??????????????
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 173
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 174
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 175
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 176
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 177
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 178
ó
=OXc @ sr d Z d d l Z d d l m Z d d l Td d l m Z d d l m Z d d l m
Z
m Z m Z m
Z
d d l m Z e d d
ƒ \ Z Z Z Z Z e d d ƒ \ Z Z g e d d
ƒ D] Z e
e ƒ ^ qÁ \ Z Z Z Z Z g e d d ƒ D] Z e
e ƒ ^ qø \ Z Z d
e f d „ ƒ YZ! d e! f d „ ƒ YZ" d e f d „ ƒ YZ# d e f d „ ƒ YZ$ d S( sõ
This module provides GSS-API / SSPI Key Exchange as defined in :rfc:`4462`.
.. note:: Credential delegation is not supported in server mode.
.. note::
`RFC 4462 Section 2.2
`_ says we are not
required to implement GSS-API error messages. Thus, in many methods within
this module, if an error occurs an exception will be thrown and the
connection will be terminated.
.. seealso:: :doc:`/api/ssh_gss`
.. versionadded:: 1.15
iÿÿÿÿN( t sha1( t *( t util( t Message( t byte_chrt longt byte_maskt byte_ord( t SSHExceptioni i# i( i* t KexGSSGroup1c B s e Z d Z d Z d Z e d ƒ e d Z e d Z d Z
d „ Z d „ Z d „ Z
d
„ Z d „ Z d „ Z d
„ Z d „ Z d „ Z RS( sŸ
GSS-API / SSPI Authenticated Diffie-Hellman Key Exchange as defined in `RFC
4462 Section 2 `_
lE ÿÿÿÿ 8Ê {3If?ñE yéZô3¢Vý58nÛoP·eõ?a-û
ÓtBLè
ûy3W[<‘p¨6m5Â ÝPøß&aÌF! Í33*¾w& ãAR‘M;L}. c|&A“@”h \Š&&# -D¨v‡dÿÿÿÿ i i i i s( gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==c C s@ | | _ | j j | _ d | _ d | _ d | _ d | _ d S( Ni ( t transportt kexgss_ctxtt kexgsst Nonet gss_hostt xt et f( t selfR
( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyt __init__F s c C só t | j _ | j ƒ | j j rT t | j | j | j ƒ | _ | j j
t ƒ d St | j | j | j ƒ | _ | j j
| _
t ƒ } | j t ƒ | j | j j d | j
ƒ ƒ | j | j ƒ | j j | ƒ | j j
t t t t ƒ d S( sU
Start the GSS-API / SSPI Authenticated Diffie-Hellman Key Exchange.
Nt target( t TrueR
t gss_kex_usedt _generate_xt server_modet powt GR t PR t _expect_packett MSG_KEXGSS_INITR R R t add_bytet c_MSG_KEXGSS_INITt
add_stringR t ssh_init_sec_contextt add_mpintt
_send_messaget MSG_KEXGSS_HOSTKEYt MSG_KEXGSS_CONTINUEt MSG_KEXGSS_COMPLETEt MSG_KEXGSS_ERROR( R t m( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyt start_kexN s"
c C sà | j j r% | t k r% | j | ƒ S| j j rK | t k rK | j | ƒ S| j j rp | t k rp | j | ƒ S| j j r– | t k r– | j | ƒ S| t
k r¯ | j | ƒ St d | ƒ ‚ d S( s”
Parse the next packet.
:param char ptype: The type of the incomming packet
:param `.Message` m: The paket content
s, GSS KexGroup1 asked to handle packet type %dN(
R
R R t _parse_kexgss_initR$ t _parse_kexgss_hostkeyR% t _parse_kexgss_continueR& t _parse_kexgss_completeR' t _parse_kexgss_errorR ( R t ptypeR( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyt
parse_nextg s
c C sp xW t j d ƒ } t | d d ƒ | d } | d | j k r | d | j k r Pq q t j | ƒ | _ d S( sp
generate an "x" (1 < x < q), where q is (p-1)/2.
p is a 128-byte (1024-bit) number, where the first 64 bits are 1.
therefore q can be approximated as a 2^1023. we drop the subset of
potential x where the first 63 bits are 1, because some of those will be
larger than q (but this is a tiny tiny subset of potential x).
i€ i i i i N( t ost urandomR t b7ffffffffffffffft b0000000000000000R t inflate_longR ( R t x_bytes( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR } s c C sN | j ƒ } | | j _ | j ƒ } | j j | | ƒ | j j t t ƒ d S( s›
Parse the SSH2_MSG_KEXGSS_HOSTKEY message (client mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_HOSTKEY message
N( t
get_stringR
t host_keyt _verify_keyR R% R& ( R R( R8 t sig( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR+ s c C s€ | j j s| | j ƒ } t ƒ } | j t ƒ | j | j j d | j d | ƒ ƒ | j j
| ƒ | j j t t
t ƒ n d S( s
Parse the SSH2_MSG_KEXGSS_CONTINUE message.
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_CONTINUE message
R t
recv_tokenN( R
R R7 R R t c_MSG_KEXGSS_CONTINUER R R! R t send_messageR R% R& R' ( R R( t srv_token( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR, › s
c C sÅ | j j d k r$ t ƒ | j _ n | j ƒ | _ | j d k sX | j | j d k rg t d ƒ ‚ n | j ƒ } | j ƒ } d } | rš | j ƒ } n t
| j | j | j ƒ } t ƒ } | j
| j j | j j | j j | j j ƒ | j | j j j ƒ ƒ | j | j ƒ | j | j ƒ | j | ƒ | j j | t t | ƒ ƒ j ƒ ƒ | d k r›| j j d | j d | ƒ | j j | | j j ƒ n | j j | | j j ƒ | j j ƒ d S( s
Parse the SSH2_MSG_KEXGSS_COMPLETE message (client mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_COMPLETE message
i s Server kex "f" is out of rangeR R; N( R
R8 R
t NullHostKeyt get_mpintR R R R7 t get_booleanR R R t addt
local_versiont remote_versiont local_kex_initt remote_kex_initR t __str__R" R t _set_K_HR t strt digestR R! R t
ssh_check_mict
session_idt _activate_outbound( R R( t mic_tokent boolR> t Kt hm( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR- ® s6 %
%
c C s6 | j ƒ } | j ƒ | _ | j d k s@ | j | j d k rO t d ƒ ‚ n t | j | j | j ƒ } t ƒ | j _ | j j j
ƒ } t ƒ } | j | j j
| j j | j j | j j ƒ | j | ƒ | j | j ƒ | j | j ƒ | j | ƒ t | j ƒ ƒ j ƒ } | j j | | ƒ | j j | j | ƒ } t ƒ } | j j rò| j j | j j d t ƒ} | j t ƒ | j | j ƒ | j | ƒ | d k rÅ| j" t ƒ | j | ƒ n
| j" t# ƒ | j j$ | ƒ | j j% ƒ n@ | j t& ƒ | j | ƒ | j j$ | ƒ | j j' t( t) t* ƒ d S( s•
Parse the SSH2_MSG_KEXGSS_INIT message (server mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_INIT message
i s Client kex "e" is out of ranget gss_kexN(+ R7 R@ R R R R R R? R
R8 RG R RB RD RC RF RE R R" R R t asbytesRJ RH R t ssh_accept_sec_contextR t _gss_srv_ctxt_statust ssh_get_micRL R R t c_MSG_KEXGSS_COMPLETER
t add_booleant FalseR# RM R< R R% R& R' ( R R( t client_tokenRP t keyRQ t HR> RN ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR* Ô sJ %
c C sY | j ƒ } | j ƒ } | j ƒ } | j ƒ } t d ƒ t | ƒ t | ƒ | f ‚ d S( sÝ
Parse the SSH2_MSG_KEXGSS_ERROR message (client mode).
The server may send a GSS-API error message. if it does, we display
the error by throwing an exception (client mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_ERROR message
:raise SSHException: Contains GSS-API major and minor status as well as
the error message and the language tag of the
message
s_ GSS-API Error:
Major Status: %s
Minor Status: %s
Error Message: %s
N( t get_intR7 R RI ( R R( t
maj_statust
min_statust err_msgt lang_tag( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR. s ( t __name__t
__module__t __doc__R R R t max_byteR3 t zero_byteR4 t NAMER R) R0 R R+ R, R- R* R. ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR : s
& 0t
KexGSSGroup14c B s e Z d Z d Z d Z d Z RS( s«
GSS-API / SSPI Authenticated Diffie-Hellman Group14 Key Exchange as defined
in `RFC 4462 Section 2
`_
l‰ ÿÿÿÿ&•U¢G9
tcb0]Q\-¥:¾$•90.`U´_¼b;YS7x]Ek Š `:xds€! ,w Â=¶H³G2C’düc_Ÿ.K?&jÚ_†c½}z[\Vµ_1M.D‰^± /1v5 I ŽjÖV&|Ó
Š/òmVÀlRÓ<6#å{n4ó(EY91ÇTï:Ìg8 H ÍAp¢cb4BÑBˆj~Hüÿÿÿÿ i s) gss-group14-sha1-toWM5Slw5Ew8Mqkay+al2g==( Rb Rc Rd R R Rg ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRh s t KexGSSGexc B s‰ e Z d Z d Z d Z d Z d Z d „ Z d „ Z d „ Z d „ Z
d „ Z d
„ Z d „ Z
d „ Z d
„ Z d „ Z d „ Z RS( s¡
GSS-API / SSPI Authenticated Diffie-Hellman Group Exchange as defined in
`RFC 4462 Section 2 `_
s% gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==i i i c C sd | | _ | j j | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _
t | _ d S( N(
R
R R R
R t pt qt gR R R RY t old_style( R R
( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR . s c C s¥ t | j _ | j j r, | j j t ƒ d S| j j | _ t ƒ } | j t ƒ | j
| j ƒ | j
| j ƒ | j
| j
ƒ | j j | ƒ | j j t ƒ d S( sV
Start the GSS-API / SSPI Authenticated Diffie-Hellman Group Exchange
N( R R
R R R t MSG_KEXGSS_GROUPREQR R R t c_MSG_KEXGSS_GROUPREQt add_intt min_bitst preferred_bitst max_bitsR# t MSG_KEXGSS_GROUP( R R( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR) : s
c C sà | t k r | j | ƒ S| t k r2 | j | ƒ S| t k rK | j | ƒ S| t k rd | j | ƒ S| t k r} | j | ƒ S| t
k r– | j | ƒ S| t k r¯ | j
| ƒ St d | ƒ ‚ d S( s”
Parse the next packet.
:param char ptype: The type of the incomming packet
:param `.Message` m: The paket content
s% KexGex asked to handle packet type %dN( Rn t _parse_kexgss_groupreqRt t _parse_kexgss_groupR t _parse_kexgss_gex_initR$ R+ R% R, R& R- R' R. R ( R R/ R( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR0 N s
c C sÜ | j d d } t j | d ƒ } t | d ƒ } t | ƒ } d } x" | d @si | d K} | d L} qH Wxb t rÎ t j | ƒ } t | d | ƒ | d } t j | d ƒ } | d k rm | | k rm Pqm qm W| | _
d S( Ni i i iÿ i€ ( Rj R t deflate_longR t lenR R1 R2 R R5 R ( R Rk t qnormt qhbytet
byte_countt qmaskR6 R ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR g s
c C sd | j ƒ } | j ƒ } | j ƒ } | | j k r? | j } n | | j k rZ | j } n | | k ro | } n | | k r„ | } n | | _ | | _ | | _ | j j ƒ } | d k rÉ t d ƒ ‚ n | j j t d | | | f ƒ | j
| | | ƒ \ | _ | _ t
ƒ } | j t ƒ | j | j ƒ | j | j ƒ | j j | ƒ | j j t ƒ d S( s
Parse the SSH2_MSG_KEXGSS_GROUPREQ message (server mode).
:param `.Message` m: The content of the SSH2_MSG_KEXGSS_GROUPREQ message
s- Can't do server-side gex with no modulus packs Picking p (%d <= %d <= %d bits)N( R] Rs Rq Rr R
t _get_modulus_packR
R t _logt DEBUGt get_modulusRl Rj R R t c_MSG_KEXGSS_GROUPR" R# R R ( R R( t minbitst
preferredbitst maxbitst pack( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRu y s2 !
c C s | j ƒ | _ | j ƒ | _ t j | j ƒ } | d k sH | d k r[ t d | ƒ ‚ n | j j t d | ƒ | j ƒ t
| j | j | j ƒ | _ t
ƒ } | j t ƒ | j | j j d | j ƒ ƒ | j | j ƒ | j j | ƒ | j j t t t t ƒ d S( s–
Parse the SSH2_MSG_KEXGSS_GROUP message (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_GROUP message
i i s< Server-generated gex p (don't ask) is out of range (%d bits)s Got server p (%d bits)R N( R@ Rj Rl R t
bit_lengthR R
R R€ R R R R R R R R R R! R R" R# R R$ R% R& R' ( R R( t bitlen( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRv Ÿ s"
c C s¤ | j ƒ } | j ƒ | _ | j d k s@ | j | j d k rO t d ƒ ‚ n | j ƒ t | j | j | j ƒ | _ t | j | j | j ƒ } t
ƒ | j _ | j j j
ƒ } t ƒ } | j | j j | j j | j j | j j | ƒ | j | j ƒ | j | j ƒ | j | j ƒ | j | j ƒ | j | j ƒ | j | j ƒ | j | j ƒ | j | ƒ t | j ƒ ƒ j ƒ } | j j | | ƒ | j j | j | ƒ } t ƒ } | j j r`| j j! | j j" d t# ƒ} | j$ t% ƒ | j | j ƒ | j& | ƒ | d k r3| j( t# ƒ | j& | ƒ n
| j( t) ƒ | j j* | ƒ | j j+ ƒ n@ | j$ t, ƒ | j& | ƒ | j j* | ƒ | j j- t. t/ t0 ƒ d S( s”
Parse the SSH2_MSG_KEXGSS_INIT message (server mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_INIT message
i s Client kex "e" is out of rangeRR N(1 R7 R@ R Rj R R R Rl R R R? R
R8 RG R RB RD RC RF RE Rp Rq Rr Rs R" R RS RJ RH R RT R RU RV RL R R RW R R
RX RY R# RM R< R R% R& R' ( R R( RZ RP R[ RQ R\ R> RN ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRw ¹ sX %
c C sN | j ƒ } | | j _ | j ƒ } | j j | | ƒ | j j t t ƒ d S( sš
Parse the SSH2_MSG_KEXGSS_HOSTKEY message (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_HOSTKEY message
N( R7 R
R8 R9 R R% R& ( R R( R8 R: ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR+ ï s c C s€ | j j s| | j ƒ } t ƒ } | j t ƒ | j | j j d | j d | ƒ ƒ | j j
| ƒ | j j t t
t ƒ n d S( sŽ
Parse the SSH2_MSG_KEXGSS_CONTINUE message.
:param `Message` m: The content of the SSH2_MSG_KEXGSS_CONTINUE message
R R; N( R
R R7 R R R< R R R! R R= R R% R& R' ( R R( R> ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR, ý s
c C s) | j j d k r$ t ƒ | j _ n | j ƒ | _ | j ƒ } | j ƒ } d } | rf | j ƒ } n | j d k s‹ | j | j d k rš t d ƒ ‚ n t
| j | j | j ƒ } t ƒ } | j
| j j | j j | j j | j j | j j j ƒ ƒ | j s| j | j ƒ n | j | j ƒ | j sC| j | j ƒ n | j | j ƒ | j | j ƒ | j | j ƒ | j | j ƒ | j | ƒ t | j ƒ ƒ j ƒ } | j j | | ƒ | d k rÿ| j j d | j! d | ƒ | j j" | | j j# ƒ n | j j" | | j j# ƒ | j j$ ƒ d S( sœ
Parse the SSH2_MSG_KEXGSS_COMPLETE message (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_COMPLETE message
i s Server kex "f" is out of rangeR R; N(% R
R8 R
R? R@ R R7 RA Rj R R R R RB RC RD RE RF RG Rm Rp Rq Rr Rs R" Rl R R RS RJ RH R R! R RK RL RM ( R R( RN RO R> RP RQ R\ ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR- sF %
c C sY | j ƒ } | j ƒ } | j ƒ } | j ƒ } t d ƒ t | ƒ t | ƒ | f ‚ d S( sÝ
Parse the SSH2_MSG_KEXGSS_ERROR message (client mode).
The server may send a GSS-API error message. if it does, we display
the error by throwing an exception (client mode).
:param `Message` m: The content of the SSH2_MSG_KEXGSS_ERROR message
:raise SSHException: Contains GSS-API major and minor status as well as
the error message and the language tag of the
message
s_ GSS-API Error:
Major Status: %s
Minor Status: %s
Error Message: %s
N( R] R7 R RI ( R R( R^ R_ R` Ra ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR. = s ( Rb Rc Rd Rg Rq Rs Rr R R) R0 R Ru Rv Rw R+ R, R- R. ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRi $ s & 6 -R? c B s) e Z d Z d „ Z d „ Z d „ Z RS( s«
This class represents the Null Host Key for GSS-API Key Exchange as defined
in `RFC 4462 Section 5
`_
c C s
d | _ d S( Nt ( R[ ( R ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR X s c C s | j S( N( R[ ( R ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyRG [ s c C s | j S( N( R[ ( R ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyt get_name^ s ( Rb Rc Rd R RG RŠ ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyR? R s (% Rd R1 t hashlibR t paramiko.commont paramikoR t paramiko.messageR t paramiko.py3compatR R R R t paramiko.ssh_exceptionR t rangeR R% R& R$ R' Rn Rt t cR R< RW t c_MSG_KEXGSS_HOSTKEYt c_MSG_KEXGSS_ERRORRo R‚ t objectR Rh Ri R? ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gss.pyt & s
" 7.ß ÿ /