diff options
| -rwxr-xr-x | src/conf_mode/system-login.py | 34 |
1 files changed, 31 insertions, 3 deletions
diff --git a/src/conf_mode/system-login.py b/src/conf_mode/system-login.py index 9a2de54eb..8aa3991fd 100755 --- a/src/conf_mode/system-login.py +++ b/src/conf_mode/system-login.py @@ -18,6 +18,8 @@ import sys import os from pwd import getpwall, getpwnam +from grp import getgrnam +from stat import S_IRUSR, S_IWUSR, S_IRWXU, S_IRGRP, S_IXGRP from subprocess import Popen, PIPE, STDOUT from vyos.config import Config @@ -131,15 +133,15 @@ def get_config(): # Public Key portion if conf.exists(['key']): - user['key'] = conf.return_value(['key']) + key['key'] = conf.return_value(['key']) # Options for individual public key if conf.exists(['options']): - user['options'] = conf.return_value(['options']) + key['options'] = conf.return_value(['options']) # Type of public key if conf.exists(['type']): - user['type'] = conf.return_value(['type']) + key['type'] = conf.return_value(['type']) # Append individual public key to list of user keys user['public_keys'].append(key) @@ -176,6 +178,32 @@ def generate(login): os.system("vyos_libexec_dir=/usr/libexec/vyos /opt/vyatta/sbin/my_set system login user '{}' authentication plaintext-password '' >/dev/null".format(user['name'])) os.system("vyos_libexec_dir=/usr/libexec/vyos /opt/vyatta/sbin/my_set system login user '{}' authentication encrypted-password '{}' >/dev/null".format(user['name'], user['password_encrypted'])) + uid = getpwnam(user['name']).pw_uid + gid = getpwnam(user['name']).pw_gid + + # install ssh keys + key_dir = '{}/.ssh'.format(user['home_dir']) + if not os.path.isdir(key_dir): + os.mkdir(key_dir) + os.chown(key_dir, uid, gid) + os.chmod(key_dir, S_IRWXU|S_IRGRP|S_IXGRP) + + key_file = key_dir + '/authorized_keys'; + with open(key_file, 'w') as f: + f.write("# Automatically generated by VyOS\n") + f.write("# Do not edit, all changes will be lost\n") + + for id in user['public_keys']: + line = '' + if id['options']: + line = '{} '.format(id['options']) + + line += '{} {} {}\n'.format(id['type'], id['key'], id['name']) + f.write(line) + + os.chown(key_file, uid, gid) + os.chmod(key_file, S_IRUSR|S_IWUSR) + pass def apply(login): |