관리-도구
편집 파일: cc_set_passwords.cpython-39.pyc
a i*�gF) � @ s U d Z ddlZddlZddlZddlZddlmZ ddlmZm Z m Z m Z ddl m Z ddlmZ ddlmZ ddlmZmZmZ dd lmZ dd lmZ dd lmZ d egeg d �Z ee d< e� e �Z e!e"e!d�dd�Z#ee"e"d�dd�Z$ed�dd�Z%e"ee e!dd�dd�Z&d d d �Z'dS ) zFSet Passwords: Set user passwords and enable/disable SSH password auth� N)�List)�features� lifecycle�subp�util)�Cloud)�Config)� MetaSchema)� ALL_DISTROS�Distro�ug_util)�log_util)� PER_INSTANCE)�update_ssh_configZcc_set_passwords)�idZdistrosZ frequencyZactivate_by_schema_keys�meta)� users_list�pw_type�returnc s | sg S � fdd�| D �S )zDeither password or type: RANDOM is required, user is always requiredc s0 g | ](}|� d d�� kr|d |� dd�f�qS )�type�hash�name�password�RANDOM)�get)�.0�item�r � �E/usr/lib/python3.9/site-packages/cloudinit/config/cc_set_passwords.py� <listcomp>( s �z%get_users_by_type.<locals>.<listcomp>r )r r r r r �get_users_by_type# s � ��r! )�distro�service� extra_argsc G sZ z"| j d|g|�R � t�d� W n2 tjyT } zt�d|� W Y d }~n d }~0 0 d S )NZrestartzRestarted the SSH daemon.zm'ssh_pwauth' configuration may not be applied. Cloud-init was unable to restart SSH daemon due to error: '%s')Zmanage_service�LOG�debugr ZProcessExecutionError�warning)r" r# r$ �er r r �_restart_ssh_daemon0 s �r) )r" c C s� |� dd�}d}t| t�r*tjdddd� t�| �r:d}nRt�| �rJd }nBd |� d �}| d u sj| �� d krzt � d|| � nt � d|| � d S t ||i�}|s�t � d|� d S |� � r�t�ddddd|g�j�� }|�� dv r�t||d� n t||� d S )z�Apply sshd PasswordAuthentication changes. @param pw_auth: config setting from 'pw_auth'. Best given as True, False, or "unchanged". @param distro: an instance of the distro class for the target distribution @return: NoneZ ssh_svcnameZsshZPasswordAuthenticationz-Using a string value for the 'ssh_pwauth' key�22.2z&Use a boolean value with 'ssh_pwauth'.�Z deprecatedZdeprecated_versionZ extra_messageZyes�nozLeaving SSH config 'z ' unchanged.NZ unchangedz%s ssh_pwauth=%sz$%s Unrecognized value: ssh_pwauth=%sz/No need to restart SSH service, %s not updated.Z systemctlZshowz --propertyZ ActiveStatez--value)ZactiveZ activatingZ reloadingz --job-mode=ignore-dependencies)Z get_option� isinstance�strr � deprecater Zis_trueZis_false�lowerr% r& r' r Z uses_systemdr �stdout�stripr) )Zpw_authr" r# Zcfg_nameZcfg_valZbmsg�updated�stater r r �handle_ssh_pwauth< sH � �� �r5 )r �cfg�cloud�argsr c C s, |j }|r2|d }d|v r@d|d v r@|d d= nt�|dd �}d}g }g }d|v r�|d } tj| dg d�}d| v r�| d r�tjdd d d � t| d t�r�t� d � t�| d|�}n2tjd ddd � t� d� t�| d�} | r�| � � }t� | d|�}|�sD|�sD|�rDt � ||�\} } t �| �\} }| �r:d| |f g}n t�d� g }|�sT|�r�t|d�}dd� |D �} t|d�}dd� |D �}g }t|d�D ]<\} }t� }| �| � |�| |f� |�| � d|� �� �q�t�d�}|D ]�}|�dd �\}}|�|�d u�r&d|v�r&|�||f� |�|� nD|d k�s:|dk�rRt� }|�d||f � |�||f� | �|� �q�| �r�z t� d | � |j|d d � W n> t�y� } z$|�|� t�td!| � W Y d }~n d }~0 0 |�r6z t� d"|� |j|dd � W n> t�y4 } z$|�|� t�td#|� W Y d }~n d }~0 0 t|��rbd$d%�|�f}t j d&| d d d'� |�r�| }t j �r|||7 }g } |D ]^}z|� |� | �|� W n> t�y� } z$|�|� t�td(|� W Y d }~n d }~0 0 �q�| �r�t� d)| � t!|�"d*�|� t|��r(t� d+t|�� |d, �d S )-Nr �chpasswd�listr T�users)�defaultzConfig key 'lists'z22.3zUse 'users' instead.r+ z$Handling input for chpasswd as list.z The chpasswd multiline stringr* zUse string type instead.z0Handling input for chpasswd as multiline string.�expirez%s:%sz2No default or defined user to change password for.�textc S s g | ] \}}|�qS r r �r �user�_r r r r � � zhandle.<locals>.<listcomp>r c S s g | ] \}}|�qS r r r? r r r r � rB r �:z\$(1|2a|2y|5|6)(\$.+){2}� �RzChanging password for %s:F)Zhashedz,Failed to set passwords with chpasswd for %sz Setting hashed password for %s:z3Failed to set hashed passwords with chpasswd for %sz%Set the following 'random' passwords � z%s %s )�stderrZfallback_to_stdoutz Failed to set 'expire' for %sz Expired passwords for: %s usersZ ssh_pwauthz+%s errors occurred, re-raising the last one���)#r" r Zget_cfg_option_strZget_cfg_option_listr r/ r- r: r% r& � splitlinesZget_cfg_option_boolr Znormalize_users_groupsZextract_defaultr' r! �rand_user_password�append�re�compile�split�matchr9 � ExceptionZlogexc�len�joinr Z multi_logr Z EXPIRE_APPLIES_TO_HASHED_USERSZ expire_passwdr5 r ) r r6 r7 r8 r" r r= Zplistr ZchfgZ multiliner; Z_groupsr@ Z _user_config�errorsZplist_inZhashed_plist_inZ hashed_usersZrandlistrA �prog�line�u�pr( ZblurbZusers_to_expireZ expired_usersr r r �handle~ s� � � � � � � ( rX � c C s� | dk rt d��t�tj�t�tj�t�tj�t�tj�g}|�t t j | t |� tjtj tj tj d��� t� |� d�|�S )N� z.Password length must be at least 4 characters.)� select_from� )� ValueError�random�choice�string�digitsZascii_lowercaseZascii_uppercaseZ punctuation�extendr: r Zrand_strrQ ZshufflerR )ZpwlenZ res_rand_listr r r rJ s. � ������ rJ )rY )(�__doc__Zloggingr^ rL r` �typingr Z cloudinitr r r r Zcloudinit.cloudr Zcloudinit.configr Zcloudinit.config.schemar Zcloudinit.distrosr r r Z cloudinit.logr Zcloudinit.settingsr Zcloudinit.ssh_utilr r �__annotations__Z getLogger�__name__r% r: r. r! r) r5 rX rJ r r r r �<module> s2 � B