Viewing File: /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyo
ó
oBú]c @ s d d l Z d d l Z d d l m Z d d l m Z e j e ƒ Z d Z d) Z
d Z d e f d „ ƒ YZ
d e f d „ ƒ YZ d „ Z d „ Z d „ Z d „ Z e d „ Z d d! „ Z d" e f d# „ ƒ YZ d$ „ Z d% „ Z d& „ Z e d' „ Z d( „ Z d S(* iÿÿÿÿN( t log( t utils /etc/ssh/sshd_configt dsat ecdsas ecdsa-sha2-nistp256s( ecdsa-sha2-nistp256-cert-v01@openssh.coms ecdsa-sha2-nistp384s( ecdsa-sha2-nistp384-cert-v01@openssh.coms ecdsa-sha2-nistp521s( ecdsa-sha2-nistp521-cert-v01@openssh.comt ed25519t rsas rsa-sha2-256s rsa-sha2-512s ssh-dsss ssh-dss-cert-v01@openssh.coms ssh-ed25519s ssh-ed25519-cert-v01@openssh.coms ssh-rsas ssh-rsa-cert-v01@openssh.coms¢ no-port-forwarding,no-agent-forwarding,no-X11-forwarding,command="echo 'Please login as the user \"$USER\" rather than the user \"$DISABLE_USER\".';echo;sleep 10"t AuthKeyLinec B s/ e Z d d d d d „ Z d „ Z d „ Z RS( c C s1 | | _ | | _ | | _ | | _ | | _ d S( N( t base64t commentt optionst keytypet source( t selfR R
R R R ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt __init__3 s
c C s | j o | j S( N( R R
( R ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt valid; s c C s” g } | j r" | j | j ƒ n | j r> | j | j ƒ n | j rZ | j | j ƒ n | j rv | j | j ƒ n | sƒ | j Sd j | ƒ Sd S( Nt ( R t appendR
R R R t join( R t toks( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt __str__> s N( t __name__t
__module__t NoneR
R R ( ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR 2 s t AuthKeyLineParserc B s# e Z d Z d „ Z d d „ Z RS( s‚
AUTHORIZED_KEYS FILE FORMAT
AuthorizedKeysFile specifies the file containing public keys for public
key authentication; if none is specified, the default is
~/.ssh/authorized_keys. Each line of the file contains one key (empty
(because of the size of the public key encoding) up to a limit of 8 kilo-
bytes, which permits DSA keys up to 8 kilobits and RSA keys up to 16
kilobits. You don't want to type them in; instead, copy the
identity.pub, id_dsa.pub, or the id_rsa.pub file and edit it.
sshd enforces a minimum RSA key modulus size for protocol 1 and protocol
2 keys of 768 bits.
The options (if present) consist of comma-separated option specifica-
tions. No spaces are permitted, except within double quotes. The fol-
lowing option specifications are supported (note that option keywords are
case-insensitive):
c C sã t } d } x | t | ƒ k r» | s7 | | d k r» | | } | d t | ƒ k re | d } Pn | | d } | d k r˜ | d k r˜ | d } n | d k r® | } n | d } q W| d | !} | | j ƒ } | | f S( s×
The options (if present) consist of comma-separated option specifica-
tions. No spaces are permitted, except within double quotes.
Note that option keywords are case-insensitive.
i R s i s \t "( R s ( t Falset lent lstrip( R t entt quotedt it curct nextcR t remain( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt _extract_optionsb s"
c C sü | j d ƒ } | j d ƒ s0 | j ƒ d k r: t | ƒ Sd „ } | j ƒ } y | | ƒ \ } } } Wno t k
rÙ | j | ƒ \ } }
| d k r¢ | } n y | |
ƒ \ } } } WqÚ t k
rÕ t | ƒ SXn Xt | d | d | d | d | ƒS( Ns
t #t c S sŠ | j d d ƒ } t | ƒ d k r= t d t | ƒ ƒ ‚ n | d t k rd t d | d ƒ ‚ n t | ƒ d k r† | j d ƒ n | S( Ni s To few fields: %si s Invalid keytype %sR$ ( t splitR R t TypeErrort VALID_KEY_TYPESR ( R R ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt
parse_ssh_keyƒ s R
R R R ( t rstript
startswitht stripR R& R" R ( R t src_lineR t lineR( R R
R R t keyoptsR! ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt parse} s" !
N( R R t __doc__R" R R/ ( ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR N s c C s¬ g } t ƒ } g } x | D]ˆ } yU t j j | ƒ rv t j | ƒ j ƒ } x' | D] } | j | j | ƒ ƒ qS Wn Wq t t
f k
r£ t j t d | ƒ q Xq W| S( Ns Error reading lines from %s(
R t ost patht isfileR t load_filet
splitlinesR R/ t IOErrort OSErrort logexct LOG( t fnamest linest parsert contentst fnameR- ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt parse_authorized_keys£ s
!c C s t g | D] } | j ƒ r
| ^ q
ƒ } x‹ t d t | ƒ ƒ D]t } | | } | j ƒ sc qA n xE | D]= } | j | j k rj | } | | k r§ | j | ƒ q§ qj qj W| | | <qA Wx | D] } | j | ƒ qÀ Wg | D] } t | ƒ ^ qÞ } | j d ƒ d j | ƒ S( Ni R$ s
( t listR t rangeR R t removeR t strR ( t old_entriest keyst kt to_addR R t keyt bR; ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt update_authorized_keys³ s +
c C sO t j | ƒ } | s | j r3 t d | ƒ ‚ n t j j | j d ƒ | f S( Ns" Unable to get ssh info for user %rs .ssh( t pwdt getpwnamt pw_dirt RuntimeErrorR1 R2 R ( t usernamet pw_ent( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt users_ssh_infoÏ s c C s® d | f d | f d f } | s* d } n | j ƒ } g } xk | D]c } x& | D] \ } } | j | | ƒ } qP W| j d ƒ s™ t j j | | ƒ } n | j | ƒ qC W| S( Ns %hs %us %%t %s %h/.ssh/authorized_keyst /( s %%RR ( R% t replaceR* R1 R2 R R ( t valuet homedirRO t macrost pathst renderedR2 t macrot field( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt render_authorizedkeysfile_pathsÖ s
c
C sÈ t | ƒ \ } } t j j | d ƒ } g } t j | d t ƒt y1 t | ƒ } t | j d d ƒ | j
| ƒ } Wn; t t f k
r± | | d <t j
t d t | d ƒ n XWd QX| t | ƒ f S( Nt authorized_keyst recursivet authorizedkeysfiles %h/.ssh/authorized_keysi sh Failed extracting 'AuthorizedKeysFile' in ssh config from %r, using 'AuthorizedKeysFile' file %r instead( RQ R1 R2 R R t SeLinuxGuardt Truet parse_ssh_config_mapR\ t getRM R6 R7 R8 R9 t DEF_SSHD_CFGR? ( RO t
sshd_cfg_filet ssh_dirRP t default_authorizedkeys_filet auth_key_fnst ssh_cfg( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt extract_authorized_keysê s
c C s$ t | ƒ \ } } t j j | ƒ sS t j | d d ƒt j | | j | j ƒ n t ƒ } g } x0 | D]( } | j
| j t | ƒ d | ƒƒ qi Wt
| ƒ \ } } t j | d t ƒb t | | ƒ }
t j t j j | ƒ d d ƒt j | |
d d ƒt j | | j | j ƒ Wd QXd S( Nt modeiÀ R R^ i€ ( RQ R1 R2 t isdirR t
ensure_dirt chownbyidt pw_uidt pw_gidR R R/ RC Rj R` Ra RJ t dirnamet
write_file( RE RO R Rf t pwentR< t key_entriesRF t auth_key_fnt auth_key_entriest content( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt setup_user_keys s
& t SshdConfigLinec B s/ e Z d d d „ Z e d „ ƒ Z d „ Z RS( c C s | | _ | | _ | | _ d S( N( R- t _keyRU ( R R- RF t v( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR
s c C s | j d k r d S| j j ƒ S( N( Rz R t lower( R ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyRH s c C sV | j d k r t | j ƒ St | j ƒ } | j rN | d t | j ƒ 7} n | Sd S( NR ( Rz R RC R- RU ( R R{ ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR # s
N( R R R R
t propertyRH R ( ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyRy s c C s/ t j j | ƒ s g St t j | ƒ j ƒ ƒ S( N( R1 R2 R3 t parse_ssh_config_linesR R4 R5 ( R> ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt parse_ssh_config- s c C s· g } xª | D]¢ } | j ƒ } | s5 | j d ƒ rN | j t | ƒ ƒ q
n y | j d d ƒ \ } } Wn) t k
r• | j d d ƒ \ } } n X| j t | | | ƒ ƒ q
W| S( NR# i t =( R+ R* R Ry R% R t
ValueError( R; t retR- RH t val( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR~ 3 s
c C sP t | ƒ } | s i Si } x- | D]% } | j s8 q# n | j | | j <q# W| S( N( R RH RU ( R> R; R‚ R- ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyRb F s
c C sv t | ƒ } t d | d | ƒ } | rf t j | d j g | D] } t | ƒ ^ q= ƒ d d t ƒn t | ƒ d k S( s© Read fname, and update if changes are necessary.
@param updates: dictionary of desired values {Option: value}
@return: boolean indicating if an update was done.R; t updatess
t copy_modei ( R t update_ssh_config_linesR Rr R RC Ra R ( R„ R> R; t changedt l( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt update_ssh_configR s 9c
C s’ t ƒ } g } t g | j ƒ D] } | j ƒ | f ^ q ƒ } x¿ t | d d ƒD]« \ } } | j sn qS n | j | k rS | | j } | | } | j | ƒ | j | k rÉ t j d | | | ƒ qþ | j
| ƒ t j d | | | j | ƒ | | _ qS qS Wt | ƒ t | ƒ k rŽxq | j ƒ D]` \ } } | | k rEq'n | j
| ƒ | j
t
d | | ƒ ƒ t j d t | ƒ | | ƒ q'Wn | S( sð Update the ssh config lines per updates.
@param lines: array of SshdConfigLine. This array is updated in place.
@param updates: dictionary of desired values {Option: value}
@return: A list of keys in updates that were changed.t starti s$ line %d: option %s already set to %ss# line %d: option %s updated %s -> %sR$ s line %d: option %s added with %s( t sett dictRE R| t enumerateRH t addRU R9 t debugR R t itemsRy (
R; R„ t foundR‡ RF t casemapR R- RH RU ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyR† _ s4 1
( R R s ecdsa-sha2-nistp256s( ecdsa-sha2-nistp256-cert-v01@openssh.coms ecdsa-sha2-nistp384s( ecdsa-sha2-nistp384-cert-v01@openssh.coms ecdsa-sha2-nistp521s( ecdsa-sha2-nistp521-cert-v01@openssh.comR R s rsa-sha2-256s rsa-sha2-512s ssh-dsss ssh-dss-cert-v01@openssh.coms ssh-ed25519s ssh-ed25519-cert-v01@openssh.coms ssh-rsas ssh-rsa-cert-v01@openssh.com( R1 RK t cloudinitR t loggingR t getLoggerR R9 Rd R' t DISABLE_USER_OPTSt objectR R R? RJ RQ R\ Rj R Rx Ry R R~ Rb R‰ R† ( ( ( s6 /usr/lib/python2.7/site-packages/cloudinit/ssh_util.pyt <module> sL U
Back to Directory
File Manager