tfyUdZddlZddlmZddlmZddlmZddlm Z e e e d< ddl Z dZ n #e$rdZ YnwxYwdd lmZdd lmZdd lmZmZmZmZdd lmZmZdd lmZddlmZddlm Z m!Z!ddl"m#Z#ddl$m%Z%ddl&m'Z'ddl(m)Z)e%drdZ*ddl+m,Z,ddl-m.Z.m/Z/ddl0m1Z1ddl2m3Z3ndZ*e4edddZ5ndZ5Gdde)Z6Gdde)Z7Gd d!e)Z8Gd"d#e)Z9Gd$d%e)Z:Gd&d'e)Z;Gd(d)e)Z<ed*d+gZ=Gd,d-e>Z?Gd.d/e)Z@dS)0z& Tests for L{twisted.conch.checkers}. N) encodebytes) namedtuple)BytesIO)Optional cryptSkipzcannot run without crypt module) verifyObject)'InMemoryUsernamePasswordDatabaseDontUse)ISSHPrivateKeyIUsernamePassword SSHPrivateKeyUsernamePassword)UnauthorizedLoginUnhandledCredentials)Deferred)util)ShadowDatabase UserDatabase)FilePath) requireModule)MockOS)TestCase cryptography)checkers)NotEnoughAuthenticationValidPublicKey)keys)keydatazcan't run without cryptographygeteuidz0Cannot run without effective UIDs (questionable)cJeZdZdZepeZdZdZdZ dZ dZ dZ dZ d Zd S) HelperTestszl Tests for helper functions L{verifyCryptedPassword}, L{_pwdGetByName} and L{_shadowGetByName}. c,t|_dSN)rmockosselfs _/var/www/surfInsights/venv3-11/lib/python3.11/site-packages/twisted/conch/test/test_checkers.pysetUpzHelperTests.setUp@shh cd}d}tj||}|tj||d||dS)z L{verifyCryptedPassword} returns C{True} if the plaintext password passed to it matches the encrypted password passed to it. secret stringsaltyz5{!r} supposed to be valid encrypted password for {!r}Ncrypt assertTruerverifyCryptedPasswordformatr%passwordsaltcrypteds r&test_verifyCryptedPasswordz&HelperTests.test_verifyCryptedPasswordCsg #+h--   *7H = = C J J       r(cd}d}tj||}|tj||d||dS)z L{verifyCryptedPassword} returns True if the provided cleartext password matches the provided MD5 password hash. r2z$1$saltz3{!r} supposed to be valid encrypted password for {}Nr,r1s r&test_verifyCryptedPasswordMD5z)HelperTests.test_verifyCryptedPasswordMD5Rsg +h--   *7H = = A H H       r(cd}d}tj||}|tj||d||dS)z L{verifyCryptedPassword} returns C{False} if the plaintext password passed to it does not match the encrypted password passed to it. z string secretr*z7{!r} not supposed to be valid encrypted password for {}N)r- assertFalserr/r0)r%r2wrongr4s r&test_refuteCryptedPasswordz&HelperTests.test_refuteCryptedPasswordasi #+h11   *7E : : E L L       r(c t}|ddddddd|td||tjd|dd S) z L{_pwdGetByName} returns a tuple of items from the UNIX /etc/passwd database if the L{pwd} module is present. alicesecrit first last/foo/bin/shpwdN)raddUserpatchr assertEqual _pwdGetByNamegetpwnamr%userdbs r&test_pwdGetByNamezHelperTests.test_pwdGetByNamepst w!Q fiPPP 8UF+++ /88&//':R:RSSSSSr(c|tdd|tjddS)zW If the C{pwd} module isn't present, L{_pwdGetByName} returns L{None}. rDNr=)rFr assertIsNonerHr$s r&test_pwdGetByNameWithoutPwdz'HelperTests.test_pwdGetByNameWithoutPwdzs? 8UD))) (099:::::r(c t}|ddddddddd |td |d |j_d |j_|td |j|tj d| d||jj dd g||jj dd gdS)z L{_shadowGetByName} returns a tuple of items from the UNIX /etc/shadow database if the L{spwd} is present. bob passphraser?r@spwd) osrN) rrErFrr#euidegidrrG_shadowGetByNamegetspnam seteuidCalls setegidCallsrJs r&test_shadowGetByNamez HelperTests.test_shadowGetByNames  !!ulAq!Q1a@@@ 8VV,,,   4t{+++ 25996??5;Q;QRRR 1At9=== 1At9=====r(c |tdd|tjd||jjg||jjgdS)zP L{_shadowGetByName} returns L{None} if C{spwd} is not present. rXNrQ)rFrrNr^rGr#r`rar$s r&test_shadowGetByNameWithoutSpwdz+HelperTests.test_shadowGetByNameWithoutSpwdsu 8VT*** (3E::;;; 12666 1266666r(N)__name__ __module__ __qualname____doc__rdependencySkipskipr'r5r7r;rLrOrbrdr(r&r r 8s  &D            TTT;;;>>>"77777r(r c^eZdZdZepeZddZdZdZ dZ dZ d Z d Z d Zd Zd ZdZdS)SSHPublicKeyDatabaseTestsz, Tests for L{SSHPublicKeyDatabase}. returnNc tj|_td|_td|_d|jzdz|jzdz|_t|_| td|jt| |_ t|j j tsJ|j d|_|jt'}|dd d d d |j j d ||j_dS)Nfoobareggspamst1 s foo t2 s egg r[.sshuserr2r?r@rA /bin/shell)rSSHPublicKeyDatabasecheckerrkey1key2contentrr#rFrrmktemppath isinstancestrchildsshDirmakedirsrrE_userdbrJs r&r'zSSHPublicKeyDatabaseTests.setUps466  **  ++  )L849DyP hh  4t{+++T[[]]++ $).#.....ioof--      IN     & r(c||jg}||ddt||ddd|t |ddS)zJ L{SSHPublicKeyDatabase} is deprecated as of version 15.0 )offendingFunctionsrcategorymessageztwisted.conch.checkers.SSHPublicKeyDatabase was deprecated in Twisted 15.0.0: Please use twisted.conch.checkers.SSHPublicKeyChecker, initialized with an instance of twisted.conch.checkers.UNIXAuthorizedKeysFiles instead.r?N) flushWarningsr'rGDeprecationWarninglen)r% warningsShowns r&test_deprecatedz)SSHPublicKeyDatabaseTests.test_deprecateds**tzl*KK  q)*57IJJJ  ! Y ' F    ]++Q/////r(c|j||jt dd}d|_||j|d|_||j|d|_| |j|dS)Nuserpasswordrprqs notallowed) rr~ setContentryr blobr.rvcheckKeyr9)r%filenamerss r& _testCheckKeyz'SSHPublicKeyDatabaseTests._testCheckKeys (##..t|<<<55   --d33444   --d33444!  ..t4455555r(c|d||jjg||jjgdS)z L{SSHPublicKeyDatabase.checkKey} should retrieve the content of the authorized_keys file and check the keys against that file. authorized_keysNrrGr#r`rar$s r& test_checkKeyz'SSHPublicKeyDatabaseTests.test_checkKeysU ,--- 12666 1266666r(c|d||jjg||jjgdS)z L{SSHPublicKeyDatabase.checkKey} should retrieve the content of the authorized_keys2 file and check the keys against that file. authorized_keys2Nrr$s r&test_checkKey2z(SSHPublicKeyDatabaseTests.test_checkKey2sU -... 12666 1266666r(c|jd|jd|jd|jjfd}d|j_d|j_ | |jd|| td|jtd d }d |_ ||j|||jjgd ||jjd dgdS)z If the key file is readable, L{SSHPublicKeyDatabase.checkKey} should switch its uid/gid to the ones of the authenticated user. rrcDd|S)Nr)chmod)r\keyFile savedSeteuids r&seteuidz>SSHPublicKeyDatabaseTests.test_checkKeyAsRoot..seteuids% MM% <%% %r(rYrZrr[rrrp)rr?rrYr@N)rr~rryr addCleanupr#rr\r]rFrr rr.rvrrGr`ra)r%rrsrrs @@r&test_checkKeyAsRootz-SSHPublicKeyDatabaseTests.test_checkKeyAsRootsD +##$5664<((( e  u---{*  & & & & & &    4; 7333 4t{+++55   --d33444 1???CCC 1At9=====r(c Xd}jd|tddtjdt jtj d}j |}fd}| |S)z L{SSHPublicKeyDatabase.requestAvatarId} should return the avatar id passed in if its C{_checkKey} method returns True. cdSNTrkignoreds r& _checkKeyzASSHPublicKeyDatabaseTests.test_requestAvatarId.._checkKey 4r(rtestssh-rsafooc4|ddSNrrGavatarIdr%s r&_verifyz?SSHPublicKeyDatabaseTests.test_requestAvatarId.._verify   Xw / / / / /r() rFrvr rpublicRSA_opensshrKey fromStringprivateRSA_opensshsignrequestAvatarId addCallback)r%r credentialsdrs` r&test_requestAvatarIdz.SSHPublicKeyDatabaseTests.test_requestAvatarIds     4<Y777#    %  H   : ; ; @ @ H H    L ( ( 5 5 0 0 0 0 0}}W%%%r(cd}||jd|tddtjdd}|j|}||tS)a( L{SSHPublicKeyDatabase.requestAvatarId} should raise L{ValidPublicKey} if the credentials represent a valid key without a signature. This tells the user that the key is valid for login, but does not actually allow that user to do so without a signature. cdSrrkrs r&rzQSSHPublicKeyDatabaseTests.test_requestAvatarIdWithoutSignature.._checkKey%rr(rrrN)rFrvr rrr assertFailurerr%rrrs r&$test_requestAvatarIdWithoutSignaturez>SSHPublicKeyDatabaseTests.test_requestAvatarIdWithoutSignaturesu    4<Y777# Z!:D$   L ( ( 5 5!!!^444r(cd}||jd||jd}||tS)z If L{SSHPublicKeyDatabase.checkKey} returns False, C{_cbRequestAvatarId} should raise L{UnauthorizedLogin}. cdSNFrkrs r&rzKSSHPublicKeyDatabaseTests.test_requestAvatarIdInvalidKey.._checkKey55r(rN)rFrvrrr)r%rrs r&test_requestAvatarIdInvalidKeyz8SSHPublicKeyDatabaseTests.test_requestAvatarIdInvalidKey/sW     4<Y777 L ( ( . .!!!%6777r(c Xd}||jd|tddtjdt jtj d}|j |}| |tS)z Valid keys with invalid signatures should cause L{SSHPublicKeyDatabase.requestAvatarId} to return a {UnauthorizedLogin} failure cdSrrkrs r&rzQSSHPublicKeyDatabaseTests.test_requestAvatarIdInvalidSignature.._checkKeyCrr(rrrr) rFrvr rrrrrprivateDSA_opensshrrrrrs r&$test_requestAvatarIdInvalidSignaturez>SSHPublicKeyDatabaseTests.test_requestAvatarIdInvalidSignature<s    4<Y777#    %  H   : ; ; @ @ H H    L ( ( 5 5!!!%6777r(cd}jd|tddddd}j|}fd}|||t S) z~ Exceptions raised while verifying the key should be normalized into an C{UnauthorizedLogin} failure. cdSrrkrs r&rzSSSHPublicKeyDatabaseTests.test_requestAvatarIdNormalizeException.._checkKeyWrr(rrNsblobssigDatassigctj}t |d|S)Nr?)flushLoggedErrorsr BadKeyErrorrGr)failureerrorsr%s r&_verifyLoggedExceptionz`SSHPublicKeyDatabaseTests.test_requestAvatarIdNormalizeException.._verifyLoggedException^s:++D,<==F   S[[! , , ,Nr()rFrvr r addErrbackrr)r%rrrrs` r&&test_requestAvatarIdNormalizeExceptionz@SSHPublicKeyDatabaseTests.test_requestAvatarIdNormalizeExceptionQs     4<Y777#GT7JOO L ( ( 5 5      +,,,!!!%6777r(rnN)rerfrgrheuidSkiprirjr'rrrrrrrrrrrkr(r&rmrms  %~D&&&&4000 666777777>>>6&&&0555$ 8 8 8888*88888r(rmc:eZdZdZeZdZdZdZdZ dZ dZ dS) SSHProtocolCheckerTestsz* Tests for L{SSHProtocolChecker}. cPtj}||jg|tj||jt g||jt tjdS)z L{SSHProcotolChecker.registerChecker} should add the given checker to the list of registered checkers. N)rSSHProtocolCheckerrGcredentialInterfacesregisterCheckerrur assertIsInstancer%rvs r&test_registerCheckerz,SSHProtocolCheckerTests.test_registerCheckerns -// 5r:::  ) + +    57GHHH   ^ ,h.K     r(c\tj}||jg|tjt ||jt g||jt tjdS)z If a specific interface is passed into L{SSHProtocolChecker.registerChecker}, that interface should be registered instead of what the checker specifies in credentialIntefaces. N)rrrGrrrur rrs r&!test_registerCheckerWithInterfacez9SSHProtocolCheckerTests.test_registerCheckerWithInterface}s-// 5r::: = ? ?ARSSS 58I7JKKK   . /1N     r(ctj}t}|dd|||t dd}fd}||S)z L{SSHProtocolChecker.requestAvatarId} should defer to one if its registered checkers to authenticate a user. rc4|ddSrrrs r& _callbackz?SSHProtocolCheckerTests.test_requestAvatarId.._callbackrr()rrr rErrr r)r%rvpasswordDatabaserrs` r&rz,SSHProtocolCheckerTests.test_requestAvatarIds -//BDD  '222 0111  # #$4Wg$F$F G G 0 0 0 0 0}}Y'''r(cJtj}d}||d|t}|dd|||tdd}||tS)z If the client indicates that it is never satisfied, by always returning False from _areDone, then L{SSHProtocolChecker} should raise L{NotEnoughAuthentication}. cdSrrk)rs r&_areDonezYSSHProtocolCheckerTests.test_requestAvatarIdWithNotEnoughAuthentication.._areDonerr(areDoner) rrrFr rErrr rr)r%rvrrrs r&/test_requestAvatarIdWithNotEnoughAuthenticationzGSSHProtocolCheckerTests.test_requestAvatarIdWithNotEnoughAuthentications -//    7Ix000BDD  '222 0111  # #$4Wg$F$F G G!!!%<===r(ctj}|tdd}||t S)z If the passed credentials aren't handled by any registered checker, L{SSHProtocolChecker} should raise L{UnhandledCredentials}. r)rrrr rr)r%rvrs r&%test_requestAvatarIdInvalidCredentialz=SSHProtocolCheckerTests.test_requestAvatarIdInvalidCredentialsG -//  # #$4Wg$F$F G G!!!%9:::r(cx|tjddS)zV The default L{SSHProcotolChecker.areDone} should simply return True. N)r.rrrr$s r& test_areDonez$SSHProtocolCheckerTests.test_areDones3 355==dCCDDDDDr(N) rerfrgrhrirjrrrrrrrkr(r&rrgs D        ((( >>>&;;;EEEEEr(rcjeZdZdZepeZdeededdfdZ dZ dZ d Z d Z d Zd Zd ZdZdS)UNIXPasswordDatabaseTestsz, Tests for L{UNIXPasswordDatabase}. rusernamernNcX||||dS)z Assert that the L{Deferred} passed in is called back with the value 'username'. This represents a valid login for this TestCase. @param d: a L{Deferred} from an L{IChecker.requestAvatarId} method. N)rGsuccessResultOf)r%rrs r&assertLoggedInz(UNIXPasswordDatabaseTests.assertLoggedIns. --a00(;;;;;r(c tj}d}t}|d|ddddddd|d d ddd d dt }|dd ddddddd |d |d dddddddd |td||td|t }|td|d|_d|_ tdd }| | |d| |jg| |jgd!|_| | |d!| |jd"dg| |jd"dgd#S)$z L{UNIXPasswordDatabase} with no arguments has checks the C{pwd} database and then the C{spwd} database. c`tj||}tj|d|z}|S)Nz$1$)r-)rr2r3r4s r&r4z?UNIXPasswordDatabaseTests.test_defaultCheckers..crypteds-;x22Dk(EDL99GNr(r=r2r?r@foorBrCrQxbar/barr:rSrTrUrVrW rDrXr[rYrZalicerbobrN)rUNIXPasswordDatabaserrErrFrrr\r]r rrrGr`rar)r%rvr4rDrXr#creds r&test_defaultCheckersz.UNIXPasswordDatabaseTests.test_defaultCheckerss /11    nn WWWj111a     E31eVY??? Wgq!Q1a;;; UGGE:661b"b"bQQQ 8UC((( 8VT*** 4v&&&  +66 G33D998DDD ,b111 ,b111  G33D996BBB ,q$i888 ,q$i88888r(cF||tjdS)a Asserts that the L{Deferred} passed in is erred back with an L{UnauthorizedLogin} L{Failure}. This reprsents an invalid login for this TestCase. NOTE: To work, this method's return value must be returned from the test method, or otherwise hooked up to the test machinery. @param d: a L{Deferred} from an L{IChecker.requestAvatarId} method. @type d: L{Deferred} @rtype: L{None} N)failureResultOfrrr%rs r&assertUnauthorizedLoginz1UNIXPasswordDatabaseTests.assertUnauthorizedLogins# Q :;;;;;r(c $tjdd}t}|d|dddddtj|jg}||tdd dd S) zo L{UNIXPasswordDatabase} takes a list of functions to check for UNIX user information. secretanybodyr?r@rrrCsanybodyssecretN) r-rrErrrIrrr )r%r2rKrvs r&test_passInCheckersz-UNIXPasswordDatabaseTests.test_passInCheckerss ;x22y(Aq%KKK/0ABB   # #$4Z$K$K L Lj     r(cd}d}|td|tj|g}tdd}|||ddS)z If the encrypted password provided by the getpwnam function is valid (verified by the L{verifyCryptedPassword} function), we callback the C{requestAvatarId} L{Deferred} with the username. c||kSr"rkr4pws r&r/zLUNIXPasswordDatabaseTests.test_verifyPassword..verifyCryptedPassword b= r(c ||gSr"rkrs r&rIz?UNIXPasswordDatabaseTests.test_verifyPassword..getpwnams h' 'r(r/usernameNrFrrr rrr%r/rIrv credentials r&test_verifyPasswordz-UNIXPasswordDatabaseTests.test_verifyPasswords ! ! ! ( ( ( 846KLLL/ ;;%k;??  G33J??MMMMMr(cd}tj|g}tdd}|||dS)z} If the getpwnam function raises a KeyError, the login fails with an L{UnauthorizedLogin} exception. c t|r")KeyErrorrs r&rIz?UNIXPasswordDatabaseTests.test_failOnKeyError..getpwnam+s8$$ $r(rrN)rrr r r)r%rIrvrs r&test_failOnKeyErrorz-UNIXPasswordDatabaseTests.test_failOnKeyError%s\  % % %/ ;;%k;??  $$W%<%.verifyCryptedPassword8rr(c |dgS)Nrrkrs r&rIzBUNIXPasswordDatabaseTests.test_failOnBadPassword..getpwnam;s k* *r(r/rrN)rFrrr r rrs r&test_failOnBadPasswordz0UNIXPasswordDatabaseTests.test_failOnBadPassword2s     + + + 846KLLL/ ;;%k;??  $$W%<%.verifyCryptedPasswordKrr(c |dgS)Nznot the passwordrkrs r& getpwnam1zFUNIXPasswordDatabaseTests.test_loopThroughFunctions..getpwnam1Ns01 1r(c |dgS)Nr2rkrs r& getpwnam2zFUNIXPasswordDatabaseTests.test_loopThroughFunctions..getpwnam2Qs j) )r(r/rrNr)r%r/r'r)rvrs r&test_loopThroughFunctionsz3UNIXPasswordDatabaseTests.test_loopThroughFunctionsCs ! ! ! 2 2 2 * * * 846KLLL/I0FGG%k;??  G33J??MMMMMr(c t}|ddddddd|ddddddd|d d ddddd|td |tjtjg}t d d }|||t dd}|||t dd}|||dS)z If the password returned by any function is C{""}, C{"x"}, or C{"*"} it is not compared against the supplied password. Instead it is skipped. r=r?r@rrrQrcarol*rDrr(rxscarol*N) rrErFrrrHr r r)r%rDrvrs r&test_failOnSpecialz,UNIXPasswordDatabaseTests.test_failOnSpecialYs, nn GRAr5%888 E31b%777 GS!QE5999 8UC(((/1G0HII#.. $$W%<%zCAuthorizedKeyFileReaderTests.test_ignoresComments..s1r(s this is notsand this is notNrrreadAuthorizedKeyFilerGlistr%fileobjresults r&test_ignoresCommentsz1AuthorizedKeyFileReaderTests.test_ignoresCommentsvsV     /EE .*<=tF||LLLLLr(ctd}tj|d}|dgt |dS)zw L{checkers.readAuthorizedKeyFile} ignores leading whitespace in lines, as well as empty lines sg # ignore not ignored c|Sr"rkr7s r&r8zYAuthorizedKeyFileReaderTests.test_ignoresLeadingWhitespaceAndEmptyLines..sAr(parseKeys not ignoredNr9r<s r&*test_ignoresLeadingWhitespaceAndEmptyLineszGAuthorizedKeyFileReaderTests.test_ignoresLeadingWhitespaceAndEmptyLinessV     /++NNN .)4<<88888r(cd}td}tj||}|dgt |dS)z L{checkers.readAuthorizedKeyFile} does not raise an exception when a key fails to parse (raises a L{twisted.conch.ssh.keys.BadKeyError}), but rather just keeps going cX|drtjd|S)Nfzfailed to parse) startswithrr)lines r& failOnSomezKAuthorizedKeyFileReaderTests.test_ignoresUnparsableKeys..failOnSomes-t$$ :&'8999Kr(sfailed key good keyrBsgood keyNr9)r%rJr=r>s r&test_ignoresUnparsableKeysz7AuthorizedKeyFileReaderTests.test_ignoresUnparsableKeyssZ    122/*MMM +V 55555r(N) rerfrgrhrirjr?rDrKrkr(r&r4r4osU D M M M 9 9 966666r(r4c(eZdZdZeZdZdZdZdS)InMemorySSHKeyDBTestsz0 Tests for L{checkers.InMemorySSHKeyDB} chtjddgi}ttj|dS)z_ L{checkers.InMemorySSHKeyDB} implements L{checkers.IAuthorizedKeysDB} rskeyN)rInMemorySSHKeyDBrIAuthorizedKeysDBr%keydbs r&test_implementsInterfacez.InMemorySSHKeyDBTests.test_implementsInterfaces4 )8fX*>??X/77777r(ctjddgi}|gt|ddS)z If the user is not in the mapping provided to L{checkers.InMemorySSHKeyDB}, an empty iterator is returned by L{checkers.InMemorySSHKeyDB.getAuthorizedKeys} rskeysrNrrOrGr;getAuthorizedKeysrQs r&test_noKeysForUnauthorizedUserz4InMemorySSHKeyDBTests.test_noKeysForUnauthorizedUsersM )8gY*?@@ T%"9"9&"A"ABBCCCCCr(ctjdddgi}|ddgt|ddS)z If the user is in the mapping provided to L{checkers.InMemorySSHKeyDB}, an iterator with all the keys is returned by L{checkers.InMemorySSHKeyDB.getAuthorizedKeys} rabNrUrQs r&test_allKeysForAuthorizedUserz3InMemorySSHKeyDBTests.test_allKeysForAuthorizedUsersS )8dD\*BCC $tE,C,CH,M,M'N'NOOOOOr(N) rerfrgrhrirjrSrWr[rkr(r&rMrMsZ D888DDDPPPPPr(rMc<eZdZdZeZd dZdZdZdZ dZ d Z dS) UNIXAuthorizedKeysFilesTestsz8 Tests for L{checkers.UNIXAuthorizedKeysFiles}. rnNc  t||_t|jjtsJ|jt |_|jddddd|jjd|j d|_ |j |j d}| d d d g|_ dS) Nr=r2r?r@zalice lastnamertrrrs key 1 key 2skey 1skey 2) rrzr{r|r}rrrKrEr~rr expectedKeys)r%authorizedKeyss r&r'z"UNIXAuthorizedKeysFilesTests.setUpsT[[]]++ $).#..... "nn      IN    ioof--  **+<==!!/222%x0r(cltj|j}ttj|dS)zg L{checkers.UNIXAuthorizedKeysFiles} implements L{checkers.IAuthorizedKeysDB}. N)rUNIXAuthorizedKeysFilesrKrrPrQs r&rSz5UNIXAuthorizedKeysFilesTests.test_implementsInterfaces/ 0==X/77777r(ctj|jd}|gt |ddS)z If the user is not in the user database provided to L{checkers.UNIXAuthorizedKeysFiles}, an empty iterator is returned by L{checkers.UNIXAuthorizedKeysFiles.getAuthorizedKeys}. c|Sr"rkr7s r&r8zMUNIXAuthorizedKeysFilesTests.test_noKeysForUnauthorizedUser..QRr(rBrN)rrbrKrGr;rVrQs r&rWz;UNIXAuthorizedKeysFilesTests.test_noKeysForUnauthorizedUsersO 0{{SSS T%"9"9&"A"ABBCCCCCr(c|jddtj|jd}||jdgzt| ddS)a If the user is in the user database provided to L{checkers.UNIXAuthorizedKeysFiles}, an iterator with all the keys in C{~/.ssh/authorized_keys} and C{~/.ssh/authorized_keys2} is returned by L{checkers.UNIXAuthorizedKeysFiles.getAuthorizedKeys}. rskey 3c|Sr"rkr7s r&r8z`UNIXAuthorizedKeysFilesTests.test_allKeysInAllAuthorizedFilesForAuthorizedUser..rer(rBrN) rr~rrrbrKrGr_r;rVrQs r&1test_allKeysInAllAuthorizedFilesForAuthorizedUserzNUNIXAuthorizedKeysFilesTests.test_allKeysInAllAuthorizedFilesForAuthorizedUsers ,--88BBB0{{SSS    *D1H1H1R1R,S,S     r(ctj|jd}||jt |ddS)z L{checkers.UNIXAuthorizedKeysFiles.getAuthorizedKeys} returns only the keys in C{~/.ssh/authorized_keys} and C{~/.ssh/authorized_keys2} if they exist. c|Sr"rkr7s r&r8zJUNIXAuthorizedKeysFilesTests.test_ignoresNonexistantFile..rer(rBrN)rrbrKrGr_r;rVrQs r&test_ignoresNonexistantFilez8UNIXAuthorizedKeysFilesTests.test_ignoresNonexistantFilesR 0{{SSS *D1H1H1R1R,S,STTTTTr(c |jdtj|jd}||jt| ddS)z L{checkers.UNIXAuthorizedKeysFiles.getAuthorizedKeys} returns only the keys in C{~/.ssh/authorized_keys} and C{~/.ssh/authorized_keys2} if they are readable. rc|Sr"rkr7s r&r8zIUNIXAuthorizedKeysFilesTests.test_ignoresUnreadableFile..rer(rBrN) rr~rrrbrKrGr_r;rVrQs r&test_ignoresUnreadableFilez7UNIXAuthorizedKeysFilesTests.test_ignoresUnreadableFile su ,--668880{{SSS *D1H1H1R1R,S,STTTTTr(r) rerfrgrhrirjr'rSrWrhrkrnrkr(r&r]r]s D1111.888DDD    UUUUUUUUr(r]_KeyDBrVceZdZdZdS)_DummyExceptionz0 Fake exception to be used for testing. N)rerfrgrhrkr(r&rqrqs Dr(rqc@eZdZdZeZdZdZdZdZ dZ dZ dZ d S) SSHPublicKeyCheckerTestsz4 Tests for L{checkers.SSHPublicKeyChecker}. c $tddtjdtjtjd|_td|_ tj |j |_ dS)NrrrcVtjtjgSr")rrrrr)_s r&r8z0SSHPublicKeyCheckerTests.setUp../stx':':7;T'U'U&Vr()r rrrrrrrrrorRrSSHPublicKeyCheckerrvr$s r&r'zSSHPublicKeyCheckerTests.setUp'st(    %  H   : ; ; @ @ H H   VVWW 3DJ?? r(cd|j_||j|jt dS)z Calling L{checkers.SSHPublicKeyChecker.requestAvatarId} with credentials that do not have a signature fails with L{ValidPublicKey}. N)r signaturer rvrrr$s r& test_credentialsWithoutSignaturez9SSHPublicKeyCheckerTests.test_credentialsWithoutSignature2sI &*"  L ( ()9 : :N     r(cd|j_||j|jt jdS)z Calling L{checkers.SSHPublicKeyChecker.requestAvatarId} with credentials that have a bad key fails with L{keys.BadKeyError}. r(N)rrr rvrrrr$s r&test_credentialsWithBadKeyz3SSHPublicKeyCheckerTests.test_credentialsWithBadKey<sL !$  L ( ()9 : :D.failfs!## #r(verifyN) rFrrr rvrrrrrq)r%rs r&test_failureVerifyingKeyz1SSHPublicKeyCheckerTests.test_failureVerifyingKey_sx $ $ $ 48Xt,,,  L ( ()9 : :rs6  """""" C=LLLII2221III2 /.....IIIIII GFFFFFFF++++++????????,,,,,,000000,,,,,,++++++=  6N&&&&&&KKKKKKKK&&&&&&*******5N 72y$+HHAHb7b7b7b7b7(b7b7b7JG8G8G8G8G8G8G8G8TUEUEUEUEUEhUEUEUEpmDmDmDmDmDmDmDmD`16161616168161616hPPPPPHPPPDMUMUMUMUMU8MUMUMU` H23 4 4     i   V<V<V<V<V