Xc % @ s d Z d Z d Z d Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k
Z
d d k Z d d k Z d d k
Z
d d k Z d d k Z d d k Z d d k Z d d k Z d d k Td d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Td d k l Z l Z d d k l Z d d k l Z y d d
k l! Z! Wn) e" j
o d e# f d YZ! n Xd
Z$ d e i% f d YZ& d Z' d d Z) d Z* d Z+ d Z, d Z- d Z. d Z/ d Z0 d e1 d8 d e1 d d Z2 d Z3 d Z4 d Z5 d Z6 d Z7 d d Z8 d d Z9 d! e: f d" YZ; d# e i< f d$ YZ= d% Z> d d d& Z? d e1 d' Z@ d( ZA e iB d d) ZC e iB d d d* ZD d+ ZE d, ZF e: e: d- ZG e: e: d. ZH e: e: d/ ZI d0 ZJ d1 ZK d2 d3 ZL d2 d4 ZM d5 ZN d6 ZO d7 ZP d S(9 s /usr/share/ipa/s /usr/share/ipa/pluginsi s ipa v2.0iN( t *( t ipavalidatet dnsclient( t config( t DN( t CalledProcessErrorR c B s e Z d Z d Z d Z RS( s This exception is raised when a process run by check_call() returns
a non-zero exit status. The exit status will be stored in the
returncode attribute.c C s | | _ | | _ d S( N( t
returncodet cmd( t selfR R ( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt __init__< s c C s d | i | i f S( Ns- Command '%s' returned non-zero exit status %d( R R ( R ( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt __str__? s ( t __name__t
__module__t __doc__R R
( ( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyR 8 s c C s8 y t i t i i } Wn t j
o d SX| S( N( R t init_configt
get_domaint Exceptiont None( t domain_name( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt get_domain_nameB s
t CheckedIPAddressc B s5 e Z e i Z e e e e e e d Z d Z RS( c
C s t | t oH t t | i | d | i | i | _ | i | _ | i | _ d Sd } d } t }
t | t
i o | } | i } nt | t
i
o n y y t
i
| d | i } Wn t
i j
oy t | t p n | i d \ } } } | d j o n t
i
| d | i } | i d j o qQn XWnK t j
o? t
i | d | i } | p t d n | i } n X| i d j o t d n | o | i o t d n | i o
| i p | t
i i j o t d n | i o t d n | o | i o t d
n | o| i d j o
d }
n | i d j o
d }
n t d
d |
d d d g } | d i d } x | D]~ } | i } t | d j o qn t
i | d } | | j p | d j o% | i | j o | } | d } PqqW| d j o t d q{n | d j oi t }
| i d j o" t
i t
i t | } q| i d j o t
i t | d } qn | o | | i j o t d n | o0 | i d j o | | i j o t d n t t | i | d | i | i | _ |
| _ | | _ d S( Nt flagst %i s* netmask and prefix length not allowed herei s unsupported IP versions cannot use loopback IP addresss# cannot use IANA reserved IP addresss cannot use link-local IP addresss cannot use multicast IP addresst inett inet6s /sbin/ips -familys -onelinet addresst showi s
i i s@ No network interface matches the provided IP address and netmasks /64s cannot use IP network addresss cannot use broadcast IP address( i i ( t
isinstanceR t superR t netaddr_ip_flagst prefixlent
defaultnett interfaceR t Falset netaddrt IPNetworkt ipt IPAddresst AddrFormatErrort
basestringt partitiont versiont
ValueErrort is_loopbackt is_reservedt IPV4_6TO4t
is_link_localt is_multicastt runt splitt lent Truet cidr_abbrev_to_verboset strt networkt broadcast( R t addrt match_localt
parse_netmaskt
allow_networkt allow_loopbackt allow_broadcastt allow_multicastt nett ifacet defnett sept foot familyt ipresultt linest linet fieldst ifnet( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyR R s
*
"!( c C s
| i d j S( N( R R ( R ( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt is_local s ( R R R" t INET_PTONR R! R3 R RJ ( ( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyR K s
\c C s t i | p
t i | S( N( R" t
valid_ipv4t
valid_ipv6( R8 ( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt valid_ip s c C sp t | } y! t i t i | d | } Wn t i j
o n X| d j o | Sd | t | f Sd S( s
Format network location (host:port).
If the host part is a literal IPv6 address, it must be enclosed in square
brackets (RFC 2732).
s [%s]s %s:%sN( R5 t sockett inet_ptont AF_INET6t errorR ( t hostt port( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt
format_netloc s
c C sF | i d } t g } | D] } | d | i f q ~ } | S( s) Convert a kerberos realm to a IPA suffix.t .t dc( R1 R t lower( t
realm_namet st _[1]t xt suffix_dn( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt realm_to_suffix s 3c C s1 d i g } | D] } | | i q ~ } | S( s) Convert a IPA suffix to a kerberos realm.RV ( t joint value( R] R[ R\ t realm( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt suffix_to_realm s -c C s@ t i | i | } t i d } | i d | } | S( Ns (eval\s*\(([^()]*)\))c S s t t | i d S( i ( R5 t evalt group( R\ ( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt s ( t stringt Templatet
substitutet ret compilet sub( t txtt varst valt pattern( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt template_str s c C s@ t | i i } z | ~ } t | i | SWd QXd S( s. Read a file and perform template substitutionsN( t opent __exit__t __enter__Rp t read( t
infilenameRm R[ t f( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt
template_file s #c C sL t | | } t | d i i } z | ~ } | i | Wd QXd S( s. Copy a file, performing template substitutionst wN( Rw Rq Rr Rs t write( Ru t outfilenameRm Rl R[ t file( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt copy_template_file s &c C s' t i } | i | | i | S( N( t tempfilet NamedTemporaryFileRy t flush( Rl t fd( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt write_tmp_file s
c C s d | i d d d S( Nt 's '\''( t replace( Rf ( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt shell_quote s c
C s d } d } d } t | t o t d n | d j o t i t i } d | d
Case-insensitive but case-respecting dictionary.
This code is derived from python-ldap's cidict.py module,
written by stroeder: http://python-ldap.sourceforge.net/
This version extends 'dict' so it works properly with TurboGears.
If you extend UserDict, isinstance(foo, dict) returns false.
c C s4 t t | i h | _ | i | p h d S( N( R R R t _keyst update( R t default( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyR s c C s t t | i | i S( N( R R t __getitem__RX ( R t key( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyR s c C s2 | i } | | i | Parses are Generalized Time string (as specified in X.680),
returning a datetime object. Generalized Times are stored inside
the krbPasswordExpiration attribute in LDAP.
This method doesn't attempt to be perfect wrt timezones. If python
can't be bothered to implement them, how can we...i i i i i s \dt ,RV i i i< i@B N(
R2 R R Ri R t floatt divmodR R R* ( t timestrt datet timet yeart montht dayt hourt mint sect msect tzonet
hour_fractiont
total_secst min_fractiont sec_fraction( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt parse_generalized_time# sb
*
5
* *
5
* *
5
* &c C s | p t i t i t i d } n | i o t d n | p
t } n t | d } d } t i } x t
| D]s } | | i d | } | d j p | | d j o/ x, | i o | | i d | } q Wn | | 7} q W| S( s Generates password. Password cannot start or end with a whitespace
character. It also cannot be formed by whitespace characters only.
Length of password as well as string of characters to be used by
generator could be optionaly specified by characters and pwd_len
parameters, otherwise default values will be used: characters string
will be formed by all printable non-whitespace characters and space,
pwd_len will be equal to value of GEN_PWD_LEN.
R s- password cannot be formed by whitespaces onlyi R i ( Rf t digitst
ascii_letterst punctuationt isspaceR* t GEN_PWD_LENR2 t randomt SystemRandomt ranget randint( t
characterst pwd_lent upper_boundt rndpwdt rR\ t rndchar( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt ipa_generate_passwordb s$
c C s | d j o< x9 t o- t d | } | p
| i o | Sq Wn t | t oV xS t oG t d | | f } | o | p | o | S| i o | Sq\ Wn t | t o | o
d } n d } xj t o^ t d | | f } | p | S| i d d j o t S| i d d j o t Sq Wn t | t o_ x\ t oP y2 t d | | f } | p | St | } Wn t
j
o qVX| SqVWn d S( Ns %s: s %s [%s]: t yest noi t yt n( R R3 t raw_inputt stripR R' t boolRX R! R R* ( t promptR t allow_emptyt rett choice( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt
user_input sL
c C sH y | d } | d } Wn# | d d } | d d } n X| | f S( sl
A GSSError exception looks differently in python 2.4 than it does
in python 2.5. Deal with it.
i i ( ( t et majort minor( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt get_gsserror s
c C s x t i | | t i | D] } | \ } } } } } z y y t i | | | }
Wn t i j
o d }
w n X| d j o |
i | n |
i | | t i j o |
i d |
i d n t
SWn t i j
o } n XWd |
o |
i n Xq Wt S( NR i (
RO t getaddrinfot AF_UNSPECRR R t
settimeoutt connectt
SOCK_DGRAMt sendt recvR3 t closeR! ( RS RT t socket_typet socket_timeoutt rest aft socktypet protot canonnamet saRZ R ( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt host_port_open s,
c C s d } d } t i t i f } d } x| D]w} y% t i | | | | d t i } Wn! t i j
o }
|
} q+ n Xx%| D] } | \ } }
} } } y t i | |
| } Wn' t i j
o }
|
} d } q n X| d j o | i d n | t i j o: y | i t i t i
d WqGt i j
o qGXn | t i j o | i t i t i
d n zy | i | x t o | t i j oM | i d | i \ } } z | o | i | n Wd | i Xq| t i j o4 | i d \ } } | o | i | | q2qqWWnI t i j
o
n2 t i j
o" }
|
} | i d } w n XWd | o | i n Xq Wq+ W| d j o | d j o
| n d S( Ni i ( R RO RQ t AF_INETR" t
AI_PASSIVERR R$ t
setsockoptt IPPROTO_IPV6t IPV6_V6ONLYt SOCK_STREAMt
SOL_SOCKETt SO_REUSEADDRt bindR3 t listent acceptt sendallR) R& t recvfromt sendtot timeout( RT R* R+ t responder_dataRS t last_socket_errort familiesRZ RD t
addr_infosR R, R- R. R/ R0 R1 t
connectiont client_addresst dataR8 ( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt bind_port_responder sr
!
c C s | i d p | d } n x| t i t i f D]h } t i | t i | } t g } | D]$ } | i t i j o | | q] q] ~ d j o t Sq1 Wt
S( NRV i ( t endswithR t DNS_T_At
DNS_T_AAAAt queryt DNS_C_INR2 t dns_typet DNS_T_SOAR3 R! ( t fqdnt rdtypet rsR[ t rec( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt is_host_resolvable s E c C s | i d d t i d d d g } | d d i d } | p t i d d S| d d i d oX | d d d d } | | j o | i | n | i d | d d d d n x | D] } t i d | y | i | t i d
} Wn& t i
j
o t i d q n Xt | d j o t i d q n | d d d
d i } | t
j o t i d | t
f q n t i d | t | SWd S( s
Get base DN of IPA suffix in given LDAP server.
None is returned if the suffix is not found
:param conn: Bound LDAP connection that will be used for searching
R t scopet attrlistt defaultnamingcontextt namingcontextsi i s No naming context founds' Check if naming context '%s' is for IPAs (info=IPA*)sB LDAP server did not return info attribute to check for IPA versions0 Info attribute with IPA server version not foundt infos> Detected IPA server version (%s) did not match the client (%s)s* Naming context '%s' is a valid IPA contextN( t search_ext_st ldapt
SCOPE_BASER R R R t removet insertt search_st NO_SUCH_OBJECTR2 RX t IPA_BASEDN_INFOR ( t connt entriest contextsR t contextt entryRZ ( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt get_ipa_basedn% s<
$
c C s t i d t i } t i | } t } d } t i d t i
i } z@| ~ } | i } t
| d i
i } z | ~ }
x|
D]} | } | i | }
|
o |
i d d \ } } | d j o | o/ | | j o" d | | | f } | | | [^\#;]+?)
(\s*=\s*)
(?P .+?)?
(\s*((\#|;).*)?)?
$)t deleteR t optionR` u %s=%s
iu %s=%s %s
Ns %s=%s
( Ri Rj t VERBOSER R R R R} R~ R! Rr Rs R Rq R Rd t findRy R R t setR R t fchmodt filenot st_modet fchownt st_uidt st_gidR ( t filepatht replacevarst
appendvarsRo t orig_statt
old_valuest
temp_filenameR[ t
new_configt _[2]Rv RG t new_linet mRj R` t new_varst newvars_viewt append_viewt item( ( s5 /usr/lib/python2.6/site-packages/ipapython/ipautil.pyt config_replace_variablesO sP ) &
"
%
c C s t i d t i } d } t i | } t } d
} t i d t i
i } zo| ~ }
|
i } t
| d i
i } z| ~ } t }
t } d } x| D]} | d } | } | i | } | oY| i d d d \ } } } |
o* | d
j o | |
| | | t } n | d
j o( t | i t | i j }
n | d
j o |
o | o/ | | j o" d | | | f } | | | .+) \]
(\s+((\#|;).*)?)?
$)|(^
\s*
(?P