1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
#
# users.py: Code for creating user accounts and setting the root password
#
# Chris Lumens <clumens@redhat.com>
#
# Copyright (c) 2006, 2007 Red Hat, Inc.
#
# This software may be freely redistributed under the terms of the GNU
# general public license.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
#
import libuser
import string
import crypt
import random
import tempfile
import os
import os.path
def createLuserConf(instPath):
"""Writes a libuser.conf for instPath."""
(fd, fn) = tempfile.mkstemp(prefix="libuser.")
buf = """
[defaults]
skeleton = %(instPath)s/etc/skel
mailspooldir = %(instPath)s/var/mail
crypt_style = md5
modules = files shadow
create_modules = files shadow
[files]
directory = %(instPath)s/etc
[shadow]
directory = %(instPath)s/etc
""" % {"instPath": instPath}
os.write(fd, buf)
os.close(fd)
os.environ["LIBUSER_CONF"] = fn
def cryptPassword(password, useMD5):
if useMD5:
salt = "$1$"
saltLen = 8
else:
salt = ""
saltLen = 2
for i in range(saltLen):
salt = salt + random.choice (string.letters +
string.digits + './')
return crypt.crypt (password, salt)
class Users:
def __init__ (self):
self.admin = libuser.admin()
def createUser (self, name, password=None, isCrypted=False, groups=[],
homedir=None, shell=None, uid=None, lock=False,
root="/mnt/sysimage"):
if self.admin.lookupUserByName(name):
return None
userEnt = self.admin.initUser(name)
groupEnt = self.admin.initGroup(name)
grpLst = filter(lambda grp: grp,
map(lambda name: self.admin.lookupGroupByName(name), groups))
userEnt.set(libuser.GIDNUMBER, [groupEnt.get(libuser.GIDNUMBER)[0]] +
map(lambda grp: grp.get(libuser.GIDNUMBER)[0], grpLst))
if not homedir:
homedir = "/home/" + name
# Do this to make the user's home dir under the install root.
if homedir[0] != "/":
userEnt.set(libuser.HOMEDIRECTORY, root + "/" + homedir)
else:
userEnt.set(libuser.HOMEDIRECTORY, root + homedir)
if shell:
userEnt.set(libuser.LOGINSHELL, shell)
if uid >= 0:
userEnt.set(libuser.UIDNUMBER, uid)
self.admin.addUser(userEnt)
self.admin.addGroup(groupEnt)
if password:
if isCrypted:
self.admin.setpassUser(userEnt, password, isCrypted)
else:
self.admin.setpassUser(userEnt, cryptPassword(password, True), isCrypted)
if lock:
self.admin.lockUser(userEnt)
# Add the user to all the groups they should be part of.
for grp in grpLst:
grp.add(libuser.MEMBERNAME, name)
self.admin.modifyGroup(grp)
# Now set the correct home directory to fix up passwd.
userEnt.set(libuser.HOMEDIRECTORY, homedir)
self.admin.modifyUser(userEnt)
return True
def setRootPassword(self, password, isCrypted, useMD5, lock):
rootUser = self.admin.lookupUserByName("root")
if isCrypted:
self.admin.setpassUser(rootUser, password, True)
else:
self.admin.setpassUser(rootUser, cryptPassword(password, useMD5), True)
if lock:
self.admin.lockUser(rootUser)
self.admin.modifyUser(rootUser)
|
