o

i��d8�@sRdd
lm
Z
mZmZmZ
Gdd�de
�ZGdd�dee�ZGdd�deee�ZdS)	�)�Plugin�RedHatPlugin�DebianPlugin�UbuntuPlugincs4eZ
dZd
ZdZdZdZ�f
dd�Zdd�Z�Z	S)	�LdapzLDAP configuration�ldap)�identity�sysmgmt�systemz/etc/openldap/ldap.confc

stt
|���
|�d
�

dS)N�/etc/ldap.conf)�superr�setup�
add_copy_spec�
�self�
�	__class__��9/usr/lib/python3/dist-packages/sos/report/plugins/ldap.pyr
s

z
Ldap.setupc

Cs|�d
dd�
dS)Nr�(\s*bindpw\s*)\S+z\1******)
�do_file_subrrrr�postprocs
z
Ldap.postproc)
�__name__�
__module__�__qualname__�
short_desc�plugin_name�profiles�	ldap_confr
r�
__classcell__rrrrrs

rc�0eZ
dZd
ZdZ�f
dd�Z�f
dd�Z�ZS)�
RedHatLdap)�openldapz
nss-pam-ldapd)r�/etc/pam_ldap.confc

s@tt
|���
|�gd
�
�

|�|jddddg�

|�d�

dS)N)z/etc/openldap/certs/passwordz/etc/openldap/certs/pwfile.txtz/etc/openldap/certs/pin.txtz/etc/openldap/certs/*passw*z/etc/openldap/certs/key3.dbz/etc/openldap/certs/cert8.dbz/etc/openldap/certs/secmod.db�/etc/nslcd.confr#zcertutil -L -d /etc/openldap)rr!r
�add_forbidden_pathrr�add_cmd_outputrrrrr
!s






�zRedHatLdap.setupc
s*tt
|���
d
D]	}
|�|
dd�
q	dS)N)r$r#r�
\1********)rr!rr)r�
frrrr4s





��zRedHatLdap.postproc)rrr�packages�filesr
rrrrrrr!s

r!cr )�
DebianLdapz/etc/ldap/ldap.conf)�slapdz
ldap-utilsc
sjtt
|���
d
}
|�|jdddg�

|�d�

|j|
ddd�
|j|
d	d
d�
|j|
ddd�
dS)
Nz,ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// z/etc/slapd.confz/etc/ldap/slapd.dr$z+ldapsearch -x -b '' -s base 'objectclass=*'z/-b cn=config '(!(objectClass=olcSchemaConfig))'�configuration_minus_schemas)
�suggest_filenamez-b cn=schema,cn=config dn�loaded_schemasz0-b cn=config '(olcAccess=*)' olcAccess olcSuffix�access_control_lists)rr+r
rrr&)r�ldap_searchrrrr
Cs*




�



�

�


�zDebianLdap.setupc

s.tt
|���
|�d
dd�
|�ddd�
dS)Nr$rr'�
ldapsearchz(olcRootPW\: \s*)\S+)rr+rr�do_cmd_output_subrrrrrZs




�


�zDebianLdap.postproc)rrrrr)r
rrrrrrr+>s

r+N)�sos.report.pluginsrrrrrr!r+rrrr�<module>
s"