File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/win_shadow.cpython-310.pyc
Back
o ;j� � @ s� d Z ddlZddlZddlZddlmZ e�e�Z zddl Z ddl Z ddl Z dZ W n ey4 dZ Y nw dZdd� Zd d � Zd d � Zd d� Zdd� Zdd� Zdd� ZdS )aZ Manage the shadow file .. important:: If you feel that Salt should be using this module to manage passwords on a minion, and it is using a different module (or gives an error similar to *'shadow.info' is not available*), see :ref:`here <module-provider-override>`. :depends: - pywintypes - win32security - winerror � N)�CommandExecutionErrorTFZshadowc C s t jj�� sdS ts dS tS )z' Only works on Windows systems )Fz8Module win_shadow: module only works on Windows systems.)Fz(Module win_shadow: Missing Win32 modules)�salt�utils�platformZ is_windows� HAS_WIN32�__virtualname__� r r �K/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/win_shadow.py� __virtual__% s r c C sN t d | d�}| dddddddd�}|r%|d d|d dddd|d d�}|S ) a Return information for the specified user. .. note:: This just returns dummy data so that salt states can work. Args: name (str): The name of the user account to show. CLI Example: .. code-block:: bash salt '*' shadow.info root � user.info��name� )r �passwdZlstchg�min�max�warnZinact�expirer Z UnavailableZpassword_changed�expiration_date��__salt__)r �info�retr r r r 0 s* � � r c C � t d | |d�S )aa Set the expiration date for a user account. Args: name (str): The name of the user account to edit. expire (str): The date the account will expire. Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' shadow.set_expire <username> 2016/7/1 � user.update)r r )r r r r r � set_expire] � r c C � t d | dd�S )aZ Require the user to change their password the next time they log in. Args: name (str): The name of the user account to require a password change. Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' shadow.require_password_change <username> r T)Zexpiredr r r r r �require_password_changes � r c C r )a Unlocks a user account. Args: name (str): The name of the user account to unlock. Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' shadow.unlock_account <username> r T��unlock_accountr r r r r r! � r r! c C r )aF Set the password for a named user. Args: name (str): The name of the user account. password (str): The new password. Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' shadow.set_password root mysecretpassword r �r �passwordr r" r r r � set_password� r r$ c C s� t jj�| �\}}td | �}|r|�dd�nd}z t�|||tjtj �}W n� t j y� } z�|j t j t jfv rd|sVtd | �}|rV|�dd�rVt�d| � td | dd� t�d|j� W Y d }~dS |j t jt jt jt jt jt jt jt jt jf v r�t�d |j� W Y d }~dS |j t jkr�d | � d �} t�| � t | ��d |j � d|j� �} t�| � t | ��d }~ww |� � t�d� dS )u� Verify the password for a Windows user account by attempting a network logon. This uses ``LOGON32_LOGON_NETWORK`` which does not create an interactive session and typically does not generate audit log events. .. note:: This is Microsoft's documented recommended method for validating credentials on Windows. There is no equivalent of ``/etc/shadow`` on Windows — the NT hash stored in the SAM database is inaccessible even to SYSTEM at runtime. ``LogonUser`` with ``LOGON32_LOGON_NETWORK`` is the only supported approach. See `How to validate user credentials on Microsoft operating systems <https://support.microsoft.com/en-us/help/180548/how-to-validate-user-credentials-on-microsoft-operating-systems>`_ .. warning:: A wrong password will increment the account's bad-logon counter. If the counter reaches the lockout threshold, the account will be locked. This function detects that situation and automatically unlocks the account if the lockout was caused by this call (i.e. the account was not already locked beforehand). If the account was already locked, a ``CommandExecutionError`` is raised because the password cannot be verified in that state. If the logon attempt causes the account to become locked (i.e. the bad password pushed the counter over the threshold), the account is automatically unlocked — but only if it was not already locked before this call. Args: name (str): The username to verify. Accepts plain names (local accounts), UPN format (``user@domain``), or down-level format (``DOMAIN\user``). password (str): The password to verify. Returns: bool: ``True`` if the password is correct (or correct but the account has some other restriction such as being disabled or expired). ``False`` if the password is wrong. Raises: CommandExecutionError: If the account is locked (cannot verify) or an unexpected error occurs. CLI Example: .. code-block:: bash salt '*' shadow.verify_password <username> <password> r Zaccount_lockedFzCshadow.verify_password: password check locked account %s, unlockingr Tr z1shadow.verify_password: password is not valid: %sNz:shadow.verify_password: password is valid (restricted: %s)z!shadow.verify_password: account 'z#' is locked, cannot verify passwordz)shadow.verify_password: unexpected error z: z)shadow.verify_password: password is valid) r r Z win_runasZsplit_usernamer �get� win32securityZ LogonUserZLOGON32_LOGON_NETWORKZLOGON32_PROVIDER_DEFAULT� pywintypes�error�winerrorZERROR_LOGON_FAILUREZERROR_WRONG_PASSWORD�log�debug�strerrorZERROR_ACCOUNT_DISABLEDZERROR_ACCOUNT_EXPIREDZERROR_PASSWORD_EXPIREDZERROR_PASSWORD_MUST_CHANGEZERROR_ACCOUNT_RESTRICTIONZERROR_INVALID_LOGON_HOURSZERROR_INVALID_WORKSTATIONZERROR_LOGON_NOT_GRANTEDZ ERROR_LOGON_TYPE_NOT_GRANTEDZERROR_ACCOUNT_LOCKED_OUTr �Close) r r# Z user_name�domainZpre_infoZ pre_locked�handle�excZ post_info�msgr r r �verify_password� sl 5 �� �� � ��/ r2 )�__doc__�loggingZsalt.utils.platformr Zsalt.utils.win_runasZsalt.exceptionsr � getLogger�__name__r* r' r& r) r � ImportErrorr r r r r r! r$ r2 r r r r �<module> s, � -
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings