File: //usr/lib/python3/dist-packages/twisted/conch/test/__pycache__/test_userauth.cpython-310.pyc
o
�b� � @ s U d Z ddlmZ ddlmZ ddlmZ ddlmZm Z ddl
m Z ddl m
Z
mZmZ ddlmZ dd lmZmZ dd
lmZmZ dd lmZ dd lmZ dd
l m Z dZ ee e d< ed�r�ed�r�ddl m!Z! ddl"m Z m#Z#m$Z$ ddl%m&Z& ddl'm(Z( nG dd� d�Z#G dd� d�Z$G dd� de$j)�Z*G d d � d e$j)�Z+G d d � d e$j)�Z,G d d!� d!e#j-�Z.ee�G d"d#� d#��Z/ee �G d$d%� d%��Z0ee �G d&d'� d'��Z1ee �G d(d)� d)��Z2G d*d+� d+e j3�Z4G d,d-� d-e j3�Z5G d.d/� d/e j3�Z6G d0d1� d1e j3�Z7dS )2zT
Tests for the implementation of the ssh-userauth service.
Maintainer: Paul Swartz
� )�
ModuleType)�Optional)� implementer)�
ConchError�ValidPublicKey)�ICredentialsChecker)�
IAnonymous�ISSHPrivateKey�IUsernamePassword)�UnauthorizedLogin)�IRealm�Portal)�defer�task)�loopback)�
requireModule)�unittestN�keys� cryptography�pyasn1)�SSHProtocolChecker)r � transport�userauth)�NS)�keydatac @ � e Zd ZG dd� d�ZdS )r c @ � e Zd ZdZdS )ztransport.SSHTransportBase�Q
A stub class so that later class definitions won't die.
N��__name__�
__module__� __qualname__�__doc__� r# r# �B/usr/lib/python3/dist-packages/twisted/conch/test/test_userauth.py�SSHTransportBase" � r% N)r r r! r% r# r# r# r$ r ! � r c @ r )r c @ r )zuserauth.SSHUserAuthClientr Nr r# r# r# r$ �SSHUserAuthClient( r& r( N)r r r! r( r# r# r# r$ r ' r' r c @ s2 e Zd ZdZdd� Zdd� Zd dd�Zd d
� ZdS ) �ClientUserAuthz"
A mock user auth client.
c C s( | j r
tj�tj�S t�tj�tj��S )z�
If this is the first time we've been called, return a blob for
the DSA key. Otherwise, return a blob
for the RSA key.
) �
lastPublicKeyr �Key�
fromStringr �publicRSA_opensshr �succeed�publicDSA_openssh��selfr# r# r$ � getPublicKey3 s zClientUserAuth.getPublicKeyc C s t �tj�tj��S )z@
Return the private key object for the RSA key.
)r r. r r+ r, r �privateRSA_opensshr0 r# r# r$ �
getPrivateKey> � z ClientUserAuth.getPrivateKeyNc C �
t �d�S )z/
Return 'foo' as the password.
� foo�r r. )r1 �promptr# r# r$ � getPasswordD �
zClientUserAuth.getPasswordc C r6 )z>
Return 'foo' as the answer to two questions.
)�foor< r8 )r1 �name� information�answersr# r# r$ �getGenericAnswersJ r; z ClientUserAuth.getGenericAnswers�N)r r r! r" r2 r4 r: r@ r# r# r# r$ r) . s
r) c @ � e Zd ZdZdd� Zdd� ZdS )�
OldClientAuthz~
The old SSHUserAuthClient returned a cryptography key object from
getPrivateKey() and a string from getPublicKey
c C s t �tj�tj�j�S rA )r r. r r+ r, r r3 � keyObjectr0 r# r# r$ r4 W � zOldClientAuth.getPrivateKeyc C s t j�tj��� S rA )r r+ r, r r- �blobr0 r# r# r$ r2 Z s zOldClientAuth.getPublicKeyN�r r r! r" r4 r2 r# r# r# r$ rC Q s rC c @ rB )�ClientAuthWithoutPrivateKeyzP
This client doesn't have a private key, but it does have a public key.
c C � d S rA r# r0 r# r# r$ r4 c � z)ClientAuthWithoutPrivateKey.getPrivateKeyc C s t j�tj�S rA )r r+ r, r r- r0 r# r# r$ r2 f � z(ClientAuthWithoutPrivateKey.getPublicKeyNrG r# r# r# r$ rH ^ s rH c @ sL e Zd ZdZG dd� d�ZG dd� d�Zdd� Zdd � Zd
d � Zd d
� Z dS )�
FakeTransporta_
L{userauth.SSHUserAuthServer} expects an SSH transport which has a factory
attribute which has a portal attribute. Because the portal is important for
testing authentication, we need to be able to provide an interesting portal
object to the L{SSHUserAuthServer}.
In addition, we want to be able to capture any packets sent over the
transport.
@ivar packets: a list of 2-tuples: (messageType, data). Each 2-tuple is
a sent packet.
@type packets: C{list}
@param lostConnecion: True if loseConnection has been called on us.
@type lostConnection: L{bool}
c @ s e Zd ZdZdZdd� ZdS )zFakeTransport.ServicezW
A mock service, representing the other service offered by the server.
� nancyc C rI rA r# r0 r# r# r$ �serviceStarted� rJ z$FakeTransport.Service.serviceStartedN)r r r! r" r= rN r# r# r# r$ �Service{ s rO c @ � e Zd ZdZdd� ZdS )zFakeTransport.Factoryzg
A mock factory, representing the factory that spawned this user auth
service.
c C s |dkrt jS dS )z2
Return our fake service.
� noneN)rL rO )r1 r �servicer# r# r$ �
getService� s �z FakeTransport.Factory.getServiceN)r r r! r" rS r# r# r# r$ �Factory� s rT c C s( | � � | _|| j_d| _| | _g | _d S �NF)rT �factory�portal�lostConnectionr �packets)r1 rW r# r# r$ �__init__� s
zFakeTransport.__init__c C s | j �||f� dS )z8
Record the packet sent by the service.
N)rY �append)r1 � messageType�messager# r# r$ �
sendPacket� r5 zFakeTransport.sendPacketc C � dS )z�
Pretend that this transport encrypts traffic in both directions. The
SSHUserAuthServer disables password authentication if the transport
isn't encrypted.
Tr# )r1 � directionr# r# r$ � isEncrypted� s zFakeTransport.isEncryptedc C s
d| _ d S �NT)rX r0 r# r# r$ �loseConnection� s
z FakeTransport.loseConnectionN)
r r r! r" rO rT rZ r^ ra rc r# r# r# r$ rL j s
rL c @ rP )�Realmz�
A mock realm for testing L{userauth.SSHUserAuthServer}.
This realm is not actually used in the course of testing, so it returns the
simplest thing that could possibly work.
c G s t �|d d dd� f�S )Nr c S rI rA r# r# r# r# r$ �<lambda>� � z%Realm.requestAvatar.<locals>.<lambda>r8 )r1 �avatarId�mind�
interfacesr# r# r$ �
requestAvatar� s zRealm.requestAvatarN)r r r! r" rj r# r# r# r$ rd � s rd c @ � e Zd ZdZefZdd� ZdS )�PasswordCheckerz�
A very simple username/password checker which authenticates anyone whose
password matches their username and rejects all others.
c C s& |j |jkr t�|j �S t�td��S )Nz Invalid username/password pair)�username�passwordr r. �failr )r1 �credsr# r# r$ �requestAvatarId� s z PasswordChecker.requestAvatarIdN)r r r! r" r
�credentialInterfacesrq r# r# r# r$ rl � � rl c @ rk )�PrivateKeyCheckerz�
A very simple public key checker which authenticates anyone whose
public/private keypair is the same keydata.public/privateRSA_openssh.
c C sX |j tj�tj�� � kr)|jd ur&tj�|j �}|�|j|j�r#|j S t � �t
� �t � �rA ) rF r r+ r, r r- � signature�verify�sigDatarm r r )r1 rp �objr# r# r$ rq � s
�z!PrivateKeyChecker.requestAvatarIdN)r r r! r" r rr rq r# r# r# r$ rt � rs rt c @ rk )�AnonymousCheckerzI
A simple checker which isn't supported by L{SSHUserAuthServer}.
c C rI rA r# )r1 � credentialsr# r# r$ rq � s z AnonymousChecker.requestAvatarIdN)r r r! r" r rr rq r# r# r# r$ ry � s ry c @ s� e Zd ZdZedu r dZdd� Zdd� Zdd � Zd
d � Z d d
� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� ZdS ),�SSHUserAuthServerTestsz&
Tests for SSHUserAuthServer.
N� cannot run without cryptographyc C sb t � | _t| j�| _| j�t� � | j�t� � t�� | _ t
| j�| j _ | j � � | j j
�� d S rA )rd �realmr
rW �registerCheckerrl rt r �SSHUserAuthServer�
authServerrL r rN �supportedAuthentications�sortr0 r# r# r$ �setUp� s
z SSHUserAuthServerTests.setUpc C � | j �� d | _ d S rA )r� �serviceStoppedr0 r# r# r$ �tearDown� �
z SSHUserAuthServerTests.tearDownc C s( | � | jjjd tjtd�d f� dS )z;
Check that the authentication has failed.
���s password,publickey� N)� assertEqualr� r rY r �MSG_USERAUTH_FAILUREr �r1 �ignoredr# r# r$ � _checkFailed� s �z#SSHUserAuthServerTests._checkFailedc C s, | j �td�td� td� �}|�| j�S )z�
A client may request a list of authentication 'method name' values
that may continue by using the "none" authentication 'method name'.
See RFC 4252 Section 5.2.
r7 s servicerQ )r� �ssh_USERAUTH_REQUESTr � addCallbackr� )r1 �dr# r# r$ �test_noneAuthentication s � z.SSHUserAuthServerTests.test_noneAuthenticationc sF d� td�td�td�dtd�g�}� j�|�}� fdd�}|�|�S )z�
When provided with correct password authentication information, the
server should respond by sending a MSG_USERAUTH_SUCCESS message with
no other data.
See RFC 4252, Section 5.1.
� r7 rQ � passwordr� c � � � � jjjtjdfg� d S �Nr� �r� r� r rY r �MSG_USERAUTH_SUCCESS�r� r0 r# r$ �check �
�zKSSHUserAuthServerTests.test_successfulPasswordAuthentication.<locals>.check)�joinr r� r� r� �r1 �packetr� r� r# r0 r$ �%test_successfulPasswordAuthentication s $
z<SSHUserAuthServerTests.test_successfulPasswordAuthenticationc C sh d� td�td�td�dtd�g�}t�� | j_| j�|�}| �| jjj g � | jj�
d� |� | j �S )a;
When provided with invalid authentication details, the server should
respond by sending a MSG_USERAUTH_FAILURE message which states whether
the authentication was partially successful, and provides other, open
options for authentication.
See RFC 4252, Section 5.1.
r� r7 rQ r� r� � bar� )
r� r r �Clockr� �clockr� r� r rY �advancer� r� �r1 r� r� r# r# r$ �!test_failedPasswordAuthentication' s $
z8SSHUserAuthServerTests.test_failedPasswordAuthenticationc s� t j�tj��� }t j�tj�}td�td� td� d t|�� � t|� }d� j j
_ |� td�t
tjf� | �}|t|�7 }� j �|�}� fdd�}|�|�S )zN
Test that private key authentication completes successfully,
r7 rQ � publickey� �� testc r� r� r� r� r0 r# r$ r� M r� zMSSHUserAuthServerTests.test_successfulPrivateKeyAuthentication.<locals>.check)r r+ r, r r- rF r3 r �sshTyper� r � sessionID�sign�bytesr �MSG_USERAUTH_REQUESTr� r� )r1 rF rx r� ru r� r� r# r0 r$ �'test_successfulPrivateKeyAuthentication8 s, ���
���
�
z>SSHUserAuthServerTests.test_successfulPrivateKeyAuthenticationc s� t �� � dd� }dd� }� fdd�}| �| jd|� | �| jd|� | �| jd |� td
�td � td � td
� }| j�|� | �� t�S )z�
ssh_USERAUTH_REQUEST should raise a ConchError if tryAuth returns
None. Added to catch a bug noticed by pyflakes.
c S s | � d� d S )Nz&request should have raised ConochError)ro r� r# r# r$ �mockCbFinishedAuth\ rK zOSSHUserAuthServerTests.test_requestRaisesConchError.<locals>.mockCbFinishedAuthc S rI rA r# )�kind�user�datar# r# r$ � mockTryAuth_ rJ zHSSHUserAuthServerTests.test_requestRaisesConchError.<locals>.mockTryAuthc s � � | j� d S rA )�errback�value)�reason�r� r# r$ �
mockEbBadAuthb s zJSSHUserAuthServerTests.test_requestRaisesConchError.<locals>.mockEbBadAuth�tryAuth�_cbFinishedAuth�
_ebBadAuths userrQ s
public-keys data)r �Deferred�patchr� r r� �
assertFailurer )r1 r� r� r� r� r# r� r$ � test_requestRaisesConchErrorU s z3SSHUserAuthServerTests.test_requestRaisesConchErrorc sb t j�tj��� � td�td� td� d td� t� � }�j�|�}� �fdd�}|� |�S )z@
Test that verifying a valid private key works.
r7 rQ r� r� � ssh-rsac s* �� �jjjtjtd�t� � fg� d S )Nr� )r� r� r rY r �MSG_USERAUTH_PK_OKr r� �rF r1 r# r$ r� ~ s �z@SSHUserAuthServerTests.test_verifyValidPrivateKey.<locals>.check)
r r+ r, r r- rF r r� r� r� r� r# r� r$ �test_verifyValidPrivateKeyo s ������
z1SSHUserAuthServerTests.test_verifyValidPrivateKeyc C sV t j�tj��� }td�td� td� d td� t|� }| j�|�}|� | j
�S )�d
Test that private key authentication fails when the public key
is invalid.
r7 rQ r� r� s ssh-dsa� r r+ r, r r/ rF r r� r� r� r� �r1 rF r� r� r# r# r$ �3test_failedPrivateKeyAuthenticationWithoutSignature� s ������ zJSSHUserAuthServerTests.test_failedPrivateKeyAuthenticationWithoutSignaturec C s| t j�tj��� }t j�tj�}td�td� td� d td� t|� t|�|�� }d| j j
_ | j � |�}|�
| j�S )r� r7 rQ r� r� r� r� )r r+ r, r r- rF r3 r r� r� r r� r� r� r� )r1 rF rx r� r� r# r# r$ �0test_failedPrivateKeyAuthenticationWithSignature� s& ����� ��
zGSSHUserAuthServerTests.test_failedPrivateKeyAuthenticationWithSignaturec C sj t j�tj��� }td�|dd� }td�td� td� d td� t|� }| j�|�}|� | j
�S ) z�
Private key authentication fails when the public key type is
unsupported or the public key is corrupt.
s ssh-bad-type� Nr7 rQ r� r� r� r� r� r# r# r$ �test_unsupported_publickey� s ������ z1SSHUserAuthServerTests.test_unsupported_publickeyc C sR t �� }t| j�|_| j�t� � |�� |�� |j �
� | � |j ddg� dS )ah
L{SSHUserAuthServer} sets up
C{SSHUserAuthServer.supportedAuthentications} by checking the portal's
credentials interfaces and mapping them to SSH authentication method
strings. If the Portal advertises an interface that
L{SSHUserAuthServer} can't map, it should be ignored. This is a white
box test.
r� r� N) r r rL rW r r~ ry rN r� r� r� r� �r1 �serverr# r# r$ � test_ignoreUnknownCredInterfaces� s
z7SSHUserAuthServerTests.test_ignoreUnknownCredInterfacesc C s� | � d| jj� t�� }t| j�|_dd� |j_|� � |�
� | � d|j� t�� }t| j�|_dd� |j_|� � |�
� | � d|j� dS )z�
Test that the userauth service does not advertise password
authentication if the password would be send in cleartext.
r� c S r_ rU r# ��xr# r# r$ re � rf zISSHUserAuthServerTests.test_removePasswordIfUnencrypted.<locals>.<lambda>c S � | dkS �N�inr# r� r# r# r$ re � � N) �assertInr� r� r r rL rW r ra rN r� � assertNotIn)r1 �clearAuthServer�halfAuthServerr# r# r$ � test_removePasswordIfUnencrypted� s z7SSHUserAuthServerTests.test_removePasswordIfUnencryptedc C s� t | j�}|�t� � t�� }t|�|_dd� |j_|� � |�
� | � |j dg� t�� }t|�|_dd� |j_|� � |�
� | � |j dg� dS )z�
If the L{SSHUserAuthServer} is not advertising passwords, then an
unencrypted connection should not cause any warnings or exceptions.
This is a white box test.
c S r_ rU r# r� r# r# r$ re � rf zSSSHUserAuthServerTests.test_unencryptedConnectionWithoutPasswords.<locals>.<lambda>r� c S r� r� r# r� r# r# r$ re � r� N)
r
r} r~ rt r r rL r ra rN r� r� r� )r1 rW r� r� r# r# r$ �*test_unencryptedConnectionWithoutPasswords� s
zASSHUserAuthServerTests.test_unencryptedConnectionWithoutPasswordsc C s� t �� }t�� |_t| j�|_|�� |j� d� |�
� | � |jj tj
dttjf� td� td� fg� | �|jj� dS )z0
Test that the login times out.
鰚 � s you took too longr� N)r r r r� r� rL rW r rN r� r� r� rY �MSG_DISCONNECTr� �)DISCONNECT_NO_MORE_AUTH_METHODS_AVAILABLEr �
assertTruerX �r1 �timeoutAuthServerr# r# r$ �test_loginTimeout s(
������ z(SSHUserAuthServerTests.test_loginTimeoutc C s\ t �� }t�� |_t| j�|_|�� |� � |j�
d� | � |jj g � | �
|jj� dS )zN
Test that stopping the service also stops the login timeout.
r� N)r r r r� r� rL rW r rN r� r� r� rY � assertFalserX r� r# r# r$ �test_cancelLoginTimeout s
z.SSHUserAuthServerTests.test_cancelLoginTimeoutc sn d� td�td�td�dtd�g�}t�� � j_td�D ]}� j�|�}� jj�d� q � fd d
�}|� |�S ) zm
Test that the server disconnects if the client fails authentication
too many times.
r� r7 rQ r� r� r� � r� c s< � � � jjjd tjdttjf� td� td� f� d S )Nr� r� s too many bad authsr� )r� r� r rY r� r� r� r r� r0 r# r$ r� 1 s
�����z:SSHUserAuthServerTests.test_tooManyAttempts.<locals>.check)
r� r r r� r� r� �ranger� r� r� )r1 r� �ir� r� r# r0 r$ �test_tooManyAttempts& s $
z+SSHUserAuthServerTests.test_tooManyAttemptsc C sH t d�t d� t d� d t d� }t�� | j_| j�|�}|�| j�S )zo
If the user requests a service that we don't support, the
authentication should fail.
r7 r� r� r� )r r r� r� r� r� r� r� r� r# r# r$ �test_failIfUnknownService? s $ z0SSHUserAuthServerTests.test_failIfUnknownServicec sV dd� }� � � jd|� � � � jdd� � fdd�}� j�ddd�}� �|t��|�S ) aZ
tryAuth() has two edge cases that are difficult to reach.
1) an authentication method auth_* returns None instead of a Deferred.
2) an authentication type that is defined does not have a matching
auth_* method.
Both these cases should return a Deferred which fails with a
ConchError.
c S rI rA r# )r� r# r# r$ �mockAuthU rJ z>SSHUserAuthServerTests.test_tryAuthEdgeCases.<locals>.mockAuth�auth_publickey�
auth_passwordNc s � j �dd d �}� �|t�S )Nr� )r� r� r� r )r� �d2r0 r# r$ �
secondTest[ s z@SSHUserAuthServerTests.test_tryAuthEdgeCases.<locals>.secondTestr� )r� r� r� r� r r� )r1 r� r� �d1r# r0 r$ �test_tryAuthEdgeCasesI s z,SSHUserAuthServerTests.test_tryAuthEdgeCases)r r r! r" r �skipr� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r# r# r# r$ r{ � s0
r{ c @ s� e Zd ZdZedu r dZdd� Zdd� Zdd � Zd
d � Z d d
� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� ZdS )"�SSHUserAuthClientTestsz&
Tests for SSHUserAuthClient.
Nr| c C s4 t dt�� �| _td �| j_d| jj_| j�� d S )Nr7 r� )r) rL rO �
authClientr r� rN r0 r# r# r$ r� k s
z SSHUserAuthClientTests.setUpc C r� rA )r� r� r0 r# r# r$ r� q r� z SSHUserAuthClientTests.tearDownc C sT | � | jjd� | � | jjjd� | � | jjjtjt d�t d� t d� fg� dS )z;
Test that client is initialized properly.
r7 rM rQ N)
r� r� r� �instancer= r rY r r� r r0 r# r# r$ � test_initu s �z SSHUserAuthClientTests.test_initc s@ dg� � fdd�}|| j j_| j �d� | �� d | j j� dS )z9
Test that the client succeeds properly.
Nc s | � d< d S )Nr r# )rR �r� r# r$ �stubSetService� s zDSSHUserAuthClientTests.test_USERAUTH_SUCCESS.<locals>.stubSetServicer� r )r� r �
setService�ssh_USERAUTH_SUCCESSr� r� )r1 r� r# r� r$ �test_USERAUTH_SUCCESS� s
z,SSHUserAuthClientTests.test_USERAUTH_SUCCESSc C s� | j �td�d � | �| j jjd tjtd�td� td� d td� ttj �
t j ��
� � f� | j �td�d � ttj �
t j��
� �}| �| j jjd tjtd�td� td� d td� | f� | j �td�ttj �
t j��
� � � t| j jj�ttjf� td� td� td� d td� | }tj �
t j�}| �| j jjd tjtd�td� td� d td� | t|�|�� f� d S )
zJ
Test that the client can authenticate with a public key.
r� r� r� r7 rM s ssh-dssr� � N)r� �ssh_USERAUTH_FAILUREr r� r rY r r� r r+ r, r r/ rF r- �ssh_USERAUTH_PK_OKr� r� r3 r� )r1 rF rw rx r# r# r$ �test_publickey� s� �������
������� �
��������
����� ���z%SSHUserAuthClientTests.test_publickeyc C sz t dt�� �}td�|_d|j_|�� |�d� g |j_| �|� d�� | �
|jjt j t
d�t
d� t
d� fg� dS )z�
If the SSHUserAuthClient doesn't return anything from signData,
the client should start the authentication over again by requesting
'none' authentication.
r7 Nr� r� r� rM rQ )rH rL rO r r� rN r� rY � assertIsNoner� r� r r� r )r1 r� r# r# r$ �!test_publickey_without_privatekey� s
�z8SSHUserAuthClientTests.test_publickey_without_privatekeyc s. dd� � j _� j �d�}� fdd�}|�|�S )z{
If there's no public key, auth_publickey should return a Deferred
called back with a False value.
c S rI rA r# r� r# r# r$ re � rf z:SSHUserAuthClientTests.test_no_publickey.<locals>.<lambda>r� c s � � | � d S rA )r� ��resultr0 r# r$ r� � rK z7SSHUserAuthClientTests.test_no_publickey.<locals>.check)r� r2 r� r� )r1 r� r� r# r0 r$ �test_no_publickey� s
z(SSHUserAuthClientTests.test_no_publickeyc C s� | j �td�d � | �| j jjd tjtd�td� td� d td� f� | j �td�td� � | �| j jjd tjtd�td� td� d td�d f� d S )
zx
Test that the client can authentication with a password. This
includes changing the password.
r� r� r� r7 rM r� r� r� N) r� r� r r� r rY r r� r� r0 r# r# r$ �
test_password� s "�� &��z$SSHUserAuthClientTests.test_passwordc C s" dd� | j _| �| j �d�� dS )zK
If getPassword returns None, tryAuth should return False.
c S rI rA r# r# r# r# r$ re rf z9SSHUserAuthClientTests.test_no_password.<locals>.<lambda>r� N)r� r: r� r� r0 r# r# r$ �test_no_password s z'SSHUserAuthClientTests.test_no_passwordc C s` | j �td�td� td� d td� d � | �| j jjd tjdtd� td� f� dS ) zj
Make sure that the client can authenticate with the keyboard
interactive method.
r� s s
Password: r� r� s r7 N)r� �'ssh_USERAUTH_PK_OK_keyboard_interactiver r� r rY r �MSG_USERAUTH_INFO_RESPONSEr0 r# r# r$ �test_keyboardInteractive s& ������ ��z/SSHUserAuthClientTests.test_keyboardInteractivec C sP d| j _g | j j_| j �d� | �| j jjtjtd�td� td� fg� dS )z�
If C{SSHUserAuthClient} gets a MSG_USERAUTH_PK_OK packet when it's not
expecting it, it should fail the current authentication and move on to
the next type.
s unknownr� r7 rM rQ N) r� �lastAuthr rY r� r� r r� r r0 r# r# r$ �"test_USERAUTH_PK_OK_unknown_method s
�z9SSHUserAuthClientTests.test_USERAUTH_PK_OK_unknown_methodc s� � fdd�}� fdd�}|� j _|� j _� j �td�d � � �� j jjd tj td�td � td
� d td� f� � j �td �d � � �� j jjd
d� ddg� dS )z�
ssh_USERAUTH_FAILURE should sort the methods by their position
in SSHUserAuthClient.preferredOrder. Methods that are not in
preferredOrder should be sorted at the end of that list.
c s � j j�dd� d S )N� � here is data�r� r r^ r# r0 r# r$ �auth_firstmethod2 s zNSSHUserAuthClientTests.test_USERAUTH_FAILURE_sorting.<locals>.auth_firstmethodc s � j j�dd� dS )N� �
other dataTr
r# r0 r# r$ �auth_anothermethod5 s zPSSHUserAuthClientTests.test_USERAUTH_FAILURE_sorting.<locals>.auth_anothermethods anothermethod,passwordr� r� r7 rM r� s" firstmethod,anothermethod,passwordr� ���N)r r )r r )
r� r r r� r r� r rY r r� )r1 r r r# r0 r$ � test_USERAUTH_FAILURE_sorting+ s$ "��
��z4SSHUserAuthClientTests.test_USERAUTH_FAILURE_sortingc C sT | j �td�d � | j �td�d � | �| j jjd tjdtd� d f� dS ) z�
If there are no more available user authentication messages,
the SSHUserAuthClient should disconnect with code
DISCONNECT_NO_MORE_AUTH_METHODS_AVAILABLE.
r� r� r� r� s s( no more authentication methods availables N)r� r� r r� r rY r� r0 r# r# r$ �%test_disconnectIfNoMoreAuthenticationO s ����z<SSHUserAuthClientTests.test_disconnectIfNoMoreAuthenticationc C sH g | j j_| j �d� | �| j jjtjtd�td� td� fg� dS )z�
_ebAuth (the generic authentication error handler) should send
a request for the 'none' authentication method.
Nr7 rM rQ )r� r rY �_ebAuthr� r r� r r0 r# r# r$ � test_ebAutha s
�z"SSHUserAuthClientTests.test_ebAuthc s` t �dt�� �� ��� �� � � ��fdd�}� ��fdd��dd� �� �� }|��j�� |�S )z�
getPublicKey() should return None. getPrivateKey() should return a
failed Deferred. getPassword() should return a failed Deferred.
getGenericAnswers() should return a failed Deferred.
r7 c s$ | � t� � �� }|��j����S rA )�trap�NotImplementedErrorr: r� ro �
addErrback�r r� )r� �check2r1 r# r$ r� v s
z3SSHUserAuthClientTests.test_defaults.<locals>.checkc s* | � t� � �d d d �}|��j����S rA )r r r@ r� ro r r )r� �check3r1 r# r$ r { s
z4SSHUserAuthClientTests.test_defaults.<locals>.check2c S s | � t� d S rA )r r r r# r# r$ r � rK z4SSHUserAuthClientTests.test_defaults.<locals>.check3)
r r( rL rO r� r2 r4 r� ro r )r1 r� r� r# )r� r r r1 r$ �
test_defaultsm s z$SSHUserAuthClientTests.test_defaults)r r r! r" r r� r� r� r� r� r� r r r r r r
r r r r r# r# r# r$ r� c s&
>
$ r� c @ s. e Zd Zedu r
dZG dd� d�Zdd� ZdS )�
LoopbackTestsN�)cannot run without cryptography or PyASN1c @ s" e Zd ZG dd� d�Zdd� ZdS )zLoopbackTests.Factoryc @ rB )z LoopbackTests.Factory.Service� TestServicec C s | j �� d S rA )r rc r0 r# r# r$ rN � rK z,LoopbackTests.Factory.Service.serviceStartedc C rI rA r# r0 r# r# r$ r� � rJ z,LoopbackTests.Factory.Service.serviceStoppedN)r r r! r= rN r� r# r# r# r$ rO � s rO c C s | j S rA )rO )r1 �avatarr= r# r# r$ rS � s z LoopbackTests.Factory.getServiceN)r r r! rO rS r# r# r# r$ rT � s rT c s t �� �td�j�� �}t�� �_��j_dd� �j_t�� |_||j_d �j_ |j_ dd� �j_
|j_
��� �j_ d�_ t
� }t|�}t� � � �t� � � �t� � � fdd�� _|�� � |�jj _t��j|j�}dd� �jj_d d� |jj_��� |�� ��fd
d �}|�|�S ) zW
Test that the userauth server and client play nicely with each other.
r7 c S r_ rb r# r� r# r# r$ re � rf z-LoopbackTests.test_loopback.<locals>.<lambda>r� c S rI rA r# r# r# r# r$ re � rf r c s t � j| �dkS )Nr� )�len�successfulCredentials)�aId)�checkerr# r$ re � s c S r_ )N�_ServerLoopbackr# r# r# r# r$ re � rf c S r_ )N�_ClientLoopbackr# r# r# r# r$ re � rf c s � � �jjjd� d S )Nr )r� r rR r= r� r� r# r$ r� � rE z*LoopbackTests.test_loopback.<locals>.check)r r r) rT rO r r% rR ra r� � sendKexInitrV �
passwordDelayrd r
r r~ rl rt �areDonerW r �
loopbackAsync� logPrefixrN r� )r1 �clientr} rW r� r� r# )r% r1 r� r$ �
test_loopback� s4
zLoopbackTests.test_loopback)r r r! r r� rT r. r# r# r# r$ r � s
r c @ s e Zd Zedu r
dZdd� ZdS )�ModuleInitializationTestsNr c C s, | � tjjd d� | � tjjd d� d S )N�< r� )r� r r �protocolMessagesr( r0 r# r# r$ �
test_messages� s � �z'ModuleInitializationTests.test_messages)r r r! r r� r2 r# r# r# r$ r/ � s r/ )8r" �typesr �typingr �zope.interfacer �twisted.conch.errorr r �twisted.cred.checkersr �twisted.cred.credentialsr r r
�twisted.cred.errorr �twisted.cred.portalr r
�twisted.internetr r �twisted.protocolsr �twisted.python.reflectr �
twisted.trialr r �__annotations__�twisted.conch.checkersr �twisted.conch.sshr r �twisted.conch.ssh.commonr �twisted.conch.testr r( r) rC rH r% rL rd rl rt ry �TestCaser{ r� r r/ r# r# r# r$ �<module> sR #
A } &<