o

-�_g��@sbdd
lZdd
l
Z
ddlmZmZmZmZ
Gdd�de�ZGdd�dee�ZGdd�deee�Z	d
S)	�N)�Plugin�RedHatPlugin�DebianPlugin�UbuntuPluginc@s0eZ
dZd
ZdZdZdZdZdd�Zdd	�Z	dS)
�Krb5a:
This plugin handles the collection of kerberos authentication config
    files and logging. Users should expect to see their krb5 config(s) in the
    final archive, along with krb5 logging and `klist` output.

    kdc configs and acls will also be collected from the distribution-spcecific
    kdc directory.
    zKerberos authentication�krb5)�identity�systemNc

Cs\|�d
d|j
�d�|j
�d�dg�

|��
|jddd�
|�d	|j
�d
��

|�d�

dS)Nz/etc/krb5.confz/etc/krb5.conf.d/*z
/kadm5.aclz	/kdc.confz/var/log/kadmind.logz/var/log/krb5kdc.log�kerberos_kdc_log)
�tagszklist -ket z/.k5*zklist -ket /etc/krb5.keytab)�
add_copy_spec�kdcdir�
collect_kinit�add_cmd_output)
�self�r�9/usr/lib/python3/dist-packages/sos/report/plugins/krb5.py�setups







�


z
Krb5.setupc
Cs�t�
�}
d
}|�|�
rmt|ddd��Q}|D]5}t�d|tj�r7|
�d�
ddd	���}
|�	d
|
�d��


nt�d|tj�rJ|�	d
|
�d
��


nqWd�
dSWd�
dSWd�
dS1sfw



Y
dSdS)a)

        Collect the kinit command output for the system with id_provider "AD"
        or "IPA" domains.

        While integrating the Linux M/c with AD the realmd will create a
        computer object on the AD side. The realmd and AD restrict the
        Hostname/SPN to 15 Characters.
        z/etc/sssd/sssd.conf�
rzutf-8)
�encodingz\s*id_provider\s*=\s*ad�
.r
N�zMKRB5_TRACE=/dev/stdout                                             kinit -k 'z$'z\s*id_provider\s*=\s*ipa�
')
�socket�getfqdn�path_isfile�open�re�match�
IGNORECASE�split�upperr)r�hostname�	sssd_conf�
f�linerrrr+s8







�


�

�

�����"��zKrb5.collect_kinit)
�__name__�
__module__�__qualname__�__doc__�
short_desc�plugin_name�profilesr
rrrrrrrs




rc
@�eZ
dZd
ZdZdS)�
RedHatKrb5)z	krb5-libszkrb5-serverz/var/kerberos/krb5kdcN�r&r'r(�packagesr
rrrrr.G�
r.c
@r-)�
UbuntuKrb5)zkrb5-kdczkrb5-configz	krb5-userz/var/lib/krb5kdcNr/rrrrr2Mr1r2)
rr�sos.report.pluginsrrrrrr.r2rrrr�<module>
s


7