Current File : //usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyc
�
���^c @@ sl d Z d d l m Z m Z m Z d d l m Z y d d l Z e Z Wn e k
ra e
Z n Xd d l Z d d l Z
d d l Z
d d l m Z e j e � Z d Z d � Z d � Z d � Z d
� Z d � Z d � Z d
� Z d � Z d � Z d � Z d � Z d � Z d � Z! d � Z" d � Z# d � Z$ d � Z% d � Z& d � Z' d � Z( d � Z) d S( u�
Manage macOS local directory passwords and policies
.. versionadded:: 2016.3.0
Note that it is usually better to apply password policies through the creation
of a configuration profile.
i ( t absolute_importt unicode_literalst print_function( t datetimeN( t CommandExecutionErroru shadowc C@ s4 t j j j � s t d f St r& t St d f Sd S( Nu Not macOSu The pwd module failed to load.( t saltt utilst platformt is_darwint Falset HAS_PWDt __virtualname__( ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt __virtual__" s
c C@ s d j | � } y t j j j | � } Wn[ t k
r� } d j | � | j k rj t d j | � � � n t d j | j � � � n Xyi | j d � d j d � } i } x< | D]4 } d | k r� | j d � \ } } | | | <q� q� W| SWn t k
ri SXd S(
u2
Get the entire accountPolicy and return it as a dictionary. For use by this
module only
:param str name: The user name
:return: a dictionary containing all values for the accountPolicy
:rtype: dict
:raises: CommandExecutionError on user not found or any other unknown error
u pwpolicy -u {0} -getpolicyu Error: user <{0}> not foundu User not found: {0}u Unknown error: {0}u
i u u =N( t formatR R t mac_utilst execute_return_resultR t strerrort splitt
IndexError( t namet cmdt rett exct policy_listt policy_dictt policyt keyt value( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt _get_account_policy- s"
c C@ s� d j | | � } y t j j j | � SWn[ t k
r� } d j | � | j k rk t d j | � � � n t d j | j � � � n Xd S( u,
Set a value in the user accountPolicy. For use by this module only
:param str name: The user name
:param str policy: The policy to apply
:return: True if success, otherwise False
:rtype: bool
:raises: CommandExecutionError on user not found or any other unknown error
u pwpolicy -u {0} -setpolicy "{1}"u Error: user <{0}> not foundu User not found: {0}u Unknown error: {0}N( R
R R R t execute_return_successR R ( R R R R ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt _set_account_policyN s c C@ s� d j | | � } y t j j j | � } WnR t k
r } d | j k rd t d j | � � � n t d j | j � � � n X| S( uZ
Return the value for a key in the accountPolicy section of the user's plist
file. For use by this module only
:param str name: The username
:param str key: The accountPolicy key
:return: The value contained within the key
:rtype: str
:raises: CommandExecutionError on user not found or any other unknown error
u/ dscl . -readpl /Users/{0} accountPolicyData {1}u eDSUnknownNodeNameu User not found: {0}u Unknown error: {0}( R
R R R R R R ( R R R R R ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt _get_account_policy_data_valued s
c C@ sE y& t | � } t j | � j d � SWn t t f k
r@ d SXd S( u�
Converts a unix timestamp to a human readable date/time
:param float unix_timestamp: A unix timestamp
:return: A date/time in the format YYYY-mm-dd HH:MM:SS
:rtype: str
u %Y-%m-%d %H:%M:%Su Invalid TimestampN( t floatR t
fromtimestampt strftimet
ValueErrort TypeError( t unix_timestamp( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt _convert_to_datetime| s
c C@ s y� t j | � } i | j d 6| j d 6t | � d 6t | � d 6t | � d 6t | � d 6t | � d 6t | � d 6t
| � d 6d
d 6d
d 6d
d
6SWnv t k
rt j
d | � i d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d
6SXd S( u�
Return information for the specified user
:param str name: The username
:return: A dictionary containing the user's shadow information
:rtype: dict
CLI Example:
.. code-block:: bash
salt '*' shadow.info admin
u nameu passwdu account_createdu login_failed_countu login_failed_lastu lstchgu maxu expireu changeu Unavailableu minu warnu inactu User not found: %su N( t pwdt getpwnamt pw_namet pw_passwdt get_account_createdt get_login_failed_countt get_login_failed_lastt get_last_changet get_maxdayst
get_expiret
get_changet KeyErrort logt debug( R t data( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt info� s8
c C@ s4 t | d � } t j j j | � } t | � } | S( uo
Get the date/time the account was created
:param str name: The username of the account
:return: The date/time the account was created (yyyy-mm-dd hh:mm:ss)
:rtype: str
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' shadow.get_account_created admin
u creationTime( R R R R t parse_returnR& ( R R R% t date_text( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyR+ � s c C@ s4 t | d � } t j j j | � } t | � } | S( ul
Get the date/time the account was changed
:param str name: The username of the account
:return: The date/time the account was modified (yyyy-mm-dd hh:mm:ss)
:rtype: str
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' shadow.get_last_change admin
u passwordLastSetTime( R R R R R7 R& ( R R R% R8 ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyR. � s c C@ s" t | d � } t j j j | � S( u\
Get the the number of failed login attempts
:param str name: The username of the account
:return: The number of failed login attempts
:rtype: int
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' shadow.get_login_failed_count admin
u failedLoginCount( R R R R R7 ( R R ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyR, � s c C@ s4 t | d � } t j j j | � } t | � } | S( u�
Get the date/time of the last failed login attempt
:param str name: The username of the account
:return: The date/time of the last failed login attempt on this account
(yyyy-mm-dd hh:mm:ss)
:rtype: str
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' shadow.get_login_failed_last admin
u failedLoginTimestamp( R R R R R7 R& ( R R R% R8 ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyR- s c C@ s4 | d d } t | d j | � � t | � | k S( u�
Set the maximum age of the password in days
:param str name: The username of the account
:param int days: The maximum age of the account in days
:return: True if successful, False if not
:rtype: bool
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' shadow.set_maxdays admin 90
i i< u! maxMinutesUntilChangePassword={0}( R R
R/ ( R t dayst minutes( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt set_maxdays s c C@ s8 t | � } d | k r4 | d } t | � d d Sd S( uP
Get the maximum age of the password
:param str name: The username of the account
:return: The maximum age of the password in days
:rtype: int
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' shadow.get_maxdays admin 90
u maxMinutesUntilChangePasswordi i< i ( R t int( R t policiest max_minutes( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyR/ : s
c C@ s t S( uI
Set the minimum password age in days. Not available in macOS.
:param str name: The user name
:param int days: The number of days
:return: Will always return False until macOS supports this feature.
:rtype: bool
CLI Example:
.. code-block:: bash
salt '*' shadow.set_mindays admin 90
( R ( R R9 ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt set_mindaysT s c C@ s t S( uf
Set the number if inactive days before the account is locked. Not available
in macOS
:param str name: The user name
:param int days: The number of days
:return: Will always return False until macOS supports this feature.
:rtype: bool
CLI Example:
.. code-block:: bash
salt '*' shadow.set_inactdays admin 90
( R ( R R9 ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt
set_inactdaysh s c C@ s t S( u�
Set the number of days before the password expires that the user will start
to see a warning. Not available in macOS
:param str name: The user name
:param int days: The number of days
:return: Will always return False until macOS supports this feature.
:rtype: bool
CLI Example:
.. code-block:: bash
salt '*' shadow.set_warndays admin 90
( R ( R R9 ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt set_warndays} s c C@ s& t | d j | � � t | � | k S( u
Sets the date on which the password expires. The user will be required to
change their password. Format is mm/dd/yyyy
:param str name: The name of the user account
:param date date: The date the password will expire. Must be in mm/dd/yyyy
format.
:return: True if successful, otherwise False
:rtype: bool
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' shadow.set_change username 09/21/2016
u+ usingExpirationDate=1 expirationDateGMT={0}( R R
R1 ( R t date( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt
set_change� s c C@ s$ t | � } d | k r | d Sd S( uR
Gets the date on which the password expires
:param str name: The name of the user account
:return: The date the password will expire
:rtype: str
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' shadow.get_change username
u expirationDateGMTu
Value not set( R ( R R= ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyR1 � s c C@ s& t | d j | � � t | � | k S( u
Sets the date on which the account expires. The user will not be able to
login after this date. Date format is mm/dd/yyyy
:param str name: The name of the user account
:param datetime date: The date the account will expire. Format must be
mm/dd/yyyy.
:return: True if successful, False if not
:rtype: bool
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' shadow.set_expire username 07/23/2015
u/ usingHardExpirationDate=1 hardExpireDateGMT={0}( R R
R0 ( R RB ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt
set_expire� s c C@ s$ t | � } d | k r | d Sd S( uL
Gets the date on which the account expires
:param str name: The name of the user account
:return: The date the account expires
:rtype: str
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' shadow.get_expire username
u hardExpireDateGMTu
Value not set( R ( R R= ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyR0 � s c C@ s� d j | � } y t j j j | � WnR t k
rz } d | j k r_ t d j | � � � n t d j | j � � � n Xd j | � } t j j j | � t | � d d k S( uH
Deletes the account password
:param str name: The user name of the account
:return: True if successful, otherwise False
:rtype: bool
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' shadow.del_password username
u dscl . -passwd /Users/{0} ''u eDSUnknownNodeNameu User not found: {0}u Unknown error: {0}u& dscl . -create /Users/{0} Password '*'u passwdu *( R
R R R R R R R6 ( R R R ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt del_password� s c C@ s� d j | | � } y t j j j | � WnR t k
r} } d | j k rb t d j | � � � n t d j | j � � � n Xt S( u'
Set the password for a named user (insecure, the password will be in the
process list while the command is running)
:param str name: The name of the local user, which is assumed to be in the
local directory service
:param str password: The plaintext password to set
:return: True if successful, otherwise False
:rtype: bool
:raises: CommandExecutionError on user not found or any other unknown error
CLI Example:
.. code-block:: bash
salt '*' mac_shadow.set_password macuser macpassword
u dscl . -passwd /Users/{0} '{1}'u eDSUnknownNodeNameu User not found: {0}u Unknown error: {0}( R
R R R R R R t True( R t passwordR R ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt set_password s (* t __doc__t
__future__R R R R R' RF R
t ImportErrorR t loggingt salt.utils.mac_utilsR t salt.utils.platformt salt.exceptionsR t getLoggert __name__R3 R R R R R R& R6 R+ R. R, R- R; R/ R? R@ RA RC R1 RD R0 RE RH ( ( ( s; /usr/lib/python2.7/site-packages/salt/modules/mac_shadow.pyt <module> sD
! . !
Mini Shell