File: //lib/python3.6/site-packages/ipaclient/install/__pycache__/ipa_client_automount.cpython-36.pyc
3
�d[eM@ � @ sj d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z d dl m
Z
d dlmZ d dlmZ d dlmZmZ d dlmZmZ d d lmZ d d
lmZ d d l m Z d d lm Z d d
l m Z d dl!m"Z" d dl#m$Z$ d dl%m&Z& d dl'm(Z( d dl)m*Z* ej+ej,j-e.��Z/dd� Z0dd� Z1dd� Z2dd� Z3dd � Z4d d � Z5d d � Z6d!d"� Z7dS )#� )�print_functionN)�urlsplit)� OptionParser)�
ipachangeconf)� ipadiscovery)�CLIENT_NOT_CONFIGURED�CLIENT_ALREADY_CONFIGURED)�api�errors)�
sysrestore)� kinit_keytab)�check_client_configuration)�ipautil)�standard_logging_setup)� constants)�tasks)�services)�paths)� ScriptErrorc C s� d} t | d�}|jdddd� |jddd d
d � |jd d
d dd � |jddddddd� |jddddddd� |jddddd d� |j� \}}||fS ) Nz%prog [options]
)�usagez--server�serverzFQDN of IPA server)�dest�helpz
--location�location�defaultzAutomount location)r r r z--idmap-domain� idmapdomainznfs domain for idmapd.confz-dz--debug�debug�
store_trueFzenable debugging)r �actionr r z-Uz --unattended�
unattendedz.unattended installation never prompts the userz --uninstall� uninstallzUnconfigure automount)r Z
add_option�
parse_args)r �parser�options�args� r% �*/usr/lib/python3.6/ipa_client_automount.py�
parse_options< sF
r' c C s� d} d}t jd� x\| dk rn| rny"tjtjddtjj g� d}W q t k
rj t jd� | d } Y qX qW |s�dtjj }t
j d |� t |� t d
� d S ) z{
It takes a bit for sssd to get going, lets loop until it is
serving data.
This function returns nothing.
r F� �
Zpasswdzadmin@%sTz:Unable to find 'admin' user with 'getent passwd admin@%s'!z%szQThis may mean that sssd didn't re-start properly after the configuration changes.N)
�timeZsleepr Zrunr ZGETENTr �env�realm� Exception�loggerr �print)�n�foundZerr_msgr% r% r& �
wait_for_sssdh s"
r2 c * C s� y t j � }|j� |j� }W n, tk
rH } ztj|� W Y d d }~X nX y|jd� W nR t jk
rn Y n> t jk
r� t j
d� t j d� t j d� tjd� Y nX |j d� d }x�|D ]�}|j
|�}y|jd�} W n t jk
r� w�Y nX | dkr�|jdd� y |jd� td � tjt� W q� t jk
�rR |jd|j� P Y q�X q�W |d k�rltjd
� |j|� |jtj� |jdd d � tjd t �}
|
j � td
� t � d S )N�autofsz5Unable to activate the Autofs service in SSSD config.zCPlease make sure you have SSSD built with autofs support installed.z9Configure autofs support manually in /etc/sssd/sssd.conf.z-Cannot create the autofs service in sssd.conf� id_provider�ipa�ipa_automount_locationz+An automount location is already configuredzSSSD is not configured.�sssdTz4Restarting sssd, waiting for it to become available.) �
SSSDConfig�
import_config�list_active_domainsr- �sys�exitZ new_serviceZServiceAlreadyExistsZServiceNotRecognizedErrorr. �error�infoZactivate_service�
get_domain�
get_option�
NoOptionErrorZ add_providerr/ r Z
set_optionr � save_domain�writer � SSSD_CONF� backup_stater �servicer �restartr2 ) �fstore�
statestore� autodiscoverr# �
sssdconfig�domains�e�domain�name�providerr7 r% r% r& �configure_autofs_sssd� sV
rQ c C s� t jj}|jdd|j� � |jdd|j� � y|j� td|j � W n2 t k
rx } zt
j d|j|� W Y d d }~X nX y |j � W nD t k
r� } z(td|j � t
j d|jt
|�� W Y d d }~X nX d S )Nr3 �enabled�runningz
Started %sz%s failed to restart: %sz6Failed to configure automatic startup of the %s daemonz7Failed to enable automatic startup of the %s daemon: %s)r �
knownservicesr3 rE Z
is_enabledZ
is_runningrG r/ Z service_namer- r. r= �enable�str)rH rI r# r3 rM r% r% r& �configure_autofs_common� s$ "
rW c s� t jt jt jg}dddg}�jdd�s0tj�� t� fdd�|D �� s`t�fdd�|D �� rltd� t S td � x |D ]}� j
|�rz� j |� qzW �j d��r��j
dd
�}�j
dd �}�j
dd�}tjj}|s�|j� |s�|j� |�r�y�tj� } | j� | jd� | j� }
xx|
D ]p} | j| �} y| jd �}
W n tjk
�rN �wY nX |
d
k�r| jd� | j| � | j d� | j| � P �qW | j t j � tj dt �}|j!� t"� W nD t#k
�r� } z&tdt$|� � t%j&dt$|�� W Y d d }~X nX �j d��r �j'dd
� �j'dd � �j d��r@�j'dd
� �j'dd � tjd }y |j!� W n2 t#k
�r� } zt%j(dt$|�� dS d }~X nX dS )Nr3 Z rpcidmapd�rpcgssdr7 c 3 s | ]}� j |�V qd S )N)�has_file)�.0�f)rH r% r& � <genexpr>� s z uninstall.<locals>.<genexpr>c 3 s | ]}� j |�V qd S )N)� has_state)rZ �s)rI r% r& r\ � s z.IPA automount is not configured on this systemzRestoring configurationrR rS r4 r5 r6 z(Unable to restore SSSD configuration: %sz nfs-utilsz*Failed to restart nfs client services (%s)r( r ))r ZSYSCONFIG_AUTOFS�
SYSCONFIG_NFS� IDMAPD_CONFZ get_stater Zdisable_ldap_automount�anyr/ r rY Z restore_filer] Z
restore_stater rT r3 �disable�stopr8 r9 Zdeactivate_servicer: r? r@ rA Z
remove_optionrB Zremove_providerrC rD rF r rG r2 r- rV r. r Z delete_stater= )rH rI Z
RESTORE_FILESZSTATES�filepathrR rS r7 r3 rK rL rO rN rP rM �nfsutilsr% )rH rI r& r � s|
r c
C s� t jr<t jdi}tj| tj|d� tjtj� tdtj � t j
d�}d|_ |j d� |j
d� |jd kr~|jd
tjj�g}n(|jd kr�|jd
�g}n|jd
|j�g}|d k r�|jd |�g}| jtj� |jtj|� tjtj� tdtj � tjj}y |j� W n4 t k
�r8 } zt j d
t |�� W Y d d }~X nX tjd } y | j� W n4 t k
�r� } zt j dt |�� W Y d d }~X nX d S )z
Configure secure NFS
�yes)� replacevarsz
Configured %szIPA automount installerFz = �[�]NZDomainZDNSZGeneralz Failed to restart rpc-gssd (%s)z nfs-utilsz*Failed to restart nfs client services (%s))rh ri ) r ZSECURE_NFS_VARr Z#backup_config_and_replace_variablesr r_ r Zrestore_contextr/ r Z
IPAChangeConfZcase_insensitive_sectionsZsetOptionAssignmentZsetSectionNameDelimitersr Z setOptionr r+ rN ZrmOptionZ
setSectionZ backup_filer` Z
changeConfr rT rX rG r- r. r= rV )
rH rI r# rg ZconfZchangesZsection_with_changesrX rM re r% r% r& �
configure_nfs" s>
"
rj c N C s� y
t � W n8 tk
rB } z t| j� tj| j� W Y d d } ~ X nX tjt j
�}tj t j
�}t � \}}t
t jd|jddd� tdt jd|jdd�}tjf |� |jr�t||�S d }tjjt j�r�t j}|jd�r�td � tjt� d}tj � }|j �s�td
� |j |d �} t jd � | tj k�rNt jd
� t!tj"j#�}
|
j$g} t jd|
j$� n4d}|j%�sdtjd� t jddj&|j%�� |j%d } n�|j } t jd| � |j'| tj"j(|�} | d tj)k�r�td� td� td� n8| d tj*k�r�t j+d� n | d dk�r
tjd| � |�s*td| � t jd| � ntd� t jd � td |j, � t jd |j,� t-j.� }
tjj&|
d �}�zxy4t/d tj"j0tj"j(f �}t1|t j2|� |tj3d!< W n6 t4j5j6k
�r� } ztjd"| � W Y d d } ~ X nX tj7� ytj8j9j:� W n8 t;j<k
�r. } ztjd#t/| � � W Y d d } ~ X nX y tj8j9j=d$t>j?|j,�d%d&� W n� t;j@k
�r� } ztjd't/| � � W Y d d } ~ X n^ t;jAk
�r� tjd(|j, � Y n8 t;jBk
�r� } ztjd)t/| � � W Y d d } ~ X nX W d tCjD|
� X |jE �rt>jFd*d� �rtjd+� y*tG|||� tH||||� tI|||� W n@ tJk
�r� } z"t jd,| � td-� t||� d.S d } ~ X nX dS )/NF�az %(message)s)�verboser �filemodeZconsole_formatZ
cli_installerr )�contextZconfdirZ in_serverr rl r3 z+An automount location is already configuredzSearching for IPA server...)� ca_cert_pathzExecuting DNS discoveryz&Autodiscovery did not find LDAP serverzSetting server to %sTz7Autodiscovery was successful but didn't return a serverz*Autodiscovery success, possible servers %s�,z"Verifying that %s is an IPA serverz0Anonymous access to the LDAP server is disabled.z'Proceeding without strict verification.zNNote: This is not an error if anonymous access has been explicitly restricted.z,Unencrypted access to LDAP is not supported.z*Unable to confirm that %s is an IPA serverzIPA server: %szUsing fixed server %szIPA server: DNS discoveryz Configuring to use DNS discoveryz Location: %szUsing automount location %sZccachez
host/%s@%sZ
KRB5CCNAMEz Failed to obtain host TGT: %sz$Cannot connect to the server due to Zautomountlocation_showz2.0)�versionz This client is incompatible: z&Automount location '%s' does not existz5Cannot connect to the server due to generic error: %sz3Continue to configure the system with these values?zInstallation abortedzRaised exception %sz*Installation failed. Rolling back changes.r( )Kr
r r/ �msgr; r< Zrvalr Z FileStorer ZIPA_CLIENT_SYSRESTOREZ StateFiler' r ZIPACLIENT_INSTALL_LOGr �dictZETC_IPAr Z bootstrapr �os�path�existsZ
IPA_CA_CRTr] r r Z IPADiscoveryr �searchr. ZNO_LDAP_SERVERr r+ Z
xmlrpc_uriZnetlocZservers�joinZ ipacheckldapr, ZNO_ACCESS_TO_LDAPZ NO_TLS_LDAPZwarningr �tempfileZmkdtemprV �hostr Z KRB5_KEYTAB�environ�gssapi�
exceptionsZGSSError�finalizeZBackendZ rpcclientZconnectr
Z
KerberosErrorZforwardr �fsdecodeZ VersionErrorZNotFoundZ PublicError�shutilZrmtreer Z
user_inputrj rQ rW r- )rM rH rI r# Z_argsZcfgro rJ Zds�retr^ r ZldapretZ
ccache_dirZ ccache_nameZ
host_princr% r% r& �configure_automountV s�
$
""
r� c C s� y t j� dkstjd� t� W nv tk
rL } ztj| � W Y d d } ~ X nL tk
rv } ztj| � W Y d d } ~ X n" ttfk
r� tjd� Y nX d S )Nr z
Must be run as root
r( ) rt �geteuidr; r< r� �
SystemExit� RuntimeError�KeyboardInterrupt�EOFError)rM r% r% r& �main� s
r� )8Z
__future__r Zloggingr; rt r� r* ry r| r8 Zsix.moves.urllib.parser Zoptparser Z ipapythonr Zipaclient.installr Zipaclient.install.clientr r Zipalibr r
Zipalib.installr Zipalib.install.kinitr Z ipalib.utilr
r Zipapython.ipa_log_managerr Zipaplatform.constantsr Zipaplatform.tasksr Z ipaplatformr Zipaplatform.pathsr Zipapython.admintoolr Z getLoggerru �basename�__file__r. r' r2 rQ rW r rj r� r� r% r% r% r& �<module> sD , 7L4