Ahenk/usr/share/ahenk/plugins/local-user/edit_user.py

#!/usr/bin/python3
# -*- coding: utf-8 -*-
# Author:Mine DOGAN <mine.dogan@agem.com.tr>
# Author:Tuncay ÇOLAK <tuncay.colak@tubitak.gov.tr>
import subprocess

from base.plugin.abstract_plugin import AbstractPlugin
from pathlib import Path

class EditUser(AbstractPlugin):
    def __init__(self, task, context):
        super(EditUser, self).__init__()
        self.task = task
        self.context = context
        self.logger = self.get_logger()
        self.message_code = self.get_message_code()

        self.username = self.task['username']
        self.new_username = self.task['new_username']
        self.password = self.task['password']
        self.home = self.task['home']
        self.active = self.task['active']
        self.groups = self.task['groups']
        self.desktop_write_permission = self.task['desktop_write_permission']
        self.kiosk_mode = self.task['kiosk_mode']
        self.current_home = self.execute('eval echo ~{0}'.format(self.username))[1]

        self.script = '/bin/bash ' + self.Ahenk.plugins_path() + 'local-user/scripts/{0}'

        self.kill_processes = 'pkill -u {}'
        self.change_username = 'usermod -l {0} {1}'
        self.create_shadow_password = 'mkpasswd -m sha-512 {}'
        self.change_password = 'usermod -p {0} {1}'
        self.change_home = 'usermod -m -d {0} {1}'
        self.enable_user = 'passwd -u {}'
        self.disable_user = 'passwd -l {}'
        self.change_groups = 'usermod -G {0} {1}'
        self.remove_all_groups = 'usermod -G "" {}'
        self.change_owner = 'chown {0}.{0} {1}'
        self.change_permission = 'chmod 700 {}'
        self.logout_user = 'pkill -u {}'
        self.kill_all_process = 'killall -KILL -u {}'

        self.message = ''
        self.message_code_level = 1

        self.xfce4_session = "/usr/bin/xfce4-session"
        self.gnome_session = "/usr/bin/gnome-session"
        self.desktop_env = None
        self.logger.debug('Parameters were initialized.')

    def handle_task(self):
        try:
            self.desktop_env = self.get_desktop_env()
            self.logger.info("Get desktop environment is {0}".format(self.desktop_env))

            self.execute(self.logout_user.format(self.username))
            self.execute(self.kill_all_process.format(self.username))
            self.logger.debug('Killed all processes for {}'.format(self.username))

            if str(self.new_username).strip() != "":
                self.execute(self.kill_processes.format(self.username))
                self.execute(self.change_username.format(self.new_username, self.username))
                self.logger.debug('Changed username {0} to {1}'.format(self.username, self.new_username))
                self.username = self.new_username

            if str(self.password).strip() != "":
                result_code, p_out, p_err = self.execute_command(self.create_shadow_password.format(self.password))
                shadow_password = p_out.strip()
                self.execute_command(self.change_password.format('\'{}\''.format(shadow_password), self.username))
                self.logger.debug('Changed password.')

            if self.current_home != self.home:
                self.execute(self.kill_processes.format(self.username))
                self.execute(self.change_home.format(self.home, self.username))
                self.logger.debug('Changed home directory to: {}'.format(self.home))

            self.execute(self.change_owner.format(self.username, self.home))
            self.execute(self.change_permission.format(self.home))
            self.logger.debug('Changed owner and permission for home directory.')

            if self.active == "true":
                self.execute(self.enable_user.format(self.username))
                self.logger.debug('The user has been enabled.')
            elif self.active == "false":
                self.execute(self.disable_user.format(self.username))
                self.logger.debug('The user has been disabled.')

            if self.groups != "":
                self.execute(self.change_groups.format(self.groups, self.username))
                self.logger.debug('Added user to these groups: {}'.format(self.groups))
            else:
                self.execute(self.remove_all_groups.format(self.username))
                self.logger.debug('Removed all groups for user: {}'.format(self.username))

            agent_language = self.get_language()
            if agent_language == "tr_TR":
                desktop_name = "Masaüstü"
            else:
                desktop_name = "Desktop"
            if self.desktop_write_permission == "true":
                self.set_permission(self.current_home.strip() + "/" + desktop_name, 775)
                self.logger.debug('Desktop write permission is true')

            elif self.desktop_write_permission == "false":
                self.set_permission(self.current_home.strip() + "/" + desktop_name, 575)
                self.logger.debug('Desktop write permission is false')
            #
            # Handle kiosk mode
            #
            if self.desktop_env == "xfce":
                result_code, p_out, p_err = self.execute(self.script.format('find_locked_users.sh'), result=True)
                if result_code != 0:
                    self.logger.error('Error occurred while managing kiosk mode.')
                    self.message_code_level += 1
                    self.message = 'Masaüstü kilidi ayarlanırken hata oluştu.'
                locked_users = []
                if p_out:
                    self.logger.debug('pout {0}'.format(str(p_out)))
                    locked_users = p_out.strip().split(';')

                if self.kiosk_mode == "true":
                    self.logger.debug('Kiosk mode is active {0}'.format(str(locked_users)))
                    if self.username not in locked_users:
                        self.logger.debug('Adding user {0} to locked users'.format(self.username))
                        locked_users.append(self.username)
                    locked_users_str = ";".join(locked_users)
                    self.logger.debug('Users: {0}'.format(locked_users_str))
                    comm = "sed -i 's/^.*" + '<channel name="xfce4-panel"' + ".*$/" + '<channel name="xfce4-panel" version="1.0" locked="' + locked_users_str + '">' + "/' /etc/xdg/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml"
                    result_code1, p_out1, p_err1 = self.execute(comm)
                elif self.kiosk_mode == "false":
                    self.logger.debug('Kiok mode is NOT active')
                    if self.username in locked_users:
                        self.logger.debug('Removing user {0} from locked users'.format(self.username))
                        locked_users.remove(self.username)
                    if locked_users:
                        locked_users_str = ";".join(locked_users)
                        comm = "sed -i 's/^.*" + '<channel name="xfce4-panel"' + ".*$/" + '<channel name="xfce4-panel" version="1.0" locked="' + locked_users_str + '">' + "/' /etc/xdg/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml"
                        result_code1, p_out1, p_err1 = self.execute(comm)
                    else:
                        self.execute(self.script.format('remove_locked_users.sh '))
            else:
                self.logger.info("Desktop environ is GNOME. Kiosk mode not setting")
            self.logger.info('User has been edited successfully.')

            if self.message_code_level == 1:
                response_code = self.message_code.TASK_PROCESSED.value
                response_message = 'Kullanıcı başarıyla düzenlendi.'
            else:
                response_code = self.message_code.TASK_WARNING.value
                response_message = 'Kullanıcı düzenlendi; fakat {0}'.format(self.message)
            self.context.create_response(code=response_code, message=response_message)

        except Exception as e:
            self.logger.error('A problem occurred while handling Local-User task: {0}'.format(str(e)))
            self.context.create_response(code=self.message_code.TASK_ERROR.value,
                                         message='Local-User görevi çalıştırılırken bir hata oluştu.')

    ## this methode is only for local-user password plugin
    def execute_command(self, command, stdin=None, env=None, cwd=None, shell=True, result=True):
        try:
            process = subprocess.Popen(command, stdin=stdin, env=env, cwd=cwd, stderr=subprocess.PIPE,
                                       stdout=subprocess.PIPE, shell=shell)
            if result is True:
                result_code = process.wait()
                p_out = process.stdout.read().decode("unicode_escape")
                p_err = process.stderr.read().decode("unicode_escape")
                return result_code, p_out, p_err
            else:
                return None, None, None
        except Exception as e:
            return 1, 'Could not execute command. Error Message: {0}'.format(str(e)), ''

def handle_task(task, context):
    edit_user = EditUser(task, context)
    edit_user.handle_task()