­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 3 hj5@sdZddlZddlZddlZddlmZddlmZGdddeZ Gdd d eZ Gd d d e Z Gd d d e Z Gddde Z Gddde ZGddde ZGddde ZGddde ZGddde ZGddde ZGddde ZGddde ZGd d!d!e ZGd"d#d#e ZGd$d%d%e Zd&d'Zd(d)ZGd*d+d+eZGd,d-d-eZGd.d/d/eZGd0d1d1eZGd2d3d3eZ dS)4z, Created on Sep 18, 2009 @author: sgallagh N) SSSDOptions)SSSDChangeConfc@s eZdZdS)SSSDConfigExceptionN)__name__ __module__ __qualname__r r /usr/lib/python3.6/__init__.pyrsrc@s eZdZdS) ParsingErrorN)rrrr r r r r sr c@s eZdZdS)AlreadyInitializedErrorN)rrrr r r r r sr c@s eZdZdS)NotInitializedErrorN)rrrr r r r r sr c@s eZdZdS)NoOutputFileErrorN)rrrr r r r rsrc@s eZdZdS)NoServiceErrorN)rrrr r r r rsrc@s eZdZdS)NoSectionErrorN)rrrr r r r rsrc@s eZdZdS) NoOptionErrorN)rrrr r r r rsrc@s eZdZdS)ServiceNotRecognizedErrorN)rrrr r r r rsrc@s eZdZdS)ServiceAlreadyExistsN)rrrr r r r rsrc@s eZdZdS) NoDomainErrorN)rrrr r r r rsrc@s eZdZdS)DomainNotRecognizedN)rrrr r r r rsrc@s eZdZdS)DomainAlreadyExistsErrorN)rrrr r r r rsrc@s eZdZdS)NoSuchProviderErrorN)rrrr r r r rsrc@s eZdZdS)NoSuchProviderSubtypeErrorN)rrrr r r r rsrc@s eZdZdS)ProviderSubtypeInUseN)rrrr r r r rsrcCsdd|DS)NcSsg|] }|jqSr )strip).0xr r r szstriplist..r )lr r r striplistsrcCs(g}x|D]}||kr |j|q W|S)N)append)Zoptions1Zoptions2overlapoptionr r r options_overlap"s  r#c@s<eZdZddZddZddZddZd d Zd d Zd S)SSSDConfigSchemacCstj||sd}|sd}yht|d}|j|WdQRXxBtddtj|D]*}t|d|}|j|WdQRXqRWWn,tk rYntk rt YnXt t t j ddkrtnt tttdd |_d d d |_dS) Nz/usr/share/sssd/sssd.api.confz/usr/share/sssd/sssd.api.drcSs tjd|S)Nz^sssd-.*\.conf$)research)fr r r 7sz+SSSDConfigSchema.__init__../r)boolintlongfloatstrlistNoneFT)falsetrue)r__init__openreadfpfilteroslistdirIOError SyntaxErrorr r,r-sys version_infor.r/r0r1 type_lookup bool_lookup)self schemafileschemaplugindirfdfiler r r r5*s2     zSSSDConfigSchema.__init__cCs|j|st|j|}d}d}d}d}i}x|j|D]}|d} t| jd} t| } |j| |} |j| |} |j| |}|dt j krt j |d}nd}| dkr| | ||df||d<q:| dkrFt | || kr| | ||| |f||d<q| t krt | || kr>| | ||| |gf||d<nyh| t krt | |tkr| | |||j| |jgf||d<n | | ||| | |gf||d<Wntk rtYnXnyd| t krt | |tkr| | |||j| |jf||d<n| | ||| | |f||d<Wntk rBtYnXq:| dkr | t kr^tg}x| |dD]~}t || kry@| t krt |tkr|j|j}n| |}|j|gWntk rtYnXn |j|gqpW| | |||f||d<q:tq:W|S) Nrrr+value,name) has_sectionroptionsstrip_comments_emptyrsplitlenr?r@rZoption_stringstyper1r,r0lower ValueErrorr extend)rAsectionrLZ PRIMARY_TYPEZSUBTYPEZ MANDATORYZDEFAULTZparsed_optionsr"Zunparsed_optionZ split_optionZ optionlenZ primarytypesubtypeZ mandatoryZdescZ fixed_optionsrnewvaluer r r get_optionsQs            zSSSDConfigSchema.get_optionscCs<|j|st||j||s.td||f|j||S)NzSection [%s] has no option [%s])rKr has_optionrrW)rArTr"r r r get_options    zSSSDConfigSchema.get_optioncs:|j|st||j|tfddjD}|S)Ncs,g|]$}|ddkr||dfqS)rJNr )rr)schema_optionsr r rsz1SSSDConfigSchema.get_defaults..)rKrrWdictkeys)rArTZdefaultsr )rZr get_defaultss    zSSSDConfigSchema.get_defaultscCsdd|jD}|S)NcSs@g|]8}|ddkr|djd r|djd r|dqS)rIservicedomainprovider) startswith)rrr r r rs z1SSSDConfigSchema.get_services..)sections)rA service_listr r r get_servicesszSSSDConfigSchema.get_servicescCsi}xf|jD]Z}|djd}|ddkrt|dkr|d|krPg||d<||dj|dgqWx |jD]}t||||<qvW|S)NrIr*rr`rFrr+)rbrNrOrSr\tuple)rA providersrTZ splitsectionkeyr r r get_providerss    zSSSDConfigSchema.get_providersN) rrrr5rWrYr]rdrhr r r r r$)s 'v  r$c@s4eZdZddZddZddZddZd d Zd S) SSSDConfigObjectcCsd|_i|_dS)N)rIrL)rAr r r r5szSSSDConfigObject.__init__cCs|jS)z Return the name of the object === Returns === The domain name === Errors === No errors )rI)rAr r r get_names zSSSDConfigObject.get_namecCs$||jjkr|j|St|dS)a Return the value of an service option optionname: The option to get. === Returns === The value for the requested option. === Errors === NoOptionError: The specified option was not listed in the service N)rLr\r)rA optionnamer r r rYs zSSSDConfigObject.get_optioncCs|jS)z Return a dictionary of name/value pairs for this object === Returns === A dictionary of name/value pairs currently in use for this object === Errors === No errors )rL)rAr r r get_all_optionss z SSSDConfigObject.get_all_optionscCs||jkr|j|=dS)z Remove an option from the object. If the option does not exist, it is ignored. === Returns === No return value. === Errors === No errors N)rL)rArkr r r remove_options zSSSDConfigObject.remove_optionN)rrrr5rjrYrlrmr r r r ris   ric@s8eZdZdZddZddZddZdd Zd d Zd S) SSSDServicez3 Object to manipulate SSSD service options cCs~tj|t|t s"t|tkr&t|j|s8t|||_ ||_ i|_ g|_ |j j |j jd|j j |j j|j dS)a\ Create a new SSSDService, setting its defaults to those found in the schema. This constructor should not be used directly. Use SSSDConfig.new_service() instead. name: The service name apischema: An SSSDConfigSchema? object created by SSSDConfig.__init__() === Returns === The newly-created SSSDService object. === Errors === TypeError: The API schema passed in was unusable or the name was not a string. ServiceNotRecognizedError: The service was not listed in the schema r^N)rir5 isinstancer$rPr0 TypeErrorrKrrIschemarLhidden_optionsupdater])rA servicename apischemar r r r50s  zSSSDService.__init__cCs6i}|jjd}|j||jj|j}|j||S)aI List options for the service, including the mandatory flag. === Returns === A dictionary of configurable options. This dictionary is keyed on the option name with a tuple of the variable type, subtype ('None' if the type is not a collection type), whether it is mandatory, the translated option description, and the default value (or 'None') as the value. Example: { 'enumerate' : (bool, None, False, u'Enable enumerating all users/groups', True) } === Errors === No errors r^)rqrWrsrI)rArLrZr r r list_options_with_mandatory[s    z'SSSDService.list_options_with_mandatorycCsR|j}i}x@|jD]4}||d||d||d||df||<qW|S)a  List all options that apply to this service === Returns === A dictionary of configurable options. This dictionary is keyed on the option name with a tuple of the variable type, subtype ('None' if the type is not a collection type), the translated option description, and the default value (or 'None') as the value. Example: { 'services' : (list, str, u'SSSD Services to start', ['nss', 'pam']) } === Errors === No Errors rrrFrJ)rvr\)rArLfiltered_optionsrgr r r list_optionsxs 4zSSSDService.list_optionscCs^|j}i}xL|jD]@}||dr||d||d||d||df||<qW|S)a List all mandatory options that apply to this service === Returns === A dictionary of configurable options. This dictionary is keyed on the option name with a tuple of the variable type, subtype ('None' if the type is not a collection type), the translated option description, and the default value (or 'None') as the value. Example: { 'services' : (list, str, u'SSSD Services to start', ['nss', 'pam']) } === Errors === No Errors r+rrrFrJ)rvr\)rArLrwrgr r r list_mandatory_optionss  4z"SSSDService.list_mandatory_optionscCsR|jj|j|r"|jj|j|}nH|jjd|r@|jjd|}n*||jkrX||j|<dStd|j|f|dkr|j|dSd}|dtkrt |tkrt |t krt |j d}n|g}t ||dkryb|dt krt |t kr|jj|j}n4|dtkr$t |t kr$t|d}n |d|}Wn2tk rLd}Yntk rdd}YnX|rtd|d|t |ft |tkrDybg}xX|D]P}|d t krt |t kr|j|jj|jgn|j|d |gqWWn2tk rd}Yntk r(d}YnX|r@td |d |}||j|<dS) a Set a service option to the specified value (or values) optionname: The option to change value: The value to set. This may be a single value or a list of values. If it is set to None, it resets the option to its default. === Returns === No return value === Errors === NoOptionError: The specified option is not listed in the schema TypeError: The value specified was not of the expected type r^NzSection [%s] has no option [%s]FrrHTzExpected %s for %s, received %srz Expected %s)rqrXrIrYrrrLrrmr1rPr0rrNr,r@rQr-rRKeyErrorrprS)rArkrG option_schema raise_errorrVrr r r set_options\        zSSSDService.set_optionN) rrr__doc__r5rvrxryr}r r r r rn+s +rnc@sjeZdZdZddZddZddZdd Zd d Zdd dZ ddZ ddZ ddZ ddZ ddZd S) SSSDDomainz2 Object to manipulate SSSD domain options cCsvtj|t|t s"t|tkr&t||_||_d|_ d|_ g|_ i|_ |j j |jjd|j j |jjddS)a  Creates a new, empty SSSDDomain. This domain is inactive by default. This constructor should not be used directly. Use SSSDConfig.new_domain() instead. name: The domain name. apischema: An SSSDConfigSchema object created by SSSDConfig.__init__() === Returns === The newly-created SSSDDomain object. === Errors === TypeError: apischema was not an SSSDConfigSchema object or domainname was not a string FNr`r_)rir5ror$rPr0rprIrqactiveoldnamerfrLrsr])rAZ domainnamerur r r r5 s zSSSDDomain.__init__cCst||_dS)ad Enable or disable this domain active: Boolean value. If True, this domain will be added to the active domains list when it is saved. If False, it will be removed from the active domains list when it is saved. === Returns === No return value === Errors === No errors N)r,r)rArr r r set_active/szSSSDDomain.set_activecCsxi}|j|jjd|j|jjdxJ|jD]@\}}|jjd|}|j||jjd||f}|j|q0W|S)ag List options for the currently-configured providers, including the mandatory flag === Returns === A dictionary of configurable options. This dictionary is keyed on the option name with a tuple of the variable type, subtype ('None' if the type is not a collection type), whether it is mandatory, the translated option description, and the default value (or 'None') as the value. Example: { 'enumerate' : (bool, None, False, u'Enable enumerating all users/groups', True) } === Errors === No errors r`r_z provider/%szprovider/%s/%s)rsrqrWrf)rArLr`Z providertyperZr r r rv@s  z&SSSDDomain.list_options_with_mandatorycCsR|j}i}x@|jD]4}||d||d||d||df||<qW|S)a$ List options available for the currently-configured providers. === Returns === A dictionary of configurable options. This dictionary is keyed on the option name with a tuple of the variable type, subtype ('None' if the type is not a collection type), the translated option description, and the default value (or 'None') as the value. Example: { 'enumerate' : (bool, None, u'Enable enumerating all users/groups', True) } === Errors === No errors rrrFrJ)rvr\)rArLrwrgr r r rxds 4zSSSDDomain.list_optionscCs^|j}i}xL|jD]@}||dr||d||d||d||df||<qW|S)a$ List mandatory options for the currently-configured providers. === Returns === A dictionary of configurable options. This dictionary is keyed on the option name with a tuple of the variable type, subtype ('None' if the type is not a collection type), the translated option description, and the default value (or 'None') as the value. Example: { 'enumerate' : (bool, None, u'Enable enumerating all users/groups', True) } === Errors === No errors r+rrrFrJ)rvr\)rArLrwrgr r r rys  4z!SSSDDomain.list_mandatory_optionsNcCs`|jjd|}|r0|j|jjd||fn,|j}x"||D]}|j|j||qBW|S)a If provider_type is specified, list all options applicable to that target, otherwise list all possible options available for a provider. type: Provider backend type. (e.g. local, ldap, krb5, etc.) provider_type: Subtype of the backend type. (e.g. id, auth, access, chpass) === Returns === A dictionary of configurable options for the specified provider type. This dictionary is keyed on the option name with a tuple of the variable type, subtype ('None' if the type is not a collection type), the translated option description, and the default value (or 'None') as the value. === Errors === NoSuchProviderError: The specified provider is not listed in the schema or plugins NoSuchProviderSubtypeError: The specified provider subtype is not listed in the schema z provider/%szprovider/%s/%s)rqrWrslist_providerslist_provider_options)rAr` provider_typerLZknown_providersr r r rs   z SSSDDomain.list_provider_optionscCs |jjS)a> Return a dictionary of providers. === Returns === Returns a dictionary of providers, keyed on the primary type, with the value being a tuple of the subtypes it supports. Example: { 'ldap' : ('id', 'auth', 'chpass') } === Errors === No Errors )rqrh)rAr r r rszSSSDDomain.list_providersc Cs`|j}||jkr&td|j|f|dkr<|j|dS||}d}|dtkrt|tkrt|tkr|t|j d}n|g}t||dkrFy^|dt krt|tkr|j j |j }n0|dtkrt|tkrt|d}n |d|}Wn2tk r d}Yntk r$d}YnX|rFtd|d|t|ft|tkrybg}xX|D]P}|dt krt|tkr|j|j j |j gn|j|d|gq`WWn2tk rd}Yntk rd}YnX|rtd |d|}|jd }|dkrR|d|} y|j|| Wntk rNtYnXn ||j|<dS) a Set a domain option to the specified value (or values) option: The option to change. value: The value to set. This may be a single value or a list of values. If it is set to None, it resets the option to its default. === Returns === No return value. === Errors === NoOptionError: The specified option is not listed in the schema TypeError: The value specified was not of the expected type zSection [%s] has no option [%s]NFrrHTzExpected %s for %s, received %srz Expected %s _provider)rxr\rrIrmr1rPr0rrNr,rqr@rQr-rRrzrprSrfind add_providerrrL) rAr"rGrLr{r|rVrZ is_providerr`r r r r}sf             zSSSDDomain.set_optioncCs(t|tkrt|js|j|_||_dS)z Change the name of the domain newname: New name for this domain === Returns === No return value. === Errors === TypeError: newname was not a string N)rPr0rprrI)rAZnewnamer r r set_name-s  zSSSDDomain.set_namecs|j}||jkr*||kr.tntfdd|jD}t|dkrRtt|dkr|dd|krt|ddn|jj|fgd}||j|<|jj |j j d||jj |j j d|fdS) aH Add a new provider type to the domain type: Provider backend type. (e.g. local, ldap, krb5, etc.) subtype: Subtype of the backend type. (e.g. id, auth, chpass) === Returns === No return value. === Errors === ProviderSubtypeInUse: Another backend is already providing this subtype NoSuchProviderError: The specified provider is not listed in the schema or plugins NoSuchProviderSubtypeError: The specified provider subtype is not listed in the schema csg|]}|dkr|qS)rr )rr)rr r rasz+SSSDDomain.add_provider..rrz %s_providerz provider/%szprovider/%s/%sN) rr\rrrfrOrrSrLrsrqr])rAr`rconfigured_providersZwith_this_typeZ option_namer )rr rDs&       zSSSDDomain.add_providerc Csd}x |jD]\}}||krPd}q W|s.dS|j||}xV|jD]L\}}||f||fkr\qB|j||}t|j|j}x|D] }||=qWqBWx|D]} | |jkr|j| =qWd|} | |jkr|j| =|jj||fdS)a Remove a provider from the domain. If the provider is not present, it is ignored. provider_type: Subtype of the backend type. (e.g. id, auth, chpass) === Returns === No return value. === Errors === No Errors Nz %s_provider)rfrr#r\rLremove) rArr`ZptyperLZprovZprovider_optionsr!optr"r r r remove_providerus,       zSSSDDomain.remove_provider)N)rrrr~r5rrvrxryrrr}rrrr r r r rs%$ '[1rc@seZdZdZd1ddZd2ddZddZd3d d Zd d Zd dZ ddZ ddZ ddZ ddZ ddZddZddZddZdd Zd!d"Zd#d$Zd%d&Zd'd(Zd)d*Zd+d,Zd-d.Zd/d0ZdS)4 SSSDConfigzQ class SSSDConfig Primary class for operating on SSSD configurations NcCs,tj|t|||_d|_d|_d|_dS)a+ Initialize the SSSD config parser/editor. This constructor does not open or create a config file. If the schemafile and schemaplugindir are not passed, it will use the system defaults. schemafile: The path to the API schema config file. Usually /usr/share/sssd/sssd.api.conf schemaplugindir: The path the directory containing the provider schema config files. Usually /usr/share/sssd/sssd.api.d === Returns === The newly-created SSSDConfig object. === Errors === IOError: Exception raised when the schema file could not be opened for reading. ParsingError: The main schema file or one of those in the plugin directory could not be parsed. NFr+)rr5r$rq configfile initialized API_VERSION)rArBrCr r r r5s   zSSSDConfig.__init__cCs|jr t|sd}t|d.}y|j|Wntk rDtYnXWdQRX||_d|_y"t|jdd|j kr|tdWnt k rYnXdS)a Read in a config file, populating all of the service and domain objects with the read values. configfile: The path to the SSSD config file. If not specified, use the system default, usually /etc/sssd.conf === Returns === No return value === Errors === IOError: Exception raised when the file could not be opened for reading ParsingError: Exception raised when errors occur attempting to parse a file. AlreadyInitializedError: This SSSDConfig object was already initialized by a call to import_config() or new_config() z/etc/sssd/sssd.confr%NTsssdZconfig_file_versionzWrong config_file_version) rr r6r7 Exceptionr rr-getrrp)rArrDr r r import_configs   zSSSDConfig.import_configcCs2|jr td|_x|jjD]}|j|}qWdS)a/ Initialize the SSSDConfig object with the defaults from the schema. === Returns === No return value === Errors === AlreadyInitializedError: This SSSDConfig object was already initialized by a call to import_config() or new_config() TN)rr rqrd new_service)rArtr^r r r new_configs zSSSDConfig.new_configc Csj|js t|dkr&|jdkr t|j}tjd}t|d}|j|j}|j |WdQRXtj|dS)a Write out the configuration to a file. outputfile: The path to write the new config file. If it is not specified, it will use the path specified by the import() call. === Returns === No return value === Errors === IOError: Exception raised when the file could not be opened for writing NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. NoOutputFileError: No outputfile was specified and this SSSDConfig object was not initialized by import() Nw) rr rrr9umaskr6dumpoptswrite)rAZ outputfileZ old_umaskZofoutputr r r rs    zSSSDConfig.writecCs~|js t|jddrvt|jddjd}tj|}d|krD|d=|j}xt |D]}||krV||=qVWt |}ng}|S)a Return a list of all active services. === Returns === The list of active services. === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. rservicesrH) rr rXrrrNr[fromkeys list_servicesr1)rAactive_services service_dictZconfigured_servicesZsrvr r r list_active_services3s     zSSSDConfig.list_active_servicescsL|js t|jddr.t|jddjdngfdd|jD}|S)a Return a list of all disabled services. === Returns === The list of inactive services. === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. rrrHcsg|]}|kr|qSr r )rr)rr r risz5SSSDConfig.list_inactive_services..)rr rXrrrNr)rArr )rr list_inactive_servicesUs  z!SSSDConfig.list_inactive_servicescCs |js tdd|jD}|S)a  Retrieve a list of known services. === Returns === The list of known services. === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. cSs"g|]}|djds|dqS)rIr_)ra)rrr r r r|sz,SSSDConfig.list_services..)rr rb)rArcr r r rms zSSSDConfig.list_servicesc Csp|js t|j|stt||j}xF|j|j|D]2}y|j|d|dWq6t k rfYq6Xq6W|S)a Get an SSSDService object to edit a service. name: The name of the service to return. === Returns === An SSSDService instance containing the current state of a service in the SSSDConfig === Errors === NoServiceError: There is no such service with the specified name in the SSSDConfig. NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. rIrG) rr rKrrnrqrMrLr}r)rArIr^rr r r get_services   zSSSDConfig.get_servicecCs6|js t|j|rt|t||j}|j||S)a Create a new service from the defaults and return the SSSDService object for it. This function will also add this service to the list of active services in the [SSSD] section. name: The name of the service to create and return. === Returns === The newly-created SSSDService object === Errors === ServiceNotRecognizedError: There is no such service in the schema. ServiceAlreadyExistsError: The service being created already exists in the SSSDConfig object. NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. )rr rKrrnrq save_service)rArIr^r r r rs   zSSSDConfig.new_servicecCs|js t||jkrt|jddd}|s@|jdd|dStjt|dj d}d|krf|d=d||<|jdddj |j dS) a Activate a service name: The name of the service to activate === Returns === No return value === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. NoServiceError: There is no such service with the specified name in the SSSDConfig. rrrNrGrHrz, ) rr rrget_option_indexsetr[rrrNjoinr\)rArIitemrr r r activate_services zSSSDConfig.activate_servicecCs|js t||jkrt|jddd}|s@|jddddStjt|dj d}d|krf|d=||krt||=|jdddj |j dS) a Deactivate a service name: The name of the service to deactivate === Returns === No return value === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. NoServiceError: There is no such service with the specified name in the SSSDConfig. rrrrNrGrHz, ) rr rrrrr[rrrNrr\)rArIrrr r r deactivate_services zSSSDConfig.deactivate_servicecCs|js t|jd|dS)a Remove a service from the SSSDConfig object. This function will also remove this service from the list of active services in the [SSSD] section. Has no effect if the service does not exist. === Returns === No return value === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. rTN)rr delete_option)rArIr r r delete_serviceszSSSDConfig.delete_servicecCs|js tt|tst|j}|jd|}g}xV|jjD]F\}}t |t kr\dj |}|dkrn|j |}|j d|t|dq>W|j|||dS)a Save the changes made to the service object back to the SSSDConfig object. service_object: The SSSDService object to save to the configuration. === Returns === No return value === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. TypeError: service_object was not of the type SSSDService rTz, debug_levelr")rPrIrGN)rr rornrprjrrlitemsrPr1r_get_debug_level_valr r0 add_section)rAr^rIindexZaddkwr"rGr r r r&s      zSSSDConfig.save_servicecCs|js t|jddrNt|jddjd}tj|}d|krD|d=t|}ng}|j }xd|j D]X}|jd|dr|jd|ddkr|j |||kr|j |qd||krd|j |qdW|S)a Return a list of all active domains. === Returns === The list of configured, active domains. === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. rdomainsrHrz domain/%senabledr3) rr rXrrrNr[rr1 list_domainsr)rA sssd_domains domain_dictrdomr r r list_active_domainsPs&      zSSSDConfig.list_active_domainscCs|js t|jddrNt|jddjd}tj|}d|krD|d=t|}ng}|j }xR|j D]F}|jd|dr|jd|ddkr|j |qd||krd|j |qdW|S)a. Return a list of all configured, but disabled domains. === Returns === The list of configured, inactive domains. === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. rrrHrz domain/%srr4) rr rXrrrNr[rr1rr)rArrrrr r r list_inactive_domainsvs"     z SSSDConfig.list_inactive_domainscCs |js tdd|jD}|S)aL Return a list of all configured domains, including inactive domains. === Returns === The list of configured domains, both active and inactive. === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. cSs*g|]"}|djdr|dddqS)rIzdomain/N)ra)rrr r r rsz+SSSDConfig.list_domains..)rr rb)rArr r r rs zSSSDConfig.list_domainsc Cs|js t|jd|s t|t||j}dd|j|jd|D}ddddddddddd }|j}dd|D}d |kr|j dxt|j D]h\}}||krq||kr||j |} | d |j kr|d|j d || d kr|j || d fqWx:|D]2\} } y|j| | Wntk r6YnXqWxd|j|jd|D]L} | d | df|krTy|j| d | dWntk rYnXqTW|j||_|S)a Get an SSSDDomain object to edit a domain. name: The name of the domain to return. === Returns === An SSSDDomain instance containing the current state of a domain in the SSSDConfig === Errors === NoDomainError: There is no such domain with the specified name in the SSSDConfig. NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. z domain/%scSs.g|]&}|djddkr|d|dfqS)rIrrrG)r)rrr r r rsz)SSSDConfig.get_domain..N id_provider auth_provider) rZ sudo_providerrZchpass_providerZautofs_providerZselinux_providerZsubdomains_providerZsession_providerZhostid_providerZresolver_providercSsg|] }|dqS)rr )rrr r r rsaccess_providerpermitrrrIrG)rr)rr rKrrrqrMrLrr rrr\rr}ris_domain_activer) rArIr_rfZdefault_providersrZproviders_listr`Zdefault_providerZdefault_provider_valuer"rGrr r r get_domainsR     zSSSDConfig.get_domaincCs6|js t|jd|rtt||j}|j||S)a Create a new, empty domain and return the SSSDDomain object for it. name: The name of the domain to create and return. === Returns === The newly-created SSSDDomain object === Errors === DomainAlreadyExistsError: The service being created already exists in the SSSDConfig object. NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. z domain/%s)rr rKrrrq save_domain)rArIr_r r r new_domains  zSSSDConfig.new_domaincCs&|js t||jkrt||jkS)a Is a particular domain set active name: The name of the configured domain to check === Returns === True if the domain is active, False if it is inactive === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. NoDomainError: No domain by this name is configured )rr rrr)rArIr r r rs  zSSSDConfig.is_domain_activecCs|js t||jkrt|jddd}|s@|jdd|dStjt|dj d}d|krf|d=d||<|jdddj |j dS) a Activate a configured domain name: The name of the configured domain to activate === Returns === No return value === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. NoDomainError: No domain by this name is configured rrrNrGrHrz, ) rr rrrrr[rrrNrr\)rArIrrr r r activate_domain2s zSSSDConfig.activate_domaincCs|js t||jkrt|jddd}|s@|jddddStjt|dj d}d|krf|d=||krt||=|jdddj |j dS) a Deactivate a configured domain name: The name of the configured domain to deactivate === Returns === No return value === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. NoDomainError: No domain by this name is configured rrrrNrGrHz, ) rr rrrrr[rrrNrr\)rArIrrr r r deactivate_domain\s zSSSDConfig.deactivate_domaincCs(|js t|j||jdd|dS)a Remove a domain from the SSSDConfig object. This function will also remove this domain from the list of active domains in the [SSSD] section, if it is there. === Returns === No return value === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. rTz domain/%sN)rr rr)rArIr r r delete_domains zSSSDConfig.delete_domainc CsZ|js tt|tst|j}d}|jrX|j|krX|j|j|jdd|j}d|_d|}|j |j d|\}}||j kr|j |g|j |dd}x@|D]8}|ddkr|d|jkr|j|dd|ddqWxV|jjD]F\}} t| tkrd j| } |d kr"|j| } |j||t| qW|jrL|j|n |j|dS) a9 Save the changes made to the domain object back to the SSSDConfig object. If this domain is marked active, ensure it is present in the active domain list in the [SSSD] section domain_object: The SSSDDomain object to save to the configuration. === Returns === No return value === Errors === NotInitializedError: This SSSDConfig object has not had import_config() or new_config() run on it yet. TypeError: domain_object was not of type SSSDDomain NrTz domain/%srPr"rIrGTz, r)rr rorrprjrrrZfindOptsrrrrLrlZdelete_option_subtreerrPr1rrrr0rr) rAr_rIZoldindexZ sectionnamenoZsection_subtreeZsection_optionsr"rGr r r rs:           zSSSDConfig.save_domain)NN)N)N)rrrr~r5rrrrrrrrrrrrrrrrrrrrrrr r r r rs0  - $""***&$S**r)!r~r9r&r=Z sssdoptionsrZ ipachangeconfrrrr r r rrrrrrrrrrrrrr#r$objectrirnrrr r r r sB  G<\'