ó
ö
5Xc @ sÁ d Z d d l m Z m Z d d l m Z m Z d d l Z e j e ƒ Z
d d l Z d d l m
Z
d d l m Z m Z d d l m Z m Z m Z d d l m Z d d l j j Z d d
d d d
d d d d d d g Z d e j f d „ ƒ YZ d e j e j e j f d „ ƒ YZ! d
e f d „ ƒ YZ" d e f d „ ƒ YZ# d e! f d „ ƒ YZ$ d
e! f d „ ƒ YZ% d e
f d „ ƒ YZ& g e D] Z' d e' ^ q—Z( d „ Z) e) ƒ d S( s. passlib.handlers.digests - plain hash digests
iÿÿÿÿ( t b64encodet b64decode( t md5t sha1N( t plaintext( t unix_crypt_schemest
to_unicode( t
uascii_to_strt unicodet u( t
classpropertyt ldap_plaintextt ldap_md5t ldap_sha1t ldap_salted_md5t ldap_salted_sha1t ldap_des_cryptt ldap_bsdi_cryptt ldap_md5_cryptt ldap_sha1_cryptldap_bcryptt ldap_sha256_cryptt ldap_sha512_cryptt _Base64DigestHelperc B sA e Z d Z d Z d Z d Z e j Z e
d „ ƒ Z d „ Z RS( s helper for ldap_md5 / ldap_sha1c C s | j S( s/ tell StaticHandler to strip ident from checksum( t ident( t cls( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyt _hash_prefix0 s c C sI t | t ƒ r! | j d ƒ } n | j | ƒ j ƒ } t | ƒ j d ƒ S( Ns utf-8t ascii( t
isinstanceR t encodet
_hash_funct digestR t decode( t selft secrett chk( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyt _calc_checksum5 s N(
t __name__t
__module__t __doc__t NoneR R t _hash_regext uht PADDED_BASE64_CHARSt checksum_charsR
R R# ( ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyR ' s t _SaltedBase64DigestHelperc B sl e Z d Z d Z e j Z d Z d Z d Z
d Z Z d Z d Z
d Z e d „ ƒ Z d „ Z d „ Z RS(
s- helper for ldap_salted_md5 / ldap_salted_sha1t saltt salt_sizei i c C s· t | d d ƒ } | j j | ƒ } | s? t j j | ƒ ‚ n y" t | j d ƒ j d ƒ ƒ } Wn# t k
r† t j j
| ƒ ‚ n X| j } | sœ t ‚ | d | | d | | ƒ S( NR t hasht tmpt checksumR- (
R R( t matchR) t exct InvalidHashErrorR t groupR t TypeErrort MalformedHashErrort
checksum_sizet AssertionError( R R/ t mt datat cs( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyt from_stringL s "
c C s6 | j | j } | j t | ƒ j d ƒ } t | ƒ S( NR ( R1 R- R R R R ( R R; R/ ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyt to_stringZ s c C s; t | t ƒ r! | j d ƒ } n | j | | j ƒ j ƒ S( Ns utf-8( R R R R R- R ( R R! ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyR# _ s ( s saltR. N( R$ R% R& t setting_kwdsR) R* R+ R' R R R( t
min_salt_sizet
max_salt_sizet default_salt_sizet classmethodR= R> R# ( ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyR, ; s
c B s; e Z d Z d Z e d ƒ Z e Z e j e d ƒ ƒ Z
RS( sì This class stores passwords using LDAP's plain MD5 format, and follows the :ref:`password-hash-api`.
The :meth:`~passlib.ifc.PasswordHash.hash` and :meth:`~passlib.ifc.PasswordHash.genconfig` methods have no optional keywords.
R s {MD5}s% ^\{MD5\}(?P<chk>[+/a-zA-Z0-9]{22}==)$( R$ R% R& t nameR R R R t ret compileR( ( ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyR g s
c B s; e Z d Z d Z e d ƒ Z e Z e j e d ƒ ƒ Z
RS( sí This class stores passwords using LDAP's plain SHA1 format, and follows the :ref:`password-hash-api`.
The :meth:`~passlib.ifc.PasswordHash.hash` and :meth:`~passlib.ifc.PasswordHash.genconfig` methods have no optional keywords.
R
s {SHA}s$ ^\{SHA\}(?P<chk>[+/a-zA-Z0-9]{27}=)$( R$ R% R& RD R R R R RE RF R( ( ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyR
q s
c B sA e Z d Z d Z e d ƒ Z d Z e Z e j
e d ƒ ƒ Z RS( sÏ This class stores passwords using LDAP's salted MD5 format, and follows the :ref:`password-hash-api`.
It supports a 4-16 byte salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it may be any 4-16 byte string.
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
Defaults to 4 bytes for compatibility with the LDAP spec,
but some systems use larger salts, and Passlib supports
any value between 4-16.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
.. versionchanged:: 1.6
This format now supports variable length salts, instead of a fix 4 bytes.
R s {SMD5}i s+ ^\{SMD5\}(?P<tmp>[+/a-zA-Z0-9]{27,}={0,2})$( R$ R% R& RD R R R8 R R RE RF R( ( ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyR { s c B sA e Z d Z d Z e d ƒ Z d Z e Z e j
e d ƒ ƒ Z RS( sÐ This class stores passwords using LDAP's salted SHA1 format, and follows the :ref:`password-hash-api`.
It supports a 4-16 byte salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it may be any 4-16 byte string.
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
Defaults to 4 bytes for compatibility with the LDAP spec,
but some systems use larger salts, and Passlib supports
any value between 4-16.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
.. versionchanged:: 1.6
This format now supports variable length salts, instead of a fix 4 bytes.
R s {SSHA}i s+ ^\{SSHA\}(?P<tmp>[+/a-zA-Z0-9]{32,}={0,2})$( R$ R% R& RD R R R8 R R RE RF R( ( ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyR ¢ s c B s_ e Z d Z d Z e j e d ƒ ƒ Z e j d d d d ƒ e
d „ ƒ ƒ Z e
d „ ƒ Z RS( sY This class stores passwords in plaintext, and follows the :ref:`password-hash-api`.
This class acts much like the generic :class:`!passlib.hash.plaintext` handler,
except that it will identify a hash only if it does NOT begin with the ``{XXX}`` identifier prefix
used by RFC2307 passwords.
The :meth:`~passlib.ifc.PasswordHash.hash`, :meth:`~passlib.ifc.PasswordHash.genhash`, and :meth:`~passlib.ifc.PasswordHash.verify` methods all require the
following additional contextual keyword:
:type encoding: str
:param encoding:
This controls the character encoding to use (defaults to ``utf-8``).
This encoding will be used to encode :class:`!unicode` passwords
under Python 2, and decode :class:`!bytes` hashes under Python 3.
.. versionchanged:: 1.6
The ``encoding`` keyword was added.
R s ^\{\w+\}.*$t
deprecateds 1.7t removeds 2.0c C s d S( Nt !( ( R ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyt genconfigã s c C s1 t j | ƒ } t | ƒ o0 | j j | ƒ d k S( N( R) t to_unicode_for_identifyt boolt _2307_patR2 R' ( R R/ ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyt identifyê s (
R$ R% R& RD RE RF R RM R) t deprecated_methodRC RJ RN ( ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyR É s t ldap_c C sS t ƒ } x@ t D]8 } d | } t j | | d t d ƒ d t ƒ| | <q W~ d S( NRP t prefixs {CRYPT}t lazy( t globalsR R) t
PrefixWrapperR t True( t gt wnameRD ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyt _init_ldap_crypt_handlers÷ s
,(* R& t base64R R t hashlibR R t loggingt getLoggerR$ t logRE t passlib.handlers.miscR t
passlib.utilsR R t passlib.utils.compatR R R t passlib.utils.decorR
t passlib.utils.handlerst utilst handlersR) t __all__t
StaticHandlerR t
HasRawSaltt HasRawChecksumt GenericHandlerR, R R
R R R RD t ldap_crypt_schemesRX ( ( ( sA /usr/lib/python2.7/site-packages/passlib/handlers/ldap_digests.pyt <module> s> %,
'',