Bi dZdgZdZdZdZddlZddlmZmZm Z m Z m Z m Z m Z ddlmZmZmZmZmZdd lmZdd lmZGd d e ZGd de ZGdde Ze eeeeeeeeeZGdde ZdZdZdZdZdZeedZ eedZ!e jDZ"ee"_#eege"_$e%e!dre!jLZ&ee&_#eege&_$e!jNZ'ee'_#eeeeeege'_$e!jPZ(ee(_#eege(_$e!jRZ)ee)_#eege)_$e!jTZ*ee*_#eege*_$GddZ+dZ,e-dk(rxddl.Z.ddl/Z/dZ0e+Z+e0de/jbZ2e+jYe2e/j^e3djie+jje+jlyy) z PAM module for python Provides an authenticate function that will allow the caller to authenticate a user against the Pluggable Authentication Modules (PAM) on the system. Implemented using ctypes, so no compilation is necessary. pamz1.8.4z David Ford z 2018 June 15N)CDLLPOINTER Structure CFUNCTYPEcastbyrefsizeof)c_void_pc_size_tc_char_pc_charc_int)memmove) find_libraryc eZdZdZdefgZdZy) PamHandlez&wrapper class for pam_handle_t pointerhandlec<tj|d|_y)Nr)r__init__rselfs ./usr/local/lib/python3.12/dist-packages/pam.pyrzPamHandle.__init__'s4  N)__name__ __module__ __qualname____doc__r _fields_rrrrr#s0H%'Hrrc&eZdZdZdefdefgZdZy) PamMessagez'wrapper class for pam_message structure msg_stylemsgc8d|j|jfzS)Nz)r#r$rs r__repr__zPamMessage.__repr__/s%(BBBrN)rrrrrr rr&r rrr"r"+s1u%x'8:HCrr"c&eZdZdZdefdefgZdZy) PamResponsez(wrapper class for pam_response structureresp resp_retcodec8d|j|jfzS)Nz)r*r)rs rr&zPamResponse.__repr__6s&$*;*;TYY)GGGrN)rrrrr rrr&r rrr(r(2s2(#ne%<>HHrr(c eZdZdZdefdefgZy)PamConvz$wrapper class for pam_conv structureconv appdata_ptrN)rrrr conv_funcr rr rrr-r-;s.)$}h&?AHrr-cpam_endc"eZdZdZdZdZddZy)rrNcyNr rs rrz pam.__init__gs rc t fd}tjdk\rdt|tr|j |}ttrj |t|tru|j |}nct|t r|j |}tt rj |t|t r|j |}d|vsdvsd|vrd|_d|_yt t}t|d}t||t|t|} | dk7r| |_d|_yt|d} | dk(} | r|rt|t } | |_t#|| |_tjdk\r |jj%||_t't(d r t+|| | S) ausername and password authentication for the given service. Returns True for success, or False for failure. self.code (integer) and self.reason (string) are always stored and may be referenced for the reason why authentication failed. 0/'Success' will be stored for success. Python3 expects bytes() for ctypes inputs. This function will make necessary conversions using the supplied encoding. Inputs: username: username to authenticate password: password in plain text service: PAM service to authenticate against, defaults to 'login' Returns: success: True failure: False ctt|tt}t|t t}||d<t |D]r}||j jtk(s$tt dztt}t|t |||_ d||_ ty)zxSimple conversation function that responds to any prompt where the echo is off with the supplied passwordrr1)callocr r(rrrangecontentsr#PAM_PROMPT_ECHO_OFFlenrrr)r*) n_messagesmessages p_responseapp_dataaddrresponseidst cpasswordpasswords rmy_convz!pam.authenticate..my_convs *f[&9:DD'+"67H$JqM:& 1A;''115HH Xq&.ACCCM:'*HQK$/0HQK,  1 rr3r4zstrings may not contain NULFrzpam_start() failedr7)r0sys version_info isinstancestrencodeunicodecodereasonr rr- pam_startr pam_authenticate pam_setcredPAM_REINITIALIZE_CRED pam_strerrordecodehasattrlibpamr7) rusernamerKserviceencoding resetcredsrLrr.retval auth_successrJs ` @r authenticatezpam.authenticatejs,       t #(C(X__X5N((C(X__X5N('3'W^^H5M'(G,#??84(G,#??84'7+">>(3 h 'X"5G9KDI7DKX& !$7HeDk5=I Q; DI.DK!&!,{ J )>?F "662   t #++,,X6DK 69 % FF #r)loginzutf-8T)rrrrUrVrrer rrrrcs D F Urc6tj|i|S)zB Compatibility function for older versions of python-pam. )rre)vargsdargss rreres 35  u . ..r__main__cfd}tj|tjdk\r t |}n t |}tj|S)NcXtjtjyr:)readline insert_text redisplay)textsrhookz input_with_prefill..hooks   &    rrM)rmset_pre_input_hookrOrPinput raw_input)promptrprqresults ` rinput_with_prefillrwsJ ! ##D)   t #6]Fv&F##% rz Username: z{} {})7r__all__ __version__ __author__ __released__rOctypesrrrrrr r r r r rrr ctypes.utilrrr"r(r0r-r@PAM_PROMPT_ECHO_ON PAM_ERROR_MSG PAM_TEXT_INFOrZlibcr^r=restypeargtypesr]r7rWrYr[rXrrerrmgetpassrwgetuserr_printformatrUrVr rrrs)w 1  KKK>>$ CCH)H eUGGJ,?$@''R]J^B_ai j BiB    c!23 e!45 KK$%x0 69 &G %GO!*E 2G",, ! %x1A79CUV ".. ! &. "// $ &. "33!&.\\~/ z  %C!,0ABHXw01 '..3:: .//r