U
$[ @ s d Z dgZdZdZdZddlZddlmZmZm Z m
Z
m Z m Z m
Z
ddlmZmZmZmZmZ dd lmZ dd
lmZ G d d d e ZG d
d de ZG dd de Ze
eeeeeeeeeZG dd de ZdZdZ dZ dZ dZ eedZ eedZ!e j"Z"ee"_#eege"_$e%e!dr:e!j&Z&ee&_#eege&_$e!j'Z'ee'_#eeeeeege'_$e!j(Z(ee(_#eege(_$e!j)Z)ee)_#eege)_$e!j*Z*ee*_#eege*_$G dd dZ+dd Z,e-d krddl.Z.ddl/Z/d d Z0e+ Z+e0d e/1 Z2e+,e2e// e3d!4e+j5e+j6 dS )"z
PAM module for python
Provides an authenticate function that will allow the caller to authenticate
a user against the Pluggable Authentication Modules (PAM) on the system.
Implemented using ctypes, so no compilation is necessary.
pamz1.8.4z David Ford <david@blue-labs.org>z 2018 June 15 N)CDLLPOINTER Structure CFUNCTYPEcastbyrefsizeof)c_void_pc_size_tc_char_pc_charc_int)memmove) find_libraryc @ s" e Zd ZdZdefgZdd ZdS ) PamHandlez&wrapper class for pam_handle_t pointerhandlec C s t | d| _d S )Nr )r __init__r self r /pam.pyr ' s
zPamHandle.__init__N)__name__
__module__ __qualname____doc__r
_fields_r r r r r r # s
r c @ s( e Zd ZdZdefdefgZdd ZdS )
PamMessagez'wrapper class for pam_message structure msg_stylemsgc C s d| j | jf S )Nz<PamMessage %i '%s'>)r r r r r r __repr__/ s zPamMessage.__repr__N)r r r r r r r r r r r r r + s r c @ s( e Zd ZdZdefdefgZdd ZdS ) PamResponsez(wrapper class for pam_response structureresp resp_retcodec C s d| j | jf S )Nz<PamResponse %i '%s'>)r# r" r r r r r 6 s zPamResponse.__repr__N)r r r r r r r r r r r r r! 2 s r! c @ s e Zd ZdZdefdefgZdS )PamConvz$wrapper class for pam_conv structureconvZ appdata_ptrN)r r r r conv_funcr
r r r r r r$ ; s r$ cpam_endc @ s& e Zd ZdZdZdd Zd
dd ZdS ) r r Nc C s d S Nr r r r r r g s z pam.__init__loginutf-8Tc st t fdd}tjdkrZt|tr0||}ttrD|t|tr||}n<t|trn||}ttr|t|tr||}d|ksdksd|krd| _d| _dS t t
}t |d}t ||t
|t
|} | dkr| | _d | _dS t|d} | dk}
|
r.|r.t|t} | | _t|| | _tjdkrZ| j|| _ttd
rpt|| |
S ) a username and password authentication for the given service.
Returns True for success, or False for failure.
self.code (integer) and self.reason (string) are always stored and may
be referenced for the reason why authentication failed. 0/'Success' will
be stored for success.
Python3 expects bytes() for ctypes inputs. This function will make
necessary conversions using the supplied encoding.
Inputs:
username: username to authenticate
password: password in plain text
service: PAM service to authenticate against, defaults to 'login'
Returns:
success: True
failure: False
c s t | tt}t|tt}||d< t| D ]N}|| jjtkr,t t d tt
}t | t ||| _ d|| _
q,dS )zxSimple conversation function that responds to any
prompt where the echo is off with the supplied passwordr r' )callocr r! r r rangecontentsr PAM_PROMPT_ECHO_OFFlenr
r r" r# )Z
n_messagesZmessagesZ
p_responseZapp_dataZaddrZresponseiZdstZ cpasswordpasswordr r my_conv s
z!pam.authenticate.<locals>.my_convr) r* zstrings may not contain NULFr zpam_start() failedr- )r& sys version_info
isinstancestrencodeZunicodecodereasonr r r$ pam_startr pam_authenticate pam_setcredPAM_REINITIALIZE_CRED pam_strerrordecodehasattrlibpamr- ) r usernamer8 ZserviceencodingZ
resetcredsr9 r r% ZretvalZ auth_successr r7 r authenticatej sL
zpam.authenticate)r/ r0 T)r r r rA rB r rM r r r r r c s c O s t j| |S )zB
Compatibility function for older versions of python-pam.
)r rM )ZvargsZdargsr r r rM s rM __main__c s> fdd}t | tjdkr*t| }nt| }t |S )Nc s t t d S r. )readlineZ insert_textZ redisplayr textr r hook s
z input_with_prefill.<locals>.hookr: )rO Zset_pre_input_hookr< r= inputZ raw_input)promptrQ rR resultr rP r input_with_prefill s
rV z
Username: z{} {})7r __all__ __version__
__author__Z __released__r< Zctypesr r r r r r r r
r r r
r r Z ctypes.utilr r r r! r& r$ r4 ZPAM_PROMPT_ECHO_ONZ
PAM_ERROR_MSGZ
PAM_TEXT_INFOrF ZlibcrJ r1 ZrestypeZargtypesrI r- rC rE rG rD r rM r rO ZgetpassrV ZgetuserrK printformatrA rB r r r r <module> sb $
_