File: //usr/lib/python3.9/site-packages/cockpit/__pycache__/remote.cpython-39.opt-1.pyc
a
�/�h�# � @ s� d dl Z d dlZd dlZd dlZd dlmZmZmZmZ d dl m
Z
ddl m Z m
Z
mZmZ ddlmZmZ ddlmZmZ e�e�ZG dd � d e
j�ZG d
d � d e�ZG d d
� d
e�Z dS )� N)�Dict�List�Optional�Tuple)�ferny� )�
JsonObject� JsonValue�get_str�get_str_or_none)�Peer� PeerError)�Router� RoutingRulec @ s� e Zd ZU e�d�Zee ed< e e
eeeeef ed< ee ed< e ed< ee d�dd�Z eeeeee
d �d
d �Zeeeee d �d
d�ZdS )�PasswordResponderz!Enter passphrase for key '(.*)': �password�
hostkeys_seen�
error_message�password_attempts�r c C s || _ g | _d | _d| _d S )Nr )r r r r )�selfr � r �2/usr/lib/python3.9/site-packages/cockpit/remote.py�__init__* s zPasswordResponder.__init__)�reason�host� algorithm�key� fingerprint�returnc � s | j �|||||f� dS )NF)r �append)r r r r r r r r r �
do_hostkey1 s z PasswordResponder.do_hostkey)�messages�prompt�hintr c � s\ t �d||� tj�|�}|d urH|�d�}t �d|� d|� �| _d S | jd7 _| jS )NzGot askpass(%s): %sr zCThis is a passphrase request for %s, but we don't do those. Abort.zlocked identity: ) �logger�debugr �
PASSPHRASE_RE� fullmatch�groupr r r )r r" r# r$ �match�pathr r r �
do_askpass5 s
z PasswordResponder.do_askpassN)�__name__�
__module__� __qualname__�re�compiler' r �str�__annotations__r r �intr �boolr! r, r r r r r ! s
r c s� e Zd ZU dZeej ed< eed< ee ed< ee ed< e ed< dd�dd �Z
d
d
e dd �� fd d
� Z e dd�dd�Z
dd�dd�Zeeee e e dd�� fdd� Z� ZS )�SshPeerN�sessionr �userr �private)r c � s� t �d| j| j| j� | j�d�\}}}|rB|�� rB|}t|�}n
| j}d }t| j �}ddi}| j d urv|j
dd� n|j
ddd� z(| j j || j|| j||d �I d H W �n� t
tjfy� } z0t �d
||� td d t|�d �|�W Y d }~�n�d }~0 tj�y� } z�|j�rD|jd
\} }}
} } |� d|
� d| � �| d�}
ni }
t|tj��r\d}n| j�rjd}nd}t �dt|�|| j|j||
� t||
|i d�|�W Y d }~n�d }~0 tj�y@ } ztt �d||� t�|jd�}d|v �r| j d u�r|j d
k�r d|d< nd|d< td|j �p"d|d�|�W Y d }~nPd }~0 tj �y� } z,t �d||� td t|�d �|�W Y d }~n
d }~0 0 | j � d g�}| � |g �I d H d S ) Nz1Starting ssh session user=%s, host=%s, private=%s�:ZStrictHostKeyCheckingZyes�1)ZNumberOfPasswordPrompts�no)ZPasswordAuthenticationZ KbdInteractiveAuthentication)Z
login_name�portZhandle_host_key�optionsZinteraction_responderz connecting to host %s failed: %szno-host)�error�messager � )zhost-keyzhost-fingerprintzinvalid-hostkeyzunknown-hostkeyz unknown-hostzPSshPeer got a %s %s; private %s, seen hostkeys %r; raising %s with extra args %r)r? Zauth_method_resultsz$authentication to host %s failed: %sz not-providedr z not-triedZdeniedzauthentication-failedz)unknown failure connecting to host %s: %szinternal-error)r@ zcockpit-bridge)!r% r& r8 r r9 �
rpartition�isdigitr4 r r �updater7 Zconnect�OSError�socketZgaierrorr
r2 r ZSshHostKeyErrorr �
isinstanceZSshChangedHostKeyError�typeZSshAuthenticationError�dict�fromkeys�methodsr r ZSshErrorZwrap_subprocess_argsZspawn)r �basename�colonZportstrr r= Z responderr> �excZ_reasonr r r Z
error_argsr? �results�argsr r r �do_connect_transportO sh
�* �&
��(z SshPeer.do_connect_transportz
str | None)r r) r@ r c s0 || j kr| �� n|d u r,t� �|||� d S �N)r �close�super�do_kill)r r r) r@ �� __class__r r rU � s
zSshPeer.do_kill)r@ r c C s: t |d��d�r6t |d�}| jd|| jp*dd� d | _d S )NZ challengezplain1:�cookieZ authorize� )ZcommandrX Zresponse)r
�
startswithZ
write_controlr )r r@ rX r r r � do_authorize� s
zSshPeer.do_authorizec C s
d | _ d S rR r )r r r r �do_superuser_init_done� s z SshPeer.do_superuser_init_done)�routerr r8 r> r9 r c sj t � �|� || _|| _t|dd �| _|| _t�� | _ t
|dd �}|dv rPd}nd|i}| j ||d� d S )Nr zinit-superuser)NZnoneF�id)� init_host� superuser) rT r r r8 r
r r9 r �Sessionr7 r Zstart_in_background)r r] r r8 r> r9 Zinit_superuserr` rV r r r � s
zSshPeer.__init__)r- r. r/ r7 r r ra r3 r2 r5 rQ r rU r[ r\ r r �
__classcell__r r rV r r6 H s
Gr6 c s\ e Zd ZU eeeee ee f ef ed< � fdd�Z e
ee d�dd�Z dd� Z � Z
S ) �HostRoutingRule�remotesc s t � �|� i | _d S rR )rT r rd )r r] rV r r r � s zHostRoutingRule.__init__)r> r c s� t |d�jj�}|�jjkr d S t |dd �}|t�� kr<d }|sX|�d�\}}}|pVd }t |dd �dkrtt |d�}nd }|||f� t�d|� t�d� � � �jvr�t�d � �j� t �j||||d ud
�}|�
� �fd d �� |�j� < �j� S )
Nr r8 �@r7 r9 Zchannelz!Request for channel %s is remote.zkey=%szC%s is not among the existing remotes %s. Opening a new connection.)r9 c s �j �� �S rR )rd � __delitem__r �r r r r �<lambda>� � z,HostRoutingRule.apply_rule.<locals>.<lambda>) r
r] r_ �getpassZgetuserrB r% r& rd r6 Zadd_done_callback)r r> r r8 Zuser_from_host�_Znonce�peerr rg r �
apply_rule� s*
zHostRoutingRule.apply_rulec C s t | j�� �D ] }|�� qd S rR )�setrd �valuesrS )r rl r r r �shutdown� s zHostRoutingRule.shutdown)r- r. r/ r r r2 r r r3 r r rm rp rb r r rV r rc � s
" (rc ) rj Zloggingr0 rF �typingr r r r Zcockpit._vendorr Zjsonutilr r r
r rl r r
r] r r Z getLoggerr- r% ZAskpassHandlerr r6 rc r r r r �<module> s
'p