Current File : //usr/lib/python2.7/site-packages/salt/states/ssh_auth.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l m Z d � Z d � Z
d d d d d d d
� Z d d d d d d d � Z
d S( u~
Control of entries in SSH authorized_key files
==============================================
The information stored in a user's SSH authorized key file can be easily
controlled via the ssh_auth state. Defaults can be set by the enc, options,
and comment keys. These defaults can be overridden by including them in the
name.
Since the YAML specification limits the length of simple keys to 1024
characters, and since SSH keys are often longer than that, you may have
to use a YAML 'explicit key', as demonstrated in the second example below.
.. code-block:: yaml
AAAAB3NzaC1kc3MAAACBAL0sQ9fJ5bYTEyY==:
ssh_auth.present:
- user: root
- enc: ssh-dss
? AAAAB3NzaC1kc3MAAACBAL0sQ9fJ5bYTEyY==...
:
ssh_auth.present:
- user: root
- enc: ssh-dss
thatch:
ssh_auth.present:
- user: root
- source: salt://ssh_keys/thatch.id_rsa.pub
- config: '%h/.ssh/authorized_keys'
sshkeys:
ssh_auth.present:
- user: root
- enc: ssh-rsa
- options:
- option1="value1"
- option2="value2 flag2"
- comment: myuser
- names:
- AAAAB3NzaC1kc3MAAACBAL0sQ9fJ5bYTEyY==
- ssh-dss AAAAB3NzaCL0sQ9fJ5bYTEyY== user@domain
- option3="value3" ssh-dss AAAAB3NzaC1kcQ9J5bYTEyY== other@testdomain
- AAAAB3NzaC1kcQ9fJFF435bYTEyY== newcomment
i ( t absolute_importt unicode_literalst print_functionN( t sixc
C@ sG d } | r� t d | | | d t d | �} | r� d } xE t j | � D]4 \ }
} | d k rh qJ n | d j | |
� 7} qJ W| r� | | f Sn t j t d j j j
d d � } | r� t | f St d j | � f Sn� t
j d
� }
|
j | � } | s:| j � } | d } t | � d k r�| d
} q�nr | j d
� rd| j d
� j d � } n | j d � j � } | d } | d
} t | � d k r�| d } n t d | | | | | d | d | �} | d k r�d j | | � } nH | d k rd j | | � } n' | d k r=t } d j | | � } n | | f S( u"
Run checks for "present"
u ssh.check_key_filet saltenvt fingerprint_hash_typeu u existsu Set to {0}: {1}
u test.pingu ssh_auth.erroru- All host keys in file {0} are already presentu$ ^(.*?)\s?((?:ssh\-|ecds)[\w-]+\s.+)$i i i u ,i u
ssh.check_keyt configu updateu) Key {0} for user {1} is set to be updatedu addu' Key {0} for user {1} is set to be addedu; The authorized host key {0} is already present for user {1}N( t Nonet __salt__t __env__R t iteritemst formatt syst modulest
__module__t __context__t popt Falset Truet ret compilet searcht splitt lent group( t usert namet enct commentt optionst sourceR R t resultt keyst keyt statust errt sshret fullkeyt key_and_commentt compst check( ( s8 /usr/lib/python2.7/site-packages/salt/states/ssh_auth.pyt
_present_test: sp
c
C@ s d } | r� t d | | | d t d | �} | r� d } xE t | j � � D]1 \ }
} | d k rk qM n | d j |
� 7} qM W| r� | | f Sn t j t d j j j
d d � } | r� t | f St d j | � f Sn� t
j d
� }
|
j | � } | s:| j � } | d } t | � d k r�| d
} q�nr | j d
� rd| j d
� j d � } n | j d � j � } | d } | d
} t | � d k r�| d } n t d | | | | | d | d | �} | d k s�| d k rd j | | � } n d } t } | | f S( u!
Run checks for "absent"
u ssh.check_key_fileR R u u addu Set to remove: {0}
u test.pingu ssh_auth.erroru, All host keys in file {0} are already absentu$ ^(.*?)\s?((?:ssh\-|ecds)[\w-]+\s.+)$i i i u ,i u
ssh.check_keyR u updateu existsu' Key {0} for user {1} is set for removalu Key is already absentN( R R R t listt itemsR R R
R R R R R R R R R R R ( R R R R R R R R R R R! R" R# R$ R% R& R' R( ( ( s8 /usr/lib/python2.7/site-packages/salt/states/ssh_auth.pyt _absent_test� sd
u ssh-rsau u .ssh/authorized_keysc K@ s, i | d 6i d 6t d 6d d 6} | d k r t j d � }
|
j | � } | s� | j d+ d � } | d } t | � d k r| d } qq | j d � r� | j d � j d
� } n | j d � j d+ d � }
|
d } |
d } t |
� d k r |
d } q n t d rNt | | | | | p-g | | | � \ | d <| d <| S| d k rvt
d
| d+ d t �} n | d k r�| r�d } nV| d k r�| r�t
d | d t �} t } t j d � }
| j
� j d � } x| D]� } |
j | � } | s.t
d | | d | d t d | �} q�| j d � } | d } | d } t | � d k rm| d n d } t
d | | d | d | d | p�g d | d | �} q�Wn7 t
d | | d | d | d | p�g d | d | �} | d k r d | d | <d j | | � | d <| S| d k rAd j | | � | d <n� | d k rtd! | d | <d" j | | � | d <n� | d k r�t | d <d# j | � | d <n� | d$ k r�t | d <t j t
d% j j j d& d+ � } | r�| | d <q(d' | d <n/ | d( k s| d) k r(t | d <d* | d <n | S(, u�
Verifies that the specified SSH key is present for the specified user
name
The SSH key to manage
user
The user who owns the SSH authorized keys file to modify
enc
Defines what type of key is being used; can be ed25519, ecdsa, ssh-rsa
or ssh-dss
comment
The comment to be placed with the SSH public key
source
The source file for the key(s). Can contain any number of public keys,
in standard "authorized_keys" format. If this is set, comment and enc
will be ignored.
.. note::
The source file must contain keys in the format ``<enc> <key>
<comment>``. If you have generated a keypair using PuTTYgen, then you
will need to do the following to retrieve an OpenSSH-compatible public
key.
1. In PuTTYgen, click ``Load``, and select the *private* key file (not
the public key), and click ``Open``.
2. Copy the public key from the box labeled ``Public key for pasting
into OpenSSH authorized_keys file``.
3. Paste it into a new file.
options
The options passed to the key, pass a list object
config
The location of the authorized keys file relative to the user's home
directory, defaults to ".ssh/authorized_keys". Token expansion %u and
%h for username and home path supported.
fingerprint_hash_type
The public key fingerprint hash type that the public key fingerprint
was originally hashed with. This defaults to ``md5`` if not specified.
.. versionadded:: 2016.11.7
.. note::
The default value of the ``fingerprint_hash_type`` will change to
``sha256`` in Salt 2017.7.0.
u nameu changesu resultu u commentu$ ^(.*?)\s?((?:ssh\-|ecds)[\w-]+\s.+)$i i i u ,i u testu
cp.get_urlR u no keyu cp.get_file_stru ^(ssh\-|ecds).*u
u ssh.set_auth_key_from_fileR R u u ssh.set_auth_keyR R R u replaceu Updatedu4 The authorized host key {0} for user {1} was updatedu no changeu; The authorized host key {0} is already present for user {1}u newu Newu2 The authorized host key {0} for user {1} was addedu5 Failed to add the ssh key. Source file {0} is missingu failu test.pingu ssh_auth.erroru[ Failed to add the ssh key. Is the home directory available, and/or does the key file exist?u invalidu Invalid public keyu@ Invalid public ssh key, most likely has spaces or invalid syntaxN( R R R R R R R R t __opts__R) R R R t rstript matchR R R
R R R ( R R R R R R R R t kwargst retR$ R% R& R' t source_patht dataR! t filehasoptionst keylinet key_typet key_valuet key_commentR# ( ( s8 /usr/lib/python2.7/site-packages/salt/states/ssh_auth.pyt present� s� >
"
c
C@ ss i | d 6i d 6t d 6d d 6} t d re t | | | | | pD g | | | � \ | d <| d <| S| d k r9t d | d t �} t }
t j d � } | j � j d
� } x|| D]z } | j
| � }
|
s� t d | | | d t d | �| d <q� | j d
� } t d | | d d | d | �| d <q� Wn� t j d � } | j | � }
|
s�| j d d � } | d } t
| � d k r
| d } q
nr |
j d � r�|
j d � j d � } n |
j d � j � } | d } | d } t
| � d k r
| d } n t d | | d | d | �| d <| d d k rNt | d <| S| d d k rod | d | <n | S( u�
Verifies that the specified SSH key is absent
name
The SSH key to manage
user
The user who owns the SSH authorized keys file to modify
enc
Defines what type of key is being used; can be ed25519, ecdsa, ssh-rsa
or ssh-dss
comment
The comment to be placed with the SSH public key
options
The options passed to the key, pass a list object
source
The source file for the key(s). Can contain any number of public keys,
in standard "authorized_keys" format. If this is set, comment, enc and
options will be ignored.
.. versionadded:: 2015.8.0
config
The location of the authorized keys file relative to the user's home
directory, defaults to ".ssh/authorized_keys". Token expansion %u and
%h for username and home path supported.
fingerprint_hash_type
The public key fingerprint hash type that the public key fingerprint
was originally hashed with. This defaults to ``md5`` if not specified.
.. versionadded:: 2016.11.7
.. note::
The default value of the ``fingerprint_hash_type`` will change to
``sha256`` in Salt 2017.7.0.
u nameu changesu resultu u commentu testu cp.get_file_strR u ^(ssh\-|ecds).*u
u ssh.rm_auth_key_from_fileR u u ssh.rm_auth_keyi R u$ ^(.*?)\s?((?:ssh\-|ecds)[\w-]+\s.+)$i i u ,i u% User authorized keys file not presentu Key removedu RemovedN( R R- R, R R R R R R. R R/ R R R R ( R R R R R R R R R1 R! R4 R$ R5 R% R& R' ( ( s8 /usr/lib/python2.7/site-packages/salt/states/ssh_auth.pyt absent� sv 3
( t __doc__t
__future__R R R R R t salt.extR R) R, R R9 R: ( ( ( s8 /usr/lib/python2.7/site-packages/salt/states/ssh_auth.pyt <module>/ s$ K G �
Mini Shell