• package: tis-laps-by-wapt
• name: LAPS by WAPT
• version: 3-10
• categories: Utilities
• maintainer: WAPT Team,Tranquil IT,Simon FONTENEAU,Amelie LE JEUNE,Pierre COSSON,Jimmy PELÉ
• licence: wapt_public
• locale: all
• target_os: windows
• architecture: all
• signature_date: 2025-09-19T17:00:17.000000
• size: 16.24 Ko

package           : tis-laps-by-wapt
version           : 3-10
architecture      : all
section           : base
priority          : optional
name              : LAPS by WAPT
categories        : Utilities
maintainer        : WAPT Team,Tranquil IT,Simon FONTENEAU,Amelie LE JEUNE,Pierre COSSON,Jimmy PELÉ
description       : change and display administrator password with admin's private key
depends           : 
conflicts         : 
maturity          : PROD
locale            : all
target_os         : windows
min_wapt_version  : 2.1
sources           : 
installed_size    : 
impacted_process  : 
description_fr    : 
description_pl    : 
description_de    : 
description_es    : 
description_pt    : 
description_it    : 
description_nl    : 
description_ru    : 
audit_schedule    : 
editor            : 
keywords          : 
licence           : wapt_public
homepage          : 
package_uuid      : 6fc5b346-ee8c-4c3f-88d7-3eb3f250ac00
valid_from        : 
valid_until       : 
forced_install_on : 
changelog         : 
min_os_version    : 
max_os_version    : 
icon_sha256sum    : 3ff6547ef5ca3bd871b4ae07f6ae9060009646db2baac829120c87c285ead18b
signer            : Tranquil IT
signer_fingerprint: 8c5127a75392be9cc9afd0dbae1222a673072c308c14d88ab246e23832e8c6bb
signature_date    : 2025-09-19T17:00:17.000000
signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes
signature         : sRZQ+/iBb7aRSa+GmlPESRyXeP5sEVR+Uf8KMY851BHYZaZ77uSjvzgaD/evjYgVlgO5Er2tykk+HruIDusLHUygZIoMkI8tyoSNwoY/Qm+P22PZXe02YU2jycLLyJVUvR4bam84KppmSa7gHhdfQczlVdVNGJoCB1aIYUw52L2n2/AAZI3MdH9Q02V5XQpjz88BpYzGB2S9ZjLxcaTzTusva0CHpsfTVlD19cecjqmGbOvSNkrSaHwJSYzaJr2UMOINxeJPFFV6II9KycenLKb6W29M7uFwV+AMTP6M2kMZlbNxEibaF/gQCdxs+v4EJ50+Epb3xakWFeKK6RWCWA==

# -*- coding: utf-8 -*-
from setuphelpers import *
import win32net
import win32security
import datetime

try:
    import waptcrypto

    if "encrypted_data_str" in dir(waptcrypto):
        from waptcrypto import encrypted_data_str as rsa_encrypted_data_str
except:
    pass


import string
import random


# dict_admin = {
#     "en": "administrator",
#     "fr": "administrateur",
#     "de": "administrator",
#     "pl": "administrator",
#     "es": "Administrador",
#     "pt": "administrador",
#     "it": "administrator",
#     "nl": "administrator",
#     "ru": "Администратор",
# }


def install():
    # you can add you ssl certificate in the package in order to decrypt information in the audit_data
    for crt in glob.glob("*.crt"):
        filecopyto(crt, makepath(WAPT.wapt_base_dir, "ssl", crt))
    audit()


def audit():
    all_passwords = list(WAPT.read_audit_data_set("laps", "local_admin_password"))
    if all_passwords:
        last_date = list(WAPT.read_audit_data_set("laps", "local_admin_password"))[-1][1]
    else:
        last_date = None
    if not last_date or (datetime.datetime.now() - isodate2datetime(last_date) > datetime.timedelta(days=365)) or force == True:
        randompassword = password_generator(size=random.randint(10, 16), chars=string.ascii_letters + string.digits)
        locsid = str(win32net.NetUserModalsGet(get_computername(), 2)['domain_id']).split(':',1)[-1]
        sid = win32security.GetBinarySid(locsid + "-500")
        admin_local_user, domain, typ = win32security.LookupAccountSid(wincomputername(), sid)

        if not params.get("install_with_luti", False):
            run(r'net user "%s" "%s"' % (admin_local_user, randompassword))

        run(r'net user "%s" /active:yes' % admin_local_user)
        WAPT.write_audit_data_if_changed("laps", "local_admin_password", rsa_encrypted_data_str(randompassword, [WAPT.public_certs_dir]), max_count=3)
    return "OK"


def password_generator(size=16, chars=string.ascii_letters + string.digits):
    """
    Returns a string of random characters, useful in generating temporary
    passwords for automated password resets.

    size: default=8; override to provide smaller/larger passwords
    chars: default=A-Za-z0-9; override to provide more/less diversity

    Credit: Ignacio Vasquez-Abrams
    Source: http://stackoverflow.com/a/2257449
    """
    return "".join(random.choice(chars) for i in range(size))

1a6b620f00f4030e18b8bf199de1987bae82e8b57541750886298ac42393ddc6 : WAPT/README.md
424412f5866d0050bf46967f2f3aefedbf1de50d6821f719b20fcc4e5d85e214 : WAPT/README_fr.md
38d056ab130f7bf7c481c12636a4e9959de36561d3dfcbe54c6e3571bc0c1dc3 : WAPT/certificate.crt
fb1d34968f070e4bec2039ca0e9b3608cbf2d02caf0a923ea58a1701979bd24a : WAPT/control
3ff6547ef5ca3bd871b4ae07f6ae9060009646db2baac829120c87c285ead18b : WAPT/icon.png
ebcf8eccf7fde332d01eca984b1455354cb6ec2dc65fdee0311b7f5492e91ae1 : luti.json
3059eaa3f83ec899291a9ca64e55fcfbf5081debbf3f3f78f89ced5a05fa81f2 : setup.py