File: //opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyo
�
��"Wc @ s| d Z d d l Z d d l m Z m Z m Z m Z m Z m Z m Z m
Z
m Z m Z m
Z
m Z m Z m Z m Z m Z m Z m Z m Z m Z m Z m Z m Z m Z m Z m Z m Z m Z m Z m Z m! Z! m" Z" m# Z# m$ Z$ m% Z% m& Z& m' Z' m( Z( d d l) m* Z* d d l+ m, Z, d d l- m. Z. m/ Z/ m0 Z0 m1 Z1 d d l2 m3 Z3 d d l4 m5 Z5 d e6 f d
� � YZ7 d S( s
`.AuthHandler`
i����N(& t cMSG_SERVICE_REQUESTt cMSG_DISCONNECTt DISCONNECT_SERVICE_NOT_AVAILABLEt) DISCONNECT_NO_MORE_AUTH_METHODS_AVAILABLEt cMSG_USERAUTH_REQUESTt cMSG_SERVICE_ACCEPTt DEBUGt AUTH_SUCCESSFULt INFOt cMSG_USERAUTH_SUCCESSt cMSG_USERAUTH_FAILUREt AUTH_PARTIALLY_SUCCESSFULt cMSG_USERAUTH_INFO_REQUESTt WARNINGt AUTH_FAILEDt cMSG_USERAUTH_PK_OKt cMSG_USERAUTH_INFO_RESPONSEt MSG_SERVICE_REQUESTt MSG_SERVICE_ACCEPTt MSG_USERAUTH_REQUESTt MSG_USERAUTH_SUCCESSt MSG_USERAUTH_FAILUREt MSG_USERAUTH_BANNERt MSG_USERAUTH_INFO_REQUESTt MSG_USERAUTH_INFO_RESPONSEt cMSG_USERAUTH_GSSAPI_RESPONSEt cMSG_USERAUTH_GSSAPI_TOKENt& cMSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETEt cMSG_USERAUTH_GSSAPI_ERRORt cMSG_USERAUTH_GSSAPI_ERRTOKt cMSG_USERAUTH_GSSAPI_MICt MSG_USERAUTH_GSSAPI_RESPONSEt MSG_USERAUTH_GSSAPI_TOKENt% MSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETEt MSG_USERAUTH_GSSAPI_ERRORt MSG_USERAUTH_GSSAPI_ERRTOKt MSG_USERAUTH_GSSAPI_MICt MSG_NAMES( t Message( t
bytestring( t SSHExceptiont AuthenticationExceptiont BadAuthenticationTypet PartialAuthentication( t InteractiveQuery( t GSSAutht AuthHandlerc B s0 e Z d Z d � Z d � Z d � Z d � Z d � Z d � Z d d � Z d � Z
d
� Z d � Z d � Z
d
� Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z i e e 6e e 6e e 6e e 6e e 6e e! 6e e" 6e e# 6Z$ RS( sC
Internal class to handle the mechanics of authentication.
c C s� t j | � | _ d | _ t | _ d | _ d | _ d | _ d | _
d | _ d | _ d | _
d | _ d | _ d | _ t | _ d S( Nt i ( t weakreft proxyt transportt Nonet usernamet Falset
authenticatedt
auth_eventt auth_methodt bannert passwordt private_keyt interactive_handlert
submethodst
auth_usernamet auth_fail_countt gss_hostt Truet gss_deleg_creds( t selfR2 ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt __init__4 s c C s | j S( N( R6 ( RC ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt is_authenticatedF s c C s | j j r | j S| j Sd S( N( R2 t server_modeR> R4 ( RC ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt get_usernameI s c C sQ | j j j � z) | | _ d | _ | | _ | j � Wd | j j j � Xd S( Nt none( R2 t lockt acquireR7 R8 R4 t
_request_autht release( RC R4 t event( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt auth_noneO s c C sZ | j j j � z2 | | _ d | _ | | _ | | _ | j � Wd | j j j � Xd S( Nt publickey( R2 RI RJ R7 R8 R4 R; RK RL ( RC R4 t keyRM ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt auth_publickeyY s c C sZ | j j j � z2 | | _ d | _ | | _ | | _ | j � Wd | j j j � Xd S( NR: ( R2 RI RJ R7 R8 R4 R: RK RL ( RC R4 R: RM ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt
auth_passwordd s R/ c C sc | j j j � z; | | _ d | _ | | _ | | _ | | _ | j � Wd | j j j � Xd S( sK
response_list = handler(title, instructions, prompt_list)
s keyboard-interactiveN(
R2 RI RJ R7 R8 R4 R< R= RK RL ( RC R4 t handlerRM R= ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt auth_interactiveo s c C sc | j j j � z; | | _ d | _ | | _ | | _ | | _ | j � Wd | j j j � Xd S( Ns gssapi-with-mic(
R2 RI RJ R7 R8 R4 R@ RB RK RL ( RC R4 R@ RB RM ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt auth_gssapi_with_mic~ s c C sQ | j j j � z) | | _ d | _ | | _ | j � Wd | j j j � Xd S( Ns gssapi-keyex( R2 RI RJ R7 R8 R4 RK RL ( RC R4 RM ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt auth_gssapi_keyex� s c C s# | j d k r | j j � n d S( N( R7 R3 t set( RC ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt abort� s c C s7 t � } | j t � | j d � | j j | � d S( Ns ssh-userauth( R& t add_byteR t
add_stringR2 t
_send_message( RC t m( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyRK � s
c C s^ t � } | j t � | j t � | j d � | j d � | j j | � | j j � d S( Ns Service not availablet en( R& RY R t add_intR RZ R2 R[ t close( RC R\ ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt! _disconnect_service_not_available� s
c C s^ t � } | j t � | j t � | j d � | j d � | j j | � | j j � d S( Ns No more auth methods availableR] ( R& RY R R^ R RZ R2 R[ R_ ( RC R\ ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt _disconnect_no_more_auth� s
c C s� t � } | j | j j � | j t � | j | � | j | � | j d � | j t � | j | j � � | j | � | j � S( NRO (
R& RZ R2 t
session_idRY R t add_booleanRA t get_namet asbytes( RC RP t serviceR4 R\ ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt _get_session_blob� s
c C s� x{ t r} | j d � | j j � sj | j j � } | d k sR t | j t � ra t d � } n | � n | j
� r Pq q W| j � s� | j j � } | d k r� t d � } n t | j t � r� | j
S| � n g S( Ng�������?s Authentication failed.( RA t waitR2 t is_activet
get_exceptionR3 t
issubclasst __class__t EOFErrorR) t is_setRE R+ t
allowed_types( RC RM t e( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt wait_for_response� s"
c C si | j � } | j j r[ | d k r[ t � } | j t � | j | � | j j | � d S| j � d S( Ns ssh-userauth( t get_textR2 RF R& RY R RZ R[ R` ( RC R\ Rf ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt _parse_service_request� s
c C s� | j � } | d k r{| j j t d � t � } | j t � | j | j � | j d � | j | j � | j d k r� | j
t � t | j
� } | j | � n�| j d k r(| j
t � | j | j j � � | j | j � | j | j d | j � } | j j | � } | j | � n@| j d k rW| j d � | j | j � n| j d k r�t | j | j � } | j | j � � | j j | � | j j j � \ } } | t k r�| j | � | j j j � \ } } n | t k r4| j � } t � } | j t � | j | j | j! | | j � � | j j | � x� t r�| j j j � \ } } | t" k rM| j � } | j | j! | | j | � }
|
d k r�Pq�t � } | j t � | j |
� | j j$ | � qMqMWt% d t& | � � t � } | j t' � | j | j( | j j) � � qh| t* k rOt% d
� � qh| t+ k r�| j, � } | j, � } | j � }
| j � } t% d � t- | � t- | � |
f � qh| t. k r�| j/ | � d St% d t& | � � n� | j d k rC| j j0 rC| j j1 } | j2 | j � | j( | j j) � } | j | � n% | j d
k rUn t% d | j � � | j j | � n | j j t d | � d S( Ns ssh-userauths userauth is OKs ssh-connectionR: RO s keyboard-interactiveR/ s gssapi-with-mics Received Package: %ss Server returned an error tokens� GSS-API Error:
Major Status: %s
Minor Status: %s\
Error Message: %s
s gssapi-keyexRH s Unknown auth method "%s"s! Service request "%s" accepted (?)(3 Rr R2 t _logR R& RY R RZ R4 R8 Rc R5 R' R: RA R; Rd Rg t
sign_ssh_dataR= R- RB t add_bytest ssh_gss_oidsR[ t
packetizert read_messageR t _parse_userauth_bannerR t
get_stringR t ssh_init_sec_contextR@ R R3 t send_messageR( R% R t ssh_get_micRb R# R" t get_intt strR t _parse_userauth_failuret gss_kex_usedt kexgss_ctxtt set_username( RC R\ Rf R: t blobt sigt sshgsst ptypet mecht srv_tokent
next_tokent
maj_statust
min_statust err_msgt lang_tagt kexgsst mic_token( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt _parse_service_accept� s�
c C s t � } | t k rE | j j t d | � | j t � t | _ nx | j j t d | � | j t � | j
| j j j | � � | t
k r� | j t � n | j t � | j d 7_ | j j | � | j d k r� | j � n | t k r| j j � n d S( Ns Auth granted (%s).s Auth rejected (%s).i i
( R& R R2 Rt R RY R RA R6 R
RZ t
server_objectt get_allowed_authsR Rc R5 R? R[ Ra t
_auth_trigger( RC R4 t methodt resultR\ ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt _send_auth_resultE s"
c C s� t � } | j t � | j | j � | j | j � | j t � � | j t | j � � x3 | j D]( } | j | d � | j
| d � qf W| j j | � d S( Ni i (
R& RY R RZ t namet instructionst bytesR^ t lent promptsRc R2 R[ ( RC t qR\ t p( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt _interactive_query[ s
c C s2 | j j sP t � } | j t � | j d � | j t � | j j | � d S| j r] d S| j
� } | j
� } | j
� } | j j t d | | | f � | d k r� | j
� d S| j d k r� | j | k r� | j j t d � | j � d S| | _ | j j j � } | d k r9| j j j | � } n�| d k r�| j � } | j � } y | j d � } Wn t k
r�n X| r�| j j t d � | j � } y | j d d � } Wn t k
r�n Xt } q| j j j | | � } n$| d k r�| j � }
| j
� } | j � } y | j j | t | � � }
WnU t k
r} | j j t d
t | � � d }
n | j j t d � d }
n X|
d k r�| j � d S| j j j | |
� } | t k r|
s't � } | j t � | j | � | j | � | j j | � d St | j � � } | j! |
| | � } |
j" | | � s| j j t d � t } qqn�| d
k r�| j# � } | j# � } | j j j$ | | � } t% | t& � r| j' | � d Sn:| d k rE| rEt( | � } | j) � } | d k r7| j j t d � | j � n | j# � } | j* | � } | sx| j j t d � | j � n | j+ d � } xCt, r�t � } | j t- � | j. | � | j j | � | j j/ j0 � \ } } | t1 k r�| j# � } y | j2 | j3 | | � } Wn- t4 k
r>t } | j5 | | | � � n X| d k r�t � } | j t6 � | j | � | j j | � q�n t } | j5 | | | � d S| j j/ j0 � \ } } | t7 k r�Pq�q�W| j# � } y | j8 | | j j9 | � Wn- t4 k
r%t } | j5 | | | � � n Xt: } | j j j; | | � n� | d k r| r| j# � } | j j< } | d k r�t } | j5 | | | � n y | j8 | | j j9 | j � Wn- t4 k
r�t } | j5 | | | � � n Xt: } | j j j= | | � n | j j j | � } | j5 | | | � d S( NRH s. Auth request (type=%s) service=%s, username=%ss ssh-connectionsK Auth rejected because the client attempted to change username in mid-flightR: s UTF-8s+ Auth request to change passwords (rejected)t replaceRO s Auth rejected: public key: %ss0 Auth rejected: unsupported or mangled public keys Auth rejected: invalid signatures keyboard-interactives gssapi-with-mici s8 Disconnect: Received more than one GSS-API OID mechanisms5 Disconnect: Received an invalid GSS-API OID mechanismt servers gssapi-keyex(> R2 RF R& RY R
RZ Rc R5 R[ R6 Rr Rt R R` R> R3 R
Ra R� t enable_auth_gssapit check_auth_nonet get_booleant
get_binaryt decodet UnicodeErrorR t check_auth_passwordt _key_infoR( R R� t check_auth_publickeyR Rg t verify_ssh_sigR{ t check_auth_interactivet
isinstanceR, R� R- R t ssh_check_mechRw RA R Rv Rx Ry R t ssh_accept_sec_contextR@ t ExceptionR� R R$ t
ssh_check_micRb R t check_auth_gssapi_with_micR� t check_auth_gssapi_keyex( RC R\ R4 Rf R� t gss_authR� t changereqR: t newpasswordt sig_attachedt keytypet keyblobRP Rp R� R� t langR= R� t mechst desired_mecht mech_okt supported_mechR� t client_tokent tokenR� ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt _parse_userauth_requesth s$
c C sS | j j t d | j � t | _ | j j � | j d k rO | j j � n d S( Ns Authentication (%s) successful!(
R2 Rt R R8 RA R6 R� R7 R3 RW ( RC R\ ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt _parse_userauth_success s
c C s | j � } | j � } | rc | j j t d � | j j t d t | � � t | � | j _ nx | j | k r� | j j t d | j � | j j t d t | � � t
d | � | j _ n | j j t d | j � t | _ d | _ | j d k r | j j � n d S( Ns Authentication continues...s Methods: s' Authentication type (%s) not permitted.s Allowed methods: s Bad authentication types Authentication (%s) failed.( t get_listR� R2 Rt R R R� R+ t saved_exceptionR8 R* R5 R6 R3 R4 R7 RW ( RC R\ t authlistt partial( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyR� $ s c C s< | j � } | | _ | j � } | j j t d | � d S( Ns Auth banner: %s( R{ R9 R2 Rt R ( RC R\ R9 R� ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyRz 6 s c C s� | j d k r t d � � n | j � } | j � } | j � | j � } g } x3 t | � D]% } | j | j � | j � f � q_ W| j | | | � } t � } | j
t � | j t
| � � x | D] } | j | � q� W| j j | � d S( Ns keyboard-interactives Illegal info request from server( R8 R( Rr R� R t ranget appendR� R< R& RY R R^ R� RZ R2 R[ ( RC R\ t titleR� R� t prompt_listt it
response_listt r( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt _parse_userauth_info_request= s
#
c C s� | j j s t d � � n | j � } g } x' t | � D] } | j | j � � q: W| j j j | � } t t
| � t � r� | j | � d S| j
| j d | � d S( Ns! Illegal info response from servers keyboard-interactive( R2 RF R( R R� R� Rr R� t check_auth_interactive_responseR� t typeR, R� R� R> ( RC R\ t nt responsesR� R� ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt _parse_userauth_info_responseP s
(% t __name__t
__module__t __doc__RD RE RG RN RQ RR RT RU RV RX RK R` Ra Rg Rq Rs R� R� R� R� R� R� Rz R� R� R R R R R R R R t _handler_table( ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyR. / sF
f
� (8 R� R0 t paramiko.commonR R R R R R R R R R R
R R R
R R R R R R R R R R R R R R R R R R R R! R" R# R$ R% t paramiko.messageR& t paramiko.py3compatR' t paramiko.ssh_exceptionR( R) R* R+ t paramiko.serverR, t paramiko.ssh_gssR- t objectR. ( ( ( sF /opt/alt/python27/lib/python2.7/site-packages/paramiko/auth_handler.pyt <module> s �"