�
�Udac @` sj d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
Z
d d l Z d d l Z
d d l
Z
d d l Z d d l Z d d l m Z d d
l m Z d d l m Z d d l m Z d e f d � � YZ e d e e d � Z d � Z d d � Z d � Z d � Z! d � Z" d � Z# d � Z$ d � Z% e& d k rfe% � n d S( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont previewt statust coret supported_bys�
---
module: authorized_key
short_description: Adds or removes an SSH authorized key
description:
- Adds or removes SSH authorized keys for particular user accounts.
version_added: "0.5"
options:
user:
description:
- The username on the remote host whose authorized_keys file will be modified.
type: str
required: true
key:
description:
- The SSH public key(s), as a string or (since Ansible 1.9) url (https://github.com/username.keys).
type: str
required: true
path:
description:
- Alternate path to the authorized_keys file.
- When unset, this value defaults to I(~/.ssh/authorized_keys).
type: path
version_added: "1.2"
manage_dir:
description:
- Whether this module should manage the directory of the authorized key file.
- If set to C(yes), the module will create the directory, as well as set the owner and permissions
of an existing directory.
- Be sure to set C(manage_dir=no) if you are using an alternate directory for authorized_keys,
as set with C(path), since you could lock yourself out of SSH access.
- See the example below.
type: bool
default: yes
version_added: "1.2"
state:
description:
- Whether the given key (with the given key_options) should or should not be in the file.
type: str
choices: [ absent, present ]
default: present
key_options:
description:
- A string of ssh key options to be prepended to the key in the authorized_keys file.
version_added: "1.4"
exclusive:
description:
- Whether to remove all other non-specified keys from the authorized_keys file.
- Multiple keys can be specified in a single C(key) string value by separating them by newlines.
- This option is not loop aware, so if you use C(with_) , it will be exclusive per iteration of the loop.
- If you want multiple keys in the file you need to pass them all to C(key) in a single batch as mentioned above.
type: bool
default: no
version_added: "1.9"
validate_certs:
description:
- This only applies if using a https url as the source of the keys.
- If set to C(no), the SSL certificates will not be validated.
- This should only set to C(no) used on personally controlled sites using self-signed certificates as it avoids verifying the source site.
- Prior to 2.1 the code worked as if this was set to C(yes).
type: bool
default: yes
version_added: "2.1"
comment:
description:
- Change the comment on the public key.
- Rewriting the comment is useful in cases such as fetching it from GitHub or GitLab.
- If no comment is specified, the existing comment will be kept.
type: str
version_added: "2.4"
follow:
description:
- Follow path symlink instead of replacing it.
type: bool
default: no
version_added: "2.7"
author: Ansible Core Team
s
- name: Set authorized key taken from file
authorized_key:
user: charlie
state: present
key: "{{ lookup('file', '/home/charlie/.ssh/id_rsa.pub') }}"
- name: Set authorized keys taken from url
authorized_key:
user: charlie
state: present
key: https://github.com/charlie.keys
- name: Set authorized key in alternate location
authorized_key:
user: charlie
state: present
key: "{{ lookup('file', '/home/charlie/.ssh/id_rsa.pub') }}"
path: /etc/ssh/authorized_keys/charlie
manage_dir: False
- name: Set up multiple authorized keys
authorized_key:
user: deploy
state: present
key: '{{ item }}'
with_file:
- public_keys/doe-jane
- public_keys/doe-john
- name: Set authorized key defining key options
authorized_key:
user: charlie
state: present
key: "{{ lookup('file', '/home/charlie/.ssh/id_rsa.pub') }}"
key_options: 'no-port-forwarding,from="10.0.1.1"'
- name: Set authorized key without validating the TLS/SSL certificates
authorized_key:
user: charlie
state: present
key: https://github.com/user.keys
validate_certs: False
- name: Set authorized key, removing all the authorized keys already set
authorized_key:
user: root
key: '{{ item }}'
state: present
exclusive: True
with_file:
- public_keys/doe-jane
- name: Set authorized key for user ubuntu copying it from current user
authorized_key:
user: ubuntu
state: present
key: "{{ lookup('file', lookup('env','HOME') + '/.ssh/id_rsa.pub') }}"
sP
exclusive:
description: If the key has been forced to be exclusive or not.
returned: success
type: bool
sample: False
key:
description: The key that the module was running against.
returned: success
type: str
sample: https://github.com/user.keys
key_option:
description: Key options related to the key.
returned: success
type: str
sample: null
keyfile:
description: Path for authorized key file.
returned: success
type: str
sample: /home/user/.ssh/authorized_keys
manage_dir:
description: Whether this module managed the directory of the authorized key file.
returned: success
type: bool
sample: True
path:
description: Alternate path to the authorized_keys file
returned: success
type: str
sample: null
state:
description: Whether the given key (with the given key_options) should or should not be in the file
returned: success
type: str
sample: present
unique:
description: Whether the key is unique
returned: success
type: bool
sample: false
user:
description: The username on the remote host whose authorized_keys file will be modified
returned: success
type: str
sample: user
validate_certs:
description: This only applies if using a https url as the source of the keys. If set to C(no), the SSL certificates will not be validated.
returned: success
type: bool
sample: true
N( t
itemgetter( t to_native( t
AnsibleModule( t fetch_urlt keydictc B` s_ e Z d Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z
d � Z RS(
so a dictionary that maintains the order of keys as they are added
This has become an abuse of the dict interface. Probably should be
rewritten to be an entirely custom object with methods instead of
bracket-notation.
Our requirements are for a data structure that:
* Preserves insertion order
* Can store multiple values for a single key.
The present implementation has the following functions used by the rest of
the code:
* __setitem__(): to add a key=value. The value can never be disassociated
with the key, only new values can be added in addition.
* items(): to retrieve the key, value pairs.
Other dict methods should work but may be surprising. For instance, there
will be multiple keys that are the same in keys() and __getitem__() will
return a list of the values that have been set via __setitem__.
c O` s; t t | � j | | � t t t | � j � � | _ d S( N( t superR t __init__t listt keyst itemlist( t selft argst kw( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyR s c C` sP | j j | � | | k r0 | | j | � n t t | � j | | g � d S( N( R t appendR
R t __setitem__( R t keyt value( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyR s c C` s
t | j � S( N( t iterR ( R ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt __iter__ s c C` s | j S( N( R ( R ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyR s c c` s^ i } xQ | j D]F } | | k r5 | | c d 7<n
d | | <| | | | | f Vq Wd S( Ni i ( R ( R t indexesR ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt _item_generator s
c C` s t d � � d S( Ns, Do not use this as it's not available on py3( t NotImplementedError( R ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt iteritems s c C` s t | j � � S( N( R R ( R ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt items s c C` s t d � � d S( Ns, Do not use this as it's not available on py3( R ( R ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt
itervalues# s c C` s! g | j � D] } | d ^ q
S( Ni ( R ( R t item( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt values& s ( t __name__t
__module__t __doc__R R R R R R R R R" ( ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyR � s c C` s� | j r5 | d k r5 | } | r1 t j j | � S| Sy t j | � } Wn[ t k
r� } | j r� | d k r� | j d d � n | j d d | t | � f � n X| d k r� | j
} t j j | d � }
t j j |
d � } n t j j | � }
| } | rt j j | � } n | s+| j r/| S| j
} | j } | r�t j j |
� s�t j |
t d d � � | j � r�| j |
t � q�n t j |
| | � t j |
t d d � � n t j j | � sLt j j | � }
t j j |
� s t j |
� n z t | d � } Wd | j � X| j � rL| j | t � qLn y0 t j | | | � t j | t d
d � � Wn t k
r�n X| S( ss
Calculate name of authorized keys file, optionally creating the
directories and file, properly setting permissions.
:param str user: name of user in passwd file
:param bool write: if True, write changes to authorized_keys file (creating directories if needed)
:param str path: if not None, use provided path rather than default of '~user/.ssh/authorized_keys'
:param bool manage_dir: if True, create and set ownership of the parent dir of the authorized_keys file
:param bool follow: if True symlinks will be followed and not replaced
:return: full path string to authorized_keys for user
t msgsN Either user must exist or you must provide full path to key file in check modes Failed to lookup user %s: %ss .ssht authorized_keyst 0700i t wNt 0600( t
check_modet Nonet ost patht realpatht pwdt getpwnamt KeyErrort fail_jsonR t pw_dirt joint dirnamet pw_uidt pw_gidt existst mkdirt intt selinux_enabledt set_default_selinux_contextt Falset chownt chmodt makedirst opent closet OSError( t modulet usert writeR. t
manage_dirt followt keysfilet
user_entryt et homedirt sshdirt uidt gidt basedirt f( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt keyfile* sZ
$
c C` s� t � } | r� t j d � } | j | � d d !} x[ | D]P } d | k rr | j d d � \ } } | | | <q; | d k r; d | | <q; q; Wn | S( sa
reads a string containing ssh-key options
and returns a dictionary of those options
s ((?:[^,"']|"[^"]*"|'[^']*')+)i i����t =t ,N( R t ret compilet splitR, ( RE t optionst options_dictt regext partst partR R ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt parseoptionsr s
c C` sw d d d d d d g } d } d } d } d } | j d d � } t j | � } g | _ d | _ t | _ t | � } | r� | d
d k r� | d d d | f SxA t d
t | � � D]* }
| |
| k r� |
} | |
} Pq� q� W| d k r� d S| d
k rd j
| | � } n t | | � } | | d
} t | � | d
k rdd j
| | d � } n | | | | | f S( s�
parses a key, which may or may not contain a list
of ssh-key options at the beginning
rank indicates the keys original ordering, so that
it can be written out in the same order.
s ssh-ed25519s ecdsa-sha2-nistp256s ecdsa-sha2-nistp384s ecdsa-sha2-nistp521s ssh-dsss ssh-rsas \#t #t i t skippedt i i N( R, t replacet shlext quotest
commenterst Truet whitespace_splitR t ranget lenR5 R^ ( RE t raw_keyt rankt VALID_SSH2_KEY_TYPESRY R t key_typet
type_indext lext key_partst it comment( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt parsekey� s@
c C` sB t j j | � s d St | � } z | j � SWd | j � Xd S( NR` ( R- R. t isfileRB t readRC ( t filenameRR ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt readfile� s c C` su i } xh t | j t � � D]Q \ } } t | | d | �} | rT | | | d <q | d d d | f | | <q W| S( NRl i Ra ( t enumeratet
splitlinesRg Rt R, ( RE t linesR t
rank_indext linet key_data( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt parsekeys� s " c C` s� t j d d t j j | � � \ } } t | d � } y | j | � Wn3 t k
r| } | j d d | t | � f � n X| j
� | j | | � d S( NR` t tmpR) R& s Failed to write to file %s: %s( t tempfilet mkstempR- R. R6 RB RG t IOErrorR3 R RC t atomic_move( RE Rw t contentt fdt tmp_pathRR RL ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt writefile� s '$
c C` sH g } | j � } t | d t d � �} x| D]} y� | \ } } } } } d }
| r� g } xQ | j � D]C \ } }
|
d k r� | j d | � qn | j d | |
f � qn Wd j | � }
|
d 7}
n | s� | } n | d k r� | d } n d
|
| | | f } Wn t k
r)| } n X| j | � q1 Wd j | � S( NR i R` s %ss %s=%sRU Rb Ra i s %s%s %s %s
( R" t sortedR R R, R R5 t Exception( R R{ t new_keyst ordered_new_keysR t keyhashRn RY Rs Rl t
option_strt option_stringst
option_keyR t key_line( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt serialize� s0
c ! C` s� | d } | d } | j d d" � } | j d t � } | j d d � } | j d d" � } | j d t � } | j d d" � } | j d
t � }
d } | j d � r0yL t | | � \ } }
|
d
d k r� | j d | | � n | j � } Wn% t k
r| j d | | � n Xt | d d �} n g | j
� D]" } | r=| j d � r=| ^ q=} t } t | | | | | � | d <t | d � } t
| | � } g } t | � } xt | � D]�\ } } t | | d | �} | s| j d d | � n | d" k rFt | | � } | d | d | | d | d f } n | d" k rz| d | d | d | | d f } n t } g } | d | k r�| d | | d d k r�| d k r�| j | | d � q�t } n | d k r�| j | d � t | � d k rFx5 | D]* } | d | k r| | d =t } qqWn | s�| | d } | d | d | d | d | f | | d <t } q�q�| d k r�| s�q�n | | d =t } q�q�W| d k r | r t | � j | � } x | D] } | | =t } q�Wn | r�t | | | | | |
� } t | � } d" } | j rzi | d d 6| d 6| d 6| d 6} | | d <n | j r�| j d! t d | � n t | | | � t | d! <n | j r�| j d! t � n | S(# s
Add or remove key.
RF R R. RH t statet presentt key_optionst exclusiveRs RI s Error getting key from: %st httpR i� R& t errorst surrogate_or_strictR_ RS Rl s invalid key specified: %si i i i i t absentt
before_headert after_headert beforet aftert difft changedN( t getR, Rg R> t
startswithR R3 Rv R� R Rz RS Rx R Rj Ry Rt R^ R t frozensett
differenceR� t _diffR+ t exit_jsonR� (! RE t paramsRF R R. RH R� R� R� Rs RI t error_msgt respt infot sR� t do_writet existing_contentt
existing_keyst
keys_to_existt max_rank_of_existing_keysR| t new_keyt parsed_new_keyt parsed_optionst matchedt non_matching_keyst non_matching_keyt
total_rankt to_removeRw t new_contentR� ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt
enforce_state s�
5 ( ((
-
c C` s t d t d t d d d t � d t d d d t � d t d d � d t d d d
t � d t d d d
d d
d d g � d t d d � d t d d d
t � d t d d � d t d d d
t � d t d d d
t � �
d t � } t | | j � } | j | � d S( Nt
argument_specRF t typet strt requiredR R. RH t boolt defaultR� R� t choicesR� R� R� Rs t validate_certsRI t supports_check_mode( R
t dictRg R> R� R� R� ( RE t results( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt main� s ! t __main__(' t
__future__R R R R� t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNR- R0 t os.pathR� RV Rd t operatorR t ansible.module_utils._textR t ansible.module_utils.basicR
t ansible.module_utils.urlsR R� R R> R, Rg RS R^ Rt Rx R R� R� R� R� R# ( ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/system/authorized_key.pyt <module> s:
P<5 AH >
# �
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell