krb5 configuration

The krb5 files are normally available to rules as a list of Krb5Configuration objects.

class insights.combiners.krb5.AllKrb5Conf(krb5configs)

Bases: LegacyItemAccess

Combiner for accessing all the krb5 configuration files, the format is dict. There may be multi files for krb5 configuration, and the main config file is krb5.conf. In the situation that same section is both in krb5.conf and other configuration files, section in krb5.conf is the available setting. Data from parser krb5 is list of dict(s), this combiner will parse this list and return a dict which containing all valid data.

Sample files:

/etc/krb5.conf:

    includedir /etc/krb5.conf.d/
    include /etc/krb5test.conf
    module /etc/krb5test.conf:residual

    [logging]
        default = FILE:/var/log/krb5libs.log
        kdc = FILE:/var/log/krb5kdc.log

/etc/krb5.d/krb5_more.conf:

    [logging]
        default = FILE:/var/log/krb5.log
        kdc = FILE:/var/log/krb5.log
        admin_server = FILE:/var/log/kadmind.log

    [realms]
        dns_lookup_realm = false
        default_ccache_name = KEYRING:persistent:%{uid}

Examples

>>> all_krb5 = shared[AllKrb5Conf]
>>> all_krb5.include
['/etc/krb5test.conf']
>>> all_krb5.sections()
['logging', 'realms']
>>> all_krb5.options('logging')
['default', 'kdc', 'admin_server']
>>> all_krb5['logging']['kdc']
'FILE:/var/log/krb5kdc.log'
>>> all_krb5.has_option('logging', 'admin_server')
True
>>> all_krb5['realms']['dns_lookup_realm']
'false'
>>> all_krb5.files
['krb5.conf', 'test.conf', 'test2.conf']

includedir

The directory list that krb5.conf includes via includedir directive

Type:

list

include

The configuration file list that krb5.conf includes via include directive

Type:

list

module

The module list that krb5.conf specifed via ‘module’ directive

Type:

list

files

The list of configuration file names.

Type:

list

dns_lookup_realm

is Kerberos realm DNS lookup enabled?

Type:

bool

dns_lookup_kdc

is Kerberos KDC DNS lookup enabled?

Type:

bool

default_realm

default realm for clients

Type:

str/None

realms

realm names from [realms] block

Type:

set

getboolean(section, option)

Parse option as bool

Returns None is not a krb5.conf boolean string.

has_option(section, option)

Check for the existence of a given option in a given section. Return True if the given option is present, and False if not present.

has_section(section)

Indicate whether the named section is present in the configuration. Return True if the given section is present, and False if not present.

options(section)

Return a list of option names for the given section name.

sections()

Return a list of section names.

insights.combiners.krb5.dict_deep_merge(tgt, src)

Utility function to merge the source dictionary src to the target dictionary recursively

Note

The type of the values in the dictionary can only be dict or list

Parameters:

• tgt (dict) -- The target dictionary

• src (dict) -- The source dictionary