
Most of the Windows-specific plugins were able to work on other platforms as well, as long as osutils provides the relevant functionalities. This restructuring is an effort for helping future additions of other platforms. Change-Id: I21a35eb6eb8e2439cfdf861c59afc51c3618a779
80 lines
3.0 KiB
Python
80 lines
3.0 KiB
Python
# Copyright 2012 Cloudbase Solutions Srl
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from oslo.config import cfg
|
|
|
|
from cloudbaseinit.openstack.common import log as logging
|
|
from cloudbaseinit.osutils import factory as osutils_factory
|
|
from cloudbaseinit.plugins.common import base
|
|
from cloudbaseinit.plugins.common import constants
|
|
|
|
opts = [
|
|
cfg.StrOpt('username', default='Admin', help='User to be added to the '
|
|
'system or updated if already existing'),
|
|
cfg.ListOpt('groups', default=['Administrators'], help='List of local '
|
|
'groups to which the user specified in \'username\' will '
|
|
'be added'),
|
|
]
|
|
|
|
CONF = cfg.CONF
|
|
CONF.register_opts(opts)
|
|
|
|
LOG = logging.getLogger(__name__)
|
|
|
|
|
|
class CreateUserPlugin(base.BasePlugin):
|
|
|
|
def _get_password(self, osutils):
|
|
# Generate a temporary random password to be replaced
|
|
# by SetUserPasswordPlugin (starting from Grizzly)
|
|
return osutils.generate_random_password(14)
|
|
|
|
def execute(self, service, shared_data):
|
|
user_name = CONF.username
|
|
shared_data[constants.SHARED_DATA_USERNAME] = user_name
|
|
|
|
osutils = osutils_factory.get_os_utils()
|
|
password = self._get_password(osutils)
|
|
|
|
if osutils.user_exists(user_name):
|
|
LOG.info('Setting password for existing user "%s"' % user_name)
|
|
osutils.set_user_password(user_name, password)
|
|
else:
|
|
LOG.info('Creating user "%s" and setting password' % user_name)
|
|
osutils.create_user(user_name, password)
|
|
|
|
try:
|
|
# Create a user profile in order for other plugins
|
|
# to access the user home, etc
|
|
token = osutils.create_user_logon_session(user_name,
|
|
password,
|
|
True)
|
|
osutils.close_user_logon_session(token)
|
|
except Exception as ex:
|
|
LOG.exception(ex)
|
|
LOG.error('Cannot create a user logon session for user: "%s"' %
|
|
user_name)
|
|
|
|
# TODO(alexpilotti): encrypt with DPAPI
|
|
shared_data[constants.SHARED_DATA_PASSWORD] = password
|
|
|
|
for group_name in CONF.groups:
|
|
try:
|
|
osutils.add_user_to_local_group(user_name, group_name)
|
|
except Exception as ex:
|
|
LOG.exception(ex)
|
|
LOG.error('Cannot add user to group "%s"' % group_name)
|
|
|
|
return (base.PLUGIN_EXECUTION_DONE, False)
|