22

✏️ Editing: aix_group.py

"""
Manage groups on Solaris

.. important::
    If you feel that Salt should be using this module to manage groups on a
    minion, and it is using a different module (or gives an error similar to
    *'group.info' is not available*), see :ref:`here
    <module-provider-override>`.
"""

import logging

try:
    import grp
except ImportError:
    pass

log = logging.getLogger(__name__)

# Define the module's virtual name
__virtualname__ = "group"

def __virtual__():
    """
    Set the group module if the kernel is AIX
    """
    if __grains__["kernel"] == "AIX":
        return __virtualname__
    return (
        False,
        "The aix_group execution module failed to load: only available on AIX systems.",
    )

def add(name, gid=None, system=False, root=None, **kwargs):
    """
    Add the specified group

CLI Example:

.. code-block:: bash

salt '*' group.add foo 3456
    """
    cmd = "mkgroup "
    if system and root is not None:
        cmd += "-a "

if gid:
        cmd += f"id={gid} "

cmd += name

ret = __salt__["cmd.run_all"](cmd, python_shell=False)

return not ret["retcode"]

def delete(name):
    """
    Remove the named group

CLI Example:

.. code-block:: bash

salt '*' group.delete foo
    """
    ret = __salt__["cmd.run_all"](f"rmgroup {name}", python_shell=False)

return not ret["retcode"]

def info(name):
    """
    Return information about a group

CLI Example:

.. code-block:: bash

salt '*' group.info foo
    """
    try:
        grinfo = grp.getgrnam(name)
    except KeyError:
        return {}
    else:
        return {
            "name": grinfo.gr_name,
            "passwd": grinfo.gr_passwd,
            "gid": grinfo.gr_gid,
            "members": grinfo.gr_mem,
        }

def getent(refresh=False):
    """
    Return info on all groups

CLI Example:

.. code-block:: bash

salt '*' group.getent
    """
    if "group.getent" in __context__ and not refresh:
        return __context__["group.getent"]

ret = []
    for grinfo in grp.getgrall():
        ret.append(info(grinfo.gr_name))

__context__["group.getent"] = ret
    return ret

def chgid(name, gid):
    """
    Change the gid for a named group

CLI Example:

.. code-block:: bash

salt '*' group.chgid foo 4376
    """
    pre_gid = __salt__["file.group_to_gid"](name)
    if gid == pre_gid:
        return True
    cmd = f"chgroup id={gid} {name}"
    __salt__["cmd.run"](cmd, python_shell=False)
    post_gid = __salt__["file.group_to_gid"](name)
    if post_gid != pre_gid:
        return post_gid == gid
    return False

def adduser(name, username, root=None):
    """
    Add a user in the group.

CLI Example:

.. code-block:: bash

salt '*' group.adduser foo bar

Verifies if a valid username 'bar' as a member of an existing group 'foo',
    if not then adds it.
    """
    cmd = f"chgrpmem -m + {username} {name}"

retcode = __salt__["cmd.retcode"](cmd, python_shell=False)

return not retcode

def deluser(name, username, root=None):
    """
    Remove a user from the group.

CLI Example:

.. code-block:: bash

salt '*' group.deluser foo bar

Removes a member user 'bar' from a group 'foo'. If group is not present
    then returns True.
    """
    grp_info = __salt__["group.info"](name)
    try:
        if username in grp_info["members"]:
            cmd = f"chgrpmem -m - {username} {name}"
            ret = __salt__["cmd.run"](cmd, python_shell=False)
            return not ret["retcode"]
        else:
            return True
    except Exception:  # pylint: disable=broad-except
        return True

def members(name, members_list, root=None):
    """
    Replaces members of the group with a provided list.

CLI Example:

.. code-block:: bash

salt '*' group.members foo 'user1,user2,user3,...'

Replaces a membership list for a local group 'foo'.
        foo:x:1234:user1,user2,user3,...
    """
    cmd = f"chgrpmem -m = {members_list} {name}"
    retcode = __salt__["cmd.retcode"](cmd, python_shell=False)

return not retcode

MR SKB