Current File : //usr/lib/python3/dist-packages/sos/report/plugins/__pycache__/krb5.cpython-312.pyc |
�
-�_g� � �t � d dl Z d dlZd dlmZmZmZmZ G d� de� Z G d� dee� Z G d� deee� Z y) � N)�Plugin�RedHatPlugin�DebianPlugin�UbuntuPluginc �, � e Zd ZdZdZdZdZdZd� Zd� Z y)�Krb5a: This plugin handles the collection of kerberos authentication config
files and logging. Users should expect to see their krb5 config(s) in the
final archive, along with krb5 logging and `klist` output.
kdc configs and acls will also be collected from the distribution-spcecific
kdc directory.
zKerberos authentication�krb5)�identity�systemNc �
� | j dd| j � d�| j � d�dg� | j � | j dd�� | j d | j � d
�� | j d� y )Nz/etc/krb5.confz/etc/krb5.conf.d/*z
/kadm5.aclz /kdc.confz/var/log/kadmind.logz/var/log/krb5kdc.log�kerberos_kdc_log)�tagszklist -ket z/.k5*zklist -ket /etc/krb5.keytab)�
add_copy_spec�kdcdir�
collect_kinit�add_cmd_output)�selfs �9/usr/lib/python3/dist-packages/sos/report/plugins/krb5.py�setupz
Krb5.setup s� � ����� ��{�{�m�:�&��{�{�m�9�%�"�
� �
�������1�8J��K����k�$�+�+��e�<�=����9�:� c �� � t j � }d}| j |� r�t |dd�� 5 }|D ]� }t j
d|t j � r<|j d� d dd j � }| j d
|� d�� n>t j
d|t j � s��| j d
|� d
�� n ddd� yy# 1 sw Y yxY w)a)
Collect the kinit command output for the system with id_provider "AD"
or "IPA" domains.
While integrating the Linux M/c with AD the realmd will create a
computer object on the AD side. The realmd and AD restrict the
Hostname/SPN to 15 Characters.
z/etc/sssd/sssd.conf�rzutf-8)�encodingz\s*id_provider\s*=\s*ad�.r N� zMKRB5_TRACE=/dev/stdout kinit -k 'z$'z\s*id_provider\s*=\s*ipa�')
�socket�getfqdn�path_isfile�open�re�match�
IGNORECASE�split�upperr )r �hostname� sssd_conf�f�lines r r zKrb5.collect_kinit+ s� � � �>�>�#��)� ����I�&��i��w�7�
�1�� �D��x�x� :� $�b�m�m�5�#+�>�>�#�#6�q�#9�#�2�#>�#D�#D�#F���+�+� /7�7?�j��-D� E���x�x� ;� $�b�m�m�5��+�+� /7�7?�j��-C� D���
�
� '�
�
�s �BC%�C%�%C.)
�__name__�
__module__�__qualname__�__doc__�
short_desc�plugin_name�profilesr r r � r r r r s'