??????????????
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 173
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 174
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 175
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 176
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 177
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 178
Udac @` s d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
Z
d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z d d
l m Z m Z d d l m Z m Z m Z y d d l Z e! Z" Wn e# k
r_e$ Z" n Xe j% d Z& d e' f d YZ( d e( f d YZ) d e) f d YZ* d e( f d YZ+ d e( f d YZ, d e( f d YZ- d e( f d YZ. d e( f d YZ/ d e( f d! YZ0 d" e( f d# YZ1 d$ e1 f d% YZ2 d& Z3 e4 d' k re3 n d S(( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont stableinterfacet statust coret supported_bys+
module: user
version_added: "0.2"
short_description: Manage user accounts
description:
- Manage user accounts and user attributes.
- For Windows targets, use the M(win_user) module instead.
options:
name:
description:
- Name of the user to create, remove or modify.
type: str
required: true
aliases: [ user ]
uid:
description:
- Optionally sets the I(UID) of the user.
type: int
comment:
description:
- Optionally sets the description (aka I(GECOS)) of user account.
type: str
hidden:
description:
- macOS only, optionally hide the user from the login window and system preferences.
- The default will be C(yes) if the I(system) option is used.
type: bool
version_added: "2.6"
non_unique:
description:
- Optionally when used with the -u option, this option allows to change the user ID to a non-unique value.
type: bool
default: no
version_added: "1.1"
seuser:
description:
- Optionally sets the seuser type (user_u) on selinux enabled systems.
type: str
version_added: "2.1"
group:
description:
- Optionally sets the user's primary group (takes a group name).
type: str
groups:
description:
- List of groups user will be added to. When set to an empty string C(''),
the user is removed from all groups except the primary group.
- Before Ansible 2.3, the only input format allowed was a comma separated string.
- Mutually exclusive with C(local)
type: list
append:
description:
- If C(yes), add the user to the groups specified in C(groups).
- If C(no), user will only be added to the groups specified in C(groups),
removing them from all other groups.
- Mutually exclusive with C(local)
type: bool
default: no
shell:
description:
- Optionally set the user's shell.
- On macOS, before Ansible 2.5, the default shell for non-system users was C(/usr/bin/false).
Since Ansible 2.5, the default shell for non-system users on macOS is C(/bin/bash).
- On other operating systems, the default shell is determined by the underlying tool being
used. See Notes for details.
type: str
home:
description:
- Optionally set the user's home directory.
type: path
skeleton:
description:
- Optionally set a home skeleton directory.
- Requires C(create_home) option!
type: str
version_added: "2.0"
password:
description:
- Optionally set the user's password to this crypted value.
- On macOS systems, this value has to be cleartext. Beware of security issues.
- To create a disabled account on Linux systems, set this to C('!') or C('*').
- To create a disabled account on OpenBSD, set this to C('*************').
- See U(https://docs.ansible.com/ansible/faq.html#how-do-i-generate-encrypted-passwords-for-the-user-module)
for details on various ways to generate these password values.
type: str
state:
description:
- Whether the account should exist or not, taking action if the state is different from what is stated.
type: str
choices: [ absent, present ]
default: present
create_home:
description:
- Unless set to C(no), a home directory will be made for the user
when the account is created or if the home directory does not exist.
- Changed from C(createhome) to C(create_home) in Ansible 2.5.
type: bool
default: yes
aliases: [ createhome ]
move_home:
description:
- "If set to C(yes) when used with C(home: ), attempt to move the user's old home
directory to the specified directory if it isn't there already and the old home exists."
type: bool
default: no
system:
description:
- When creating an account C(state=present), setting this to C(yes) makes the user a system account.
- This setting cannot be changed on existing users.
type: bool
default: no
force:
description:
- This only affects C(state=absent), it forces removal of the user and associated directories on supported platforms.
- The behavior is the same as C(userdel --force), check the man page for C(userdel) on your system for details and support.
- When used with C(generate_ssh_key=yes) this forces an existing key to be overwritten.
type: bool
default: no
remove:
description:
- This only affects C(state=absent), it attempts to remove directories associated with the user.
- The behavior is the same as C(userdel --remove), check the man page for details and support.
type: bool
default: no
login_class:
description:
- Optionally sets the user's login class, a feature of most BSD OSs.
type: str
generate_ssh_key:
description:
- Whether to generate a SSH key for the user in question.
- This will B(not) overwrite an existing SSH key unless used with C(force=yes).
type: bool
default: no
version_added: "0.9"
ssh_key_bits:
description:
- Optionally specify number of bits in SSH key to create.
type: int
default: default set by ssh-keygen
version_added: "0.9"
ssh_key_type:
description:
- Optionally specify the type of SSH key to generate.
- Available SSH key types will depend on implementation
present on target host.
type: str
default: rsa
version_added: "0.9"
ssh_key_file:
description:
- Optionally specify the SSH key filename.
- If this is a relative filename then it will be relative to the user's home directory.
- This parameter defaults to I(.ssh/id_rsa).
type: path
version_added: "0.9"
ssh_key_comment:
description:
- Optionally define the comment for the SSH key.
type: str
default: ansible-generated on $HOSTNAME
version_added: "0.9"
ssh_key_passphrase:
description:
- Set a passphrase for the SSH key.
- If no passphrase is provided, the SSH key will default to having no passphrase.
type: str
version_added: "0.9"
update_password:
description:
- C(always) will update passwords if they differ.
- C(on_create) will only set the password for newly created users.
type: str
choices: [ always, on_create ]
default: always
version_added: "1.3"
expires:
description:
- An expiry time for the user in epoch, it will be ignored on platforms that do not support this.
- Currently supported on GNU/Linux, FreeBSD, and DragonFlyBSD.
- Since Ansible 2.6 you can remove the expiry time specify a negative value.
Currently supported on GNU/Linux and FreeBSD.
type: float
version_added: "1.9"
password_lock:
description:
- Lock the password (C(usermod -L), C(usermod -U), C(pw lock)).
- Implementation differs by platform. This option does not always mean the user cannot login using other methods.
- This option does not disable the user, only lock the password.
- This must be set to C(False) in order to unlock a currently locked password. The absence of this parameter will not unlock a password.
- Currently supported on Linux, FreeBSD, DragonFlyBSD, NetBSD, OpenBSD.
type: bool
version_added: "2.6"
local:
description:
- Forces the use of "local" command alternatives on platforms that implement it.
- This is useful in environments that use centralized authentification when you want to manipulate the local users
(i.e. it uses C(luseradd) instead of C(useradd)).
- This will check C(/etc/passwd) for an existing account before invoking commands. If the local account database
exists somewhere other than C(/etc/passwd), this setting will not work properly.
- This requires that the above commands as well as C(/etc/passwd) must exist on the target host, otherwise it will be a fatal error.
- Mutually exclusive with C(groups) and C(append)
type: bool
default: no
version_added: "2.4"
profile:
description:
- Sets the profile of the user.
- Does nothing when used with other platforms.
- Can set multiple profiles using comma separation.
- To delete all the profiles, use C(profile='').
- Currently supported on Illumos/Solaris.
type: str
version_added: "2.8"
authorization:
description:
- Sets the authorization of the user.
- Does nothing when used with other platforms.
- Can set multiple authorizations using comma separation.
- To delete all authorizations, use C(authorization='').
- Currently supported on Illumos/Solaris.
type: str
version_added: "2.8"
role:
description:
- Sets the role of the user.
- Does nothing when used with other platforms.
- Can set multiple roles using comma separation.
- To delete all roles, use C(role='').
- Currently supported on Illumos/Solaris.
type: str
version_added: "2.8"
notes:
- There are specific requirements per platform on user management utilities. However
they generally come pre-installed with the system and Ansible will require they
are present at runtime. If they are not, a descriptive error message will be shown.
- On SunOS platforms, the shadow file is backed up automatically since this module edits it directly.
On other platforms, the shadow file is backed up by the underlying tools used by this module.
- On macOS, this module uses C(dscl) to create, modify, and delete accounts. C(dseditgroup) is used to
modify group membership. Accounts are hidden from the login window by modifying
C(/Library/Preferences/com.apple.loginwindow.plist).
- On FreeBSD, this module uses C(pw useradd) and C(chpass) to create, C(pw usermod) and C(chpass) to modify,
C(pw userdel) remove, C(pw lock) to lock, and C(pw unlock) to unlock accounts.
- On all other platforms, this module uses C(useradd) to create, C(usermod) to modify, and
C(userdel) to remove accounts.
seealso:
- module: authorized_key
- module: group
- module: win_user
author:
- Stephen Fromm (@sfromm)
s
- name: Add the user 'johnd' with a specific uid and a primary group of 'admin'
user:
name: johnd
comment: John Doe
uid: 1040
group: admin
- name: Add the user 'james' with a bash shell, appending the group 'admins' and 'developers' to the user's groups
user:
name: james
shell: /bin/bash
groups: admins,developers
append: yes
- name: Remove the user 'johnd'
user:
name: johnd
state: absent
remove: yes
- name: Create a 2048-bit SSH key for user jsmith in ~jsmith/.ssh/id_rsa
user:
name: jsmith
generate_ssh_key: yes
ssh_key_bits: 2048
ssh_key_file: .ssh/id_rsa
- name: Added a consultant whose account you want to expire
user:
name: james18
shell: /bin/zsh
groups: developers
expires: 1422403387
- name: Starting at Ansible 2.6, modify user, remove expiry time
user:
name: james18
expires: -1
s
append:
description: Whether or not to append the user to groups
returned: When state is 'present' and the user exists
type: bool
sample: True
comment:
description: Comment section from passwd file, usually the user name
returned: When user exists
type: str
sample: Agent Smith
create_home:
description: Whether or not to create the home directory
returned: When user does not exist and not check mode
type: bool
sample: True
force:
description: Whether or not a user account was forcibly deleted
returned: When state is 'absent' and user exists
type: bool
sample: False
group:
description: Primary user group ID
returned: When user exists
type: int
sample: 1001
groups:
description: List of groups of which the user is a member
returned: When C(groups) is not empty and C(state) is 'present'
type: str
sample: 'chrony,apache'
home:
description: "Path to user's home directory"
returned: When C(state) is 'present'
type: str
sample: '/home/asmith'
move_home:
description: Whether or not to move an existing home directory
returned: When C(state) is 'present' and user exists
type: bool
sample: False
name:
description: User account name
returned: always
type: str
sample: asmith
password:
description: Masked value of the password
returned: When C(state) is 'present' and C(password) is not empty
type: str
sample: 'NOT_LOGGING_PASSWORD'
remove:
description: Whether or not to remove the user account
returned: When C(state) is 'absent' and user exists
type: bool
sample: True
shell:
description: User login shell
returned: When C(state) is 'present'
type: str
sample: '/bin/bash'
ssh_fingerprint:
description: Fingerprint of generated SSH key
returned: When C(generate_ssh_key) is C(True)
type: str
sample: '2048 SHA256:aYNHYcyVm87Igh0IMEDMbvW0QDlRQfE0aJugp684ko8 ansible-generated on host (RSA)'
ssh_key_file:
description: Path to generated SSH private key file
returned: When C(generate_ssh_key) is C(True)
type: str
sample: /home/asmith/.ssh/id_rsa
ssh_public_key:
description: Generated SSH public key file
returned: When C(generate_ssh_key) is C(True)
type: str
sample: >
'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC95opt4SPEC06tOYsJQJIuN23BbLMGmYo8ysVZQc4h2DZE9ugbjWWGS1/pweUGjVstgzMkBEeBCByaEf/RJKNecKRPeGd2Bw9DCj/bn5Z6rGfNENKBmo
618mUJBvdlEgea96QGjOwSB7/gmonduC7gsWDMNcOdSE3wJMTim4lddiBx4RgC9yXsJ6Tkz9BHD73MXPpT5ETnse+A3fw3IGVSjaueVnlUyUmOBf7fzmZbhlFVXf2Zi2rFTXqvbdGHKkzpw1U8eB8xFPP7y
d5u1u0e6Acju/8aZ/l17IDFiLke5IzlqIMRTEbDwLNeO84YQKWTm9fODHzhYe0yvxqLiK07 ansible-generated on host'
stderr:
description: Standard error from running commands
returned: When stderr is returned by a command that is run
type: str
sample: Group wheels does not exist
stdout:
description: Standard output from running commands
returned: When standard output is returned by the command that is run
type: str
sample:
system:
description: Whether or not the account is a system account
returned: When C(system) is passed to the module and the account does not exist
type: bool
sample: True
uid:
description: User ID of the user account
returned: When C(UID) is passed to the module
type: int
sample: 1044
N( t distro( t load_platform_subclasst
AnsibleModule( t to_bytest to_nativet to_texts [^a-zA-Z0-9./=]t Userc B` s: e Z d Z d Z d" Z d Z d Z d Z d Z d Z
d Z d Z d Z
e d" e d
Z d Z d Z d
Z d Z d Z d Z d Z e d Z e d Z d Z d Z d Z d Z d Z d Z d Z d Z! d Z" d Z# d Z$ d Z% d Z& d! Z' RS(# s|
This is a generic User manipulation class that is subclassed
based on platform.
A subclass may wish to override the following action methods:-
- create_user()
- remove_user()
- modify_user()
- ssh_key_gen()
- ssh_key_fingerprint()
- user_exists()
All subclasses MUST define platform and distribution (which may be None).
t Generics /etc/passwds /etc/shadowi s /etc/login.defss %Y-%m-%dc O` s t t | | S( N( R R ( t clst argst kwargs( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt __new__ s c C` s | | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _
| j d
| _ | j d | _ | j d | _
| j d
| _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ | j d | _ d | _ | j d | _ d | _ | j d | _ | j d | _ | j d | _! | j d | _" | j d d k r*d j# | j d | _ n | j d! d k ry t$ j% | j d! | _ Wqt& k
r} | j' d" d# | j t( | f qXn | j d$ d k r| j d$ | _) n t* j+ j# d% d& | j | _) d S(' Nt statet namet uidt hiddent
non_uniquet seusert groupt commentt shellt passwordt forcet removet create_homet move_homet skeletont systemt login_classt appendt generate_ssh_keyt ssh_key_bitst ssh_key_typet ssh_key_commentt ssh_key_passphraset update_passwordt homet
password_lockt localt profilet
authorizationt rolet groupst ,t expirest msgs" Invalid value for 'expires' %s: %st ssh_key_files .sshs id_%s(, t modulet paramsR R R R R R R R R R R R R R! R" R# R$ R% t sshkeygent ssh_bitst ssh_typet ssh_commentt ssh_passphraseR+ R, t NoneR4 R- R2 R. R/ R0 R1 t joint timet gmtimet Exceptiont fail_jsonR t ssh_filet ost path( t selfR7 t e( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt __init__ sV *c ` s j j d r j d k rt } j j d t d d d g k rS t } n't f d d D rx t } n d j j d k r t } n j j d j d } t | d k rtt t
j | d
r t } n | d d k rt | d
d
k rt } n | d d k rBt | d
d k rBt } n | d d k rzt | d
d k rzt } qzn t } | r j j d qn d S( NR t Darwint *t !s
*************c 3` s% | ] } | j j d k Vq d S( R N( R7 R8 ( t .0t char( RG ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pys
s s :*!t $i ii t 1i t 5i+ t 6iV s The input password appears not to have been hashed. The 'password' argument must be encrypted for this module to work properly.(
R7 R8 t platformt Falset sett anyt Truet splitt lent boolt _HASH_REt searcht warn( RG t
maybe_invalidt fields( ( RG s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt check_password_encrypted s* % & & & c C` si | j j r* | r* | j j d | d Sg | D] } t | ^ q1 } | j j | d | d | Sd S( Ns# In check mode, would have run: "%s"i t t use_unsafe_shellt data( i Ra Ra ( R7 t
check_modet debugt strt run_command( RG t cmdRb Rc t obey_checkmodet x( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt execute_command& s
c C` s- | j j r) | j r) | j j | j Sd S( N( R7 Rd t
SHADOWFILEt backup_local( RG ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt
backup_shadow/ s c C` s | j r d } n d } | j j | t g } | j rI | j d n | j rb | j d n | j | j | j | S( Nt luserdelt userdels -fs -r( R. R7 t get_bin_pathRW R R% R R Rk ( RG t command_nameRh ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt remove_user_userdel3 s c C` sw | j r' d } | j j d t } n d } | j j | t g } | j d k r | j d | j | j | j r | j d q n | j d k r | j d | j | j n | j d k r| j
| j s | j j d d | j n | j d | j | j n | j
| j r t
j j d
rt j d t } t | d j d
d } | d k r| j d q| j d q t
j j d rt j d t } t | d j d
d } | d k r| j d qq | j d n | j d k rc| j rct | j rc| j } | j d | j d j | n | j d k r| j d | j | j n | j d k r| j rt
j j | j } t
j j | s| j | j qn | j d | j | j n | j d k r6| j d | j | j n | j d k r| j r| j d | j t! j" d k r| j d q| j t! j# | j$ | j n | j% d k r| j d | j& r| j d | j% q| j | j% n | j rI| j s| j d n | j' d k rV| j d | j | j' qVn
| j d | j( ro| j d n | j | j | j) | \ } } }
| j s| d k r| | |
f S| j d k rj| j t! j" d k rd! } n# t t* j+ | j j, d" d# } | j) | d$ t- | | j g \ } } }
| | 7} |
|
7}
| d k rj| | |
f Sn | | |
f S(% Nt luseraddt lchaget useradds -us -os -ZR5 s Group %s does not exists -gs /etc/redhat-releaset full_distribution_namei t .i i s -ns -Ns /etc/SuSE-releasei s -GR3 s -cs -ds -ss -eRa s -ps !%ss -ms -ks -Ms -riR4 iQ s -E(. R. R7 Rq RW R R> R% R R R t group_existsRC R RE RF t existsR t linux_distributionRT t intRX R2 RY t get_groups_setR? R R, R t dirnamet isdirt create_homedirR R4 R@ RA t strftimet DATE_FORMATR R- R" R# Rk t matht floorR8 R ( RG Rr t
lchage_cmdRh t distt
major_releaseR2 t parentt rct outt errt lexpirest _outt _err( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt create_user_useraddB s
(
"
#-
c
C` s | j r d } n d } | j j | t } t j | t j sF t S| d g } | j | d t \ } } } | | } t | j
d } x' | D] } | j j d r t Sq Wt S( Nt lusermodt usermods --helpRi s
s -a, --append(
R. R7 Rq RW RE t accesst X_OKRT Rk R RX t stript
startswith(
RG Rr t usermod_pathRh R t data1t data2t helpoutt linest line( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt _check_usermod_append s
c C` s{ | j r- d } | j j d t } d } n d } | j j | t g } | j } | j } | j d k r | d t | j k r | j d | j | j | j
r | j d q n | j d k rK| j | j s| j j
d d | j n | j | j } | d | d k rK| j d
| j | j qKn | j d k r| j d t } t } g }
| j d k r| r"| j r"t } q"n | j d
t }
t | j |
} | r"| j rxC |
D]2 } | | k r| r| j d n t } PqqWq"t } n | r| j r| j rh| rh| j d | j d j | q| j d | j d j |
qn | j d k r| d | j k r| j d | j | j n | j d k r.| d | j k r.| j d | j | j | j r.| j d q.n | j d k rp| d | j k rp| j d | j | j n | j d k rt | j d }
| j t j d k r|
d k r| j rd } q| j d | j d qqt j |
d } |
d k s!| d | j d k r| j rPt t j | j j d d } q| j d | j t j! | j" | j qn | j# r| d j$ d r| j d n2 | j# t k r| d j$ d r| j d! n | j% d" k r| j& d k r| d j' d | j& j' d k rg | D] } | d& k r+| ^ q+} | j d# | j# rv| j d$ | j& q| j | j& n d' \ } } } t( | d k r| j | j) | j* | \ } } } n | j s| d k p| d k r| | | f S| d k rn| j* | d% t+ | | j) g \ } } } | | 7} | | 7} | d k rn| | | f Sn | | | f S(( NR Ru R i s -us -oR5 s Group %s does not existi s -gt exclude_primaryRa t remove_existings -as -AR3 s -Gi s -ci s -ds -mi s -si i is -eiQ R4 RL s -Ls -Ut alwayss -ps !%ss -E( s -Us -L( NRa Ra (, R. R7 Rq RW R> t user_infoR R R| R% R R Ry RC t
group_infoR2 t user_group_membershipRT R} RU t symmetric_differenceR? R R, R! R R4 t
user_passwordR@ RA R R R8 R R R- R R+ R t lstripRY R Rk R ( RG Rr R R Rh t infot
has_appendt ginfot current_groupst groups_need_modR2 t
group_difft gt current_expirest current_expire_datet cR R R R R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt modify_user_usermod s (
"
"
"
# &
% "C%
#
-
c C` sc y t j t | t SWnA t t f k
r^ y t j | t SWq_ t k
rZ t SXn Xd S( N( t grpt getgrgidR| RW t
ValueErrort KeyErrort getgrnamRT ( RG R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyRy Y s
c C` s^ | j | s t Sy t t j t | SWn' t t f k
rY t t j | SXd S( N( Ry RT t listR R R| R R R ( RG R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR e s c C` s | j d k r d S| j } t d | j j d D } xv | j D]h } | j | s} | j j d d | n | rN | rN | j | d | d k rN | j
| qN qN W| S( Nc s` s! | ] } | r | j Vq d S( N( R ( RM Rj ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pys r s R3 R5 s Group %s does not existi i ( R2 R> R RU RX t copyRy R7 RC R R ( RG R R R2 R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR} n s ")c C` s g } | j } xj t j D]\ } | j | j k r | sQ | j | d q{ | d | j k r{ | j | d q{ q q W| S( s- Return a list of groups the user belongs to i i ( t get_pwd_infoR t getgrallR t gr_memR% t gr_gid( RG R R2 R R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR z s c C` s$ | j r t j j | j s@ | j j d d j | j n t } d j | j } t
| j d P } | j d d d } x- | D]% } | j t
| r t } Pq q WWd QX| s | j j d j d | j d | j n | Sy t j | j r
t SWn t k
r t SXd S( NR5 sK 'local: true' specified but unable to find local account file {0} to parse.s {0}:t rbis 'local: true' specified and user '{name}' was not found in {file}. The local user account may already exist if the local account database exists somewhere other than {file}.t fileR ( R. RE RF Rz t PASSWORDFILER7 RC t formatRT R t opent readlinesR R RW R] t pwdt getpwnamR ( RG Rz t name_testt ft reversed_linesR ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt user_exists s* "
c C` s& | j s t St t j | j S( N( R RT R R R R ( RG ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s c C` sc | j s t S| j } t | d d k sH t | d d k r_ | j d | d R RB R RE RF R~ Rz R7 Rd t mkdirR| t chownR R Rq RW R% R; R: R< R= Re t ptyt openptyt environR t
subprocesst PopenR t setsidt pollt selectt readt writet
returncodeRk ( RG R t overwriteR6 RH t ssh_dirRh t master_in_fdt slave_in_fdt
master_out_fdt slave_out_fdt
master_err_fdt slave_err_fdR R t pt
out_buffert
err_bufferR t wt first_promptt
second_promptt promptt fdt chunkR R R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt ssh_key_gen s !
% '
#
#
"c C` s | j } t j j | s/ d d | d f S| j j d t g } | j d | j d | j | | j | d t S( Ni s SSH Key file %s does not existRa s
ssh-keygens -ls -fRi (
R RE RF Rz R7 Rq RW R% Rk RT ( RG R6 Rh ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt ssh_key_fingerprint@ s
c C` sW d | j } y. t | d } | j j } Wd QXWn t k
rR d SX| S( Ns %s.pubR ( R R R R t IOErrorR> ( RG t ssh_public_key_fileR t ssh_public_key( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt get_ssh_public_keyK s
c C` s
| j S( N( R ( RG ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt create_userT s c C` s
| j S( N( Rs ( RG ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt remove_userX s c C` s
| j S( N( R ( RG ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt modify_user\ s c C` s t j j | s| j d k r- | j } n d } t j j | r y t j | | d t Wq t k
r } | j j
d t d d t | q XnJ y t j | Wn6 t k
r } | j j
d t d d t | n Xt j j | j
rt | j
d } x | D] } t j d | } | rt | j d d } d
| @} y t j | | Wqt k
r} | j j
d t d d t | qXqqWWd QXqn d S( Ns /etc/skelt symlinkst failedR5 s %sR s ^UMASK\s+(\d+)$i i i ( RE RF Rz R" R> t shutilt copytreeRW R R7 t exit_jsonR t makedirst
LOGIN_DEFSR t ret matchR| R t chmod( RG RF R" RH R R t mt umaskt mode( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR ` s0 *'
c
C` s y t j | | | x t j | D]u \ } } } x0 | D]( } t j t j j | | | | q< Wx0 | D]( } t j t j j | | | | qo Wq& WWn6 t k
r } | j j d t d d t | n Xd S( NR
R5 s %s(
RE R t walkRF R? R R7 R
RW R (
RG R t gidRF t roott dirst filest dR RH ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt
chown_homedir~ s
&
.N(( t __name__t
__module__t __doc__RS R> t distributionR Rl R R R R RI R` RT RW Rk Rn Rs R R R Ry R R} R R R R R R R R R R R R R R R ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR sF 1 $ v !
[ t FreeBsdUserc B` sP e Z d Z d Z d Z d Z d Z d Z d Z d Z
d Z d Z RS(
s1
This is a FreeBSD User manipulation class - it uses the pw command
to manipulate the user database, followed by the chpass command
to change the password.
This overrides the following methods from the generic class:-
- create_user()
- remove_user()
- modify_user()
t FreeBSDs /etc/master.passwdi s %d-%b-%Yc C` s; | j } | j r | d j d r | j j d t d | j g } | j d k r | d t | j k r | j
d | j
| j n | j | S| j t k r7| d j d r7| j j d t d | j g } | j d k r*| d t | j k r*| j
d | j
| j n | j | Sd S(
Ni s *LOCKED*t pwt locki s -ut unlockRa ( NRa Ra (
R R- R R7 Rq RW R R R> R| R% Rk RT ( RG R Rh ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt _handle_lock s$ (
" (
c C` sJ | j j d t d d | j g } | j r= | j d n | j | S( NR# Rp s -ns -r( R7 Rq RW R R R% Rk ( RG Rh ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s c C` s | j j d t d d | j g } | j d k rl | j d | j | j | j rl | j d ql n | j d k r | j d | j | j n | j d k r | j d | j | j n | j
d k r(| j | j
s| j j d d | j
n | j d
| j | j
n | j
d k ri| j } | j d | j d j | n | j r| j d
| j d k r| j d | j | j qn | j d k r| j d | j | j n | j d k r| j d | j | j n | j d k ru| j d | j t j d k rS| j d qu| j t t j | j n | j | \ } } } | d k r| d k r| j j d | j d | d | n | j d k rD| j j d t d | j | j g } | j | \ } } } | d k r-| } n | | 7} | | 7} n | j \ } } } | d k rn| } n | | 7} | | 7} | | | f S( NR# Rv s -ns -us -os -cs -dR5 s Group %s does not exists -gs -GR3 s -ms -ks -ss -Ls -ei t 0R R t chpasss -p( R7 Rq RW R R R> R% R R R, R Ry RC R2 R} R? R R" R R$ R4 R@ RA Rf t calendart timegmRk R R& ( RG Rh R2 R R R t _rcR R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR sv
"%
c C` s^ | j j d t d d | j g } t | } | j } | j d k r | d t | j k r | j d | j | j | j
r | j d q n | j d k r | d | j k r | j d | j | j n | j d k r| d | j k r
| j
s)t j j | j r9| j r9| j d
n | d | j k rl| j d | j | j n | j d k r| j d | j | j qn | j d k r%| j | j s| j j d
d | j n | j | j } | d | d k r%| j d | j | j q%n | j d k rg| d | j k rg| j d | j | j n | j d k r6d } t j j | j rt j | j t j rt | j d D } x: | D]2 } | j d | j r| j d d } qqWWd QXn | j | k r6| j d | j | j q6n | j d k r | j } | j! } t" | j# | }
t$ } |
r| j rx- | D] } | |
k rt } PqqWqt } n | r | j d | }
| j r| t" | B}
n | j d j% |
q n | j& d k rt | j' d } | j& t( j) d k rt| d k r| j d | j d qqt( j) | } | d k s| d | j& d k r| j d | j t* t+ j, | j& qn d$ \ } } } | t | k re| j- | \ } } } | | 7} | | 7} | d k re| d k re| j j d | j d
| d | qen | j. d k r| j/ d k r| d j0 d! | j/ j0 d! k r| j j d" t d# | j/ | j g } | j- | \ } } } | d k r| } n | | 7} | | 7} n | j1 \ } } } | d k r=| } n | | 7} | | 7} | | | f S(% NR# R s -ni s -us -oi s -ci s -ms -ds -kR5 s Group %s does not existi s -gi s -sR s %s:R s -Ls -GR3 i i s -eR' Ra R R R s *LOCKED*R( s -p( NRa Ra (2 R7 Rq RW R RY R R R> R| R% R R R, R! RE RF Rz R R" R Ry RC R R R$ Rl R R R R RX R2 R R} RU R RT R? R4 R R@ RA Rf R) R* Rk R+ R R R& ( RG Rh t cmd_lenR R t user_login_classR R R R2 R R R t
new_groupsR R R R R R R R+ ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s (
"
;
"
-
#
#
%
(C
N(
R R R RS R> R Rl R R R& R R R ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR! s
Vt DragonFlyBsdUserc B` s e Z d Z d Z RS( s
This is a DragonFlyBSD User manipulation class - it inherits the
FreeBsdUser class behaviors, such as using the pw command to
manipulate the user database, followed by the chpass command
to change the password.
t DragonFly( R R R RS ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR/ s t OpenBSDUserc B` s; e Z d Z d Z d Z d Z d Z d Z d Z RS( s,
This is a OpenBSD User manipulation class.
Main differences are that OpenBSD:-
- has no concept of "system" account.
- has no force delete user
This overrides the following methods from the generic class:-
- create_user()
- remove_user()
- modify_user()
t OpenBSDs /etc/master.passwdc C` s^ | j j d t g } | j d k r` | j d | j | j | j r` | j d q` n | j d k r | j | j s | j j d d | j n | j d | j | j n | j
d k r | j } | j d | j d j | n | j
d k r.| j d | j | j
n | j d k r]| j d
| j | j n | j d k r| j d | j | j n | j d k r| j d | j | j n | j d k r| j d
k r| j d | j | j n | j rA| j d | j d k rA| j d | j | j qAn | j | j | j | S( NRv s -us -oR5 s Group %s does not exists -gs -GR3 s -cs -ds -ss -LRK s -ps -ms -k( R7 Rq RW R R> R% R R Ry RC R2 R} R? R R, R R$ R R R" R Rk ( RG Rh R2 ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR sJ
c C` sN | j j d t g } | j r1 | j d n | j | j | j | S( NRp s -r( R7 Rq RW R R% R Rk ( RG Rh ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyRs s
c
C` s | j j d t g } | j } | j d k r | d t | j k r | j d | j | j | j r | j d q n | j d k r | j
| j s | j j d d | j n | j | j } | d | d k r | j d | j | j q n | j
d k r| j } t } d } g } | j
d
k rd| r| j rt } qni | j } t | j | } | r| j rx3 | D]" } | | k rd } t } PqqWqt } n | r| j | | j d j | qn | j d k r>| d
| j k r>| j d | j | j n | j d k r| d | j k r| j ry| j d n | j d | j | j n | j d k r| d | j k r| j d | j | j n | j d k rd }
| j j d t | j g } | j | d t \ } }
} xO |
j D]A } | j } | d d k r9t | d k r9| d }
q9q9W| j |
k r| j d | j | j qn | j r| d j d r| j d n2 | j t k r| d j d r| j d n | j d k ro| j! d k ro| j! d k ro| d | j! k ro| j d | j | j! n t | d k rd S| j | j | j | S( NR i s -us -oR5 s Group %s does not existi s -gs -SRa s -GR3 i s -ci s -ms -di s -st userinfoRi i t classi s -LRK s -Zs -UR s -p( NRa Ra (" R7 Rq RW R R R> R| R% R R Ry RC R R2 R RT R} RU R R? R R, R! R R$ R Rk t
splitlinesRX RY R- R R+ R ( RG Rh R R R R t
groups_optionR2 R R R- t userinfo_cmdR R R R t tokens( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s (
"
"
"
"
" "
N(
R R R RS R> R Rl R Rs R ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR1 s 3 t
NetBSDUserc B` s; e Z d Z d Z d Z d Z d Z d Z d Z RS( s+
This is a NetBSD User manipulation class.
Main differences are that NetBSD:-
- has no concept of "system" account.
- has no force delete user
This overrides the following methods from the generic class:-
- create_user()
- remove_user()
- modify_user()
t NetBSDs /etc/master.passwdc C` s | j j d t g } | j d k r` | j d | j | j | j r` | j d q` n | j d k r | j | j s | j j d d | j n | j d | j | j n | j
d k r1| j } t | d k r | j j d d t | n | j d | j d
j
| n | j d k r`| j d | j | j n | j d k r| j d | j | j n | j d k r| j d
| j | j n | j d k r| j d | j | j n | j d k r | j d | j | j n | j rd| j d | j d k rd| j d | j | j qdn | j | j | j | S( NRv s -us -oR5 s Group %s does not exists -gi s. Too many groups (%d) NetBSD allows for 16 max.s -GR3 s -cs -ds -ss -Ls -ps -ms -k( R7 Rq RW R R> R% R R Ry RC R2 R} RY R? R R, R R$ R R R" R Rk ( RG Rh R2 ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR g sN
c C` sN | j j d t g } | j r1 | j d n | j | j | j | S( NRp s -r( R7 Rq RW R R% R Rk ( RG Rh ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyRs s
c C` s( | j j d t g } | j } | j d k r | d t | j k r | j d | j | j | j r | j d q n | j d k r | j
| j s | j j d d | j n | j | j } | d | d k r | j d | j | j q n | j
d k r7| j } t } g } | j
d k r^| r| j rt } qnx | j } t | j | } | r| j rxB | D]1 } | | k rt | j | } t } PqqWqt } n | r7t | d
k r| j j d d t | n | j d | j d
j | q7n | j d k ry| d | j k ry| j d | j | j n | j d k r| d | j k r| j r| j d n | j d | j | j n | j d k r| d | j k r| j d | j | j n | j d k rE| j d | j | j n | j d k r| j d k r| d | j k r| j d | j | j n | j r| d j d r| j d n2 | j t k r| d j d r| j d n t | d k r d S| j | j | j | S( NR i s -us -oR5 s Group %s does not existi s -gRa i s. Too many groups (%d) NetBSD allows for 16 max.s -GR3 i s -ci s -ms -di s -ss -LR i s -ps *LOCKED*s -C yess -C no( NRa Ra (! R7 Rq RW R R R> R| R% R R Ry RC R R2 R RT R} RU R t unionRY R? R R, R! R R$ R+ R R- R R Rk ( RG Rh R R R R R2 R R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR sz (
"
"
"
1
"N(
R R R RS R> R Rl R Rs R ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR9 U s 5 t SunOSc B` s\ e Z d Z d Z d
Z d Z d Z d Z d Z d Z
d Z d Z d Z
RS( s
This is a SunOS User manipulation class - The main difference between
this class and the generic user class is that Solaris-type distros
don't support the concept of a "system" account and we need to
edit the /etc/shadow file manually to set a password. (Ugh)
This overrides the following methods from the generic class:-
- create_user()
- remove_user()
- modify_user()
- user_info()
R< s /etc/shadows /etc/user_attrc
C` sE yd } d } d } t d d } x | D] } | j } | j d s. | d k ra q. n t j d | } | r | j d } n | j d \ } } | d k r | j d } q. | d
k r | j d } q. | d k r. | j d } q. q. WWd QXWn0 t k
r7} | j j
d d
t | n X| | | f S( NRa s /etc/default/passwdR t #s ^([^#]*)#(.*)$i t =t MINWEEKSs
t MAXWEEKSt WARNWEEKSR5 s& failed to read /etc/default/passwd: %s( R R R R R R RX t rstripRB R7 RC R (
RG t minweekst maxweekst warnweeksR R R t keyt valueR ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt get_password_defaults s,
!c C` sN | j j d t g } | j r1 | j d n | j | j | j | S( NRp s -r( R7 Rq RW R R% R Rk ( RG Rh ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR " s
c
C` s | j j d t g } | j d k r` | j d | j | j | j r` | j d q` n | j d k r | j | j s | j j d d | j n | j d | j | j n | j
d k r | j } | j d | j d j | n | j
d k r.| j d | j | j
n | j d k r]| j d
| j | j n | j d k r| j d | j | j n | j r| j d | j d k r| j d
| j | j qn | j d k r| j d | j | j n | j d k r2| j d | j | j n | j d k ra| j d | j | j n | j | j | j | \ } } } | d k r| d k r| j j d | j d | d | n | j j s| j d k r| j | j \ } } } yg } t | j d c}
xY|
D]Q} t | d d } | j j d } | d | j k sx| j | q%n | j | d R% R R Ry RC R2 R} R? R R, R R R" R/ R0 R1 R Rk Rd R Rn RH R Rl R R RX Rf R| R@ R t
writelinesRB (
RG Rh R2 R R R RC RD RE R R R R_ ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR * s
%
'c C` s0 | j j d t g } t | } | j } | j d k r | d t | j k r | j d | j | j | j r | j d q n | j
d k r| j | j
s | j j d d | j
n | j
| j
} | d | d k r| j d | j | j
qn | j d k r| j } | j } t | j | } t } | r| j rx- | D] } | | k rpt } PqpqpWqt } n | r| j d | }
| j r|
j | n | j d
j |
qn | j d k r,| d | j k r,| j d | j | j n | j d k r| d
| j k r| j rg| j d n | j d | j | j n | j d k r| d | j k r| j d | j | j n | j d k r | d | j k r | j d | j | j n | j d k rM| d | j k rM| j d | j | j n | j d k r| d | j k r| j d | j | j n | t | k r | j | j | j | \ } } }
| d k r| d k r| j j d | j d |
d | qn d& \ } } }
| j d k r#| j d k r#| d | j k r#| j! d' \ } } }
| j j" s#| j# \ } } } ygg } t$ | j% d } x| D] } t& | d d } | j' j( d! } | d | j k s| j | qn | j | d R| R% R R Ry RC R R2 R R} RU R RT t updateR? R R, R! R R/ R0 R1 R Rk R+ R Rn Rd RH R Rl R R RX Rf R@ RJ RB ( RG Rh R, R R R R2 R R R R. R R R RC RD RE R R R R_ ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s (
"
"
"
"
"
"
(1
'c C` s2 t t | j } | r. | | j 7} n | S( N( t superR< R t _user_attr_info( RG R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s c C` s d g d } t | j d } x | D] } | j j d } | d | j k r) t d | d j d D } | j d d | d <| j d
d | d <| j d d | d N( RX ( RM Rj ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pys s i t ;t profilest authst rolesi ( R t USER_ATTRR RX R t dictt get( RG R t file_handlerR R t tmp( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyRM s
##N( R R R RS R> R Rl RR RH R R R R RM ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR< s e n t
DarwinUserc B` s e Z d Z d Z d Z d Z d Z d d d! d" d# d$ g Z d Z d Z
d Z d Z d d Z
d Z d Z d Z d Z d Z d Z d Z d d Z d Z RS(% s
This is a Darwin macOS User manipulation class.
Main differences are that Darwin:-
- Handles accounts in a database managed by dscl(1)
- Has no useradd/groupadd
- Does not create home directories
- User password must be cleartext
- UID must be given
- System users must ben under 500
This overrides the following methods from the generic class:-
- user_exists()
- create_user()
- remove_user()
- modify_user()
RJ Rx R t RealNameR, t NFSHomeDirectoryR t UserShellR t UniqueIDR t PrimaryGroupIDR t IsHiddenc C` s t t | j | | j d k r= | j r[ d | _ q[ n | j rR d | _ n d | _ | j d k r} | j j d n d S( Ni i R R] ( s hiddenR] ( RL RW RI R R> R# R_ R% ( RG R7 ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyRI 0 s c C` s | j j d t | j g S( Nt dscl( R7 Rq RW t dscl_directory( RG ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt _get_dsclA s c C` s | j } | d d d | j g 7} | j | d t \ } } } g } xO | j D]A } | j d sV | j d r qV n | j | j d qV W| S( Ns -searchs /Groupst GroupMembershipRi t t )i ( R` R Rk RT R5 R R% RX ( RG Rh R R R R2 R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt _list_user_groupsD s c C` s | j } | d d | j | g 7} | j | d t \ } } } | d k rT d S| j } t | d k r | d j d d St | d k r d j | d j g | d St | d k r | d j Sd Sd S(
sC Return user PROPERTY as given my dscl(1) read or None if not found.s -reads /Users/%sRi i i s : i s
N(
R` R Rk RT R> R5 RY RX R? R ( RG t propertyRh R R R R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt _get_user_propertyO s "c
C` s | j } | d d d g 7} | j | d t \ } } } | d k rq | j j d d d | d | d
| n d } d } xc | j D]U } t | j d d } | | k r | } n | | k r | d
k r | } q q W| r
d | k o d k n r
| d S| d S( sv
Return the next available uid. If system=True, then
uid should be below of 500, if possible.
s -lists /UsersR[ Ri i R5 s$ Unable to get the next available uidR R R Rb ii i i ( R` Rk RT R7 RC R5 R| RX (
RG R# Rh R R R t max_uidt max_system_uidR t current_uid( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt
_get_next_uidf s(
"c C` s | j } | j r5 | d d | j | j g 7} n | d d | j d d g 7} | j | \ } } } | d k r | j j d d d | d
| d | n | | | f S( ss Change password for SELF.NAME against SELF.PASSWORD.
Please note that password must be cleartext.
s -passwds /Users/%ss -createt PasswordRK i R5 s Error when changing passwordR R R ( R` R R Rk R7 RC ( RG Rh R R R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt _change_user_password s (c C` s{ | j d k r d | _ n y t j | j j | _ Wn+ t k
rd | j j d d | j n Xt | j | _ d S( sD Convert SELF.GROUP to is stringed numerical value suitable for dscl.t nogroupR5 sB Group "%s" not found. Try to create it first using "group" module.N( R R> R R R R R7 RC Rf ( RG ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt _make_group_numerical s
c C` s | d k r d } n d } d d d | | j d d | g } | j | \ } } } | d k r | j j d
d | | j | f d | d
| d | n | | | f S( s Add or remove SELF.NAME to or from GROUP depending on ACTION.
ACTION can be 'add' or 'remove' otherwise 'remove' is assumed. t adds -as -dt dseditgroups -ot edits -tt useri R5 s" Cannot %s user "%s" to group "%s".R R R ( R Rk R7 RC ( RG R t actiont optionRh R R R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt __modify_group s ! )c C` s* d } d } d } t } t | j } | j d k rT t | j j d } n t g } | j t k r xT | | D]E } | j | d \ } } }
| | 7} | | 7} | |
7} t } qz Wn xQ | | D]E } | j | d \ } } }
| | 7} | | 7} | |
7} t } q W| | | | f S( s Add or remove SELF.NAME to or from GROUP depending on ACTION.
ACTION can be 'add' or 'remove' otherwise 'remove' is assumed. i Ra R3 t deleteRo N( RT RU Rd R2 R> RX R% t _DarwinUser__modify_groupRW ( RG R R R t changedt currentt targetR R+ R R Ro ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt
_modify_group s,
c C` s d } d d | d g } | j | d t \ } } } g } x_ | j d d !D]J } y | j d d } Wn t k
r | j } n X| j | qP W| j r+| j | k rd d | d d
| j g } | j | \ } } } | d k r$| j j
d d
| j d | d | d | n d Sn | j | k r| | j | j =d d | d d g | } | j | \ } } } | d k r| j j
d d | j d | d | d | n d Sd S( sv Hide or show user on login window according SELF.SYSTEM.
Returns 0 if a change has been made, None otherwise.s0 /Library/Preferences/com.apple.loginwindow.plistt defaultsR t HiddenUsersListRi i it "R s
-array-addi R5 s% Cannot user "%s" to hidden user list.R R R s -arrays. Cannot remove user "%s" from hidden user list.N( Rk RT R5 RX t
IndexErrorR R% R# R R7 RC t index( RG t
plist_fileRh R R R t hidden_usersRj ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt _update_system_user s0
/ /c C` sK | j } | d d | j g 7} | j | d t \ } } } | d k S( s1 Check is SELF.NAME is a known user on the system.s -lists /Users/%sRi i ( R` R Rk RT ( RG Rh R R R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s c C` s | j } | j } | d d | j g 7} | j | \ } } } | d k r | j j d d | j d | d | d | n | j r t j j | d r t
j | d | d
| d 7} q n | | | f S( sC Delete SELF.NAME. If SELF.FORCE is true, remove its home directory.s -deletes /Users/%si R5 s Cannot delete user "%s".R R R i s
Removed %s( R R` R Rk R7 RC R RE RF Rz R t rmtree( RG R Rh R R R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s / R^ c
C` s | j } | d d | j g 7} | j | \ } } } | d k rv | j j d d | j d | d | d | n | j | j d k r t | j | j
| _ n | j r:| j d k r d | j | _ n | j j
s:t j j | j s t j | j n | j t | j t | j | j q:n | j
r_| j d k r_d | _ n x | j D] } | d | j k ri| j | d ri| j } | d d | j | d
| j | d g 7} | j | \ } } } | d k r(| j j d d | d | j f d | d | d | n | | 7} | | 7} | d k rX| | | f SqiqiW| j \ } } } | | 7} | | 7} | j | j r| j \ } } } } | | 7} | | 7} n | | | f S( Ns -creates /Users/%si R5 s Cannot create user "%s".R R R s /bin/bashi s& Cannot add property "%s" to user "%s".( R` R Rk R7 RC Rn R R> Rf Rj R# R R, Rd RE RF Rz R R R| R R R_ t __dict__Rl R R2 R{ (
RG Rr Rh R R R t fieldR R Rx ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR sJ /
. $ , 9
c C` s d } d } d } | j r( | j n x&| j D]} | d | j k r2 | j | d r2 | j | d } | d k s | t | j | d k rM| j } | d d | j | d | j | d g 7} | j | \ } } } | d k r-| j
j d d | d | j f d | d | d
| n | } | | 7} | | 7} qMq2 q2 W| j d k r| j
d k r| j \ } } } | | 7} | | 7} | } n | j r| j \ } } } }
| | 7} | | 7} |
t k r| } qn | j } | d k r| } n | | | f S( NRa i i s -creates /Users/%sR5 s* Cannot update property "%s" for user "%s".R R R R ( R> R Rn R_ R Rf R
R` R Rk R7 RC R+ R Rl R2 R{ RW R ( RG Rx R R R Ry Rh R R R t _changed( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR H sD
$) , *
N( s commentRX ( s homeRY ( s shellRZ ( s uids UniqueID( s groupR\ ( s hiddens IsHidden( R R R RS R> R Rl R_ R_ RI R` Rd Rf Rj Rl Rn Rw R{ R R R R R ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyRW s2 ) 4t AIXc B` sG e Z d Z d Z d Z d Z d Z d d Z d Z d Z
RS( s
This is a AIX User manipulation class.
This overrides the following methods from the generic class:-
- create_user()
- remove_user()
- modify_user()
- parse_shadow_file()
R s /etc/security/passwdc C` sN | j j d t g } | j r1 | j d n | j | j | j | S( NRp s -r( R7 Rq RW R R% R Rk ( RG Rh ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s
Rv c C` sp | j j | t g } | j d k rG | j d | j | j n | j d k r | j | j s | j j d d | j n | j d | j | j n | j d k r t
| j r | j } | j d | j d j | n | j
d k r$| j d | j | j
n | j d k rS| j d | j | j n | j d k r| j d | j | j n | j r| j d
| j d k r| j d | j | j qn | j | j | j | \ } } } | j d k rcg } | j | j j d t | j d
| j d | j | d d | j | j f n | | | f S( Ns -uR5 s Group %s does not exists -gs -GR3 s -cs -ds -ss -ms -kt chpasswds -eRc s %s:%s( R7 Rq RW R R> R% R Ry RC R2 RY R} R? R R, R R R" R Rk R ( RG Rr Rh R2 R R R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR sH
&c
C` s | j j d t g } | j } | j d k rl | d t | j k rl | j d | j | j n | j d k r | j | j s | j j
d d | j n | j | j } | d | d k r | j d | j | j q n | j d k r| j
} t } g } | j d k rE| r| j rt } qnc | j } t | j | } | r| j rx- | D] } | | k r|t } Pq|q|Wqt } n | r| j d | j d
j | qn | j d k r| d | j k r| j d | j | j n | j d k rt| d
| j k rt| j rT| j d n | j d | j | j n | j d k r| d | j k r| j d | j | j n t | d k rd \ } }
} n( | j | j | j | \ } }
} | j d k r| j d k r| d | j k rg } | j | j j d t | j d | j d | j | d d | j | j f \ } }
} n d \ } }
} | d k r| |
|
| | f S| |
|
| | f Sd S( NR i s -uR5 s Group %s does not existi s -gRa s -GR3 i s -ci s -ms -di s -si R R s -eRc s %s:%s( NRa Ra ( NRa Ra ( R7 Rq RW R R R> R| R% R Ry RC R R2 R RT R} RU R R? R R, R! R RY R Rk R+ R ( RG Rh R R R R R2 R R R R R t rc2t out2t err2( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR sp (
"
"
"
1
1 c C` s~ t | j } d } d } t j j | j rVt j | j t j rVt | j d } | j } Wd QXd } d } y xM t
| D]? \ } } | j d | r | | d } | | d } Pq q Wd | k r | j d d d j
} n d | k r$| j d d d j
} n WqVt k
rR| j j d d
| j qVXn t | }
t | pqd } |
| f S( s Example AIX shadowfile data:
nobody:
password = *
operator1:
password = {ssha512}06$xxxxxxxxxxxx....
lastupdate = 1549558094
test1:
password = *
lastupdate = 1553695126
Ra R Ns %s:i i s = iR5 s Failed to parse shadow file %s( R R RE RF Rz Rl R R R R t enumerateR RX R R R7 RC R ( RG t b_namet b_passwdt b_expirest bft b_linest
b_passwd_linet b_expires_lineR t b_lineR R4 ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR
s. - #
! N( R R R RS R> R Rl R R R R ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s s 2 Mt HPUXc B` s; e Z d Z d Z d Z d Z d Z d Z d Z RS( s
This is a HP-UX User manipulation class.
This overrides the following methods from the generic class:-
- create_user()
- remove_user()
- modify_user()
s HP-UXs /etc/shadowc C` s d g } | j d k rQ | j d | j | j | j rQ | j d qQ n | j d k r | j | j s | j j d d | j n | j d | j | j n | j d k r t | j r | j
} | j d | j d j | n | j d k r.| j d | j | j n | j
d k r]| j d
| j | j
n | j d k r| j d | j | j n | j d k r| j d | j | j n | j r| j d
n
| j d | j r| j d n | j | j | j | S( Ns /usr/sam/lbin/useradd.sams -us -oR5 s Group %s does not exists -gs -GR3 s -cs -ds -ss -ps -ms -Ms -r( R R> R% R R Ry R7 RC R2 RY R} R? R R, R R R R# R Rk ( RG Rh R2 ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR F
sD
c C` sX d g } | j r" | j d n | j r; | j d n | j | j | j | S( Ns /usr/sam/lbin/userdel.sams -Fs -r( R R% R R Rk ( RG Rh ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR v
s c
C` sy d g } | j } | j d k rv | d t | j k rv | j d | j | j | j rv | j d qv n | j d k r | j | j s | j j d d | j n | j
| j } | d | d k r | j d | j | j q n | j d k r | j } t
} g } | j d k rO| r| j rt } qni | j d
t
} t | j | } | r| j rx- | D] } | | k rt } PqqWqt } n | r | j d | } | j r| t | B} n | j d j | q n | j d k rK| d
| j k rK| j d | j | j n | j d k r| d | j k r| j d | j | j | j r| j d qn | j d k r| d | j k r| j d | j | j n | j d k rF| j d k rF| d | j k rF| j d | j d | j | j n t | d k r\d S| j | j | j | S( Ns /usr/sam/lbin/usermod.sami s -us -oR5 s Group %s does not existi s -gRa R s -GR3 i s -ci s -ds -mi s -sR i s -Fs -p( NRa Ra ( R R R> R| R% R R Ry R7 RC R R2 R RT RW R} RU R R? R R, R! R R+ R RY R Rk (
RG Rh R R R R R2 R R R. ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR
sn (
"
"
"
1
N(
R R R RS R> R Rl R R R ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR 8
s 0 t BusyBoxc B` s) e Z d Z d Z d Z d Z RS( s
This is the BusyBox class for use on systems that have adduser, deluser,
and delgroup commands. It overrides the following methods:
- create_user()
- remove_user()
- modify_user()
c C` s | j j d t g } | j d | j d k rT | j d | j | j n | j d k r | j | j s | j j d d j | j n | j d | j | j n | j
d k r | j d | j | j
n | j d k r| j d | j | j n | j d k rD| j d | j | j n | j
s]| j d
n | j d k r| j d | j | j n | j r| j d n | j | j | j | \ } } } | d k r
| d
k r
| j j d | j d | d | n | j d k r| j j d t g } | j d d j d | j d | j } | j | d | \ } } } | d k r| d
k r| j j d | j d | d | qn | j d k rtt | j rt| j } | j j d t } xx | D]m } | | j | g } | j | \ } } } | d k r | d
k r | j j d | j d | d | q q Wn | | | f S( Nt addusers -Ds -uR5 s Group {0} does not exists -Gs -gs -hs -ss -Hs -ks -Si R R R s --encrypteds {name}:{password}R Rc ( R7 Rq RW R% R R> R Ry RC R R R, R R R" R# R Rk R R2 RY R} ( RG Rh R R R Rc R2 t add_cmd_binR ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR
s\
"
%
(
,c C` sD | j j d t | j g } | j r7 | j d n | j | S( Nt delusers
--remove-home( R7 Rq RW R R R% Rk ( RG Rh ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s
c C` s | j } g } d } d } d } | j } | j j d t } | j j d t } | j d k rt | j r| j } t | j
| } | rx | D]| }
|
| k r | | j |
g } | j | \ } } } | d k r"| d k r"| j j
d | j d | d | q"q q Wx | D] }
|
| k r-| j r-| | j |
g } | j | \ } } } | d k r| d k r| j j
d | j d | d | qq-q-Wqn | j d k r| j d k r| d | j k r| j j d
t g }
|
j d d j d | j d
| j } | j |
d | \ } } } | d k r| d k r| j j
d | j d | d | qn | | | f S( NRa R t delgroupi R R5 R R i R s --encrypteds {name}:{password}R Rc ( R R> R R7 Rq RW R2 RY R} RU R R Rk RC R% R+ R R ( RG R R2 R R R R R t remove_cmd_binR R t add_cmdt
remove_cmdRh Rc ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR s@
,
21
(( R R R R R R ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR
s A t Alpinec B` s e Z d Z d Z d Z RS( s
This is the Alpine User manipulation class. It inherits the BusyBox class
behaviors such as using adduser and deluser commands.
t LinuxR ( R R R RS R ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyR J s c
G C` s t d d d d d d d d t j } t d t d t d d
d d d
d d g d t d d
d t d d g d t d d d t d d d t d t d d
d t d d d t d d
d t d d d t d d
d t d d
d t d t d d
d t d d d! t d d
d" t d d d t d# t d d d t d$ t d d d t d d% g d& t d d
d' t d d d t d( t d d d t d) t d d d t d* t d d d+ t d d d | d d, t d d
d | d d- t d d d. t d d
d | d d/ t d d
d t d0 t d d
d d1 d
d1 d2 g d t d3 t d d4 d5 t d d d t d6 t d d d7 t d d
d8 t d d
d9 t d d
!d: t d; dN dO g } t | } | j | j d< | j
| j r$| j d= | j n d } d> } d> } i } | j | d <| j
| d <| j
d k r| j r| j r| j d? t n | j \ } } } | d k r| j d | j d@ | dA | n | j | d" <| j | d# t sockett gethostnameR
RW RT R R` Re RS R R R R Rd R
R RC R R R, R RE RF R~ R R R R R# R R% R! R R2 Rz R R9 R R R R R (
t ssh_defaultsR7 Rr R R R t resultt path_needs_parentsR R ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt mainS s ! '
"
$
"
!
"
t __main__(5 t
__future__R R R R t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNR R R) RE R R R R R R R R@ R t ansible.module_utilsR t ansible.module_utils.basicR R
t ansible.module_utils._textR R R
R RW R t ImportErrorRT t compileR[ t objectR R! R/ R1 R9 R< RW R R R R R R ( ( ( s? /usr/lib/python2.7/site-packages/ansible/modules/system/user.pyt s`
)e
d