qZhdZddlmZ ddlmZmZdZdZdZdZd Z d Z d Z Gd d Z Gdde Z Gdde ZGdde ZGdde ZdS)a sasl.py - support for SASL mechanism See https://www.python-ldap.org/ for details. Description: The ldap.sasl module provides SASL authentication classes. Each class provides support for one SASL mechanism. This is done by implementing a callback() - method, which will be called by the LDAPObject's sasl_bind_s() method Implementing support for new sasl mechanism is very easy --- see the examples of digest_md5 and gssapi. ) __version__T) _trace_level _trace_filei@i@i@i@i@i@i@ceZdZdZdZdZdS)sasla This class handles SASL interactions for authentication. If an instance of this class is passed to ldap's sasl_bind_s() method, the library will call its callback() method. For specific SASL authentication mechanisms, this method can be overridden cz|pi|_t|ts|d}||_dS)a The (generic) base class takes a cb_value_dictionary of question-answer pairs. Questions are specified by the respective SASL callback id's. The mech argument is a string that specifies the SASL mechaninsm to be uesd. utf-8N) cb_value_dict isinstancebytesencodemech)selfr rs U/var/www/lab.imftr.de/alumni/alumnizer_venv/lib/python3.11/site-packages/ldap/sasl.py__init__z sasl.__init__)s?+0b$&& (;;w''D c H|j||pd} tdkrNtjd|||t |t |j|fzt |ts|d}|S)a The callback method will be called by the sasl_bind_s() method several times. Each time it will provide the id, which tells us what kind of information is requested (the CB_* constants above). The challenge might be a short (English) text or some binary string, from which the return value is calculated. The prompt argument is always a human-readable description string; The defresult is a default value provided by the sasl library Currently, we do not use the challenge and prompt information, and return only information which is stored in the self.cb_value_dict cb_value_dictionary. Note that the current callback interface is not very useful for writing generic sasl GUIs, which would need to know all the questions to ask, before the answers are returned to the sasl lib (in contrast to one question at a time). Unicode strings are always converted to bytes. Tz7*** id=%d, challenge=%s, prompt=%s, defresult=%s -> %s r ) r getrrwritereprr r r )rcb_id challengeprompt defresult cb_results rcallbackz sasl.callback5s,&**5)<<B  q  !"]OO+// ::;; a#)U++ 2!((11IrN)__name__ __module__ __qualname____doc__rrrrrr s<   """""rrceZdZdZddZdS)cram_md5z: This class handles SASL CRAM-MD5 authentication. rclt|t|t|i}t||ddS)NzCRAM-MD5 CB_AUTHNAMECB_PASSCB_USERrrrauthc_idpasswordauthz_id auth_dicts rrzcram_md5.__init___s6  X X dIz22222rNrrr r!r"rr#rrr%r%Zs2333333rr%ceZdZdZddZdS) digest_md5z< This class handles SASL DIGEST-MD5 authentication. rclt|t|t|i}t||ddS)Nz DIGEST-MD5r'r+s rrzdigest_md5.__init__ms6  X X dI|44444rNr0r1r#rrr3r3hs2555555rr3ceZdZdZddZdS)gssapizJ This class handles SASL GSSAPI (i.e. Kerberos V) authentication. rcLt|t|iddS)NGSSAPIrrr*rr.s rrzgssapi.__init__{s# dWh/:::::rNr0r1r#rrr6r6vs2;;;;;;rr6ceZdZdZddZdS)externalz] This class handles SASL EXTERNAL authentication (i.e. X.509 client certificate) rcLt|t|iddS)NEXTERNALr9r:s rrzexternal.__init__s# dWh/<<<<rDs@  /........     77777777t 3 3 3 3 3t 3 3 3 5 5 5 5 5 5 5 5;;;;;T;;;=====t=====r