Current File : //proc/self/root/lib/python2.7/site-packages/paramiko/kex_gss.pyo
�
=OXc @ sr d Z d d l Z d d l m Z d d l Td d l m Z d d l m Z d d l m
Z
m Z m Z m
Z
d d l m Z e d d
� \ Z Z Z Z Z e d d � \ Z Z g e d d
� D] Z e
e � ^ q� \ Z Z Z Z Z g e d d � D] Z e
e � ^ q� \ Z Z d
e f d � � YZ! d e! f d � � YZ" d e f d � � YZ# d e f d � � YZ$ d S( s�
This module provides GSS-API / SSPI Key Exchange as defined in :rfc:`4462`.
.. note:: Credential delegation is not supported in server mode.
.. note::
`RFC 4462 Section 2.2
<https://tools.ietf.org/html/rfc4462.html#section-2.2>`_ says we are not
required to implement GSS-API error messages. Thus, in many methods within
this module, if an error occurs an exception will be thrown and the
connection will be terminated.
.. seealso:: :doc:`/api/ssh_gss`
.. versionadded:: 1.15
i����N( t sha1( t *( t util( t Message( t byte_chrt longt byte_maskt byte_ord( t SSHExceptioni i# i( i* t KexGSSGroup1c B s� e Z d Z d Z d Z e d � e d Z e d Z d Z
d � Z d � Z d � Z
d
� Z d � Z d � Z d
� Z d � Z d � Z RS( s�
GSS-API / SSPI Authenticated Diffie-Hellman Key Exchange as defined in `RFC
4462 Section 2 <https://tools.ietf.org/html/rfc4462.html#section-2>`_
lE ���� 8� {3If?�E y�Z�3�V�58n�oP�e�?a-�
�tBL�
�y3W[�<�p�6m5� �P��&a�F! �33*�w& �AR�M;L}.�c|&A�@�h \�&&# -D�v�d���� i i i i s( gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==c C s@ | | _ | j j | _ d | _ d | _ d | _ d | _ d S( Ni ( t transportt kexgss_ctxtt kexgsst Nonet gss_hostt xt et f( t selfR
( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyt __init__F s c C s� t | j _ | j � | j j rT t | j | j | j � | _ | j j
t � d St | j | j | j � | _ | j j
| _
t � } | j t � | j | j j d | j
� � | j | j � | j j | � | j j
t t t t � d S( sU
Start the GSS-API / SSPI Authenticated Diffie-Hellman Key Exchange.
Nt target( t TrueR
t gss_kex_usedt _generate_xt server_modet powt GR t PR t _expect_packett MSG_KEXGSS_INITR R R t add_bytet c_MSG_KEXGSS_INITt
add_stringR t ssh_init_sec_contextt add_mpintt
_send_messaget MSG_KEXGSS_HOSTKEYt MSG_KEXGSS_CONTINUEt MSG_KEXGSS_COMPLETEt MSG_KEXGSS_ERROR( R t m( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyt start_kexN s"
c C s� | j j r% | t k r% | j | � S| j j rK | t k rK | j | � S| j j rp | t k rp | j | � S| j j r� | t k r� | j | � S| t
k r� | j | � St d | � � d S( s�
Parse the next packet.
:param char ptype: The type of the incomming packet
:param `.Message` m: The paket content
s, GSS KexGroup1 asked to handle packet type %dN(
R
R R t _parse_kexgss_initR$ t _parse_kexgss_hostkeyR% t _parse_kexgss_continueR& t _parse_kexgss_completeR' t _parse_kexgss_errorR ( R t ptypeR( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyt
parse_nextg s
c C sp xW t j d � } t | d d � | d } | d | j k r | d | j k r Pq q t j | � | _ d S( sp
generate an "x" (1 < x < q), where q is (p-1)/2.
p is a 128-byte (1024-bit) number, where the first 64 bits are 1.
therefore q can be approximated as a 2^1023. we drop the subset of
potential x where the first 63 bits are 1, because some of those will be
larger than q (but this is a tiny tiny subset of potential x).
i� i i i i N( t ost urandomR t b7ffffffffffffffft b0000000000000000R t inflate_longR ( R t x_bytes( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR } s c C sN | j � } | | j _ | j � } | j j | | � | j j t t � d S( s�
Parse the SSH2_MSG_KEXGSS_HOSTKEY message (client mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_HOSTKEY message
N( t
get_stringR
t host_keyt _verify_keyR R% R& ( R R( R8 t sig( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR+ � s c C s� | j j s| | j � } t � } | j t � | j | j j d | j d | � � | j j
| � | j j t t
t � n d S( s�
Parse the SSH2_MSG_KEXGSS_CONTINUE message.
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_CONTINUE message
R t
recv_tokenN( R
R R7 R R t c_MSG_KEXGSS_CONTINUER R R! R t send_messageR R% R& R' ( R R( t srv_token( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR, � s
c C s� | j j d k r$ t � | j _ n | j � | _ | j d k sX | j | j d k rg t d � � n | j � } | j � } d } | r� | j � } n t
| j | j | j � } t � } | j
| j j | j j | j j | j j � | j | j j j � � | j | j � | j | j � | j | � | j j | t t | � � j � � | d k r�| j j d | j d | � | j j | | j j � n | j j | | j j � | j j � d S( s�
Parse the SSH2_MSG_KEXGSS_COMPLETE message (client mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_COMPLETE message
i s Server kex "f" is out of rangeR R; N( R
R8 R
t NullHostKeyt get_mpintR R R R7 t get_booleanR R R t addt
local_versiont remote_versiont local_kex_initt remote_kex_initR t __str__R" R t _set_K_HR t strt digestR R! R t
ssh_check_mict
session_idt _activate_outbound( R R( t mic_tokent boolR> t Kt hm( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR- � s6 %
%
c C s6 | j � } | j � | _ | j d k s@ | j | j d k rO t d � � n t | j | j | j � } t � | j _ | j j j
� } t � } | j | j j
| j j | j j | j j � | j | � | j | j � | j | j � | j | � t | j � � j � } | j j | | � | j j | j | � } t � } | j j r�| j j | j j d t �} | j t � | j | j � | j | � | d k r�| j" t � | j | � n
| j" t# � | j j$ | � | j j% � n@ | j t& � | j | � | j j$ | � | j j' t( t) t* � d S( s�
Parse the SSH2_MSG_KEXGSS_INIT message (server mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_INIT message
i s Client kex "e" is out of ranget gss_kexN(+ R7 R@ R R R R R R? R
R8 RG R RB RD RC RF RE R R" R R t asbytesRJ RH R t ssh_accept_sec_contextR t _gss_srv_ctxt_statust ssh_get_micRL R R t c_MSG_KEXGSS_COMPLETER
t add_booleant FalseR# RM R< R R% R& R' ( R R( t client_tokenRP t keyRQ t HR> RN ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR* � sJ %
c C sY | j � } | j � } | j � } | j � } t d � t | � t | � | f � d S( s�
Parse the SSH2_MSG_KEXGSS_ERROR message (client mode).
The server may send a GSS-API error message. if it does, we display
the error by throwing an exception (client mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_ERROR message
:raise SSHException: Contains GSS-API major and minor status as well as
the error message and the language tag of the
message
s_ GSS-API Error:
Major Status: %s
Minor Status: %s
Error Message: %s
N( t get_intR7 R RI ( R R( t
maj_statust
min_statust err_msgt lang_tag( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR. s ( t __name__t
__module__t __doc__R R R t max_byteR3 t zero_byteR4 t NAMER R) R0 R R+ R, R- R* R. ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR : s
& 0t
KexGSSGroup14c B s e Z d Z d Z d Z d Z RS( s�
GSS-API / SSPI Authenticated Diffie-Hellman Group14 Key Exchange as defined
in `RFC 4462 Section 2
<https://tools.ietf.org/html/rfc4462.html#section-2>`_
l� �����&�U�G9
tcb0]Q\-�:�$�90.`U�_�b;YS7x]Ek � `:xds�! ,w<G�8�qbd R _ ��h��d�d��Y6K�pRT{�U�j�K�#�Gt|�L� ��4�S�8� �FYpw,(.> �=�H�G2C�d�c_�.K?&j�_�c�}�z[\V�_1M.D�^� /1v5 I �j�V&|�
�/�mV�lR�<6#�{n4�(EY91�T�:�g8 H �Ap�cb4B�B�j~H����� i s) gss-group14-sha1-toWM5Slw5Ew8Mqkay+al2g==( Rb Rc Rd R R Rg ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRh s t KexGSSGexc B s� e Z d Z d Z d Z d Z d Z d � Z d � Z d � Z d � Z
d � Z d
� Z d � Z
d � Z d
� Z d � Z d � Z RS( s�
GSS-API / SSPI Authenticated Diffie-Hellman Group Exchange as defined in
`RFC 4462 Section 2 <https://tools.ietf.org/html/rfc4462.html#section-2>`_
s% gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==i i i c C sd | | _ | j j | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _
t | _ d S( N(
R
R R R
R t pt qt gR R R RY t old_style( R R
( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR . s c C s� t | j _ | j j r, | j j t � d S| j j | _ t � } | j t � | j
| j � | j
| j � | j
| j
� | j j | � | j j t � d S( sV
Start the GSS-API / SSPI Authenticated Diffie-Hellman Group Exchange
N( R R
R R R t MSG_KEXGSS_GROUPREQR R R t c_MSG_KEXGSS_GROUPREQt add_intt min_bitst preferred_bitst max_bitsR# t MSG_KEXGSS_GROUP( R R( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR) : s
c C s� | t k r | j | � S| t k r2 | j | � S| t k rK | j | � S| t k rd | j | � S| t k r} | j | � S| t
k r� | j | � S| t k r� | j
| � St d | � � d S( s�
Parse the next packet.
:param char ptype: The type of the incomming packet
:param `.Message` m: The paket content
s% KexGex asked to handle packet type %dN( Rn t _parse_kexgss_groupreqRt t _parse_kexgss_groupR t _parse_kexgss_gex_initR$ R+ R% R, R& R- R' R. R ( R R/ R( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR0 N s
c C s� | j d d } t j | d � } t | d � } t | � } d } x" | d @si | d K} | d L} qH Wxb t r� t j | � } t | d | � | d } t j | d � } | d k rm | | k rm Pqm qm W| | _
d S( Ni i i i� i� ( Rj R t deflate_longR t lenR R1 R2 R R5 R ( R Rk t qnormt qhbytet
byte_countt qmaskR6 R ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR g s
c C sd | j � } | j � } | j � } | | j k r? | j } n | | j k rZ | j } n | | k ro | } n | | k r� | } n | | _ | | _ | | _ | j j � } | d k r� t d � � n | j j t d | | | f � | j
| | | � \ | _ | _ t
� } | j t � | j | j � | j | j � | j j | � | j j t � d S( s�
Parse the SSH2_MSG_KEXGSS_GROUPREQ message (server mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_GROUPREQ message
s- Can't do server-side gex with no modulus packs Picking p (%d <= %d <= %d bits)N( R] Rs Rq Rr R
t _get_modulus_packR
R t _logt DEBUGt get_modulusRl Rj R R t c_MSG_KEXGSS_GROUPR" R# R R ( R R( t minbitst
preferredbitst maxbitst pack( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRu y s2 !
c C s | j � | _ | j � | _ t j | j � } | d k sH | d k r[ t d | � � n | j j t d | � | j � t
| j | j | j � | _ t
� } | j t � | j | j j d | j � � | j | j � | j j | � | j j t t t t � d S( s�
Parse the SSH2_MSG_KEXGSS_GROUP message (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_GROUP message
i i s< Server-generated gex p (don't ask) is out of range (%d bits)s Got server p (%d bits)R N( R@ Rj Rl R t
bit_lengthR R
R R� R R R R R R R R R R! R R" R# R R$ R% R& R' ( R R( t bitlen( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRv � s"
c C s� | j � } | j � | _ | j d k s@ | j | j d k rO t d � � n | j � t | j | j | j � | _ t | j | j | j � } t
� | j _ | j j j
� } t � } | j | j j | j j | j j | j j | � | j | j � | j | j � | j | j � | j | j � | j | j � | j | j � | j | j � | j | � t | j � � j � } | j j | | � | j j | j | � } t � } | j j r`| j j! | j j" d t# �} | j$ t% � | j | j � | j& | � | d k r3| j( t# � | j& | � n
| j( t) � | j j* | � | j j+ � n@ | j$ t, � | j& | � | j j* | � | j j- t. t/ t0 � d S( s�
Parse the SSH2_MSG_KEXGSS_INIT message (server mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_INIT message
i s Client kex "e" is out of rangeRR N(1 R7 R@ R Rj R R R Rl R R R? R
R8 RG R RB RD RC RF RE Rp Rq Rr Rs R" R RS RJ RH R RT R RU RV RL R R RW R R
RX RY R# RM R< R R% R& R' ( R R( RZ RP R[ RQ R\ R> RN ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRw � sX %
c C sN | j � } | | j _ | j � } | j j | | � | j j t t � d S( s�
Parse the SSH2_MSG_KEXGSS_HOSTKEY message (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_HOSTKEY message
N( R7 R
R8 R9 R R% R& ( R R( R8 R: ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR+ � s c C s� | j j s| | j � } t � } | j t � | j | j j d | j d | � � | j j
| � | j j t t
t � n d S( s�
Parse the SSH2_MSG_KEXGSS_CONTINUE message.
:param `Message` m: The content of the SSH2_MSG_KEXGSS_CONTINUE message
R R; N( R
R R7 R R R< R R R! R R= R R% R& R' ( R R( R> ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR, � s
c C s) | j j d k r$ t � | j _ n | j � | _ | j � } | j � } d } | rf | j � } n | j d k s� | j | j d k r� t d � � n t
| j | j | j � } t � } | j
| j j | j j | j j | j j | j j j � � | j s| j | j � n | j | j � | j sC| j | j � n | j | j � | j | j � | j | j � | j | j � | j | � t | j � � j � } | j j | | � | d k r�| j j d | j! d | � | j j" | | j j# � n | j j" | | j j# � | j j$ � d S( s�
Parse the SSH2_MSG_KEXGSS_COMPLETE message (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_COMPLETE message
i s Server kex "f" is out of rangeR R; N(% R
R8 R
R? R@ R R7 RA Rj R R R R RB RC RD RE RF RG Rm Rp Rq Rr Rs R" Rl R R RS RJ RH R R! R RK RL RM ( R R( RN RO R> RP RQ R\ ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR- sF %
c C sY | j � } | j � } | j � } | j � } t d � t | � t | � | f � d S( s�
Parse the SSH2_MSG_KEXGSS_ERROR message (client mode).
The server may send a GSS-API error message. if it does, we display
the error by throwing an exception (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_ERROR message
:raise SSHException: Contains GSS-API major and minor status as well as
the error message and the language tag of the
message
s_ GSS-API Error:
Major Status: %s
Minor Status: %s
Error Message: %s
N( R] R7 R RI ( R R( R^ R_ R` Ra ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR. = s ( Rb Rc Rd Rg Rq Rs Rr R R) R0 R Ru Rv Rw R+ R, R- R. ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRi $ s & 6 -R? c B s) e Z d Z d � Z d � Z d � Z RS( s�
This class represents the Null Host Key for GSS-API Key Exchange as defined
in `RFC 4462 Section 5
<https://tools.ietf.org/html/rfc4462.html#section-5>`_
c C s
d | _ d S( Nt ( R[ ( R ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR X s c C s | j S( N( R[ ( R ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRG [ s c C s | j S( N( R[ ( R ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyt get_name^ s ( Rb Rc Rd R RG R� ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR? R s (% Rd R1 t hashlibR t paramiko.commont paramikoR t paramiko.messageR t paramiko.py3compatR R R R t paramiko.ssh_exceptionR t rangeR R% R& R$ R' Rn Rt t cR R< RW t c_MSG_KEXGSS_HOSTKEYt c_MSG_KEXGSS_ERRORRo R� t objectR Rh Ri R? ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyt <module>& s
" 7.� � /
Mini Shell