text: # vim: tabstop=4 shiftwidth=4 softtabstop=4
  
  # Copyright 2012 Cloudbase Solutions Srl
  #
  #    Licensed under the Apache License, Version 2.0 (the "License"); you may
  #    not use this file except in compliance with the License. You may obtain
  #    a copy of the License at
  #
  #         http://www.apache.org/licenses/LICENSE-2.0
  #
  #    Unless required by applicable law or agreed to in writing, software
  #    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
  #    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
  #    License for the specific language governing permissions and limitations
  #    under the License.
  
  from oslo.config import cfg
  
  from cloudbaseinit.openstack.common import log as logging
  from cloudbaseinit.osutils import factory as osutils_factory
  from cloudbaseinit.plugins import base
  from cloudbaseinit.plugins import constants
  
  opts = [
      cfg.StrOpt('username', default='Admin', help='User to be added to the '
                 'system or updated if already existing'),
      cfg.ListOpt('groups', default=['Administrators'], help='List of local '
                  'groups to which the user specified in \'username\' will '
                  'be added'),
  ]
  
  CONF = cfg.CONF
  CONF.register_opts(opts)
  
  LOG = logging.getLogger(__name__)
  
  
  class CreateUserPlugin(base.BasePlugin):
      def _get_password(self, osutils):
          # Generate a temporary random password to be replaced
          # by SetUserPasswordPlugin (starting from Grizzly)
          return osutils.generate_random_password(14)
  
      def execute(self, service, shared_data):
          user_name = CONF.username
          shared_data[constants.SHARED_DATA_USERNAME] = user_name
  
          osutils = osutils_factory.get_os_utils()
          password = self._get_password(osutils)
  
          if osutils.user_exists(user_name):
              LOG.info('Setting password for existing user "%s"' % user_name)
              osutils.set_user_password(user_name, password)
          else:
              LOG.info('Creating user "%s" and setting password' % user_name)
              osutils.create_user(user_name, password)
  
              try:
                  # Create a user profile in order for other plugins
                  # to access the user home, etc
                  token = osutils.create_user_logon_session(user_name,
                                                            password,
                                                            True)
                  osutils.close_user_logon_session(token)
              except Exception as ex:
                  LOG.exception(ex)
                  LOG.error('Cannot create a user logon session for user: "%s"' %
                            user_name)
  
              # TODO(alexpilotti): encrypt with DPAPI
              shared_data[constants.SHARED_DATA_PASSWORD] = password
  
          for group_name in CONF.groups:
              try:
                  osutils.add_user_to_local_group(user_name, group_name)
              except Exception as ex:
                  LOG.exception(ex)
                  LOG.error('Cannot add user to group "%s"' % group_name)
  
          return (base.PLUGIN_EXECUTION_DONE, False)
  