|
Server : Apache/2.2.2 (Fedora) System : Linux App1.pathumtani.go.th 2.6.20-1.2320.fc5smp #1 SMP Tue Jun 12 19:40:16 EDT 2007 i686 User : apache ( 48) PHP Version : 5.2.9 Disable Function : NONE Directory : /usr/share/authconfig/ |
Upload File : |
m
Dc @ s d k Z d k Z d k Z d k Z d k Z d k Z d k l Z l Z d k l
Z
d Z e d o
d k Z n d f d YZ
d e
f d YZ e d j o^ e i e i e i e d
e d o
e Z n
e
Z e i e i d n d S( N( t _s
textdomain( s OptionParserc C s t i d i | d j S( Ni ( t syst argvt findt name( R ( ( t' /usr/share/authconfig/authconfig-tui.pyt runsAs s s authconfig-tuit
Authconfigc B st t Z d Z d Z d Z d Z d Z d Z d Z d Z d Z
d
Z d Z d Z
RS(
Nc C s" t } t } t } t } t } d S( N( t Falset nis_availt kerberos_availt
ldap_availt smb_availt cache_avail( t selfR R R
R R
( ( R t __init__& s
c C s d S( Nt
authconfig( ( R ( ( R t module- s c C s$ t i i d | i | f d S( Ns %s: %s
( R t stderrt writeR R t error( R R ( ( R t
printError0 s c C s t d | i } | i d j o | d 7} n t | } | i d d d d d t d | i d
d d d t d | i d d
d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d t d d t d | i d d t d d t d | i d d d d t d | i d d d d t d | i d d d d t d! | i d" d d d t d# | i d$ d t d d t d% | i d& d t d' d t d( | i d) d* d d d t d+ | i d, d- d d d t d. | i d/ d d d t d0 | i d1 d d d t d2 | i d3 d t d d t d4 | i d5 d t d d t d6 | i d7 d t d8 d t d9 | i d: d d d t d; | i d< d d d t d= | i d> d d d t d? | i d@ d d d t dA | i dB d d d t dC | i dD d d d t dE | i dF d t dG d t dH | i dI d t dJ d t dK | i dL d d d t dM | i dN d d d t dO | i dP d d d t dQ | i dR d d d t dS | i dT d dU d t dV | i dW d t d8 d t dX | i dY d t dZ d t d[ | i d\ d t dZ d t d] | i d^ d d_ d t d` | i da d db d t dc | i dd d de d t df | i dg d dh d t di | i dj d d d t dk | i dl d d d t dm | i dn d do d t dp | i dq d d d t dr | i ds d d d t dt | i du d d d t dv | i dw d d d t dx | i dy d dz d t d{ | i d| d d} d t d~ | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d j oB | i d d d d t d | i d d d d t d n# | i d d d d d t d | i d d d d t d | i d d d d t d | i \ | _ } | o$ | i
t d t i d n | i d j oL | i i
o> | i i o0 | i i o" | i i o | i d g n d S( Ns usage: %s [options]R s <--update|--test|--probe>s --enableshadows --useshadowt actiont
store_truet helps$ enable shadowed passwords by defaults --disableshadows% disable shadowed passwords by defaults --enablemd5s --usemd5s enable MD5 passwords by defaults --disablemd5s disable MD5 passwords by defaults --enableniss* enable NIS for user information by defaults --disableniss+ disable NIS for user information by defaults --nisdomaint metavars <domain>s default NIS domains --nisservers <server>s default NIS servers --enableldaps+ enable LDAP for user information by defaults
--disableldaps, disable LDAP for user information by defaults --enableldapauths) enable LDAP for authentication by defaults --disableldapauths* disable LDAP for authentication by defaults --ldapservers default LDAP servers --ldapbasedns <dn>s default LDAP base DNs --enableldaptlss --enableldapssls enable use of TLS with LDAPs --disableldaptlss --disableldapssls disable use of TLS with LDAPs --enablekrb5s) enable kerberos authentication by defaults
--disablekrb5s* disable kerberos authentication by defaults --krb5kdcs default kerberos KDCs --krb5adminservers default kerberos admin servers --krb5realms <realm>s default kerberos realms --enablekrb5kdcdnss' enable use of DNS to find kerberos KDCss --disablekrb5kdcdnss( disable use of DNS to find kerberos KDCss --enablekrb5realmdnss) enable use of DNS to find kerberos realmss --disablekrb5realmdnss* disable use of DNS to find kerberos realmss --enablesmbauths$ enable SMB authentication by defaults --disablesmbauths% disable SMB authentication by defaults --smbserverss <servers>s( names of servers to authenticate againsts --smbworkgroups <workgroup>s' workgroup authentication servers are ins --enablewinbinds. enable winbind for user information by defaults --disablewinbinds/ disable winbind for user information by defaults --enablewinbindauths, enable winbind for authentication by defaults --disablewinbindauths- disable winbind for authentication by defaults
--smbsecuritys <user|server|domain|ads>s* security mode to use for samba and winbinds
--smbrealms5 default realm for samba and winbind when security=adss
--smbidmapuids <lowest-highest>s4 uid range winbind will assign to domain or ads userss
--smbidmapgids4 gid range winbind will assign to domain or ads userss --winbindseparators <\>s the character which will be used to separate the domain and user part of winbind-created user names if winbindusedefaultdomain is not enableds --winbindtemplatehomedirs
</home/%D/%U>sG the directory which winbind-created users will have as home directoriess --winbindtemplateprimarygroups <nobody>sF the group which winbind-created users will have as their primary groups --winbindtemplateshells </bin/false>sD the shell which winbind-created users will have as their login shells --enablewinbindusedefaultdomains[ configures winbind to assume that users with no domain in their user names are domain userss --disablewinbindusedefaultdomains_ configures winbind to assume that users with no domain in their user names are not domain userss
--winbindjoins <Administrator>s> join the winbind domain or ads realm now as this administrators --enablewinss# enable wins for hostname resolutions
--disablewinss$ disable wins for hostname resolutions --enablehesiods- enable hesiod for user information by defaults --disablehesiods. disable hesiod for user information by defaults --hesiodlhss <lhs>s default hesiod LHSs --hesiodrhss <rhs>s default hesiod RHSs
--enablecaches- enable caching of user information by defaults --disablecaches. disable caching of user information by defaults --enablelocauthorizes1 local authorization is sufficient for local userss --disablelocauthorizes1 authorize local users also through remote services --enablesysnetauths0 authenticate system accounts by network servicess --disablesysnetauths0 authenticate system accounts by local files onlys --nostarts+ do not start/stop portmap, ypbind, and nscds --tests> do not update the configuration files, only print new settingss authconfig-tuis --backs< display Back instead of Cancel in the main dialog of the TUIs --kickstarts1 do not display the deprecated text user interfaces --updatesD opposite of --test, update configuration files with changed settingss --updatealls update all configuration filess --probes) probe network for defaults and print thems unexpected argumenti s -h( R R R t usaget OptionParsert parsert
add_optiont
parse_argst optionst argsR R t exitt probet testt updatet updateall( R R R R ( ( R t parseOptions3 s Lc C s | i | i } | i | i o# | i o d | i | i f GHn | i o# | i o d | i | i f GHn | i o- d | i | i
p d | i p d f GHn d S( Ns hesiod %s/%ss ldap %s/%s
s krb5 %s/%s/%s
t ( t authinfot AuthInfoR R R" t hesiodLHSt hesiodRHSt
ldapServert
ldapBaseDNt
kerberosRealmt kerberosKDCt kerberosAdminServer( R R( ( ( R R" s
c C s+ t i | i | _ | i i | _ d S( N( R( t readR R t infot copyt pristineinfo( R ( ( R t readAuthInfo s c C s t i t i t i o t i t i t i | _ t i t i t i | _ t i t i
t i o t i t i t i | _ t i t i
t i | _ t i t i t i | _ d S( N( t ost accessR( t PATH_YPBINDt X_OKt PATH_LIBNSS_NISR R t
PATH_PAM_KRB5R
t
PATH_PAM_LDAPt PATH_LIBNSS_LDAPR t PATH_PAM_SMBR t PATH_NSCDR
( R ( ( R t testAvailableSubsys s
44c C s h d d <d d <d d <d d <d d
<d d <d
d <d d <d d <d d <d d <d d <d d <d d <d d <d d <d! d" <d# d$ <} h d% d& <d' d( <d) d* <d+ d, <d- d. <d/ d0 <d1 d2 <d3 d4 <d5 d6 <d7 d8 <d9 d: <d; d< <d= d> <d? d@ <dA dB <dC dD <dE dF <dG dH <dI dJ <} xv | i D]h \ } } t | i dK | o t | i | t
n t | i dL | o t | i | t qfqfWxP | i D]B \ } } t | i | o# t | i | t | i | qqW| i i oS | i i i
dM dN } | dO | i _ t | dN j o | dN | i _ qn d S(P Nt shadowt enableShadowt md5t enableMD5t locauthorizet enableLocAuthorizet
sysnetautht enableSysNetAutht cachet enableCachet hesiodt enableHesiodt ldapt
enableLDAPt ldaptlst enableLDAPSt ldapautht enableLDAPAutht krb5t enableKerberost nist enableNISt
krb5kdcdnst kerberosKDCviaDNSt krb5realmdnst kerberosRealmviaDNSt smbautht enableSMBt winbindt
enableWinbindt winbindautht enableWinbindAutht winbindusedefaultdomaint winbindUseDefaultDomaint winst
enableWINSt hesiodlhsR* t hesiodrhsR+ t
ldapserverR, t
ldapbasednR- t krb5realmR. t krb5kdcR/ t krb5adminserverR0 t nisdomaint nisDomaint nisservert nisServert smbworkgroupt smbWorkgroupt
smbserverst
smbServerst smbsecurityt smbSecurityt smbrealmt smbRealmt smbidmapuidt smbIdmapUidt smbidmapgidt smbIdmapGidt winbindseparatort winbindSeparatort winbindtemplatehomedirt winbindTemplateHomedirt winbindtemplateprimarygroupt winbindTemplatePrimaryGroupt winbindtemplateshellt winbindTemplateShellt enablet disablet %i i ( t
bool_settingst string_settingst iteritemst optt aivalt getattrR R t setattrR2 t TrueR t winbindjoint splitt lstt joinUsert lent joinPassword( R R R R R R ( ( R t overrideSettings s"
'
c C s t S( N( R ( R ( ( R t doUI) s c C s" | i i o | i i n d S( N( R R R R2 t
joinDomain( R ( ( R R , s
c C so | i i | i i | i i o | i i n | i i | i | i | i i
| i i d S( N( R R2 t testLDAPCACertst rehashLDAPCACertsR R% R t writeChangedR4 R t postt nostart( R ( ( R t
writeAuthInfo0 s
c C s | i | i i o | i t i d n | i i o7 t i d j o$ | i t
d t i d n | i | i | i
| i p5 | i i o | i t
d n t i d n | i i o | i i n | i d S( Ni s can only be run as rooti s dialog was cancelledi ( R R& R R" R R! R# R6 t getuidR R R5 R@ R R R2 t printInfoR ( R ( ( R t run; s"
!
( t __name__t
__module__R R R R& R" R5 R@ R R R R R ( ( ( R R % s
8 t
AuthconfigTUIc B s t Z d Z d Z d Z d Z d d d Z d Z d Z d Z
d Z d
Z d Z
d Z d
Z d Z d Z d Z RS( Nc C s d S( Ns authconfig-tui( ( R ( ( R R P s c C s/ | i i o | i i o | i i n d S( N( R R t kickstartR R2 R ( R ( ( R R S s c C s | \ } } | i p d Sn x | oy t i | d t i pQ t d | d | d | d f } t i
| i t d | t d g n | d } q$ Wd S( Ni s The %s file was not found, but it is required for %s support to work properly.
Install the %s package, which provides this file.i i t Warningt Oki (
t datat compt warningt selectedR6 R7 t R_OKR t textt snackt ButtonChoiceWindowR t screen( R R R R R ( ( R t warnCallbackX s
%,c !
C s t i t d d d g } t i t d d d g } t i t d d d g } t i t d d d g } t i t d d d g } t i
t d
d d g } t i t d d
d g } t i t d d d g }
t i t d d |
g } t i t d d | g } t i d d } t i t d } | i | d d d d d d t i t d t | i i! } } | i | d d d d d d | i$ | i% | | f t i t d t | i i& } } | i | d d d d d d t i t d t | i i( } } | i | d d d d d d | i$ | i% | | f t i t d t | i i* } } | i | d d d d d d | i$ | i% | | f t i t d t | i i, } } | i | d d d d d d t i d d! } t i t d" } | i | d d d d d d t i t d# t | i i/ } } | i | d d d d d d t i t d$ t | i i1 } } | i | d d d d d d | i$ | i% | | f t i t d% t | i i3 } } | i | d d d d d d | i$ | i% | | f t i t d& t | i i5 } } | i | d d d d d d | i$ | i% | | f t i t d' t | i i7 } } | i | d d d d d d | i$ | i% | | f t i t d( t | i i9 }
} | i | d d d d d d | i$ | i% | | f t i t d) t | i i; } } | i | d d* d d d d t i d d } | i | d d d d d+ d d, d2 | i | d d d- d d+ d d, d3 t i d d } t i? | i@ iA o
t d. p
t d/ } t i? t d0 } | i | d d | i | d d t i d d } | i | d d d d | i | d d d d t iE } | iG iH | t d1 | iI | | iJ } | | j o | iK | i _! | iK | i _& | iK | i _( | iK | i _* | iK | i _, | iK | i _1 | iK | i _/ | iK | i _3 | iK | i _5 | iK | i _7 |
iK | i _9 | iK | i _; n | iG iL | | j S(4 Nt cachingt nscdt Kerberost pam_krb5s LDAP authenticationt nss_ldapt LDAPt NISt ypbinds shadow passwords shadow-utilss SMB authenticationt pam_smbt Winbinds samba-clients Winbind authentications samba-commoni i s User Informationi t
anchorLeftt growxs Cache Informations
Use Hesiodi s Use LDAPi s Use NISi s Use Winbindi i t Authentications Use MD5 Passwordss Use Shadow Passwordss Use LDAP Authentications Use Kerbeross Use SMB Authentications Use Winbind Authentications! Local authorization is sufficienti t anchorTopt paddingt anchorRightt Backt Cancelt Nexts Authentication Configuration( i i i i ( i i i i (M R( R? R t Nonet warnCacheR; t warnKerberosR< t warnLDAPAuthR= t warnLDAPR8 t warnNISt PATH_PWCONVt
warnShadowR> t warnSMBt PATH_WINBIND_NETt warnWinbindNett PATH_PAM_WINBINDt warnWinbindAutht PATH_LIBNSS_WINBINDt warnWinbindR t Gridt infoGridt LabelR t setFieldt Checkboxt boolR R2 RJ RI t cbt setCallbackR RL RK RN RM RV RU R^ R] t authGridRD RC RB RA RR t ldapaRT RS R\ t smbR` R_ RF RE t mechGridt
buttonGridt ButtonR t backt cancelt okt mainGridt Formt formR t gridWrappedWindowt addR R t popWindow(! R RS RK R R R R R R RI R R R R_ RM R R R R R] R RE RU RA R RC R R R R R R R ( ( R t getMainChoicesd s ( ( ( ( ( ( ( ( ( ( ( ( %%/
c C s t | } t i d | } d }
g } xx| D]p\ } } } } | d j op t i | t
t | i | } | i | | i t i d d |
d d | i | d |
d d n| d j o| t i | } | i | d |
d d d d t i d
t | i | d | } | i | | i | d |
d d nO| d
j o t i | } | i | d |
d d d d d d y# t | i | } | i | Wn t j
o | d } n Xd } g } x* | D]" } | i | | | | j f qWt i d | } | i | | i | d |
d d nV | d j oH t i d | d d d d } | i | | i | d |
d d n |
d 7}
q1 Wt i | o d p d d } t i" | } t i" | } | o t i" | p d }
| i | d d | o | i |
d d n | i | | o d p d d t i d d } | i | d d d d d d | i | d d d d d d t i) } | i+ i, | | | i. | x)t/ o!| i0 } | | j o Pn | } x | D] \ } } } } | d j o& t2 | i | | i3 d i4 q| d j o& t2 | i | | i3 d i5 q| d
j o& t2 | i | | i3 d i6 q| d j o | i3 d qqW| |
j o Pn | o | qqW| i+ i8 | | j S( Ni i t tfvalueR' R i R t svalueR i( t hiddenR t rvalueR t lvaluei2 t flexDownt flexUpi ( i i i i ( i i i i ( i i i i ( i i i i (9 R t itemst rowsR R t questionGridt rowt widgetst tt desct attrt valR R R R R2 R t appendR R R t Entryt selt indext
ValueErrorR t
buttonlistt vt RadioBart radioBart TextboxReflowedt
anothertxtR R t canceltxtR t oktxtR t anotherR R R R R t dtitleR R R t wcopyR t popR t valuet getSelectiont anothercbR ( R R R R R R R R R R R R R R R R R
R R R R R R R R R R R ( ( R t getGenericChoices s
$
"
$
%
!
&
&
&
c C sl d t d d d f d t d d d f g } | i t d | t d | o
t d p
t d
S( NR s LHS:R* i s RHS:R+ s Hesiod SettingsR R R ( R t questionsR R t next( R R R ( ( R t getHesiodSettings2 s 0c C s d t d d d f d t d d d f d t d d d f g } | i t d
| t d | o
t d p
t d
S( NR s Use TLSRP R s Server:R, i s Base DN:R- s
LDAP SettingsR R R ( R R R R R R ( R R R ( ( R t getLDAPSettings8 s Ec C sl d t d d d f d t d d d f g } | i t d | t d | o
t d p
t d
S( NR s Domain:Rm i s Server:Ro s NIS SettingsR R R ( R R R R R ( R R R ( ( R t getNISSettings? s 0c C s d t d d d f d t d d d f d t d d d f d t d
d d f d t d d
d f g } | i t d | t d | o
t d p
t d S( NR s Realm:R. i s KDC:R/ s
Admin Server:R0 R s" Use DNS to resolve hosts to realmsRZ s! Use DNS to locate KDCs for realmsRX s Kerberos SettingsR R R ( R R R R R R ( R R R ( ( R t getKerberosSettingsE s oc C s d t d d d f d t d d d f d t d d d f g } | i t d | t d
| o
t d p
t d S(
NR s
Workgroup:Rq i s Servers:Rs s Shell:R s SMB SettingsR R R ( R R R R R ( R R R ( ( R t getSMBSettingsN s Ec C s d t d d d f d t d d d f g } | i i p d | i _ n | i t d | t d
t d o; | i i | i i | i i t
| i i n t
S( NR s Domain Administrator:R i s Password:R i t
Administrators
Join SettingsR R ( R R R R2 R R R t suspendR$ R R t resume( R R ( ( R t getJoinSettingsU s 0
c C s d t d d d f g } t i | i } | i | i i t
} | i i | o. | i
t d | t d t d } n | o | i i n | i t S( NR s Some of the configuration changes you've made should be saved to disk before continuing. If you do not save them, then your attempt to join the domain may fail. Save changes?s
Save Settingst Not Yes( R R R R( R1 R R t orig_infoR$ R2 R t rett differsR R R R ( R R R R ( ( R t maybeGetJoinSettingsb s
c C s d d g } d d d d d d g } d } t | | } d
t d d | f d
t d d d f d
t d d d f d
t d d d f d
t d d | f g } | i t d | t d | o
t d p
t d d t d d | i S( Nt adst domains
/sbin/nologins /bin/shs /bin/bashs /bin/tcshs /bin/kshs /bin/zshc C s t i | t i S( N( R6 R7 t shellR9 ( R# ( ( R t shellexistsw s R s Security Model:Ru R s Domain:Rq i s Domain Controllers:Rs s
ADS Realm:Rw s Template Shell:R s Winbind SettingsR R R R s Join DomainR (
t securityt shellsR$ t filterR R R R R R ( R R R& R$ R R% ( ( R t getWinbindSettingsr s o)c C s d } t } x| d j o| d j o| i i | d j o | i } nn| d j o~ | i i om | i i pK | i i p> | i i
p1 | i i p$ | i i p | i i
p
| i i } | i | } qn| d j oq | i i p
| i i oS | i i
p1 | i i p$ | i i p | i i
p
| i i } | i | } qne| d j oW | i i oF | i i
p$ | i i p | i i
p
| i i } | i | } qn| d j oJ | i i
o9 | i i p | i i
p
| i i } | i | } qn | d j oX | i i oG | i i
p
| i i o, | i i
p
| i i } | i | } qnE | d j o7 | i i
p
| i i o t } | i | } qn | i i | o | d 7} q | d 8} q W| d j S(
Ni i i i i i i i i ( R R t rcR R2 R$ R RL RN RR RT RV R\ R^ R` t moreR R R R R R( ( R R* R) R ( ( R t
getChoices sH
Z
@
3
&
(
c C sB t d | i i } t i | i t d | t d g d S( Ns To connect to a LDAP server with TLS protocol enabled you need a CA certificate which signed your server's certificate. Copy the certificate in the PEM format to the '%s' directory.
Then press OK.R R ( R R R2 t
ldapCacertDirR R R R ( R R ( ( R t displayCACertsMessage s c C s | i i o t Sn z t i | _ | i } | i i t
d | i i d d | d | i p | i i
t Sn | i i o | i i o | i n Wd | i i
Xt S( NsN <Tab>/<Alt-Tab> between elements | <Space> selects | <F12> next screeni s - (c) 1999-2005 Red Hat, Inc.( R R R R R t SnackScreenR R t packageversiont pushHelpLineR t drawRootTextR+ t finishR R2 RP R R- ( R R/ ( ( R R s
( R R R R R R R R R R R R R R R R( R+ R- R ( ( ( R R O s o_
7 t __main__R i ( R( t acutilt gettextR6 t signalR t rhpl.translateR t
textdomaint optparseR R R R R R t SIGINTt SIG_DFLR R R! ( R R R R6 R R4 R5 R R R( R8 R R6 R ( ( R t ? s$ $
+