o j@3@sddlZddlZddlZddlmZmZmZddlmZm Z m Z ddl m Z m Z mZddlmZmZmZGdddZddlmZdd lmZdd lmZdd lmZdd lmZgd ZdS)N)urlparseparse_qsunquote)str_oneint_onebool_one) asyauthSecretasyauthProtocolasyauthSubProtocol) SubProtocolSubProtocolNativeSubProtocolSSPIc @seZdZdddejdefdedededededef dd Z d!d d Z e d d Z e ddZ ddZe ddZe ddZe defddZe defddZe defddZe d"dededefdd ZdS)# UniCredentialNsecretusernamedomainstypeprotocol subprotocolc Ks||_||_||_||_||_||_||_|tjtj fvr#tj |_dS|tj kr7tj |_t |j|_dS|tjkratj |_t|j|_t|jddkrYt|jdkrYdS|j|_dS|tjkrvddl}tj |_|d|_dSdS)Nr2zEnter password: )rrrrrrmetadatarPASSPWPASSWORDPWB64base64 b64decodedecodePWHEXbytesfromhexlenPWPROMPTgetpass) selfrrrrrrkwargsr$r'/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/asyauth/common/credentials/__init__.py__init__ s.     zUniCredential.__init__c Ks|dur|j}|tjkr4|jjtjkr-ddlm}||j |j |j |j fd|ji| Std|j|tjkrb|jjtjkr[ddlm}||j |j |j |j f|j|d| Std|j|tjkr|jjtjkrddlm}||j d d|i|g|jd  Std|j|tjkr|jjtjkrdd lm}||j d d|i|g|jd  Std|j|tjkr|jjtjkrdd lm}||j d d|i|g|jd  Std|jt|S) NrNTLMCredentialrzUnsupported subprotocol "%s"KerberosCredential)rtargetSPNEGOCredentialr.)rSPNEGOEXCredentialCREDSSPCredentialr')rr NTLMrtyper NATIVEasyauth.common.credentials.ntlmr+rrrr build_context ExceptionKERBEROS#asyauth.common.credentials.kerberosr-SPNEGO!asyauth.common.credentials.spnegor0SPNEGOEX#asyauth.common.credentials.spnegoexr2CREDSSP"asyauth.common.credentials.credsspr4copydeepcopy) r%rr.r&r+r-r0r2r4r'r'r(r9'sP  (    $  $  $ zUniCredential.build_contextcCsttttttdS)N)timeoutdnsdnscdcdccrealmc)rrr'r'r'r(get_url_paramsYszUniCredential.get_url_paramsc Csddlm}m}d}d}d}tj}tj}t}t|} | } | D]\} } t | t ur3t | | | <q#| j di| } | jd} t| dkrVzt| }WnnYni| ddd}zt|}WnZ| dd}t|dkrzt|d}Wnt|d}t|d}Yn/t|d}d}| jdurt| j}t||}nz t|d}tj}Wn t|d}YY| jdur| jddkr| jd\}}|d krd}nd}| j}| j}d}|tjkrdd lm}|}n|tjtjfvrdd l m!}|}i}|dur|"}t#"}t$%t#"d}t$%|&d}d }| jdur^t| j}|D]+}|'d dur>d}||vrM||||||<||vr\||||||<q2|tjtjfvr|||||fd|i|}|tjkr~tj|_(|S|tjkrd}|durddl)m*}|j| j| j+dd}d}|ddur||dd|j,||d|dd}d}|ddur||dd|j,||d|dd}|d}|||||||d|d|d|d||||dd St#||||||S) Nr UniTargetUniProto+-_\.r,r*FproxyTr)UniProxyTargetX) endpoint_portrHrF)proxiesrFdc_iprIrGetypealtname altdomaincertdatakeydatarJ) r.r]r^r_r`etypesr cross_target cross_realmr')-asysocks.unicomm.common.targetrMrNrNONEr r r_asdictitemsr6strr_replaceschemeuppersplitr"replacer queryrr from_url_paramsr5rfindpasswordr;r<r-SICILYr8r+rKrdictfromkeyskeys startswithrasysocks.unicomm.common.proxyrWhostname CLIENT_TCP) connection_urlrMrNrrrrrrurl_eurl_dictpropvalschemes auth_tagssptrncredobjr-r+ extraparamsparamstemplateparamsextra proxy_presentkresrZrWr.rbrar'r'r(from_urlds                         ""zUniCredential.from_urlcCs^ddl}d}|jD]#}|j|}t||jr|}n t||jr"|j}|d|t|f7}q |S)Nrz==== UniCredential ==== z%s: %s )enum__dict__ isinstanceIntFlagEnumnamerh)r%rtrr~r'r'r(__str__s    zUniCredential.__str__cCsPtdkr tdddlm}ddlm}|}|d|d|dtjt d S) zJReturns an NTLM credential object matching the current user (Windows only)Windows,This function only works on Windows systems!rget_logon_infor*Nrr)rr) platformsystemr:winacl.functions.highlevelrr8r+rrer )rr+userinfor'r'r( get_sspi_ntlms   zUniCredential.get_sspi_ntlmcCstdkr tdddlm}ddlm}ddlm}m }|}||dd|j |d|d d }|d |d |d t j |t d S)zMReturns a Kerberos credential object matching the current user (Windows only)rrrrr,rL logonserverrX dnsdomainname)r[rNr)rr.r)rrr:rrr<r-rdrMrNryrrer )rr-rMrNrdctargetr'r'r(get_sspi_kerberos s*   zUniCredential.get_sspi_kerberosauthtypecCsLtdkr td|dkrt}|S|dkr"t}|Std)Nrrr5r;z0Only NTLM or KERBEROS auth types supported here!)rrr:rkrrr)rrr'r'r(get_sspi&s   zUniCredential.get_sspicC4tdkr tdddlm}t|}||gS)zKReturns a SPNEGO credential object matching the current user (Windows only)rrrr/)rrr:r>r0rr)rr0rr'r'r(get_sspi_spnego2    zUniCredential.get_sspi_spnegocCr)zLReturns a CREDSSP credential object matching the current user (Windows only)rrrr3)rrr:rBr4rr)rr4rr'r'r(r;r authprotosrcCsd}||||fS)z5Returns user help regarding the credential url formata URL format: protocol+authproto-secrettype://[domain]\username:secret@[ip|hostname]:[port]/?param1=value1¶m2=value2 protocol: The protocol to use (see below) %s authproto (protocol dependent): %s username: The username to authenticate with secret: The secret to authenticate with (depends on secrettype) domain: The domain of the user secrettype: The type of the secret (see below) password/pw/pass: A plaintext password pwb64: A base64 encoded password pwprompt: Password will be prompted for on STDIN pwhex: A hex encoded password nt: NT hash ==== Kerberos only ==== rc4: RC4 key (Kerberos only) aes: AES key (any size, Kerberos only) aes128: AES128 key (Kerberos only) aes256: AES256 key (Kerberos only) ccache: ccache file name (only local directory) ccachehex: A hex encoded ccache file ccacheb64: A base64 encoded ccache file keytab: keytab file name (only local directory) keytabhex: A hex encoded keytab file keytabb64: A base64 encoded keytab file pfx: pfx file name (only local directory) pfxhex: A hex encoded pfx file pfxb64: A base64 encoded pfx file pem: pem file name (only local directory) pemhex: A hex encoded pem file pemb64: A base64 encoded pem file certstore: Use Windows certificate store (Windows only, Kerberos only) kirbi: kirbi file name (only local directory) kirbihex: A hex encoded kirbi file kirbib64: A base64 encoded kirbi file ==== SSH Only ==== sshprivkey: ssh private key file name (only local directory) sshprivkeystr: ssh private key file data in string format sshprivkeyb64: A base64 encoded ssh private key file Extra parameters are in the form of param=value. The following parameters are supported: altname: Alternative name for certificate authentication altdomain: Alternative domain for certificate authentication etype: Supported encryption type to use (Kerberos only) dc: The domain controller to use (Kerberos only) dns: Don't use this. %s r')rrrtemplater'r'r(get_helpDs4zUniCredential.get_help)NN)rrr)__name__ __module__ __qualname__rrer rhr r r)r9 staticmethodrKrrrrrrrr'r'r'r(r s*4 2      rr3r,r*r/r1)r4r-r+r0r2)rrrC urllib.parserrrasyauth.utils.paramprocessorrrrasyauth.common.constantsrr r asyauth.common.subprotocolsr r r rrBr4r<r-r8r+r>r0r@r2__all__r'r'r'r(s  y