diff options
Diffstat (limited to 'modules/openssh')
| -rwxr-xr-x | modules/openssh/templates/ldap-sshkey2file.py | 19 |
1 files changed, 14 insertions, 5 deletions
diff --git a/modules/openssh/templates/ldap-sshkey2file.py b/modules/openssh/templates/ldap-sshkey2file.py index eb8456ab..e393e29b 100755 --- a/modules/openssh/templates/ldap-sshkey2file.py +++ b/modules/openssh/templates/ldap-sshkey2file.py @@ -3,6 +3,7 @@ import sys import os import random +import shutil try: import ldap @@ -24,7 +25,7 @@ pwfile="<%= ldap_pwfile %>" # filter out disabled accounts also # too bad uidNumber doesn't support >= filters filter="(&(objectClass=inetOrgPerson)(objectClass=ldapPublicKey)(objectClass=posixAccount)(sshPublicKey=*))" -keypathprefix="<%= pubkeys_directory %>" +keypathprefix='/home' def usage(): print "%s" % sys.argv[0] @@ -48,19 +49,27 @@ def get_pw(pwfile): return pw def write_keys(keys, user, uid, gid): + if not os.path.isdir("%s/%s" % (keypathprefix,user)): + shutil.copytree('/etc/skel', "%s/%s" % (keypathprefix,user)) + os.chown("%s/%s" % (keypathprefix,user), uid, gid) + for root, dirs, files in os.walk("%s/%s" % (keypathprefix,user)): + for d in dirs: + os.chown(os.path.join(root, d), uid, gid) + for f in files: + os.chown(os.path.join(root, f), uid, gid) try: - os.makedirs("%s/%s" % (keypathprefix,user), 0700) + os.makedirs("%s/%s/.ssh" % (keypathprefix,user), 0700) except: pass - keyfile = "%s/%s/authorized_keys" % (keypathprefix,user) + keyfile = "%s/%s/.ssh/authorized_keys" % (keypathprefix,user) f = open(keyfile, 'w') for key in keys: f.write(key.strip() + "\n") f.close() os.chmod(keyfile, 0600) os.chown(keyfile, uid, gid) - os.chmod("%s/%s" % (keypathprefix,user), 0700) - os.chown("%s/%s" % (keypathprefix,user), uid, gid) + os.chmod("%s/%s/.ssh" % (keypathprefix,user), 0700) + os.chown("%s/%s/.ssh" % (keypathprefix,user), uid, gid) if len(sys.argv) != 1: usage() |