Class: Inspec::Resources::WindowsUser
- Defined in:
- lib/resources/user.rb
Overview
For now, we stick with WMI Win32_UserAccount using Get-AdUser would be the best command for domain machines, but it will not be installed on client machines by default Just for reference, we could also use ADSI (Active Directory Service Interfaces)
Instance Attribute Summary
Attributes inherited from UserInfo
Instance Method Summary collapse
- #identity(username) ⇒ Object
-
#meta_info(_username) ⇒ Object
not implemented yet.
-
#parse_windows_account(username) ⇒ Object
parse windows account name.
Methods inherited from UserInfo
Methods included from Converter
Constructor Details
This class inherits a constructor from Inspec::Resources::UserInfo
Instance Method Details
#identity(username) ⇒ Object
416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 |
# File 'lib/resources/user.rb', line 416 def identity(username) # extract domain/user information account, domain = parse_windows_account(username) # TODO: escape content if !domain.nil? filter = "Name = '#{account}' and Domain = '#{domain}'" else filter = "Name = '#{account}' and LocalAccount = true" end script = <<-EOH # find user $user = Get-WmiObject Win32_UserAccount -filter "#{filter}" # get related groups $groups = $user.GetRelated('Win32_Group') | Select-Object -Property Caption, Domain, Name, LocalAccount, SID, SIDType, Status # filter user information $user = $user | Select-Object -Property Caption, Description, Domain, Name, LocalAccount, Lockout, PasswordChangeable, PasswordExpires, PasswordRequired, SID, SIDType, Status # build response object New-Object -Type PSObject | ` Add-Member -MemberType NoteProperty -Name User -Value ($user) -PassThru | ` Add-Member -MemberType NoteProperty -Name Groups -Value ($groups) -PassThru | ` ConvertTo-Json EOH cmd = inspec.script(script) # cannot rely on exit code for now, successful command returns exit code 1 # return nil if cmd.exit_status != 0, try to parse json begin params = JSON.parse(cmd.stdout) rescue JSON::ParserError => _e return nil end user = params['User']['Caption'] unless params['User'].nil? groups = params['Groups'] # if groups is no array, generate one groups = [groups] if !groups.is_a?(Array) groups = groups.map { |grp| grp['Caption'] } unless params['Groups'].nil? { uid: nil, user: user, gid: nil, group: nil, groups: groups, } end |
#meta_info(_username) ⇒ Object
not implemented yet
467 468 469 470 471 472 |
# File 'lib/resources/user.rb', line 467 def (_username) { home: nil, shell: nil, } end |
#parse_windows_account(username) ⇒ Object
parse windows account name
409 410 411 412 413 414 |
# File 'lib/resources/user.rb', line 409 def parse_windows_account(username) account = username.split('\\') name = account.pop domain = account.pop if account.size > 0 [name, domain] end |