Abstract how to look up user password to be more flexible

This adds user_password() to abstract how the user's password is looked
up.  If spwd is not available, this will read the shadow file for the
user's shadow entry.  This will then facilitate idempotent password
changes on hosts without spwd.
This commit is contained in:
Stephen Fromm 2012-08-07 23:57:17 -07:00
parent 454de792f4
commit 49f3ab6757

View file

@ -18,6 +18,7 @@
# You should have received a copy of the GNU General Public License # You should have received a copy of the GNU General Public License
# along with Ansible. If not, see <http://www.gnu.org/licenses/>. # along with Ansible. If not, see <http://www.gnu.org/licenses/>.
import os
import pwd import pwd
import grp import grp
try: try:
@ -26,6 +27,14 @@ try:
except: except:
HAVE_SPWD=False HAVE_SPWD=False
SHADOWFILE = '/etc/shadow'
if os.path.exists('/etc/master.passwd'):
SHADOWFILE = '/etc/master.passwd' # FreeBSD passwd
# Note: while the above has the correct location for where
# encrypted passwords are stored on FreeBSD, the code below doesn't
# invoke adduser in lieu of useradd, nor pw in lieu of usermod.
# That is, this won't work on FreeBSD.
def get_bin_path(module, arg): def get_bin_path(module, arg):
if os.path.exists('/usr/sbin/%s' % arg): if os.path.exists('/usr/sbin/%s' % arg):
return '/usr/sbin/%s' % arg return '/usr/sbin/%s' % arg
@ -198,16 +207,28 @@ def get_pwd_info(user):
def user_info(user): def user_info(user):
if not user_exists(user): if not user_exists(user):
return False return False
try:
info = get_pwd_info(user) info = get_pwd_info(user)
if HAVE_SPWD: if len(info[1]) == 1 or len(info[1]) == 0:
sinfo = spwd.getspnam(user) info[1] = user_password(user)
except KeyError:
return False
if HAVE_SPWD:
info[1] = sinfo[1]
return info return info
def user_password(user):
passwd = ''
if not user_exists(user):
return passwd
if HAVE_SPWD:
try:
passwd = spwd.getspnam(user)[1]
except KeyError:
return passwd
else:
# Read shadow file for user's encrypted password string
if os.path.exists(SHADOWFILE) and os.access(SHADOWFILE, os.R_OK):
for line in open(SHADOWFILE).readlines():
if line.startswith('%s:' % user):
passwd = line.split(':')[1]
return passwd
# =========================================== # ===========================================
def main(): def main():