File: //lib/python3.6/site-packages/ipaplatform/debian/__pycache__/tasks.cpython-36.opt-1.pyc
3
�d[en � @ s� d Z ddlmZ ddlZddlZddlZddlmZ ddlm Z ddl
m Z ddl m
Z
ddlmZ dd lmZ dd
lmZ eje�ZG d d � d e �Ze� ZdS )
zO
This module contains default Debian-specific implementations of system tasks.
� )�absolute_importN)�Path)�BaseTaskNamespace)�RedHatTaskNamespace)�paths)�directivesetter)�ipautil)�DNc @ s� e Zd Zedd� �Zedd� �Zed&dd��Zed d
� �Zed d � �Zed
d� �Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%S )'�DebianTaskNamespacec C s2 yt jddddg� W n t jk
r, dS X dS )Nzpam-auth-updatez --packagez--remove� mkhomedirFT)r �run�CalledProcessError)�fstore�
statestoreZwas_sssd_installedZwas_sssd_configured� r �/usr/lib/python3.6/tasks.py�$restore_pre_ipa_client_configuration s z8DebianTaskNamespace.restore_pre_ipa_client_configurationc C s dS )NTr )Z nisdomainr r r �
set_nisdomain' s z!DebianTaskNamespace.set_nisdomainTFc C s> |r6yt jddddg� W n t jk
r0 dS X dS dS d S )Nzpam-auth-updatez --packagez--enabler FT)r r r
)Zsssdr r ZsudoZsubidr r r �modify_nsswitch_pam_stack, s z-DebianTaskNamespace.modify_nsswitch_pam_stackc C s dS )NTr )r r r r �modify_pam_to_use_krb59 s z*DebianTaskNamespace.modify_pam_to_use_krb5c C s dS )NTr )�pathr r r �backup_auth_configuration> s z-DebianTaskNamespace.backup_auth_configurationc C s dS )NTr )r r r r �restore_auth_configurationC s z.DebianTaskNamespace.restore_auth_configurationc C s dS )NTr )�selfr r r r �migrate_auth_configurationH s z.DebianTaskNamespace.migrate_auth_configurationc C s d S )Nr )r r r r �configure_httpd_wsgi_confL s z-DebianTaskNamespace.configure_httpd_wsgi_confc C s t jtjddd� d S )NZ SSLProtocolzTLSv1.2F)r Z
set_directiver ZHTTPD_SSL_CONF)r r r r �configure_httpd_protocolP s z,DebianTaskNamespace.configure_httpd_protocolc C s d S )Nr )r r r r �setup_httpd_loggingV s z'DebianTaskNamespace.setup_httpd_loggingc C s d S )Nr )r r r r r �configure_pkcs11_modulesZ s z,DebianTaskNamespace.configure_pkcs11_modulesc C s d S )Nr )r r r r r �restore_pkcs11_modules^ s z*DebianTaskNamespace.restore_pkcs11_modulesc C sR y| j tj|�f W n tk
r2 tjd� Y nX t| jtj|�| j tj
�g�S )Nz�Could not create p11-kit anchor trust file. On Debian this file is not
used by ca-certificates and is provided for information only.) Zwrite_p11kit_certsr � IPA_P11_KIT� Exception�loggerZ exception�any�write_ca_certificates_dir�CA_CERTIFICATES_DIR� remove_ca_certificates_bundle�CA_CERTIFICATES_BUNDLE_PEM)r �ca_certsr r r �platform_insert_ca_certsa s z,DebianTaskNamespace.platform_insert_ca_certsc 2 C s� ddl m} t|�}y|jddd� W n" tk
rH tjd|� � Y nX �xJ|D �]@\}}}}|sfqRt|j�} t|j �}
| j
� � d|j � d�} || } yt | d �}
W n" tk
r� tjd| � � Y nX |
�� yt
j|
j� d
� W n$ tk
�r tjd | � � Y nX yZ|
jd |� d
| j
� � d|
j
� � d|j � d|j d�d� � |j|jj�jd�}|
j|� W n$ tk
�r� tjd| � � Y nX W d Q R X qRW dS )Nr )�x509i� T)�mode�exist_okzCould not create %s� z.crt�wi� zCould not set mode of %sz9This file was created by IPA. Do not edit.
Description: z
Subject: z
Issuer: z
Serial Number (dec): z
Serial Number (hex): z#xz
�asciizCould not write to %s)Zipalibr* r �mkdirr! r" �errorr �subject�issuerZ ldap_textZ
serial_number�open�os�fchmod�fileno�writeZ public_bytesZEncodingZPEM�decode)r � directoryr( r* r ZcertZnicknameZtrustedZ_ext_key_usager2 r3 �filenameZ cert_path�fZpemr r r r$ u sD
4 z-DebianTaskNamespace.write_ca_certificates_dirc C s& t | jtj�| jtj�| jtj�g�S )N)r# �remove_ca_certificates_dirr r% r& r r' )r r r r �platform_remove_ca_certs� s
z,DebianTaskNamespace.platform_remove_ca_certsc C sL t tj�}|j� sdS ytj|� W n" tk
rF tjd|� � Y nX dS )NFzCould not remove %sT) r r r% �exists�shutilZrmtreer! r" r1 )r r: r r r r r= � s
z.DebianTaskNamespace.remove_ca_certificates_dirc C s t j| |�S )N)r �disable_ldap_automount)r r r r r rA � s z*DebianTaskNamespace.disable_ldap_automountN)TF)�__name__�
__module__� __qualname__� staticmethodr r r r r r r r r r r r r) r$ r> r= rA r r r r r
s& C r
)�__doc__Z
__future__r Zloggingr5 r@ Zpathlibr Zipaplatform.base.tasksr Zipaplatform.redhat.tasksr Zipaplatform.pathsr Z ipapythonr r Z ipapython.dnr Z getLoggerrB r" r
Ztasksr r r r �<module> s
8