�
i��d8 � �d � d dl mZmZmZmZ G d� de� Z G d� dee� Z G d� deee� Zy) � )�Plugin� RedHatPlugin� DebianPlugin� UbuntuPluginc �4 � � e Zd ZdZdZdZdZ� fd�Zd� Z� xZ S )�LdapzLDAP configuration�ldap)�identity�sysmgmt�systemz/etc/openldap/ldap.confc �L �� t t | � � | j d� y )N�/etc/ldap.conf)�superr �setup�
add_copy_spec��self� __class__s ��9/usr/lib/python3/dist-packages/sos/report/plugins/ldap.pyr z
Ldap.setup s �� �
�d�D� �!� ���+�,� c �* � | j ddd� y )Nr �(\s*bindpw\s*)\S+z\1******)� do_file_sub)r s r �postprocz
Ldap.postproc s � � ���)�+?��Mr )
�__name__�
__module__� __qualname__�
short_desc� plugin_name�profiles� ldap_confr r �
__classcell__�r s @r r r s" �� �%�J��K�0�H�)�I�-�Nr r c �0 � � e Zd ZdZdZ� fd�Z� fd�Z� xZS )�
RedHatLdap)�openldapz
nss-pam-ldapd)r �/etc/pam_ldap.confc � �� t t | � � | j g d�� | j | j
ddddg� | j
d� y )N)z /etc/openldap/certs/passwordz /etc/openldap/certs/pwfile.txtz/etc/openldap/certs/pin.txtz/etc/openldap/certs/*passw*z/etc/openldap/certs/key3.dbz /etc/openldap/certs/cert8.dbz /etc/openldap/certs/secmod.db�/etc/nslcd.confr' z certutil -L -d /etc/openldap)r r% r �add_forbidden_pathr r! �add_cmd_outputr s �r r zRedHatLdap.setup! s\ �� �
�j�$�%�'� � � � !
� �
��� �N�N� *� +� � �
� �
��� :�;r c �^ �� t t | � � dD ] }| j |dd� � y )N)r) r' r �
\1********)r r% r r )r �fr s �r r zRedHatLdap.postproc4 s6 �� �
�j�$�(�*�:� �A� � � ��$� �
� r )r r r �packages�filesr r r" r# s @r r% r% s �� �,�H� 4�E�<�&� r r% c �0 � � e Zd ZdZdZ� fd�Z� fd�Z� xZS )�
DebianLdapz/etc/ldap/ldap.conf)�slapdz
ldap-utilsc � �� t t | � � d}| j | j dddg� | j d� | j |dz d�� | j |d z d
�� | j |d z d �� y )
Nz,ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// z/etc/slapd.confz/etc/ldap/slapd.dr) z+ldapsearch -x -b '' -s base 'objectclass=*'z/-b cn=config '(!(objectClass=olcSchemaConfig))'�configuration_minus_schemas)�suggest_filenamez-b cn=schema,cn=config dn�loaded_schemasz0-b cn=config '(olcAccess=*)' olcAccess olcSuffix�access_control_lists)r r2 r r r! r+ )r � ldap_searchr s �r r zDebianLdap.setupC s� �� �
�j�$�%�'�D� � ��� �N�N� � � �
� �
��� I�J� ��� �K� K� :� � <�
��� �5� 5� -� � /�
��� �L� L� 3� � 5r c �v �� t t | � � | j ddd� | j ddd� y )Nr) r r- �
ldapsearchz(olcRootPW\: \s*)\S+)r r2 r r �do_cmd_output_subr s �r r zDebianLdap.postprocZ s@ �� �
�j�$�(�*� ��� � � �
�
� � � � #� �
r )r r r r! r/ r r r" r# s @r r2 r2 > s �� �%�I�&�H�5�.
�
r r2 N)�sos.report.pluginsr r r r r r% r2 � r r �<module>r? s; �� P� O�
N�6�
N� ��|� �D'
��|�\� '
r |