3

-�_g��@sbdd
lZdd
l
Z
ddlmZmZmZmZ
Gdd�de�ZGdd�dee�ZGdd�deee�Z	d
S)	�N)�Plugin�RedHatPlugin�DebianPlugin�UbuntuPluginc@s0eZ
dZd
ZdZdZdZdZdd�Zd	d
�Z	dS)�Krb5a:
This plugin handles the collection of kerberos authentication config
    files and logging. Users should expect to see their krb5 config(s) in the
    final archive, along with krb5 logging and `klist` output.

    kdc configs and acls will also be collected from the distribution-spcecific
    kdc directory.
    zKerberos authenticationZkrb5�identity�systemNc

Cs\|jd
d|j
�d�|j
�d�dg�

|j�
|jddd�
|jd	|j
�d
��

|jd�

dS)Nz/etc/krb5.confz/etc/krb5.conf.d/*z
/kadm5.aclz	/kdc.confz/var/log/kadmind.logz/var/log/krb5kdc.logZkerberos_kdc_log)
Ztagszklist -ket z/.k5*zklist -ket /etc/krb5.keytab)Z
add_copy_spec�kdcdir�
collect_kinit�add_cmd_output)
�self�r
�/usr/lib/python3.6/krb5.py�setups










z
Krb5.setupc
Cs�tj
�}
d
}|j|�
r�t|ddd��v}xn|D]f}tjd|tj�rn|
jd�
ddd	�j�}
|j	d
|
�d��

Ptjd|tj�r,|j	d
|
�d
��

Pq,WWdQRXdS)a)

        Collect the kinit command output for the system with id_provider "AD"
        or "IPA" domains.

        While integrating the Linux M/c with AD the realmd will create a
        computer object on the AD side. The realmd and AD restrict the
        Hostname/SPN to 15 Characters.
        z/etc/sssd/sssd.conf�
rzutf-8)
�encodingz\s*id_provider\s*=\s*ad�
.r
N�zMKRB5_TRACE=/dev/stdout                                             kinit -k 'z$'z\s*id_provider\s*=\s*ipa�
')
�socketZgetfqdnZpath_isfile�open�re�match�
IGNORECASE�split�upperr)rZhostnameZ	sssd_conf�
f�liner
r
rr
+s 



















zKrb5.collect_kinit)rr)
�__name__�
__module__�__qualname__�__doc__Z
short_descZplugin_nameZprofilesr	rr
r
r
r
rrs



rc@seZ
dZdZdZdS)�
RedHatKrb5�	krb5-libs�krb5-serverz/var/kerberos/krb5kdcN)r#r$)rrr �packagesr	r
r
r
rr"Gs
r"c@seZ
dZdZdZdS)�
UbuntuKrb5�krb5-kdc�krb5-config�	krb5-userz/var/lib/krb5kdcN)r'r(r))rrr r%r	r
r
r
rr&Ms
r&)
rrZsos.report.pluginsrrrrrr"r&r
r
r
r�<module>s


7