Class: Inspec::Resources::WindowsUser
- Defined in:
- lib/resources/user.rb
Overview
For now, we stick with WMI Win32_UserAccount using Get-AdUser would be the best command for domain machines, but it will not be installed on client machines by default Just for reference, we could also use ADSI (Active Directory Service Interfaces)
Instance Attribute Summary
Attributes inherited from UserInfo
Instance Method Summary collapse
- #identity(username) ⇒ Object
-
#meta_info(_username) ⇒ Object
not implemented yet.
-
#parse_windows_account(username) ⇒ Object
parse windows account name.
Methods inherited from UserInfo
Methods included from Converter
Constructor Details
This class inherits a constructor from Inspec::Resources::UserInfo
Instance Method Details
#identity(username) ⇒ Object
402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 |
# File 'lib/resources/user.rb', line 402 def identity(username) # extract domain/user information account, domain = parse_windows_account(username) # TODO: escape content if !domain.nil? filter = "Name = '#{account}' and Domain = '#{domain}'" else filter = "Name = '#{account}' and LocalAccount = true" end script = <<-EOH # find user $user = Get-WmiObject Win32_UserAccount -filter "#{filter}" # get related groups $groups = $user.GetRelated('Win32_Group') | Select-Object -Property Caption, Domain, Name, LocalAccount, SID, SIDType, Status # filter user information $user = $user | Select-Object -Property Caption, Description, Domain, Name, LocalAccount, Lockout, PasswordChangeable, PasswordExpires, PasswordRequired, SID, SIDType, Status # build response object New-Object -Type PSObject | ` Add-Member -MemberType NoteProperty -Name User -Value ($user) -PassThru | ` Add-Member -MemberType NoteProperty -Name Groups -Value ($groups) -PassThru | ` ConvertTo-Json EOH cmd = inspec.script(script) # cannot rely on exit code for now, successful command returns exit code 1 # return nil if cmd.exit_status != 0, try to parse json begin params = JSON.parse(cmd.stdout) rescue JSON::ParserError => _e return nil end user = params['User']['Caption'] unless params['User'].nil? groups = params['Groups'] # if groups is no array, generate one groups = [groups] if !groups.is_a?(Array) groups = groups.map { |grp| grp['Caption'] } unless params['Groups'].nil? { uid: nil, user: user, gid: nil, group: nil, groups: groups, } end |
#meta_info(_username) ⇒ Object
not implemented yet
453 454 455 456 457 458 |
# File 'lib/resources/user.rb', line 453 def (_username) { home: nil, shell: nil, } end |
#parse_windows_account(username) ⇒ Object
parse windows account name
395 396 397 398 399 400 |
# File 'lib/resources/user.rb', line 395 def parse_windows_account(username) account = username.split('\\') name = account.pop domain = account.pop if account.size > 0 [name, domain] end |