o j/@sddlZddlZddlmZddlmZddlmZddlm Z ddl m Z ddl m Z mZmZmZmZmZmZmZGdd d ZGd d d ZdS) N)sha256) Certificate) asyauthSecret)logger)SPNEGOClientNative) NegoDatasNegoData TSRequestr TSPasswordCreds TSCredentialsTSRemoteGuardCredsTSRemoteGuardPackageCredc@s4eZdZddZddZd ddZdefd d ZdS) SSLTunnelcCspttj|_d|j_tj|j_|jjtjdBdBO_t |_ t |_ |jj |j |j dd|_ d|_dS)NFii) server_side)ssl SSLContextPROTOCOL_TLS_CLIENTssl_ctxcheck_hostname CERT_NONE verify_modeoptionsOP_NO_COMPRESSION MemoryBIO tls_in_buff tls_out_buffwrap_biotls_objhandshake_doneselfr!/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/asyauth/protocols/credssp/client/native.py__init__s    zSSLTunnel.__init__cCs|jjddS)NT) binary_form)r getpeercertrr!r!r"get_peer_certificatezSSLTunnel.get_peer_certificateNcCs|dur |j||jdur6z|jWntjy/ |j}|dkr,|YS Ynd|_d} z ||j7}Wn tjyMY|Swq9)NFT) rwriterr do_handshakerSSLWantReadErrorrread)r data client_hellobuffr!r!r"data_in s.   zSSLTunnel.data_inr-cCs4|j|d} |j}|dkr||7}q |S)Nr()rr)rr,)r r-r/rawr!r!r"data_out;s  zSSLTunnel.data_outN)__name__ __module__ __qualname__r#r&r0bytesr2r!r!r!r"rs  rc@seZdZddZeddZddZddZd d Zd d Z d dZ dd ZddZ ddZ ddZ ddZddZd'ddZddZd d!Zd"d#Zd(d%d&Zd$S))CredSSPClientNativecCs@||_d|_d|_d|_td|_d|_d|_d|_ d|_ dS)N Tr) credentialauth_ctxcredversionosurandomnonce,_CredSSPClientNative__internal_auth_continueseqno)_CredSSPClientNative__internal_ssl_tunnel_CredSSPClientNative__pubkey)r r;r!r!r"r#Is  zCredSSPClientNative.__init__cCsTt|}|dddj}|ddkrtd|ddStd||S)Ntbs_certificatesubject_public_key_info public_keyrz!CredSSP - removing pubkey paddingzCredSSP - pubkey: %s)rloadcontentsrdebughex)certdatacertpubkeyr!r!r"certificate_to_pubkeyTs    z)CredSSPClientNative.certificate_to_pubkeycCs:|jdurdS|jj}|dust|dkrdS|dS)Nr)rDrcipherlen)r ciphersr!r!r"get_cipher_name`s  z#CredSSPClientNative.get_cipher_namecC |jSr3)r<get_extra_inforr!r!r"rWh z"CredSSPClientNative.get_extra_infocCrVr3r<get_active_credentialrr!r!r"rZkrXz)CredSSPClientNative.get_active_credentialcCrVr3)r; build_contextrr!r!r"get_copynrXzCredSSPClientNative.get_copycCs|jSr3)rCrr!r!r"get_internal_seqqsz$CredSSPClientNative.get_internal_seqcCs|jdSr3rYrr!r!r"rZtr'cCrVr3)r<is_guestrr!r!r"r^wrXzCredSSPClientNative.is_guestcCrVr3)r<signing_neededrr!r!r"r_zrXz"CredSSPClientNative.signing_neededcCrVr3)r<encryption_neededrr!r!r"r`}rXz%CredSSPClientNative.encryption_neededcCrVr3)r<get_seq_numberrr!r!r"rarXz"CredSSPClientNative.get_seq_numberc td)Nz2CredSSP - verify is not supported by the protocol! Exception)r r- signaturer!r!r"verifyzCredSSPClientNative.verifyinitFcrb)Nz0CredSSP - sign is not supported by the protocol!rc)r r- message_no direction reset_cipherr!r!r"signrgzCredSSPClientNative.signc$|jdur td|j|dfSNz"CredSSP - no SSL tunnel available!)rDrdr2r r-riargskwargsr!r!r"encrypt zCredSSPClientNative.encryptcrmrn)rDrdr0ror!r!r"decryptrszCredSSPClientNative.decryptcCs&|jdur|j|||fS|||fSr3)rDr2)r r- to_continueerrr!r!r"__returns  zCredSSPClientNative.__returnNc sz|jdur!|durt||_n|jdur!tdt|_|jdurY|j|}|jjdurNtd|jdurEt|j |_|}|dkrMd}n td|ddfWStd|j td||dur|j j |||dIdH\}|_ } | dur| d |i} |j tt| gd } t| } td | j|| ddWS|j durt|} td | j| jd |j krtd| jd |j f| jd |_ | jddurtd| jddd }td||j j |||dIdH\}|_ } | dur| d |i} d |j i} |durtt| g| d<td|j |j dur|j |_|j dvrod}t||j|j}td||j ||jIdH\}}|jd7_||| d<|j| d<n!|j dvr|j |j|jIdH\}}|jd7_||| d<t| } td| j|| ddWStdt|j} | ddurtdt| dd @| ddurtd!|j | ddIdH\}}td"||j dvr d#}t||j|j}td|||kr td$n|j dvr%|dd|jddkr%td$|durdddd%}|j }|jt j!krX|j"}|j"durGd&}|#d'|j$#d'|j%#d'd%}t&|}t'd|d(}|j ||jIdH\}}|jd7_|j ||d)} t| } td*| j|| ddWSt(d+d}d,#d'|d-}t)d.t*|i}|j ||jIdH\}}|jd7_|j ||d)} |t| ddWSty}z dd|fWYd}~Sd}~ww)/NzFCredSSP - creating internal SSL tunnel, as no certificate was providedTz#CredSSP - SSL tunnel handshake doner(z+CredSSP - SSL tunnel handshake not done yetzCredSSP - auth continue: %szCredSSP - token: %s)flagsspn negoToken)r> negoTokensz(CredSSP - sending initial auth token: %sz#CredSSP - got token from server: %sr>zS[CREDSSP] Server supports version %s which is smaller than our supported version %sr{z!SSPI auth not supported by serverrzCredSSP - SSPI token: %sz$CredSSP - internal auth continue: %sF)r9s&CredSSP Client-To-Server Binding HashzCredSSP - ClientServerHash: %srI pubKeyAuth clientNonce)z)CredSSP - sending internal auth token: %sz CredSSP - internal auth finished errorCodez(CredSSP - Server sent an error! Code: %slzMissing pubKeyAuthzCredSSP - verification data: %ss&CredSSP Server-To-Client Binding Hashz%CredSSP - Server verification failed!) domainNameuserNamepassword.z utf-16-le)credType credentials)r>authInfoz!CredSSP - sending credentials: %sz-DO NOT USE THIS! THIS IS NOT IMPLEMENTED YET!KERBEROS) packageName credBuffer logonCred)+rEr8rQrDrrLrr0rr&rBr< authenticater>rrr native_CredSSPClientNative__returndumprJrdr]rCrrAdigestrMrrrtrZstyperPASSWORDdomainencodeusernamesecretr r printr r )r tokenrx certificateryremote_credguardrqssldata returndatarv negotokenretokenresulttdata sspitokenClientServerHashMagicClientServerHash sealedMessagereverification_data_credsr=rresrr-remcredguardcredser!r!r"rs                                   z CredSSPClientNative.authenticate)rhF)NNNF)r4r5r6r# staticmethodrQrUrWrZr\r]r^r_r`rarfrlrrrtrrr!r!r!r"r8Hs(   r8)r?rhashlibrasn1crypto.x509rasyauth.common.constantsrasyauth.protocols.credsspr&asyauth.protocols.spnego.client.nativer/asyauth.protocols.credssp.messages.asn1_structsrrr r r r r rr8r!r!r!r"s     (7