관리-도구
편집 파일: ipa.pyo
� u��ec @ sY d d l m Z m Z m Z d d l m Z d d l m Z d e e f d � � YZ d S( i����( t Plugint RedHatPlugint SoSPredicate( t glob( t existst Ipac B sh e Z d Z d Z d Z e Z e Z d Z d Z d � Z d � Z d � Z d � Z d � Z d � Z RS( s Identity, policy, audit t ipat identityt apaches /etc/ipas ipa-servers ipa-clients freeipa-servers freeipa-clientc C sN | j d � s' t d � s' t d � r+ d S| j d � sF t d � rJ d Sd S( Ns pki-servers /var/lib/pkis /usr/share/doc/ipa-server-4.2.0t v4s pki-commons /var/lib/pki-ca/t v3( t is_installedR t None( t self( ( s3 /usr/lib/python2.7/site-packages/sos/plugins/ipa.pyt check_ipa_server_version s c C s. t d | j � s& t d | j � r* t Sd S( Ns %s/conf/ca/CS.cfgs %s/conf/CS.cfg( R t pki_tomcat_dir_v4t pki_tomcat_dir_v3t True( R ( ( s3 /usr/lib/python2.7/site-packages/sos/plugins/ipa.pyt ca_installed' s c C s& | j d � s | j d � r" t Sd S( Ns ipa-servers freeipa-server( R R ( R ( ( s3 /usr/lib/python2.7/site-packages/sos/plugins/ipa.pyt ipa_server_installed- s c C sl | d k r: | j d d d d d d d d d d g � n. | d k rh | j d d d d d d g � n d S( NR s /var/log/pki/pki-tomcat/ca/debugs! /var/log/pki/pki-tomcat/ca/systems' /var/log/pki/pki-tomcat/ca/transactionss( /var/log/pki/pki-tomcat/ca/selftests.logs" /var/log/pki/pki-tomcat/catalina.*s /var/log/pki/pki-ca-spawn.*s! /var/log/pki/pki-tomcat/kra/debugs" /var/log/pki/pki-tomcat/kra/systems( /var/log/pki/pki-tomcat/kra/transactionss /var/log/pki/pki-kra-spawn.*R s /var/log/pki-ca/debugs /var/log/pki-ca/systems /var/log/pki-ca/transactionss /var/log/pki-ca/selftests.logs /var/log/pki-ca/catalina.*( t add_copy_spec( R t ipa_version( ( s3 /usr/lib/python2.7/site-packages/sos/plugins/ipa.pyt retrieve_pki_logs2 s( c C s d | _ d | _ d | _ d | _ | j � } | j � ry | j d � | j d | � | j d d d d d g � n | j � r� | j d � | j | � n | j d d d d d d d d d d d d d d d d d d d d d! d" d# g � | d$ k r| j | _ | j | _ n | j | _ | j | _ | j d% | j � | j d& | j � | j d' d( d) d* d+ d, d- d. d/ d0 | j d1 | j d2 | j g � | j d3 d4 d5 d6 d7 d8 d9 g � t | d: d; g �} | j d< d= | �x% t d> � D] } | j d? | � q�Wd S(@ Ns /var/lib/pki/pki-tomcats /var/lib/pki-cas /etc/pki/pki-tomcat/cas /etc/pki-cas IPA server install detecteds IPA version is [%s]s /var/log/ipaserver-install.logs" /var/log/ipaserver-kra-install.logs /var/log/ipareplica-install.logs" /var/log/ipareplica-ca-install.logs /var/log/ipa-custodia.audit.logs$ CA is installed: retrieving PKI logss /var/log/ipaclient-install.logs /var/log/ipaupgrade.logs /var/log/krb5kdc.logs# /var/log/dirsrv/slapd-*/logs/accesss# /var/log/dirsrv/slapd-*/logs/errorss /etc/dirsrv/slapd-*/dse.ldifs& /etc/dirsrv/slapd-*/schema/99user.ldifs /etc/hostss /etc/httpd/alias/*s /etc/named.*s /etc/ipa/ca.crts /etc/ipa/default.confs /etc/ipa/kdcproxy/kdcproxy.confs$ /etc/ipa/kdcproxy/ipa-kdc-proxy.confs /etc/ipa/kdcproxy.confs /root/.ipa/log/cli.logs# /var/lib/certmonger/requests/[0-9]*s /var/lib/certmonger/cas/[0-9]*s /var/lib/ipa/ra-agent.pems /var/lib/ipa/certs/httpd.crts /var/kerberos/krb5kdc/kdc.crts( /var/lib/ipa/sysrestore/sysrestore.states) /var/log/ipa/healthcheck/healthcheck.log*R s certutil -L -d %s/aliass %s/CS.cfgs /etc/pki/nssdb/key*s /etc/dirsrv/slapd-*/key*s /etc/dirsrv/slapd-*/pin.txts /etc/dirsrv/slapd-*/pwdfile.txts /etc/httpd/alias/ipasession.keys /etc/httpd/alias/key*s /etc/httpd/alias/pin.txts /etc/httpd/alias/pwdfile.txts /etc/named.keytabs %s/alias/key*s %s/flatfile.txts %s/password.confs" ls -la /etc/dirsrv/slapd-*/schema/s certutil -L -d /etc/httpd/alias/s pki-server cert-find --show-alls% pki-server subsystem-cert-validate cas klist -ket /etc/dirsrv/ds.keytabs% klist -ket /etc/httpd/conf/ipa.keytabs, klist -ket /var/lib/ipa/gssproxy/http.keytabt servicest certmongers getcert listt preds /etc/dirsrv/slapd-*/s certutil -L -d %s( R R t pki_tomcat_conf_dir_v4t pki_tomcat_conf_dir_v3R R t _log_debugR R R t pki_tomcat_dirt pki_tomcat_conf_dirt add_cmd_outputt add_forbidden_pathR R ( R R t getcert_predt certdb_directory( ( s3 /usr/lib/python2.7/site-packages/sos/plugins/ipa.pyt setupJ s� c C sf d } d } | j d | | � | j d d d � d } x' t | � D] } | j | d d � qE Wd S( Ns (\s*arg \"password )[^\"]*s \1********s /etc/named.confs getcert lists (pin=)'(\d+)'s \1'***'s# /var/lib/certmonger/requests/[0-9]*s (key_pin=)(\d+)s \1***( t do_file_subt do_cmd_output_subR ( R t matcht substt request_logst request_log( ( s3 /usr/lib/python2.7/site-packages/sos/plugins/ipa.pyt postproc� s ( R R ( s /etc/ipa( s ipa-servers ipa-clients freeipa-servers freeipa-client( t __name__t __module__t __doc__t plugin_namet profilest Falset ipa_servert ipa_clientt filest packagesR R R R R# R* ( ( ( s3 /usr/lib/python2.7/site-packages/sos/plugins/ipa.pyR s bN( t sos.pluginsR R R R t os.pathR R ( ( ( s3 /usr/lib/python2.7/site-packages/sos/plugins/ipa.pyt <module> s