a

^��c�@s6dd
lm
Z
mZmZ
ddlmZ
Gdd�de
e�ZdS)�)�Plugin�RedHatPlugin�SoSPredicate)
�globc@sXeZ
dZd
ZdZdZdZdZdZdZ	dd�Z
d	d
�Zdd�Zd
d�Z
dd�Zdd�ZdS)�IpazIdentity, policy, auditZipa)�identityZapacheF)
z/etc/ipa)�
ipa-serverz
ipa-client�freeipa-serverzfreeipa-clientc

Cs>|�d
�
s|�
d�
s|�
d�
r"dS|�d�
s6|�
d�
r:dSdS)Nz
pki-serverz/var/lib/pkiz/usr/share/doc/ipa-server-4.2.0�v4z
pki-commonz/var/lib/pki-ca/�v3)�is_installed�path_exists�
�self�r�:/usr/lib/python3.9/site-packages/sos/report/plugins/ipa.py�check_ipa_server_versions


��


�
zIpa.check_ipa_server_versionc

Cs(|�d
|j
�
s |�d|j�
r$dSdS)Nz%s/conf/ca/CS.cfgz%s/conf/CS.cfgT)r
�pki_tomcat_dir_v4�pki_tomcat_dir_v3rrrr�ca_installed&s
�zIpa.ca_installedc

Cs|�d
�
s|�d�
rdSdS)Nrr	T)
rrrrr�ipa_server_installed,s


�zIpa.ipa_server_installedcCs2|
d
kr|�gd�
�

n|
dkr.|�gd�
�

dS)Nr
)
z!/var/log/pki/pki-tomcat/ca/debug*z!/var/log/pki/pki-tomcat/ca/systemz'/var/log/pki/pki-tomcat/ca/transactionsz(/var/log/pki/pki-tomcat/ca/selftests.logz"/var/log/pki/pki-tomcat/catalina.*�/var/log/pki/pki-ca-spawn.*z"/var/log/pki/pki-tomcat/kra/debug*z"/var/log/pki/pki-tomcat/kra/systemz(/var/log/pki/pki-tomcat/kra/transactionsz/var/log/pki/pki-kra-spawn.*r)z/var/log/pki-ca/debugz/var/log/pki-ca/systemz/var/log/pki-ca/transactionsz/var/log/pki-ca/selftests.logz/var/log/pki-ca/catalina.*r)
�
add_copy_spec)r�ipa_versionrrr�retrieve_pki_logs1s


zIpa.retrieve_pki_logsc
CsR
d
|_d|_
d|_d|_|��}
|��rN|�d�

|�d|
�

|�gd�
�

|��rj|�d�

|�	|
�

|�gd	�
�

|
d
kr�|j|_
|j|_n|j
|_
|j|_|�d|j
�

|�d|j�

|�
d
ddddddddd|j
d|jd|jg�

|�gd�
�

t|dg
d�}|jd|dd�
td�
D]}|�d |�

�
q*|�d!d"i
�

dS)#Nz/var/lib/pki/pki-tomcatz/var/lib/pki-caz/etc/pki/pki-tomcat/caz/etc/pki-cazIPA server install detectedzIPA version is [%s])z/var/log/ipaserver-install.logz"/var/log/ipaserver-kra-install.logz/var/log/ipareplica-install.logz"/var/log/ipareplica-ca-install.logz/var/log/ipa-custodia.audit.logz$CA is installed: retrieving PKI logs)z/var/log/ipaclient-install.logz/var/log/ipaupgrade.logz/var/log/krb5kdc.logz#/var/log/dirsrv/slapd-*/logs/accessz#/var/log/dirsrv/slapd-*/logs/errorsz/etc/dirsrv/slapd-*/dse.ldifz&/etc/dirsrv/slapd-*/schema/99user.ldifz
/etc/hostsz/etc/httpd/alias/*z/etc/named.*z/etc/ipa/ca.crtz/etc/ipa/default.confz/etc/ipa/kdcproxy/kdcproxy.confz$/etc/ipa/kdcproxy/ipa-kdc-proxy.confz/etc/ipa/kdcproxy.confz/root/.ipa/log/cli.log�#/var/lib/certmonger/requests/[0-9]*z/var/lib/certmonger/cas/[0-9]*z/var/lib/ipa/ra-agent.pemz/var/lib/ipa/certs/httpd.crtz/var/kerberos/krb5kdc/kdc.crtz(/var/lib/ipa/sysrestore/sysrestore.statez)/var/log/ipa/healthcheck/healthcheck.log*r
zcertutil -L -d %s/aliasz	%s/CS.cfgz/etc/pki/nssdb/key*z/etc/dirsrv/slapd-*/key*z/etc/dirsrv/slapd-*/pin.txtz/etc/dirsrv/slapd-*/pwdfile.txtz/etc/httpd/alias/ipasession.keyz/etc/httpd/alias/key*z/etc/httpd/alias/pin.txtz/etc/httpd/alias/pwdfile.txtz/etc/named.keytabz
%s/alias/key*z%s/flatfile.txtz%s/password.conf)z"ls -la /etc/dirsrv/slapd-*/schema/z certutil -L -d /etc/httpd/alias/zpki-server cert-find --show-allz%pki-server subsystem-cert-validate caz klist -ket /etc/dirsrv/ds.keytabz%klist -ket /etc/httpd/conf/ipa.keytabz,klist -ket /var/lib/ipa/gssproxy/http.keytabZ
certmonger)
Zservices�getcert listZgetcert_list)Zpred�tagsz/etc/dirsrv/slapd-*/zcertutil -L -d %sz(/var/log/ipa/healthcheck/healthcheck.logZfreeipa_healthcheck_log)rrZpki_tomcat_conf_dir_v4Zpki_tomcat_conf_dir_v3rrZ
_log_debugrrrZpki_tomcat_dirZpki_tomcat_conf_dirZadd_cmd_outputZadd_forbidden_pathrrZ
add_file_tags)rrZgetcert_predZcertdb_directoryrrr�setupIs`

























�

�
�


�z	Ipa.setupc
CsHd
}
d}|�d|
|�
|�
ddd�
d}t|�
D]}|�|dd	�
q0dS)
Nz(\s*arg \"password )[^\"]*z
\1********z/etc/named.confrz
(pin=)'(\d+)'z\1'***'rz(key_pin=)(\d+)z\1***)Zdo_file_subZdo_cmd_output_subr)r�match�substZrequest_logsZrequest_logrrr�postproc�s




�



�zIpa.postprocN)�__name__�
__module__�__qualname__Z
short_descZplugin_nameZprofilesZ
ipa_serverZ
ipa_client�filesZpackagesrrrrrr!rrrrrs



irN)Zsos.report.pluginsrrrrrrrrr�<module>s