File: //lib/python3/dist-packages/twisted/conch/test/__pycache__/test_userauth.cpython-38.pyc
U
W[\ � @ s d Z ddlmZmZ ddlmZ ddlmZ ddlm Z m
Z
ddlm Z ddl m
Z
ddlmZmZ dd lmZmZ dd
lmZmZ dd lmZ dd lmZ dd
lm Z ddl m Z ed�r�ed�r�ddl m!Z! ddl"m#Z# ddl$m%Z%m&Z&m'Z' ddl(m)Z) n dZ%G dd� d�Z'G dd� d�Z&G dd� de&j*�Z+G d d � d e&j*�Z,G d d � d e&j*�Z-G d d!� d!e'j.�Z/ee�G d"d#� d#e0��Z1ee�G d$d%� d%e0��Z2ee�G d&d'� d'e0��Z3ee�G d(d)� d)e0��Z4G d*d+� d+e j5�Z6G d,d-� d-e j5�Z7G d.d/� d/e j5�Z8G d0d1� d1e j5�Z9dS )2zT
Tests for the implementation of the ssh-userauth service.
Maintainer: Paul Swartz
� )�absolute_import�division)� implementer)�ICredentialsChecker)�IUsernamePassword�ISSHPrivateKey)�
IAnonymous)�UnauthorizedLogin)�IRealm�Portal)�
ConchError�ValidPublicKey)�defer�task)�loopback)�
requireModule)�unittest)� _bytesChrZ cryptographyZpyasn1)�NS)�SSHProtocolChecker)�keys�userauth� transport)�keydataNc @ s e Zd ZG dd� d�ZdS )r c @ s e Zd ZdZdS )ztransport.SSHTransportBase�Q
A stub class so that later class definitions won't die.
N��__name__�
__module__� __qualname__�__doc__� r r �B/usr/lib/python3/dist-packages/twisted/conch/test/test_userauth.py�SSHTransportBase$ s r" N)r r r r" r r r r! r # s r c @ s e Zd ZG dd� d�ZdS )r c @ s e Zd ZdZdS )zuserauth.SSHUserAuthClientr Nr r r r r! �SSHUserAuthClient* s r# N)r r r r# r r r r! r ) s r c @ s2 e Zd ZdZdd� Zdd� Zd dd�Zd d
� ZdS ) �ClientUserAuthz"
A mock user auth client.
c C s, | j rtj�tj�S t�tj�tj��S dS )z�
If this is the first time we've been called, return a blob for
the DSA key. Otherwise, return a blob
for the RSA key.
N) Z
lastPublicKeyr �Key�
fromStringr �publicRSA_opensshr �succeed�publicDSA_openssh��selfr r r! � getPublicKey6 s
�zClientUserAuth.getPublicKeyc C s t �tj�tj��S )z@
Return the private key object for the RSA key.
)r r( r r% r& r �privateRSA_opensshr* r r r! �
getPrivateKeyC s z ClientUserAuth.getPrivateKeyNc C s
t �d�S )z/
Return 'foo' as the password.
� foo�r r( )r+ �promptr r r! � getPasswordJ s zClientUserAuth.getPasswordc C s
t �d�S )z>
Return 'foo' as the answer to two questions.
)�foor3 r0 )r+ �nameZ informationZanswersr r r! �getGenericAnswersQ s z ClientUserAuth.getGenericAnswers)N)r r r r r, r. r2 r5 r r r r! r$ 1 s
r$ c @ s e Zd ZdZdd� Zdd� ZdS )�
OldClientAuthz~
The old SSHUserAuthClient returned a cryptography key object from
getPrivateKey() and a string from getPublicKey
c C s t �tj�tj�j�S �N)r r( r r% r& r r- Z keyObjectr* r r r! r. _ s
�zOldClientAuth.getPrivateKeyc C s t j�tj��� S r7 )r r% r& r r' �blobr* r r r! r, d s zOldClientAuth.getPublicKeyN�r r r r r. r, r r r r! r6 Y s r6 c @ s e Zd ZdZdd� Zdd� ZdS )�ClientAuthWithoutPrivateKeyzP
This client doesn't have a private key, but it does have a public key.
c C s d S r7 r r* r r r! r. n s z)ClientAuthWithoutPrivateKey.getPrivateKeyc C s t j�tj�S r7 )r r% r& r r' r* r r r! r, r s z(ClientAuthWithoutPrivateKey.getPublicKeyNr9 r r r r! r: i s r: c @ sP e Zd ZdZG dd� de�ZG dd� de�Zdd� Zdd � Zd
d � Z d d
� Z
dS )�
FakeTransporta_
L{userauth.SSHUserAuthServer} expects an SSH transport which has a factory
attribute which has a portal attribute. Because the portal is important for
testing authentication, we need to be able to provide an interesting portal
object to the L{SSHUserAuthServer}.
In addition, we want to be able to capture any packets sent over the
transport.
@ivar packets: a list of 2-tuples: (messageType, data). Each 2-tuple is
a sent packet.
@type packets: C{list}
@param lostConnecion: True if loseConnection has been called on us.
@type lostConnection: L{bool}
c @ s e Zd ZdZdZdd� ZdS )zFakeTransport.ServicezW
A mock service, representing the other service offered by the server.
� nancyc C s d S r7 r r* r r r! �serviceStarted� s z$FakeTransport.Service.serviceStartedN)r r r r r4 r= r r r r! �Service� s r> c @ s e Zd ZdZdd� ZdS )zFakeTransport.Factoryzg
A mock factory, representing the factory that spawned this user auth
service.
c C s |dkrt jS dS )z2
Return our fake service.
� noneN)r; r> )r+ r �servicer r r! �
getService� s z FakeTransport.Factory.getServiceN)r r r r rA r r r r! �Factory� s rB c C s( | � � | _|| j_d| _| | _g | _d S �NF)rB �factory�portal�lostConnectionr �packets)r+ rE r r r! �__init__� s
zFakeTransport.__init__c C s | j �||f� dS )z8
Record the packet sent by the service.
N)rG �append)r+ Z messageType�messager r r! �
sendPacket� s zFakeTransport.sendPacketc C s dS )z�
Pretend that this transport encrypts traffic in both directions. The
SSHUserAuthServer disables password authentication if the transport
isn't encrypted.
Tr )r+ � directionr r r! � isEncrypted� s zFakeTransport.isEncryptedc C s
d| _ d S �NT)rF r* r r r! �loseConnection� s z FakeTransport.loseConnectionN) r r r r �objectr> rB rH rK rM rO r r r r! r; w s r; c @ s e Zd ZdZdd� ZdS )�Realmz�
A mock realm for testing L{userauth.SSHUserAuthServer}.
This realm is not actually used in the course of testing, so it returns the
simplest thing that could possibly work.
c G s t �|d d dd� f�S )Nr c S s d S r7 r r r r r! �<lambda>� � z%Realm.requestAvatar.<locals>.<lambda>r0 )r+ ZavatarIdZmindZ
interfacesr r r! �
requestAvatar� s zRealm.requestAvatarN)r r r r rT r r r r! rQ � s rQ c @ s e Zd ZdZefZdd� ZdS )�PasswordCheckerz�
A very simple username/password checker which authenticates anyone whose
password matches their username and rejects all others.
c C s& |j |jkrt�|j �S t�td��S )Nz Invalid username/password pair)�usernameZpasswordr r( �failr )r+ �credsr r r! �requestAvatarId� s z PasswordChecker.requestAvatarIdN)r r r r r �credentialInterfacesrY r r r r! rU � s rU c @ s e Zd ZdZefZdd� ZdS )�PrivateKeyCheckerz�
A very simple public key checker which authenticates anyone whose
public/private keypair is the same keydata.public/privateRSA_openssh.
c C sX |j tj�tj�� � krN|jd k rHtj�|j �}|�|j|j�rN|j S nt
� �t � �d S r7 ) r8 r r% r& r r' � signatureZverify�sigDatarV r
r )r+ rX �objr r r! rY � s
z!PrivateKeyChecker.requestAvatarIdN)r r r r r rZ rY r r r r! r[ � s r[ c @ s e Zd ZdZefZdS )�AnonymousCheckerzI
A simple checker which isn't supported by L{SSHUserAuthServer}.
N)r r r r r rZ r r r r! r_ � s r_ c @ s� e Zd ZdZedkrdZdd� Zdd� Zdd � Zd
d � Z d d
� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� ZdS ),�SSHUserAuthServerTestsz&
Tests for SSHUserAuthServer.
N� cannot run without cryptographyc C sb t � | _t| j�| _| j�t� � | j�t� � t�� | _ t
| j�| j _ | j � � | j j
�� d S r7 )rQ �realmr rE �registerCheckerrU r[ r �SSHUserAuthServer�
authServerr; r r= �supportedAuthentications�sortr* r r r! �setUp s
z SSHUserAuthServerTests.setUpc C s | j �� d | _ d S r7 )re �serviceStoppedr* r r r! �tearDown
s
z SSHUserAuthServerTests.tearDownc C s( | � | jjjd tjtd�d f� dS )z;
Check that the authentication has failed.
���s password,publickey� N)� assertEqualre r rG r ZMSG_USERAUTH_FAILUREr �r+ �ignoredr r r! � _checkFailed s
��z#SSHUserAuthServerTests._checkFailedc C s, | j �td�td� td� �}|�| j�S )z�
A client may request a list of authentication 'method name' values
that may continue by using the "none" authentication 'method name'.
See RFC 4252 Section 5.2.
r/ s servicer? )re �ssh_USERAUTH_REQUESTr � addCallbackrp )r+ �dr r r! �test_noneAuthentication s �z.SSHUserAuthServerTests.test_noneAuthenticationc sJ d� td�td�td�td�td�g�}� j�|�}� fdd�}|�|�S )z�
When provided with correct password authentication information, the
server should respond by sending a MSG_USERAUTH_SUCCESS message with
no other data.
See RFC 4252, Section 5.1.
rS r/ r? � passwordr c s � � � jjjtjdfg� d S �NrS �rm re r rG r ZMSG_USERAUTH_SUCCESS�ro r* r r! �check2 s
�zKSSHUserAuthServerTests.test_successfulPasswordAuthentication.<locals>.check)�joinr �chrre rq rr �r+ �packetrs ry r r* r! �%test_successfulPasswordAuthentication' s � z<SSHUserAuthServerTests.test_successfulPasswordAuthenticationc C sl d� td�td�td�td�td�g�}t�� | j_| j�|�}| �| jj j
g � | jj� d� |� | j
�S )a;
When provided with invalid authentication details, the server should
respond by sending a MSG_USERAUTH_FAILURE message which states whether
the authentication was partially successful, and provides other, open
options for authentication.
See RFC 4252, Section 5.1.
rS r/ r? ru r � bar� )rz r r{ r �Clockre �clockrq rm r rG �advancerr rp �r+ r} rs r r r! �!test_failedPasswordAuthentication9 s
� z8SSHUserAuthServerTests.test_failedPasswordAuthenticationc s� t j�tj��� }t j�tj�}td�td� td� d t|�� � t|� }d� j j
_ |� td�t
tj� | �}|t|�7 }� j �|�}� fdd�}|�|�S )zN
Test that private key authentication completes successfully,
r/ r? � publickey� �� testc s � � � jjjtjdfg� d S rv rw rx r* r r! ry Y s
�zMSSHUserAuthServerTests.test_successfulPrivateKeyAuthentication.<locals>.check)r r% r& r r' r8 r- r ZsshTypere r � sessionID�signr{ r �MSG_USERAUTH_REQUESTrq rr )r+ r8 r^ r} r\ rs ry r r* r! �'test_successfulPrivateKeyAuthenticationL s
��
� z>SSHUserAuthServerTests.test_successfulPrivateKeyAuthenticationc s� t �� � dd� }dd� }� fdd�}| �| jd|� | �| jd|� | �| jd |� td
�td � td � td
� }| j�|� | �� t�S )z�
ssh_USERAUTH_REQUEST should raise a ConchError if tryAuth returns
None. Added to catch a bug noticed by pyflakes.
c S s | � d� d S )Nz&request should have raised ConochError)rW rn r r r! �mockCbFinishedAuthf s zOSSHUserAuthServerTests.test_requestRaisesConchError.<locals>.mockCbFinishedAuthc S s d S r7 r )Zkind�user�datar r r! � mockTryAuthi s zHSSHUserAuthServerTests.test_requestRaisesConchError.<locals>.mockTryAuthc s � � | j� d S r7 )Zerrback�value)�reason�rs r r! �
mockEbBadAuthl s zJSSHUserAuthServerTests.test_requestRaisesConchError.<locals>.mockEbBadAuth�tryAuthZ_cbFinishedAuthZ
_ebBadAuths userr? s
public-keys data)r ZDeferred�patchre r rq �
assertFailurer )r+ r� r� r� r} r r� r! � test_requestRaisesConchError_ s z3SSHUserAuthServerTests.test_requestRaisesConchErrorc sb t j�tj��� � td�td� td� d td� t� � }�j�|�}� �fdd�}|� |�S )z@
Test that verifying a valid private key works.
r/ r? r� rl � ssh-rsac s* �� �jjjtjtd�t� � fg� d S )Nr� )rm re r rG r �MSG_USERAUTH_PK_OKr rx �r8 r+ r r! ry � s �z@SSHUserAuthServerTests.test_verifyValidPrivateKey.<locals>.check)
r r% r& r r' r8 r re rq rr r| r r� r! �test_verifyValidPrivateKeyz s �� z1SSHUserAuthServerTests.test_verifyValidPrivateKeyc C sV t j�tj��� }td�td� td� d td� t|� }| j�|�}|� | j
�S )�d
Test that private key authentication fails when the public key
is invalid.
r/ r? r� rl s ssh-dsa� r r% r& r r) r8 r re rq rr rp �r+ r8 r} rs r r r! �3test_failedPrivateKeyAuthenticationWithoutSignature� s �� zJSSHUserAuthServerTests.test_failedPrivateKeyAuthenticationWithoutSignaturec C s| t j�tj��� }t j�tj�}td�td� td� d td� t|� t|�|�� }d| j j
_ | j � |�}|�
| j�S )r� r/ r? r� r� r� r� )r r% r& r r' r8 r- r r� re r r� rq rr rp )r+ r8 r^ r} rs r r r! �0test_failedPrivateKeyAuthenticationWithSignature� s �� �
zGSSHUserAuthServerTests.test_failedPrivateKeyAuthenticationWithSignaturec C sj t j�tj��� }td�|dd� }td�td� td� d td� t|� }| j�|�}|� | j
�S ) z�
Private key authentication fails when the public key type is
unsupported or the public key is corrupt.
s ssh-bad-type� Nr/ r? r� rl r� r� r� r r r! �test_unsupported_publickey� s �� z1SSHUserAuthServerTests.test_unsupported_publickeyc C sR t �� }t| j�|_| j�t� � |�� |�� |j �
� | � |j ddg� dS )ah
L{SSHUserAuthServer} sets up
C{SSHUserAuthServer.supportedAuthentications} by checking the portal's
credentials interfaces and mapping them to SSH authentication method
strings. If the Portal advertises an interface that
L{SSHUserAuthServer} can't map, it should be ignored. This is a white
box test.
ru r� N) r rd r; rE r rc r_ r= ri rf rg rm �r+ �serverr r r! � test_ignoreUnknownCredInterfaces� s
�z7SSHUserAuthServerTests.test_ignoreUnknownCredInterfacesc C s� | � d| jj� t�� }t| j�|_dd� |j_|� � |�
� | � d|j� t�� }t| j�|_dd� |j_|� � |�
� | � d|j� dS )z�
Test that the userauth service does not advertise password
authentication if the password would be send in cleartext.
ru c S s dS rC r ��xr r r! rR � rS zISSHUserAuthServerTests.test_removePasswordIfUnencrypted.<locals>.<lambda>c S s | dkS �N�inr r� r r r! rR � rS N) ZassertInre rf r rd r; rE r rM r= ri Z assertNotIn)r+ �clearAuthServer�halfAuthServerr r r! � test_removePasswordIfUnencrypted� s z7SSHUserAuthServerTests.test_removePasswordIfUnencryptedc C s� t | j�}|�t� � t�� }t|�|_dd� |j_|� � |�
� | � |j dg� t�� }t|�|_dd� |j_|� � |�
� | � |j dg� dS )z�
If the L{SSHUserAuthServer} is not advertising passwords, then an
unencrypted connection should not cause any warnings or exceptions.
This is a white box test.
c S s dS rC r r� r r r! rR � rS zSSSHUserAuthServerTests.test_unencryptedConnectionWithoutPasswords.<locals>.<lambda>r� c S s | dkS r� r r� r r r! rR � rS N)
r rb rc r[ r rd r; r rM r= ri rm rf )r+ rE r� r� r r r! �*test_unencryptedConnectionWithoutPasswords� s$
�
�zASSHUserAuthServerTests.test_unencryptedConnectionWithoutPasswordsc C s~ t �� }t�� |_t| j�|_|�� |j� d� |�
� | � |jj tj
dttj� td� td� fg� | �|jj� dS )z0
Test that the login times out.
鰚 � s you took too longrS N)r rd r r� r� r; rE r r= r� ri rm rG �MSG_DISCONNECTr{ �)DISCONNECT_NO_MORE_AUTH_METHODS_AVAILABLEr Z
assertTruerF �r+ ZtimeoutAuthServerr r r! �test_loginTimeout� s$
�����z(SSHUserAuthServerTests.test_loginTimeoutc C s\ t �� }t�� |_t| j�|_|�� |� � |j�
d� | � |jj g � | �
|jj� dS )zN
Test that stopping the service also stops the login timeout.
r� N)r rd r r� r� r; rE r r= ri r� rm rG � assertFalserF r� r r r! �test_cancelLoginTimeout s
z.SSHUserAuthServerTests.test_cancelLoginTimeoutc sr d� td�td�td�td�td�g�}t�� � j_td�D ] }� j�|�}� jj� d� q<� fd d
�}|�
|�S ) zm
Test that the server disconnects if the client fails authentication
too many times.
rS r/ r? ru r r � r� c s: � � � jjjd tjdttj� td� td� f� d S )Nrk r� s too many bad authsrS )rm re r rG r� r{ r� r rx r* r r! ry $ s �����z:SSHUserAuthServerTests.test_tooManyAttempts.<locals>.check) rz r r{ r r� re r� �rangerq r� rr )r+ r} �irs ry r r* r! �test_tooManyAttempts s � z+SSHUserAuthServerTests.test_tooManyAttemptsc C sL t d�t d� t d� td� t d� }t�� | j_| j�|�}|�| j�S )zo
If the user requests a service that we don't support, the
authentication should fail.
r/ rS ru r ) r r{ r r� re r� rq rr rp r� r r r! �test_failIfUnknownService- s ( z0SSHUserAuthServerTests.test_failIfUnknownServicec sV dd� }� � � jd|� � � � jdd� � fdd�}� j�ddd�}� �|t��|�S ) aZ
tryAuth() has two edge cases that are difficult to reach.
1) an authentication method auth_* returns None instead of a Deferred.
2) an authentication type that is defined does not have a matching
auth_* method.
Both these cases should return a Deferred which fails with a
ConchError.
c S s d S r7 r )r} r r r! �mockAuthC s z>SSHUserAuthServerTests.test_tryAuthEdgeCases.<locals>.mockAuthZauth_publickeyZ
auth_passwordNc s � j �dd d �}� �|t�S )Nru )re r� r� r )ro Zd2r* r r! �
secondTestI s z@SSHUserAuthServerTests.test_tryAuthEdgeCases.<locals>.secondTestr� )r� re r� r� r rr )r+ r� r� Zd1r r* r! �test_tryAuthEdgeCases8 s z,SSHUserAuthServerTests.test_tryAuthEdgeCases)r r r r r �skiprh rj rp rt r~ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r! r` � s. r` c @ s� e Zd ZdZedkrdZdd� Zdd� Zdd � Zd
d � Z d d
� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� ZdS )"�SSHUserAuthClientTestsz&
Tests for SSHUserAuthClient.
Nra c C s4 t dt�� �| _td �| j_d| jj_| j�� d S )Nr/ r� )r$ r; r> �
authClientr r� r= r* r r r! rh [ s
z SSHUserAuthClientTests.setUpc C s | j �� d | _ d S r7 )r� ri r* r r r! rj b s
z SSHUserAuthClientTests.tearDownc C sT | � | jjd� | � | jjjd� | � | jjjtjt d�t d� t d� fg� dS )z;
Test that client is initialized properly.
r/ r< r? N)
rm r� r� �instancer4 r rG r r� r r* r r r! � test_initg s ��z SSHUserAuthClientTests.test_initc s@ dg� � fdd�}|| j j_| j �d� | �� d | j j� dS )z9
Test that the client succeeds properly.
Nc s | � d< d S )Nr r )r@ �r� r r! �stubSetServicew s zDSSHUserAuthClientTests.test_USERAUTH_SUCCESS.<locals>.stubSetServicerS r )r� r Z
setServiceZssh_USERAUTH_SUCCESSrm r� )r+ r� r r� r! �test_USERAUTH_SUCCESSr s
z,SSHUserAuthClientTests.test_USERAUTH_SUCCESSc C s� | j �td�d � | �| j jjd tjtd�td� td� d td� ttj �
t j ��
� � f� | j �td�d � ttj �
t j��
� �}| �| j jjd tjtd�td� td� d td� | f� | j �td�ttj �
t j��
� � � t| j jj�ttj� td� td� td� d td� | }tj �
t j�}| �| j jjd tjtd�td� td� d td� | t|�|�� f� d S )
zJ
Test that the client can authenticate with a public key.
r� rl rk r/ r< s ssh-dssr� � N)r� �ssh_USERAUTH_FAILUREr rm r rG r r� r r% r& r r) r8 r' �ssh_USERAUTH_PK_OKr� r{ r- r� )r+ r8 r] r^ r r r! �test_publickey~ sv ����������� � ����������� ��z%SSHUserAuthClientTests.test_publickeyc C sz t dt�� �}td�|_d|j_|�� |�d� g |j_| �|� d�� | �
|jjt j t
d�t
d� t
d� fg� dS )z�
If the SSHUserAuthClient doesn't return anything from signData,
the client should start the authentication over again by requesting
'none' authentication.
r/ Nr� r� rS r< r? )r: r; r> r r� r= r� rG � assertIsNoner� rm r r� r )r+ r� r r r! �!test_publickey_without_privatekey� s �
��z8SSHUserAuthClientTests.test_publickey_without_privatekeyc s. dd� � j _� j �d�}� fdd�}|�|�S )z{
If there's no public key, auth_publickey should return a Deferred
called back with a False value.
c S s d S r7 r r� r r r! rR � rS z:SSHUserAuthClientTests.test_no_publickey.<locals>.<lambda>r� c s � � | � d S r7 )r� ��resultr* r r! ry � s z7SSHUserAuthClientTests.test_no_publickey.<locals>.check)r� r, r� rr )r+ rs ry r r* r! �test_no_publickey� s z(SSHUserAuthClientTests.test_no_publickeyc C s� | j �td�d � | �| j jjd tjtd�td� td� d td� f� | j �td�td� � | �| j jjd tjtd�td� td� d td�d f� d S )
zx
Test that the client can authentication with a password. This
includes changing the password.
ru rl rk r/ r< rS r� r� N) r� r� r rm r rG r r� r� r* r r r! �
test_password� s( ������
��z$SSHUserAuthClientTests.test_passwordc C s" dd� | j _| �| j �d�� dS )zK
If getPassword returns None, tryAuth should return False.
c S s d S r7 r r r r r! rR � rS z9SSHUserAuthClientTests.test_no_password.<locals>.<lambda>ru N)r� r2 r� r� r* r r r! �test_no_password� s z'SSHUserAuthClientTests.test_no_passwordc C s` | j �td�td� td� d td� d � | �| j jjd tjdtd� td� f� dS ) zj
Make sure that the client can authenticate with the keyboard
interactive method.
rS s s
Password: rl rk s r/ N)r� Z'ssh_USERAUTH_PK_OK_keyboard_interactiver rm r rG r ZMSG_USERAUTH_INFO_RESPONSEr* r r r! �test_keyboardInteractive� s ��� ��z/SSHUserAuthClientTests.test_keyboardInteractivec C sP d| j _g | j j_| j �d� | �| j jjtjtd�td� td� fg� dS )z�
If C{SSHUserAuthClient} gets a MSG_USERAUTH_PK_OK packet when it's not
expecting it, it should fail the current authentication and move on to
the next type.
s unknownrS r/ r< r? N) r� ZlastAuthr rG r� rm r r� r r* r r r! �"test_USERAUTH_PK_OK_unknown_method� s
���z9SSHUserAuthClientTests.test_USERAUTH_PK_OK_unknown_methodc s� � fdd�}� fdd�}|� j _|� j _� j �td�d � � �� j jjd tj td�td � td
� d td� f� � j �td �d � � �� j jjd
d� ddg� dS )z�
ssh_USERAUTH_FAILURE should sort the methods by their position
in SSHUserAuthClient.preferredOrder. Methods that are not in
preferredOrder should be sorted at the end of that list.
c s � j j�dd� d S )N� � here is data�r� r rK r r* r r! �auth_firstmethod� s zNSSHUserAuthClientTests.test_USERAUTH_FAILURE_sorting.<locals>.auth_firstmethodc s � j j�dd� dS )N� �
other dataTr� r r* r r! �auth_anothermethod� s zPSSHUserAuthClientTests.test_USERAUTH_FAILURE_sorting.<locals>.auth_anothermethods anothermethod,passwordrl rk r/ r< ru s" firstmethod,anothermethod,passwordr� ���N)r� r� )r� r� )
r� r� r� r� r rm r rG r r� )r+ r� r� r r* r! � test_USERAUTH_FAILURE_sorting� s, �����
��z4SSHUserAuthClientTests.test_USERAUTH_FAILURE_sortingc C sT | j �td�d � | j �td�d � | �| j jjd tjdtd� d f� dS ) z�
If there are no more available user authentication messages,
the SSHUserAuthClient should disconnect with code
DISCONNECT_NO_MORE_AUTH_METHODS_AVAILABLE.
ru rl r� rk s s( no more authentication methods availables N)r� r� r rm r rG r� r* r r r! �%test_disconnectIfNoMoreAuthentication
s ���z<SSHUserAuthClientTests.test_disconnectIfNoMoreAuthenticationc C sH g | j j_| j �d� | �| j jjtjtd�td� td� fg� dS )z�
_ebAuth (the generic authentication error handler) should send
a request for the 'none' authentication method.
Nr/ r< r? )r� r rG Z_ebAuthrm r r� r r* r r r! � test_ebAuth s
��z"SSHUserAuthClientTests.test_ebAuthc s` t �dt�� �� ��� �� � � ��fdd�}� ��fdd��dd� �� �� }|��j�� |�S )z�
getPublicKey() should return None. getPrivateKey() should return a
failed Deferred. getPassword() should return a failed Deferred.
getGenericAnswers() should return a failed Deferred.
r/ c s$ | � t� � �� }|��j����S r7 )�trap�NotImplementedErrorr2 rr rW �
addErrback�r� rs )r� �check2r+ r r! ry - s
z3SSHUserAuthClientTests.test_defaults.<locals>.checkc s* | � t� � �d d d �}|��j����S r7 )r� r� r5 rr rW r� r� )r� �check3r+ r r! r� 1 s
z4SSHUserAuthClientTests.test_defaults.<locals>.check2c S s | � t� d S r7 )r� r� r� r r r! r� 5 s z4SSHUserAuthClientTests.test_defaults.<locals>.check3)
r r# r; r> r� r, r. rr rW r� )r+ ry rs r )r� r� r� r+ r! �
test_defaults$ s �z$SSHUserAuthClientTests.test_defaults)r r r r r r� rh rj r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r! r� R s$ r� c @ s. e Zd ZedkrdZG dd� d�Zdd� ZdS )�
LoopbackTestsN�)cannot run without cryptography or PyASN1c @ s" e Zd ZG dd� d�Zdd� ZdS )zLoopbackTests.Factoryc @ s e Zd ZdZdd� Zdd� ZdS )z LoopbackTests.Factory.Service� TestServicec C s | j �� d S r7 )r rO r* r r r! r= G s z,LoopbackTests.Factory.Service.serviceStartedc C s d S r7 r r* r r r! ri K s z,LoopbackTests.Factory.Service.serviceStoppedN)r r r r4 r= ri r r r r! r> C s r> c C s | j S r7 )r> )r+ Zavatarr4 r r r! rA O s z LoopbackTests.Factory.getServiceN)r r r r> rA r r r r! rB B s rB c s t �� �td�j�� �}t�� �_��j_dd� �j_t�� |_||j_d �j_ |j_ dd� �j_
|j_
��� �j_ d�_ t
� }t|�}t� � � �t� � � �t� � � fdd�� _|�� � |�jj _t��j|j�}dd� �jj_d d� |jj_��� |�� ��fd
d �}|�|�S ) zW
Test that the userauth server and client play nicely with each other.
r/ c S s dS rN r r� r r r! rR ] rS z-LoopbackTests.test_loopback.<locals>.<lambda>rS c S s d S r7 r r r r r! rR c rS r c s t � j| �dkS )Nr� )�lenZsuccessfulCredentials)ZaId)�checkerr r! rR m s c S s dS )NZ_ServerLoopbackr r r r r! rR s rS c S s dS )NZ_ClientLoopbackr r r r r! rR t rS c s � � �jjjd� d S )Nr� )rm r r@ r4 rx r� r r! ry y s z*LoopbackTests.test_loopback.<locals>.check)r rd r$ rB r> r r" r@ rM r� Z sendKexInitrD Z
passwordDelayrQ r r rc rU r[ ZareDonerE r Z
loopbackAsyncZ logPrefixr= rr )r+ Zclientrb rE rs ry r )r� r+ r� r! �
test_loopbackS s6
�
zLoopbackTests.test_loopback)r r r r r� rB r� r r r r! r� < s r� c @ s e Zd ZedkrdZdd� ZdS )�ModuleInitializationTestsNr� c C s, | � tjjd d� | � tjjd d� d S )N�< r� )rm r rd ZprotocolMessagesr# r* r r r! �
test_messages� s ��z'ModuleInitializationTests.test_messages)r r r r r� r� r r r r! r� s r� ):r Z
__future__r r Zzope.interfacer Ztwisted.cred.checkersr Ztwisted.cred.credentialsr r r Ztwisted.cred.errorr Ztwisted.cred.portalr
r Ztwisted.conch.errorr r
Ztwisted.internetr r Ztwisted.protocolsr Ztwisted.python.reflectr Z
twisted.trialr Ztwisted.python.compatr r{ Ztwisted.conch.ssh.commonr Ztwisted.conch.checkersr Ztwisted.conch.sshr r r Ztwisted.conch.testr r# r$ r6 r: r" r; rP rQ rU r[ r_ ZTestCaser` r� r� r� r r r r! �<module> sP (G
\ kC