o x[hF) @s.UdZddlZddlZddlZddlZddlmZddlmZm Z m Z m Z ddl m Z ddlmZddlmZddlmZmZmZdd lmZdd lmZdd lmZd egegd Zeed<eeZ de!de"de!fddZ#dede"de"fddZ$defddZ%de"dede de!ddf dd Z&d$d"d#Z'dS)%zFSet Passwords: Set user passwords and enable/disable SSH password authN)List)features lifecyclesubputil)Cloud)Config) MetaSchema) ALL_DISTROSDistroug_util)log_util) PER_INSTANCE)update_ssh_configcc_set_passwords)iddistros frequencyactivate_by_schema_keysmeta users_listpw_typereturncs|sgSfdd|DS)zDeither password or type: RANDOM is required, user is always requiredcs0g|]}|ddkr|d|ddfqS)typehashnamepasswordRANDOM)get).0itemrC/usr/lib/python3/dist-packages/cloudinit/config/cc_set_passwords.py (s z%get_users_by_type..r")rrr"r!r#get_users_by_type#s r%distroservice extra_argsc GsZz|jd|g|RtdWdStjy,}z td|WYd}~dSd}~ww)NrestartzRestarted the SSH daemon.zm'ssh_pwauth' configuration may not be applied. Cloud-init was unable to restart SSH daemon due to error: '%s')manage_serviceLOGdebugrProcessExecutionErrorwarning)r&r'r(er"r"r#_restart_ssh_daemon0sr0cCs|dd}d}t|trtjddddt|rd}n*t|r%d }n"d |d }|d us5|d kr>t d||d St d||d St ||i}|sWt d|d S| rytddddd|gj}|dvrwt||dd Sd St||d S)zApply sshd PasswordAuthentication changes. @param pw_auth: config setting from 'pw_auth'. Best given as True, False, or "unchanged". @param distro: an instance of the distro class for the target distribution @return: None ssh_svcnamesshPasswordAuthenticationz-Using a string value for the 'ssh_pwauth' key22.2z&Use a boolean value with 'ssh_pwauth'. deprecateddeprecated_version extra_messageyesnozLeaving SSH config 'z ' unchanged.N unchangedz%s ssh_pwauth=%sz$%s Unrecognized value: ssh_pwauth=%sz/No need to restart SSH service, %s not updated. systemctlshowz --property ActiveStatez--value)active activating reloadingz--job-mode=ignore-dependencies) get_option isinstancestrr deprecateris_trueis_falselowerr+r,r.r uses_systemdrstdoutstripr0)pw_authr&r'cfg_namecfg_valbmsgupdatedstater"r"r#handle_ssh_pwauth<sP          rRrcfgcloudargsc Cs|j}|r|d}d|vrd|dvr|dd=nt|dd}d}g}g}d|vrz|d} tj| dgd}d| vrs| drstjdd d d t| dtrZt d t| d|}ntjd ddd t dt| d} | rs| }t | d|}|s|s|rt ||\} } t | \} }| rd| |fg}ntdg}|s|rt|d}dd|D} t|d}dd|D}g}t|dD]\} }t}| | || |f|| d|qtd}|D]F}|dd\}}||dur d|vr |||f||q|dks|dkr#t}|d||f|||f| |q| rbzt d| |j|dd Wntya}z||ttd!| WYd}~nd}~ww|rzt d"||j|dd Wnty}z||ttd#|WYd}~nd}~wwt|rd$d%|f}tjd&|ddd'|r| }tjr||7}g}|D]/}z | |||Wqty}z||ttd(|WYd}~qd}~ww|rt d)|t!|"d*|t|r t d+t||d,dS)-NrchpasswdlistrTusers)defaultzConfig key 'lists'z22.3zUse 'users' instead.r5z$Handling input for chpasswd as list.zThe chpasswd multiline stringr4zUse string type instead.z0Handling input for chpasswd as multiline string.expirez%s:%sz2No default or defined user to change password for.textcSg|]\}}|qSr"r"ruser_r"r"r#r$zhandle..rcSr\r"r"r]r"r"r#r$r`r:z\$(1|2a|2y|5|6)(\$.+){2}RzChanging password for %s:F)hashedz,Failed to set passwords with chpasswd for %szSetting hashed password for %s:z3Failed to set hashed passwords with chpasswd for %sz%Set the following 'random' passwords  z%s %s )stderrfallback_to_stdoutzFailed to set 'expire' for %szExpired passwords for: %s users ssh_pwauthz+%s errors occurred, re-raising the last one)#r&rget_cfg_option_strget_cfg_option_listrrErCrWr+r, splitlinesget_cfg_option_boolr normalize_users_groupsextract_defaultr.r%rand_user_passwordappendrecompilesplitmatchrV Exceptionlogexclenjoinr multi_logrEXPIRE_APPLIES_TO_HASHED_USERS expire_passwdrRr)rrSrTrUr&rrZplistrchfg multilinerX_groupsr^ _user_configerrorsplist_inhashed_plist_in hashed_usersrandlistr_proglineupr/blurbusers_to_expire expired_usersr"r"r#handle~s                       rcCs|dkrtdttjttjttjttjg}|t t j |t |tjtjtjtjdt |d|S)Nz.Password length must be at least 4 characters.) select_from) ValueErrorrandomchoicestringdigitsascii_lowercaseascii_uppercase punctuationextendrWrrand_strrxshufflery)pwlen res_rand_listr"r"r#rps.      rp)r)(__doc__loggingrrrrtypingr cloudinitrrrrcloudinit.cloudrcloudinit.configrcloudinit.config.schemar cloudinit.distrosr r r cloudinit.logr cloudinit.settingsrcloudinit.ssh_utilrr__annotations__ getLogger__name__r+rWrDr%r0rRrrpr"r"r"r#s4          B