id]<ddlmZmZmZddlmZGddeeZy))Plugin RedHatPlugin SoSPredicate)globcLeZdZdZdZdZdZdZdZdZ dZ dZ d Z d Z d Zd Zy )IpazIdentity, policy, auditipa)identityapacheF)z/etc/ipa) ipa-serverz ipa-clientfreeipa-serverzfreeipa-clientc|jds"|jds|jdry|jds|jdryy)Nz pki-serverz /var/lib/pkiz/usr/share/doc/ipa-server-4.2.0v4z pki-commonz/var/lib/pki-ca/v3) is_installed path_existsselfs 8/usr/lib/python3/dist-packages/sos/report/plugins/ipa.pycheck_ipa_server_versionzIpa.check_ipa_server_versionsS   \ *##N3##$EF   | ,##$67c~|jd|jzs|jd|jzryy)Nz%s/conf/ca/CS.cfgz%s/conf/CS.cfgT)rpki_tomcat_dir_v4pki_tomcat_dir_v3rs r ca_installedzIpa.ca_installed&s?   /$2H2HH I##$4t7M7M$MNOrcJ|jds|jdryy)Nr r T)rrs ripa_server_installedzIpa.ipa_server_installed,s'   \ *$$%567rch|dk(r|jgdy|dk(r|jgdyy)Nr) z!/var/log/pki/pki-tomcat/ca/debug*z!/var/log/pki/pki-tomcat/ca/systemz'/var/log/pki/pki-tomcat/ca/transactionsz(/var/log/pki/pki-tomcat/ca/selftests.logz"/var/log/pki/pki-tomcat/catalina.*/var/log/pki/pki-ca-spawn.*z"/var/log/pki/pki-tomcat/kra/debug*z"/var/log/pki/pki-tomcat/kra/systemz(/var/log/pki/pki-tomcat/kra/transactionsz/var/log/pki/pki-kra-spawn.*r)z/var/log/pki-ca/debugz/var/log/pki-ca/systemz/var/log/pki-ca/transactionsz/var/log/pki-ca/selftests.logz/var/log/pki-ca/catalina.*r) add_copy_spec)r ipa_versions rretrieve_pki_logszIpa.retrieve_pki_logs1s? $      D     !rcd|_d|_d|_d|_|j }|j r8|j d|j d|z|jgd|jr"|j d|j||jgd |d k(r#|j|_ |j|_ n"|j|_ |j|_ |jd |jz|jd |jz|jd ddddddddd|jzd|jzd|jzg |jgdt|dg}|jd|dtdD]}|jd |z|j!d!d"iy)#Nz/var/lib/pki/pki-tomcatz/var/lib/pki-caz/etc/pki/pki-tomcat/caz /etc/pki-cazIPA server install detectedzIPA version is [%s])z/var/log/ipaserver-install.logz"/var/log/ipaserver-kra-install.logz!/var/log/ipaserver-enable-sid.logz/var/log/ipareplica-install.logz"/var/log/ipareplica-ca-install.logz/var/log/ipa-custodia.audit.logz$CA is installed: retrieving PKI logs)z/var/log/ipaclient-install.logz/var/log/ipaupgrade.logz/var/log/krb5kdc.logz#/var/log/dirsrv/slapd-*/logs/accessz#/var/log/dirsrv/slapd-*/logs/errorsz/etc/dirsrv/slapd-*/dse.ldifz&/etc/dirsrv/slapd-*/schema/99user.ldifz /etc/hostsz/etc/httpd/alias/*z /etc/named.*z/etc/ipa/ca.crtz/etc/ipa/default.confz/etc/ipa/kdcproxy/kdcproxy.confz$/etc/ipa/kdcproxy/ipa-kdc-proxy.confz/etc/ipa/kdcproxy.confz/root/.ipa/log/cli.log#/var/lib/certmonger/requests/[0-9]*z/var/lib/certmonger/cas/[0-9]*z/var/lib/ipa/ra-agent.pemz/var/lib/ipa/certs/httpd.crtz/var/kerberos/krb5kdc/kdc.crtz(/var/lib/ipa/sysrestore/sysrestore.statez)/var/log/ipa/healthcheck/healthcheck.log*z/var/log/ipaepn.log*rzcertutil -L -d %s/aliasz %s/CS.cfgz/etc/pki/nssdb/key*z/etc/dirsrv/slapd-*/key*z/etc/dirsrv/slapd-*/pin.txtz/etc/dirsrv/slapd-*/pwdfile.txtz/etc/httpd/alias/ipasession.keyz/etc/httpd/alias/key*z/etc/httpd/alias/pin.txtz/etc/httpd/alias/pwdfile.txtz/etc/named.keytabz %s/alias/key*z%s/flatfile.txtz%s/password.conf)z"ls -la /etc/dirsrv/slapd-*/schema/z certutil -L -d /etc/httpd/alias/zpki-server cert-find --show-allz%pki-server subsystem-cert-validate caz klist -ket /etc/dirsrv/ds.keytabz%klist -ket /etc/httpd/conf/ipa.keytabz,klist -ket /var/lib/ipa/gssproxy/http.keytab certmonger)services getcert list getcert_list)predtagsz/etc/dirsrv/slapd-*/zcertutil -L -d %sz(/var/log/ipa/healthcheck/healthcheck.logfreeipa_healthcheck_log)rrpki_tomcat_conf_dir_v4pki_tomcat_conf_dir_v3rr _log_debugr rr"pki_tomcat_dirpki_tomcat_conf_diradd_cmd_outputadd_forbidden_pathrr add_file_tags)rr! getcert_predcertdb_directorys rsetupz Ipa.setupIs !:!2&>#&3#335  $ $ & OO9 : OO1K? @          OOB C  " "; /   8 $ "&"8"8D '+'B'BD $"&"8"8D '+'B'BD $ 58K8KKL ;)A)AAB  ! & ) - - # & *  d11 1  8 8 8 !9!9 9 !    $D.:^=  N!/  1!%%; < H     36F F G H  6)  rcd}d}|jd|||jdddd}t|D]}|j|dd y) Nz(\s*arg \"password )[^\"]*z \1********z/etc/named.confr'z (pin=)'(\d+)'z\1'***'r$z(key_pin=)(\d+)z\1***) do_file_subdo_cmd_output_subr)rmatchsubst request_logs request_logs rpostprocz Ipa.postprocsf- *E59 ~/) +=  - 'K   [/% ' 'rN)__name__ __module__ __qualname__ short_desc plugin_nameprofiles ipa_server ipa_clientfilespackagesrrrr"r6r>rrrrsE*JK%HJJ EOH  0iV 'rrN)sos.report.pluginsrrrrrrIrrrKs!BAr'&,r'r