File: //usr/lib/python3.6/site-packages/ipalib/__pycache__/rpc.cpython-36.pyc
3
�d[e � � @ sz d Z ddlmZ ddlmZ ddlZddlZddlZddlZddl Z ddl
Z
ddl Z ddl Z ddl
Z
ddlZddlmZ ddlmZ ddlZddlmZ ddlZddlmZ dd lmZ dd
l m Z m Z m Z m Z m!Z! dd l"m#Z#m$Z$ dd l%m&Z&m'Z' dd
l(m)Z* ddl+m,Z, ddl+m-Z- ddl.m/Z/ ddl0m1Z1m2Z2 ddl3m4Z4 ddl5m6Z6 ddl7m8Z8m9Z9m:Z:m;Z;m<Z<m=Z=m>Z>m?Z? ddl@mAZA ddlBmCZC ddlDmEZE ddl"mFZF y4ddlGmHZHmIZImJZJmKZKmLZLmMZMmNZNmOZOmPZPmQZQ W nF eRk
�r ddlSmHZHmIZImJZJmKZKmLZLmMZMmNZNmOZOmPZPmQZQ Y nX ejT�r6ddlUmVZV n ddlWmXZV ejT�rNeYZZej[e\�Z]d Z^d Z_d d � Z`d d!� Zad"d#� Zbd$d%� ZcdLd'd(�ZddMd*d+�ZeG d,d-� d-ef�ZgdNd.d/�Zhejiejfd0d1�Zkd2d3� ZldOd4d5�ZmdPd6d7�ZnG d8d9� d9�ZoG d:d;� d;eN�ZpG d<d=� d=ep�ZqG d>d?� d?eq�ZrG d@dA� dAer�ZsG dBdC� dCes�ZtG dDdE� dEe�ZuG dFdG� dGeu�ZvG dHdI� dI�ZwG dJdK� dKeu�ZxdS )Qa`
RPC client and shared RPC client/server functionality.
This module adds some additional functionality on top of the ``xmlrpc.client``
module in the Python standard library (``xmlrpclib`` in Python 2).
For documentation on the ``xmlrpclib`` module, see:
http://docs.python.org/2/library/xmlrpclib.html
Also see the `ipaserver.rpcserver` module.
� )�absolute_import)�DecimalN)�SSLError)�x509)� DNSException)� Connectible)� LDAP_GENERALIZED_TIME_FORMAT)�errors_by_code� UnknownError� NetworkError�XMLRPCMarshallError� JSONError)�errors� capabilities)�context�
Connection)�Encoding)�ipautil)�session_storage)�Cookie)�DNSName� query_srv)�_)�create_https_connection)� KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN�KRB5KRB_AP_ERR_TKT_EXPIRED�
KRB5_FCC_PERM�KRB5_FCC_NOFILE�KRB5_CC_FORMAT�KRB5_REALM_CANT_RESOLVE�KRB5_CC_NOTFOUND�
get_principal)�DN)� Principal)� VERSION_WITHOUT_CAPABILITIES)�api)
�Binary�Fault�DateTime�dumps�loads� ServerProxy� Transport�
ProtocolError�MININT�MAXINT)�RemoteDisconnected)�
BadStatusLineZ ipa_sessionzX-IPA-Session-Cookiec C sF yt j| t|� W n. tk
r@ } ztt|���W Y dd}~X nX dS )z�
Given a principal create or update the session data for that
principal in the persistent secure storage.
Raises ValueError if unable to perform the action for any reason.
N)r Z
store_data�CCACHE_COOKIE_KEY� Exception�
ValueError�str)� principal�data�e� r9 �/usr/lib/python3.6/rpc.py�%update_persistent_client_session_datad s r; c C s@ y t j| t�S tk
r: } ztt|���W Y dd}~X nX dS )z�
Given a principal return the stored session data for that
principal from the persistent secure storage.
Raises ValueError if unable to perform the action for any reason.
N)r �get_datar2 r3 r4 r5 )r6 r8 r9 r9 r: �#read_persistent_client_session_dataq s r= c C sD yt j| t� W n. tk
r> } ztt|���W Y dd}~X nX dS )z�
Given a principal remove the session data for that
principal from the persistent secure storage.
Raises ValueError if unable to perform the action for any reason.
N)r Z remove_datar2 r3 r4 r5 )r6 r8 r9 r9 r: �%delete_persistent_client_session_data~ s r> c s~ t | �ttfkr&t� fdd�| D ��S t| t�rJt� fdd�| j� D ��S t | �tkr^t| �S t | �tkrrt | �S t| t
�r�| t k s�| t kr�t | �S t| t
�r�t| �S t| tj�r�tj� d�r�t| �S | jt�S t| t�r�tj� d�r�dt | �iS t | �S t| t��rt | �S t| tj��r4tj| jt j ��j d�S t| tj ��rZtj| jt j ��j d�S t | �t t t
t!t d�fk�szt"�| S ) a�
Wrap all ``str`` in ``xmlrpc.client.Binary``.
Because ``xmlrpc.client.dumps()`` will itself convert all ``unicode`` instances
into UTF-8 encoded ``str`` instances, we don't do it here.
So in total, when encoding data for an XML-RPC packet, the following
transformations occur:
* All ``str`` instances are treated as binary data and are wrapped in
an ``xmlrpc.client.Binary()`` instance.
* Only ``unicode`` instances are treated as character data. They get
converted to UTF-8 encoded ``str`` instances (although as mentioned,
not by this function).
Also see `xml_unwrap()`.
:param value: The simple scalar or simple compound value to wrap.
c 3 s | ]}t |� �V qd S )N)�xml_wrap)�.0�v)�versionr9 r: � <genexpr>� s zxml_wrap.<locals>.<genexpr>c 3 s | ]\}}|t |� �fV qd S )N)r? )r@ �krA )rB r9 r: rC � s �datetime_values�dns_name_values� __dns_name__�asciiN)#�type�list�tuple�
isinstance�dict�items�bytesr& r �unicode�intr. r/ r" r5 �datetimer �client_has_capabilityr( �strftimer r r# � crypto_x509� Certificate�base64� b64encode� public_bytes�
x509_Encoding�DER�decode�CertificateSigningRequest�float�bool�AssertionError)�valuerB r9 )rB r: r? � s>
r? �UTF-8c s� t | ttttf�r| S | dkr"| S t | t�r6| j� �S t | ttf�rZt� fdd�| D ��S t | t �r�d| krxt
| d �S t � fdd�| j � D ��S n>t | t �r�t
| j�tks�t�| jS t | t�r�tjjt| �d�S t| ��dS )aI
Unwrap all ``xmlrpc.Binary``, decode all ``str`` into ``unicode``.
When decoding data from an XML-RPC packet, the following transformations
occur:
* The binary payloads of all ``xmlrpc.client.Binary`` instances are
returned as ``str`` instances.
* All ``str`` instances are treated as UTF-8 encoded Unicode strings.
They are decoded and the resulting ``unicode`` instance is returned.
Also see `xml_wrap()`.
:param value: The value to unwrap.
:param encoding: The Unicode encoding to use (defaults to ``'UTF-8'``).
Nc 3 s | ]}t |� �V qd S )N)�
xml_unwrap)r@ rA )�encodingr9 r: rC � s z xml_unwrap.<locals>.<genexpr>rG c 3 s | ]\}}|t |� �fV qd S )N)rc )r@ rD rA )rd r9 r: rC � s z%Y%m%dT%H:%M:%S)rL rP rQ r^ r_ rO r\ rJ rK rM r rN r& rI r7 r` r( rR �strptimer5 � TypeError)ra rd r9 )rd r: rc � s&
rc Fc C s8 t | �tkrt| |�} nt| t�s&t�t| |||dd�S )a�
Encode an XML-RPC data packet, transparently wraping ``params``.
This function will wrap ``params`` using `xml_wrap()` and will
then encode the XML-RPC data packet using ``xmlrpc.client.dumps()`` (from the
Python standard library).
For documentation on the ``xmlrpc.client.dumps()`` function, see:
http://docs.python.org/library/xmlrpc.client.html#convenience-functions
Also see `xml_loads()`.
:param params: A ``tuple`` or an ``xmlrpc.client.Fault`` instance.
:param methodname: The name of the method to call if this is a request.
:param methodresponse: Set this to ``True`` if this is a response.
:param encoding: The Unicode encoding to use (defaults to ``'UTF-8'``).
T)�
methodname�methodresponserd �
allow_none)rI rK r? rL r' r` r) )�paramsrB rg rh rd r9 r9 r: � xml_dumps� s rk c s~ e Zd ZdZdZe� Zef� fdd� Zdd� Zefd d
�Z d d � Z
d
d� Z dd� Z efdd�Z
eejfdd�Zdd� Z� ZS )� _JSONPrimera� Fast JSON primer and pre-converter
Prepare a data structure for JSON serialization. In an ideal world, priming
could be handled by the default hook of json.dumps(). Unfortunately the
hook treats Python 2 str as text while IPA considers str as bytes.
The primer uses a couple of tricks to archive maximum performance:
* O(1) type look instead of O(n) chain of costly isinstance() calls
* __missing__ and __mro__ with caching to handle subclasses
* inline code with minor code duplication (func lookup in enc_list/dict)
* avoid surplus function calls (e.g. func is _identity, obj.__class__
instead if type(obj))
* function default arguments to turn global into local lookups
* avoid re-creation of bound method objects (e.g. result.append)
* on-demand lookup of client capabilities with cached values
Depending on the client version number, the primer converts:
* bytes -> {'__base64__': b64encode}
* datetime -> {'__datetime__': LDAP_GENERALIZED_TIME}
* DNSName -> {'__dns_name__': unicode}
The _ipa_obj_hook() functions unserializes the marked JSON objects to
bytes, datetime and DNSName.
:see: _ipa_obj_hook
rB �
_cap_datetime� _cap_dnsnamec ! s� t t| �j� || _d | _d | _| jt|t|t |t
d �|t |t tt
tttt| jtj| jt| jt| jt| jt| jtj | j tj | j i� d S )N) �superrl �__init__rB rm rn �updaterP r_ rQ rI r^ r r" r5 r# r � _enc_dnsnamerR �
_enc_datetimerO �
_enc_bytesrJ � _enc_listrK rM � _enc_dictrU rV �_enc_certificater] )�selfrB � _identity)� __class__r9 r: rp 8 s* z_JSONPrimer.__init__c C sd x*|j D ] }|| kr| | | |< | | S qW x*| D ]"}t||�r2| | | |< | | S q2W t|��d S )N)�__mro__�
issubclassrf )rx �typ�cr9 r9 r: � __missing__P s
z_JSONPrimer.__missing__c C s | |j }||kr|S ||�S )N)rz )rx �objry �funcr9 r9 r: �convert] s
z_JSONPrimer.convertc C sB | j }|d kr"tj| jd�}|| _ |r4d|jt�iS |jt�S d S )NrE � __datetime__)rm r rS rB rT r )rx �val�capr9 r9 r: rs b s z_JSONPrimer._enc_datetimec C s> | j }|d kr"tj| jd�}|| _ |r2dt|�iS t|�S d S )NrF rG )rn r rS rB rP )rx r� r� r9 r9 r: rr m s z_JSONPrimer._enc_dnsnamec C s" t j|�}tjs|jd�}d|iS )NrH �
__base64__)rW rX �six�PY2r\ )rx r� Zencodedr9 r9 r: rt x s
z_JSONPrimer._enc_bytesc C s> g }|j }x.|D ]&}| |j }|||kr,|n||�� qW |S )N)�appendrz )rx r� ry �resultr� rA r� r9 r9 r: ru ~ s
z_JSONPrimer._enc_listc C s@ i }x6||�D ]*\}}| |j }||kr,|n||�||< qW |S )N)rz )rx r� ry �
_iteritemsr� rD rA r� r9 r9 r: rv � s
z_JSONPrimer._enc_dictc C s | j |jtj��S )N)rt rY rZ r[ )rx r� r9 r9 r: rw � s z _JSONPrimer._enc_certificate)rB rm rn )�__name__�
__module__� __qualname__�__doc__� __slots__�objectry rp r r� rs rr rt ru r� � iteritemsrv rw �
__classcell__r9 r9 )rz r: rl s
rl c C s0 t |�j| �}|r"tj|ddd�S tj|�S dS )aV Serialize a Python object structure to JSON
:param object val: Python object structure
:param str version: client version
:param bool pretty_print: indent and sort JSON (warning: slow!)
:return: text
:note: pretty printing triggers a slow path in Python's JSON module. Only
use pretty_print in debug mode.
� T)�indent� sort_keysN)rl r� �jsonr) )r� rB � pretty_printr� r9 r9 r: �json_encode_binary� s
r� c C sx d| krt j| d �S d| kr0tjj| d t�S d| krDt| d �S x*|| �D ] \}}|j|krNt|�| |< qNW | S dS )z,JSON object hook
:see: _JSONPrimer
r� r� rG N)rW � b64decoderR re r r rz rK )Zdctr� Z_listrD rA r9 r9 r: �
_ipa_obj_hook� s
r� c C s" t | t�r| jd�} tj| td�S )z�Convert serialized JSON string back to Python data structure
:param val: JSON string
:type val: str, bytes
:return: Python data structure
:see: _ipa_obj_hook, _JSONPrimer
zutf-8)Z object_hook)rL rO r\ r� r* r� )r� r9 r9 r: �json_decode_binary� s
r� c C s2 t | t�st�t | jt�r.t| j| jj|��S | S )N)rL r' r` � faultStringrO � faultCoder\ )r8 rd r9 r9 r: � decode_fault� s r� c C sH yt | �\}}t|�|fS tk
rB } zt|��W Y dd}~X nX dS )a�
Decode the XML-RPC packet in ``data``, transparently unwrapping its params.
This function will decode the XML-RPC packet in ``data`` using
``xmlrpc.client.loads()`` (from the Python standard library). If ``data``
contains a fault, ``xmlrpc.client.loads()`` will itself raise an
``xmlrpc.client.Fault`` exception.
Assuming an exception is not raised, this function will then unwrap the
params in ``data`` using `xml_unwrap()`. Finally, a
``(params, methodname)`` tuple is returned containing the unwrapped params
and the name of the method being called. If the packet contains no method
name, ``methodname`` will be ``None``.
For documentation on the ``xmlrpc.client.loads()`` function, see:
http://docs.python.org/2/library/xmlrpclib.html#convenience-functions
Also see `xml_dumps()`.
:param data: The XML-RPC packet to decode.
N)r* rc r' r� )r7 rd rj �methodr8 r9 r9 r: � xml_loads� s
r� c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )� DummyParserc C s
g | _ d S )N)r7 )rx r9 r9 r: rp � s zDummyParser.__init__c C s | j j|� d S )N)r7 r� )rx r7 r9 r9 r: �feed� s zDummyParser.feedc C s dj | j�S )N� )�joinr7 )rx r9 r9 r: �close� s zDummyParser.closeN)r� r� r� rp r� r� r9 r9 r9 r: r� � s r� c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �MultiProtocolTransportz,Transport that handles both XML-RPC and JSONc O s t j| � |jdd �| _d S )N�protocol)r, rp �getr� )rx �args�kwargsr9 r9 r: rp � s
z MultiProtocolTransport.__init__c C s& | j dkrt� }||fS tj| �S d S )Nr� )r� r� r, � getparser)rx �parserr9 r9 r: r� � s
z MultiProtocolTransport.getparserc C sF | j dkr|jdd� n |jdd� |jdtt|��� |j|� d S )Nr� z Content-Typezapplication/jsonztext/xmlzContent-Length)r� � putheaderr5 �lenZ
endheaders)rx �
connection� request_bodyr9 r9 r: � send_content s
z#MultiProtocolTransport.send_contentN)r� r� r� r� rp r� r� r9 r9 r9 r: r� � s r� c @ s e Zd ZdZdd� ZdS )�LanguageAwareTransportz(Transport sending Accept-Language headerc
C s� t j| |�\}}}y$tjtjd�jddd�d j� }W n tjk
rP d}Y nX t|t �s`g }|j
d|j dd �f� |j
d
d t |� f� |||fS ) N� �.� )�maxsplitr Zen_uszAccept-Languager �-ZRefererzhttps://%s/ipa/xml)
r� �
get_host_info�locale� setlocale� LC_MESSAGES�split�lower�ErrorrL rJ r� �replacer5 )rx �hostZ
extra_headersr Zlangr9 r9 r: r� s
z$LanguageAwareTransport.get_host_infoN)r� r� r� r� r� r9 r9 r9 r: r� s r� c @ s e Zd ZdZdd� ZdS )� SSLTransportz2Handles an HTTPS transaction to an XML-RPC server.c C s� | j |�\}| _}| jr<|| jd kr<tjd|� | jd S t|dttdd �tj j
tj j d�}|j � tjd|� ||f| _| jd S )Nr z HTTP connection keep-alive (%s)r� i� � ca_certfile)�tls_version_min�tls_version_maxzNew HTTP connection (%s))
r� �_extra_headers� _connection�logger�debugr �getattrr r% �envr� r� Zconnect)rx r� Z_x509�connr9 r9 r: �make_connection+ s
z SSLTransport.make_connectionN)r� r� r� r� r� r9 r9 r9 r: r� ) s r� c @ s� e Zd ZdZejjejjgZdd� Z d dd�Z
dd� Z d d
� Z d d d
�Z
dd� Zdd� Zd dd�Zejrpdd� Zejd�Zdd� Zdd� Zd d � ZdS )!�
KerbTransportzK
Handles Kerberos Negotiation authentication to an XML-RPC server.
c O s8 t j| f|�|� d | _|jdd�| _|jdd �| _d S )N�service�HTTP�ccache)r� rp � _sec_context�popr� r� )rx r� r� r9 r9 r: rp F s zKerbTransport.__init__Nc C s� |j }|tkr tj|d��n||tkr.tj� �nj|tkr@tj� �nX|tkrRtj � �nF|t
krdtj � �n4|t krvtj
� �n"|tkr�tj� �ntjt|�d��d S )N)r� )�message)Zmin_coder r Z ServiceErrorr Z
NoCCacheErrorr Z
TicketExpiredr ZBadCCachePermsr ZBadCCacheFormatr ZCannotResolveKDCr � CCacheError�
KerberosErrorrP )rx r8 r� �minorr9 r9 r: �_handle_exceptionL s
z KerbTransport._handle_exceptionc C s
| j d S )Nr )r� )rx r9 r9 r: � _get_host_ s zKerbTransport._get_hostc C s2 x,| j D ]"\}}||kr| j j||f� P qW d S )N)r� �remove)rx �name�hrA r9 r9 r: �_remove_extra_headerb s z"KerbTransport._remove_extra_headerTc C s� t | jt�sg | _| jd� |rDttdd�}|rD| jjd|f� dS | j� }| jd |j d�d }yPd}| j
r�t j dd| j
id �}t j
|t jj�}t j||| jd
�| _| jj� }W n4 t jjk
r� } z| j||d � W Y dd}~X nX | j|� dS ) z�
Two things can happen here. If we have a session we will add
a cookie for that. If not we will set an Authorization header.
r �session_cookieN�@�:r Zinitiater� )ZusageZstore)�credsr� �flags)r� )rL r� rJ r� r� r r� r� r� r� r� �gssapiZ Credentials�NameZNameTypeZhostbased_serviceZSecurityContextr� r� �step�
exceptions�GSSErrorr� �_set_auth_header) rx �
use_cookier� r� r� r� r� �responser8 r9 r9 r: �
get_auth_infoh s,
zKerbTransport.get_auth_infoc C s2 | j d� |r.| jjddtj|�jd� f� d S )NZ
Authorizationz negotiate %srH )r� r� r� rW rX r\ )rx �tokenr9 r9 r: r� � s
z KerbTransport._set_auth_headerc
C s� | j r�|jdd�}d }xb|jd�D ]T}|j� jd�\}}}|j� dkr"ytj|jd��}P W q" t t
fk
rt Y q"X q"W |s�t j dd��| j j
|d �}| j jr�d | _ d
S | j|� d S |jd kr�| jd d
� d S d
S )Nzwww-authenticater� �,� Z negotiaterH z,No valid Negotiate header in server response)r� )r� TFi� )r� )r� Z getheaderr� �strip� partitionr� rW r� �encoderf � UnicodeErrorr r� r� Zcompleter� �statusr� )rx r� �headerr� ZfieldrD Z_dummyrA r9 r9 r: �_auth_complete� s0
z KerbTransport._auth_completer c C sp y�| j |�}|r|jd� | j� x�tjrh| j|||� | j||� | j|� | j||� |j dd�}n| j
|||||� |j � }|j dkr�|j � |j dkr�| j
|�s�q$t|| |j |j|j��|| _| j
|�s�q$| j|�S W n� tjjk
�r } z| j|� W Y d d }~X nZ tk
�r< | j� tjd|� � Y n0 tk
�rj | j� tjd|dd� � Y nX d S ) Nr� T)� buffering�� i� z&HTTP server has closed connection (%s)z HTTP connection destroyed (%s))�exc_info) r� �set_debuglevelr� r� r� Z send_requestZ send_hostZsend_user_agentr� Z getresponse� _KerbTransport__send_requestr� �readr� r- �reason�msg�verbose�parse_responser� r� r� r� r0 r� r� r� �
BaseException)rx r� �handlerr� r� r� r� r8 r9 r9 r: �single_request� sL
z KerbTransport.single_requestc C s� | j d d � }|r |jd� | jrNtrN|jd|dd� |jdd� |jd� n |jd|� |jd| jf� | j||� | j ||� |S ) Nr� ZPOSTT)Zskip_accept_encoding�Accept-Encoding�gzipz
User-Agent)r r )
r� r� Zaccept_gzip_encodingr Z
putrequestr� r� Z
user_agentZ send_headersr� )rx r� r� r r� r� Zheadersr9 r9 r: Z__send_request� s
z KerbTransport.__send_requestz.*?(&expiry=\d+).*?c C s. |j � }x | jj|�D ]}|j|d�}qW |S )Nr� )� http_cookie� expiry_re�findallr� )rx r� r Zexpr9 r9 r: �_slice_session_cookie s z#KerbTransport._slice_session_cookiec C s� |dkr dS t tdd�}t tdd�}tjdt|�|� t|t�sF|g}d}y4x.|D ]&}tj|t |t
j
j � d�}|dk rRP qRW W n. t k
r� } ztj
d||� dS d}~X nX |dkr�dS | j|�}tjd||� yt||� W n t k
r� Y nX dS )a�
Given the contents of a Set-Cookie header scan the header and
extract each cookie contained within until the session cookie
is located. Examine the session cookie if the domain and path
are specified, if not update the cookie with those values from
the request URL. Then write the session cookie into the key
store for the principal. If the cookie header is None or the
session cookie is not present in the header no action is
taken.
Context Dependencies:
The per thread context is expected to contain:
principal
The current pricipal the HTTP request was issued for.
request_url
The URL of the HTTP request.
Nr6 � request_urlz received Set-Cookie (%s)'%s')� timestampz&unable to parse cookie header '%s': %sz$storing cookie '%s' for principal %s)r� r r� r� rI rL rJ r � get_named_cookie_from_string� COOKIE_NAMErR �utcnowr3 �errorr r; )rx Z
cookie_headerr6 r r� Zcookier8 �
cookie_stringr9 r9 r: �store_session_cookie s:
z"KerbTransport.store_session_cookiec C s6 t jr|jjd�}n |jjd�}| j|� tj| |�S )Nz
Set-Cookie)r� r� r� Z
getheadersZget_allr r� r� )rx r� r� r9 r9 r: r� K s
z KerbTransport.parse_response)N)T)r )r� r� r� r� r� �RequirementFlag�mutual_authentication�out_of_sequence_detectionr� rp r� r� r� r� r� r� r r� �PY3r� �re�compiler r r r� r9 r9 r9 r: r� ? s"
"
?
<r� c @ s& e Zd ZdZejjejjejjgZ dS )�DelegatedKerbTransportzb
Handles Kerberos Negotiation authentication and TGT delegation to an
XML-RPC server.
N)
r� r� r� r� r� r Zdelegate_to_peerr r r� r9 r9 r9 r: r T s r c @ sZ e Zd ZdZdZeZdZdZdd� Z dd� Z
dd� Z dd d
�Z d d � Z
d
d� Zdd� ZdS )� RPCClientzq
Forwarding backend plugin for XML-RPC client.
Also see the `ipaserver.rpcserver.xmlserver` plugin.
Nc
C s� t jj|�\}}}}}}g }d| jj } y t| �}
W n tk
rL g }
Y nX x4|
D ],} t| j�j d�} |j
dt j | �|f � qTW ||kr�|j
|� |jd|� |S )zP
Create a list of urls consisting of the available IPA servers.
z_ldap._tcp.%s.r� z https://%s%sr )�urllib�parse�urlparser� Zdomainr r r5 �target�rstripr� r Z
format_netlocr� �insert)
rx �rpc_uriZ_schemeZ_netloc�pathZ_paramsZ_queryZ _fragmentZserversr� ZanswersZanswer�serverr9 r9 r: � get_url_listk s
zRPCClient.get_url_listc C s� y"t |�}|dkrdS |jd�}W n, tk
rN } ztjd|� dS d}~X nX ytj|ttjj � d�}W n, tk
r� } ztjd|� dS d}~X nX |S )a
Retrieves the session cookie for the given principal from the
persistent secure storage. Returns None if not found or unable
to retrieve the session cookie for any reason, otherwise
returns a Cookie object containing the session cookie.
Nzutf-8z%Error reading client session data: %s)r
z7Error retrieving cookie from the persistent storage: %s)
r= r\ r3 r� r� r r r rR r
)rx r6 r r8 r� r9 r9 r: �*get_session_cookie_from_persistent_storage� s$
z4RPCClient.get_session_cookie_from_persistent_storagec
C sT |}t tdd�}| j|�}|dkr2tjd|� |S tjd||� y|j|� W n� tjk
r� } z4tjd||� y t|� W n t k
r� Y nX |S d}~X nZ tj
k
r� } ztjd|� |S d}~X n. t k
� r� } ztj d|� |S d}~X nX tjd|j � � t
td |j � � tjj|�\}}}} }
} | j}tjj|||| |
| f�} | S )
aE
Attempt to load a session cookie for the current principal
from the persistent secure storage. If the cookie is
successfully loaded adjust the input url's to point to the
session path and insert the session cookie into the per thread
context for later insertion into the HTTP request. If the
cookie is not successfully loaded then the original url is
returned and the per thread context is not modified.
Context Dependencies:
The per thread context is expected to contain:
principal
The current pricipal the HTTP request was issued for.
The per thread context will be updated with:
session_cookie
A cookie string to be inserted into the Cookie header
of the HTPP request.
r6 NzFfailed to find session_cookie in persistent storage for principal '%s'zKfound session_cookie in persistent storage for principal '%s', cookie: '%s'z,deleting session data for principal '%s': %sz,not sending session cookie, URL mismatch: %sz-not sending session cookie, unknown error: %sz(setting session_cookie into context '%s'r� )r� r r# r� r� Zhttp_return_okr ZExpiredr> r3 Z URLMismatchr r �setattrr r r � session_pathZ
urlunparse)
rx �urlZ original_urlr6 r� r8 �scheme�netlocr rj ZqueryZfragmentZ session_urlr9 r9 r: �apply_session_cookie� s@
z RPCClient.apply_session_cookiec ( C s� |d kr| j jj}|d kr$| j jj}|d kr6| j jj}|d krH| j jj}|t_| j| j }y`t |d�}t
tdd �}||kr�yt td� W n t k
r� Y nX t
td|� |s�| j|�}W n tjtfk
r� Y nX | j|�} dd|d�}
�x�| D �]�} �x�tdd�D �]�} | jd ��r,|�r&t}
nt}
nt}
|
| jd
|d �|
d < tjd
| � t
td| � | j| f|
�}t | �dk�r||S y�t
|d�}y|g i � W nb t k
�r� } zDt |�}|j t k�r�t |j }||j!d��nt"|j |j!| d��W Y d d }~X nX |S tj#k
�r � Y n� t$k
�r� } zjt%td��rr|j&dk�rrt td� y t'|� W n t(k
�rl Y nX �w|�s|� ntj)d| |� P W Y d d }~X n> t(k
�r� } z |�s�� ntj)d| |� P W Y d d }~X nX �qW q�W t*t+d�dj,| �d��d S )N)Z ccache_namer6 r� TzUTF-8)ri rd r� r � zhttps://r� )r� r� r� � transportz trying %sr r� Zping)r� )�coder r! i� z Connection to %s failed with %sz any of the configured serversz, )�urir )-r% r� r� �fallback�delegateZ tls_ca_certr r� �env_rpc_uri_keyr! r� �delattr�AttributeErrorr$ r) r r� r4 r" �range�
startswithr r� r� r� r� r� �server_proxy_classr� r' r� r� r r� r
r� r- �hasattr�errcoder> r3 �infor r r� )rx r� r� r. r/ r� r r6 Zstored_principalZurlsZproxy_kwr& Z_try_numZtransport_class� serverproxy�commandr8 r r9 r9 r: �create_connection� s�
zRPCClient.create_connectionc C s* t t| jd �}|d k r&|jj}|j� d S )N)r� r �idr� �_ServerProxy__transportr� )rx r� r9 r9 r: �destroy_connectionX s z RPCClient.destroy_connectionc C s ||� S )z"Call the command with given paramsr9 )rx r: rj r9 r9 r: �
_call_command^ s zRPCClient._call_commandc ! O s. t tdd�}t | j|�}||g}d}�x�td|�D �]�}tjd|d || j|� y | j||�S tk
r� } zTt | �} tjd| j
|| j � | j
t kr�t | j
}
|
| j d��t
| j
| j |d ��W Y dd} ~ X q2 tk
�r� } z�t td
d�} | o�| jd k�r�ttd
� yt td d�} t| � W n0 tk
�rL }
ztjd
|
� W Y dd}
~
X nX | jtjjd�| jj| jj| jj�}tt| j t || j �� w2t || j d��W Y dd} ~ X q2 t!t"j#fk
�r� } zt |t$| �d��W Y dd} ~ X q2 t%t&fk
�r } zt't$| �d��W Y dd} ~ X q2X q2W t |t(d�d��dS )a�
Forward call to command named ``name`` over XML-RPC.
This method will encode and forward an XML-RPC request, and will then
decode and return the corresponding XML-RPC response.
:param command: The name of the command being forwarded.
:param args: Positional arguments to pass to remote command.
:param kw: Keyword arguments to pass to remote command.
r Nr* r z+[try %d]: Forwarding '%s' to %s server '%s'r� z"Caught fault %d from server %s: %s)r� )r, r r! r� i� r6 z1Error trying to remove persisent session data: %sZ
KRB5CCNAME)r- r )r z.Exceeded number of tries to forward a request.))r� r r� r3 r� r� r� r? r' r� r� r� r r
r- r7 r1 r> r3 r; �os�environr� r� r� r. r/ r$ r< r Z
disconnectr �errmsgr �socketr r5 �
OverflowErrorrf r r )rx r� r� �kwr! r: rj Z max_triesZtry_numr8 r r� r6 Ze2r9 r9 r9 r: �forwardd sX
$zRPCClient.forward)NNNNN)r� r� r� r� r% r+ r5 r� r0 r" r# r) r; r> r? rF r9 r9 r9 r: r ^ s D
mr c @ s$ e Zd ZdZeZdZdZdd� ZdS )� xmlclientz/ipa/session/xmlZxmlZ
xmlrpc_uric C s* |d j dt�}t||�}||� }t|�S )Nr� rB )r� r$ r? rc )rx r: rj rB r� r9 r9 r: r? � s
zxmlclient._call_commandN) r� r� r� r% r+ r5 r� r0 r? r9 r9 r9 r: rG � s
rG c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�JSONServerProxyc C sX t jj|�}|jdkr td��|j| _|j| _|| _ |dks@t
�|sHt
�|| _ || _ d S )N�http�httpsz unsupported XML-RPC protocolzUTF-8)rI rJ )
r r Zurlsplitr' �IOErrorr( �_JSONServerProxy__hostr �_JSONServerProxy__handler�_JSONServerProxy__transportr` �_JSONServerProxy__verboser= )rx r- r+ rd r� ri Z split_urir9 r9 r: rp � s
zJSONServerProxy.__init__c C sJ | j dk}t|�|dd�}|d jdt�}t|||d�}|rHtjd|� | jj| j | j
|j d�| j d kd
�}|r�tjd t j
t j|�d d
d�� y t|�}W n0 tk
r� } ztt|�d��W Y d d }~X nX |jd�}|�rByt|d } W n2 tk
�r t|jd�|jd�| j d��Y n$X |jdi �}
|d |
d< | f |
��|d S )N� r )r� rj r< r� rB )r� z Request: %szutf-8� )r� z Response: %sTr� )r� r� )r r r, r� )r, r r! r7 r� )rO rP r� r$ r� r� r8 rN ZrequestrL rM r� r� r) r* r� r4 r
r5 r �KeyErrorr
) rx r� r� Z
print_jsonZpayloadrB r� r8 r Z error_classrE r9 r9 r: Z __request� sF
zJSONServerProxy.__requestc s � �fdd�}|S )Nc s �j � | �S )N)�_JSONServerProxy__request)r� )r� rx r9 r: �_call� s z*JSONServerProxy.__getattr__.<locals>._callr9 )rx r� rT r9 )r� rx r: � __getattr__� s zJSONServerProxy.__getattr__N)r� r� r� rp rS rU r9 r9 r9 r: rH � s 0rH c @ s e Zd ZdZeZdZdZdS )�
jsonclientz/ipa/session/jsonr� Z jsonrpc_uriN)r� r� r� r% rH r5 r� r0 r9 r9 r9 r: rV s rV )rb )NFrb )F)rb )rb )yr� Z
__future__r Zdecimalr rR Zloggingr@ r� rW r� r rC r r Zsslr Z cryptographyr rU r� Z
dns.exceptionr r� Zipalib.backendr Zipalib.constantsr Z
ipalib.errorsr r
r r r
Zipalibr r Zipalib.requestr r Z ipalib.x509r rZ Z ipapythonr r Zipapython.cookier Zipapython.dnsutilr r Z ipalib.textr Z ipalib.utilr Zipalib.krb_utilsr r r r r r r r! Z ipapython.dnr" Zipapython.kerberosr# Zipalib.capabilitiesr$ r% Z xmlrpclibr& r' r( r) r* r+ r, r- r. r/ � ImportErrorZ
xmlrpc.clientr Z http.clientr0 Zhttplibr1 r5 rP Z getLoggerr� r� r r2 r; r= r> r? rc rk rM rl r� r� rJ r� r� r� r� r� r� r� r� r� r r rG rH rV r9 r9 r9 r: �<module> s� ( 46
A
+
z
O
H