mirror of
https://github.com/Pardus-LiderAhenk/ahenk
synced 2024-12-23 08:42:18 +03:00
176 lines
9 KiB
Python
176 lines
9 KiB
Python
#!/usr/bin/python3
|
||
# -*- coding: utf-8 -*-
|
||
# Author:Mine DOGAN <mine.dogan@agem.com.tr>
|
||
# Author:Tuncay ÇOLAK <tuncay.colak@tubitak.gov.tr>
|
||
import subprocess
|
||
|
||
from base.plugin.abstract_plugin import AbstractPlugin
|
||
from pathlib import Path
|
||
|
||
class EditUser(AbstractPlugin):
|
||
def __init__(self, task, context):
|
||
super(EditUser, self).__init__()
|
||
self.task = task
|
||
self.context = context
|
||
self.logger = self.get_logger()
|
||
self.message_code = self.get_message_code()
|
||
|
||
self.username = self.task['username']
|
||
self.new_username = self.task['new_username']
|
||
self.password = self.task['password']
|
||
self.home = self.task['home']
|
||
self.active = self.task['active']
|
||
self.groups = self.task['groups']
|
||
self.desktop_write_permission = self.task['desktop_write_permission']
|
||
self.kiosk_mode = self.task['kiosk_mode']
|
||
self.current_home = self.execute('eval echo ~{0}'.format(self.username))[1]
|
||
|
||
self.script = '/bin/bash ' + self.Ahenk.plugins_path() + 'local-user/scripts/{0}'
|
||
|
||
self.kill_processes = 'pkill -u {}'
|
||
self.change_username = 'usermod -l {0} {1}'
|
||
self.create_shadow_password = 'mkpasswd -m sha-512 {}'
|
||
self.change_password = 'usermod -p {0} {1}'
|
||
self.change_home = 'usermod -m -d {0} {1}'
|
||
self.enable_user = 'passwd -u {}'
|
||
self.disable_user = 'passwd -l {}'
|
||
self.change_groups = 'usermod -G {0} {1}'
|
||
self.remove_all_groups = 'usermod -G "" {}'
|
||
self.change_owner = 'chown {0}.{0} {1}'
|
||
self.change_permission = 'chmod 700 {}'
|
||
self.logout_user = 'pkill -u {}'
|
||
self.kill_all_process = 'killall -KILL -u {}'
|
||
|
||
self.message = ''
|
||
self.message_code_level = 1
|
||
|
||
self.xfce4_session = "/usr/bin/xfce4-session"
|
||
self.gnome_session = "/usr/bin/gnome-session"
|
||
self.desktop_env = None
|
||
self.logger.debug('Parameters were initialized.')
|
||
|
||
def handle_task(self):
|
||
try:
|
||
self.desktop_env = self.get_desktop_env()
|
||
self.logger.info("Get desktop environment is {0}".format(self.desktop_env))
|
||
|
||
self.execute(self.logout_user.format(self.username))
|
||
self.execute(self.kill_all_process.format(self.username))
|
||
self.logger.debug('Killed all processes for {}'.format(self.username))
|
||
|
||
if str(self.new_username).strip() != "":
|
||
self.execute(self.kill_processes.format(self.username))
|
||
self.execute(self.change_username.format(self.new_username, self.username))
|
||
self.logger.debug('Changed username {0} to {1}'.format(self.username, self.new_username))
|
||
self.username = self.new_username
|
||
|
||
if str(self.password).strip() != "":
|
||
result_code, p_out, p_err = self.execute_command(self.create_shadow_password.format(self.password))
|
||
shadow_password = p_out.strip()
|
||
self.execute_command(self.change_password.format('\'{}\''.format(shadow_password), self.username))
|
||
self.logger.debug('Changed password.')
|
||
|
||
if self.current_home != self.home:
|
||
self.execute(self.kill_processes.format(self.username))
|
||
self.execute(self.change_home.format(self.home, self.username))
|
||
self.logger.debug('Changed home directory to: {}'.format(self.home))
|
||
|
||
self.execute(self.change_owner.format(self.username, self.home))
|
||
self.execute(self.change_permission.format(self.home))
|
||
self.logger.debug('Changed owner and permission for home directory.')
|
||
|
||
if self.active == "true":
|
||
self.execute(self.enable_user.format(self.username))
|
||
self.logger.debug('The user has been enabled.')
|
||
elif self.active == "false":
|
||
self.execute(self.disable_user.format(self.username))
|
||
self.logger.debug('The user has been disabled.')
|
||
|
||
if self.groups != "":
|
||
self.execute(self.change_groups.format(self.groups, self.username))
|
||
self.logger.debug('Added user to these groups: {}'.format(self.groups))
|
||
else:
|
||
self.execute(self.remove_all_groups.format(self.username))
|
||
self.logger.debug('Removed all groups for user: {}'.format(self.username))
|
||
|
||
agent_language = self.get_language()
|
||
if agent_language == "tr_TR":
|
||
desktop_name = "Masaüstü"
|
||
else:
|
||
desktop_name = "Desktop"
|
||
if self.desktop_write_permission == "true":
|
||
self.set_permission(self.current_home.strip() + "/" + desktop_name, 775)
|
||
self.logger.debug('Desktop write permission is true')
|
||
|
||
elif self.desktop_write_permission == "false":
|
||
self.set_permission(self.current_home.strip() + "/" + desktop_name, 575)
|
||
self.logger.debug('Desktop write permission is false')
|
||
#
|
||
# Handle kiosk mode
|
||
#
|
||
if self.desktop_env == "xfce":
|
||
result_code, p_out, p_err = self.execute(self.script.format('find_locked_users.sh'), result=True)
|
||
if result_code != 0:
|
||
self.logger.error('Error occurred while managing kiosk mode.')
|
||
self.message_code_level += 1
|
||
self.message = 'Masaüstü kilidi ayarlanırken hata oluştu.'
|
||
locked_users = []
|
||
if p_out:
|
||
self.logger.debug('pout {0}'.format(str(p_out)))
|
||
locked_users = p_out.strip().split(';')
|
||
|
||
if self.kiosk_mode == "true":
|
||
self.logger.debug('Kiosk mode is active {0}'.format(str(locked_users)))
|
||
if self.username not in locked_users:
|
||
self.logger.debug('Adding user {0} to locked users'.format(self.username))
|
||
locked_users.append(self.username)
|
||
locked_users_str = ";".join(locked_users)
|
||
self.logger.debug('Users: {0}'.format(locked_users_str))
|
||
comm = "sed -i 's/^.*" + '<channel name="xfce4-panel"' + ".*$/" + '<channel name="xfce4-panel" version="1.0" locked="' + locked_users_str + '">' + "/' /etc/xdg/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml"
|
||
result_code1, p_out1, p_err1 = self.execute(comm)
|
||
elif self.kiosk_mode == "false":
|
||
self.logger.debug('Kiok mode is NOT active')
|
||
if self.username in locked_users:
|
||
self.logger.debug('Removing user {0} from locked users'.format(self.username))
|
||
locked_users.remove(self.username)
|
||
if locked_users:
|
||
locked_users_str = ";".join(locked_users)
|
||
comm = "sed -i 's/^.*" + '<channel name="xfce4-panel"' + ".*$/" + '<channel name="xfce4-panel" version="1.0" locked="' + locked_users_str + '">' + "/' /etc/xdg/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml"
|
||
result_code1, p_out1, p_err1 = self.execute(comm)
|
||
else:
|
||
self.execute(self.script.format('remove_locked_users.sh '))
|
||
else:
|
||
self.logger.info("Desktop environ is GNOME. Kiosk mode not setting")
|
||
self.logger.info('User has been edited successfully.')
|
||
|
||
if self.message_code_level == 1:
|
||
response_code = self.message_code.TASK_PROCESSED.value
|
||
response_message = 'Kullanıcı başarıyla düzenlendi.'
|
||
else:
|
||
response_code = self.message_code.TASK_WARNING.value
|
||
response_message = 'Kullanıcı düzenlendi; fakat {0}'.format(self.message)
|
||
self.context.create_response(code=response_code, message=response_message)
|
||
|
||
except Exception as e:
|
||
self.logger.error('A problem occurred while handling Local-User task: {0}'.format(str(e)))
|
||
self.context.create_response(code=self.message_code.TASK_ERROR.value,
|
||
message='Local-User görevi çalıştırılırken bir hata oluştu.')
|
||
|
||
## this methode is only for local-user password plugin
|
||
def execute_command(self, command, stdin=None, env=None, cwd=None, shell=True, result=True):
|
||
try:
|
||
process = subprocess.Popen(command, stdin=stdin, env=env, cwd=cwd, stderr=subprocess.PIPE,
|
||
stdout=subprocess.PIPE, shell=shell)
|
||
if result is True:
|
||
result_code = process.wait()
|
||
p_out = process.stdout.read().decode("unicode_escape")
|
||
p_err = process.stderr.read().decode("unicode_escape")
|
||
return result_code, p_out, p_err
|
||
else:
|
||
return None, None, None
|
||
except Exception as e:
|
||
return 1, 'Could not execute command. Error Message: {0}'.format(str(e)), ''
|
||
|
||
def handle_task(task, context):
|
||
edit_user = EditUser(task, context)
|
||
edit_user.handle_task()
|