Current File : //usr/lib/python2.7/site-packages/salt/modules/kerberos.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z e j e � Z
d � Z d � Z d � Z
d � Z d � Z d � Z d
� Z d d � Z d � Z d d
� Z d S( u�
Manage Kerberos KDC
:configuration:
In order to manage your KDC you will need to generate a keytab
that can authenticate without requiring a password.
.. code-block:: bash
# ktadd -k /root/secure.keytab kadmin/admin kadmin/changepw
On the KDC minion you will need to add the following to the minion
configuration file so Salt knows what keytab to use and what principal to
authenticate as.
.. code-block:: yaml
auth_keytab: /root/auth.keytab
auth_principal: kadmin/admin
i ( t absolute_importt print_functiont unicode_literalsNc C@ s# t j j j d � r t St d f S( Nu kadminu< The kerberos execution module not loaded: kadmin not in path( t saltt utilst patht whicht Truet False( ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/kerberos.pyt __virtual__! s c C@ s� i } t j d d � } t j d d � } t d | � r] | r] t d d j | | | � � St j d � d | d <d | d
<| S( u!
Execute kadmin commands
u auth_keytabu auth_principalu file.file_existsu cmd.run_allu kadmin -k -t {0} -p {1} -q "{2}"u( Unable to find kerberos keytab/principali u retcodeu' Missing authentication keytab/principalu commentN( t __opts__t gett Nonet __salt__t formatt logt error( t cmdt rett auth_keytabt auth_principal( ( s9 /usr/lib/python2.7/site-packages/salt/modules/kerberos.pyt __execute_kadmin( s
c C@ s� i } t d � } | d d k s, | d rR | d j � d | d <t | d <| Si g d 6} x- | d j � d
D] } | d j | � qt W| S( u�
Get all principals
CLI Example:
.. code-block:: bash
salt 'kde.example.com' kerberos.list_principals
u list_principalsu retcodei u stderri����u commentu resultu
principalsu stdouti ( R t
splitlinesR t append( R R t i( ( s9 /usr/lib/python2.7/site-packages/salt/modules/kerberos.pyt list_principals? s
c C@ s� i } t d j | � � } | d d k s5 | d r[ | d j � d | d <t | d <| Sx> | d j � d D]( } | j d
d � \ } } | | | <qp W| S( u�
Get princial details
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.get_principal root/admin
u get_principal {0}u retcodei u stderri����u commentu resultu stdouti u :( R R R R t split( t nameR R R t propt val( ( s9 /usr/lib/python2.7/site-packages/salt/modules/kerberos.pyt
get_principal[ s
c C@ s� i } t d � } | d d k s, | d rR | d j � d | d <t | d <| Si g d 6} x- | d j � d
D] } | d j | � qt W| S( uz
List policies
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.list_policies
u
list_policiesu retcodei u stderri����u commentu resultu policiesu stdouti ( R R R R ( R R R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/kerberos.pyt
list_policiesw s
c C@ s� i } t d j | � � } | d d k s5 | d r[ | d j � d | d <t | d <| Sx> | d j � d D]( } | j d
d � \ } } | | | <qp W| S( u�
Get policy details
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.get_policy my_policy
u get_policy {0}u retcodei u stderri����u commentu resultu stdouti u :( R R R R R ( R R R R R R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/kerberos.pyt
get_policy� s
c C@ s� i } t d � } | d d k s, | d rR | d j � d | d <t | d <| SxW | d j � d D]A } | j d
d � \ } } g | j � D] } | ^ q� | | <qg W| S( u{
Current privileges
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.get_privs
u get_privsu retcodei u stderri����u commentu resultu stdouti u :( R R R R ( R R R R R t j( ( s9 /usr/lib/python2.7/site-packages/salt/modules/kerberos.pyt get_privs� s
'c C@ s� i } d } | r( | d j | � 7} n | d j | � 7} t | � } | d d k sa | d r� | d j � d j d � s� | d j � d | d <t | d
<| Sn t S( u�
Create Principal
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.create_principal host/example.com
u addprinc -randkeyu -e {0}u {0}u retcodei u stderri����u WARNING:u commentu result( R R R t
startswithR R ( R t enctypesR t krb_cmdR ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/kerberos.pyt create_principal� s
c C@ s_ i } t d j | � � } | d d k s5 | d r[ | d j � d | d <t | d <| St S( u�
Delete Principal
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.delete_principal host/example.com@EXAMPLE.COM
u delprinc -force {0}u retcodei u stderri����u commentu result( R R R R R ( R R R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/kerberos.pyt delete_principal� s
c C@ s� i } d j | � } | r1 | d j | � 7} n | d j | � 7} t | � } | d d k sj | d r� | d j � d | d <t | d <| St S(
u�
Create keytab
CLI Example:
.. code-block:: bash
salt 'kdc.example.com' kerberos.create_keytab host/host1.example.com host1.example.com.keytab
u ktadd -k {0}u -e {0}u {0}u retcodei u stderri����u commentu result( R R R R R ( R t keytabR$ R R% R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/kerberos.pyt
create_keytab s
( t __doc__t
__future__R R R t loggingt salt.utils.pathR t getLoggert __name__R R R R R R R R" R R& R' R) ( ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/kerberos.pyt <module> s
Mini Shell