File: //lib64/python3.6/site-packages/gssapi/__pycache__/creds.cpython-36.pyc
3
�O[�@ � @ sj d dl mZ d dl mZ d dlmZmZ d dlm Z ed�Z
ed�Z ed�Z ed�Z
G d d
� d
ej�Zd S ) � )�creds)� named_tuples)�import_gssapi_extension� _encode_dict)�namesZ cred_imp_expZs4uZ
cred_storeZrfc5588c s� e Zd ZdZf Zd!� fdd� Zedd� �Zedd � �Zed
d � �Z ed d
� �Z
e d"dd��Z d#dd�Z
d$dd�Zd%dd�Zd&dd�Zd'dd �Zd d � Zd d � Z� ZS )(� Credentialsa< GSSAPI Credentials
This class represents a set of GSSAPI credentials which may
be used with and/or returned by other GSSAPI methods.
It inherits from the low-level GSSAPI :class:`~gssapi.raw.creds.Creds`
class, and thus may used with both low-level and high-level API methods.
If your implementation of GSSAPI supports the credentials import-export
extension, you may pickle and unpickle this object.
The constructor either acquires or imports a set of GSSAPI
credentials.
If the `base` argument is used, an existing
:class:`~gssapi.raw.creds.Cred` object from the low-level API is
converted into a high-level object.
If the `token` argument is used, the credentials
are imported using the token, if the credentials import-export
extension is supported (:requires-ext:`cred_imp_exp`).
Otherwise, the credentials are acquired as per the
:meth:`acquire` method.
Raises:
BadMechanismError
BadNameTypeError
BadNameError
ExpiredCredentialsError
MissingCredentialsError
N�bothc
s^ |d k r|}n>|d k r2t d kr&td��t j|�}n| j|||||d�} | j}tt| �j| |�S )NzWYour GSSAPI implementation does not have support for importing and exporting creditials)�store)�
rcred_imp_exp�NotImplementedErrorZ import_cred�acquirer �superr �__new__)
�cls�base�token�name�lifetime�mechs�usager Z
base_creds�res)� __class__� � /usr/lib64/python3.6/creds.pyr 1 s zCredentials.__new__c C s | j ddddd�jS )z.Get the name associated with these credentialsTF)r r r r )�inquirer )�selfr r r r E s zCredentials.namec C s | j ddddd�jS )z/Get the remaining lifetime of these credentialsFT)r r r r )r r )r r r r r K s zCredentials.lifetimec C s | j ddddd�jS )z(Get the mechanisms for these credentialsFT)r r r r )r r )r r r r r Q s zCredentials.mechsc C s | j ddddd�jS )z>Get the usage (initiate, accept, or both) of these credentialsFT)r r r r )r r )r r r r r W s zCredentials.usagec C s^ |dkrt j||||�}n*tdkr*td��t|�}tj|||||�}tj| |jd�|j |j
�S )a Acquire GSSAPI credentials
This method acquires credentials. If the `store` argument is
used, the credentials will be acquired from the given
credential store (if supported). Otherwise, the credentials are
acquired from the default store.
The credential store information is a dictionary containing
mechanisms-specific keys and values pointing to a credential store
or stores.
Using a non-default store requires support for the credentials store
extension.
Args:
name (Name): the name associated with the credentials,
or None for the default name
lifetime (int): the desired lifetime of the credentials, or None
for indefinite
mechs (list): the desired :class:`MechType` OIDs to be used
with the credentials, or None for the default set
usage (str): the usage for the credentials -- either 'both',
'initiate', or 'accept'
store (dict): the credential store information pointing to the
credential store from which to acquire the credentials,
or None for the default store (:requires-ext:`cred_store`)
Returns:
AcquireCredResult: the acquired credentials and information about
them
Raises:
BadMechanismError
BadNameTypeError
BadNameError
ExpiredCredentialsError
MissingCredentialsError
NzSYour GSSAPI implementation does not have support for manipulating credential stores)r ) �rcredsZ acquire_cred�rcred_cred_storer r Zacquire_cred_from�tuplesZAcquireCredResultr r r )r r r r r r r r r r r ] s *
zCredentials.acquireFc C sZ |dkr*t dkrtd��t j| ||||�S tdkr:td��t|�}tj|| ||||�S dS )a� Store these credentials into the given store
This method stores the current credentials into the specified
credentials store. If the default store is used, support for
:rfc:`5588` is required. Otherwise, support for the credentials
store extension is required.
:requires-ext:`rfc5588` or :requires-ext:`cred_store`
Args:
store (dict): the store into which to store the credentials,
or None for the default store.
usage (str): the usage to store the credentials with -- either
'both', 'initiate', or 'accept'
mech (OID): the :class:`MechType` to associate with the
stored credentials
overwrite (bool): whether or not to overwrite existing credentials
stored with the same name, etc
set_default (bool): whether or not to set these credentials as
the default credentials for the given store.
Returns:
StoreCredResult: the results of the credential storing operation
Raises:
GSSError
ExpiredCredentialsError
MissingCredentialsError
OperationUnavailableError
DuplicateCredentialsElementError
Nz=Your GSSAPI implementation does not have support for RFC 5588z\Your GSSAPI implementation does not have support for manipulating credential stores directly)�
rcred_rfc5588r Z
store_credr r Zstore_cred_into)r r r �mechZ overwriteZ set_defaultr r r r � s "
zCredentials.store�initiatec C s2 t dkrtd��t j| ||||�}t| �|jd�S )a� Impersonate a name using the current credentials
This method acquires credentials by impersonating another
name using the current credentials.
:requires-ext:`s4u`
Args:
name (Name): the name to impersonate
lifetime (int): the desired lifetime of the new credentials,
or None for indefinite
mechs (list): the desired :class:`MechType` OIDs for the new
credentials
usage (str): the desired usage for the new credentials -- either
'both', 'initiate', or 'accept'. Note that some mechanisms
may only support 'initiate'.
Returns:
Credentials: the new credentials impersonating the given name
Nz8Your GSSAPI implementation does not have support for S4U)r )� rcred_s4ur Z acquire_cred_impersonate_name�typer )r r r r r r r r r � impersonate� s zCredentials.impersonateTc C sD t j| ||||�}|jdk r*tj|j�}nd}tj||j|j|j �S )a� Inspect these credentials for information
This method inspects these credentials for information about them.
Args:
name (bool): get the name associated with the credentials
lifetime (bool): get the remaining lifetime for the credentials
usage (bool): get the usage for the credentials
mechs (bool): get the mechanisms associated with the credentials
Returns:
InquireCredResult: the information about the credentials,
with None used when the corresponding argument was False
Raises:
MissingCredentialsError
InvalidCredentialsError
ExpiredCredentialsError
N)
r Z inquire_credr r �Namer ZInquireCredResultr r r )r r r r r r �res_namer r r r � s
zCredentials.inquirec C sF t j| |||||�}|jdk r,tj|j�}nd}tj||j|j|j �S )a� Inspect these credentials for per-mechanism information
This method inspects these credentials for per-mechanism information
about them.
Args:
mech (OID): the mechanism for which to retrive the information
name (bool): get the name associated with the credentials
init_lifetime (bool): get the remaining initiate lifetime for
the credentials
accept_lifetime (bool): get the remaining accept lifetime for
the credentials
usage (bool): get the usage for the credentials
Returns:
InquireCredByMechResult: the information about the credentials,
with None used when the corresponding argument was False
N)
r Zinquire_cred_by_mechr r r% r ZInquireCredByMechResult�
init_lifetime�accept_lifetimer )r r r r' r( r r r& r r r �inquire_by_mech
s
zCredentials.inquire_by_mechc C s� |dk r|dk rt d��|dk rPtdkr0td��t|�}tj|| |||||�}nD|dk r�tdkrhtd��tj| ||||||�}ntj| |||||�}t |j
�S )a Acquire more credentials to add to the current set
This method works like :meth:`acquire`, except that it adds the
acquired credentials for a single mechanism to a copy of the current
set, instead of creating a new set for multiple mechanisms.
Unlike :meth:`acquire`, you cannot pass None desired name or
mechanism.
If the `impersonator` argument is used, the credentials will
impersonate the given name using the impersonator credentials
(:requires-ext:`s4u`).
If the `store` argument is used, the credentials will be acquired
from the given credential store (:requires-ext:`cred_store`).
Otherwise, the credentials are acquired from the default store.
The credential store information is a dictionary containing
mechanisms-specific keys and values pointing to a credential store
or stores.
Note that the `store` argument is not compatible with the
`impersonator` argument.
Args:
name (Name): the name associated with the
credentials
mech (OID): the desired :class:`MechType` to be used with the
credentials
usage (str): the usage for the credentials -- either 'both',
'initiate', or 'accept'
init_lifetime (int): the desired initiate lifetime of the
credentials, or None for indefinite
accept_lifetime (int): the desired accept lifetime of the
credentials, or None for indefinite
impersonator (Credentials): the credentials to use to impersonate
the given name, or None to not acquire normally
(:requires-ext:`s4u`)
store (dict): the credential store information pointing to the
credential store from which to acquire the credentials,
or None for the default store (:requires-ext:`cred_store`)
Returns:
Credentials: the credentials set containing the current credentials
and the newly acquired ones.
Raises:
BadMechanismError
BadNameTypeError
BadNameError
DuplicateCredentialsElementError
ExpiredCredentialsError
MissingCredentialsError
NzMYou cannot use both the `impersonator` and `store` arguments at the same timezSYour GSSAPI implementation does not have support for manipulating credential storesz8Your GSSAPI implementation does not have support for S4U) �
ValueErrorr r r Z
add_cred_fromr" Zadd_cred_impersonate_namer Zadd_credr r ) r r r r r' r( Z impersonatorr r r r r �add/ s& 9 zCredentials.addc C s t dkrtd��t j| �S )ay Export these credentials into a token
This method exports the current credentials to a token that can
then be imported by passing the `token` argument to the constructor.
This is often used to pass credentials between processes.
:requires-ext:`cred_imp_exp`
Returns:
bytes: the exported credentials in token form
NzWYour GSSAPI implementation does not have support for importing and exporting creditials)r
r Z export_cred)r r r r �export� s zCredentials.exportc C s t | �d | j� ffS )N)r# r, )r r r r �
__reduce__� s zCredentials.__reduce__)NNNNNr N)NNNr N)Nr NFF)NNNr! )TTTT)TTTT)r NNNN)�__name__�
__module__� __qualname__�__doc__� __slots__r �propertyr r r r � classmethodr r r$ r r) r+ r, r- �
__classcell__r r )r r r
s. :
3
!
Sr N)Z
gssapi.rawr r r r Z
gssapi._utilsr r Zgssapir r
r" r r ZCredsr r r r r �<module> s