Liderahenk/Ahenk
1
0
Fork 0
mirror of https://github.com/Pardus-LiderAhenk/ahenk synced 2024-11-22 16:42:20 +03:00
Code Issues Projects Releases Packages Wiki Activity

change permission local user and pam_script.so module added

Browse source
This commit is contained in:
Agah Öz 2020-08-10 15:14:42 +03:00
parent 1ea4435920
commit 6749a8006e
1 changed files with 27 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

44
usr/share/ahenk/base/registration/registration.py
View file

@ -68,10 +68,10 @@ class Registration:
self.host = self.conf_manager.get("CONNECTION", "host") self.host = self.conf_manager.get("CONNECTION", "host")
user_name= os.getlogin() user_name= os.getlogin()
self.logger.debug('User : '+ str(user_name)) self.logger.info('User : '+ str(user_name))
pout = Util.show_registration_message(user_name,'Makineyi Lider MYS sistemine kaydetmek için bilgileri ilgili alanlara giriniz. LÜTFEN DEVAM EDEN İŞLEMLERİ SONLANDIRDIĞINZA EMİN OLUNUZ !', pout = Util.show_registration_message(user_name,'Makineyi Lider MYS sistemine kaydetmek için bilgileri ilgili alanlara giriniz. LÜTFEN DEVAM EDEN İŞLEMLERİ SONLANDIRDIĞINZA EMİN OLUNUZ !',
'LIDER MYS SISTEMINE KAYIT', self.host) 'LIDER MYS SISTEMINE KAYIT', self.host)
self.logger.debug('pout : ' + str(pout)) self.logger.info('pout : ' + str(pout))
field_values = pout.split(' ') field_values = pout.split(' ')
user_registration_info = list(field_values) user_registration_info = list(field_values)
@ -82,8 +82,8 @@ class Registration:
# self.directory_server = user_registration_info[3] # self.directory_server = user_registration_info[3]
else: else:
self.user_name = user_registration_info[0] self.user_name = user_registration_info[1]
self.user_password = user_registration_info[1] self.user_password = user_registration_info[2]
# self.directory_server = user_registration_info[2] # self.directory_server = user_registration_info[2]
#anon_messenger = AnonymousMessenger(self.message_manager.registration_msg(user_name,user_password), self.host,self.servicename) #anon_messenger = AnonymousMessenger(self.message_manager.registration_msg(user_name,user_password), self.host,self.servicename)
@ -100,6 +100,14 @@ class Registration:
def registration_success(self, reg_reply): def registration_success(self, reg_reply):
try: try:
# Upload to pam_script module
(result_code, p_out, p_err) = self.util.execute("pam-auth-update --package --enable pam_script")
if result_code == 0:
self.logger.info("'pam-auth-update --package --enable pam_script' has run successfully")
else:
self.logger.error(
"'pam-auth-update --package --enable pam_script' could not run successfully: " + p_err)
self.local_user_disable = reg_reply['disableLocalUser'] self.local_user_disable = reg_reply['disableLocalUser']
self.directory_server = reg_reply['directoryServer'] self.directory_server = reg_reply['directoryServer']
@ -162,9 +170,11 @@ class Registration:
# LDAP registration # LDAP registration
if self.directory_server == "LDAP": if self.directory_server == "LDAP":
self.install_and_config_ldap(reg_reply) self.install_and_config_ldap(reg_reply)
self.change_permissions_for_local_users()
# AD registration # AD registration
elif self.directory_server == "ACTIVE_DIRECTORY": elif self.directory_server == "ACTIVE_DIRECTORY":
self.install_and_config_ad(reg_reply) self.install_and_config_ad(reg_reply)
self.change_permissions_for_local_users()
except Exception as e: except Exception as e:
self.logger.error('Registration error. Error Message: {0}.'.format(str(e))) self.logger.error('Registration error. Error Message: {0}.'.format(str(e)))
@ -524,7 +534,6 @@ class Registration:
self.util.execute(change_home.format(new_home_dir, new_username)) self.util.execute(change_home.format(new_home_dir, new_username))
self.logger.debug("User: '{0}' will be enabled and changed username and home directory of username".format(p.pw_name)) self.logger.debug("User: '{0}' will be enabled and changed username and home directory of username".format(p.pw_name))
def disable_local_users(self): def disable_local_users(self):
passwd_cmd = 'passwd -l {}' passwd_cmd = 'passwd -l {}'
change_home = 'usermod -m -d {0} {1}' change_home = 'usermod -m -d {0} {1}'
@ -533,18 +542,6 @@ class Registration:
kill_all_process = 'killall -KILL -u {}' kill_all_process = 'killall -KILL -u {}'
change_permisson = "chmod -R 700 {}" change_permisson = "chmod -R 700 {}"
add_user_conf_file = "/etc/adduser.conf"
file_dir_mode = open(add_user_conf_file, 'r')
file_data = file_dir_mode.read()
file_data = file_data.replace("DIR_MODE=0755", "DIR_MODE=0700")
file_dir_mode.close()
file_dir_mode = open(add_user_conf_file, 'w')
file_dir_mode.write(file_data)
file_dir_mode.close()
self.logger.info("add user mode changed to 0700 in file {}".format(add_user_conf_file))
for p in pwd.getpwall(): for p in pwd.getpwall():
self.logger.info("User: '{0}' will be disabled and changed username and home directory of username".format(p.pw_name)) self.logger.info("User: '{0}' will be disabled and changed username and home directory of username".format(p.pw_name))
if not sysx.shell_is_interactive(p.pw_shell): if not sysx.shell_is_interactive(p.pw_shell):
@ -559,3 +556,16 @@ class Registration:
Util.execute(change_username.format(new_username, p.pw_name)) Util.execute(change_username.format(new_username, p.pw_name))
Util.execute(change_home.format(new_home_dir, new_username)) Util.execute(change_home.format(new_home_dir, new_username))
Util.execute(change_permisson.format(new_home_dir)) Util.execute(change_permisson.format(new_home_dir))
def change_permissions_for_local_users(self):
add_user_conf_file = "/etc/adduser.conf"
file_dir_mode = open(add_user_conf_file, 'r')
file_data = file_dir_mode.read()
file_data = file_data.replace("DIR_MODE=0755", "DIR_MODE=0700")
file_dir_mode.close()
file_dir_mode = open(add_user_conf_file, 'w')
file_dir_mode.write(file_data)
file_dir_mode.close()
self.logger.info("add user mode changed to 0700 in file {}".format(add_user_conf_file))