????
Your IP : 216.73.216.67
a
�8jK� � @ sZ d Z ddlmZ ddlmZ ddlZddlZddlZddlZddl Z ddl
Z
ddl Z ddl Z ddl
Z
ddlZddlmZ ddlmZ ddlZddlmZ ddlZddlmZ dd lmZ dd
l m Z m Z m Z m Z m!Z! dd l"m#Z#m$Z$ dd l%m&Z&m'Z' dd
l(m)Z*m+Z+ ddl,m-Z- ddl,m.Z. ddl/m0Z0 ddl1m2Z2m3Z3 ddl4m5Z5 ddl6m7Z7 ddl8m9Z9m:Z:m;Z;m<Z<m=Z=m>Z>m?Z?m@Z@ ddlAmBZB ddlCmDZD ddlEmFZF ddl"mGZG ddlHmIZImJZJ z4ddlKmLZLmMZMmNZNmOZOmPZPmQZQmRZRmSZSmTZTmUZU W nD eV�y0 ddlWmLZLmMZMmNZNmOZOmPZPmQZQmRZRmSZSmTZTmUZU Y n0 ejX�rHddlYmZZZ n dd l[m\ZZ ejX�r`e]Z^e�_e`�Zad Zbd Zcd d � Zdd!d"� Zed#d$� Zfd%d&� ZgdEd(d)�ZhdFd+d,�ZidGd-d.�ZjdHd/d0�ZkG d1d2� d2�ZlG d3d4� d4eR�ZmG d5d6� d6em�ZnG d7d8� d8en�ZoG d9d:� d:eo�ZpG d;d<� d<ep�ZqG d=d>� d>e�ZrG d?d@� d@er�ZsG dAdB� dB�ZtG dCdD� dDer�ZudS )Ia`
RPC client and shared RPC client/server functionality.
This module adds some additional functionality on top of the ``xmlrpc.client``
module in the Python standard library (``xmlrpclib`` in Python 2).
For documentation on the ``xmlrpclib`` module, see:
http://docs.python.org/2/library/xmlrpclib.html
Also see the `ipaserver.rpcserver` module.
� )�absolute_import)�DecimalN)�SSLError)�x509)� DNSException)� Connectible)� LDAP_GENERALIZED_TIME_FORMAT)�errors_by_code� UnknownError� NetworkError�XMLRPCMarshallError� JSONError)�errors� capabilities)�context�
Connection)�Encoding�IPACertificate)�ipautil)�session_storage)�Cookie)�DNSName� query_srv)�_)�create_https_connection)� KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN�KRB5KRB_AP_ERR_TKT_EXPIRED�
KRB5_FCC_PERM�KRB5_FCC_NOFILE�KRB5_CC_FORMAT�KRB5_REALM_CANT_RESOLVE�KRB5_CC_NOTFOUND�
get_principal)�DN)� Principal)� VERSION_WITHOUT_CAPABILITIES)�api)�json_encode_binary�json_decode_binary)
�Binary�Fault�DateTime�dumps�loads� ServerProxy� Transport�
ProtocolError�MININT�MAXINT)�RemoteDisconnected)�
BadStatusLineZ ipa_sessionzX-IPA-Session-Cookiec
C sH zt �| t|� W n0 tyB } ztt|���W Y d}~n
d}~0 0 dS )z�
Given a principal create or update the session data for that
principal in the persistent secure storage.
Raises ValueError if unable to perform the action for any reason.
N)r Z
store_data�CCACHE_COOKIE_KEY� Exception�
ValueError�str)� principal�data�e� r< �./usr/lib/python3.9/site-packages/ipalib/rpc.py�%update_persistent_client_session_data� s r> c
C sD zt �| t�W S ty> } ztt|���W Y d}~n
d}~0 0 dS )z�
Given a principal return the stored session data for that
principal from the persistent secure storage.
Raises ValueError if unable to perform the action for any reason.
N)r �get_datar5 r6 r7 r8 �r9 r; r< r< r= �#read_persistent_client_session_data� s rA c
C sF zt �| t� W n0 ty@ } ztt|���W Y d}~n
d}~0 0 dS )z�
Given a principal remove the session data for that
principal from the persistent secure storage.
Raises ValueError if unable to perform the action for any reason.
N)r Z remove_datar5 r6 r7 r8 r@ r< r< r= �%delete_persistent_client_session_data� s rB c sb t | �ttfv r&t� fdd�| D ��S t| t�rJt� fdd�| �� D ��S t | �tu r^t| �S t | �tu rrt | �S t| t
�r�| t k s�| t kr�t | �S t| t
�r�t| �S t| tj�r�t�� d�r�t| �S | �t�S t| t�r�t�� d�r�dt | �iS t | �S t| t��rt | �S t| tjtf��r8t�| � t j ��� d�S t| tj ��r^t�| � t j ��� d�S | S )a�
Wrap all ``str`` in ``xmlrpc.client.Binary``.
Because ``xmlrpc.client.dumps()`` will itself convert all ``unicode``
instances into UTF-8 encoded ``str`` instances, we don't do it here.
So in total, when encoding data for an XML-RPC packet, the following
transformations occur:
* All ``str`` instances are treated as binary data and are wrapped in
an ``xmlrpc.client.Binary()`` instance.
* Only ``unicode`` instances are treated as character data. They get
converted to UTF-8 encoded ``str`` instances (although as mentioned,
not by this function).
Also see `xml_unwrap()`.
:param value: The simple scalar or simple compound value to wrap.
c 3 s | ]}t |� �V qd S �N��xml_wrap��.0�v��versionr< r= � <genexpr>� � zxml_wrap.<locals>.<genexpr>c 3 s | ]\}}|t |� �fV qd S rC rD �rG �krH rI r< r= rK � s Zdatetime_valuesZdns_name_values� __dns_name__�ascii)!�type�list�tuple�
isinstance�dict�items�bytesr) r �unicode�intr1 r2 r# r8 �datetimer Zclient_has_capabilityr+ �strftimer r r$ � crypto_x509Z Certificater �base64� b64encodeZ public_bytes�
x509_EncodingZDER�decodeZCertificateSigningRequest)�valuerJ r< rI r= rE � sJ
�
��
��rE �UTF-8c s� t | ttttf�r| S | du r"| S t | t�r6| �� �S t | ttf�rZt� fdd�| D ��S t | t �r�d| v rxt
| d �S t � fdd�| � � D ��S n,t | t �r�| j
S t | t�r�tj�t| �d�S t| ��dS )aI
Unwrap all ``xmlrpc.Binary``, decode all ``str`` into ``unicode``.
When decoding data from an XML-RPC packet, the following transformations
occur:
* The binary payloads of all ``xmlrpc.client.Binary`` instances are
returned as ``str`` instances.
* All ``str`` instances are treated as UTF-8 encoded Unicode strings.
They are decoded and the resulting ``unicode`` instance is returned.
Also see `xml_wrap()`.
:param value: The value to unwrap.
:param encoding: The Unicode encoding to use (defaults to ``'UTF-8'``).
Nc 3 s | ]}t |� �V qd S rC ��
xml_unwraprF ��encodingr< r= rK rL z xml_unwrap.<locals>.<genexpr>rO c 3 s | ]\}}|t |� �fV qd S rC rc rM re r< r= rK
s z%Y%m%dT%H:%M:%S)rT rX rY �float�boolrW r` rR rS rU r rV r) r: r+ rZ �strptimer8 � TypeError)ra rf r< re r= rd � s&
�
rd Fc C s* t | �tu rt| |�} n t| |||dd�S )a�
Encode an XML-RPC data packet, transparently wraping ``params``.
This function will wrap ``params`` using `xml_wrap()` and will
then encode the XML-RPC data packet using ``xmlrpc.client.dumps()``
(from the Python standard library).
For documentation on the ``xmlrpc.client.dumps()`` function, see:
http://docs.python.org/library/xmlrpc.client.html#convenience-functions
Also see `xml_loads()`.
:param params: A ``tuple`` or an ``xmlrpc.client.Fault`` instance.
:param methodname: The name of the method to call if this is a request.
:param methodresponse: Set this to ``True`` if this is a response.
:param encoding: The Unicode encoding to use (defaults to ``'UTF-8'``).
T)�
methodname�methodresponserf �
allow_none)rQ rS rE r, )�paramsrJ rk rl rf r< r< r= � xml_dumps s �ro c C s$ t | jt�r t| j| j�|��S | S rC )rT � faultStringrW r* � faultCoder` )r; rf r< r< r= � decode_fault7 s rr c
C sL zt | �\}}t|�|fW S tyF } zt|��W Y d}~n
d}~0 0 dS )a�
Decode the XML-RPC packet in ``data``, transparently unwrapping its params.
This function will decode the XML-RPC packet in ``data`` using
``xmlrpc.client.loads()`` (from the Python standard library). If ``data``
contains a fault, ``xmlrpc.client.loads()`` will itself raise an
``xmlrpc.client.Fault`` exception.
Assuming an exception is not raised, this function will then unwrap the
params in ``data`` using `xml_unwrap()`. Finally, a
``(params, methodname)`` tuple is returned containing the unwrapped params
and the name of the method being called. If the packet contains no method
name, ``methodname`` will be ``None``.
For documentation on the ``xmlrpc.client.loads()`` function, see:
http://docs.python.org/2/library/xmlrpclib.html#convenience-functions
Also see `xml_dumps()`.
:param data: The XML-RPC packet to decode.
N)r- rd r* rr )r: rf rn �methodr; r< r< r= � xml_loads> s
rt c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )� DummyParserc C s
g | _ d S rC )r: ��selfr< r< r= �__init__] s zDummyParser.__init__c C s | j �|� d S rC )r: �append)rw r: r< r< r= �feed` s zDummyParser.feedc C s d� | j�S )NrL )�joinr: rv r< r< r= �closec s zDummyParser.closeN)�__name__�
__module__� __qualname__rx rz r| r< r< r< r= ru \ s ru c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �MultiProtocolTransportz,Transport that handles both XML-RPC and JSONc O s t �| � |�dd �| _d S )N�protocol)r/ rx �getr� �rw �args�kwargsr< r< r= rx j s
z MultiProtocolTransport.__init__c C s& | j dkrt� }||fS t�| �S d S )N�json)r� ru r/ � getparser)rw �parserr< r< r= r� n s
z MultiProtocolTransport.getparserc C sF | j dkr|�dd� n |�dd� |�dtt|��� |�|� d S )Nr� z Content-Typezapplication/jsonztext/xmlzContent-Length)r� � putheaderr8 �lenZ
endheaders)rw �
connection� request_bodyr< r< r= � send_contentu s
z#MultiProtocolTransport.send_contentN)r} r~ r �__doc__rx r� r� r< r< r< r= r� g s r� c @ s e Zd ZdZdd� ZdS )�LanguageAwareTransportz(Transport sending Accept-Language headerc C s� t �| |�\}}}z$t�tjd�jddd�d �� }W n tjyN d}Y n0 t|t �s^g }|�
d|� dd �f� |�
d
d t |� f� |||fS ) N� �.� )�maxsplitr �en_uszAccept-Languager �-ZRefererzhttps://%s/ipa/xml)
r� �
get_host_info�locale� setlocale� LC_MESSAGES�split�lower�ErrorrT rR ry �replacer8 )rw �hostZ
extra_headersr �langr< r< r= r� � s, �
���
��z$LanguageAwareTransport.get_host_infoN)r} r~ r r� r� r< r< r< r= r� � s r� c @ s e Zd ZdZdd� ZdS )� SSLTransportz2Handles an HTTPS transaction to an XML-RPC server.c
C s� | � |�\}| _}| jr<|| jd kr<t�d|� | jd S t|dttdd �tj j
tj j d�}z |� � W nJ t
jy� } z0| �� t�d|� tjt|�d��W Y d }~n
d }~0 0 t�d |� ||f| _| jd S )
Nr z HTTP connection keep-alive (%s)r� i� � ca_certfile)�tls_version_min�tls_version_max� HTTP connection destroyed (%s)��messagezNew HTTP connection (%s))r� �_extra_headers� _connection�logger�debugr �getattrr r& �envr� r� Zconnect�socket�errorr| r r rX )rw r� Z_x509�connr; r< r< r= �make_connection� s&
� &
z SSLTransport.make_connectionN)r} r~ r r� r� r< r< r< r= r� � s r� c @ s� e Zd ZdZejjejjgZdd� Z d dd�Z
dd� Z d d
� Z d d d
�Z
dd� Zdd� Zd dd�Zejrpdd� Ze�d�Zdd� Zdd� Zd d � ZdS )!�
KerbTransportzK
Handles Kerberos Negotiation authentication to an XML-RPC server.
c O s> t j| g|�R i |�� d | _|�dd�| _|�dd �| _d S )N�service�HTTP�ccache)r� rx � _sec_context�popr� r� r� r< r< r= rx � s zKerbTransport.__init__Nc C s� |j }|tkr tj|d��n||tkr.t�� �nj|tkr@t�� �nX|tkrRt� � �nF|t
krdt� � �n4|t krvt�
� �n"|tkr�t�� �ntjt|�d��d S )N�r� r� )Zmin_coder r Z ServiceErrorr Z
NoCCacheErrorr Z
TicketExpiredr ZBadCCachePermsr ZBadCCacheFormatr ZCannotResolveKDCr! � CCacheError�
KerberosErrorrX )rw r; r� �minorr< r< r= �_handle_exception� s
z KerbTransport._handle_exceptionc C s
| j d S )Nr )r� rv r< r< r= � _get_host� s zKerbTransport._get_hostc C s0 | j D ]$\}}||kr| j �||f� q,qd S rC )r� �remove)rw �name�hrH r< r< r= �_remove_extra_header� s z"KerbTransport._remove_extra_headerTc
C s� t | jt�sg | _| �d� |rDttdd�}|rD| j�d|f� dS | �� }| jd |� d�d }zPd}| j
r�t j dd| j
id �}t �
|t jj�}t j||| jd
�| _| j�� }W n6 t jjy� } z| j||d � W Y d}~n
d}~0 0 | �|� dS ) z�
Two things can happen here. If we have a session we will add
a cookie for that. If not we will set an Authorization header.
r �session_cookieN�@�:r Zinitiater� )�usage�store)�credsr� �flagsr� )rT r� rR r� r� r ry r� r� r� r� �gssapiZ Credentials�NameZNameTypeZhostbased_serviceZSecurityContextr� r� �step�
exceptions�GSSErrorr� �_set_auth_header) rw �
use_cookier� r� r� r� r� �responser; r< r< r= �
get_auth_info� s0
��$zKerbTransport.get_auth_infoc C s2 | � d� |r.| j�ddt�|��d� f� d S )NZ
Authorizationz negotiate %srP )r� r� ry r] r^ r` )rw �tokenr< r< r= r� s
��z KerbTransport._set_auth_headerc
C s� | j r�|�dd�}d }|�d�D ]V}|�� �d�\}}}|�� dkr zt�|�d��}W qxW q t t
fyt Y q 0 q |s�t j dd��| j j
|d �}| j jr�d | _ d
S | �|� d S |jd kr�| jd d
� d S d
S )Nzwww-authenticater� �,� Z negotiaterP z,No valid Negotiate header in server responser� )r� TF� )r� )r� Z getheaderr� �strip� partitionr� r] Z b64decode�encoderj � UnicodeErrorr r� r� Zcompleter� �statusr� )rw r� �headerr� ZfieldrN Z_dummyrH r< r< r= �_auth_complete s2
�
z KerbTransport._auth_completer c
C sj z�| � |�}|r|�d� | �� tjrf| �|||� | �||� | �|� | �||� |j dd�}n| �
|||||� |� � }|j dkr�|� � |j dkr�| �
|�s�q"t|| |j |j|j��|| _| �
|�s�q"| �|�W S tjj�y } z| �|� W Y d }~n^d }~0 t�y8 | �� t�d|� � Y n. t�yd | �� tjd|dd� � Y n0 d S ) Nr� T)� buffering�� r� z&HTTP server has closed connection (%s)r� )�exc_info) r� �set_debuglevelr� �six�PY2Z send_requestZ send_hostZsend_user_agentr� Z getresponse� _KerbTransport__send_requestr� �readr� r0 �reason�msg�verbose�parse_responser� r� r� r� r3 r| r� r� �
BaseException)rw r� �handlerr� r� r� r� r; r< r< r= �single_request2 sR
�
�
�z KerbTransport.single_requestc C s� | j d d � }|r |�d� | jrNtrN|jd|dd� |�dd� |�d� n |�d|� |�d| jf� | �||� | � ||� |S ) Nr� ZPOSTT)Zskip_accept_encoding�Accept-Encoding�gzip)r� r� z
User-Agent)
r� r� Zaccept_gzip_encodingr� Z
putrequestr� ry Z
user_agentZ send_headersr� )rw r� r� r� r� r� Zheadersr< r< r= Z__send_requests s
� z KerbTransport.__send_requestz.*?(&expiry=\d+).*?c C s* |� � }| j�|�D ]}|�|d�}q|S )Nr� )� http_cookie� expiry_re�findallr� )rw r� r� Zexpr< r< r= �_slice_session_cookie� s z#KerbTransport._slice_session_cookiec
C s |du r dS t tdd�}t tdd�}t�dt|�|� t|t�sF|g}d}z:|D ]0}tj|t |t
j
j t
j j
d�d�}|durP q�qPW n4 ty� } z t�d||� W Y d}~dS d}~0 0 |du r�dS | �|�}t�d||� zt||� W n t�y Y n0 dS ) a�
Given the contents of a Set-Cookie header scan the header and
extract each cookie contained within until the session cookie
is located. Examine the session cookie if the domain and path
are specified, if not update the cookie with those values from
the request URL. Then write the session cookie into the key
store for the principal. If the cookie header is None or the
session cookie is not present in the header no action is
taken.
Context Dependencies:
The per thread context is expected to contain:
principal
The current pricipal the HTTP request was issued for.
request_url
The URL of the HTTP request.
Nr9 � request_urlz received Set-Cookie (%s)'%s'�Ztz�Z timestampz&unable to parse cookie header '%s': %sz$storing cookie '%s' for principal %s)r� r r� r� rQ rT rR r � get_named_cookie_from_string� COOKIE_NAMErZ �now�timezone�utcr6 r� r� r> )rw Z
cookie_headerr9 r� r� Zcookier; �
cookie_stringr< r< r= �store_session_cookie� sH �
���
�
�z"KerbTransport.store_session_cookiec C s6 t jr|j�d�}n |j�d�}| �|� t�| |�S )Nz
Set-Cookie)r� r� r� Z
getheadersZget_allr� r� r� )rw r� r� r< r< r= r� � s
z KerbTransport.parse_response)N)T)r )r} r~ r r� r� �RequirementFlag�mutual_authentication�out_of_sequence_detectionr� rx r� r� r� r� r� r� r� r� �PY3r� �re�compiler� r� r� r� r< r< r< r= r� � s$ �
"
@
=r� c @ s& e Zd ZdZejjejjejjgZ dS )�DelegatedKerbTransportzb
Handles Kerberos Negotiation authentication and TGT delegation to an
XML-RPC server.
N)
r} r~ r r� r� r� Zdelegate_to_peerr� r� r� r< r< r< r= r � s
�r c @ sZ e Zd ZdZdZeZdZdZdd� Z dd� Z
dd� Z dd d
�Z d d � Z
d
d� Zdd� ZdS )� RPCClientzq
Forwarding backend plugin for XML-RPC client.
Also see the `ipaserver.rpcserver.xmlserver` plugin.
Nc
C s� t j�|�\}}}}}}g }d| jj } z t| �}
W n tyJ g }
Y n0 |
D ],} t| j�� d�} |�
dt � | �|f � qP||v r�|�
|� |�d|� |S )zP
Create a list of urls consisting of the available IPA servers.
z_ldap._tcp.%s.r� z https://%s%sr )�urllib�parse�urlparser� �domainr r r8 �target�rstripry r Z
format_netlocr� �insert)
rw �rpc_uriZ_schemeZ_netloc�pathZ_paramsZ_queryZ _fragmentZserversr� ZanswersZanswer�serverr< r< r= � get_url_list� s$
�
�
zRPCClient.get_url_listc
C s� z$t |�}|du rW dS |�d�}W n2 tyV } zt�d|� W Y d}~dS d}~0 0 z"tj|ttjj tj
j d�d�}W n2 ty� } zt�d|� W Y d}~dS d}~0 0 |S )a
Retrieves the session cookie for the given principal from the
persistent secure storage. Returns None if not found or unable
to retrieve the session cookie for any reason, otherwise
returns a Cookie object containing the session cookie.
N�utf-8z%Error reading client session data: %sr� r� z7Error retrieving cookie from the persistent storage: %s) rA r` r6 r� r� r r� r� rZ r� r� r� )rw r9 r� r; r� r< r< r= �*get_session_cookie_from_persistent_storage s(
�
�z4RPCClient.get_session_cookie_from_persistent_storagec
C sj |}t tdd�}| �|�}|du r2t�d|� |S t�d||� z|�|� W n� tjy� } z>t�d||� z t|� W n t y� Y n0 |W Y d}~S d}~0 tj
y� } z t�d|� |W Y d}~S d}~0 t �y } z t� d|� |W Y d}~S d}~0 0 t�d|� � � t
td |� � � tj�|�\}}}} }
} | j}tj�|||| |
| f�} | S )
aE
Attempt to load a session cookie for the current principal
from the persistent secure storage. If the cookie is
successfully loaded adjust the input url's to point to the
session path and insert the session cookie into the per thread
context for later insertion into the HTTP request. If the
cookie is not successfully loaded then the original url is
returned and the per thread context is not modified.
Context Dependencies:
The per thread context is expected to contain:
principal
The current pricipal the HTTP request was issued for.
The per thread context will be updated with:
session_cookie
A cookie string to be inserted into the Cookie header
of the HTPP request.
r9 NzFfailed to find session_cookie in persistent storage for principal '%s'zKfound session_cookie in persistent storage for principal '%s', cookie: '%s'z,deleting session data for principal '%s': %sz,not sending session cookie, URL mismatch: %sz-not sending session cookie, unknown error: %sz(setting session_cookie into context '%s'r� )r� r r r� r� Zhttp_return_okr ZExpiredrB r6 Z URLMismatchr� r� �setattrr r r � session_path�
urlunparse)
rw �urlZ original_urlr9 r� r; �scheme�netlocr rn �query�fragmentZ session_urlr< r< r= �apply_session_cookie, sT ���� �� �z RPCClient.apply_session_cookiec
C s$ |d u r| j jj}|d u r$| j jj}|d u r6| j jj}|d u rH| j jj}|t_| j| j }z^t |d�}t
tdd �}||kr�zt td� W n t y� Y n0 t
td|� |s�| �|�}W n tjtfy� Y n0 | �|�} dd|d�}
| D �]} tdd�D �]} | �d ��r |�rt}
nt}
nt}
|
| jd
|d �|
d < t�d
| � t
td| � | j| fi |
��}t | �dk�r|| S z�t
|d�}z|g i � W nd t �y� } zJt |�}|j t v �r�t |j }||j!d��nt"|j |j!| d��W Y d }~n
d }~0 0 |W S tj#�y � Y q� t$�y� } z�t%td��r�|j&dk�r�t td� z t'|� W n t(�yr Y n0 W Y d }~q�|�s�� nt�)d| |� W Y d }~ q�W Y d }~q�d }~0 t(�y } z2|�sԂ nt�)d| |� W Y d }~ q�W Y d }~q�d }~0 0 q�q�t*t+d�d�,| �d��d S )N)Z ccache_namer9 r� Trb )rm rf r� r � zhttps://r� )r� r� r� � transportz trying %sr� r� Zpingr� ��coder� r r� z Connection to %s failed with %sz any of the configured serversz, ��urir� )-r& r� r� �fallback�delegateZ tls_ca_certr r� �env_rpc_uri_keyr" r� �delattr�AttributeErrorr r r r� r7 r
�range�
startswithr r� r� r� r� r� �server_proxy_classr� r* rr rq r rp r
r� r0 �hasattr�errcoderB r6 �infor r r{ )rw r� r� r r r� r
r9 Zstored_principalZurlsZproxy_kwr Z_try_numZtransport_class� serverproxy�commandr; r� r< r< r= �create_connectiont s�
�
�
�
�"�(�zRPCClient.create_connectionc C s* t t| jd �}|d ur&|jj}|�� d S rC )r� r �idr� �_ServerProxy__transportr| )rw r� r< r< r= �destroy_connection� s z RPCClient.destroy_connectionc C s ||� S )z"Call the command with given paramsr< )rw r+ rn r< r< r= �
_call_command� s zRPCClient._call_commandc O sD t tdd�}t | j|�}||g}d}td|�D �]�}t�d|d || j|� z| �||�W S ty� } zZt | �} t�d| j
|| j � | j
t v r�t | j
}
|
| j d��t
| j
| j |d ��W Y d} ~ q.d} ~ 0 t�y� } z�t td
d�} | �r�| jd k�r�ttd
� zt td d�} t| � W n2 t�yR }
zt�d
|
� W Y d}
~
n
d}
~
0 0 | �tj�d�| jj| jj| jj�}tt| j t || j �� W Y d} ~ q.t || j d��W Y d} ~ q.d} ~ 0 t!t"j#f�y� } z t |t$| �d��W Y d} ~ q.d} ~ 0 t%t&f�y, } zt't$| �d��W Y d} ~ q.d} ~ 0 0 q.t |t(d�d��dS )a�
Forward call to command named ``name`` over XML-RPC.
This method will encode and forward an XML-RPC request, and will then
decode and return the corresponding XML-RPC response.
:param command: The name of the command being forwarded.
:param args: Positional arguments to pass to remote command.
:param kw: Keyword arguments to pass to remote command.
r� Nr r z+[try %d]: Forwarding '%s' to %s server '%s'r� z"Caught fault %d from server %s: %sr� r r� r� r9 z1Error trying to remove persisent session data: %sZ
KRB5CCNAMEr �r� z.Exceeded number of tries to forward a request.))r� r r� r$ r� r� r� r0 r* rr rq rp r r
r0 r( r" rB r6 r, �os�environr� r� r� r r r r- r Z
disconnectr �errmsgr r� r� r8 �
OverflowErrorrj r r )rw r� r� �kwr r+ rn Z max_triesZtry_numr; r� r� r9 �e2r* r< r< r= �forward� sf �
�
�
� �
� "$&�zRPCClient.forward)NNNNN)r} r~ r r� r r. r& r� r! r
r r r, r/ r0 r8 r< r< r< r= r � s H �
nr c @ s$ e Zd ZdZeZdZdZdd� ZdS )� xmlclientz/ipa/session/xmlZxmlZ
xmlrpc_uric C s* |d � dt�}t||�}||� }t|�S )Nr� rJ )r� r% rE rd )rw r+ rn rJ �resultr< r< r= r0 ; s
zxmlclient._call_commandN) r} r~ r r r. r& r� r! r0 r< r< r< r= r9 5 s
r9 c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�JSONServerProxyc C sD t j�|�}|jdvr td��|j| _|j| _|| _ || _
|| _ d S )N)�http�httpsz unsupported XML-RPC protocol) r r �urlsplitr �IOErrorr �_JSONServerProxy__hostr �_JSONServerProxy__handler�_JSONServerProxy__transport�_JSONServerProxy__verboser. )rw r r rf r� rm Z split_urir< r< r= rx C s
zJSONServerProxy.__init__c
C sN | j dk}t|�|dd�}|d �dt�}t|||d�}|rHt�d|� | jj| j | j
|� d�| j d kd
�}|r�t�d t j
t �|�d d
d�� z t|�}W n2 ty� } ztt|�d��W Y d }~n
d }~0 0 |�d�}|�rFzt|d } W n0 t�y t|�d�|�d�| j d��Y n(0 |�di �}
|d |
d< | f i |
���|d S )N� r )rs rn r- r� rJ )Z pretty_printz Request: %sr � )r� z Response: %sT� )Z sort_keys�indentr1 r� r r� r r: r: )rC rX r� r% r' r� r) rB Zrequestr@ rA r� r� r, r- r( r7 r
r8 r �KeyErrorr
) rw r� r� Z
print_jsonZpayloadrJ r� r; r� Z error_classr6 r< r< r= Z __requestT sP
���� $
� zJSONServerProxy.__requestc s � �fdd�}|S )Nc s �� � | �S rC )�_JSONServerProxy__request)r� �r� rw r< r= �_call� s z*JSONServerProxy.__getattr__.<locals>._callr< )rw r� rK r< rJ r= � __getattr__� s zJSONServerProxy.__getattr__N)r} r~ r rx rI rL r< r< r< r= r; B s 0r; c @ s e Zd ZdZeZdZdZdS )�
jsonclientz/ipa/session/jsonr� Z jsonrpc_uriN)r} r~ r r r; r& r� r! r< r< r< r= rM � s rM )rb )NFrb )rb )rb )vr� Z
__future__r Zdecimalr rZ Zloggingr2 r� r] r� r� r� r� r Zsslr Z cryptographyr r\ r� Z
dns.exceptionr r� Zipalib.backendr Zipalib.constantsr Z
ipalib.errorsr r
r r r
Zipalibr r Zipalib.requestr r Z ipalib.x509r r_ r Z ipapythonr r Zipapython.cookier Zipapython.dnsutilr r Z ipalib.textr Z ipalib.utilr Zipalib.krb_utilsr r r r r r r! r" Z ipapython.dnr# Zipapython.kerberosr$ Zipalib.capabilitiesr% r& Zipalib.ipajsonr' r( Z xmlrpclibr) r* r+ r, r- r. r/ r0 r1 r2 � ImportErrorZ
xmlrpc.clientr� Z http.clientr3 Zhttplibr4 r8 rX Z getLoggerr} r� r� r5 r> rA rB rE rd ro rr rt ru r� r� r� r� r r r9 r; rM r< r< r< r= �<module> s� (
4 6
A
+ �
!
T
H