# Modify common-auth include file in /etc/pam.d/login, sshd.
# /etc/pam.d/sudo is not handled, because it would change the existing
# behavior. It can be modified once a config knob is added for sudo.
if os.path.isfile(PAM_AUTH_CONF):
    self.modify_single_file(ETC_PAMD_SSHD,  [ "/^@include/s/common-auth$/common-auth-sonic/" ])
    self.modify_single_file(ETC_PAMD_LOGIN, [ "/^@include/s/common-auth$/common-auth-sonic/" ])
else:
    self.modify_single_file(ETC_PAMD_SSHD,  [ "/^@include/s/common-auth-sonic$/common-auth/" ])
    self.modify_single_file(ETC_PAMD_LOGIN, [ "/^@include/s/common-auth-sonic$/common-auth/" ])

def modify_single_file(self, filename, operations=None):
    if operations:
        e_list = ['-e'] * len(operations)
        e_operations = [item for sublist in zip(e_list, operations) for item in sublist]
        with open(filename+'.new', 'w') as f:
            subprocess.call(["sed"] + e_operations + [filename], stdout=f)
        subprocess.call(["mv", '-f', filename, filename+'.old'])
        subprocess.call(['mv', '-f', filename+'.new', filename])

    self.check_file_not_empty(filename)

def check_file_not_empty(self, filename):
    exists = os.path.exists(filename)
    if not exists:
        syslog.syslog(syslog.LOG_ERR, "file size check failed: {} is missing".format(filename))
        return

    size = os.path.getsize(filename)
    if size == 0:
        syslog.syslog(syslog.LOG_ERR, "file size check failed: {} is empty, file corrupted".format(filename))
        return

    syslog.syslog(syslog.LOG_INFO, "file size check pass: {} size is ({}) bytes".format(filename, size))

#!/usr/bin/env python

from hostcfg import AaaCfg
from hostcfg import ETC_PAMD_SSHD
from hostcfg import ETC_PAMD_LOGIN

cfg = AaaCfg()

cond = True

while True:
    if cond:
        cfg.modify_single_file(ETC_PAMD_SSHD,  [ "/^@include/s/common-auth-sonic$/common-auth/" ])
        cfg.modify_single_file(ETC_PAMD_LOGIN, [ "/^@include/s/common-auth-sonic$/common-auth/" ])
        cond = False
    else:
        cfg.modify_single_file(ETC_PAMD_SSHD,  [ "/^@include/s/common-auth$/common-auth-sonic/" ])
        cfg.modify_single_file(ETC_PAMD_LOGIN, [ "/^@include/s/common-auth$/common-auth-sonic/" ])
        cond = True