File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/win_useradd.cpython-310.pyc
Back
o ;j:| � @ s� d Z ddlZddlZddlZddlZddlmZ ddlZddlZddl Zddl Zddl Zddl Zddl ZddlmZ e�e�Zz(ddlZddlZddlZddlZddlZddlZddlZddlZddlZdZ W n e yr dZ Y nw dZ dd � Z d0d d �Z d1d d �Z!d2dd�Z"dd� Z#dd� Z$dd� Z%dd� Z&dd� Z'dd� Z(d d � Z)d d � Z*d3d d!�Z+d"d#� Z,d$d%� Z-d&d'� Z.d4d(d)�Z/d*d+� Z0d,d-� Z1d4d.d/�Z2dS )5a6 Module for managing Windows Users. .. important:: If you feel that Salt should be using this module to manage users on a minion, and it is using a different module (or gives an error similar to *'user.info' is not available*), see :ref:`here <module-provider-override>`. :depends: - pywintypes - win32api - win32con - win32net - win32netcon - win32profile - win32security - win32ts - wmi .. note:: This currently only works with local user accounts, not domain accounts � N)�datetime)�CommandExecutionErrorTF�userc C s t jj�� sdS ts dS tS )z. Requires Windows and Windows Modules )Fz Module win_useradd: Windows Only)Fz)Module win_useradd: Missing Win32 Modules)�salt�utils�platformZ is_windows�HAS_WIN32NET_MODS�__virtualname__� r r �L/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/win_useradd.py� __virtual__= s r c C s i } | r t | �| d< ndS |rt |�| d< nd| d< tj| d< || d< || d< tj| d< || d < z t�dd | � W n1 tjyj } z$t�d | � t�d | j� t�d | j � t�d| j � | j W Y d} ~ S d} ~ ww t | |||d� |r|t | |�} | S d} | S )a� Add a user to the minion. Args: name (str): The username for the new account. password (:obj:`str`, optional): User's password in plain text. Default is ``None``. fullname (:obj:`str`, optional): The user's full name. Default is ``None``. description (:obj:`str`, optional): A brief description of the user account. Default is ``None``. groups (:obj:`str`, optional): A list of groups to add the user to. (see chgroups) Default is ``None``. home (:obj:`str`, optional): The path to the user's home directory. Default is ``None``. homedrive (:obj:`str`, optional): The drive letter to assign to the home directory. Must be the Drive Letter followed by a colon. ie: ``U:``. Default is ``None``. profile (:obj:`str`, optional): An explicit path to a profile. Can be a UNC or a folder on the system. If left blank, windows uses its default profile directory. Default is ``None``. logonscript (:obj:`str`, optional): Path to a login script to run when the user logs on. Default is ``None``. Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' user.add name password �nameF�passwordNZpriv�home_dir�comment�flags� script_path� zFailed to create user %s�nbr: %s�ctx: %s�msg: %s)r � homedrive�profile�fullnameT) �str� win32netconZUSER_PRIV_USERZ UF_SCRIPT�win32netZ NetUserAdd�error�log�winerror�funcname�strerror�update�chgroups) r r r � description�groups�homer r � logonscript� user_info�exc�retr r r �addJ s6 C ���r+ c C s� z t �dt| �d�}W n1 t jy< } z$t�d| � t�d|j� t�d|j� t�d|j� |jW Y d}~S d}~ww |rFt|�|d< nd|d< |rP||d< |rV||d < |r\||d < |rb||d < |rh||d < |rn||d < |r�|dkrztj |d< n"z t j j � |�}W n ttfy� d|� � Y S w t|�� �|d< | dur�| r�d|d< nd|d< | dur�| r�|d tjO < n |d tj M < | dur�| r�|d tj M < | dur�| r�|d tjO < n |d tj M < | du�r | �r|d tjO < n |d tj M < z t �dt| �d|� W dS t j�yJ } z$t�d| � t�d|j� t�d|j� t�d|j� |jW Y d}~S d}~ww )a# Updates settings for the Windows user. Name is the only required parameter. Settings will only be changed if the parameter is passed a value. .. versionadded:: 2015.8.0 Args: name (str): The username to update. password (:obj:`str`, optional): New user password in plain text. Default is ``None``. fullname (:obj:`str`, optional): The user's full name. Default is ``None``. description (:obj:`str`, optional): A brief description of the user account. Default is ``None``. home (:obj:`str`, optional): The path to the user's home directory. Default is ``None``. homedrive (:obj:`str`, optional): The drive letter to assign to the home directory. Must be the Drive Letter followed by a colon. ie: ``U:``. Default is ``None``. logonscript (:obj:`str`, optional): The path to the logon script. Default is ``None``. profile (:obj:`str`, optional): The path to the user's profile directory. Default is ``None``. expiration_date (:obj:`date`, optional): The date and time when the account expires. Can be a valid date/time string. To set to never expire pass the string 'Never'. Default is ``None``. expired (:obj:`bool`, optional): Pass ``True`` to expire the account. The user will be prompted to change their password at the next logon. Pass ``False`` to mark the account as 'not expired'. You can't use this to negate the expiration if the expiration was caused by the account expiring. You'll have to change the ``expiration_date`` as well. Default is ``None``. account_disabled (:obj:`bool`, optional): ``True`` disables the account. ``False`` enables the account. Default is ``None``. unlock_account (:obj:`bool`, optional): ``True`` unlocks a locked user account. ``False`` is ignored. Default is ``None``. password_never_expires (:obj:`bool`, optional): ``True`` sets the password to never expire. ``False`` allows the password to expire. Default is ``None``. disallow_change_password (:obj:`bool`, optional): ``True`` blocks the user from changing the password. ``False`` allows the user to change the password. Default is ``None``. Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' user.update bob password=secret profile=C:\Users\Bob home=\server\homeshare\bob homedrive=U: N� zFailed to update user %sr r r r r �home_dir_driver r � full_namer �Never� acct_expireszInvalid Date/Time Format: r �password_expiredr r T)r �NetUserGetInfor r r r r r! r � TIMEQ_FOREVERr r Z dateutilsZ date_cast� ValueError� RuntimeError�int� timestamp�UF_ACCOUNTDISABLE� UF_LOCKOUT�UF_DONT_EXPIRE_PASSWD�UF_PASSWD_CANT_CHANGEZNetUserSetInfo)r r r r$ r& r r' r �expiration_date�expired�account_disabledZunlock_account�password_never_expires�disallow_change_passwordr( r) Zdt_objr r r r" � s� q �� � � ��r" c C s� z t �dt| �d�}W n1 t jy< } z$t�d| � t�d|j� t�d|j� t�d|j� |jW Y d}~S d}~ww zt� � }W n- tjyp } z t�d� t�d|j� t�d|j� t�d|j� W Y d}~nd}~ww d}d}|D ]}t� d|d tj �| kr�|d }d }qw|r�|r�z t� tj |d � W n9 tjy� } z$t�d| � t�d|j� t�d|j� t�d|j� |jW Y d}~S d}~ww t�d | � dS |�r&z t| �} t�| � W nC tj�y% } z5|j\} } } | d kr�n$t�d | � t�d|j� t�d|j� t�d|j� |jW Y d}~S W Y d}~nd}~ww z t �dt| �� W d S t j�yc } z$t�d| � t�d|j� t�d|j� t�d|j� |jW Y d}~S d}~ww )a Remove a user from the minion Args: name (str): The name of the user to delete purge (:obj:`bool`, optional): Boolean value indicating that the user profile should also be removed when the user account is deleted. If set to ``True`` the profile will be removed. Default is ``False``. force (:obj:`bool`, optional): Boolean value indicating that the user account should be deleted even if the user is logged in. ``True`` will log the user out and delete user. Default is ``False``. Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' user.delete name Nr, zUser not found: %sr r r zNo logged in users foundFZ SessionIdTz User %s is currently logged in.� z Failed to remove profile for %szFailed to delete user %s)r r2 r r r r r r! �win32tsZWTSEnumerateSessionsZWTSQuerySessionInformationZ WTSUserNameZWTSLogoffSessionZWTS_CURRENT_SERVER_HANDLE� get_user_sid� win32profileZ DeleteProfile� pywintypes�argsZ NetUserDel) r �purge�forcer( r) Z sess_listZ logged_inZ session_idZsess�sid�number�context�messager r r �deleteg s� �� �� ���� �� ��� � ��rM c C s t jjjddd� t| �S )z� Deprecated function. Please use get_user_sid instead CLI Example: .. code-block:: bash salt '*' user.get_user_sid jsnuffy i� zA'getUserSid' is being deprecated. Please use get_user_sid instead)�versionrL )r r ZversionsZ warn_untilrC )�usernamer r r � getUserSid� s �rP c C sj t | t�s t| �} t�� }| �d�dkr"| �d�d }| �d�d } |�� }t�t� d|d | �d �S )z� Get the Security ID for the user Args: username (str): The username for which to look up the SID Returns: str: The user SID CLI Example: .. code-block:: bash salt '*' user.get_user_sid jsnuffy �\���r N) � isinstancer �win32apiZGetComputerName�find�split�upper� win32security�ConvertSidToStringSidZLookupAccountName)rO �domainr r r rC � s �rC c C s( t | �s t�d| � dS t| |d�du S )aB Set the user's password Args: name (str): The username for which to set the password password (str): The new password Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' user.setpassword jsnuffy sup3rs3cr3t zUser '%s' does not existF�r r T)�infor r r" r[ r r r � setpassword s r] c C sr t �t| ��} t �|��d��d�}t| �}|sdS ||d v r"dS d|� d| � d�}td |dd �}|d d kS ) aN Add user to a group Args: name (str): The username to add to the group group (str): The name of the group to which to add the user Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' user.addgroup jsnuffy 'Power Users' �'Fr% T�net localgroup "�" � /add� cmd.run_all�Z python_shell�retcoder ��shlex�quoter �lstrip�rstripr\ �__salt__�r �groupr �cmdr* r r r �addgroup" s rn c C sr t �t| ��} t �|��d��d�}t| �}|sdS ||d vr"dS d|� d| � d�}td |dd �}|d d kS ) a` Remove user from a group Args: name (str): The username to remove from the group group (str): The name of the group from which to remove the user Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' user.removegroup jsnuffy 'Power Users' r^ Fr% Tr_ r` � /deleterb rc rd r re rk r r r � removegroupD s rp c K s� t jjjdi |��}|�dd�}|rt jj�|� |r t�d� t| �}|s(dS ||d kr0dS t| |d�s8dS t| �}|d |d krJ|d |kS dS ) a� Change the home directory of the user, pass ``True`` for persist to move files to the new home directory if the old home directory exist. Args: name (str): The name of the user whose home directory you wish to change home (str): The new location of the home directory Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' user.chhome foo \\fileserver\home\foo True �persistFz6Ignoring unsupported 'persist' argument to user.chhomer& T)r r& Nr ) r r rF Z clean_kwargs�popZinvalid_kwargsr r\ r" )r r& �kwargsrq Zpre_infoZ post_infor r r �chhomeh s" rt c C � t | |d�S )at Change the profile directory of the user Args: name (str): The name of the user whose profile you wish to change profile (str): The new location of the profile Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' user.chprofile foo \\fileserver\profiles\foo �r r �r" rv r r r � chprofile� � rx c C ru )a[ Change the full name of the user Args: name (str): The username for which to change the full name fullname (str): The new value for the full name Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' user.chfullname user 'First Last' �r r rw rz r r r � chfullname� ry r{ c C sD t |t�r |�d�}dd� |D �}tt| ��}t� }t�t| ��} |sO|D ](}t�|��d��d�}||vrHd|� d| � d�}t d |d d � q%|� |� q%n|t|�krWd S |� t|��}|D ]3}||v rgq`t�|��d��d�}d|� d| � d �}t d |d d �}|d d kr�t � |d � dS q`tt| ��}t|| �d kS )a Change the groups this user belongs to, add append=False to make the user a member of only the specified groups Args: name (str): The username for which to change groups groups (str, list): A single group or a list of groups to assign to the user. For multiple groups this can be a comma-delimited string or a list. append (:obj:`bool`, optional): ``True`` adds the passed groups to the user's current groups. ``False`` sets the user's groups to the passed groups only. Default is ``True``. Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' user.chgroups jsnuffy Administrators,Users True �,c S s g | ]}|� d ��qS )� *)�strip)�.0�xr r r � <listcomp>� s z chgroups.<locals>.<listcomp>r^ r_ r` ro rb Trc ra rd r �stdoutF)rS r rV �set� list_groupsrf rg rh ri rj r+ �unionr r �len) r r% �appendZcurrent_groupsZexpected_groupsrl rm �outZ new_groupsr r r r# � s: � � r# c C s i }i }d}t jj�| �\}}t�d|� t�d|� |dkrHzt�d|�}|d }t�d|� W n tj yG t�dt | �� t | �}Y nw z t � ||d�}W n t j y[ Y nw |�r�g }zt � ||�}W n t j ys Y nw |d |d < |d |d < t�|d �|d < |d |d< |d |d< |d |d< t|d tj@ � |d< |d |d< |d |d< |d |d< |d |d< t�t�� �� �|d }t�|��d �|d < |d d kr�d |d < n t�|d ��d �|d < |d! t�tj�j kr�d |d"< n t�|d! ��d �|d"< |d# d$k|d%< |d �s t | |d �|d< |d& |d'< |d( |d)< |d' �s6|d |d'< ||d*< |d tj @ d k�rId+|d,< nd-|d,< |d tj@ d k�r\d+|d.< nd-|d.< |d tj @ d k�rod+|d/< nd-|d/< |d tj @ d k�r�d+|d0< nd-|d0< d1|d2< |S i S )3a� Return user information Args: name (str): Username for which to display information Returns: dict: A dictionary containing user information - fullname - username - SID - passwd (will always return None) - comment (same as description, left here for backwards compatibility) - description - active - logonscript - profile - home - homedrive - groups - password_changed - successful_logon_attempts - failed_logon_attempts - last_logon - account_disabled - account_locked - expiration_date - password_never_expires - disallow_change_password - gid CLI Example: .. code-block:: bash salt '*' user.info jsnuffy Nz user_name: %szdomain_name: %s�.ZDomainControllerNamez Found DC: %sz DC not found. Using username: %sr, r. r r Zuser_sid�uidr �passwdr r$ r Zactiver r' r Z bad_pw_countZfailed_logon_attemptsZ num_logonsZsuccessful_logon_attemptsZ password_agez%Y-%m-%d %H:%M:%SZpassword_changedZ last_logonr r/ r0 r< r1 r r= r r& r- r r% Fr? Tr> Zaccount_lockedr@ � �gid)!r r Z win_runasZsplit_usernamer �debugrX Z DsGetDcNamerE r r r r2 ZNetUserGetLocalGroupsrY �boolr r8 �time�mktimer �now� timetuple� fromtimestamp�strftime�ctypes�c_ulongr3 �value� _get_userprofile_from_registryr: r9 r; ) r r* �itemsZserver� user_nameZ domain_nameZdc_infor% Zsecsr r r r\ s� ' ��� � � �� r\ c C s2 t jjjdd|� �dd�d }t�d| ||� |S )a In case net user doesn't return the userprofile we can get it from the registry Args: user (str): The username, used in debug message sid (str): The sid to lookup in the registry Returns: str: Profile directory �HKEY_LOCAL_MACHINEz9SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ZProfileImagePath)Zhive�keyZvnameZvdataz.user %s with sid=%s profile is located at "%s")r r Zwin_regZ read_valuer r� )r rI Z profile_dirr r r r� � s ��r� c C sR t � }zt| �d }W n ty Y dS w |D ] }|�|�d�� qtt|��S )a Return a list of groups the named user belongs to Args: name (str): The username for which to list groups Returns: list: A list of groups to which the user belongs CLI Example: .. code-block:: bash salt '*' user.list_groups foo r% Fr} )r� r\ �KeyErrorr+ r~ �sorted�list)r Zugrpr rl r r r r� � s � r� c C s� dt v r | s t d S g }t� D ]3}i }t|�}d|d< |d |d< |d |d< |d |d< |d |d< d|d< |d |d < |�|� q|t d< |S ) a� Return the list of all info for all users Args: refresh (:obj:`bool`, optional): Refresh the cached user information. Useful when used from within a state function. Default is ``False``. Returns: dict: A dictionary containing information about all users on the system CLI Example: .. code-block:: bash salt '*' user.getent z user.getentr� r� r% r& r r� �shellr� )� __context__� list_usersr\ r� )Zrefreshr* r �stuffr( r r r �getent� s r� c C sr d} g }d}z'| s |r+d}t �ddtj| tj�\}}} |D ] }|�|d � q | s |s |W S t jy8 Y dS w )z� Return a list of all users on Windows Returns: list: A list of all users on the system CLI Example: .. code-block:: bash salt '*' user.list_users r TFNr )r Z NetUserEnumr ZFILTER_NORMAL_ACCOUNTZMAX_PREFERRED_LENGTHr� r )�resZ user_listZdowhileZusers�_r r r r r� � s( �� �r� c C s� t | �}|std| � d���t |�}|r td|� d���tjj�� �L tjdd�}z |j| d�d }W n t yB td| � d���w |� |�d }|dksgddd d d d d ddddd� }td� | ||| ���W d � n1 sqw Y t |�� d�|kS )aB Change the username for a named user Args: name (str): The username to change new_name (str): The new name for the current user Returns: bool: ``True`` if successful, otherwise ``False``. CLI Example: .. code-block:: bash salt '*' user.rename jsnuffy jshmoe zUser 'z' does not existz' already existsr )Z find_classes)�NameZSuccesszInstance not foundzInstance requiredzInvalid parameterzUser not foundzDomain not foundzHOperation is allowed only on the primary domain controller of the domainz;Operation is not allowed on the last administrative accountzROperation is not allowed on specified special groups: user, admin, local, or guestzOther API errorzInternal error) r r rA � r, � � � � � � z3There was an error renaming '{}' to '{}'. Error: {}Nr ) r\ r r r ZwinapiZCom�wmiZWMIZWin32_UserAccount� IndexErrorZRename�format�get)r �new_nameZ current_infoZnew_info�cr �resultZ error_dictr r r �rename sF �� ��� �(r� c C s� z| r t �tj�}nt �� }W n- tjy< } z t�d� t�d|j� t�d|j � t�d|j � t d|d��d}~ww |sCt d��|S )a� Get the username that salt-minion is running under. If salt-minion is running as a service it should return the Local System account. If salt is running from a command prompt it should return the username that started the command prompt. .. versionadded:: 2015.5.6 Args: sam (:obj:`bool`, optional): ``False`` returns just the username without any domain notation. ``True`` returns the domain with the username in the SAM format. Ie: ``domain\username``. Returns: str: Returns username CLI Example: .. code-block:: bash salt '*' user.current zFailed to get current userr r r )r\ N) rT Z GetUserNameEx�win32conZNameSamCompatibleZ GetUserNamerE r r r r r! r )Zsamr� r) r r r �currentT s � ��r� )NNNNNNNN) NNNNNNNNNNNNN)FF)T)F)3�__doc__r� �loggingrf r� r Zsalt.utils.argsr Zsalt.utils.dateutilsZsalt.utils.platformZsalt.utils.versionsZsalt.utils.win_regZsalt.utils.win_runasZsalt.utils.winapiZsalt.exceptionsr � getLogger�__name__r rE rT r� r r rD rX rB r� r � ImportErrorr r r+ r" rM rP rC r] rn rp rt rx r{ r# r\ r� r� r� r� r� r� r r r r �<module> s� � �d � <o "$- F +!J
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings