KUc L @ s d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k Z d d k
Z
d d k Z d d k Z d d k
Z
d d k Z d d k Z d d k Td d k Z d d k Z e i Z y d d k a Wn e j
o
d a n Xd Z d Z d Z d Z d Z d Z d Z d
Z d Z d Z! d
e" e# d j o
d Z$ n d Z$ e$ d Z% d Z& d Z' d Z( d Z) d Z* d Z+ d Z, d Z- d Z. d Z/ d Z0 d Z1 d Z2 d Z3 d Z4 d! Z5 d" Z6 d# Z7 d$ Z8 d% Z9 d& Z: d' Z; d( Z< d) Z= d* Z> d+ Z? d, Z@ d- ZA e$ d. ZB d/ e$ d0 ZC e iD iE eC p e$ d0 ZC n e$ d1 ZF e$ d2 ZG e$ d3 ZH e$ d4 ZI e$ d5 ZJ e$ d6 ZK e% d7 ZL e% d8 ZM e% d9 ZN e% d: ZO e% d; ZP e% d< ZQ d/ e$ d= ZR d> ZS d? ZT d@ ZU dA ZV dB ZW e dC ZX dD ZY dE ZZ dF Z[ dG Z\ dH Z] dI Z^ dJ Z_ dK Z` dL Za dM Zb dN Zc dO Zd dP Ze dQ Zf dR Zg dS Zh dT Zi dU Zj dV Zk dW Zl dX Zm dY Zn dZ Zo d[ Zp d\ Zq d] Zr d^ Zs d_ Zt d` Zu da g Zv da db g Zw dc g Zx dc g Zy da dd de g Zz df g Z{ dc g Z| db g Z} g Z~ dg g Z dh dg g Z dc g Z dc di g Z db g Z dc g Z db g Z dc g Z dj dk g Z dl dk g Z dm dk dn g Z do dk dn g Z dc g Z db g Z dc g Z db g Z dp g Z dq dr ds dt du g Z e dv dw \ Z Z Z Z dx dy dz d{ g Z e dv d| \ Z Z Z Z Z e dv dw \ Z Z Z Z g Z e e e e f D]
Z e g q[ Z e e eY d} g g e e ec d~ e g e e e_ d e g e e e\ d e g e e e[ d g g e e e[ d g g e e e[ d ev g e e eZ d~ e g e e e[ d e g e e e[ d ex g e e e[ d ex g e e e[ d e| g e e e[ d e g e e e[ d e g e e e[ d e g e e e[ d e g e e eY d g g e e eY d g g e e eY d g g e e e[ d g g e e e[ d~ e g e e e] d g g e e e] d g g e e e] d g g e e e] d g g e e eY d g g e e eZ d ez g e e eZ d e{ g e e e[ d ew g e e e[ d e g e e e[ d ey g e e e[ d ey g e e e[ d e} g e e e[ d e g e e e[ d e g e e e[ d e g e e eY d g g e e e\ d e g e e eY d g g e e e\ d g g e e ec d~ e g e e eY d g g e e e\ d g g e e e\ d g g e e e\ d g g e e e\ d g g e e e\ d g g g/ e e = 500t quiets uid < 500s service in crondt use_uidsK service notin login:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensavert revoket descryptt bigcryptt md5t sha256t sha512i i t autht accountt sessiont passwordi t envt
succeed_ift pkcs11t krb5t permitt fprintdt unixt ssst afss afs.krbt eps_autht ldapt otpt winbindt denyt accesst localusert cracklibt passwdqct
eps_passwdt keyinitt limitst mkhomedirc C s/ d } | i d } | | i d d 7} | S( Ns DC=t .s ,DC=( R R ( t domainRJ ( ( s! /usr/share/authconfig/authinfo.pyt domain2dn s i t SysVInitServicec B s> e Z d Z d Z d Z d Z d Z d Z RS( c C s t i d | d d S( Ns /sbin/service s start( R3 t system( t selft service( ( s! /usr/share/authconfig/authinfo.pyR0 s c C s t i d | d d S( Ns /sbin/service s stop >/dev/null 2>&1( R3 R ( R R ( ( s! /usr/share/authconfig/authinfo.pyt stop s c C s* t i d | t i d | d d S( Ns /sbin/chkconfig --add s /sbin/chkconfig --level 345 s on( R3 R ( R R ( ( s! /usr/share/authconfig/authinfo.pyt enable s c C s t i d | d d S( Ns /sbin/chkconfig --level 345 s off( R3 R ( R R ( ( s! /usr/share/authconfig/authinfo.pyt disable s c C s: t i d | d } t i | o t i | d j S( Ns /sbin/chkconfig s >/dev/null 2>&1i ( R3 R t WIFEXITEDt WEXITSTATUS( R R t rv( ( s! /usr/share/authconfig/authinfo.pyt isEnabled s c C s t i d | d d S( Ns /sbin/service s condrestart >/dev/null 2>&1( R3 R ( R R ( ( s! /usr/share/authconfig/authinfo.pyt
tryRestart s ( t __name__t
__module__R0 R R R R R ( ( ( s! /usr/share/authconfig/authinfo.pyR s c C s | o] yC t i | t i | | p t i | t i | n Wq t j
o q Xng yP t i | | p+ y t i | Wq t j
o q Xn t i | Wn t j
o n Xt S( N( R3 t statt ServiceR R R0 R: R R$ ( R t patht namet nostart( ( s! /usr/share/authconfig/authinfo.pyt toggleSplatbindService s(
c C s | o d Sd Sd S( Nt enabledt disabled( ( t val( ( s! /usr/share/authconfig/authinfo.pyt
formatBool s c C s& y t i \ } } Wn t j
o d SX| pz | o t | g d t } n7 t | g d t d t } | i d | p d d | i | i } t i | n d \ } } y7 t
i
| t
i }
t
i
| t
i |
t i
@ Wn t j
o n Xt } x| py7 g } g }
t i | g g | g d \ } } }
Wn6 t i j
o' \ } } t i i d | d n X| o" |
o t i | t } qn d } y t i | d } Wn t j
o \ } } | t i j p | t i j o q| t i j o t i | t } qt i i d
| d t i | t } qn X| oy | | 7} | | 7} | o t i i | n | o | | j o | i d } t i | | p d t i | d | d j o d | | } n d } d } | o t i i d
q1n Wqt j
o: \ } } t i i d | d t i | t } qXqt i | t } qWy t i | t i Wn t j
o n Xd } y t i | d \ } } Wn3 t j
o' \ } } t i i d | d n X| | f S( Ni t shellt stdint inputRH s
i< s select: i s read: s
is <...>
s write: i s waitpid: ( RH RH ( R3 t forkptyR: t PopenR$ t PIPEt communicatet waitt
returncodet _exitR6 t F_GETFLt F_SETFLt
O_NONBLOCKR< R t selectt errort syst stderrt writeR; t readRA t EINTRt EAGAINt EIOt rfindt killt signalt SIGTERMt waitpid( t commandt echot queryt responset pidt mastert childt statusRJ R t it eoft ifdst efdst ofdst errt textt ct index( ( s! /usr/share/authconfig/authinfo.pyt feedFork s
" +
c
C s y t i | } Wn t j
o t SXxW | D]O } y3 t i | d | } t i | i o t SWq1 t j
o q1 Xq1 Wt S( Nt /( R3 t listdirR: R$ R t S_ISREGt st_modeR ( R R R= t st( ( s! /usr/share/authconfig/authinfo.pyt
isEmptyDirt s c C s yg t t g | d t } | i d i d } | i d j o d S| d d j o | d 3n Wn t j
o d SX| S( Nt stdouti s
iRH ( R t PATH_SCSETUPR R R R R R: ( t optionsR R ( ( s! /usr/share/authconfig/authinfo.pyt callPKCS11Setup s c C s% t d g } | d j o g S| S( Nt list_modules( R R ( t mods( ( s! /usr/share/authconfig/authinfo.pyt getSmartcardModules s
c C s t d t d g S( Nt Lockt Ignore( t _( ( ( s! /usr/share/authconfig/authinfo.pyt getSmartcardActions s c C s t | } | i | S( N( t AuthInfoR ( t msgcbt info( ( s! /usr/share/authconfig/authinfo.pyR s
t SaveGroupc B s e Z d Z d Z RS( c C s | | _ | | _ | | _ d S( N( t saveFunctiont toggleFunctiont attrlist( R t savefunct
togglefuncR ( ( s! /usr/share/authconfig/authinfo.pyt __init__ s c C s x | i D] \ } } | | i j o t S| d j o( t | | t | | j o t Sq
| d j o. t t | | t | | t o t Sq
| d j o. t t | | t | | t o t Sq
q
Wt S( NR& R R ( R t inconsistentAttrsR$ t getattrR( R ( R R% R& t anamet atype( ( s! /usr/share/authconfig/authinfo.pyt attrsDiffer s
%
%
( R R R R ( ( ( s! /usr/share/authconfig/authinfo.pyR s t SafeFilec B s5 e Z d Z d Z d Z d Z d Z RS( c C s t i i | \ } } t i d | d | d t | _ t d d | | i i g d t i d t i
d j o t i | i i | n | | _
d S( Nt dirt prefixt deletes /bin/cps -afR s /dev/nulli ( R3 R R t tempfilet NamedTemporaryFileR$ t filet callR R4 t O_WRONLYt fchmodt filenoR= ( R R= t default_modet baseR ( ( s! /usr/share/authconfig/authinfo.pyR s ! c C s@ | i i t i | i i t i | i i | i d S( N( R t flushR3 t fsyncR t renameR R= ( R ( ( s! /usr/share/authconfig/authinfo.pyt save s
c C s+ y | i i Wn t j
o n Xd S( N( R R; R: ( R ( ( s! /usr/share/authconfig/authinfo.pyR; s c C s | i i | S( N( R R ( R R
( ( s! /usr/share/authconfig/authinfo.pyR s c C s$ | i i d | i i d d S( Ni ( R t seekt truncate( R ( ( s! /usr/share/authconfig/authinfo.pyt rewind s ( R R R R R; R R ( ( ( s! /usr/share/authconfig/authinfo.pyR s
t
FileBackupc B s, e Z d Z d Z d Z d Z RS( c C s | | _ | | _ d S( N( t
backupNamet origPath( R t
backupnamet origpath( ( s! /usr/share/authconfig/authinfo.pyR s c C s t } d } d } y t | t i d } Wn t j
o t SXy t i t i | i } Wn' t t
f j
o t i | t SXy t | | } | i
Wn t j
o
t } n XyP xI | oA t i | d } | p t } Pn t i | i i | q WWn t t
f j
o
t } n Xy | o t i | n Wn t t
f j
o n Xy* | o | o | i | i n Wn t t
f j
o
t } n X| S( Ni i ( R$ R RC R3 R5 R< R t S_IMODEt fstatR R: R; R R R R R R R R ( R t srct destR t srcfdt destfileR> R& ( ( s! /usr/share/authconfig/authinfo.pyt safeCopy sN
"
c C s t } y( t i i | p t i | n Wn t t f j
o
t } n X| d | i } | o | i | i
| } n | S( NR ( R$ R3 R t isdirt mkdirR: R< R R R R ( R t destdirR t
backuppath( ( s! /usr/share/authconfig/authinfo.pyt backup s
c C s t } y t i i | p t SWn t t f j
o
t } n X| d | i } | o, t i i | o | i | | i
} n y7 | o, t d | i
g d t i d t i
n Wn t t f j
o n X| S( NR s /sbin/restoreconR s /dev/null( R$ R3 R R R R< R: R t isfileR R R R4 R ( R t backupdirR R ( ( s! /usr/share/authconfig/authinfo.pyt restore s ( R R R R R
R
( ( ( s! /usr/share/authconfig/authinfo.pyR s * c C s
t i d S( Nt nscd( R R ( ( ( s! /usr/share/authconfig/authinfo.pyt readCache$ s c C sP | o t i d n5 y t i t t i d Wn t j
o n Xt S( NR ( R R R3 R t PATH_NSCDR R: R$ ( R ( ( s! /usr/share/authconfig/authinfo.pyt
writeCache' s
t CacheBackupc B s e Z d Z d Z RS( c C s t } y( t i i | p t i | n Wn t t f j
o
t } n X| d | i } | op d } y5 t
} t | d } | i t
t | Wn t j
o
t } n X| o | i q n | p+ y t i | Wq
t j
o q
Xn | S( NR t w( R$ R3 R R R R: R< R R R R R4 R t strt intR; t unlink( R R R R R R ( ( s! /usr/share/authconfig/authinfo.pyR
3 s. c
C s t } y t i i | p t SWn t t f j
o
t } n X| d | i } | o t i i | os d } y/ t
| d } t | i } t
| Wn" t t t f j
o
t } n X| o | i q n | S( NR t r( R$ R3 R R R R< R: R R R R4 R R R t
ValueErrorR; ( R R R R R
R ( ( s! /usr/share/authconfig/authinfo.pyR
O s$ ( R R R
R
( ( ( s! /usr/share/authconfig/authinfo.pyR 2 s i s hesiod.confs /hesiod.confs yp.confs /yp.confs ldap.confs
/ldap.confs
nss_ldap.confs /nss_ldap.confs
pam_ldap.confs /pam_ldap.confs
nslcd.confs /nslcd.confs
openldap.confs /openldap/ldap.confs krb5.confs
/krb5.confs krb.confs /krb.confs pam_pkcs11.confs /pam_pkcs11/pam_pkcs11.confs smb.confs /samba/smb.confs
nsswitch.confs /nsswitch.confs cacheenabled.confRH s /pam.d/t
authconfigs /sysconfig/authconfigt networks /sysconfig/networks libuser.confs
/libuser.confs
login.defss /login.defss sssd.conft shadows /shadowt passwds /passwdt gshadows /gshadowt groups /groupt ldap_urit
ldapServert ldap_search_baset
ldapBaseDNt ldap_id_use_start_tlst enableLDAPSt ldap_schemat
ldapSchemat ldap_tls_cacertdirt
ldapCacertDirt krb5_servert kerberosKDCt krb5_kpasswdt kerberosAdminServert
krb5_realmt
kerberosRealmt cache_credentialst enableCacheCredsR c B s e Z d Z d Z d Z d Z d Z d Z d Z d Z d Z
d Z d
Z d Z
d Z d
Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z e d Z d Z d Z d Z d Z d Z d Z! d Z" d Z# d! Z$ d" Z% d# Z& d$ Z' d% Z( d& Z) d' Z* d( Z+ d) Z, d* Z- d+ Z. d, Z/ d- Z0 d. Z1 d/ Z2 d0 Z3 d1 Z4 d2 Z5 d3 Z6 d4 Z7 d5 Z8 d6 Z9 d7 Z: d8 Z; d9 Z< d: Z= d; Z> d< Z? d= Z@ d> ZA d? ZB d@ ZC dA ZD dB ZE dC ZF dD ZG dE ZH dF ZI dG ZJ dH ZK RS(I c 3 C s | | _ d | _ g | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _
d | _ d | _ d | _
d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ t | _ t | _! d | _" d | _# d | _$ d | _% d | _& d | _' d | _( d | _) d | _* d | _+ d | _, d | _- d | _. d | _/ d | _0 d | _1 d | _2 d | _3 d | _4 d | _5 d | _6 d | _7 d | _8 d | _9 t: | _; d | _< d | _= d | _> d | _? d | _@ d | _A d | _B d | _C d | _D d | _E d | _F d | _G d | _H d | _I d | _J d | _K d | _L d | _M d | _N d | _O d | _P t | _Q t | _R d | _S d | _T d | _U d | _V d | _W d | _X d | _Y d | _Z d | _[ d | _\ d | _] t: | _^ d | __ d | _` d | _a tb o: y tb ib | __ | i_ ic Wqtd j
o qXn te | _f tg | ih | ii d[ d\ g tg | ij d d] d^ g tg | ik | il d_ d` da g tg | im d db dc dd de df dg g tg | in d dh g tg | io d di g tg | ip d dj dk dl dm dn do dp dq g tg | iq | ir dr ds dt du dv dw dx dy dz d{ d| d} d~ d g tg | is d d d g tg | it | iu d d d d d d d d d d d g tg | iv d d d d d d d d d d d d d d d d d d d d d d g tg | iw d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d g! tg | ix d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d g tg | iy d d g tg | iz d d g tg d | il d g tg d | i{ d g tg d | i| d d d d d g tg d | ir d d d d d d g tg d | iu d d g g | _} d S( NRH s
umask=0077t enableCacheR& t implicitSSSDt hesiodLHSR t hesiodRHSt nisDomainR t nisLocalDomaint nisServerR R" R$ R& R( t passwordAlgorithmR. R* t smbSecurityt smbRealmt
smbServersR, t kerberosRealmviaDNSt kerberosKDCviaDNSR0 t forceSSSDUpdatet
enableLDAPt enableKerberost enableLDAPAutht enableIPAv2t smartcardActiont smartcardModulet smbWorkgroupt
smbIdmapRanget winbindSeparatort winbindTemplateHomedirt winbindTemplatePrimaryGroupt winbindTemplateShellt winbindUseDefaultDomaint winbindOfflinet enableDBt enableDirectoriest
enableWinbindt enableOdbcbindt
enableNIS3t enableNISt enableLDAPbindt enableHesiodbindt enableHesiodt
enableDBIbindt enableDBbindt enableCompatt
enableWINSt
enableMDNSt
enableSSSDt preferDNSinHostst cracklibArgst passwdqcArgst
localuserArgst
pamAccessArgst enablePAMAccesst
mkhomedirArgst enableMkHomeDirt
algoRoundst enableShadowt enableNullOkt forceBrokenShadowt enableSmartcardt forceSmartcardt enableWinbindAutht enableAFSt enableAFSKerberost enableCracklibt enableEPSt enableOTPt enablePasswdQCt enableLocAuthorizet enableSysNetAutht enableSSSDAutht
enableFprintdt pamLinkedt implicitSSSDAutht enableForceLegacyt ipav2Servert ipav2Domaint
ipav2Realmt ipaDomainJoinedt
ipav2NoNTP( s enableCacheR& ( s implicitSSSDR& ( s hesiodLHSR ( s hesiodRHSR ( s nisDomainR ( s nisLocalDomainR ( s nisServerR ( s
ldapServerR ( s
ldapBaseDNR ( s enableLDAPSR& ( s
ldapSchemaR ( s
ldapCacertDirR ( s passwordAlgorithmR ( s passwordAlgorithmR ( s passwordAlgorithmR ( s
kerberosRealmR ( s kerberosKDCR ( s smbSecurityR ( s smbRealmR ( s
smbServersR ( s kerberosAdminServerR ( s kerberosRealmviaDNSR& ( s kerberosKDCviaDNSR& ( s
ldapServerR ( s
ldapBaseDNR ( s enableLDAPSR& ( s
ldapSchemaR ( s
ldapCacertDirR ( s enableCacheCredsR& ( s
kerberosRealmR ( s kerberosKDCR ( s kerberosAdminServerR ( s forceSSSDUpdateR& ( s
enableLDAPR& ( s enableKerberosR& ( s enableLDAPAuthR& ( s enableIPAv2R& ( s smartcardActionR ( s smartcardModuleR ( s smbWorkgroupR ( s
smbServersR ( s smbRealmR ( s smbSecurityR ( s
smbIdmapRangeR ( s winbindSeparatorR ( s winbindTemplateHomedirR ( s winbindTemplatePrimaryGroupR ( s winbindTemplateShellR ( s winbindUseDefaultDomainR& ( s winbindOfflineR& ( s enableDBR& ( s enableDirectoriesR& ( s
enableWinbindR& ( s enableOdbcbindR& ( s
enableNIS3R& ( s enableNISR& ( s enableLDAPbindR& ( s
enableLDAPR& ( s enableHesiodbindR& ( s enableHesiodR& ( s
enableDBIbindR& ( s enableDBbindR& ( s enableCompatR& ( s
enableWINSR& ( s
enableMDNSR& ( s
enableNIS3R& ( s enableNISR& ( s enableIPAv2R& ( s
enableSSSDR& ( s preferDNSinHostsR& ( s implicitSSSDR& ( s cracklibArgsR ( s passwdqcArgsR ( s
localuserArgsR ( s
pamAccessArgsR ( s enablePAMAccessR& ( s
mkhomedirArgsR ( s enableMkHomeDirR& ( s
algoRoundsR ( s passwordAlgorithmR ( s enableShadowR& ( s enableNISR& ( s enableNullOkR& ( s forceBrokenShadowR& ( s enableLDAPAuthR& ( s enableKerberosR& ( s enableSmartcardR& ( s forceSmartcardR& ( s enableWinbindAuthR& ( s enableMkHomeDirR& ( s enableAFSR& ( s enableAFSKerberosR& ( s enableCracklibR& ( s enableEPSR& ( s enableOTPR& ( s enablePasswdQCR& ( s enableLocAuthorizeR& ( s enableSysNetAuthR& ( s winbindOfflineR& ( s enableSSSDAuthR& ( s
enableFprintdR& ( s pamLinkedR& ( s implicitSSSDAuthR& ( s enableIPAv2R& ( s passwordAlgorithmR ( s enableShadowR& ( s enableNISR& ( s
enableLDAPR& ( s enableLDAPAuthR& ( s enableKerberosR& ( s enableSmartcardR& ( s forceSmartcardR& ( s enableWinbindAuthR& ( s
enableWinbindR& ( s enableDBR& ( s enableHesiodR& ( s enableCracklibR& ( s enablePasswdQCR& ( s enableLocAuthorizeR& ( s enablePAMAccessR& ( s enableCacheCredsR& ( s enableMkHomeDirR& ( s enableSysNetAuthR& ( s
enableFprintdR& ( s
enableSSSDR& ( s enableSSSDAuthR& ( s enableForceLegacyR& ( s ipav2ServerR ( s ipav2DomainR ( s
ipav2RealmR ( s enableIPAv2R& ( s ipaDomainJoinedR& ( s
ipav2NoNTPR& ( s nisDomainR ( s enableShadowR& ( s enableNISR& ( s enableMkHomeDirR& ( s
enableLDAPR& ( s enableLDAPAuthR& ( s implicitSSSDR& ( s implicitSSSDAuthR& ( s enableForceLegacyR& ( s implicitSSSDR& ( s implicitSSSDAuthR& ( s enableIPAv2R& ( s
enableSSSDR& ( s enableSSSDAuthR& ( s enableForceLegacyR& ( s
enableWinbindR& ( s enableWinbindAuthR& (~ t messageCBt backupDirR R3 R4 R R" R. R R< R* R= R, R7 R5 R6 RE R: R; R9 RF RG RH RI RJ RK RL Rx Ry Rz R| R R{ t ipaUninstallRD RC R1 RX RM RN RU R? R$ RR RQ RW RV RT RS RP RO RY RZ R\ R[ RB Rk Rl R$ Rf Rm Rn R@ RA R8 Rd Ro Rp Re Rj Rq Ra Rr Rc Rh Rs t brokenShadowRg Ri Rt Rw R2 Rv R0 t joinUsert joinPasswordR] R^ R_ R` Rb R( t
ldapCacertURLR& Ru t
sssdConfigt
sssdDomainR> t
SSSDConfigt
new_configR< t sett toggleFunctionsR R t toggleCachingServicet writeHesiodt writeNISt toggleNisServicet writeLDAPt writeLibusert writeLogindefst
writeKerberost writeSSSDt toggleSSSDServicet writeSmartcardt writeWinbindt toggleWinbindServicet writeNSSt writePAMt writeSysconfigt writeNetworkt toggleShadowt toggleOddjobServicet toggleLDAPServicet save_groups( R R ( ( s! /usr/share/authconfig/authinfo.pyR sD c C s^ t | | } | | j o> t | | | | t | | j o | i i | qZ n d S( N( R t setattrR t append( R t attrR" t reft oldval( ( s! /usr/share/authconfig/authinfo.pyt setParamJ s
c C s | i p | i o t Sd
} d } d } d } d
} xB | D]: } t | d | o | | j o t S| d 7} q? q? W| d j o t Sd
} xB | D]: } t | d | o | | j o t S| d 7} q q W| d j o t S| i o | i o t St S( Nt NISt LDAPt Winbindt Hesiodt IPAv2t Kerberost LDAPAutht WinbindAutht Smartcardi R i ( R R R R R ( R R R R ( R R ( Rw R R R R@ R< R$ ( R t nssallt pamallt idsupportedt
authsupportedt numt t( ( s! /usr/share/authconfig/authinfo.pyt
sssdSupportedQ s6
c C s y t i t t i } Wn t j
o t SX| i d t | i d | | i d t | i d | | i
t S( NR3 t lhsR4 t rhs( t shvfileR t all_configst
CFG_HESIODR R< R R R t getValueR; R$ ( R R t shv( ( s! /usr/share/authconfig/authinfo.pyt
readHesiodp s ""
c C sY y t t t i d } Wn t j
o t SXd } x | D] } | i } t | d } | o | i o t | | } q> n t | d } | o | i
d d } t | d j o q> n | d | i j o q> n t | d j o q> n | d } t | d } | o t | | } q4q> q> W| i
d | | | i t S(
NR RH t ypserverR i i i t serverR7 ( R4 R t CFG_YPR R< R t stripR R6 R# R R R R R; R$ ( R R t ft nisserverR R" ( ( s! /usr/share/authconfig/authinfo.pyt readNIS s8
c C s d | j o | i d } n
| i } x | D] } yp | i d } | i d } | d j o/ | d j o" t i t i | | d | ! n t i | i } Wq3 t t i f j
o t SXq3 Wt
S( s&
Check whether LDAP URI is valid.
R
s ://[t ]ii ( R R, t sockett inet_ptont AF_INET6t urlparset portR R R R$ ( R R
t urist uriR0 t endt p( ( s! /usr/share/authconfig/authinfo.pyt validateLDAPURI s
"
c C s d | j o | i d } n
| i } d } x[ | D]S } | oF | o | d 7} n d | j o | | 7} q | d | d 7} q9 q9 W| o( | i | o | i t d n | S( NR
RH s ://s ldap://R s Invalid LDAP URI.( R R R} R ( R R
t validatet lt rett item( ( s! /usr/share/authconfig/authinfo.pyt ldapHostsToURIs s
c C s t | _ y t t t i d } Wn t j
o y t t t i d } Wq t j
oh y t t t i d } Wq t j
o8 y t t t i d } Wq t j
o t
SXq Xq Xn Xx | D]} | i } t | d } | o' t
| o | i d | | q n t | d } | o | i d | | q n t | d } | o | i d | | q n t | d } | o# | i d t | d | q n t | d
} | o | i d | | q q q W| i t | i t
| _ | i t S( NR R R" t hostR R t sslR$ t start_tlst
nss_schemaR& ( t PATH_LDAP_CACERTSR( R4 R t CFG_NSSLDAPR R< t CFG_NSLCDt CFG_PAMLDAPt CFG_LDAPR R R R) R R R R R R; R$ ( R R R R R" ( ( s! /usr/share/authconfig/authinfo.pyt readLDAP sP
c C s* y | i | SWn t j
o d SXd S( NRH ( t allKerberosKDCst KeyError( R RP ( ( s! /usr/share/authconfig/authinfo.pyt getKerberosKDC s c C s* y | i | SWn t j
o d SXd S( NRH ( t allKerberosAdminServersR ( R RP ( ( s! /usr/share/authconfig/authinfo.pyt getKerberosAdminServer s c
C s d } h | _ h | _ y t t t i d } Wn t j
o t SXx| D]} | i } | d d !d j o | d d !} d } qP n | d j o t | d } | o | i
d | | qP n t | d
} | o) | i
d t | d d j | qP n t | d
} | o) | i
d t | d d j | qP qNqP | d j o | p: | i d d } t | d j o qP n | d } qN| d d !d j o
d } qP n | i p
| | _ n t | d } | o& t | i | | | i | n | d j o: t | d } | o | i d | i | q> q q> q> W| i
t S(
NRH R i i R it defaultst crypt_styleR8 ( R4 R t CFG_LIBUSERR R< R R R R R R; R$ ( R R R R R R R" ( ( s! /usr/share/authconfig/authinfo.pyt readLibuserX s&
c C s y t t t i d } Wn t j
o t SXx | D] } | i } t | d } | d j o | i d d | q8 n t | d } | o7 | d j o
d } n | i d | i | q8 q8 q8 W| i
t S( NR t MD5_CRYPT_ENABt yesR8 Ra t ENCRYPT_METHODt DESR_ ( R4 R t CFG_LOGIN_DEFSR R< R R R R R R; R$ ( R R R R R" ( ( s! /usr/share/authconfig/authinfo.pyt
readLogindefss s&
c C s% | i p t St i | _ y | i i t t i Wn8 t t i f j
o# t i | _ | i i n Xy | i i
t } | _ Wn t i
j
o y | i i d } WnA t j
o5 y | i i d } Wq t j
o t SXn X| i i
| } y | i d } Wn t i j
o
d } n Xy | i d } Wq{t i j
o
d } q{Xn Xx t i D] \ } } yp | i | } | d j o d i | i d } n" | d j o | d j o wn | i | | | Wqt i j
o qXqWd S( Ni t id_providert
auth_providerR R R
R% t rfc2307( R R$ R t
import_configR t CFG_SSSDR R< t ParsingErrorR t
get_domaint SSSD_AUTHCONFIG_DOMAINR t
NoDomainErrort list_active_domainst
IndexErrort list_domainst
get_optiont
NoOptionErrorR t sssdopt_mapt iteritemsR R R ( R R R t domnamet idprovt authprovR t optR ( ( s! /usr/share/authconfig/authinfo.pyt readSSSD sL
c C s t } t d g } | d j o d | _ t S| i d | d | t d g } | d j o t Sx% | D] } d | j o
t } qo qo W| o | i d t d | n | i d t d | t S(
Nt
use_moduleRH RD i t rm_actions
lockhelper.shRC R R ( R R R RD R R$ R ( R R t lockt smartcardmodulet rmactionst action( ( s! /usr/share/authconfig/authinfo.pyt
readSmartcard s"
c C s d } d } y t t t i d } Wn t j
o | SXx | D] } | i } t | d o qD n t | d o qD n t | d } | o | i d d i } qD n | p
| d j o qD n t
| | } | o
| } qD qD W| i | S( NRH R t #t ;R R i t global( R4 R t CFG_SMBR R< R R R R R RU R; ( R R t resultR R R R" t res( ( s! /usr/share/authconfig/authinfo.pyt readWinbindGlobal s0
c C sZ | i | } | o@ | i d j p | i d j p
| d j o t St Sn d S( NR R t 1( R R R$ R R ( R R t tmp( ( s! /usr/share/authconfig/authinfo.pyt readWinbindGlobalBool s 3c C sD | i d } | o | i d | | n | i d } | o | i d | | n | i d } | o | i d | | n | i d } | o | i d | | n | i p
d | _ n | i d
} | o | i d | | n | i p
d | _ n | i d
} | o | i d | | n | i d } | o | i d | | n | i d } | o | i d | | n | i d } | o | i d | | n | i p
d | _ n | i d } | d j o | i d | | n | i d } | d j o | i d | | n t S( Nt workgroupRE s password serverR; RP R: t securityR9 t users idmap config * : rangeRF s 16777216-33554431s winbind separatorRG s template homedirRH s template primary groupRI s template shellRJ s
/bin/falses winbind use default domainRK s winbind offline logonRL ( R R R9 RF RJ R R R$ ( R R R ( ( s! /usr/share/authconfig/authinfo.pyt readWinbind sP
c C s d } y t t t i d } Wn t j
o t SXx| D]} | i } t | d } | o
| } q> t | d } | o t | d o | i d t
| n t | d o | i d t
| n t | d } | d j o t | d } n t | d
} | d j o* | d j o | i d | | j | qMq> q> W| o d d d d! d" d# d$ d% f } x? | D]7 \ } }
t | |
o | i d | t
| q}q}W| i d t t | d | n | i
t
S(& NRH R s passwd:s hosts:t winsRY s mdns4_minimal [NOTFOUND=return]RZ t nist dnsR\ t Compatt compatt DBt dbt Directoriest directoriesR t hesiodR Rr R t NIS3t nisplusR Rt R R2 Ro ( R' R( ( R) R* ( R+ R, ( s Hesiods hesiod( s LDAPRr ( s NISR% ( R. R/ ( s WinbindRt ( R4 R t CFG_NSSWITCHR R< R R R R2 R R$ R t boolR; ( R R t nssconfigR R R" t nispost dnspost nssmapR t nssentry( ( s! /usr/share/authconfig/authinfo.pyt readNSS sF
% &
c C s | i d t | t S( NR1 ( R R R$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyR L s c
C sy y t t t i d } WnE t j
o9 y t t d t d } Wqb t j
o t SXn Xd } xZ| D]R} | i d d } t | d j o | d } n | i
} | d d j o | | d d 7} qo n | | } d } | i } d } | i d d } t | d
j o qo n | \ } } | d j o. | d j o! | d
j o | d j o qo n | i
d o | i d d } n | i d d } t | d
j o qo n | d d j o qo n | d } | i
d o | d 7} n | d } | i d d } t | d j o qo n | d i d d \ } t | d
j o | d } n | i
d o8 | i d t | | o | i d | | qo qo n | i
d o | i d t | qo n | i
d o | i d t | qo n | i
d oQ | i d t | d | j o | i d t | qo | i d t | qo n | i
d o | i d t | qo n | i
d o8 | i d! t | | o | i d" | | qo qo n | i
d# o | i d$ t | qo n | i
d% o | i d& t | qo n | i
d' o8 | i d( t | | o | i d) | | qo qo n | i
d* p | i
d+ o. | i d, t | | o
| | _ qo qo n | i
d- o8 | i d. t | | o | i d/ | | qo qo n | d
j o| i
d0 o x; t D]3 }
| i |
d j o | i d1 |
| q;q;WyP | i d2 } | | d3 i d d } | i d4 t t | d | Wn t t f j
o n Xy$ t i d5 | i d6 t | Wq/t j
o | i d6 t | q/Xq3n | d j o: | i
d0 o& | i d7 | i d8 d j | qzn | d j o: | i
d0 o& | i d9 | i d: d j | qqo qo W| i | i o! | i o | i d! t | n | i o" | i o | i d t | n | i oD | i o9 | i o. | i! o# | i" o | i# o
t | _$ n t S(; NR s /pam.d/RH R i i is \R i Rd Re Rg Rf R R t includeR t pam_cracklibRm R] t pam_krb5R@ t pam_ldapRA t
pam_pkcs11Rh t authinfo_unavailRi t pam_fprintdRt t pam_passwdqcRp R^ t pam_winbindRj t pam_sssRv t
pam_accessRa R` t
pam_mkhomedirt pam_oddjob_mkhomedirRc t
pam_localuserRq R_ t pam_unixR8 s rounds=i Rd s /etc/shadowRe Rf t nullokR t
broken_shadow(% R4 R t CFG_PAMR R< t
SYSCONFDIRt AUTH_PAM_SERVICER R R R R R R R R$ Rb t password_algorithmsR, R R R R R R3 R R: R; Rm Rp R RA R@ Rj Rs Rh Rg (
R R R t prevlineR R t argst stackt controlt modulet algot ridxt rounds( ( s! /usr/share/authconfig/authinfo.pyt readPAMQ s
'
*
.
c t C s yt i t t i } y | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _
Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _
Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d
| _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d
| _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy0 | i d } | o
d | _ n
d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _ Wn t j
o n Xy | i d | _! Wn t j
o n Xy | i d | _" Wn t j
o n Xy | i d | _# Wn t j
o n Xy | i d | _$ Wn t j
o n Xy | i d! | _% Wn t j
o n Xy | i d" | _& Wn t j
o n Xy | i d# | _' Wn t j
o n Xy | i d$ | _( Wn t j
o n Xy | i d% | _) Wn t j
o n Xy | i d& | _* Wn t j
o n Xy | i d' | _+ Wn t j
o n X| i, d( | _- | i, d) | _. | i, d* | _/ | i, d+ } | t0 j o
| | _ n | i1 Wn t2 j
o n Xt3 S(, Nt USEAFSt USEAFSKERBEROSt USEDBt USECRACKLIBt USEDBBINDt
USEDBIBINDt USEDIRECTORIESt USEEPSt USEHESIODt
USEHESIODBINDt USEKERBEROSt USELDAPt USELDAPAUTHt USESMARTCARDt
USEFPRINTDt FORCESMARTCARDt USELDAPBINDt USEMD5Ra R_ t USENISt
USENISPLUSt USEODBCBINDt USEOTPt USEPASSWDQCt USESHADOWt
USEWINBINDt USEWINBINDAUTHt USESSSDt USESSSDAUTHt USELOCAUTHORIZEt USEPAMACCESSt USEMKHOMEDIRt
USESYSNETAUTHt FORCELEGACYt CACHECREDENTIALSt USEIPAV2t IPADOMAINJOINEDt
IPAV2NONTPt IPAV2SERVERt IPAV2DOMAINt
IPAV2REALMt PASSWDALGORITHM(4 R R R t CFG_AUTHCONFIGR t getBoolValueRk R Rl RM Rm RW RV RN Rn RU RT R@ R? RA Rh Rt Ri RS R8 RR t enableNISP3RP Ro Rp Re RO Rj R[ Rs Rq Ra Rc Rr Rw R0 RB R{ R| R Rx Ry Rz RL R; R< R$ ( R R t enableMD5RR ( ( s! /usr/share/authconfig/authinfo.pyt
readSysconfig sF
c C s y t i t t i } Wn t j
o t SX| i d } | o
| | _ n | i | i o | i
d | i | n t S( Nt NISDOMAINR5 ( R R R t CFG_NETWORKR R< R R R6 R; R R$ ( R R R R ( ( s! /usr/share/authconfig/authinfo.pyt readNetwork s
c C sm | i } t | i | j p t | i | j o t Sx) | i D] } | i | | o t SqG Wt S( N( R R1 R2 Rv R$ R R R ( R R& t
sssdsupportedR ( ( s! /usr/share/authconfig/authinfo.pyt differs s ,
c C s t | i | _ t | i | _ t | i | _ t | i | _ | i | i | | _ | i d j o$ | i o | i i | _ q n | i
i | _
| i d j o
t | _ n d S( Nt ads( R R; Rx R* R, R R R9 R: t upperR8 R R0 R R$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyt update s
c C s | i } | i | i | | i | | i | | i } | i o* | o" | i o | i d t | n | i
o* | o" | i o | i d t | n | i | | i | | i
| | i | | i | | i o | i
o | i | n | i | | i | | i p
| i
o | i | n | i | | i | | i d S( NR[ Rs ( t copyR R7 R RU R R2 RB R R$ Rv R R R# R R R R R R R R ( R R t reallyimplicit( ( s! /usr/share/authconfig/authinfo.pyR s0
c C s% t i | } d | _ d | _ | S( NRH ( R R R ( R R ( ( s! /usr/share/authconfig/authinfo.pyR s c C s0 t t i | i t | i o | i t S( N( R t CFG_CACHER
R~ R R1 R2 R$ ( R ( ( s! /usr/share/authconfig/authinfo.pyR s c C s t t i | i y t i t t i } Wn t j
o t SX| i d | i
| i d | i | i d | i
t S( NR R i ( R R R
R~ R t rcreateR R< R t setValueR3 R4 R R; R$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyR s
c C s t } d } d } t t i | i zt t t i d } x| i D]} | i } t
| d } | o| i d d } t | d j o qI n | d | i
j o% | d | i j o | | 7} qI n | o | i
o | d | i
7} | i i d } | i o | d 7} | | d 7} n | d 7} | d
7} | d } x+ | D]# } | o | d | d
7} qVqVWt } qqI t | d ok | o_ | i
oT | i oJ | i i d } x+ | D]# } | o | d | d
7} qqWt } qqI | | 7} qI W| p | i i d } | i
oZ | d | i
7} | d o& | d 7} | | d 7} | d } n | d 7} | d
7} n x/ | D]# } | o | d | d
7} qqWn | i | i | | i Wd y | o | i n Wn t j
o n XXt S(
NRH i R i i s domain R
s server s
broadcasts
s ypserver R ( R R R R R
R~ R R R R R R R R5 R6 R7 R$ R R R R R; R< ( R t writtenR RJ R t lsR" t serversR
( ( s! /usr/share/authconfig/authinfo.pyR s~
(
c C s t } t } t }
t } t } t }
d } d } | i o* | i d j o | i d j o
d } n d } z&t | d } xp| i D]e} | i } t | | oW | oK | i oA | | d 7} | d i | i i d 7} | d 7} t
} qq t | | o | i o | d
| 7} qq t | | oE | o9 | i o/ | | d 7} | | i 7} | d 7} t
} qq | o[ t | d oK |
p@ | d 7} | i
o | d
7} n | d 7} | d 7} t
}
qq | oQ t | d oA | o5 | i o+ | d 7} | | i 7} | d 7} t
} qq t | d oO |
pD | o | d 7} n | d 7} | d | i 7} | d 7} t
}
qq | o= t | d o- | p" | d | 7} | d 7} t
} qq | | 7} q W| oE | i o; | | d 7} | d i | i i d 7} | d 7} n | o3 | i o) | | d 7} | | i 7} | d 7} n | oB |
o: | d 7} | i
o | d
7} n | d 7} | d 7} n | o7 | o/ | i o% | d 7} | | i 7} | d 7} n |
p> | o | d 7} n | d 7} | d | i 7} | d 7} n | o$ | o | d | 7} | d 7} n | i | i | | i Wd y | o | i n Wn t j
o n XXt
S( NRH R_ R` Ra t crypti R R
s
R R s ssl R t noR s nss_schema t
tls_cacertdirt
TLS_CACERTDIRt pam_passwords
pam_password ( R R R8 R R R R R R R R$ R* R" R$ R& R! R( R R R R; R< ( R R= R R R t writepadlt writeschemat writepamt wrotebasednt wroteservert wrotesslt wroteschemat wrotepasst wrotecacertdirR RJ t passalgoR R ( ( s! /usr/share/authconfig/authinfo.pyt
writeLDAP2X s
c C s t i i t t i o> t t i | i | i t t i d d d t t t n t i i t t
i o> t t
i | i | i t t
i d d d t t t n t i i t t i o> t t i | i | i t t i d d d t t t n t i i t t
i o> t t
i | i | i t t
i d d d t t t n t t i | i | i t t i d d d t t t } | S( NR R R t URIt HOSTt BASE( R3 R R R R R R
R~ R R$ R R R R t CFG_OPENLDAP( R R ( ( s! /usr/share/authconfig/authinfo.pyR s( c C sW d } | i d j o | d S| i d j p | i d j o | | i S| d Sd S( Ns crypt_style = Ra Rb Rc t des( R8 ( R R ( ( s! /usr/share/authconfig/authinfo.pyt
cryptStyle s c C s t } t } d } d } d } t t i | i zPt t t i d } x | i D] } | i } | d j o1 t
| d o! | | i d 7} t } qU n t
| d oh | d j o& | o | | i d 7} t } n | d i
d d d } | d j o
t } q n | | 7} qU W| p. | d
7} | | i d 7} t } t } n | i | i | | i Wd y | o | i n Wn t j
o n XXt S( NRH i R R s
R i R i s [defaults]
( R R R R R
R~ R R R R R R R$ R R R R R; R< ( R t wrotecryptstylet
wrotedefaultsR R RJ R R ( ( s! /usr/share/authconfig/authinfo.pyR sJ
c
C s t } t } d } d } d } t t i | i | i d j o
d } n d } | i d j p | i d j o
d } n d | i i d } z t t t i d
} xu | i
D]j } | i } t | d o | | 7} t
} q n t | d o | | 7} t
} q n | | 7} q W| p | | 7} n | p | | 7} n | i | i | | i Wd y | o | i n Wn t j
o n XXt
S(
NRH Ra s MD5_CRYPT_ENAB yes
s MD5_CRYPT_ENAB no
R_ R` s ENCRYPT_METHOD DES
s ENCRYPT_METHOD s
i R R ( R R R R R
R~ R8 R R R R R R R$ R R R R; R< (
R t
wrotemd5cryptt wroteencmethodR R RJ t md5cryptt encmethodR R ( ( s! /usr/share/authconfig/authinfo.pyR "
sN
c C s
t } t } t } t } t } t } t } t } t } t }
t } t } t }
t } t } d } d } d } d } t t i | i | i o | i o
| i } nE | i p
| i o' | i
d j o | i o
| i } n
| i } | i | i j o
t } n zK t
t t i d } x5| i D]*} | i } | d j o` | oY | | i j oI t | d o9 | p+ | i o | t | i 7} n t } q+q+n | d j op | i
d j o` | oY | | i j oI t | d o9 | p+ | i o | t | i 7} n t } q+q+n | d j o` | oY | | i j oI t | d o9 | p+ | i o | t | i 7} n t } q+q+n | d j o | o | i d d } t | d j o | | 7} q+n | d } | i o | | i j o
t } n | i o | | i j o
t } q5n | d j o | o t | d o | i o\ | | i j oL | p | t | i 7} t } n | p | t | i 7} t } qn | i o8 | | i j o( | p | t | i 7} t } qn d } n | d
j oN t | d o> | o0 |
o( | d 7} | | 7} | d
7} t }
q+q+n | d
j o[ t | d oK | p= | d 7} | t t | i i 7} | d
7} t } q+q+n | d
j o[ t | d oK | p= | d 7} | t t | i i 7} | d
7} t } q+q+n | d j oW | i oM t | | i i p t | d | i i o | | 7} t }
q+n t | d o| d j o; | i o1 | o) | t | i | i | i 7} t } n | d j o8 | i o. | o& | t | i | i d 7} t } n | d
j o | o0 |
o( | d 7} | | 7} | d
7} t }
n | p= | d 7} | t t | i i 7} | d
7} t } n | p= | d 7} | t t | i i 7} | d
7} t } qn | d j o | i ov |
on | d | i i 7} | d | i 7} | d
7} | d | i i 7} | d | i 7} | d
7} t }
qn | oI | d j o
t } q| d
j o
t } q| d j o
t } qn | d i d d d } | d j o
t } qK| d
j o
t } qK| d j o
t } qKn | | 7} q+W| p | p | d 7} n | o* |
o" | d 7} | | 7} | d
7} n | p7 | d 7} | t t | i i 7} | d
7} n | p7 | d 7} | t t | i i 7} | d
7} q& n | pj | p | d 7} n | p# | t | i | i | i 7} n | p | t | i | i d 7} q n | p | p | d 7} n | i op |
oh | d | i i 7} | d | i 7} | d
7} | d | i i 7} | d | i 7} | d
7} q1
n | i | i | | i! Wd y | o | i" n Wn t# j
o n XXt S( NRH R i R RK R i i R R R s default_realm = s
R s dns_lookup_realm = R s dns_lookup_kdc = t domain_realmR~ R R s = s .R s [libdefaults]
s [realms]
s [domain_realm]
($ R R R R R
R~ R@ R. RO Rj R9 R: R$ R R R R R R* RL R; R, RO R R R R1 R< R R= RQ R R R R; R< ( R t
wroterealmt wrotekdct
wroteadmint
wrotesmbrealmt wrotesmbkdct wroterealmst wrotelibdefaultst wroterealms2t wrotelibdefaults2t wrotedefaultrealmt
wrotednsrealmt wrotednskdct wroteourdomrealmt
wrotedomrealmt wrotedomrealm2R R R RJ t defaultrealmR R R" ( ( s! /usr/share/authconfig/authinfo.pyR X
s
$
$
$
$
$
0
$
c C sy y | i | d } Wn t i j
o
d } n X| | j o2 | d j o | i | n | i | | n d S( Nt _provider( R R R R t remove_providert add_provider( R R t newprovidert subtypet prov( ( s! /usr/share/authconfig/authinfo.pyt changeProviderB s
c C s | i p t St t i | i | i o t S| i pZ | i p t Sy | i i t
| _ Wq t i j
o | i i
t
| _ q Xn | i } y | i i d Wn& t i j
o | i i d n X| i i d t } | i o0 t } | i | d d | i | d d n | i o* | i | d d | i | d d n5 | i o* | i | d d | i | d d n x t i D] \ } } y t | | } | d j o t | } n t | t j o | i | | nM t | t j o, | o | i | | qO| i | n | i | Wqt i j
o qXqW| i i! | | o | i i" | i# n | i i$ | i# y | i i% t t i& Wn t' j
o n Xt S( Nt autofsRr t idRk Rd t chpassR (( R R$ R R R
R~ RB R R2 t
new_domainR R t DomainAlreadyExistsErrorR t get_servicet NoServiceErrort new_servicet activate_serviceR R? R R@ RA R R R R t typeR1 t
set_optionR t
remove_optionR t save_domaint activate_domaint get_namet deactivate_domainR R R< ( R R t activateR t optionR ( ( s! /usr/share/authconfig/authinfo.pyR L sj
c C s | i d j o t St t i | i d } d } d } | i t d j o | d 7} | d 7} d } n t d | i d | d | g t
i d
d d | t S(
Ns /usr/sbin/gdm-safe-restartt noneR s ,/etc/pkcs11/lockhelper.sh -locks& ,/etc/pkcs11/lockhelper.sh -deactivatet lock_screens use_module=s ins_action=s
rm_action=s gconftool-2 --directs= --config-source=xml:readwrite:/etc/gconf/gconf.xml.mandatorysH -s /desktop/gnome/peripherals/smartcard/removal_action %s --type string( RD R R$ R t CFG_PAM_PKCS11R
R~ RC R R R3 R ( R t insactt rmactR ( ( s! /usr/share/authconfig/authinfo.pyR s
c C s d } | d 7} | d t i d d 7} | d 7} | d 7} | d 7} | i o+ | d 7} | | i 7} | d 7} t } n | i o7 | d 7} | | i i d d
7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d
7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i
o+ | d 7} | | i
7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t } n | i o+ | d 7} | | i 7} | d 7} t }
n | d 7} | t
t | i i 7} | d 7} | d 7} | t
t | i i 7} | d 7} | d 7} | d 7} | S( Ns #--authconfig--start-line--
s
s # Generated by authconfig on s %Y/%m/%d %H:%M:%SsF # DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--)
sE # Any modification may be deleted or altered by authconfig in future
s workgroup = s password server = R
R s realm = s security = s idmap config * : range = s winbind separator = s template homedir = s template primary group = s template shell = s winbind use default domain = s winbind offline logon = s #--authconfig--end-line--
( t timet strftimeRE R$ R; R R: R9 RF RG RH RI RJ R R1 RK R RL ( R RJ t wroteworkgroupt wroteserversR t
wrotesecurityt wroteidmapranget wroteseparatort wrotetemplateht wrotetemplatept wrotetemplates( ( s! /usr/share/authconfig/authinfo.pyt
paramsWinbind sx
c C s@ d } x) | D]! } t | | o d } Pq
q
W| | 7} | S( NRH R ( RU ( R R R R RJ R
( ( s! /usr/share/authconfig/authinfo.pyt checkLineWinbind s
c
C s: t } t } d } t t i | i d d d d d d d d d
d d d
d d g } d } d } zt t t i d } x>| i D]3} | i } | o! t
| d o
t } q q n t
| d o
t } q n t
| d p t
| d o | | 7} q n t | d } | o^ d | j oQ | i
d d i } | | 7} | d j o | | i 7} t } q q n | d j o | | i | | | 7} q n | | 7} q W| p | d 7} | | i 7} n | i | i | | i Wd y | o | i n Wn t j
o n XXt S( NRH R s password serverRP R! s
domain logonss
domain masters idmap uids idmap gids winbind separators template homedirs template primary groups template shells winbind use default domains winbind offline logoni s #--authconfig--end-line--s #--authconfig--start-line--R R R R i R s [global]
( R R R R
R~ R R R R R R R$ R R R R R R R R R; R< (
R t authsectiont wroteauthsectionR R R RJ R R R" ( ( s! /usr/share/authconfig/authinfo.pyR sf
c C sy d } d } d } t } t } t } t } t } t } t }
d } d } t t i | i zt t t i d } | i o | d 7} n | d 7} | }
| i o | d 7} n | i
o | d 7} n | i o | d 7} n | i o | d 7} n | i
p | i p
| i o | d 7} |
d 7}
n | i o | d
7} n | i o | i o | d 7} n | i o | d 7} n | i o | d
7} n | i o | d 7} n | i o | d 7} n | } | i o | i d d } n | } | i o | d 7} n t i t t i p@ | i o | i o | i d d } qh| i d d } n | d 7} | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i o | d 7} n | i p | d 7} n x| i D]} | i! } t" | d o3 | p( | d 7} | | 7} | d 7} t# } qq t" | d o3 | p( | d 7} | | 7} | d 7} t# } qq t" | d o3 | p( | d 7} | | 7} | d 7} t# } qq t" | d o3 | p( | d 7} | | 7} | d 7} t# } qq t" | d! o3 | p( | d" 7} | | 7} | d 7} t# } qq t" | d# o3 | p( | d$ 7} | | 7} | d 7} t# } qq t" | d% o3 |
p( | d& 7} | |
7} | d 7} t# }
qq | | 7} q W| p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d 7} | | 7} | d 7} n | p" | d" 7} | | 7} | d 7} n | p" | d$ 7} | | 7} | d 7} n |
p" | d& 7} | |
7} | d 7} n | i$ | i% | | i& Wd y | o | i' n Wn t( j
o n XXt# S(' NRH i s dbs filess directoriess odbcbinds nispluss niss ssss ldapbinds ldaps hesiodbinds hesiods dbibinds dbbindt filesR( s winbindRo Rr s mdns4_minimal [NOTFOUND=return]s dnss winss passwd:s passwd: s
s shadow:s shadow: s group:s group: s netgroup:s netgroup: s
automount:s automount: s hosts:s hosts: s services:s services: () R R R R0 R
R~ R R RM RN RP RQ RR R[ R2 RB RS R? RT RU RV RW RX R RO R3 Rv t PATH_LIBSSS_AUTOFSt R_OKRZ R\ RY R R R R$ R R R R; R< ( R t userst normalt hostst wrotepasswdt
wrotegroupt wroteshadowt
wrotenetgroupt wroteautomountt
wrotehostst
wroteservicesR RJ t servicest netgroupR R ( ( s! /usr/share/authconfig/authinfo.pyR ; s(
c C s t | t } | t } | t } d } | o| od } | d j oY | d j oL | o- | i o
t } n t } d i t } q | i o
t } q n | d j o+ | d j o | i
o
t } q t } n | d j o2 | d j o% | t
j o | i o
t } qn | d j o* t i d t d
f t i o
d
} n | d | | | f 7} | o_ | | i j oO t i d t | f t i o. | i t d t | f t | i | | i& oP | t t j o? | t d j o. | t t' j o | | i( | | |
7} q q W| i) | i* | | i+ Wd y | o | i, n Wn t- j
o n XX| i. | t/ d | t S( NRH i s
#%PAM-1.0
s # This file is auto-generated.
s/ # User changes will be destroyed the next time s authconfig is run.
s
Rp s afs.krbRx t epsRk Rl Rr Ri Rj Ru Rm Rs Ry Rt Ro Rw Rv R} s /pam.d/(0 R R R
R~ R R Ri Rh Rt R t STANDARDR$ t FINGERPRINTt SMARTCARDt pam_modulesR t MANDATORYRk R Rl Rm Rn R@ Rv R t argv_krb5_sc_autht AUTHRA R R Ro Rp Rj Rs RB Rq Ra Rc Rr t LOGIC_REQUISITER R R R R; R< R RJ (
R R t cfgt cfg_basenamet cfg_linkR RJ Ri Rh Rt R t
prevmoduleRQ ( ( s! /usr/share/authconfig/authinfo.pyt writePAMServiceT
s|
&""&" / "!
c C se h | _ | i t t t t | i t t t t | i t
t t t
| i t t t t t S( N( R R% R RI t AUTH_PAM_SERVICE_ACRK t
PASSWORD_ONLYt CFG_PASSWORD_PAMt PASSWORD_AUTH_PAM_SERVICE_ACR R t CFG_FINGERPRINT_PAMt FINGERPRINT_AUTH_PAM_SERVICE_ACR R t CFG_SMARTCARD_PAMt SMARTCARD_AUTH_PAM_SERVICE_ACR R$ ( R ( ( s! /usr/share/authconfig/authinfo.pyR
s c C s t t i | i y t i t t i } Wn t j
o t SX| i d | i
| i d | i | i d | i | i d | i
| i d | i | i d | i | i d | i | i d | i | i d | i | i d
| i | i d | i | i d | i | i d
| i | i d | i | i d d | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i | i d | i! | i d | i" | i d | i# | i d | i$ | i d | i% | i d | i& | i d | i' | i d | i( | i) d | i* t+ S( NRY RX R^ Ra Rh Rl Rn Rp R` Rb Rc Re Rd R~ Rg Rm Ro Rq Rr Rs Rt Ru Rv Rw Rx Ry Rz R{ R| R} i (, R R R
R~ R R R R< R t setBoolValueRm RM RU R? RR Rp RO R[ R@ RA Rh Ri Rt R R8 R Re Rj Rs Rq Ra Rc Rr Rw R0 RB R{ R| Rx Ry Rz R R; R$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyR
sL
c C ss t t i | i y t i t t i } Wn t j
o t SX| i d | i
| i d | i t
S( NR i ( R R R
R~ R R R R< R R R5 R R; R$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyR
s
c C s | i } | i | _ | _ | i o5 | i o* | i o | o | i i d q_ n t } t | d j o! | i | j o | d | _ n | i
o! | i o t | _
t
| _ n d S( NR> i ( R2 R Rv R[ Rs R R R R RD R{ RB R R$ R ( R t oldimplicitt modules( ( s! /usr/share/authconfig/authinfo.pyt prewriteUpdate
s # c C sV | i t | i | i t d y| i } | o
| i } | o
| i } | i o | o
| i } n | i
p
| i o | o
| i } n | i
p | i o' | i d j o | o
| i } n | i o | o
| i } n | i o | o
| i } n | i p
| i o | o
| i } n | i p
| i o | o
| i } n | o
| i } | o
| i } | o
| i } | o
| i } | o
| i } Wn> t t f j
o, t! i" i# t$ t! i% d d t& SXx2 | i' D]' } | i( o | i) i* | i( q'q'W| S( Ns /lastR i s
(+ R R$ R1 t setupBackupt PATH_CONFIG_BACKUPSR R R RU R R? RA R R@ Rj R9 R Rh R RR R RO R R2 Rv R R R R R R R: R< R R R R t exc_infoR R R R t add( R R R ( ( s! /usr/share/authconfig/authinfo.pyR
sH
$
c C s | i | i t | i | i t d t } yq xj | i D]_ } | i | | oF | i o | o
| i } n | i o | i
i | i q qE qE WWn> t t
f j
o, t i i t t i d d t SX| S( Ns /lasti s
( R R R$ R1 R2 R3 R R R R R R5 R: R< R R R R R4 R ( R R R R ( ( s! /usr/share/authconfig/authinfo.pyt writeChanged s"
#$c C s d } d } g } g } t i d g t i d g t i d g t i d g g } t i } | p d S| i d p | d 7} n | | i d } d | } t i | t i t i } xL | D]D } | i t i j o+ | i
i i d | _
t | | _ q q Wd | } t i | t i t i } | p) d | } t i | t i t i } n xC | D]; } | i t i j o" | i
i | _ | i o PqqgqgW| i old | i } t i | t i t i } x | D] } | i t i j oh | i
i i d } | i
i o | d | i
i 7} n | i o | i d
| 7_ q`| | _ qqWd | i } t i | t i t i } x | D] } | i t i j oh | i
i i d } | i
i o | d | i
i 7} n | i o | i d
| 7_ q| | _ qqWn x | D] } | d | } t i | | d
t i } xY | D]Q } | i t i j o8 | i | j o( d | d | _ | i d | _ PqZqZWq#Wd S( NRH t hst nsR~ s
_ldap._tcps
_kerberos.t _kerbeross _kerberos._udp.R+ R
s _kerberos-adm._udp.i i ( t dnsclientt DNS_C_INt DNS_C_HSR t getfqdnt endswithR, R t DNS_T_SRVt dns_typet rdataR R R R R" t DNS_T_TXTt dataR. R R* R, t DNS_T_SOAt dns_nameR3 R4 ( R t hostnamet qnamet resultsR R- R t h( ( s! /usr/share/authconfig/authinfo.pyt probe# s
c C s d t | i GHd GHd t | i GHd t | i GHd t | i GHd | i GHd | i GHd t | i GHd t | i GHd
| i GHd | i
GHd t | i GHd
| i GHd | i
GHd t | i GHd t | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd | i GHd t | i GHd t | i GHd t | i GHd t | i GHd GHd t | i GHd | i GHd t | i GHd | i GHd t | i GHd! | i GHd" t | i GHd# | i! GHd$ t | i" GHd t | i GHd
| i GHd | i
GHd% | i# p d& GHd' t | i$ GHd( t | i% GHd) | i& GHd* | i' GHd+ t | i( GHd, t | i) GHd | i GHd | i GHd | i GHd | i GHd- t | i* GHd. t | i+ GHd/ t | i, GHd0 t | i- GHd1 | i. o d2 p d3 GHd4 | i/ GHd5 | i0 GHd6 | i1 GHd7 t | i2 | i3 f GHd8 t | i4 | i5 f GHd9 t | i6 | i7 f GHd: t | i8 | i9 f GHd; t | i: | i; f GHd< t | i< GHd S(= Ns
caching is %ss nss_files is always enableds nss_compat is %ss nss_db is %ss nss_hesiod is %ss hesiod LHS = "%s"s hesiod RHS = "%s"s nss_ldap is %ss LDAP+TLS is %ss LDAP server = "%s"s LDAP base DN = "%s"s
nss_nis is %ss NIS server = "%s"s NIS domain = "%s"s nss_nisplus is %ss nss_winbind is %ss SMB workgroup = "%s"s SMB servers = "%s"s SMB security = "%s"s SMB realm = "%s"s Winbind template shell = "%s"s SMB idmap range = "%s"s nss_sss is %s by defaults nss_wins is %ss nss_mdns4_minimal is %ss% DNS preference over NSS or WINS is %ss pam_unix is always enableds shadow passwords are %ss! password hashing algorithm is %ss pam_krb5 is %ss krb5 realm = "%s"s krb5 realm via dns is %ss krb5 kdc = "%s"s krb5 kdc via dns is %ss krb5 admin server = "%s"s pam_ldap is %ss LDAP schema = "%s"R s pam_pkcs11 is %ss# use only smartcard for login is %ss smartcard module = "%s"s smartcard removal action = "%s"s pam_fprintd is %ss pam_winbind is %ss pam_sss is %s by defaults! credential caching in SSSD is %ss6 SSSD use instead of legacy services if possible is %ss IPAv2 is %ss IPAv2 domain was %sjoineds not RH s IPAv2 server = "%s"s IPAv2 realm = "%s"s IPAv2 domain = "%s"s pam_cracklib is %s (%s)s pam_passwdqc is %s (%s)s pam_access is %s (%s)s0 pam_mkhomedir or pam_oddjob_mkhomedir is %s (%s)s' Always authorize local users is %s (%s)s; Authenticate system accounts against network services is %s(= R R1 RX RM RU R3 R4 R? R$ R R" RR R7 R5 RQ RO RE R; R9 R: RJ RF R[ RY RZ R\ Re R8 R@ R. R< R* R= R, RA R& Rh Ri RD RC Rt Rj Rs R0 Rw RB R{ Rx Rz Ry Rm R] Rp R^ Ra R` Rc Rb Rq R_ Rr ( R ( ( s! /usr/share/authconfig/authinfo.pyt printInfov s c C sw x. t t t t f D] } t | i | i q W| i o t i d t i d n t i d t i d t
S( Ns /usr/sbin/pwconvs /usr/sbin/grpconvs /usr/sbin/pwunconvs /usr/sbin/grpunconv( t
CFG_SHADOWt
CFG_PASSWDt CFG_GSHADOWt CFG_GROUPR R
R~ Re R3 R R$ ( R R! ( ( s! /usr/share/authconfig/authinfo.pyR s
c
C s d } | i p
| i o| i o| i i d d d i d d d i d d d } | i } | i } | p
d } n | d j o | d j o d Sd | o d p d
| | o d p d
| | i f } | o t i i d | n | i
p | o" t | | d
| i
\ } } n) t | g d t
} | i | i } | o( | d j o | i t d qq| d j o+ t d } | d | 7} | i | qn | d j S( Ni R
i R s R R s! /usr/bin/net join %s%s %s%s -U %ss -w RH s -S s [%s]
s sword:R s' Winbind domain join was not successful.s] Winbind domain join was not successful. The net join command failed with the following error:s
( RO Rj R R; R RE R9 R R R R R R R$ R R R} R (
R R R R R t protocolt cmdR R t errmsg( ( s! /usr/share/authconfig/authinfo.pyt
joinDomain s8 9
"
c
C s d } | i o| i } | i } | i } | i } | i } | i o
d } n d } t d | o d p d | | o d p d | | o d p d | | o d p d | | | o d p d
f
} | o@ t i i
d | t | g d t }
|
i
|
i } n t | | d | \ } } | d j o
t | _ n | o( | d j o | i t d
qq| d j o+ t d } | d | 7} | i | qn | d j S( Ni s -NRH s! --noac %s%s %s%s %s%s %s%s %s %ss --domain=s --server=s --realm=s --principal=s --unattendeds -Ws [%s]
R s% IPAv2 domain join was not successful.se IPAv2 domain join was not successful. The ipa-client-install command failed with the following error:s
( RB Rx Ry Rz R R R| t PATH_IPA_CLIENT_INSTALLR R R R R$ R R R R{ R} R (
R R R R R RP t principalRg t nontpRQ R R RR ( ( s! /usr/share/authconfig/authinfo.pyt
joinIPADomain sB
c C s t d } t i | d S( Ns --uninstall --noac( RT R3 R ( R RQ ( ( s! /usr/share/authconfig/authinfo.pyt uninstallIPA s
c C s^ | pS | i o t i d t i d qZ y t i d WqZ t j
o qZ Xn t S( NR ( R1 R R R0 R: R$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyR s
c C s^ | i o | i o | p t i d | i n y6 t i t t i d | p t i d n Wn t j
o n XyC t i t
t i d | p t i d t i d n WqZt j
o qZXn | p t i d n yP t i t
| p+ y t i d Wq6t j
o q6Xn t i d Wn t j
o n Xt
S( Ns /bin/domainname t rpcbindt ypbinds /bin/domainname "(none)"( RR R5 R3 R R t PATH_RPCBINDR R R0 R: t PATH_YPBINDR R R$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyR # s>
c C s/ t | i p
| i o | i t d | t S( Nt nslcd( R R? RA R2 t
PATH_NSLCDR$ ( R R ( ( s! /usr/share/authconfig/authinfo.pyR E s
c C s$ t | i p | i t d | d S( NRt ( R RO Rj t PATH_WINBIND( R R ( ( s! /usr/share/authconfig/authinfo.pyR L s c C s | i o
| i p7 | i o t i i t p | i o t i i t } | i p | i p | i p | } t | t
d | p# | o | i p | i p | i d S( Nt sssd( R[ Rs R3 R t existst PATH_SSSD_CONFIGR2 Rv RB R t PATH_SSSD( R R t explicitenableR ( ( s! /usr/share/authconfig/authinfo.pyR Q s c C sE | i o7 t i d t d f t i o t t t d | n d S( Ns %s/pam_%s.soR t oddjobd( Rc R3 Rv R R
R R$ t PATH_ODDJOBD( R R ( ( s! /usr/share/authconfig/authinfo.pyR \ s
c C s: x | i D] } | | q
W| i o | i n d S( N( R R RX ( R R R ( ( s! /usr/share/authconfig/authinfo.pyt postd s
c C s | i p
| i og y t i | i WnB t j
o6 \ } } | t i j o t i | i d qm n Xt | i St
S( Ni ( R? RA R3 R R( R: RA t ENOENTR R R ( R R R ( ( s! /usr/share/authconfig/authinfo.pyt testLDAPCACertsj s c C sJ | i p
| i o2 | i p d | i j o t i d | i n d S( Ns ldaps:s /usr/sbin/cacertdir_rehash ( R? RA R$ R R3 R R( ( R ( ( s! /usr/share/authconfig/authinfo.pyt rehashLDAPCACertsu s c C s | i p t S| i yW t i | i } t | i d t d } | i | i | i
| i
Wn0 t t t
f j
o | i t d t SX| i t S( NR i s Error downloading CA certificate( R R Ri t urllib2t urlopenRG R( t LDAP_CACERT_DOWNLOADEDR R R; R< R: R R} R Rj R$ ( R t readft writef( ( s! /usr/share/authconfig/authinfo.pyt downloadLDAPCACertz s
c
C s | d d j o t d | } n | | _ t | pm yS t i | } x= | D]5 } y t i | d | WqR t j
o qR XqR WWq t j
o q Xn d S( Ni R s /backup-( R3 R~ R R3 R R R: ( R R R R= ( ( s! /usr/share/authconfig/authinfo.pyR2 s
c C sA | i | t } x' t D] } | i | i o | } q W| S( N( R2 R$ R R
R~ ( R R R R! ( ( s! /usr/share/authconfig/authinfo.pyt
saveBackup s
c C sT | d d j o t d | } n t } x$ t D] } | i | o | } q0 W| S( Ni R s /backup-( R3 R$ R R
( R R R R! ( ( s! /usr/share/authconfig/authinfo.pyt
restoreBackup s c C s | i t d S( Ns /last( Rr R3 ( R ( ( s! /usr/share/authconfig/authinfo.pyt restoreLast s (L R R R R R R R R R R R R R R R R R R R R# R7 R RU R R R R R R R R R R R R R R R R R R R R R R R R R R R% R R R R1 R R6 RJ RK R RS RW RX R R R R R R Rg Ri Rj Rp R2 Rq Rr Rs ( ( ( s! /usr/share/authconfig/authinfo.pyR s * 9 A '
. . U u
5 6
C A
I J
H + & S G # ( " ( ( ( ( ( ( R R3 R R6 R R R R R R: R RA Rk R R R t
subprocessR t gettextt lgettextR R t ImportErrorR RJ RK R& R R) R R+ R R- R R t globalst LIBDIRR t PATH_PWCONVR[ R t
PATH_NSCD_PIDR^ t PATH_NSLCD_PIDt PATH_DBBINDt PATH_DBBIND_PIDt PATH_DBIBINDt PATH_DBIBIND_PIDt PATH_HESIODBINDt PATH_HESIODBIND_PIDt
PATH_LDAPBINDt PATH_LDAPBIND_PIDt
PATH_ODBCBINDt PATH_ODBCBIND_PIDR_ t PATH_WINBIND_PIDRc t
PATH_SSSD_PIDR\ t PATH_YPBIND_PIDRf t PATH_ODDJOBD_PIDt PATH_SEBOOLt
PATH_SCEVENTDt PATH_SCEVENTD_PIDR t PATH_LIBNSS_DBt PATH_LIBNSS_LDAPR R t PATH_LIBNSS_NISt PATH_LIBNSS_HESIODt PATH_LIBNSS_ODBCBINDt PATH_LIBNSS_WINBINDt PATH_LIBNSS_WINSt PATH_LIBNSS_SSSt
PATH_PAM_KRB5t
PATH_PAM_LDAPt PATH_PAM_WINBINDt PATH_PAM_PKCS11t PATH_PAM_FPRINTDt PATH_PAM_SSSR t PATH_WINBIND_NETRT R Rm R3 Rb t LOGIC_REQUIREDR t LOGIC_SUFFICIENTt LOGIC_OPTIONALR R t LOGIC_PKCS11R R R R R R R R R R R! R# R( R) R* R2 RC RG RL RO RQ RU t argv_unix_autht argv_unix_passwordt
argv_afs_autht argv_afs_passwordt argv_cracklib_passwordt argv_passwdqc_passwordt
argv_eps_autht argv_eps_passwordt argv_fprintd_autht argv_pkcs11_authR t argv_krb5_authR t argv_krb5_passwordt argv_ldap_autht argv_ldap_passwordt
argv_otp_autht argv_succeed_if_autht argv_succeed_if_accountt argv_succeed_if_sessiont argv_succeed_if_nonlogint argv_winbind_autht argv_winbind_passwordt
argv_sss_autht argv_sss_passwordt argv_keyinit_sessionRL t rangeR t ACCOUNTt SESSIONt PASSWORDR R R R R R R R' R R t _[1]R R R$ R R t DEFAULT_DNS_QUERY_SIZER R R R R R R R R R R R R R R R R R R R R R R R t CFG_KRBR R R0 R RI R( R* R, R R R R R RL RM RN RO R R R ( ( ( s! /usr/share/authconfig/authinfo.pyt s
- Z S 7]