Current File : //usr/lib/python2.7/site-packages/salt/modules/shadow.pyc
�
���^c @@ sf d Z d d l m Z m Z m Z d d l Z d d l Z y d d l Z Wn e k
r] n Xd d l Z
d d l Z
d d l Z
d d l
m Z d d l m Z y d d l Z
e Z Wn e k
r� e Z n Xd � Z d � Z d � Z d � Z d
� Z d � Z d d d
� Z d � Z d � Z d � Z e d � Z d � Z! d � Z" d � Z# d � Z$ d S( u,
Manage the shadow file on Linux systems
.. important::
If you feel that Salt should be using this module to manage passwords on a
minion, and it is using a different module (or gives an error similar to
*'shadow.info' is not available*), see :ref:`here
<module-provider-override>`.
i ( t absolute_importt unicode_literalst print_functionN( t CommandExecutionError( t sixc C@ s t j d d � d k S( Nu kernelu u Linux( t
__grains__t get( ( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt __virtual__" s c C@ s d S( u�
Returns the default hash used for unset passwords
CLI Example:
.. code-block:: bash
salt '*' shadow.default_hash
u !( ( ( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt default_hash& s
c C@ s� yi t j | � } i | j d 6| j d 6| j d 6| j d 6| j d 6| j d 6| j d 6| j d 6} WnJ t
k
r� i d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6SX| S(
u�
Return information for the specified user
CLI Example:
.. code-block:: bash
salt '*' shadow.info root
u nameu passwdu lstchgu minu maxu warnu inactu expireu ( t spwdt getspnamt sp_namt sp_pwdt sp_lstchgt sp_mint sp_maxt sp_warnt sp_inactt sp_expiret KeyError( t namet datat ret( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt info3 s,
c C@ sx t | � } | | d k r t Sd j | | � } t d | d t �t | � } | d | d k rt | d | k St S( u�
Set the number of days of inactivity after a password has expired before
the account is locked. See man chage.
CLI Example:
.. code-block:: bash
salt '*' shadow.set_inactdays username 7
u inactu chage -I {0} {1}u cmd.runt python_shell( R t Truet formatt __salt__t False( R t inactdayst pre_infot cmdt post_info( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt
set_inactdaysU s c C@ sx t | � } | | d k r t Sd j | | � } t d | d t �t | � } | d | d k rt | d | k St S( u�
Set the maximum number of days during which a password is valid.
See man chage.
CLI Example:
.. code-block:: bash
salt '*' shadow.set_maxdays username 90
u maxu chage -M {0} {1}u cmd.runR ( R R R R R ( R t maxdaysR R R ( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt set_maxdaysk s c C@ sx t | � } | | d k r t Sd j | | � } t d | d t �t | � } | d | d k rt | d | k St S( u�
Set the minimum number of days between password changes. See man chage.
CLI Example:
.. code-block:: bash
salt '*' shadow.set_mindays username 7
u minu chage -m {0} {1}u cmd.runR ( R R R R R ( R t mindaysR R R ( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt set_mindays� s
u sha512c C@ s. t s t d � � n t j j j | | | � S( uX
.. versionadded:: 2014.7.0
Generate hashed password
.. note::
When called this function is called directly via remote-execution,
the password argument may be displayed in the system's process list.
This may be a security risk on certain systems.
password
Plaintext password to be hashed.
crypt_salt
Crpytographic salt. If not given, a random 8-character salt will be
generated.
algorithm
The following hash algorithms are supported:
* md5
* blowfish (not in mainline glibc, only available in distros that add it)
* sha256
* sha512 (default)
CLI Example:
.. code-block:: bash
salt '*' shadow.gen_password 'I_am_password'
salt '*' shadow.gen_password 'I_am_password' crypt_salt='I_am_salt' algorithm=sha256
uj gen_password is not available on this operating system because the "crypt" python module is not available.( t HAS_CRYPTR t saltt utilst pycryptot gen_hash( t passwordt
crypt_saltt algorithm( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt gen_password� s " c C@ sN d j | � } t d | d t d d �t | � } | d oM | d | k S( u�
.. versionadded:: 2014.7.0
Delete the password from name user
CLI Example:
.. code-block:: bash
salt '*' shadow.del_password username
u
passwd -d {0}u cmd.runR t output_loglevelu quietu passwdu name( R R R R ( R R t uinfo( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt del_password� s c C@ sw t | � } | d d k r t S| d j d � r7 t Sd j | � } t d | d t �t | � } | d j d � S( u�
.. versionadded:: 2016.11.0
Lock the password from specified user
CLI Example:
.. code-block:: bash
salt '*' shadow.lock_password username
u nameu u passwdu !u
passwd -l {0}u cmd.runR ( R R t
startswithR R R ( R R R R ( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt
lock_password� s c C@ sy t | � } | d d k r t S| d d d k r8 t Sd j | � } t d | d t �t | � } | d d d k S( u�
.. versionadded:: 2016.11.0
Unlock the password from name user
CLI Example:
.. code-block:: bash
salt '*' shadow.unlock_password username
u nameu u passwdi u !u
passwd -u {0}u cmd.runR ( R R R R R ( R R R R ( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt unlock_password� s c
C@ s� t j j j | � s�t d d k r7 d j | � } n d } i } t j j | � sY | Sg } t j j j
| d � �� } x� | D]� } t j j j | � } | j
� j d � } | d | k r� | j | � q� n t j j � t j d d d � } | | d <t j | j � | d
<d j | � } | j d j | � � q� WWd QXt j j j
| d
� �< } g | D] }
t j j j |
� ^ qg} | j | � Wd QXt | � } | d | k Sd j | | � } t d | d t d d �t | � } | d | k Sd S( u}
Set the password for a named user. The password must be a properly defined
hash. The password hash can be generated with this command:
``python -c "import crypt; print crypt.crypt('password',
'\$6\$SALTsalt')"``
``SALTsalt`` is the 8-character crpytographic salt. Valid characters in the
salt are ``.``, ``/``, and any alphanumeric character.
Keep in mind that the $6 represents a sha512 hash, if your OS is using a
different hashing algorithm this needs to be changed accordingly
CLI Example:
.. code-block:: bash
salt '*' shadow.set_password root '$1$UYCIxa628.9qXjpQCjM4a..'
u osu ALTu /etc/tcb/{0}/shadowu /etc/shadowu rbu :i i� i i u {0}
Nu w+u passwdu usermod -p {0} {1}u cmd.runR R/ u quiet( R' R( R t is_trueR R t ost patht isfilet filest fopent stringutilst
to_unicodet stript splitt appendt datetimet todayR t text_typet dayst joint to_strt
writelinesR R R (
R R+ t use_usermodt s_fileR t linest fp_t linet compst changed_datet _lR0 R ( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt set_password s:
"
( c C@ sx t | � } | | d k r t Sd j | | � } t d | d t �t | � } | d | d k rt | d | k St S( u�
Set the number of days of warning before a password change is required.
See man chage.
CLI Example:
.. code-block:: bash
salt '*' shadow.set_warndays username 7
u warnu chage -W {0} {1}u cmd.runR ( R R R R R ( R t warndaysR R R ( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt set_warndays? s c C@ s, d d | | g } t d | d t �d k S( u�
Sets the value for the date the password was last changed to days since the
epoch (January 1, 1970). See man chage.
CLI Example:
.. code-block:: bash
salt '*' shadow.set_date username 0
u chageu -du cmd.retcodeR i ( R R ( R t dateR ( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt set_dateU s c C@ s, d d | | g } t d | d t �d k S( u$
.. versionchanged:: 2014.7.0
Sets the value for the date the account expires as days since the epoch
(January 1, 1970). Using a value of -1 will clear expiration. See man
chage.
CLI Example:
.. code-block:: bash
salt '*' shadow.set_expire username -1
u chageu -Eu cmd.retcodeR i ( R R ( R t expireR ( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt
set_expired s c C@ s& t g t j � D] } | j ^ q � S( u�
.. versionadded:: 2018.3.0
Return a list of all shadow users
CLI Example:
.. code-block:: bash
salt '*' shadow.list_users
( t sortedR t getspallR ( t user( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt
list_usersv s (% t __doc__t
__future__R R R R6 R@ R t ImportErrort salt.utils.dataR' t salt.utils.filest salt.utils.stringutilst salt.exceptionsR t salt.extR t salt.utils.pycryptoR R& R R R R R! R# R% t NoneR. R1 R3 R4 RO RQ RS RU RY ( ( ( s7 /usr/lib/python2.7/site-packages/salt/modules/shadow.pyt <module>
s@
" * 9
Mini Shell