-_g tddlZddlZddlmZmZmZmZGddeZGddeeZGddeeeZ y) N)Plugin RedHatPlugin DebianPlugin UbuntuPluginc,eZdZdZdZdZdZdZdZdZ y)Krb5a:This plugin handles the collection of kerberos authentication config files and logging. Users should expect to see their krb5 config(s) in the final archive, along with krb5 logging and `klist` output. kdc configs and acls will also be collected from the distribution-spcecific kdc directory. zKerberos authenticationkrb5)identitysystemNc |jdd|jd|jddg|j|jdd|jd |jd |jd y) Nz/etc/krb5.confz/etc/krb5.conf.d/*z /kadm5.aclz /kdc.confz/var/log/kadmind.logz/var/log/krb5kdc.logkerberos_kdc_log)tagsz klist -ket z/.k5*zklist -ket /etc/krb5.keytab) add_copy_speckdcdir collect_kinitadd_cmd_output)selfs 9/usr/lib/python3/dist-packages/sos/report/plugins/krb5.pysetupz Krb5.setups   {{m: &{{m9 % "     18JK k$++e<= 9:ctj}d}|j|rt|dd5}|D]}t j d|tj r<|jdddd j}|jd |d n>t j d |tj s|jd |d ndddyy#1swYyxYw)a) Collect the kinit command output for the system with id_provider "AD" or "IPA" domains. While integrating the Linux M/c with AD the realmd will create a computer object on the AD side. The realmd and AD restrict the Hostname/SPN to 15 Characters. z/etc/sssd/sssd.confrzutf-8)encodingz\s*id_provider\s*=\s*ad.rNzMKRB5_TRACE=/dev/stdout kinit -k 'z$'z\s*id_provider\s*=\s*ipa') socketgetfqdn path_isfileopenrematch IGNORECASEsplitupperr)rhostname sssd_confflines rrzKrb5.collect_kinit+s>>#)   I &iw7 1 Dxx : $bmm5#+>>##6q#9#2#>#D#D#F++/77?j-DExx ; $bmm5++/77?j-CD    '  sB C%C%%C.) __name__ __module__ __qualname____doc__ short_desc plugin_nameprofilesrrrrrrrs'+JK%H F ;rrceZdZdZdZy) RedHatKrb5)z krb5-libsz krb5-serverz/var/kerberos/krb5kdcNr*r+r,packagesrr1rrr3r3Gs +H $Frr3ceZdZdZdZy) UbuntuKrb5)zkrb5-kdcz krb5-configz krb5-userz/var/lib/krb5kdcNr4r1rrr7r7Ms 7H Frr7) r!rsos.report.pluginsrrrrrr3r7r1rrr9s> OO464n%|%  |\ r