o
G%@i @ sb d dl Z d dlZd dlmZmZmZmZ G dd deZG dd deeZG dd deeeZ dS ) N)Plugin RedHatPlugin DebianPlugin UbuntuPluginc @ s0 e Zd ZdZdZdZdZdZdd Zdd Z dS )
Krb5a: This plugin handles the collection of kerberos authentication config
files and logging. Users should expect to see their krb5 config(s) in the
final archive, along with krb5 logging and `klist` output.
kdc configs and acls will also be collected from the distribution-spcecific
kdc directory.
zKerberos authenticationkrb5)identitysystemNc C s\ | dd| j d| j ddg | | j ddd | d | j d
| d d S ) Nz/etc/krb5.confz/etc/krb5.conf.d/*z
/kadm5.aclz /kdc.confz/var/log/kadmind.logz/var/log/krb5kdc.logkerberos_kdc_log)tagsz klist -ket z/.k5*zklist -ket /etc/krb5.keytab)
add_copy_speckdcdir
collect_kinitadd_cmd_output)self r 9/usr/lib/python3/dist-packages/sos/report/plugins/krb5.pysetup s
z
Krb5.setupc C s t }d}| |rmt|dddQ}|D ]5}td|tjr7|dd dd }| d
| d n td |tjrJ| d
| d
nqW d dS W d dS W d dS 1 sfw Y dS dS )a)
Collect the kinit command output for the system with id_provider "AD"
or "IPA" domains.
While integrating the Linux M/c with AD the realmd will create a
computer object on the AD side. The realmd and AD restrict the
Hostname/SPN to 15 Characters.
z/etc/sssd/sssd.confrzutf-8)encodingz\s*id_provider\s*=\s*ad.r N zMKRB5_TRACE=/dev/stdout kinit -k 'z$'z\s*id_provider\s*=\s*ipa')
socketgetfqdn path_isfileopenrematch
IGNORECASEsplitupperr )r hostname sssd_conffliner r r r + s8
"zKrb5.collect_kinit)
__name__
__module__ __qualname____doc__
short_desc plugin_nameprofilesr
r r r r r r r s
r c @ e Zd ZdZdZdS )
RedHatKrb5)z krb5-libsz krb5-serverz/var/kerberos/krb5kdcNr& r' r( packagesr
r r r r r. G r. c @ r- )
UbuntuKrb5)zkrb5-kdcz krb5-configz krb5-userz/var/lib/krb5kdcNr/ r r r r r2 M r1 r2 )
r r sos.report.pluginsr r r r r r. r2 r r r r