�
d�bc@s
dd
lZdd
l
ZddlmZmZ
dd
ljjZdd
ljjZddl	m
Z
mZ
ddlm
Z

ddlmZ
ddlmZ
ddlmZ
ddlmZmZ
d	Zd
ZdZdZd
ZdZd�Zdef
d��YZd
S(i����N(tdatetimet	timedelta(t	add_eventtWALAEventOperation(
tustr(
t
get_osutil(
ttextutil(
t	CryptUtil(t
AGENT_NAMEtCURRENT_VERSIONs%a, %d %b %Y %H:%M:%S %Zs%Y-%m-%dsTransportPrivate.pemtJIT_Accountii
c

Cs
t|�
S(
N(
tRemoteAccessHandler(
tprotocol((sC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pytget_remote_access_handler)s
RcBsMeZ
d�Zd
�Zd�Zd�Zed��
Zd�Zd�Z	RS(cCs@t�|_
|
|_ttj��
|_d|_t	|_
dS(
N(Rt_os_utilt	_protocolRtconftget_openssl_cmdt
_cryptUtiltNonet_remote_accesstTruet_check_existing_jit_users(tselfR((sC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pyt__init__.s


	

	
c

Cs�y2|jj
r1|jjj�|_|j�
nWnPtk
r�
}

d
jt	j
|
�
�
}ttdt
dtjdtd|�

n
XdS(Nu<Exception processing goal state for remote access users: {0}tversiontopt
is_successtmessage(Rtjit_enabledRtclienttget_remote_accessRt_handle_remote_accesst	ExceptiontformatRtformat_exceptionRRR	RtRemoteAccessHandlingtFalse(Rt
etmsg((sC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pytrun5s





	

	

c
s)�jj
�}
t�f
d
�|
D�
�
S(Nc
3s,|]"}
�j|
d�
r|
d
V
qdS(iiN(
t_is_jit_user(t.0t
u(
R(sC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pys	<genexpr>Es(Rt	get_userstset(Rt	all_users((
RsC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pyt_get_existing_jit_usersCs

c

Cs:|jdk	r�
tjd
�

t|_|j�}
td�|jjj	D�
�
}x�|jjj	D]�}y�|j
}tj|t
�}tj�}|j|
kr�||kr�|j|j|j|�
nA|j|
kr
||kr
tjd|j�
|j|j�

nWq`tk
r:

}
tjd|jt|�
�
q`Xq`Wx�|
D]U}y ||krk
|j|�

nWqF
tk
r�

}
tjd|t|�
�
qF
XqF
Wn�|jr6tjd�

|j�}
t}	xT|
D]L}y|j|�

Wq�
tk
r
}
tjd|t|�
�
t}	q�
Xq�
W|	s6t|_q6ndS(Ns-Processing remote access users in goal state.c
ss|]}
|
jV
qdS(
N(
tname(R*R+((sC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pys	<genexpr>Nss!Remote access user '{0}' expired.s/Error processing remote access user '{0}' - {1}s-Error removing remote access user '{0}' - {1}s)Looking for existing remote access users.(RRtloggertinfoRRR/R-t	user_listtuserst
expirationRtstrptimetREMOTE_USR_EXPIRATION_FORMATtutcnowR0t	_add_usertencrypted_passwordt_remove_userR!terrorRR%(
Rtexisting_jit_userstgoal_state_userstacctraw_expirationtaccount_expirationtnowR&tusertremove_user_errors((sC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pyR GsF


	


	







$




$	








c

Cs
|tkS(
N(
tREMOTE_ACCESS_ACCOUNT_COMMENT(
tcomment((sC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pyR){scCs�t}y�|t
d
d�
jt�
}tjd|
|�
|jj|
|t�
t	}tjd|
�
t
jjt
j�t�}|jj||�}|jj|
|t
j�t
j��
|jj|
�

Wn*tk
r�


|r�|j|
�

n�n
XdS(Ntdaysi
s8Adding remote access user '{0}' with expiration date {1}s*Adding remote access user '{0}' to sudoers(R%R
tstrftimetDATE_FORMATR1R2RtuseraddRERtostpathtjoinRtget_lib_dirtTRANSPORT_PRIVATE_CERTRtdecrypt_secrettchpasswdtget_password_cryptidtget_password_crypt_salt_lentconf_sudoerR!R;(RtusernameR:RAt
user_addedtexpiration_datetprv_keytpwd((sC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pyR9s







%





cCs$tj
d
|
�
|jj|
�

dS(Ns!Removing remote access user '{0}'(R1R2Rtdel_account(RRU((sC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pyR;�s

(
t__name__t
__module__RR(R/R tstaticmethodR)R9R;(((sC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pyR-s
				4	( RKtos.pathRR
tazurelinuxagent.common.conftcommonRtazurelinuxagent.common.loggerR1tazurelinuxagent.common.eventRRtazurelinuxagent.common.futureRtazurelinuxagent.common.osutilRtazurelinuxagent.common.utilsRt&azurelinuxagent.common.utils.cryptutilRtazurelinuxagent.common.versionRR	R7RIROREtMAX_TRY_ATTEMPTtFAILED_ATTEMPT_THROTTLER
tobjectR(((sC/usr/lib/python2.7/site-packages/azurelinuxagent/ga/remoteaccess.pyt<module>s$