֛h4yh%SrSSKrSSKJr SSKJr SSKJr SSKJ r \ \ \ S'SSK r Sr SS KJr SS KJr SS KJrJrJrJr SS KJrJr SS KJr SSKJr SSKJ r J!r! SSK"J#r# SSK$J%r% SSK&J'r' SSK(J)r) \%"S5(aSr*SSK+J,r, SSK-J.r.J/r/ SSK0J1r1 SSK2J3r3 OSr*\4"\SS5bSr5OSr5"SS\)5r6"SS\)5r7"S S!\)5r8"S"S#\)5r9"S$S%\)5r:"S&S'\)5r;"S(S)\)5r<\"S*S+/5r="S,S-\>5r?"S.S/\)5r@g!\a Sr GNf=f)0z& Tests for L{twisted.conch.checkers}. N) encodebytes) namedtuple)BytesIO)Optional cryptSkipzcannot run without crypt module) verifyObject)'InMemoryUsernamePasswordDatabaseDontUse)ISSHPrivateKeyIUsernamePassword SSHPrivateKeyUsernamePassword)UnauthorizedLoginUnhandledCredentials)Deferred)util)ShadowDatabase UserDatabase)FilePath) requireModule)MockOS)TestCase cryptography)checkers)NotEnoughAuthenticationValidPublicKey)keys)keydatazcan't run without cryptographygeteuidz0Cannot run without effective UIDs (questionable)c^\rSrSrSr\=(d \rSrSr Sr Sr Sr Sr S rS rS rg ) HelperTests8z` Tests for helper functions L{verifyCryptedPassword}, L{_pwdGetByName} and L{_shadowGetByName}. c"[5UlgN)rmockosselfs dC:\Users\psant\Downloads\Noiseback\school\venv\Lib\site-packages\twisted/conch/test/test_checkers.pysetUpHelperTests.setUp@s h cSnSn[R"X5nUR[R"X15SR X155 g)z~ L{verifyCryptedPassword} returns C{True} if the plaintext password passed to it matches the encrypted password passed to it. secret stringsaltyz5{!r} supposed to be valid encrypted password for {!r}Ncrypt assertTruerverifyCryptedPasswordformatr&passwordsaltcrypteds r'test_verifyCryptedPassword&HelperTests.test_verifyCryptedPasswordCsG #++h-   * *7 = C J J  r*cSnSn[R"X5nUR[R"X15SR X155 g)zr L{verifyCryptedPassword} returns True if the provided cleartext password matches the provided MD5 password hash. r4z$1$saltz3{!r} supposed to be valid encrypted password for {}Nr.r3s r'test_verifyCryptedPasswordMD5)HelperTests.test_verifyCryptedPasswordMD5RsG ++h-   * *7 = A H H  r*cSnSnSn[R"X5nUR[R"XC5SR XC55 g)z L{verifyCryptedPassword} returns C{False} if the plaintext password passed to it does not match the encrypted password passed to it. z string secretsomesaltr,z7{!r} not supposed to be valid encrypted password for {}N)r/ assertFalserr1r2)r&r4r5wrongr6s r'test_refuteCryptedPassword&HelperTests.test_refuteCryptedPasswordasN #++h-   * *7 : E L L  r*c [5nURSSSSSSS5 UR[SU5 UR [R "S5UR S55 g ) zo L{_pwdGetByName} returns a tuple of items from the UNIX /etc/passwd database if the L{pwd} module is present. alicesecrit first last/foo/bin/shpwdN)raddUserpatchr assertEqual _pwdGetByNamegetpwnamr&userdbs r'test_pwdGetByNameHelperTests.test_pwdGetByNameqsW w!Q fiP 8UF+ //8&//':RSr*c|UR[SS5 UR[R"S55 g)zG If the C{pwd} module isn't present, L{_pwdGetByName} returns L{None}. rJNrC)rLr assertIsNonerNr%s r'test_pwdGetByNameWithoutPwd'HelperTests.test_pwdGetByNameWithoutPwd{s- 8UD) (009:r*c [5nURSSSSSSSSS 5 UR[S U5 S URlS URlUR[S UR5 UR[R"S5URS55 URURRSS /5 URURRSS /5 g)zl L{_shadowGetByName} returns a tuple of items from the UNIX /etc/shadow database if the L{spwd} is present. bob passphraserErFspwd) osrN) rrKrLrr$euidegidrrM_shadowGetByNamegetspnam seteuidCalls setegidCallsrPs r'test_shadowGetByName HelperTests.test_shadowGetByNames  !ulAq!Q1a@ 8VV,   4t{{+ 22596??5;QR 11At9= 11At9=r*cUR[SS5 UR[R"S55 UR UR R /5 UR UR R/5 g)z@ L{_shadowGetByName} returns L{None} if C{spwd} is not present. r`NrY)rLrrUrfrMr$rhrir%s r'test_shadowGetByNameWithoutSpwd+HelperTests.test_shadowGetByNameWithoutSpwdsa 8VT* (33E:; 1126 1126r*)r$N)__name__ __module__ __qualname____firstlineno____doc__rdependencySkipskipr(r7r:r@rRrVrjrm__static_attributes__r*r'r r 8s<  &D     T;>"7r*r ct\rSrSrSr\=(d \rSSjrSr Sr Sr Sr S r S rS rS rS rSrSrg)SSHPublicKeyDatabaseTestsz$ Tests for L{SSHPublicKeyDatabase}. Nc [R"5Ul[S5Ul[S5UlSUR-S-UR -S-Ul[5UlUR[SUR5 [UR55Ul [URR[5(deURR!S5UlUR"R%5 ['5nUR)SS S S S URRS 5 XRlg)Nfoobareggspamst1 s foo t2 s egg rc.sshuserr4rErFrG /bin/shell)rSSHPublicKeyDatabasecheckerrkey1key2contentrr$rLrrmktemppath isinstancestrchildsshDirmakedirsrrK_userdbrPs r'r(SSHPublicKeyDatabaseTests.setUps446  *  +  )L8499DyP h  4t{{+T[[]+ $))..#....iioof-      IINN   & r*cURUR/S9nURUSS[5 URUSSS5 UR[ U5S5 g)z: L{SSHPublicKeyDatabase} is deprecated as of version 15.0 )offendingFunctionsrcategorymessageztwisted.conch.checkers.SSHPublicKeyDatabase was deprecated in Twisted 15.0.0: Please use twisted.conch.checkers.SSHPublicKeyChecker, initialized with an instance of twisted.conch.checkers.UNIXAuthorizedKeysFiles instead.rEN) flushWarningsr(rMDeprecationWarninglen)r& warningsShowns r'test_deprecated)SSHPublicKeyDatabaseTests.test_deprecatedsp**tzzl*K  q)*57IJ  ! Y ' F  ]+Q/r*cURRU5RUR5 [ SS5nSUlUR URRU55 SUlUR URRU55 SUlURURRU55 g)Nuserpasswordr|r}s notallowed) rr setContentrr blobr0rcheckKeyr>)r&filenamers r' _testCheckKey'SSHPublicKeyDatabaseTests._testCheckKeys (#..t||<5   --d34   --d34!  ..t45r*cURS5 URURR/5 URURR/5 g)z L{SSHPublicKeyDatabase.checkKey} should retrieve the content of the authorized_keys file and check the keys against that file. authorized_keysNrrMr$rhrir%s r' test_checkKey'SSHPublicKeyDatabaseTests.test_checkKeysG ,- 1126 1126r*cURS5 URURR/5 URURR/5 g)z L{SSHPublicKeyDatabase.checkKey} should retrieve the content of the authorized_keys2 file and check the keys against that file. authorized_keys2Nrr%s r'test_checkKey2(SSHPublicKeyDatabaseTests.test_checkKey2sG -. 1126 1126r*c^^URRS5mTRUR5 TR S5 UR TRS5 UR RmUU4SjnSUR lSUR l URUR SU5 UR[SUR 5 [S S 5nS Ul URURR!U55 UR#UR R$/S Q5 UR#UR R&S S/5 g)z If the key file is readable, L{SSHPublicKeyDatabase.checkKey} should switch its uid/gid to the ones of the authenticated user. rrc6>TRS5 T"U5$)Nr)chmod)rdkeyFile savedSeteuids r'seteuid>SSHPublicKeyDatabaseTests.test_checkKeyAsRoot..seteuids MM% % %r*rarbrrcrrr|)rrErrarFN)rrrrr addCleanupr$rrdrerLrr rr0rrrMrhri)r&rrrrs @@r'test_checkKeyAsRoot-SSHPublicKeyDatabaseTests.test_checkKeyAsRoots ++##$564<<( e  u-{{**  &    4;; 73 4t{{+5   --d34 11?C 11At9=r*c V^SnTRTRSU5 [SS[RS[ R R[R5RS55nTRRU5nU4SjnURU5$)zx L{SSHPublicKeyDatabase.requestAvatarId} should return the avatar id passed in if its C{_checkKey} method returns True. cgNTrwignoreds r' _checkKeyASSHPublicKeyDatabaseTests.test_requestAvatarId.._checkKey r*rtestssh-rsafooc*>TRUS5 gNrrMavatarIdr&s r'_verify?SSHPublicKeyDatabaseTests.test_requestAvatarId.._verify   Xw /r*) rLrr rpublicRSA_opensshrKey fromStringprivateRSA_opensshsignrequestAvatarId addCallback)r&r credentialsdrs` r'test_requestAvatarId.SSHPublicKeyDatabaseTests.test_requestAvatarIds   4<<Y7#    % %  HH   : : ; @ @ H   LL ( ( 5 0}}W%%r*cSnURURSU5 [SS[RSS5nURR U5nUR U[5$)a L{SSHPublicKeyDatabase.requestAvatarId} should raise L{ValidPublicKey} if the credentials represent a valid key without a signature. This tells the user that the key is valid for login, but does not actually allow that user to do so without a signature. cgrrwrs r'rQSSHPublicKeyDatabaseTests.test_requestAvatarIdWithoutSignature.._checkKey&rr*rrrN)rLrr rrr assertFailurerr&rrrs r'$test_requestAvatarIdWithoutSignature>SSHPublicKeyDatabaseTests.test_requestAvatarIdWithoutSignaturesa  4<<Y7# Z!:!:D$  LL ( ( 5!!!^44r*cSnURURSU5 URRS5nURU[5$)zm If L{SSHPublicKeyDatabase.checkKey} returns False, C{_cbRequestAvatarId} should raise L{UnauthorizedLogin}. cgNFrwrs r'rKSSHPublicKeyDatabaseTests.test_requestAvatarIdInvalidKey.._checkKey6r*rN)rLrrrr)r&rrs r'test_requestAvatarIdInvalidKey8SSHPublicKeyDatabaseTests.test_requestAvatarIdInvalidKey0sE   4<<Y7 LL ( ( .!!!%677r*c RSnURURSU5 [SS[RS[ R R[R5RS55nURRU5nURU[5$)z Valid keys with invalid signatures should cause L{SSHPublicKeyDatabase.requestAvatarId} to return a {UnauthorizedLogin} failure cgrrwrs r'rQSSHPublicKeyDatabaseTests.test_requestAvatarIdInvalidSignature.._checkKeyDrr*rrrr) rLrr rrrrrprivateDSA_opensshrrrrrs r'$test_requestAvatarIdInvalidSignature>SSHPublicKeyDatabaseTests.test_requestAvatarIdInvalidSignature=s  4<<Y7#    % %  HH   : : ; @ @ H   LL ( ( 5!!!%677r*c^SnTRTRSU5 [SSSSS5nTRRU5nU4SjnUR U5 TR U[ 5$) zf Exceptions raised while verifying the key should be normalized into an C{UnauthorizedLogin} failure. cgrrwrs r'rSSSHPublicKeyDatabaseTests.test_requestAvatarIdNormalizeException.._checkKeyXrr*rrNsblobssigDatassigc|>TR[R5nTR[ U5S5 U$)NrE)flushLoggedErrorsr BadKeyErrorrMr)failureerrorsr&s r'_verifyLoggedException`SSHPublicKeyDatabaseTests.test_requestAvatarIdNormalizeException.._verifyLoggedException_s2++D,<,<=F   S[! ,Nr*)rLrr r addErrbackrr)r&rrrrs` r'&test_requestAvatarIdNormalizeException@SSHPublicKeyDatabaseTests.test_requestAvatarIdNormalizeExceptionRsl   4<<Y7#GT7JO LL ( ( 5  +,!!!%677r*)rrrrr$rrreturnN)rorprqrrrseuidSkiprtrur(rrrrrrrrrrrvrwr*r'ryrysJ  %~D&40 677>6&05$ 88*8r*ryc@\rSrSrSr\rSrSrSr Sr Sr Sr S r g ) SSHProtocolCheckerTestsihz" Tests for L{SSHProtocolChecker}. cR[R"5nURUR/5 UR [R "55 URUR[ /5 URUR[ [R 5 g)zh L{SSHProcotolChecker.registerChecker} should add the given checker to the list of registered checkers. N)rSSHProtocolCheckerrMcredentialInterfacesregisterCheckerrr assertIsInstancer&rs r'test_registerChecker,SSHProtocolCheckerTests.test_registerCheckeros --/ 55r:  ) ) +  557GH    ^ ,h.K.K r*c\[R"5nURUR/5 UR [R "5[ 5 URUR[ /5 URUR[ [R 5 g)z If a specific interface is passed into L{SSHProtocolChecker.registerChecker}, that interface should be registered instead of what the checker specifies in credentialIntefaces. N)rrrMrrrr rrs r'!test_registerCheckerWithInterface9SSHProtocolCheckerTests.test_registerCheckerWithInterface~s--/ 55r: = = ?ARS 558I7JK    . /1N1N r*c^[R"5n[5nURSS5 UR U5 UR [ SS55nU4SjnURU5$)zn L{SSHProtocolChecker.requestAvatarId} should defer to one if its registered checkers to authenticate a user. rc*>TRUS5 grrrs r' _callback?SSHProtocolCheckerTests.test_requestAvatarId.._callbackrr*)rrr rKrrr r)r&rpasswordDatabaserrs` r'r,SSHProtocolCheckerTests.test_requestAvatarIdsi --/BD  '2 01  # #$4Wg$F G 0}}Y''r*c[R"5nSnURUSU5 [5nUR SS5 UR U5 UR [SS55nURU[5$)z If the client indicates that it is never satisfied, by always returning False from _areDone, then L{SSHProtocolChecker} should raise L{NotEnoughAuthentication}. cgrrw)rs r'_areDoneYSSHProtocolCheckerTests.test_requestAvatarIdWithNotEnoughAuthentication.._areDonerr*areDoner) rrrLr rKrrr rr)r&rr r rs r'/test_requestAvatarIdWithNotEnoughAuthenticationGSSHProtocolCheckerTests.test_requestAvatarIdWithNotEnoughAuthentications} --/  7Ix0BD  '2 01  # #$4Wg$F G!!!%<==r*c[R"5nUR[SS55nUR U[ 5$)z If the passed credentials aren't handled by any registered checker, L{SSHProtocolChecker} should raise L{UnhandledCredentials}. r)rrrr rr)r&rrs r'%test_requestAvatarIdInvalidCredential=SSHProtocolCheckerTests.test_requestAvatarIdInvalidCredentials> --/  # #$4Wg$F G!!!%9::r*cjUR[R"5RS55 g)zF The default L{SSHProcotolChecker.areDone} should simply return True. N)r0rrrr%s r' test_areDone$SSHProtocolCheckerTests.test_areDones$ 335==dCDr*rwN)rorprqrrrsrtrurrrrrrrvrwr*r'rrhs- D    ( >&;Er*rcz\rSrSrSr\=(d \rS\\ S\ SS4Sjr Sr S r S r S rS rS rSrSrSrg)UNIXPasswordDatabaseTestsiz$ Tests for L{UNIXPasswordDatabase}. rusernamerNcFURURU5U5 g)z Assert that the L{Deferred} passed in is called back with the value 'username'. This represents a valid login for this TestCase. @param d: a L{Deferred} from an L{IChecker.requestAvatarId} method. N)rMsuccessResultOf)r&rrs r'assertLoggedIn(UNIXPasswordDatabaseTests.assertLoggedIns --a0(;r*c [R"5nSn[5nURSU"SS5SSSSS5 URS S SSS S S5 [ 5nURSS SSSSSSS5 URS U"S S5SSSSSSS5 UR [SU5 UR [SU5 [ 5nUR [SU5 SUlSUl [SS 5nURURU5S5 URUR/5 URUR/5 S!UlURURU5S!5 URURS"S/5 URURS"S/5 g#)$zi L{UNIXPasswordDatabase} with no arguments has checks the C{pwd} database and then the C{spwd} database. cf[R"X5n[R"USU-5nU$)Nz$1$)r/)rr4r5r6s r'r6?UNIXPasswordDatabaseTests.test_defaultCheckers..crypteds);;x2Dkk(EDL9GNr*rCr4rErFfoorHrIrYxbar/barr?r[r\r]r^r_ rJr`rcrarbalicerbobrN)rUNIXPasswordDatabaserrKrrLrrrdrer rrrMrhrir)r&rr6rJr`r$creds r'test_defaultCheckers.UNIXPasswordDatabaseTests.test_defaultCheckerss //1  n WWj11a   E31eVY? Wgq!Q1a; UGE:61b"b"bQ 8UC( 8VT* 4v&  +6 G33D98D ,,b1 ,,b1  G33D96B ,,q$i8 ,,q$i8r*cDURU[R5 g)a} Asserts that the L{Deferred} passed in is erred back with an L{UnauthorizedLogin} L{Failure}. This reprsents an invalid login for this TestCase. NOTE: To work, this method's return value must be returned from the test method, or otherwise hooked up to the test machinery. @param d: a L{Deferred} from an L{IChecker.requestAvatarId} method. @type d: L{Deferred} @rtype: L{None} N)failureResultOfrrr&rs r'assertUnauthorizedLogin1UNIXPasswordDatabaseTests.assertUnauthorizedLogins Q : :;r*c  [R"SS5n[5nURSUSSSSS5 [R"UR /5nUR UR[SS 55S5 g ) zW L{UNIXPasswordDatabase} takes a list of functions to check for UNIX user information. secretanybodyrErFr"r%rIsanybodyssecretN) r/rrKrr/rOrrr )r&r4rQrs r'test_passInCheckers-UNIXPasswordDatabaseTests.test_passInCheckerssp ;;x2y(Aq%K//0AB   # #$4Z$K Lj r*cSnSnUR[SU5 [R"U/5n[SS5nUR UR U5S5 g)z If the encrypted password provided by the getpwnam function is valid (verified by the L{verifyCryptedPassword} function), we callback the C{requestAvatarId} L{Deferred} with the username. c X:H$r#rwr6pws r'r1LUNIXPasswordDatabaseTests.test_verifyPassword..verifyCryptedPassword = r*cX/$r#rwrs r'rO?UNIXPasswordDatabaseTests.test_verifyPassword..getpwnams ' 'r*r1usernameNrLrr/r rrr&r1rOr credentials r'test_verifyPassword-UNIXPasswordDatabaseTests.test_verifyPasswordsY ! ( 846KL// ;%k;?  G33J?Mr*cSn[R"U/5n[SS5nURUR U55 g)ze If the getpwnam function raises a KeyError, the login fails with an L{UnauthorizedLogin} exception. c[U5er#)KeyErrorrDs r'rO?UNIXPasswordDatabaseTests.test_failOnKeyError..getpwnam,s 8$ $r*rFrN)rr/r r6r)r&rOrrIs r'test_failOnKeyError-UNIXPasswordDatabaseTests.test_failOnKeyError&s@  %// ;%k;?  $$W%<%.verifyCryptedPassword9rr*c US/$)NrrwrDs r'rOBUNIXPasswordDatabaseTests.test_failOnBadPassword..getpwnam<s k* *r*r1rFrN)rLrr/r r6rrHs r'test_failOnBadPassword0UNIXPasswordDatabaseTests.test_failOnBadPassword3sW   + 846KL// ;%k;?  $$W%<%.verifyCryptedPasswordLrBr*c US/$)Nznot the passwordrwrDs r' getpwnam1FUNIXPasswordDatabaseTests.test_loopThroughFunctions..getpwnam1Os01 1r*c US/$)Nr4rwrDs r' getpwnam2FUNIXPasswordDatabaseTests.test_loopThroughFunctions..getpwnam2Rs j) )r*r1rFrNrG)r&r1r]r`rrIs r'test_loopThroughFunctions3UNIXPasswordDatabaseTests.test_loopThroughFunctionsDs_ ! 2 * 846KL//0FG%k;?  G33J?Mr*c "[5nURSSSSSSS5 URSSSSSSS5 URS S SSSSS5 UR[S U5 [R"[R /5n[ S S 5nURURU55 [ SS5nURURU55 [ SS5nURURU55 g)z If the password returned by any function is C{""}, C{"x"}, or C{"*"} it is not compared against the supplied password. Instead it is skipped. rCrErFr"r$rYr#carol*rJr-r*r.xscarol*N) rrKrLrr/rNr r6r)r&rJrr0s r'test_failOnSpecial,UNIXPasswordDatabaseTests.test_failOnSpecialZs n GRAr5%8 E31b%7 GS!QE59 8UC(//1G1G0HI#. $$W%<%CAuthorizedKeyFileReaderTests.test_ignoresComments..s1r*s this is notsand this is notNrrreadAuthorizedKeyFilerMlistr&fileobjresults r'test_ignoresComments1AuthorizedKeyFileReaderTests.test_ignoresCommentswsA    //E .*<=tF|Lr*c~[S5n[R"USS9nURS/[ U55 g)z_ L{checkers.readAuthorizedKeyFile} ignores leading whitespace in lines, as well as empty lines sg # ignore not ignored cU$r#rwrqs r'rrYAuthorizedKeyFileReaderTests.test_ignoresLeadingWhitespaceAndEmptyLines..sAr*parseKeys not ignoredNrtrws r'*test_ignoresLeadingWhitespaceAndEmptyLinesGAuthorizedKeyFileReaderTests.test_ignoresLeadingWhitespaceAndEmptyLiness>    //+N .)4<8r*cSn[S5n[R"X!S9nURS/[ U55 g)z L{checkers.readAuthorizedKeyFile} does not raise an exception when a key fails to parse (raises a L{twisted.conch.ssh.keys.BadKeyError}), but rather just keeps going c^URS5(a[R"S5eU$)Nfzfailed to parse) startswithrr)lines r' failOnSomeKAuthorizedKeyFileReaderTests.test_ignoresUnparsableKeys..failOnSomes(t$$&&'899Kr*sfailed key good keyrsgood keyNrt)r&rrxrys r'test_ignoresUnparsableKeys7AuthorizedKeyFileReaderTests.test_ignoresUnparsableKeyss:  12//M +V 5r*rwN) rorprqrrrsrtrurzrrrvrwr*r'rnrnps D M 96r*rnc.\rSrSrSr\rSrSrSr Sr g)InMemorySSHKeyDBTestsiz( Tests for L{checkers.InMemorySSHKeyDB} cj[R"SS/05n[[RU5 g)zG L{checkers.InMemorySSHKeyDB} implements L{checkers.IAuthorizedKeysDB} r-skeyN)rInMemorySSHKeyDBrIAuthorizedKeysDBr&keydbs r'test_implementsInterface.InMemorySSHKeyDBTests.test_implementsInterfaces+ ))8fX*>?X//7r*c[R"SS/05nUR/[UR S555 g)z If the user is not in the mapping provided to L{checkers.InMemorySSHKeyDB}, an empty iterator is returned by L{checkers.InMemorySSHKeyDB.getAuthorizedKeys} r-skeysr.NrrrMrvgetAuthorizedKeysrs r'test_noKeysForUnauthorizedUser4InMemorySSHKeyDBTests.test_noKeysForUnauthorizedUsers; ))8gY*?@ T%"9"9&"ABCr*c[R"SSS/05nURSS/[UR S555 g)z If the user is in the mapping provided to L{checkers.InMemorySSHKeyDB}, an iterator with all the keys is returned by L{checkers.InMemorySSHKeyDB.getAuthorizedKeys} r-abNrrs r'test_allKeysForAuthorizedUser3InMemorySSHKeyDBTests.test_allKeysForAuthorizedUsersA ))8dD\*BC $tE,C,CH,M'NOr*rwN) rorprqrrrsrtrurrrrvrwr*r'rrs D8DPr*rcD\rSrSrSr\rS SjrSrSr Sr Sr S r S r g) UNIXAuthorizedKeysFilesTestsiz0 Tests for L{checkers.UNIXAuthorizedKeysFiles}. Nc 0[UR55Ul[URR[5(deURR 5 [ 5UlURRSSSSSURRS5 URRS5Ul URR 5 URRS5nURS 5 S S /Ul g) NrCr4rErFzalice lastnamerr~rs key 1 key 2skey 1skey 2) rrrrrrrrQrKrrr expectedKeys)r&authorizedKeyss r'r("UNIXAuthorizedKeysFilesTests.setUpsT[[]+ $))..#.... "n      IINN  iioof-  **+<=!!/2%x0r*cx[R"UR5n[[RU5 g)zO L{checkers.UNIXAuthorizedKeysFiles} implements L{checkers.IAuthorizedKeysDB}. N)rUNIXAuthorizedKeysFilesrQrrrs r'r5UNIXAuthorizedKeysFilesTests.test_implementsInterfaces( 00=X//7r*c[R"URSS9nUR/[ UR S555 g)z If the user is not in the user database provided to L{checkers.UNIXAuthorizedKeysFiles}, an empty iterator is returned by L{checkers.UNIXAuthorizedKeysFiles.getAuthorizedKeys}. cU$r#rwrqs r'rrMUNIXAuthorizedKeysFilesTests.test_noKeysForUnauthorizedUser..QRr*rr.N)rrrQrMrvrrs r'r;UNIXAuthorizedKeysFilesTests.test_noKeysForUnauthorizedUsers: 00{S T%"9"9&"ABCr*cURRS5RS5 [R"UR SS9nUR URS/-[URS555 g)z If the user is in the user database provided to L{checkers.UNIXAuthorizedKeysFiles}, an iterator with all the keys in C{~/.ssh/authorized_keys} and C{~/.ssh/authorized_keys2} is returned by L{checkers.UNIXAuthorizedKeysFiles.getAuthorizedKeys}. rskey 3cU$r#rwrqs r'rr`UNIXAuthorizedKeysFilesTests.test_allKeysInAllAuthorizedFilesForAuthorizedUser..rr*rr-N) rrrrrrQrMrrvrrs r'1test_allKeysInAllAuthorizedFilesForAuthorizedUserNUNIXAuthorizedKeysFilesTests.test_allKeysInAllAuthorizedFilesForAuthorizedUsersh ,-88B00{S     *D1H1H1R,S r*c[R"URSS9nURUR[ UR S555 g)z L{checkers.UNIXAuthorizedKeysFiles.getAuthorizedKeys} returns only the keys in C{~/.ssh/authorized_keys} and C{~/.ssh/authorized_keys2} if they exist. cU$r#rwrqs r'rrJUNIXAuthorizedKeysFilesTests.test_ignoresNonexistantFile..rr*rr-N)rrrQrMrrvrrs r'test_ignoresNonexistantFile8UNIXAuthorizedKeysFilesTests.test_ignoresNonexistantFiles@ 00{S **D1H1H1R,STr*cURRS5R5 [R"UR SS9nUR UR[URS555 g)z L{checkers.UNIXAuthorizedKeysFiles.getAuthorizedKeys} returns only the keys in C{~/.ssh/authorized_keys} and C{~/.ssh/authorized_keys2} if they are readable. rcU$r#rwrqs r'rrIUNIXAuthorizedKeysFilesTests.test_ignoresUnreadableFile..rr*rr-N) rrrrrrQrMrrvrrs r'test_ignoresUnreadableFile7UNIXAuthorizedKeysFilesTests.test_ignoresUnreadableFile s\ ,-66800{S **D1H1H1R,STr*)rrrrQr)rorprqrrrsrtrur(rrrrrrvrwr*r'rrs/ D1.8D  UUr*r_KeyDBrc\rSrSrSrSrg)_DummyExceptioniz( Fake exception to be used for testing. rwN)rorprqrrrsrvrwr*r'rrs  r*rcF\rSrSrSr\rSrSrSr Sr Sr Sr S r S rg ) SSHPublicKeyCheckerTestsi!z, Tests for L{checkers.SSHPublicKeyChecker}. c ([SS[RS[RR [R 5RS55Ul[S5Ul [R"UR5Ul g)Nr-rrc^[RR[R5/$r#)rrrrr)_s r'rr0SSHPublicKeyCheckerTests.setUp..0stxx':':7;T;T'U&Vr*)r rrrrrrrrrrrSSHPublicKeyCheckerrr%s r'r(SSHPublicKeyCheckerTests.setUp(si(    % %  HH   : : ; @ @ H  VW 33DJJ? r*cSURlURURR UR5[ 5 g)z Calling L{checkers.SSHPublicKeyChecker.requestAvatarId} with credentials that do not have a signature fails with L{ValidPublicKey}. N)r signaturer4rrrr%s r' test_credentialsWithoutSignature9SSHPublicKeyCheckerTests.test_credentialsWithoutSignature3s: &*"  LL ( ()9)9 :N r*cSURlURURR UR5[ R 5 g)z~ Calling L{checkers.SSHPublicKeyChecker.requestAvatarId} with credentials that have a bad key fails with L{keys.BadKeyError}. r*N)rrr4rrrrr%s r'test_credentialsWithBadKey3SSHPublicKeyCheckerTests.test_credentialsWithBadKey=s@ !$  LL ( ()9)9 :D.failgs !# #r*verifyN) rLrrr4rrrrrr)r&rs r'test_failureVerifyingKey1SSHPublicKeyCheckerTests.test_failureVerifyingKey`sV $ 488Xt,  LL ( ()9)9 :rsI  " C=I.I G+?,0,+  N&K&*5N 2y$+HAHc7(c7LG8G8TUEhUEpmDmD`16816hPHPDMU8MU` H23 4 i V