Current File : /opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/api//pam_auth.py
from defence360agent.api.integration_conf import IntegrationConfig
from defence360agent.contracts.config import UIRole
from defence360agent.subsys.panels.generic.panel import get_admin_list
class PamAuth:
DEFAULT_AUTH_SERVICE = "system-auth"
def authenticate(self, username, password) -> bool:
from pam import pam
try:
config = IntegrationConfig().to_dict()
service = config["PAM"]["SERVICE_NAME"]
except KeyError:
service = self.DEFAULT_AUTH_SERVICE
p = pam()
return p.authenticate(username, password, service=service)
async def get_user_type(self, username: str) -> UIRole:
admins = await get_admin_list()
return UIRole.ADMIN if username in admins else UIRole.CLIENT
