3
ܓi @ sR d dl mZmZmZmZ G dd deZG dd deeZG dd deeeZdS ) )Plugin RedHatPlugin DebianPlugin UbuntuPluginc s4 e Zd ZdZdZd ZdZ fddZd d
Z Z S ) LdapzLDAP configurationZldapidentitysysmgmtsystemz/etc/openldap/ldap.confc s t j | jd d S )Nz/etc/ldap.conf)supersetup
add_copy_spec)self) __class__ /usr/lib/python3.6/ldap.pyr s
z
Ldap.setupc C s | j ddd d S )Nz/etc/ldap.confz(\s*bindpw\s*)\S+z\1******) do_file_sub)r
r r r postproc s z
Ldap.postproc)r r r )
__name__
__module__ __qualname__Z
short_descZ plugin_nameZprofiles ldap_confr r
__classcell__r r )r r r s r c s0 e Zd Zd Zd
Z fddZ fddZ ZS )
RedHatLdapopenldap
nss-pam-ldapd/etc/ldap.conf/etc/pam_ldap.confc sB t j | jdddddg | j| jdddd g | jd
d S ) Nz /etc/openldap/certs/passwordz /etc/openldap/certs/pwfile.txtz/etc/openldap/certs/pin.txtz/etc/openldap/certs/*passw*z/etc/openldap/certs/key3.dbz /etc/openldap/certs/cert8.dbz /etc/openldap/certs/secmod.dbz/etc/nslcd.confz/etc/pam_ldap.confz certutil -L -d /etc/openldap)r
r Zadd_forbidden_pathr r add_cmd_output)r
)r r r r ! s
zRedHatLdap.setupc s* t j xdD ]}| j|dd qW d S )N/etc/nslcd.conf/etc/pam_ldap.confz(\s*bindpw\s*)\S+z
\1********)r r )r
r r )r
file)r r r r 4 s
zRedHatLdap.postproc)r r )r r )r r r packagesfilesr r r r r )r r r s r c s0 e Zd ZdZdZ fddZ fddZ ZS )
DebianLdapz/etc/ldap/ldap.confslapd
ldap-utilsc sf t j d}| j| jdddg | jd | j|d dd | j|d d
d | j|d d d d S )
Nz,ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// z/etc/slapd.confz/etc/ldap/slapd.dz/etc/nslcd.confz+ldapsearch -x -b '' -s base 'objectclass=*'z/-b cn=config '(!(objectClass=olcSchemaConfig))'Zconfiguration_minus_schemas)Zsuggest_filenamez-b cn=schema,cn=config dnZloaded_schemasz0-b cn=config '(olcAccess=*)' olcAccess olcSuffixZaccess_control_lists)r
r r r r )r
Z ldap_search)r r r r C s"
zDebianLdap.setupc s* t j | jddd | jddd d S )Nz/etc/nslcd.confz(\s*bindpw\s*)\S+z
\1********Z
ldapsearchz(olcRootPW\: \s*)\S+)r
r r Zdo_cmd_output_sub)r
)r r r r Z s
zDebianLdap.postproc)r$ r% )r r r r r! r r r r r )r r r# > s r# N)Zsos.report.pluginsr r r r r r r# r r r r s "