k r; t � � } t | t
� | j | _ d | j | _ q; q; Wd S( u�
Simple conversation function that responds to any
prompt where the echo is off with the supplied password
i (
t CALLOCR R R R R t contentsR t PAM_PROMPT_ECHO_OFFt STRDUPR R" R! ( t
n_messagest messagest
p_responset app_datat addrt it pw_copy( t password( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyt my_conv� s i ( t __opts__t gett
isinstanceR t text_typet encodet __salt_system_encoding__R$ R R# t PAM_STARTR t PAM_ENDt Falset PAM_AUTHENTICATEt
PAM_ACCT_MGMT( t usernameR3 t serviceR4 R t convt retval( ( R3 s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyt authenticate� s& !
c K@ s
t | | � S( u
Authenticate via pam
( RD ( R@ R3 t kwargs( ( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyt auth� s c O@ s t j j j | � S( uY
Retrieve groups for a given user for this auth provider
Uses system groups
( t saltt utilst usert get_group_list( R@ t argsRE ( ( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyt groups� s (B R t
__future__R R R t loggingt ctypesR R R R R R R R
R R R
R t ctypes.utilR t salt.utils.userRG t salt.ext.six.movesR t salt.extR t getLoggerR t logt LIBCt callocR( t restypet argtypest strdupR+ t argstypest Exceptiont tracet TrueR= R% R* t PAM_PROMPT_ECHO_ONt
PAM_ERROR_MSGt
PAM_TEXT_INFOR R R R$ R# t LIBPAMt pam_startR; t pam_authenticateR> t
pam_acct_mgmtR? t pam_endR< R& R' RD RF RL ( ( ( s1 /usr/lib/python2.7/site-packages/salt/auth/pam.pyt <module>$ sx 4(
3
Mini Shell