File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/states/__pycache__/user.cpython-310.pyc
Back
o ;jƠ � @ s d Z ddlZddlZddlZddlZddlZddlZddlZddl m Z e� e �Z ddd�Z dd d �Z dd d�Zddd�ZdS )a� Management of user accounts. ============================ The user module is used to create and manage user settings, users can be set as either absent or present .. code-block:: yaml fred: user.present: - fullname: Fred Jones - shell: /bin/zsh - home: /home/fred - uid: 4000 - gid: 4000 - groups: - wheel - storage - games testuser: user.absent � N)�CommandExecutionErrorFc C s� t | �} t |�}| |ks|s|�| �rdS dd� | �|�D �}|r'|�| �}n|�| �}t|�}|D ] }|�� D ]\}}||krAq8|| d |d krP|�|� q8q2t|�S )z4 Determine if the groups need to be changed Fc S s i | ] }|t d |��qS �z group.info��__salt__)�.0�name� r �D/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/user.py� <dictcomp>1 s z"_group_changes.<locals>.<dictcomp>�gid) �set�issubset�union�symmetric_difference� difference�list�items�remove�bool) ZcurZwantedr Zall_grps�diffZremainZdiff_grp�grp�infor r r �_group_changes' s$ ��r T� �?B � c . C s� dt v r t d | �} t d | �} | sdS i }!tt|pg |p g ��}"dd� | d D �}#i }$t|#�D ] \}%}&|#�|&�dkrO|&|$vrDg |$|&< |$|& �| d |% � q1|rX|du rb|sbtt|"| d ��}"|rn| d |krn||!d < |dur�| d |t d |�fvr�||!d < t d |dur�|n| d �}'t d | d �}(|'| d v s�|'|"v r�|'tjj� |$� � �v r�t d |'�})|$|) D ]}*|*| d v r�| d � |*� |*|"v r�|"� |*� q�n|'| d v r�| d � |'� |'|"v r�|"� |'� |(|'k�r |(| d v �r |(tjj� |$� � �v �rt d |(�})|$|) D ] }*| d � |*� �q n| d � |(� | | d v �rQ| |"v�rQ| tjj� |$� � �v �rJt d | �})|$|) D ] }*| d � |*� �q>n| d � | � t | d |"|��rd|"�s`|�rd|"|!d< |�rr| d |k�rr||!d < |�r�|�rz|n| d }+|+du�r�t j�|+��s�|+|!d< | �r�| d | k�r�| |!d< dt v �rVdt v �rV|�r�| �s�t d � },| d |,k�s�| d |,k�r�| �r�| d |k�r�||!d< | �r�| d dk�r�d|!d< |du�r�| d |k�r�||!d< |du�r�| d |k�r�||!d< |du�r | d |k�r ||!d< |du�r| d |k�r||!d < |du�r+| d |k�r+||!d < |�r9| d |k�r9||!d < | �rD| d �d ��rQ| du �rU| d �d ��rU| |!d!< nQdt v �r�tjj�� �r�|�r|| �s|| �r|d"t v �r|t d" | |��s|||!d< |�r�|d#k�r�tjj�| d �tjj�|�k�r�||!d < | du �r�| d$ �r�| |!d!< tjj�| �} tjj�| d% �| d%< | du�r�| d% | k�r�| |!d%< |�r�| d& |k�r�||!d'< |�r�| d( |k�r�||!d)< |�r�| d* |k�r�||!d+< |�r| d, |k�r||!d-< d.t v �r(| du�r(tjj�| �} tjj�| d/ �| d/< | d/ | k�r(| |!d/< d0t v �rO|du�rOtjj�|�}tjj�| d1 �| d1< | d1 |k�rO||!d1< d2t v �rv|du�rvtjj�|�}tjj�| d3 �| d3< | d3 |k�rv||!d3< d4t v �r�|du�r�tjj�|�}tjj�| d5 �| d5< | d5 |k�r�||!d5< td6 d7v �r�|�r�t d8 | �|k�r�||!d9< g }-| �s�d |!v �r�|-�d:�| d |�� | �s�d |!v �r�|-�d;�| d |�� |-�r�td<|-d=��|!S )>aU Return a dict of the changes required for a user if the user is present, otherwise return False. Updated in 2015.8.0 to include support for windows homedrive, profile, logonscript, and description fields. Updated in 2014.7.0 to include support for shadow attributes, all attributes supported as integers only. � shadow.info� user.infoFc S s g | ]}t d |��qS )�file.group_to_gidr )r �gnamer r r � <listcomp>y s �z _changes.<locals>.<listcomp>�groups� N�uidr r zfile.gid_to_group�home�homeDoesNotExist�shellzshadow.default_hash�passwdr T�empty_password�lstchg�date�min�mindays�max�maxdays�inact� inactdays�warn�warndays�expire�!� password_lockzshadow.verify_password���Zaccount_locked�fullname� homedrive� win_homedrive�profile� win_profile� logonscript�win_logonscript� description�win_descriptionzuser.chroomnumber� roomnumberzuser.chworkphone� workphonezuser.chhomephone� homephonez user.chother�other�kernel�ZOpenBSDZFreeBSD�user.get_loginclass� loginclassz�Changing uid ({} -> {}) not permitted, set allow_uid_change to True to force this change. Note that this will not change file ownership.z�Changing gid ({} -> {}) not permitted, set allow_gid_change to True to force this change. Note that this will not change file ownership.z-Encountered error checking for needed changes)r )r �sortedr � enumerate�count�append�salt�utils�data�flatten�valuesr r �os�path�isdir� startswith�platform� is_windows� dateutils�strftime�decode� __grains__�formatr ).r r# r r! �optional_groups� remove_groupsr$ � createhome�password�enforce_passwordr( r& r7 r@ rA rB rC rG r* r, r. r0 r2 r3 r9 r; r= r? �allow_uid_change�allow_gid_changer5 �lshad�lusrZchangeZ wanted_groupsZlusr_groups_gidsZ dupe_groups�idxZ_gidZ default_grpZold_default_grpZdupe_gidr ZnewhomeZ default_hash�errorsr r r �_changesD s: , �� �� � � �� � � � ��rg c% ? s | rU| rUt �d� ddddd�}%z0td | �d �d d �\}&}'}(})|'d kr*t �d � t �d |%�|'�� td | |(|%�|'�d�} W n tyT t �d� td | �} Y nw |durbtj j � t |��}|durotj j � t |��}|dur|tj j � t |��}|dur�tj j � t |��}|dur�tj j � t |��}t d dkr�d}| i dd| � d�d�}*|||fD ]}+t|+t �r�d|+v r�d|+� �|*d< d|*d < |* S q�g � |r�d d � |D �� � r�t�d �r� fd d �|D �}nd!�d�� ��|*d< d|*d < |*S |�rd"d � |D ���fd#d �|D �D ] },t �d$|,| � �qnd�|�r.|�r.t|��|�D ] }-t �d%|-| � �q#|�r=td& | �d'k�r=| }.n|}.z't| ||.|�|||| | | ||||||||||||| | | | | |"|#f d(|$i�}/W n t�y� }0 zd|*d < |0j|*d< |*W Y d}0~0S d}0~0ww |/�rOtd �r�d|*d < d)|*d< |/�� D ]%\}1}2|1dk�r�d*}2n |1d+k�r�|�s�d,}1|*d |1� d-|2� d.�7 < �q�� �r�|*d d/�d�� ��7 < |*S dtv �r�td | �}3t d d0v �r�td1 | �}4td2 | �}5d|/v �o�| }6d|/v �r|/d= | �s td3 | | � nt �d4� |/�d5d�du �r td6 | � d(|/v �rZ|/�d(�}7|7�s:tj j�� �r:td7 | � n |7�sDtd8 | � n|7�rUtj j�� �sUtd9 | � nt �d:� d;|/v �ri|/d;= td< | |� �fd=d>�}8d}9d?|/v �r�|/�d?�}2d@|/v�r�|8| |2� d}9d@|/v �r�|/�d@�}2|9�s�|8| |2� tj � |2��s�tdA |2|5dB |5dC dD� dE|/v �r�|/dE= tdF | |� dG|/v �r�|/dG= tdH | |� dI|/v �r�|/dI= tdJ | |� dK|/v �r�|/dK= tdL | |� dM|/v �r�|/dM= tdN | | � dO|/v �rtdP | |/�dO�dQ� dR|/v �rtdP | |/�dR�dS� dT|/v �r(tdP | |/�dT�dU� dV|/v �r8tdP | |/�dV�dW� dXd � t |/�D �D ]}1tdY|1� � | |/�|1�� �qAdZ|/v �rctd[ | |/�dZ�| � |/�ru|*�d\g �� d]�d^�|/��� td2 | �}:i };dtv �r�|3d | k�r�td | �};t d d0v �r�td1 | �}<|:D ]}1|:|1 |5|1 k�r�|:|1 |*d_ |1< �q�dtv �r�|;D ]!}1|3|1 |;|1 k�r�|1dk�r�d*|*d_ |1< �q�|;|1 |*d_ |1< �q�tj j�� �r�|6�r�d*|*d_ d< |*d_ �d`d� |*d_ �dad� t d d0v �r|<|4k�r|<|*d_ db< |*d_ �rdc| � �|*d< t| |||�|||| | | ||||||||||||| | | | | f dd|$dd��}/|/�rMde|/� �|*d< d|*d < |*S |/du �r�td �rxd|*d < d| � df�|*d< � �rv|*d dg�d�� ��7 < |*S |�r���r�|� �� n ��r��dd� }tj j�� �s�i dh| �dB|�dC|�dZ|�d?|�di|�dj|�dk|�dl|�dm|�dn|�do|�dp|�dq|�dr|!�db|�ds|�}=n | | || ||| | | dt� }=tdu d�i |=��}>|>du �r�dv| � dw�|*d< td2 | �|*d_< |�s�d'|*d_ d?< dtv �ratj j�� �satj j�!� �sa| �r<| �s<td3 | | � td | �};|;d | k�r6dx�| d*�|*d< d|*d < d*|*d_ dy< | �rg| �sgtd6 | � td | �};|;d d'k�rad| � dz�|*d< d|*d < d'|*d_ dy< |du�r�td< | |� td | �};|;da |k�r�d{�| |�|*d< d|*d < ||*d_ d;< |�r�tdF | |� td | �};|;d| |k�r�d}�| |�|*d< d|*d < ||*d_ dE< |�r�tdH | |� td | �};|;d~ |k�r�d�| |�|*d< d|*d < ||*d_ dG< |�r tdJ | |� td | �};|;d� |k�rd��| |�|*d< d|*d < ||*d_ dI< |�r6tdL | |� td | �};|;d� |k�r0d��| |�|*d< d|*d < ||*d_ dK< | �r_tdN | | � td | �};|;dM | k�rYd��| | �|*d< d|*d < | |*d_ dM< |*S tj j�� �r�| �r�| �s�td� | | ��s�dx�| d*�|*d< d|*d < d*|*d_ d< | �r�tdN | | � td | �};tj j"�#|;dM �tj j"�#| �k�r�d��| | �|*d< d|*d < |;dM |*d_ d�< |*S tj j�!� �r�| �r�| �s�td3 | | ��s�dx�| d*�|*d< d|*d < d*|*d_ d< |*S t|>t ��r�|>|*d< nd�| � �|*d< d|*d < |*S )�a� Ensure that the named user is present with the specified properties name The name of the user to manage uid The user id to assign. If not specified, and the user does not exist, then the next available uid will be assigned. gid The id of the default group to assign to the user. Either a group name or gid can be used. If not specified, and the user does not exist, then the next available gid will be assigned. allow_uid_change : False Set to ``True`` to allow the state to update the uid. .. versionadded:: 2018.3.1 allow_gid_change : False Set to ``True`` to allow the state to update the gid. .. versionadded:: 2018.3.1 usergroup If True, a group with the same name as the user will be created. If False, a group with the same name as the user will not be created. The default is distribution-specific. See the USERGROUPS_ENAB section of the login.defs(5) man page. .. note:: Only supported on GNU/Linux distributions .. versionadded:: 3001 groups A list of groups to assign the user to, pass a list object. If a group specified here does not exist on the minion, the state will fail. If set to the empty list, the user will be removed from all groups except the default group. If unset, salt will assume current groups are still wanted, and will make no changes to them. optional_groups A list of groups to assign the user to, pass a list object. If a group specified here does not exist on the minion, the state will silently ignore it. NOTE: If the same group is specified in both "groups" and "optional_groups", then it will be assumed to be required and not optional. remove_groups Remove groups that the user is a member of that weren't specified in the state, Default is ``True``. home The custom login directory of user. Uses default value of underlying system if not set. Notice that this directory does not have to exist. This also the location of the home directory to create if createhome is set to True. createhome : True If set to ``False``, the home directory will not be created if it doesn't already exist. .. warning:: Not supported on Windows or Mac OS. Additionally, parent directories will *not* be created. The parent directory for ``home`` must already exist. persist_home : False If set to ``True`` and not on Windows or Darwin, move contents of the home directory to the new location nologinit : False If set to ``True``, it will not add the user to lastlog and faillog databases. .. note:: Not supported on Windows. password A password hash to set for the user. This field is only supported on Linux, FreeBSD, NetBSD, OpenBSD, and Solaris. If the ``empty_password`` argument is set to ``True`` then ``password`` is ignored. For Windows this is the plain text password. For Linux, the hash can be generated with ``mkpasswd -m sha-256``. .. versionchanged:: 0.16.0 BSD support added. hash_password Set to True to hash the clear text password. Default is ``False``. enforce_password Set to False to keep the password from being changed if it has already been set and the password hash differs from what is specified in the "password" field. This option will be ignored if "password" is not specified, Default is ``True``. empty_password Set to True to enable password-less login for user, Default is ``False``. password_lock Set to ``False`` to unlock a user's password (or Windows account). On non-Windows systems ONLY, this parameter can be set to ``True`` to lock a user's password. Default is ``None``, which does not take action on the password (or Windows account). .. versionadded:: 3006.0 shell The login shell, defaults to the system default shell unique Require a unique UID, Default is ``True``. system Choose UID in the range of FIRST_SYSTEM_UID and LAST_SYSTEM_UID, Default is ``False``. loginclass The login class, defaults to empty (BSD only) User comment field (GECOS) support (currently Linux, BSD, and MacOS only): The below values should be specified as strings to avoid ambiguities when the values are loaded. (Especially the phone and room number fields which are likely to contain numeric data) fullname The user's full name roomnumber The user's room number (not supported in MacOS) workphone The user's work phone number (not supported in MacOS) homephone The user's home phone number (not supported in MacOS) other The user's other attribute (not supported in MacOS) If GECOS field contains more than 4 commas, this field will have the rest of 'em .. versionchanged:: 2014.7.0 Shadow attribute support added. Shadow attributes support (currently Linux only): The below values should be specified as integers. date Date of last change of password, represented in days since epoch (January 1, 1970). mindays The minimum number of days between password changes. maxdays The maximum number of days between password changes. inactdays The number of days after a password expires before an account is locked. warndays Number of days prior to maxdays to warn users. expire Date that account expires, represented in days since epoch (January 1, 1970). The below parameters apply to windows only: win_homedrive (Windows Only) The drive letter to use for the home directory. If not specified the home directory will be a unc path. Otherwise the home directory will be mapped to the specified drive. Must be a letter followed by a colon. Because of the colon, the value must be surrounded by single quotes. ie: ``- win_homedrive: 'U:'`` .. versionchanged:: 2015.8.0 win_profile (Windows Only) The custom profile directory of the user. Uses default value of underlying system if not set. .. versionchanged:: 2015.8.0 win_logonscript (Windows Only) The full path to the logon script to run when the user logs in. .. versionchanged:: 2015.8.0 win_description (Windows Only) A brief description of the purpose of the users account. .. versionchanged:: 2015.8.0 z Hashing a clear text password�md5Zblowfish�sha256�sha512)�1Z2a�5�6r r' �$� rk z7Using MD5 for hashing passwords is considered insecure!z;Re-using existing shadow salt for hashing password using %szshadow.gen_password)Z crypt_salt� algorithmzINo existing shadow salt found, defaulting to a randomly generated new oneNrD �WindowsFT�User z is present and up to date�r �changes�result�comment�,zUnsupported char ',' in rv ru c S s g | ] }t d |�s|�qS r r �r �xr r r r Z � zpresent.<locals>.<listcomp>�testc � g | ]}|� vr|�qS r r rx )�missing_groupsr r r d s z*The following group(s) are not present: {}c S s g | ] }t d |�r|�qS r r rx r r r r m rz c r| r r rx )�present_optgroupsr r r n s z0Optional group "%s" for user "%s" is not presentzCGroup "%s" specified in both groups and optional_groups for user %sr r r5 z5The following user attributes are set to be changed: zXXX-REDACTED-XXX�groupz ensure groupsz: � z groups (pending creation): {} rE rF r zshadow.set_passwordz0No password will be set when empty_password=Truer( zshadow.del_passwordzshadow.unlock_accountzshadow.unlock_passwordzshadow.lock_passwordz,Account locking is not available on Windows.r* zshadow.set_datec s4 t d dv rtd | |� d S td | |� d� d S )NrD )�Darwinrq z user.chhome)Zpersist)rZ r )r �val)� persist_homer r �_change_homedir� s z present.<locals>._change_homedirr$ r% z file.mkdirr# r i� r, zshadow.set_mindaysr. zshadow.set_maxdaysr0 zshadow.set_inactdaysr2 zshadow.set_warndaysr3 zshadow.set_expirer9 z user.update)r r8 r; )r r: r= )r r< r? )r r> c S s& g | ]}|d krd|� �t v r|�qS )r! �user.chr rx r r r r ! s r� r! z user.chgroups�warningszUnhandled changes: {}z, rt Zpassword_changedr) rG z Updated user )ra rb r5 z#These values could not be changed: z set to be addedz (pending groups: {})r r& �unique�systemr7 r@ rA rB rC r^ � nologinit� usergroup) r r_ r7 r> r! r$ r8 r: r< zuser.addz New user z createdz0User {} created but failed to set password to {}r_ z% created but failed to empty passwordz8User {} created but failed to set last change date to {}r+ z4User {} created but failed to set minimum days to {}r- z4User {} created but failed to set maximum days to {}r/ z5User {} created but failed to set inactive days to {}r1 z1User {} created but failed to set warn days to {}z3User {} created but failed to set expire days to {}zuser.setpasswordZexpiration_datezFailed to create new user r )$�log�debugr �split�warning�get� ValueErrorr rL rM rN rY �strrZ � isinstance�__opts__r[ �joinr � intersectionrg r �strerrorr �poprU rV rQ rR rS r rK �extendZ is_darwinrW rX )?r r# r r� r! r\ r] r$ r^ r� r_ Z hash_passwordr` r( r& r� r� r7 r@ rA rB rC rG r* r, r. r0 r2 r3 r9 r; r= r? r� ra rb r5 Z algorithms�_ZalgoZ shadow_saltZ shadow_hash�retZ gecos_fieldZmissing_optgroupZisectedZ changes_gidrt �exc�keyr� rc ZlcpreZpreZ_passwd_changedZpasslockr� Z_homedir_changedZpostZspostZlcpost�paramsru r )r} r� r~ r �present# s� w � � � � � �� � � � ��� � � �! �� � � � � � � � � �& � �������� � � � � ������ � � �� � � � � � �� � )� �� � ����� � r� c C s� | i ddd�}t d | �}|rotd r!d|d< d| � d �|d < |S ttjj�| ��}t d | ||�|d< d d � |D �}|d rbi |d< || D ] }d|d |� d�< qGd|d | < d| � �|d < |S d|d< d| � �|d < |S d| � d�|d < |S )a� Ensure that the named user is absent name The name of the user to remove purge Set purge to True to delete all of the user's files as well as the user, Default is ``False``. force If the user is logged in, the absent state will fail. Set the force option to True to remove the user even if they are logged in. Not supported in FreeBSD and Solaris, Default is ``False``. Tr rs r r{ Nru rr z set for removalrv z user.deletec S s h | ] }t d |�r|�qS r r )r �gr r r � <setcomp>L rz zabsent.<locals>.<setcomp>rt Zremovedz groupz Removed user FzFailed to remove user z is not present)r r� r rL rM �userZget_group_list)r �purge�forcer� rd Z beforegroupsZ aftergroupsr� r r r �absent1 s, �r� )F) NNNNTNTNTFNr r r r r NNr r r r NNNNNFFN)$NNNNNTNTFNFTFNTFNNNNNNNNNNNNNNNNFFFN)FF)�__doc__�loggingrQ Zsalt.utils.datarL Zsalt.utils.dateutilsZsalt.utils.platformZsalt.utils.userZsalt.utils.versionsZsalt.exceptionsr � getLogger�__name__r� r rg r� r� r r r r �<module> s� � b �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings