­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 3 [*e6@s6ddlZddlZejZGdddZGdddZdS)Nc@steZdZddZddZddZddZed d Zed d Z ed dZ eddZ eddZ eddZ dS)OptioncCs.||_||_||_||_||_d|_d|_dS)NF)namemetavarhelpfeature supportedvaluefrom_sysconfig)selfrrrrrr (/usr/lib/python3.6/authcompat_Options.py__init__szOption.__init__cCs ||_dS)N)r)r new_valuer r r set&sz Option.setcCs|j|d|_dS)NT)rr )r rr r r set_from_sysconfig)s zOption.set_from_sysconfigcCs |jdk S)N)r)r r r r isset-sz Option.issetcCst|||dddS)NFT)rr)r)rrrr r r Valued0sz Option.ValuedcCst|d|dddS)NFT)rr)r)rrr r r Switch4sz Option.SwitchcCst|d|dddS)NT)rr)r)rrr r r Feature8szOption.FeaturecCst||ddddS)NF)rr)r)rrr r r UnsupportedValued<szOption.UnsupportedValuedcCst|dddddS)NTF)rr)r)rr r r UnsupportedFeature@szOption.UnsupportedFeaturecCst|dddddS)NF)rr)r)rr r r UnsupportedSwitchDszOption.UnsupportedSwitchN)__name__ __module__ __qualname__r rrr staticmethodrrrrrrr r r r rs      rcM@seZdZejdedejdededejdededejd ed ejd ed ejd ededejdededejdedejdedejdedejdedejdededejdedejded ejd!ed"ejd#eded$ejd%eded&ejd'ed(ed)ejd*ed+ejd,ed-ejd.ed/ejd0ed1ejd2ed3ed4ejd5ed6ejd7ed8ed9ejd:ed;ejded?ejd@edAejdBedCejdDedEejdFedGedHejdIedGedJejdKedGedLejdMedGedNejdOedPejdQedRejdSedTejdUedVejdWedXejdYedZejd[ed\ejd]ed\ejd^ej ej d_ej d`ej daedbej dcedbej ddej deej dfej dgej dhej diej djej dkedlej dmednej doedpej dqedrej dsed(ej dteduej dvedwej dxedwej dyedwej dzed{ej d|ed}ej d~edej dej dej dej dej dej dej dedgJZ dDdd ddfd.d5d:d!d ddddkdidgd0ddZddZddZddZddZddZddZddZddZddZddZddZddZddZddZdS)OptionsZnisz#NIS for user information by defaultZ nisdomainzzdefault NIS domainZ nisserverzzdefault NIS serverZldapz$LDAP for user information by defaultZldapauthz"LDAP for authentication by defaultZ ldapserverz#default LDAP server hostname or URIZ ldapbasednzzdefault LDAP base DNldaptlszuse of TLS with LDAP (RFC-2830) ldapstarttlsz4use of TLS for identity lookups with LDAP (RFC-2830)Z rfc2307bisz;use of RFC-2307bis schema for LDAP user information lookupsZ smartcardz)authentication with smart card by defaultZsmartcardactionz<0=Lock|1=Ignore>z(action to be taken on smart card removalZrequiresmartcardz0require smart card for authentication by defaultZ fingerprintz2authentication with fingerprint readers by defaultZkrb5z"Kerberos authentication by defaultZkrb5kdczdefault Kerberos KDCZkrb5adminserverzdefault Kerberos admin serverZ krb5realmzzdefault Kerberos realmZ krb5kdcdnsz use of DNS to find Kerberos KDCsZ krb5realmdnsz"use of DNS to find Kerberos realmsZwinbindz'winbind for user information by defaultZ winbindauthz%winbind for authentication by defaultZ winbindjoinzz>join the winbind domain or ads realm now as this administratorZ winbindkrb5z(Kerberos 5 for authenticate with winbindZ smbworkgroupz z'workgroup authentication servers are inZsssdzHSSSD for user information by default with manually managed configurationZsssdauthzFSSSD for authentication by default with manually managed configurationZ cachecredsz.caching of user credentials in SSSD by defaultZ pamaccessz1check of access.conf during account authorizationZ mkhomedirz;creation of home directories for users on their first loginZfaillockzGaccount locking in case of too many consecutive authentication failuresZ passminlenzzminimum length of a passwordZ passminclassz1minimum number of character classes in a passwordZ passmaxrepeatz;maximum number of same consecutive characters in a passwordZpassmaxclassrepeatzDmaximum number of consecutive characters of same class in a passwordZreqlowerz6require at least one lowercase character in a passwordZrequpperz6require at least one uppercase character in a passwordZreqdigitz(require at least one digit in a passwordZreqotherz2require at least one other character in a passwordZnostartzdo not start/stop servicesZ updateallzupdate all configuration filesupdatezthe same as --updateallZ kickstartz test-callZtestZprobeZ savebackupzZ restorebackupZrestorelastbackupcacheZecryptfsshadow useshadowmd5usemd5Zpassalgoz%ZldaploadcacertzZsmartcardmodulezZ smbsecurityzZsmbrealmZ smbserversz Z smbidmaprangezZ smbidmapuidZ smbidmapgidZwinbindseparatorz<\>Zwinbindtemplatehomedirz Zwinbindtemplateshellz ZwinbindusedefaultdomainZwinbindofflineZ preferdnsZ forcelegacyZ locauthorizeZ sysnetauthZ faillockargsz )Z USEFAILLOCKZ FAILLOCKARGSZUSELDAPZUSENISZ USEECRYPTFSZ USEWINBINDZ WINBINDKRB5ZUSESSSDZ USEKERBEROSZ USELDAPAUTHZ USESMARTCARDZFORCESMARTCARDZ USEFPRINTDZPASSWDALGORITHMZUSEMD5Z USESHADOWZUSEWINBINDAUTHZ USESSSDAUTHZUSELOCAUTHORIZEZ USEPAMACCESSZ USEMKHOMEDIRZ USESYSNETAUTHZ FORCELEGACYZCACHECREDENTIALScCs&i|_x|jD]}||j|j<qWdS)N)optionsListr)r optionr r r r s zOptions.__init__cCs tjdd}|jtd|jtdd}x,|jD]"}|jr@dnd}|j|||q2W|j}x*|jj D]\}}t ||}|j |qlW|j d r|j d r|j d|j d |j d  r|j d r|j d |j d |j d o|j d  r|j d |j d dS)NzAuthconfig Compatibility Tool.) descriptionz(These options have a compatibility layerz8These options are no longer supported and have no effect)r unsupportedrr)r#r$r!r"rr)argparseArgumentParserZadd_argument_group_r&r add_option parse_argsr%itemsgetattrrrget)r parserZparsersr'groupZcmdlinerrr r r parses     z Options.parsecCs<x6|jjD](\}}|j|s |j|j|j|q WdS)N)Mapr/rr%rr1)r sysconfigrr'r r r applysysconfigs zOptions.applysysconfigcCs8x2|jjD]$\}}|j|r |j||j|q WdS)N)r5r/rrr1)r r6rr'r r r updatesysconfigs zOptions.updatesysconfigcCs |j|jS)N)r%r)r rr r r r1sz Options.getcCs|j|j|dS)N)r%r)r rrr r r rsz Options.setcCs|j|jS)N)r%r)r rr r r rsz Options.issetcCs |j|}|dks| rdSdS)NFT)r1)r rrr r r getBools zOptions.getBoolcCs |j|}|dks| rdSdS)NT)r1)r rrr r r getTrueOrNones zOptions.getTrueOrNonecCs^g}xTtjD]J}|jrq |js"q |jr*q |j}|jrL|jrDd|nd|}|j|q W|S)Nenabledisable) rr&rrr rrrappend)r r%r'rr r r getSetButUnsupported s zOptions.getSetButUnsupportedcCs<|jdk r|j||n |jr,|j||n |j||dS)N)r add_valuedr add_feature add_switch)r r2r'r r r r-s  zOptions.add_optioncCs$|jd|jd|j|j|jddS)Nz--Zstore)actionrdestr) add_argumentrrr)r r2r'r r r r?&s  zOptions.add_valuedcCs"|jd|jdd|j|jddS)Nz-- store_constT)rBconstrrC)rDrr)r r2r'r r r rA-s  zOptions.add_switchcCsrd}d}|jdk r6tdd|j}tdd|j}|jd|jdd||jd|jd|jdd ||jddS) Nr; r<z--enablerET)rBrFrrCz --disableF)rr,rDr)r r2r'Z help_enableZ help_disabler r r r@4s    zOptions.add_featureN)rrrrrr,rrr*ZSUPPRESSrrrr&r5r r4r7r8r1rrr9r:r>r-r?rAr@r r r r rIs  r)r*gettextr,rrr r r r s-