o j@sdZddlZddlmZddlmZddlmZddl m Z ddl m Z dd l mZmZd d Zdd dZddZddZddZdS) N) ucd_3_2_0)urandom)hexlify)SASL) RESULT_AUTH_METHOD_NOT_SUPPORTED)LDAPSASLPrepErrorLDAPPasswordIsMandatoryErrorcCsxd}|D]}t|r|d7}qt|rq||7}qtd|}|s'td|D]\}t|r4tdt|r=tdt|rFtdt|rOtdt |rXtd t |ratd t |rjtd t |rstd t |r|td t|rtdq)d}d}|D]}t|rd}nt|rd}|r|rtdq|rt|dst|dstd|S)a implement SASLPrep profile as per RFC4013: it defines the "SASLprep" profile of the "stringprep" algorithm [StringPrep]. The profile is designed for use in Simple Authentication and Security Layer ([SASL]) mechanisms, such as [PLAIN], [CRAM-MD5], and [DIGEST-MD5]. It may be applicable where simple user names and passwords are used. This profile is not intended for use in preparing identity strings that are not simple user names (e.g., email addresses, domain names, distinguished names), or where identity or password strings that are not character data, or require different handling (e.g., case folding).  NFKCz*SASLprep error: unable to normalize stringz1SASLprep error: non-ASCII space character presentz/SASLprep error: ASCII control character presentz3SASLprep error: non-ASCII control character presentz)SASLprep error: private character presentz0SASLprep error: non-character code point presentz,SASLprep error: surrogate code point presentz>SASLprep error: inappropriate for plain text character presentzLSASLprep error: inappropriate for canonical representation character presentzGSASLprep error: change display property or deprecated character presentz)SASLprep error: tagging character presentFTzISASLprep error: string cannot contain (R or AL) and L bidirectional charsrzNr_and_al_cat character present, must be first and last character of the string) stringprep in_table_c12 in_table_b1 unicode32 normalizer in_table_c21 in_table_c22 in_table_c3 in_table_c4 in_table_c5 in_table_c6 in_table_c7 in_table_c8 in_table_c9 in_table_d1 in_table_d2)data prepared_datacflag_r_and_al_cat flag_l_catr$/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/ldap3/protocol/sasl/sasl.py sasl_prep$sZ                  r&FcCsB|r|s|S|s tdt|tst|}t|ts|d}|S)zB validate simple password as per RFC4013 using sasl_prep: zsimple password can't be emptyzutf-8)r isinstancebytesr&encode)password accept_emptyr$r$r%validate_simple_password}s   r,cCsjddlm}||jtdddd}||d||}|jjr"|j}n | |dd}|dt kr3dSdS) Nrbind_operationr bindRequestrresultTF) operation.bindr.versionrpost_send_single_responsesendstrategysyncr0 get_responser) connectioncontrolsr.requestresponser0r$r$r%abort_sasl_negotiations r<cCsZddlm}||jtdd|j|}||d||}|jjr$|j }|S| |\}}|S)Nrr-r/) r1r.r2rsasl_mechanismr3r4r5r6r0r7)r8r9payloadr.r:r;r0_r$r$r%send_sasl_negotiations r@cCsttt|dS)Nascii)strrrdecode)sizer$r$r%random_hex_stringsrE)F)__doc__r unicodedatarrosrbinasciirr r core.resultsrcore.exceptionsr r r&r,r<r@rEr$r$r$r%s      Y