Current File : //usr/lib/python2.7/site-packages/salt/modules/pdbedit.pyo
�
���^c @@ s? d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z y d d l m Z
Wn! e k
r} d d l m Z
n Xd d l
m Z d d l Z e j e � Z d Z i d d 6d d
6Z d � Z d � Z e e d
� Z e d � Z d � Z e e d � Z d e d d d d d d d d d d e e d � Z d S( u�
Manage accounts in Samba's passdb using pdbedit
:maintainer: Jorge Schrauwen <sjorge@blackdot.be>
:maturity: new
:platform: posix
.. versionadded:: 2017.7.0
i ( t absolute_importt print_functiont unicode_literalsN( t quote( t sixu pdbeditu listu
list_usersu getu get_userc C@ s, t j j j d � r t St d j t � f S( u'
Provides pdbedit if available
u pdbeditu7 {0} module can only be loaded when pdbedit is available( t saltt utilst patht whicht __virtualname__t Falset format( ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/pdbedit.pyt __virtual__& s
c C@ s. t j t j d | j d � � j � � j � S( u}
Generate a NT HASH
CLI Example:
.. code-block:: bash
salt '*' pdbedit.generate_nt_hash my_passwd
u md4u utf-16le( t binasciit hexlifyt hashlibt newt encodet digestt upper( t password( ( s8 /usr/lib/python2.7/site-packages/salt/modules/pdbedit.pyt generate_nt_hash4 s
c C@ s� | r i n g } | r@t d d j d | r4 d n d � � } | d d k r{ t j d | k rl | d n | d � | Si } x� | d j � D]� } | j d
� r� d | k r� | | | d <n i } q� d | k r� | | j d � j � j � } | | j d � d
j � } | | | <q� q� W| r�| | | d <q�n� t d d � } | d d k r�i d | k ry| d n | d d 6Sx_ | d j � D]M } d | k r�q�n | j d � } t
| � d k r�| j | d � q�q�W| S( u�
List user accounts
verbose : boolean
return all information
hashes : boolean
include NT HASH and LM HASH in verbose output
CLI Example:
.. code-block:: bash
salt '*' pdbedit.list
u cmd.run_allu! pdbedit --list --verbose {hashes}t hashesu --smbpasswd-styleu u retcodei u stderru stdoutu -u
unix usernameu :i u pdbedit --listu Errori ( t __salt__R t logt errort
splitlinest
startswitht indext stript lowert splitt lent append( t verboseR t userst rest user_datat usert labelt data( ( s8 /usr/lib/python2.7/site-packages/salt/modules/pdbedit.pyt
list_usersF s: !' % c C@ s- t d t d | � } | | k r) | | Si S( u�
Get user account details
login : string
login name
hashes : boolean
include NTHASH and LMHASH in verbose output
CLI Example:
.. code-block:: bash
salt '*' pdbedit.get kaylee
R" R ( R) t True( t loginR R# ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/pdbedit.pyt get_user s c C@ s | t t � k rt t d d j d t | � � � } | d d k ri i d | k r] | d n | d | 6Si d | 6Si d | 6S(
u�
Delete user account
login : string
login name
CLI Example:
.. code-block:: bash
salt '*' pdbedit.delete wash
u cmd.run_allu pdbedit --delete {login}R+ u retcodei u stderru stdoutu deletedu absent( R) R
R R t _quote_args( R+ R$ ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/pdbedit.pyt delete� s
% c C@ sk d } | r! | j � } d } n t | � } | t t � k r� t d d d j d t | � d | rj d n d � d d
j d | � � } | d d
k r� i d | k r� | d n | d | 6Sd } n t | t � } | d | k r`t d d j d t | � d t | � � � } | d d
k rHi d | k r<| d n | d | 6S| d k r`d } q`n i | | 6S( u�
Create user account
login : string
login name
password : string
password
password_hashed : boolean
set if password is a nt hash instead of plain text
machine_account : boolean
set to create a machine trust account instead
CLI Example:
.. code-block:: bash
salt '*' pdbedit.create zoe 9764951149F84E770889011E1DC4A927 nthash
salt '*' pdbedit.create river 1sw4ll0w3d4bug
u unchangedu u cmd.run_allt cmdu, pdbedit --create --user {login} -t {machine}R+ t machineu --machinet stdinu {password}
{password}
R u retcodei u stderru stdoutu createdu nt hashu6 pdbedit --modify --user {login} --set-nt-hash={nthash}t nthashu updated( R R R) R
R R R- R, R* ( R+ R t password_hashedt machine_accountt rett
password_hashR$ R& ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/pdbedit.pyt create� s2
% % c C@ sz d } i
d d 6d d 6d d 6d d 6d
d 6d d
6d d 6d d 6d d 6d d 6} i
| d 6| d 6| d 6| d 6| d 6| d
6| d 6|
d 6| d 6| d 6} | r� t | | | � | } | d5 k r� i | | 6Sn | t t � k r� i d | 6St | d t �} i } xW| j � D]I\ } } | d6 k r|| d7 k r_| | k r_| | j t j | � � r_t j | � | | <q_q| d8 k r*| d7 k r_| j
d � r�| d d !} n g } xI | j � D]; } | d9 k r�t j
d" j d# | � � q�| j | � q�Wd$ j d% d& j | � � | | <q_q| d7 k r| | k r| | | k r| | | <qqWt | � d' k s�|
s�| rog } x; | D]3 } | j d( j d) | | d* t | | � � � q�W|
r�| j d+ � n | r�| j d, � n t d- d. j d/ t | � d0 d1 j | � � � } | d2 d' k rWi d3 | k rK| d3 n | d4 | 6S| d k rod } qon i | | 6S(: u�
Modify user account
login : string
login name
password : string
password
password_hashed : boolean
set if password is a nt hash instead of plain text
domain : string
users domain
profile : string
profile path
script : string
logon script
drive : string
home drive
homedir : string
home directory
fullname : string
full name
account_desc : string
account description
machine_sid : string
specify the machines new primary group SID or rid
user_sid : string
specify the users new primary group SID or rid
account_control : string
specify user account control properties
.. note::
Only the following can be set:
- N: No password required
- D: Account disabled
- H: Home directory required
- L: Automatic Locking
- X: Password does not expire
reset_login_hours : boolean
reset the users allowed logon hours
reset_bad_password_count : boolean
reset the stored bad login counter
.. note::
if user is absent and password is provided, the user will be created
CLI Example:
.. code-block:: bash
salt '*' pdbedit.modify inara fullname='Inara Serra'
salt '*' pdbedit.modify simon password=r1v3r
salt '*' pdbedit.modify jane drive='V:' homedir='\\serenity\jane\profile'
salt '*' pdbedit.modify mal account_control=NX
u unchangedu --domain=u domainu --fullname=u full nameu --account-desc=u account descu
--homedir=u home directoryu --drive=u
homedir driveu
--profile=u profile pathu --script=u logon scriptu --account-control=u
account flagsu -U u user sidu -M u machine sidu updatedu createdu absentR u [i i����u Nu Du Hu Lu Xu> pdbedit.modify - unknown {f} flag for account_control, ignoredt fu [{flags}]t flagsu i u
{flag}{value}t flagt valueu --logon-hours-resetu --bad-password-count-resetu cmd.run_allu) pdbedit --modify --user {login} {changes}R+ t changesu u retcodeu stderru stdout( u updatedu createdu unchanged( u user sidu machine sidN( u
account flags( u Nu Du Hu Lu X( R7 R) R
R, R* t itemst Nonet endswithR t text_typeR R R t warningR R! t joinR R- R ( R+ R R3 t domaint profilet scriptt drivet homedirt fullnamet account_desct account_controlt machine_sidt user_sidt reset_login_hourst reset_bad_password_countR5 R9 t providedt currentR< t keyt valR R8 t cmdst changeR$ ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/pdbedit.pyt modify� s� >
5 %(
% ( t __doc__t
__future__R R R t loggingR R
t shlexR R- t ImportErrort pipest salt.extR t salt.utils.pathR t getLoggert __name__R R t __func_alias__R R R* R
R) R, R. R7 R> RU ( ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/pdbedit.pyt <module>
s6
9 A
Mini Shell