��$[� � @ s� d Z d g Z d Z d Z d Z d d l Z d d l m Z m Z m Z m
Z
m Z m Z m
Z
d d l m Z m Z m Z m Z m Z d d l m Z d d
l m Z Gd d � d e � Z Gd
d � d e � Z Gd d � d e � Z e
e e e e e � � e e e � � e � Z Gd d � d e � Z d Z d Z d Z d Z d Z e e d � � Z e e d � � Z! e j" Z" e e" _# e e g e" _$ e% e! d � r�e! j& Z& e e& _# e e g e& _$ e! j' Z' e e' _# e e e e � e e � g e' _$ e! j( Z( e e( _# e e g e( _$ e! j) Z) e e) _# e e g e) _$ e! j* Z* e e* _# e e g e* _$ Gd d � d � Z+ d d � Z, e- d k r�d d l. Z. d d l/ Z/ d d � Z0 e+ � Z+ e0 d e/ j1 � � Z2 e+ j, e2 e/ j/ � � e3 d! j4 e+ j5 e+ j6 � � d S)"z�
PAM module for python
Provides an authenticate function that will allow the caller to authenticate
a user against the Pluggable Authentication Modules (PAM) on the system.
Implemented using ctypes, so no compilation is necessary.
�pamz1.8.4z David Ford <david@blue-labs.org>z 2018 June 15� N)�CDLL�POINTER� Structure� CFUNCTYPE�cast�byref�sizeof)�c_void_p�c_size_t�c_char_p�c_char�c_int)�memmove)� find_libraryc @ s1 e Z d Z d Z d e f g Z d d � Z d S)� PamHandlez&wrapper class for pam_handle_t pointer�handlec C s t j | � d | _ d S)Nr )r �__init__r )�self� r �/pam.pyr ' s
zPamHandle.__init__N)�__name__�
__module__� __qualname__�__doc__r
�_fields_r r r r r r # s r c @ s: e Z d Z d Z d e f d e f g Z d d � Z d S)�
PamMessagez'wrapper class for pam_message structure� msg_style�msgc C s d | j | j f S)Nz<PamMessage %i '%s'>)r r )r r r r �__repr__/ s zPamMessage.__repr__N)r r r r r r r r r r r r r + s r c @ s: e Z d Z d Z d e f d e f g Z d d � Z d S)� PamResponsez(wrapper class for pam_response structure�resp� resp_retcodec C s d | j | j f S)Nz<PamResponse %i '%s'>)r" r! )r r r r r 6 s zPamResponse.__repr__N)r r r r r r r r r r r r r 2 s r c @ s. e Z d Z d Z d e f d e f g Z d S)�PamConvz$wrapper class for pam_conv structure�convZ appdata_ptrN)r r r r � conv_funcr
r r r r r r# ; s r# � � � � � �c�pam_endc @ s= e Z d Z d Z d Z d d � Z d d d d d � Z d S)
r r Nc C s d S)Nr )r r r r r g s z pam.__init__Zloginzutf-8Tc s t � � f d d � � } t j d k r� t | t � rH | j | � } t � t � rf � j | � � t | t � r� | j | � } nZ t | t � r� | j | � } t � t � r� � j | � � t | t � r� | j | � } d | k sd � k sd | k rd | _ d | _ d St � � � t
� } t | d � } t | | t
| � t
| � � } | d k r�| | _ d | _ d St | d � } | d k }
|
r�| r�t | t � } | | _ t | | � | _ t j d k r�| j j | � | _ t t d
� rt | | � |
S)
a� username and password authentication for the given service.
Returns True for success, or False for failure.
self.code (integer) and self.reason (string) are always stored and may
be referenced for the reason why authentication failed. 0/'Success' will
be stored for success.
Python3 expects bytes() for ctypes inputs. This function will make
necessary conversions using the supplied encoding.
Inputs:
username: username to authenticate
password: password in plain text
service: PAM service to authenticate against, defaults to 'login'
Returns:
success: True
failure: False
c s� t | t t � � } t | t t � � } | | d <xy t | � D]k } | | j j t k rA t t � � d t t
� � } t | � t � � � | | | _ d | | _
qA Wd S)zxSimple conversation function that responds to any
prompt where the echo is off with the supplied passwordr r& )�callocr r r r �range�contentsr �PAM_PROMPT_ECHO_OFF�lenr
r r! r" )Z
n_messagesZmessagesZ
p_responseZapp_data�addr�response�i�dst)� cpassword�passwordr r �my_conv� s
z!pam.authenticate.<locals>.my_convr( s r) zstrings may not contain NULFr zpam_start() failedr, )r( )r( )r% �sys� version_info�
isinstance�str�encode�unicode�code�reasonr r r# � pam_startr �pam_authenticate� pam_setcred�PAM_REINITIALIZE_CRED� pam_strerror�decode�hasattr�libpamr, ) r �usernamer7 Zservice�encodingZ
resetcredsr8 r r$ ZretvalZ auth_successr )r6 r7 r � authenticatej sJ $ !
zpam.authenticate)r r r r? r@ r rK r r r r r c s c O s t � j | | � S)zB
Compatibility function for older versions of python-pam.
)r rK )ZvargsZdargsr r r rK � s rK �__main__c sW � f d d � } t j | � t j d k r= t | � } n t | � } t j � | S)Nc s t j � � t j � d S)N)�readlineZ insert_textZ redisplayr )�textr r �hook� s
z input_with_prefill.<locals>.hookr( )r( )rM Zset_pre_input_hookr9 r: �inputZ raw_input)�promptrN rO �resultr )rN r �input_with_prefill� s
rS z
Username: z{} {})7r �__all__� __version__�
__author__Z __released__r9 Zctypesr r r r r r r r
r r r
r r Z ctypes.utilr r r r r% r# r0 ZPAM_PROMPT_ECHO_ONZ
PAM_ERROR_MSGZ
PAM_TEXT_INFOrD ZlibcrH r- ZrestypeZargtypesrG r, rA rC rE rB r rK r rM ZgetpassrS ZgetuserrI �print�formatr? r@ r r r r �<module> sb 4(0 ! _