Your IP : 216.73.216.172

Current Path : /lib/python3/dist-packages/sos/report/plugins/__pycache__/
Upload File :
Current File : //lib/python3/dist-packages/sos/report/plugins/__pycache__/ipa.cpython-38.pyc

U

-�_gK�@s6ddlmZddlmZmZmZGdd�dee�ZdS)�)�glob)�Plugin�RedHatPlugin�SoSPredicatec@sheZdZdZdZdZdZdZdZdZ	dZ
dZdZdZ
dd	�Zd
d�Zdd
�Zdd�Zdd�Zdd�ZdS)�IpazIdentity, policy, auditZipa)ZidentityZapacheF)z/etc/ipa)�
ipa-serverz
ipa-client�freeipa-serverzfreeipa-clientNcCs>|�d�s|�d�s|�d�r"dS|�d�s6|�d�r:dSdS)	z Get IPA server version z
pki-serverz/var/lib/pkiz/usr/share/doc/ipa-server-4.2.0�v4z
pki-commonz/var/lib/pki-ca/�v3N)�is_installed�path_exists��self�r�8/usr/lib/python3/dist-packages/sos/report/plugins/ipa.py�check_ipa_server_version!s
��
�zIpa.check_ipa_server_versioncs*t�fdd��j�d��j�d�fD��S)z Check if any CA is installed c3s|]}��|�VqdS�N)r)�.0�pathr
rr�	<genexpr>/sz#Ipa.ca_installed.<locals>.<genexpr>z/conf/ca/CS.cfgz/conf/CS.cfg)�any�pki_tomcat_dir_v4�pki_tomcat_dir_v3r
rr
r�ca_installed,s


��zIpa.ca_installedcst�fdd�dD��S)z" Check if IPA server is installed c3s|]}��|�VqdSr)r)r�pkgr
rrr8sz+Ipa.ipa_server_installed.<locals>.<genexpr>)rr)rr
rr
r�ipa_server_installed6s�zIpa.ipa_server_installedcCsJ|dkr(|�dddddddd	d
dg
�n|dkrF|�d
dddddg�dS)z Collect PKI logs r	z!/var/log/pki/pki-tomcat/ca/debug*z!/var/log/pki/pki-tomcat/ca/systemz'/var/log/pki/pki-tomcat/ca/transactionsz(/var/log/pki/pki-tomcat/ca/selftests.logz"/var/log/pki/pki-tomcat/catalina.*z/var/log/pki/pki-ca-spawn.*z"/var/log/pki/pki-tomcat/kra/debug*z"/var/log/pki/pki-tomcat/kra/systemz(/var/log/pki/pki-tomcat/kra/transactionsz/var/log/pki/pki-kra-spawn.*r
z/var/log/pki-ca/debugz/var/log/pki-ca/systemz/var/log/pki-ca/transactionsz/var/log/pki-ca/selftests.logz/var/log/pki-ca/catalina.*N)�
add_copy_spec)r�ipa_versionrrr�collect_pki_logs<s,��zIpa.collect_pki_logscCs�d|_d|_d|_d|_|��}|��rZ|�d�|�d|�d��|�dd	d
ddd
g�|��rv|�d�|�	|�|�dddddddddddddddddd d!d"d#d$d%d&g�|d'kr�|j}|j}n|j}|j}|�
d(|�d)��|�|�d*��|�d+d,d-d.d/d0d1d2d3|�d4�|�d5�|�d6�g�|�
d7d8d9d:d;d<g�|�d=�t
|d>gd?�}|j
d@|dAdB�tdC�D]}|�
d(|����qn|�dDdEi�dS)FNz/var/lib/pki/pki-tomcatz/var/lib/pki-caz/etc/pki/pki-tomcat/caz/etc/pki-cazIPA server install detectedzIPA version is [�]z/var/log/ipaserver-install.logz"/var/log/ipaserver-kra-install.logz!/var/log/ipaserver-enable-sid.logz/var/log/ipareplica-install.logz"/var/log/ipareplica-ca-install.logz/var/log/ipa-custodia.audit.logz$CA is installed: retrieving PKI logsz/var/log/ipaclient-install.logz/var/log/ipaupgrade.logz/var/log/krb5kdc.logz#/var/log/dirsrv/slapd-*/logs/accessz#/var/log/dirsrv/slapd-*/logs/errorsz/etc/dirsrv/slapd-*/dse.ldifz&/etc/dirsrv/slapd-*/schema/99user.ldifz
/etc/hostsz/etc/httpd/alias/*z/etc/named.*z/etc/ipa/ca.crtz/etc/ipa/default.confz/etc/ipa/kdcproxy/kdcproxy.confz$/etc/ipa/kdcproxy/ipa-kdc-proxy.confz/etc/ipa/kdcproxy.confz/root/.ipa/log/cli.log�#/var/lib/certmonger/requests/[0-9]*z/var/lib/certmonger/cas/[0-9]*z/var/lib/ipa/ra-agent.pemz/var/lib/ipa/certs/httpd.crtz/var/kerberos/krb5kdc/kdc.crtz(/var/lib/ipa/sysrestore/sysrestore.statez)/var/log/ipa/healthcheck/healthcheck.log*z/var/log/ipaepn.log*r	zcertutil -L -d z/aliasz/CS.cfgz/etc/pki/nssdb/key*z/etc/dirsrv/slapd-*/key*z/etc/dirsrv/slapd-*/pin.txtz/etc/dirsrv/slapd-*/pwdfile.txtz/etc/httpd/alias/ipasession.keyz/etc/httpd/alias/key*z/etc/httpd/alias/pin.txtz/etc/httpd/alias/pwdfile.txtz/etc/named.keytabz/alias/key*z
/flatfile.txtz/password.confz certutil -L -d /etc/httpd/alias/zpki-server cert-find --show-allz%pki-server subsystem-cert-validate caz klist -ket /etc/dirsrv/ds.keytabz%klist -ket /etc/httpd/conf/ipa.keytabz,klist -ket /var/lib/ipa/gssproxy/http.keytabz/etc/dirsrv/slapd-*/schema/Z
certmonger)�services�getcert listZgetcert_list)ZpredZtagsz/etc/dirsrv/slapd-*/z(/var/log/ipa/healthcheck/healthcheck.logZfreeipa_healthcheck_log)rr�pki_tomcat_conf_dir_v4�pki_tomcat_conf_dir_v3rrZ
_log_debugrrrZadd_cmd_outputZadd_forbidden_pathZadd_dir_listingrrZ
add_file_tags)rrZpki_tomcat_dirZpki_tomcat_conf_dirZgetcert_predZcertdb_directoryrrr�setupUs�
�	

���	
���z	Ipa.setupcCsHd}d}|�d||�|�ddd�d}t|�D]}|�|dd	�q0dS)
Nz(\s*arg \"password )[^\"]*z
\1********z/etc/named.confr"z
(pin=)'(\d+)'z\1'***'r z(key_pin=)(\d+)z\1***)Zdo_file_subZdo_cmd_output_subr)r�matchZsubstZrequest_logsZrequest_logrrr�postproc�s��zIpa.postproc)�__name__�
__module__�__qualname__Z
short_descZplugin_nameZprofilesZ
ipa_serverZ
ipa_client�filesZpackagesrrr#r$rrrrr%r'rrrrrs"
jrN)rZsos.report.pluginsrrrrrrrr�<module>s