219 lines
8.1 KiB
Python
219 lines
8.1 KiB
Python
|
# coding: utf-8
|
|||
|
|
# +-------------------------------------------------------------------
|
|||
|
|
# | YakPanel
|
|||
|
|
# +-------------------------------------------------------------------
|
|||
|
|
# | Copyright (c) 2015-2099 YakPanel(www.yakpanel.com) All rights reserved.
|
|||
|
|
# +-------------------------------------------------------------------
|
|||
|
|
# | Author: lkqiang <lkq@yakpanel.com>
|
|||
|
|
# +-------------------------------------------------------------------
|
|||
|
|
# +--------------------------------------------------------------------
|
|||
|
|
# | 密码管理
|
|||
|
|
# +--------------------------------------------------------------------
|
|||
|
|
import sys, os
|
|||
|
|
if sys.version_info[0] == 2:
|
|||
|
|
reload(sys)
|
|||
|
|
sys.setdefaultencoding('utf-8')
|
|||
|
|
os.chdir('/www/server/panel')
|
|||
|
|
if not 'class/' in sys.path:
|
|||
|
|
sys.path.insert(0,'class/')
|
|||
|
|
import re
|
|||
|
|
import public,data,database,config
|
|||
|
|
|
|||
|
|
class password:
|
|||
|
|
def __init__(self):
|
|||
|
|
self.__data=data.data()
|
|||
|
|
self.__database=database.database()
|
|||
|
|
self.__config=config.config()
|
|||
|
|
|
|||
|
|
#设置面板密码
|
|||
|
|
def set_panel_password(self,get):
|
|||
|
|
get.password1=get.password
|
|||
|
|
get.password2 = get.password
|
|||
|
|
data=self.__config.setPassword(get)
|
|||
|
|
return data
|
|||
|
|
|
|||
|
|
#查看面板用户名
|
|||
|
|
def get_panel_username(self,get):
|
|||
|
|
data=public.M('users').where("id=?", (1,)).getField('username')
|
|||
|
|
if data:
|
|||
|
|
return data
|
|||
|
|
else:
|
|||
|
|
return False
|
|||
|
|
|
|||
|
|
# 设置root 密码
|
|||
|
|
def set_root_password(self,get):
|
|||
|
|
public.ExecShell("echo"+get.user+":"+get.password+"|chpasswd")
|
|||
|
|
return True
|
|||
|
|
|
|||
|
|
#查看mysql_root密码
|
|||
|
|
def get_mysql_root(self,get):
|
|||
|
|
password = public.M('config').where("id=?",(1,)).getField('mysql_root')
|
|||
|
|
return public.returnMsg(True, password)
|
|||
|
|
|
|||
|
|
#设置mysql_root 密码
|
|||
|
|
def set_mysql_password(self,get):
|
|||
|
|
if 'password' in get:
|
|||
|
|
resutl=self.__database.SetupPassword(get)
|
|||
|
|
return resutl
|
|||
|
|
else:
|
|||
|
|
return public.returnMsg(False, public.lang("password参数不能为空"))
|
|||
|
|
|
|||
|
|
|
|||
|
|
# MySQL 的其他账户设置
|
|||
|
|
#获取其他mysql的信息
|
|||
|
|
def get_databses(self,get):
|
|||
|
|
data=public.M('databases').select()
|
|||
|
|
return public.returnMsg(True, data)
|
|||
|
|
|
|||
|
|
# 修改MySQL 其他账户的密码
|
|||
|
|
def rem_mysql_pass(self,get):
|
|||
|
|
'''
|
|||
|
|
参数 三个
|
|||
|
|
id 数据库ID， name:数据库名称, password:数据库密码
|
|||
|
|
'''
|
|||
|
|
data=self.__database.ResDatabasePassword(get)
|
|||
|
|
return data
|
|||
|
|
|
|||
|
|
# 修改其他Mysql 账户的权限
|
|||
|
|
def set_mysql_access(self,get):
|
|||
|
|
'''
|
|||
|
|
参数 三个
|
|||
|
|
name:数据库名称, dataAccess: 权限 access 权限
|
|||
|
|
'''
|
|||
|
|
data=self.__database.SetDatabaseAccess(get)
|
|||
|
|
return data
|
|||
|
|
|
|||
|
|
|
|||
|
|
#################### SSH 的基础设置####################
|
|||
|
|
|
|||
|
|
# 开启密码登陆
|
|||
|
|
def SetPassword(self, get):
|
|||
|
|
ssh_password = '\n#?PasswordAuthentication\\s\\w+'
|
|||
|
|
file = public.readFile('/etc/ssh/sshd_config')
|
|||
|
|
if len(re.findall(ssh_password, file)) == 0:
|
|||
|
|
file_result = file + '\nPasswordAuthentication yes'
|
|||
|
|
else:
|
|||
|
|
file_result = re.sub(ssh_password, '\nPasswordAuthentication yes', file)
|
|||
|
|
self.Wirte('/etc/ssh/sshd_config', file_result)
|
|||
|
|
self.RestartSsh()
|
|||
|
|
return public.returnMsg(True, public.lang("开启成功"))
|
|||
|
|
|
|||
|
|
# 设置ssh_key
|
|||
|
|
def SetSshKey(self, get):
|
|||
|
|
''''''
|
|||
|
|
type_list = ['rsa', 'dsa']
|
|||
|
|
ssh_type = ['yes', 'no']
|
|||
|
|
ssh = get.ssh
|
|||
|
|
if not ssh in ssh_type: return public.returnMsg(False, public.lang("ssh选项失败"))
|
|||
|
|
type = get.type
|
|||
|
|
if not type in type_list: return public.returnMsg(False, public.lang("加密方式错误"))
|
|||
|
|
file = ['/root/.ssh/id_rsa.pub', '/root/.ssh/id_rsa', '/root/.ssh/authorized_keys']
|
|||
|
|
for i in file:
|
|||
|
|
if os.path.exists(i):
|
|||
|
|
os.remove(i)
|
|||
|
|
public.ExecShell("ssh-keygen -t %s -P '' -f ~/.ssh/id_rsa |echo y" % type)
|
|||
|
|
if os.path.exists(file[0]):
|
|||
|
|
public.ExecShell('cat %s >%s && chmod 600 %s' % (file[0], file[-1], file[-1]))
|
|||
|
|
rec = '\n#?RSAAuthentication\\s\\w+'
|
|||
|
|
rec2 = '\n#?PubkeyAuthentication\\s\\w+'
|
|||
|
|
file = public.readFile('/etc/ssh/sshd_config')
|
|||
|
|
if len(re.findall(rec, file)) == 0: file = file + '\nRSAAuthentication yes'
|
|||
|
|
if len(re.findall(rec2, file)) == 0: file = file + '\nPubkeyAuthentication yes'
|
|||
|
|
file_ssh = re.sub(rec, '\nRSAAuthentication yes', file)
|
|||
|
|
file_result = re.sub(rec2, '\nPubkeyAuthentication yes', file_ssh)
|
|||
|
|
if ssh == 'no':
|
|||
|
|
ssh_password = '\n#?PasswordAuthentication\\s\\w+'
|
|||
|
|
if len(re.findall(ssh_password, file_result)) == 0:
|
|||
|
|
file_result = file_result + '\nPasswordAuthentication no'
|
|||
|
|
else:
|
|||
|
|
file_result = re.sub(ssh_password, '\nPasswordAuthentication no', file_result)
|
|||
|
|
self.Wirte('/etc/ssh/sshd_config', file_result)
|
|||
|
|
self.RestartSsh()
|
|||
|
|
return public.returnMsg(True, public.lang("开启成功"))
|
|||
|
|
else:
|
|||
|
|
return public.returnMsg(False, public.lang("开启失败"))
|
|||
|
|
|
|||
|
|
|
|||
|
|
# 关闭sshkey
|
|||
|
|
def StopKey(self, get):
|
|||
|
|
file = ['/root/.ssh/id_rsa.pub', '/root/.ssh/id_rsa', '/root/.ssh/authorized_keys']
|
|||
|
|
rec = '\n#?RSAAuthentication\\s\\w+'
|
|||
|
|
rec2 = '\n#?PubkeyAuthentication\\s\\w+'
|
|||
|
|
file = public.readFile('/etc/ssh/sshd_config')
|
|||
|
|
file_ssh = re.sub(rec, '\n#RSAAuthentication no', file)
|
|||
|
|
file_result = re.sub(rec2, '\n#PubkeyAuthentication no', file_ssh)
|
|||
|
|
self.Wirte('/etc/ssh/sshd_config', file_result)
|
|||
|
|
self.SetPassword(get)
|
|||
|
|
self.RestartSsh()
|
|||
|
|
return public.returnMsg(True, public.lang("关闭成功"))
|
|||
|
|
# 读取配置文件 获取当前状态
|
|||
|
|
|
|||
|
|
def GetConfig(self, get):
|
|||
|
|
result = {}
|
|||
|
|
file = public.readFile('/etc/ssh/sshd_config')
|
|||
|
|
rec = '\n#?RSAAuthentication\\s\\w+'
|
|||
|
|
pubkey = '\n#?PubkeyAuthentication\\s\\w+'
|
|||
|
|
ssh_password = '\nPasswordAuthentication\\s\\w+'
|
|||
|
|
ret = re.findall(ssh_password, file)
|
|||
|
|
if not ret:
|
|||
|
|
result['password'] = 'no'
|
|||
|
|
else:
|
|||
|
|
if ret[-1].split()[-1] == 'yes':
|
|||
|
|
result['password'] = 'yes'
|
|||
|
|
else:
|
|||
|
|
result['password'] = 'no'
|
|||
|
|
pubkey = re.findall(pubkey, file)
|
|||
|
|
if not pubkey:
|
|||
|
|
result['pubkey'] = 'no'
|
|||
|
|
else:
|
|||
|
|
if pubkey[-1].split()[-1] == 'no':
|
|||
|
|
result['pubkey'] = 'no'
|
|||
|
|
else:
|
|||
|
|
result['pubkey'] = 'yes'
|
|||
|
|
rsa_auth = re.findall(rec, file)
|
|||
|
|
if not rsa_auth:
|
|||
|
|
result['rsa_auth'] = 'no'
|
|||
|
|
else:
|
|||
|
|
if rsa_auth[-1].split()[-1] == 'no':
|
|||
|
|
result['rsa_auth'] = 'no'
|
|||
|
|
else:
|
|||
|
|
result['rsa_auth'] = 'yes'
|
|||
|
|
return result
|
|||
|
|
|
|||
|
|
# 关闭密码方式
|
|||
|
|
def StopPassword(self, get):
|
|||
|
|
file = public.readFile('/etc/ssh/sshd_config')
|
|||
|
|
ssh_password = '\n#?PasswordAuthentication\\s\\w+'
|
|||
|
|
file_result = re.sub(ssh_password, '\nPasswordAuthentication no', file)
|
|||
|
|
self.Wirte('/etc/ssh/sshd_config', file_result)
|
|||
|
|
self.RestartSsh()
|
|||
|
|
return public.returnMsg(True, public.lang("关闭成功"))
|
|||
|
|
|
|||
|
|
#显示key文件
|
|||
|
|
def GetKey(self, get):
|
|||
|
|
file = '/root/.ssh/id_rsa'
|
|||
|
|
if not os.path.exists(file): return public.returnMsg(True, public.lang(""))
|
|||
|
|
ret = public.readFile(file)
|
|||
|
|
return public.returnMsg(True, ret)
|
|||
|
|
|
|||
|
|
# 下载
|
|||
|
|
def Download(self, get):
|
|||
|
|
if os.path.exists('/root/.ssh/id_rsa'):
|
|||
|
|
ret = '/download?filename=/root/.ssh/id_rsa'
|
|||
|
|
return public.returnMsg(True, ret)
|
|||
|
|
|
|||
|
|
# 写入配置文件
|
|||
|
|
def Wirte(self, file, ret):
|
|||
|
|
result = public.writeFile(file, ret)
|
|||
|
|
return result
|
|||
|
|
|
|||
|
|
def RestartSsh(self):
|
|||
|
|
version = public.readFile('/etc/redhat-release')
|
|||
|
|
act = 'restart'
|
|||
|
|
if not os.path.exists('/etc/redhat-release'):
|
|||
|
|
public.ExecShell('service ssh ' + act)
|
|||
|
|
elif version.find(' 7.') != -1:
|
|||
|
|
public.ExecShell("systemctl " + act + " sshd.service")
|
|||
|
|
else:
|
|||
|
|
public.ExecShell("/etc/init.d/sshd " + act)
|