)hc @ s] d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z m
Z
d d l m Z y d d l Z Wn e
k
r e Z n Xd d l m Z d d l m Z d d l m Z d d l m Z d d l m Z m Z y e e f Wn e k
r-d
Z d Z n Xd f d
YZ e j d Z d Z d S( s0 Handle passwords and sanitize approved messages.iN( t
StringTypet TupleType( t urlparse( t mm_cfg( t Utils( t Errors( t syslog( t md5_newt sha_newi i t SecurityManagerc B sb e Z d Z d d Z d d Z d d Z d d Z d d Z d d Z d Z
RS( c C s d | _ d | _ i | _ d S( N( t Nonet mod_passwordt
post_passwordt passwords( t self( ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt InitVarsP s c C sY | j d } | t j k r | d k r7 t d n t j t j | } | j | } t j
t j | d d } | d | 7} n | t j k r | j
} | d 7} n | t j k r | j } | d 7} nx | t j k r | j } | d 7} nS | t j k rKt j } t j r5| r5| } d } qO| j } | d 7} n d
S| | f S( Nt +s% No user supplied for AuthUser contextt safet s user+%st postert moderatort admint site( NN( t
internal_nameR t AuthUserR
t TypeErrorR t UnobscureEmailt urllibt unquotet getMemberPasswordt quotet ObscureEmailt AuthListPosterR t AuthListModeratorR t
AuthListAdmint passwordt
AuthSiteAdmint get_global_passwordt ALLOW_SITE_ADMIN_COOKIES( R t authcontextt usert keyt secrett userdatat sitepass( ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt AuthContextInfoZ s4
c
s | s
t j Sx| D]} | t j k rN t j | d d } | rt j Sq | t j k r| t j | } | rt j Sq | t j k rd } f d } j | \ } } | d k r q n t | j
}
t } } |
| k r t } nV t
| j | k r t } } n1 | | | r<t } } n | | rQt } n | rt } j s| j t } n z |
_ | r j n Wd | r j n Xn | r| Sq | t j k r j | \ } } | rt | j
| k r| Sq | t j k rU j | \ } } | rt | j
| k r| Sq | t j k r| d k ry j | | r| SWqt j k
rqXqq t d d | t d | q Wt j S( Nt siteadmini c S sM y4 | d } t r/ t j | | | k r/ t St SWn t k
rH t SXd S( Ni ( t cryptt Truet FalseR ( t responseR* t salt( ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt cryptmatchp s
c sM d d l d d l } d | j | j f d } f d } f d } d d l } d d l d } t j j | rIy) | j | j | j
} | j | Wn$ t k
r } t
d d | t SX| } t | d }
yd | j d
t | d d | d | d
f | j d
|
d | j | | f Wn$ t k
rz} t
d d | t SX| j | j g } x0 t r| j d } | sPn | j | qWd j | }
|
rI|
j d } t | d k rF| d j } t | d k rC| d |
k rC| d d k rCt SqFqIn t S( Nii c s& d j f d t | D S( NR c 3 s | ] } j Vq d S( N( t choice( t .0t x( t charst random( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pys <genexpr> s ( t joint range( t sizeR8 ( R9 ( R8 s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt id_generator s c sj i } d d g } j d } xB | D]: } t j j | d } j | d | } | | | <q( W| S( Nt REMOTE_HOSTt REMOTE_ADDRs [ \n]+t 0R ( t compilet ost environt gett sub( t sanitizedt keyst whitespace_patternR) t val( t re( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt cpauth_protocol_safe_host_info s
c s8 j d } j | d | } | d k r4 d S| S( Ns [ \n]+R R@ ( RA RE ( t unsafestrRH RF ( RJ ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt cpauth_protocol_safe_string s
s" /usr/local/cpanel/var/cpauthd.sockt errors! cpauthd service not available: %si s %s %s %s %s
s MAILMAN::RHOSTR? R> s MAILMAN::OTPs- could not send message to cpauthd service: %si R s
i i i i t 1( R9 t stringt ascii_uppercaset digitst socketRJ RB t patht existst AF_UNIXt SOCK_STREAMt connectt ExceptionR R1 t strt sendR t shutdownt SHUT_WRR0 t recvt appendR: t splitt len( R2 RP R= RK RM RS t fnamet clientt et hostinfot
random_strt all_datat rawt datat linest parts( R ( R9 RJ s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt check_mailman_one_time_password sP 13
RN s Bad authcontext: %s( R t UnAuthorizedt AuthCreatorR t check_global_passwordR$ R" R- R
R t hexdigestR1 R0 R t digestt Lockedt LockR# t Savet UnlockR! R R t authenticateMemberR t NotAMemberErrorR t
ValueError(
R t authcontextsR2 R( t act okR4 Rl R) R* t sharesponset upgradet save_and_unlock( ( R s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt Authenticate st
K
c C sa x* | D]" } | j | | } | r t Sq W| j | | | } | r] | j | | GHt St S( N( t CheckCookieR0 R t
MakeCookieR1 ( R Ry R2 R( Rz R{ ( ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt WebAuthenticate* s
c C sD | j | | \ } } | d k s@ | d k s@ t | t rI t n t t j } t | |
j } t j
} t j t
j | | f | | <t | j } | d } t j j d }
|
rd | } t j j d } | r| | } qn | | | d <| d d k r2t | | d <n d | | d
<| S( Ni t CPANELs /3rdpartyt cp_security_tokenRT i t httpst securei t version( R- R
t
isinstanceR Rx t intt timeR Rp t Cookiet SimpleCookiet binasciit hexlifyt marshalt dumpsR t web_page_urlRB RC RD R0 ( R R' R( R) R* t issuedt mact ct parsedRT t is_cpanelR ( ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyR = s( ( "
c C s | j | | \ } } t j } d | | <t | j d } t j j d } | r d | } t j j d } | r | | } q n | | | d <d | | d <d | | d
<| S( NR i R s /3rdpartyR RT i s max-agei R ( R- R R R R RB RC RD ( R R' R( R) R* R RT R R ( ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt ZapCookie\ s
c
C s t j j d } | s t St | } | t j k r | rI | g } nV g } | j d } x= | j D]/ } | j | rl | j
| t | ql ql WxR g | D] } t j
t j | ^ q D]% } | j | | | } | r t Sq Wt S| j | | | Sd S( Nt HTTP_COOKIEs +user+( RB RC RD R1 t parsecookieR R R RG t
startswithR_ Ra R R R R t _SecurityManager__checkoneR0 (
R R' R( t
cookiedataR t usernamest prefixt kt uR{ ( ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyR s s& ,c C s y | j | | \ } } Wn t j k
r3 t SX| j | sT t | t rX t Sy, t j t j
| | } | \ } } Wn t t t
t f k
r t SXt j } | | k r t St j r | t j | k r t St | |
j }
|
| k rt S| j | | GHt S( N( R- R Rw R1 t has_keyR R R t loadsR t unhexlifyt EOFErrorRx R t KeyErrorR R t AUTHENTICATION_COOKIE_LIFETIMER Rp R R0 ( R R R' R( R) R* Ri R t received_mact nowR ( ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt
__checkone s,
N( t __name__t
__module__R R
R- R R R R R R ( ( ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyR O s
/ )s ;\s*c C su i } xh | j D]Z } xQ t j | D]@ } y | j d d \ } } Wn t k
r^ q) X| | | <q) Wq W| S( Nt =i ( t
splitlinest splitterR` Rx ( t sR t linet pR t v( ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyR s
( t __doc__RB RJ R R R R R t typesR R R R/ t ImportErrorR
t MailmanR R R t Mailman.Logging.SyslogR t
Mailman.UtilsR R R0 R1 t NameErrorR RA R R ( ( ( s= /usr/local/cpanel/3rdparty/mailman/Mailman/SecurityManager.pyt <module> s6
y