+ 1jX>^RIHt^RIHtHtHt!RR]]4tR#))glob)Plugin RedHatPlugin SoSPredicatecpa]tRt^toRtRtR tRtRtR t Rt Rt Rt Rt RtRtRtRtRtR tR tR tVtR#)IpazIdentity, policy, auditipaFNc VPR4'g/VPR4'gVPR4'dR#VPR4'gVPR4'dR#R#) zGet IPA server version z pki-serverz /var/lib/pkiz/usr/share/doc/ipa-server-4.2.0v4z pki-commonz/var/lib/pki-ca/v3N) is_installed path_existsselfs&8/usr/lib/python3/dist-packages/sos/report/plugins/ipa.pycheck_ipa_server_versionIpa.check_ipa_server_version!sb   \ * *##N33##$EFF   \ * *##$677c a\;QJd;V3RlSP R2SP R234F 'gK R# R#!V3RlSP R2SP R2344#)zCheck if any CA is installed c3F<"TFpSPV4xK R#5iN)r).0pathrs& r #Ipa.ca_installed../s' 0tD  T " "0!z/conf/ca/CS.cfgz /conf/CS.cfgTF)anypki_tomcat_dir_v4pki_tomcat_dir_v3rsfr ca_installedIpa.ca_installed,ss ))*/:))*,70 ss s s ))*/:))*,70   rc xa\;QJdV3RlR4F 'gK R# R#!V3RlR44#)z!Check if IPA server is installed c3F<"TFpSPV4xK R#5ir)r )rpkgrs& rr+Ipa.ipa_server_installed..8s# .NsD  c " ".NrTF) ipa-serverfreeipa-server)rrsfripa_server_installedIpa.ipa_server_installed6s>s .N ss s s .N   rc vVR8XdVP.RO4R#VR8XdVP.RO4R#R#)zCollect PKI logs r r N) z!/var/log/pki/pki-tomcat/ca/debug*z!/var/log/pki/pki-tomcat/ca/systemz'/var/log/pki/pki-tomcat/ca/transactionsz(/var/log/pki/pki-tomcat/ca/selftests.logz"/var/log/pki/pki-tomcat/catalina.*/var/log/pki/pki-ca-spawn.*z"/var/log/pki/pki-tomcat/kra/debug*z"/var/log/pki/pki-tomcat/kra/systemz(/var/log/pki/pki-tomcat/kra/transactionsz/var/log/pki/pki-kra-spawn.*)z/var/log/pki-ca/debugz/var/log/pki-ca/systemz/var/log/pki-ca/transactionsz/var/log/pki-ca/selftests.logz/var/log/pki-ca/catalina.*r+) add_copy_spec)r ipa_versions&&rcollect_pki_logsIpa.collect_pki_logs<s? $      D     !rcRVnRVnRVnRVnVP 4pVP 4'dKVP R4VP RV R24VP.R&O4VPR4VP4'd#VP R4VPV4VP.R'O4VR 8XdVPpVPpMVPpVPpVPR V R 24VPV R 24VPR RRRRRRRRV R2V R2V R2. 4VP.R(O4VPRRR7VPR4\VR.R7pVPRVR R!7\R"4FpVPR V 24K VPR#R$/4R%#))z/var/lib/pki/pki-tomcatz/var/lib/pki-caz/etc/pki/pki-tomcat/caz /etc/pki-cazIPA server install detectedzIPA version is []z ipactl statusz$CA is installed: retrieving PKI logsr zcertutil -L -d z/aliasz/CS.cfgz/etc/pki/nssdb/key*z/etc/dirsrv/slapd-*/key*z/etc/dirsrv/slapd-*/pin.txtz/etc/dirsrv/slapd-*/pwdfile.txtz/etc/httpd/alias/ipasession.keyz/etc/httpd/alias/key*z/etc/httpd/alias/pin.txtz/etc/httpd/alias/pwdfile.txtz/etc/named.keytabz /alias/key*z /flatfile.txtz/password.confz!ipa -e in_server=true config-showipa_config_show)suggest_filenamez/etc/dirsrv/slapd-*/schema/ certmonger)services getcert list getcert_list)predtagsz/etc/dirsrv/slapd-*/z(/var/log/ipa/healthcheck/healthcheck.logfreeipa_healthcheck_logN)z/var/log/ipaserver-install.logz"/var/log/ipaserver-kra-install.logz!/var/log/ipaserver-enable-sid.logz/var/log/ipareplica-install.logz"/var/log/ipareplica-ca-install.logz/var/log/ipa-custodia.audit.log)z/etc/dirsrv/slapd-*/dse.ldifz&/etc/dirsrv/slapd-*/schema/99user.ldifz /etc/hostsz/etc/httpd/alias/*z/etc/ipa/ca.crtz/etc/ipa/default.confz/etc/ipa/kdcproxy.confz$/etc/ipa/kdcproxy/ipa-kdc-proxy.confz/etc/ipa/kdcproxy/kdcproxy.confz /etc/named.*z/root/.ipa/log/cli.logz/var/kerberos/krb5kdc/kdc.crtz/var/lib/certmonger/cas/[0-9]*#/var/lib/certmonger/requests/[0-9]*z/var/lib/ipa/certs/httpd.crtz/var/lib/ipa/ra-agent.pemz(/var/lib/ipa/sysrestore/sysrestore.statez#/var/log/dirsrv/slapd-*/logs/accessz#/var/log/dirsrv/slapd-*/logs/errorsz/var/log/ipa-migrate.logz)/var/log/ipa/healthcheck/healthcheck.log*z/var/log/ipaclient-install.logz/var/log/ipaepn.log*z/var/log/ipaupgrade.logz/var/log/krb5kdc.log)z certutil -L -d /etc/httpd/alias/zpki-server cert-find --show-allz%pki-server subsystem-cert-validate caz klist -ket /etc/dirsrv/ds.keytabz%klist -ket /etc/httpd/conf/ipa.keytabz,klist -ket /var/lib/ipa/gssproxy/http.keytab)rrpki_tomcat_conf_dir_v4pki_tomcat_conf_dir_v3rr( _log_debugr,add_cmd_outputr r.add_forbidden_pathadd_dir_listingrr add_file_tags)rr-pki_tomcat_dirpki_tomcat_conf_dir getcert_predcertdb_directorys& rsetup Ipa.setupUs-!:!2&>#&3#335  $ $ & & OO9 : OO.{m1= >         0      OOB C  ! !+ .   : $ !33N"&"="= !33N"&"="=  on-=VDE 12':;  ! & ) - - # & * k *"#= 1"#> 2 !      /.  :;#D.:^=  N!/  1!%%; <    /2B1C D E!=  6)  rcRpRpVPRW4VPRRR4Rp\V4FpVPVRR4K R #) z(\s*arg \"password )[^\"]*z \1********z/etc/named.confr6z (pin=)'(\d+)'z\1'***'r;z(key_pin=)(\d+)z\1***N) do_file_subdo_cmd_output_subr)rmatchsubst request_logs request_logs& rpostproc Ipa.postprocs_- *E9 ~/) +=  -K   [/% '.r)r=r<rr)identityapache)z/etc/ipa)r&z ipa-clientr'zfreeipa-client)__name__ __module__ __qualname____firstlineno__ short_desc plugin_nameprofiles ipa_server ipa_clientfilespackagesrrr<r=rr r(r.rGrP__static_attributes____classdictcell__) __classdict__s@rrrse*JK%HJJ EOH!!   2q f ' 'rrN)rsos.report.pluginsrrrrrrrds AAF'&,F'r