ELF > ; @ Z @ 8 @ ' ' 0 0! 0! ) * 00 00! 00! $ $ Ptd Qtd GNU XL
Hs ^Z=4 y Рf@ y } \kU@.s|CE.CFm%7qX 4 e ^ L $ ? % 6 { j 7 , P ^ p c g " k k " r N T 4 t 8 = A \ 9 U \ n - V 0 P x G J P ~
, ~ W p k < D Z" Y" C Z" 6 Y" 4 p __gmon_start__ _fini __cxa_finalize _Jv_RegisterClasses PyObject_GetAttrString PyErr_Clear Py_BuildValue PyEval_CallObjectWithKeywords PyObject_SetAttrString __assert_fail initkrbV Py_InitModule4_64 PyModule_GetDict pk_error_init PyString_FromString PyDict_SetItemString PyDict_New PyModule_GetName PyClass_New PyCFunction_NewEx PyMethod_New dict_addint PyArg_ParseTuple PyCObject_AsVoidPtr PyExc_AttributeError PyErr_Format krb5_get_default_realm krb5_free_default_realm pk_error PyString_Type PyString_AsString PyDict_SetItem _Py_NoneStruct krb5_set_default_realm PyExc_TypeError PyDict_GetItemString PyObject_IsInstance PyString_Size krb5_rd_rep krb5_free_ap_rep_enc_part PyString_FromStringAndSize PyExc_IndexError krb5_mk_rep krb5_free_data_contents PyTuple_New PyTuple_SetItem PyLong_AsLongLong PyEval_CallMethod PyInt_AsLong krb5_copy_principal PyCObject_FromVoidPtrAndDesc PyEval_SaveThread krb5_recvauth PyEval_RestoreThread krb5_free_ticket krb5_free_principal krb5_auth_con_free krb5_cc_get_principal krb5_sendauth PyInt_FromLong krb5_init_context krb5_free_context PyCObject_FromVoidPtr inet_pton __stack_chk_fail PyArg_ParseTupleAndKeywords krb5_auth_con_genaddrs PyCObject_Type krb5_auth_con_init krb5_unparse_name strlen __sprintf_chk krb5_principal_compare krb5_parse_name krb5_cc_get_type krb5_cc_get_name krb5_cc_initialize PyExc_ValueError PyErr_SetNone krb5_cc_resolve krb5_cc_default krb5_cc_close krb5_get_server_rcache krb5_kt_get_name krb5_kt_resolve krb5_kt_default krb5_kt_close __memcpy_chk inet_ntop krb5_rd_req krb5_auth_con_getkey krb5_free_keyblock krb5_auth_con_getremoteseqnumber krb5_auth_con_getflags krb5_auth_con_getlocalseqnumber calloc krb5_auth_con_getaddrs krb5_free_addresses krb5_mk_req_extended krb5_free_creds krb5_get_credentials krb5_auth_con_setflags krb5_auth_con_setrcache krb5_auth_con_setuseruserkey krb5_auth_con_setaddrs krb5_auth_con_setports krb5_rd_priv krb5_mk_priv krb5_get_init_creds_opt_init krb5_get_init_creds_keytab krb5_cc_store_cred krb5_free_cred_contents PyTuple_Type PySequence_Check PySequence_Size memset PySequence_GetItem PyErr_NewException pk_exception error_message PyClass_Type PyErr_SetObject PyErr_NoMemory PyObject_CallFunction libkrb5.so.3 libc.so.6 _edata __bss_start _end krbVmodule.so GLIBC_2.4 GLIBC_2.3.4 GLIBC_2.2.5 krb5_3_MIT @ ii
ti ui )0 (0! (0! Q" Q" ; R" R" R" 5! R" (R" p 8R" 9! @R" HR" XR" B! `R" p hR" Ѐ xR" I! R" R" R" Q! R" v R" R" @i! R"
R" К R" @~! R" ~
R" R" @! S" h
S" ` S" ! S"
(S" 8S" `! `S" hS" P xS" ! S" S" S" ! S" S" S"
S"
S" M S" &
S" S"
S" S"
T"
T" T" &
T" @T" HT" ` XT" ! `T"
hT" xT" `! T" T" T" ! T" T" T" ! T" T" p T" ! U" U" P U" @! U" (U" 0U" @U" HU" +
PU" 4
`U" hU" 0 xU" ! U" G
U" U" ! U"
U" U" ! U"
U" U" ! U" U" U" " V" (V" 8V" " @V" HV" XV" " `V" hV" M pV" +
V" V" V" " V"
V" V" " V"
V" И V" @" V" [ V" V" " W" B W" 0 W" @ " W" (W" 8W" %" `W" hW" xW" )" W" W" W" -" W" W"
W" W" M W"
W" W" W"
W" X" (X" M 0X" 8X" @X" +
`X" hX" xX" 1" X"
X" X" 7" X" X" X" ;" X" X" X" <" Y" Y" Y" @>" Y"
(Y" 8Y" F" `Y" hY" @ xY" @J" Y" Y" Y" N" Y" Y" M Y" M Y" +
1!
1!
1! 1! 1! 1! 2! } 2! . 2! / 2! 9 2! V (2! ] 02! k 82! r X2! `2! h2! p2! x2! 2! 2! 2! 2! 2! 2! 2! 2! 2! 2! 2! 2! 2! 2! 2! 2! 3! 3! 3! 3! 3! ! (3! " 03! # 83! $ @3! % H3! & P3! ' X3! y `3! ( h3! ) p3! * x3! + 3! , 3! - 3! . 3! 0 3! 1 3! 2 3! 3 3! 4 3! ~ 3! 5 3! 6 3! 7 3! 8 3! : 3! 3! ; 4! < 4! = 4! > 4! ? 4! @ (4! A 04! B 84! C @4! D H4! E P4! F X4! G `4! H h4! I p4! J x4! K 4! L 4! M 4! N 4! O 4! P 4! Q 4! R 4! S 4! T 4! U 4! W 4! X 4! Y 4! Z 4! [ 4! \ 5! ^ 5! _ 5! ` 5! a 5! b (5! c 05! d 85! e @5! f H5! g P5! h X5! i `5! j h5! l p5! m x5! n 5! o 5! p 5! q 5! s 5! t 5! u 5! v 5! w 5! x H u H5" %$ @ %" h % h % h %
h % h % h % h % h p% h `% h P% h
@% h 0% h % h
% h % h % h % h % h % h % h %z h %r h %j h p%b h `%Z h P%R h @%J h 0%B h %: h %2 h %* h %" h % h! % h" %
h# % h$ % h% % h& % h' p% h( `% h) P% h* @% h+ 0% h, % h- % h. % h/ % h0 % h1 % h2 % h3 % h4 %z h5 %r h6 %j h7 p%b h8 `%Z h9 P%R h: @%J h; 0%B h< %: h= %2 h> %* h? %" h@ % hA % hB %
hC % hD % hE % hF % hG p% hH `% hI P% hJ @% hK 0% hL % hM % hN % hO % hP % hQ % hR % hS % hT %z hU %r hV %j hW p%b hX `%Z hY P%R hZ @%J h[ 0%B h\ %: h] %2 h^ %* h_ %" h` % ha % hb %
hc % hd % he % hf % hg p% hh `% hi P% hj @% hk 0% hl % hm HH HtHÐU= " HATSubH= t H= JH L% He " L)HHH9s D HHE " AH: " H9r& " [A\f H=h UHtH+ HtH=O @ ÐH\$Hl$HH= " H5 HHtHHH\$Hl$HÐH= " H5 xH= H1G1HHHHHt;HE HHHE t H=_ " H5` H| HEHP0H
m H5J H=P
u D AWH5" H=8 11A AVAUATUSHHIC HH " zLHH= H5 HHH5ڟ HHHLHHD$H= H$H4$1HHT$H5 HIxH=`" L%S" IE HHIE t_I I<$ ti11L1LHII4$H<$HIEIHHIuIFLP0f. IEI LP0I<$ uH=D" 111LH>H=" 11IG(z1LH H5 IG0HLL=U" H=I" HHHHA AH=q H$aH4$1HHT$H5C HI,H=T" L%G" ! D IE HHIE t_I I<$ ti11L1LHIXI4$H<$HIIHHIuIFLP0f. IEI LP0I<$ uH=t" 11K1LHH=7" 11IG(*1LHH5] IG0HLL=
" `H=" HHHH@ H=- H$H4$1HSHT$H5 HIH=$" L%" ! D IE HHIE t_I I<$ ti11Lh1LHII4$H<$HIIHHIuIFLP0f. IEI LP0I<$ uH=d" 111LHH='" 11IG(1LH}H5 IG0HLL=" H=" HHHHV? H= H$H4$1HHT$H5 HIH=" L%" ! D IE HHIE t_I I<$ ti11L1LHII4$H<$HIUIHHIuIFLP0f. IEI LP0I<$ uH=T" 111LHNH=" 11IG(1LH-H5Ӛ IG0HLL=}" H=q" HHHH= QH= H$qH4$1HHT$H5S HI HH߹ HA HHHHB HH߹ HA HHHH> HH߹ H? HHHH> 1HHH; HH߹ zH7 HH߹ cH4 HH߹ LH7 HH߹ 5H4 HH߹ HO HH߹ H HH߹ H HH߹ H HH߹ H HH߹
H HH߹ H HH߹ }H HH߹
fH HH߹ OH! HH߹ 8H$ HH߹ !H# HH߹
H" HH߹ HD HH߹ H HH߹ H HH߹ H HH߹ H HH߹ H HH߹ iH HH߹ RH HH߹ ;H HH߹ $H HH߹
H HH߹ H HH߹ H HH߹ HY HH߹ H HH߹ H HH߹ H HH߹ lH HH߹ @UH HH߹ >H HH߹ 'H HH߹ H HH߹@ H HH߹ H HH߹ H HH߹ H HH߹ H HH߹ H HH߹@ oH HH߹A XH HH߹ AHb HH߹ *H HH߹ H HH߹G H 1HHH HH߹ H HH߹ H HH߹ H HH߹ H HH߹ uH HH߹ ^H HH߹ GH HH߹ 0H HH߹ H HH߹ Hk HH߹ H HH߹ H HH߹ HF HH߹ HW HH߹ Hh HH߹ xH HH߹ aH6 HH߹ JH3 HH߹ 3H2 HH߹ H/ HH߹ H2 HH߹ H5 HH߹ H5 HH߹@ H9 HH߹ H8 HH߹ H5 HH߹ {H7 HH߹ dH2 HH߹ MH, HH߹L 6H) HH߹ H$ HH߹ H HH߹ H HH߹ H HH߹ H HH߹ H HH߹@ H HH߹ ~H״ HH߹ gH HH߹ PHՒ HH߹ 9Hڴ HH߹ "H HH߹ H HH߹ H HH߹ H HH߹ Hh HH߹ Hm HH߹ Hi HH߹ Hm HH߹ jH HH߹ SH̴ HH߹ :ǖHƐ HHH?:ǖkHɐ HHH@:ǖRHS HHHA:ǖ9Hj HHHB:ǖ H HHHC:ǖH HHHD:ǖHG HHHE:ǖHV HHHF:ǖHe HHHG:ǖHl HHHH:ǖHs HHHI:ǖqH HHHJ:ǖXH HHHK:ǖ?H HHHL:ǖ&H HHHM:ǖ
H HHHN:ǖH HHHO:ǖHİ HHHP:ǖH۰ HHHQ:ǖH HHH]:ǖHR HHH:ǖwHH HHH:ǖ^HF HHH:ǖEHD HHH:ǖ,HB HHH:ǖH< HHH:ǖH6 HHH:ǖH2 HHH:ǖH. HHH:ǖH+ HHH:ǖH+ HHH:ǖ}H" HHH:ǖdH HHH:ǖKH HHH:ǖ2H
HHH:ǖH HHH:ǖ H HHH:ǖH HHH:ǖH HHH:ǖH HHH:ǖH HHH:ǖH HHH:ǖjH HHH:ǖQH HHH:ǖ8H HHH:ǖ H HHH:ǖH HHH:ǖH HHH:ǖH؎ HHH:ǖHЎ HHH:ǖHɎ HHH:ǖHÎ HHH:ǖpH HHH:ǖWH HHH:ǖ>H HHH:ǖ%H HHH:ǖ H HHH:ǖH HHH:ǖH HHH:ǖHy HHH:ǖHo HHH:ǖHh HHH:ǖvH_ HHH:ǖ]HT HHH:ǖDHN HHH:ǖ+HF HHH:ǖHA HHH:ǖH= HHH:ǖH8 HHH:ǖH2 HHH:ǖH. HHH:ǖH* HHH:ǖ|H! HHH:ǖcH HHH:ǖJH HHH:ǖ1H HHH:ǖH HHH:ǖH HHH:ǖH HHH:ǖH HHH:ǖH HHH:ǖH؍ HHH:ǖHЍ HHH:ǖiHƍ HHH:ǖPH HHH:ǖ7H HHH:ǖ H HHH:ǖH HHH:ǖH HHH:ǖH HHH:ǖH HHH:ǖH} HHH:ǖHs HHH:ǖoHl HHH:ǖVHf HHH:ǖ=H] HHH:ǖ$HZ HHH:ǖ H[ HHH:ǖH\ HHH:ǖH] HHH:ǖH[ HHH:ǖHX HHH:ǖHS HHH:ǖuHN HHH:ǖ\HH HHH:ǖCHB HHH:ǖ*H< HHH:ǖH: HHH:ǖH2 HHH:ǖH/ HHH:ǖH2 HHH:ǖH4 HHH:ǖH3 HHH:ǖ{H2 HHH:ǖbH2 HHH:ǖIH0 HHH:ǖ0H, HHH:ǖH* HHH:ǖH& HHH:ǖH$ HHH:ǖH HHH:ǖH HHH:ǖH HHH:ǖH HHH:ǖhH HHH:ǖOH HHH:ǖ6H HHH:ǖ H HHH:ǖH HHH:ǖH HHH:ǖH HHH:ǖH܌ HHH:ǖHь HHH:ǖHȌ HHH:ǖnH HHH:ǖUH HHH:ǖ @ H[]A\A]A^A_ÐH\$Hl$HLd$Ll$H8HH5y HT$11=u!HHl$ H\$Ld$(Ll$0H8 D H|$H5K wHHuzH|$H59 E1VHnH=[ 1 HI HT$H5 H谲H=q! HL辳HI$HHI$t:MtIE HHIE t1H2H|$H5 H'fID$LP0IELP0HIc H\$Hl$HLd$Ll$H8HH5K HT$11u!HHl$ H\$Ld$(Ll$0H8 D H|$H5 'HHu*H|$H5 E1H H=8Z 1еHI HT$H5S H`H=! HLnHI$HHI$t:MtIE HHIE t1H2H|$H5p HfID$LP0IELP0蒷HIc H\$Hl$HLd$Ll$H8HH5 HT$11蝲u!HHl$ H\$Ld$(Ll$0H8 D H|$H5 ״HHuڵH|$H5 E1趴HγH=X 1耴HI HT$H5 HH=! HL HI$HHI$t:MtIE HHIE t1H2H|$H5= H致fID$LP0IELP0BHIc SHH5 1H0HL$(HT$ ` HD$(H HH@1@8 H= Ht:HT$ HH H5 HRH81HR H$辰1H0[f D Ht$HHD$ Zu6H|$蜱Ht$HHD$ZHD$H0[ 1H0[É話H0[ H|$ HHtHHHtHD$(' @ HHH5̃ HT$1H3t-HD$H $H5 H@HP H H8H$1ү1Hff. H\$Hl$HLd$Ll$HHH
HT$LL$LD$H5_ 1豯u 1H\$(Hl$0Ld$8Ll$@HHfH|$H-ς Ll$読 HHHE18 H= Ht> HHuMuRI}HT$Ht$迳H H d H|$HG t>!LH @ H H5 HH81蕮1f D Hi H5b H81p1f H|$HHHHI
H\$Hl$HLd$Ll$H5 Lt$HHH
" HT$LL$LD$1 1u$H\$ Hl$(Ld$0Ll$8Lt$@HHf D H|$H-ρ Ll$
HHHtxH= HteH|$HH H5 H H HIH|$H5D E1دHtHI f D E1E1Ű HHuMufH= HtNH= Ht@H= Ht-I}HT$Ht$腱H H D MtH H5} HH81耬1f E1 H\$Hl$HLd$Ll$H5 Lt$HHH
R HT$LL$LD$1L1u$H\$ Hl$(Ld$0Ll$8Lt$@HHf D H|$L% Ll$H-~ 3 HLH18 HHuTH=ڀ H H=B H I}HT$Ht$3Hl H ? H|$LH H5~ H˭H HڬIH|$H5~ 覭H1Ht跬 HLuMu, HH(҅ HHȦ H5 HH81蜪1 D E1q H\$Hl$HLd$Ll$H59~ Lt$HHH
r HT$LL$LD$1l1u$H\$ Hl$(Ld$0Ll$8Lt$@HHf D H|$L% ~ Ll$H-} S HLH18uG HH(҅u:Ht5Hǥ H5 HH81蛩1` @ HHu)I}HT$Ht$>Hw H *f D H|$LHtfH5| HHtRHIH|$H5| 趫H1HtǪ HL M5f D E1ff. H\$Hl$HLd$Ll$H5| Lt$HHH
¤ HT$LL$LD$1輨1u$H\$ Hl$(Ld$0Ll$8Lt$@HHf D H|$L%o| Ll$H-~ 裦 HLH18 HHuDH=J} H I}HT$Ht$躬H H Vf. H|$LcH H5.{ HKH HZIH|$H5} &H1Ht7 HLuMu, HH(҅,H#HH H5 HH81 1 D E1q UHH5 { 1SHHHH
HT$8LD$01u
HH[]f D H|$8H5/z OHgHHt
HC u"Hs H5 H81z1f D H5z H豩HHtH5*! H
tH5bz HרHH|$0H肤H|$0HD$HL$(HT$HHD$uvHD$(HpXHtUNHVH=y v1MHHD$(PpH=y A1.Ht$(HHD$謩HD$HH[]H
H ɦ @ HHH5y HL$ 1H胥u1H H<$H5Py ЧHtH5x H輧HtHϦH<$H5y 蟧HtH貦T$ 9P ~HcHHPrHz肤Hɠ H5y H81踤1dUHH5x 1SHH8HT$(1u H8[]fH|$(H5w H'HHt
HC u"H3 H5\ H81:1f D H5?x HqHHtH5! HʦtH5"x HH\$蒦H誥HHHLu0t$H|$zHHHD$HD$H8[]f D H8[]f. AVHAUIATUStx1H? H HPHHuHc1I LcH=mw KD HHPp1譥LHL9[]A\A]LA^ L5 IL[]A\A]A^[]A\A]A^1颦fHHGH uB t Hf HI H5w 1蛣HǸHtf D #Hfffff. H\$Ll$HHl$Ld$H8HIH HT$H虤H|$H HդH=v HH1葤IH5 v LHH$H=! HL2II$HHI$tNHtHHHHtJHE HHHE u
HEHP0LH\$Hl$ Ld$(Ll$0H8 ID$LP0 HCHP0 @ Hi E1H Hl$Ld$HH\$Ll$ILt$L|$HxHHL$(HT$0LD$H5yu 1HD$ /u+1HH\$HHl$PLd$XLl$`Lt$hL|$pHx H|$(xH|$0H51t D$^ H2HHHHtkHT$ H|$(H5-^
H H H8[] HPHT$HH0 H|$HlHtHv @ HCHP0 @ HPH H5m H81茉1 1IHHHD$ H
n H5>0 H=P^ if 艊10H
|n H50 H=] " 3 SHH5\ 1HHL$H"1tiLD$H\ HLuW11H=^ L H=i] L HHҌH H葉H[ H=\ LtH<$HH H5[ HH HHH<$H5[ 轊HtHЉLD$;f D H$H5j LH@HP H H8H$1Շ1H[ D HH譌HňH[ H H 1\f H\$Hl$HLd$H(HLD$H
! Hq\ 1IH$ 貇u 1H\$Hl$Ld$ H( H|$H5/[ 诉H H5zZ H藉H~ H覈IH|$H5}Z 1pHt H胈HH<$H ł H9tHHtKH5Z ?HXHNHHLuM v1LD$0{HHD$XLD$0H@0pLL$8H=\N H1Ld$L4$U{ HH|Ht$XL8x( H|$pHHHHHGP0 @ IL|$8f. yHIL] @ IM @ H$ H=L 1z1HLHHHD$pHE HHHE HEHP0H|$p HE HHHE u
HEHP0Ht$XL1.w f H=z 1zIj|H$ H5K HHuH|$`HL zH5yK HHIwuH=! HLvHD$hIHHIt1HH$ H$ L$ L$ L$ L$ Hĸ ÐH$p H5E tHsH$h IH` [pH$h H$ q$ L$ 1 E1LHH$8 HN H$P H H5DE 9tHH$H IsHH$X H H;=~m H5eE 1sHH$H
sH$ H$` HI H;=:m < H5!E sHH$H rH$8 H$ H$ H$ H$@ Ht$H5D hsHH$H xrH$0 H$ $| H$0 H$ MLIoH$( AHtLKq Euf tH$@ HH H1H"t$ H$ oHH¾ sHLCpf D D@qH| H H$ HL qu qH< HZD DŽ$ H$ H$ L r H$H IT$dML$(MD$ H5D HHD$`HD$8HD$0HD$(ID$ L H=@ L! H=? Lk LLuMuOAE :> u,AE:> u AE:> uAE:> uHuIHUHuoDH5)M LHGf H81%j1f D H}H5= lH HkHHLj*k D kk @ E1 He H5? H81i1OLmH}H5? 1HE HE IMIUMEHE i LHLgE[ @ HULmH}LEH5-? 1HxLxHUL5iH} H0Lt$H HD$II IF HH}IFLis H} H0L|$H HD$II IG HH}IGL Uā E= E1 E1u[LLHLLpNjLp.LLHL~iE18E1|jH01 Ll$ILAE AE HxIElH01 LD$ILA@ A@ MhE0H~c H5K H81Ug1HUH5T= HUH5D= H
GL H5 H== /fffffff. UHH5 = 1SHXH\$ HT$HD$0 D$4 D$8 HKLCfu 1HX[]fH|$HH5: ?iHtH5: H+iHtH>hHHtH|$HH5: iHtHhHtHL$LD$0HHHHD$ HD$ fu't$H|$eH|$HD$XfHD$EGg9fUHH5< 1SHXH\$ HT$HD$0 D$4 D$8 HKLCeu 1HX[]fH|$HH59 /hHtH58 HhHtH.gHHtH|$HH5}9 gHtHgHtHL$LD$0HHHHD$ HD$ Yhu't$H|$dH|$HD$HeHD$E7f9fH\$Hl$HLd$Ll$HLt$L|$H8 H$ L$ L$ H
F! H: HDŽ$ H$1HDŽ$ du@1H$ H$ L$ L$ L$( L$0 H8 f D H$ H548 fH+ H57 HfH HeIH$ H57 E1qfHt HeIH$ H59 1KfHt H^eHH$ L=_ L9 H H5w7 fHH\$ He IH1HH$ HHD$gHD$E1E1HLHLH$3eu?HLL!au-HLaILf D E1 d^HDŽ$ H$ H=7 1"e1H1HSHH$ HHHHHCHP0H$ fffff. UHH
! HH8 HH]LeLELmLuL}H L
^ dH%( HE1HEHE HE HE E HD$HEHD$HEH$13bu/1HUdH3%( H]LeLmLuL} @ H 1 H5/7 HHHUHHEH}HMHD$`HHdHD$XHHhHD$PHHTHD$HHHXHD$@HEHD$8HD$0HD$(HHw]eHEHUHHE Hpf^H}HH^H=R0 H1b^H=! I1H [MHEt I$HHI$u ID$LP0HEH\$Hl$HLd$HILl$H(H\LI\LIHH+`LLHHl$H\$Ld$Ll$ H(`S\H=@ 11H'^H W HH5@ HH[*Yf. H\$Hl$Ld$Ll$H( HcHZHI[LH[HHtAHtRL%V HSV I<$H9G H=@ HH1\I<$H%[HtHE HHHE t?HtHHHHt1H\$Hl$Ld$Ll$ H(HCHP0 @ HEHP0 @ ;Yf H5? 1HH ^HItH5f? HH\H5]? HL\I<$LdZIE HHIE *IELP0UHSHH`S HtH SS HHHuH[ÐH_^H _default_context () krb5module.c retval krbV __doc__ errors __module__ AuthContext Principal CCache RCache Keytab KRB5_DEPRECATED VALID_INT_BITS VALID_UINT_BITS KRB5_INT32_MAX KRB5_INT32_MIN KRB5_INT16_MAX KRB5_INT16_MIN SALT_TYPE_AFS_LENGTH SALT_TYPE_NO_LENGTH KRB5_NT_UNKNOWN KRB5_NT_PRINCIPAL KRB5_NT_SRV_INST KRB5_NT_SRV_HST KRB5_NT_SRV_XHST KRB5_NT_UID KRB5_NT_X500_PRINCIPAL KRB5_NT_SMTP_NAME KRB5_NT_ENTERPRISE_PRINCIPAL KRB5_NT_WELLKNOWN KRB5_NT_MS_PRINCIPAL KRB5_NT_MS_PRINCIPAL_AND_ID KRB5_NT_ENT_PRINCIPAL_AND_ID ADDRTYPE_INET ADDRTYPE_CHAOS ADDRTYPE_XNS ADDRTYPE_ISO ADDRTYPE_DDP ADDRTYPE_NETBIOS ADDRTYPE_INET6 ADDRTYPE_ADDRPORT ADDRTYPE_IPPORT ENCTYPE_NULL ENCTYPE_DES_CBC_CRC ENCTYPE_DES_CBC_MD4 ENCTYPE_DES_CBC_MD5 ENCTYPE_DES_CBC_RAW ENCTYPE_DES3_CBC_SHA ENCTYPE_DES3_CBC_RAW ENCTYPE_DES_HMAC_SHA1 ENCTYPE_DSA_SHA1_CMS ENCTYPE_MD5_RSA_CMS ENCTYPE_SHA1_RSA_CMS ENCTYPE_RC2_CBC_ENV ENCTYPE_RSA_ENV ENCTYPE_RSA_ES_OAEP_ENV ENCTYPE_DES3_CBC_ENV ENCTYPE_DES3_CBC_SHA1 ENCTYPE_ARCFOUR_HMAC ENCTYPE_ARCFOUR_HMAC_EXP ENCTYPE_UNKNOWN CKSUMTYPE_CRC32 CKSUMTYPE_RSA_MD4 CKSUMTYPE_RSA_MD4_DES CKSUMTYPE_DESCBC CKSUMTYPE_RSA_MD5 CKSUMTYPE_RSA_MD5_DES CKSUMTYPE_NIST_SHA CKSUMTYPE_HMAC_SHA1_DES3 CKSUMTYPE_HMAC_SHA1_96_AES128 CKSUMTYPE_HMAC_SHA1_96_AES256 CKSUMTYPE_MD5_HMAC_ARCFOUR CKSUMTYPE_HMAC_MD5_ARCFOUR KRB5_KEYUSAGE_KDC_REP_TICKET KRB5_KEYUSAGE_AS_REP_ENCPART KRB5_KEYUSAGE_TGS_REQ_AUTH KRB5_KEYUSAGE_AP_REQ_AUTH KRB5_KEYUSAGE_AP_REP_ENCPART KRB5_KEYUSAGE_KRB_SAFE_CKSUM KRB5_KEYUSAGE_APP_DATA_CKSUM KRB5_KEYUSAGE_KRB_ERROR_CKSUM KRB5_KEYUSAGE_AD_MTE KRB5_KEYUSAGE_AD_ITE KRB5_KEYUSAGE_GSS_TOK_MIC KRB5_KEYUSAGE_PA_SAM_RESPONSE KRB5_KEYUSAGE_PA_REFERRAL KRB5_KEYUSAGE_AD_SIGNEDPATH KRB5_KEYUSAGE_PA_PKINIT_KX KRB5_KEYUSAGE_FAST_REQ_CHKSUM KRB5_KEYUSAGE_FAST_ENC KRB5_KEYUSAGE_FAST_REP KRB5_KEYUSAGE_FAST_FINISHED KRB5_KEYUSAGE_AS_REQ KRB5_CRYPTO_TYPE_EMPTY KRB5_CRYPTO_TYPE_HEADER KRB5_CRYPTO_TYPE_DATA KRB5_CRYPTO_TYPE_SIGN_ONLY KRB5_CRYPTO_TYPE_PADDING KRB5_CRYPTO_TYPE_TRAILER KRB5_CRYPTO_TYPE_CHECKSUM KRB5_CRYPTO_TYPE_STREAM KDC_OPT_FORWARDABLE KDC_OPT_FORWARDED KDC_OPT_PROXIABLE KDC_OPT_PROXY KDC_OPT_ALLOW_POSTDATE KDC_OPT_POSTDATED KDC_OPT_RENEWABLE KDC_OPT_CNAME_IN_ADDL_TKT KDC_OPT_CANONICALIZE KDC_OPT_REQUEST_ANONYMOUS KDC_OPT_RENEWABLE_OK KDC_OPT_ENC_TKT_IN_SKEY KDC_OPT_RENEW KDC_OPT_VALIDATE KDC_TKT_COMMON_MASK AP_OPTS_RESERVED AP_OPTS_USE_SESSION_KEY AP_OPTS_MUTUAL_REQUIRED AP_OPTS_ETYPE_NEGOTIATION AP_OPTS_USE_SUBKEY AP_OPTS_WIRE_MASK AD_TYPE_RESERVED AD_TYPE_EXTERNAL AD_TYPE_REGISTERED AD_TYPE_FIELD_TYPE_MASK TKT_FLG_FORWARDABLE TKT_FLG_FORWARDED TKT_FLG_PROXIABLE TKT_FLG_PROXY TKT_FLG_MAY_POSTDATE TKT_FLG_POSTDATED TKT_FLG_INVALID TKT_FLG_RENEWABLE TKT_FLG_INITIAL TKT_FLG_PRE_AUTH TKT_FLG_HW_AUTH TKT_FLG_OK_AS_DELEGATE TKT_FLG_ENC_PA_REP TKT_FLG_ANONYMOUS LR_TYPE_THIS_SERVER_ONLY LR_TYPE_INTERPRETATION_MASK MSEC_DIRBIT MSEC_VAL_MASK KRB5_PVNO KRB5_AS_REQ KRB5_AS_REP KRB5_TGS_REQ KRB5_TGS_REP KRB5_AP_REQ KRB5_AP_REP KRB5_SAFE KRB5_PRIV KRB5_CRED KRB5_ERROR KRB5_LRQ_NONE KRB5_LRQ_ALL_LAST_TGT KRB5_LRQ_ONE_LAST_TGT KRB5_LRQ_ALL_LAST_INITIAL KRB5_LRQ_ONE_LAST_INITIAL KRB5_LRQ_ALL_LAST_TGT_ISSUED KRB5_LRQ_ONE_LAST_TGT_ISSUED KRB5_LRQ_ALL_LAST_RENEWAL KRB5_LRQ_ONE_LAST_RENEWAL KRB5_LRQ_ALL_LAST_REQ KRB5_LRQ_ONE_LAST_REQ KRB5_LRQ_ALL_PW_EXPTIME KRB5_LRQ_ONE_PW_EXPTIME KRB5_PADATA_NONE KRB5_PADATA_AP_REQ KRB5_PADATA_TGS_REQ KRB5_PADATA_ENC_TIMESTAMP KRB5_PADATA_PW_SALT KRB5_PADATA_ENC_UNIX_TIME KRB5_PADATA_SESAME KRB5_PADATA_OSF_DCE KRB5_CYBERSAFE_SECUREID KRB5_PADATA_AFS3_SALT KRB5_PADATA_ETYPE_INFO KRB5_PADATA_SAM_CHALLENGE KRB5_PADATA_SAM_RESPONSE KRB5_PADATA_PK_AS_REQ_OLD KRB5_PADATA_PK_AS_REP_OLD KRB5_PADATA_PK_AS_REQ KRB5_PADATA_PK_AS_REP KRB5_PADATA_ETYPE_INFO2 KRB5_PADATA_SVR_REFERRAL_INFO KRB5_PADATA_SAM_REDIRECT KRB5_PADATA_REFERRAL KRB5_PADATA_SAM_CHALLENGE_2 KRB5_PADATA_SAM_RESPONSE_2 KRB5_PADATA_PAC_REQUEST KRB5_PADATA_FOR_USER KRB5_PADATA_S4U_X509_USER KRB5_PADATA_FX_COOKIE KRB5_PADATA_FX_FAST KRB5_PADATA_FX_ERROR KRB5_PADATA_PKINIT_KX KRB5_ENCPADATA_REQ_ENC_PA_REP KRB5_SAM_USE_SAD_AS_KEY KRB5_SAM_SEND_ENCRYPTED_SAD KRB5_SAM_MUST_PK_ENCRYPT_SAD KRB5_PADATA_DASS KRB5_DOMAIN_X500_COMPRESS KRB5_AUTHDATA_IF_RELEVANT KRB5_AUTHDATA_KDC_ISSUED KRB5_AUTHDATA_AND_OR KRB5_AUTHDATA_OSF_DCE KRB5_AUTHDATA_SESAME KRB5_AUTHDATA_WIN2K_PAC KRB5_AUTHDATA_SIGNTICKET KRB5_AUTHDATA_FX_ARMOR KRB5_KPASSWD_SUCCESS KRB5_KPASSWD_MALFORMED KRB5_KPASSWD_HARDERROR KRB5_KPASSWD_AUTHERROR KRB5_KPASSWD_SOFTERROR KRB5_KPASSWD_ACCESSDENIED KRB5_KPASSWD_BAD_VERSION KRB5_AUTH_CONTEXT_DO_TIME KRB5_AUTH_CONTEXT_RET_TIME KRB5_AUTH_CONTEXT_DO_SEQUENCE KRB5_AUTH_CONTEXT_PERMIT_ALL KRB5_AUTH_CONTEXT_USE_SUBKEY KRB5_TC_MATCH_TIMES KRB5_TC_MATCH_IS_SKEY KRB5_TC_MATCH_FLAGS KRB5_TC_MATCH_TIMES_EXACT KRB5_TC_MATCH_FLAGS_EXACT KRB5_TC_MATCH_AUTHDATA KRB5_TC_MATCH_SRV_NAMEONLY KRB5_TC_MATCH_2ND_TKT KRB5_TC_MATCH_KTYPE KRB5_TC_SUPPORTED_KTYPES KRB5_TC_OPENCLOSE KRB5_TC_NOTICKET MAX_KEYTAB_NAME_LEN KRB5_GC_USER_USER KRB5_GC_CACHED KRB5_GC_CANONICALIZE KRB5_GC_NO_STORE KRB5_GC_FORWARDABLE KRB5_GC_NO_TRANSIT_CHECK KRB5_PRINCIPAL_PARSE_NO_REALM KRB5_PRINCIPAL_UNPARSE_SHORT KRB5_PRINCIPAL_COMPARE_UTF8 KRB5_TGS_NAME_SIZE KRB5_RECVAUTH_SKIP_VERSION KRB5_RECVAUTH_BADAUTHVERS KRB5_GET_INIT_CREDS_OPT_SALT KRB5_FAST_REQUIRED KRB5_PROMPT_TYPE_PASSWORD KRB5_PROMPT_TYPE_NEW_PASSWORD KRB5_PROMPT_TYPE_PREAUTH KRB5KDC_ERR_NONE KRB5KDC_ERR_NAME_EXP KRB5KDC_ERR_SERVICE_EXP KRB5KDC_ERR_BAD_PVNO KRB5KDC_ERR_C_OLD_MAST_KVNO KRB5KDC_ERR_S_OLD_MAST_KVNO KRB5KDC_ERR_NULL_KEY KRB5KDC_ERR_CANNOT_POSTDATE KRB5KDC_ERR_NEVER_VALID KRB5KDC_ERR_POLICY KRB5KDC_ERR_BADOPTION KRB5KDC_ERR_ETYPE_NOSUPP KRB5KDC_ERR_SUMTYPE_NOSUPP KRB5KDC_ERR_TRTYPE_NOSUPP KRB5KDC_ERR_CLIENT_REVOKED KRB5KDC_ERR_SERVICE_REVOKED KRB5KDC_ERR_TGT_REVOKED KRB5KDC_ERR_CLIENT_NOTYET KRB5KDC_ERR_SERVICE_NOTYET KRB5KDC_ERR_KEY_EXP KRB5KDC_ERR_PREAUTH_FAILED KRB5KDC_ERR_PREAUTH_REQUIRED KRB5KDC_ERR_SERVER_NOMATCH KRB5KDC_ERR_PATH_NOT_ACCEPTED KRB5KDC_ERR_SVC_UNAVAILABLE KRB5KRB_AP_ERR_BAD_INTEGRITY KRB5KRB_AP_ERR_TKT_EXPIRED KRB5KRB_AP_ERR_TKT_NYV KRB5KRB_AP_ERR_REPEAT KRB5KRB_AP_ERR_NOT_US KRB5KRB_AP_ERR_BADMATCH KRB5KRB_AP_ERR_SKEW KRB5KRB_AP_ERR_BADADDR KRB5KRB_AP_ERR_BADVERSION KRB5KRB_AP_ERR_MSG_TYPE KRB5KRB_AP_ERR_MODIFIED KRB5KRB_AP_ERR_BADORDER KRB5KRB_AP_ERR_ILL_CR_TKT KRB5KRB_AP_ERR_BADKEYVER KRB5KRB_AP_ERR_NOKEY KRB5KRB_AP_ERR_MUT_FAIL KRB5KRB_AP_ERR_BADDIRECTION KRB5KRB_AP_ERR_METHOD KRB5KRB_AP_ERR_BADSEQ KRB5KRB_AP_ERR_INAPP_CKSUM KRB5KRB_AP_PATH_NOT_ACCEPTED KRB5KRB_ERR_RESPONSE_TOO_BIG KRB5KRB_ERR_GENERIC KRB5KRB_ERR_FIELD_TOOLONG KRB5KDC_ERR_KDC_NOT_TRUSTED KRB5KDC_ERR_INVALID_SIG KRB5KRB_AP_ERR_NO_TGT KRB5KDC_ERR_WRONG_REALM KRB5KDC_ERR_KDC_NAME_MISMATCH KRB5_ERR_RCSID KRB5_LIBOS_BADLOCKFLAG KRB5_LIBOS_CANTREADPWD KRB5_LIBOS_BADPWDMATCH KRB5_LIBOS_PWDINTR KRB5_PARSE_ILLCHAR KRB5_PARSE_MALFORMED KRB5_CONFIG_CANTOPEN KRB5_CONFIG_BADFORMAT KRB5_CONFIG_NOTENUFSPACE KRB5_BADMSGTYPE KRB5_CC_BADNAME KRB5_CC_UNKNOWN_TYPE KRB5_CC_NOTFOUND KRB5_CC_END KRB5_NO_TKT_SUPPLIED KRB5KRB_AP_WRONG_PRINC KRB5KRB_AP_ERR_TKT_INVALID KRB5_PRINC_NOMATCH KRB5_KDCREP_MODIFIED KRB5_KDCREP_SKEW KRB5_IN_TKT_REALM_MISMATCH KRB5_PROG_ETYPE_NOSUPP KRB5_PROG_KEYTYPE_NOSUPP KRB5_WRONG_ETYPE KRB5_PROG_SUMTYPE_NOSUPP KRB5_REALM_UNKNOWN KRB5_SERVICE_UNKNOWN KRB5_KDC_UNREACH KRB5_NO_LOCALNAME KRB5_MUTUAL_FAILED KRB5_RC_TYPE_EXISTS KRB5_RC_MALLOC KRB5_RC_TYPE_NOTFOUND KRB5_RC_UNKNOWN KRB5_RC_REPLAY KRB5_RC_IO KRB5_RC_NOIO KRB5_RC_PARSE KRB5_RC_IO_EOF KRB5_RC_IO_MALLOC KRB5_RC_IO_PERM KRB5_RC_IO_IO KRB5_RC_IO_UNKNOWN KRB5_RC_IO_SPACE KRB5_TRANS_CANTOPEN KRB5_TRANS_BADFORMAT KRB5_LNAME_CANTOPEN KRB5_LNAME_NOTRANS KRB5_LNAME_BADFORMAT KRB5_CRYPTO_INTERNAL KRB5_KT_BADNAME KRB5_KT_UNKNOWN_TYPE KRB5_KT_NOTFOUND KRB5_KT_END KRB5_KT_NOWRITE KRB5_KT_IOERR KRB5_NO_TKT_IN_RLM KRB5DES_BAD_KEYPAR KRB5DES_WEAK_KEY KRB5_BAD_ENCTYPE KRB5_BAD_KEYSIZE KRB5_BAD_MSIZE KRB5_CC_TYPE_EXISTS KRB5_KT_TYPE_EXISTS KRB5_CC_IO KRB5_FCC_PERM KRB5_FCC_NOFILE KRB5_FCC_INTERNAL KRB5_CC_WRITE KRB5_CC_NOMEM KRB5_CC_FORMAT KRB5_CC_NOT_KTYPE KRB5_INVALID_FLAGS KRB5_NO_2ND_TKT KRB5_NOCREDS_SUPPLIED KRB5_SENDAUTH_BADAUTHVERS KRB5_SENDAUTH_BADAPPLVERS KRB5_SENDAUTH_BADRESPONSE KRB5_SENDAUTH_REJECTED KRB5_PREAUTH_BAD_TYPE KRB5_PREAUTH_NO_KEY KRB5_PREAUTH_FAILED KRB5_RCACHE_BADVNO KRB5_CCACHE_BADVNO KRB5_KEYTAB_BADVNO KRB5_PROG_ATYPE_NOSUPP KRB5_RC_REQUIRED KRB5_ERR_BAD_HOSTNAME KRB5_ERR_HOST_REALM_UNKNOWN KRB5_SNAME_UNSUPP_NAMETYPE KRB5KRB_AP_ERR_V4_REPLY KRB5_REALM_CANT_RESOLVE KRB5_TKT_NOT_FORWARDABLE KRB5_FWD_BAD_PRINCIPAL KRB5_GET_IN_TKT_LOOP KRB5_CONFIG_NODEFREALM KRB5_SAM_UNSUPPORTED KRB5_SAM_INVALID_ETYPE KRB5_SAM_NO_CHECKSUM KRB5_SAM_BAD_CHECKSUM KRB5_KT_NAME_TOOLONG KRB5_KT_KVNONOTFOUND KRB5_APPL_EXPIRED KRB5_LIB_EXPIRED KRB5_CHPW_PWDNULL KRB5_CHPW_FAIL KRB5_KT_FORMAT KRB5_NOPERM_ETYPE KRB5_CONFIG_ETYPE_NOSUPP KRB5_OBSOLETE_FN KRB5_EAI_FAIL KRB5_EAI_NODATA KRB5_EAI_NONAME KRB5_EAI_SERVICE KRB5_ERR_NUMERIC_REALM KRB5_ERR_BAD_S2K_PARAMS KRB5_ERR_NO_SERVICE KRB5_CC_READONLY KRB5_CC_NOSUPP KRB5_DELTAT_BADFORMAT KRB5_PLUGIN_NO_HANDLE KRB5_PLUGIN_OP_NOTSUPP KRB5_ERR_INVALID_UTF8 KRB5_ERR_FAST_REQUIRED KRB5_LOCAL_ADDR_REQUIRED KRB5_REMOTE_ADDR_REQUIRED KRB5_KDB_RCSID KRB5_KDB_INUSE KRB5_KDB_UK_SERROR KRB5_KDB_UK_RERROR KRB5_KDB_UNAUTH KRB5_KDB_NOENTRY KRB5_KDB_ILL_WILDCARD KRB5_KDB_DB_INUSE KRB5_KDB_DB_CHANGED KRB5_KDB_TRUNCATED_RECORD KRB5_KDB_RECURSIVELOCK KRB5_KDB_NOTLOCKED KRB5_KDB_BADLOCKMODE KRB5_KDB_DBNOTINITED KRB5_KDB_DBINITED KRB5_KDB_ILLDIRECTION KRB5_KDB_NOMASTERKEY KRB5_KDB_BADMASTERKEY KRB5_KDB_INVALIDKEYSIZE KRB5_KDB_CANTREAD_STORED KRB5_KDB_BADSTORED_MKEY KRB5_KDB_NOACTMASTERKEY KRB5_KDB_KVNONOMATCH KRB5_KDB_CANTLOCK_DB KRB5_KDB_DB_CORRUPT KRB5_KDB_BAD_VERSION KRB5_KDB_BAD_SALTTYPE KRB5_KDB_BAD_ENCTYPE KRB5_KDB_BAD_CREATEFLAGS KRB5_KDB_NO_PERMITTED_KEY KRB5_KDB_NO_MATCHING_KEY KRB5_KDB_DBTYPE_NOTFOUND KRB5_KDB_DBTYPE_NOSUP KRB5_KDB_DBTYPE_INIT KRB5_KDB_SERVER_INTERNAL_ERR KRB5_KDB_ACCESS_ERROR KRB5_KDB_INTERNAL_ERROR KRB5_KDB_CONSTRAINT_VIOLATION KRB5_LOG_CONV KRB5_LOG_UNSTABLE KRB5_LOG_CORRUPT KRB5_LOG_ERROR KV5M_NONE KV5M_PRINCIPAL KV5M_DATA KV5M_KEYBLOCK KV5M_CHECKSUM KV5M_ENCRYPT_BLOCK KV5M_ENC_DATA KV5M_CRYPTOSYSTEM_ENTRY KV5M_CS_TABLE_ENTRY KV5M_CHECKSUM_ENTRY KV5M_AUTHDATA KV5M_TRANSITED KV5M_ENC_TKT_PART KV5M_TICKET KV5M_AUTHENTICATOR KV5M_TKT_AUTHENT KV5M_CREDS KV5M_LAST_REQ_ENTRY KV5M_PA_DATA KV5M_KDC_REQ KV5M_ENC_KDC_REP_PART KV5M_KDC_REP KV5M_ERROR KV5M_AP_REQ KV5M_AP_REP KV5M_AP_REP_ENC_PART KV5M_RESPONSE KV5M_SAFE KV5M_PRIV KV5M_PRIV_ENC_PART KV5M_CRED KV5M_CRED_INFO KV5M_CRED_ENC_PART KV5M_PWD_DATA KV5M_ADDRESS KV5M_KEYTAB_ENTRY KV5M_CONTEXT KV5M_OS_CONTEXT KV5M_ALT_METHOD KV5M_ETYPE_INFO_ENTRY KV5M_DB_CONTEXT KV5M_AUTH_CONTEXT KV5M_KEYTAB KV5M_RCACHE KV5M_CCACHE KV5M_PREAUTH_OPS KV5M_SAM_CHALLENGE KV5M_SAM_CHALLENGE_2 KV5M_SAM_KEY KV5M_ENC_SAM_RESPONSE_ENC KV5M_ENC_SAM_RESPONSE_ENC_2 KV5M_SAM_RESPONSE KV5M_SAM_RESPONSE_2 KV5M_PREDICTED_SAM_RESPONSE KV5M_PASSWD_PHRASE_ELEMENT KV5M_GSS_OID KV5M_GSS_QUEUE KV5M_FAST_ARMORED_REQ KV5M_FAST_REQ KV5M_FAST_RESPONSE KV5M_AUTHDATA_CONTEXT KRB524_BADKEY KRB524_BADADDR KRB524_BADPRINC KRB524_BADREALM KRB524_V4ERR KRB524_ENCFULL KRB524_DECEMPTY KRB524_NOTRESP KRB524_KRB4_DISABLED ASN1_BAD_TIMEFORMAT ASN1_MISSING_FIELD ASN1_MISPLACED_FIELD ASN1_TYPE_MISMATCH ASN1_OVERFLOW ASN1_OVERRUN ASN1_BAD_ID ASN1_BAD_LENGTH ASN1_BAD_FORMAT ASN1_PARSE_ERROR ASN1_BAD_GMTIME ASN1_MISMATCH_INDEF ASN1_MISSING_EOC O:default_keytab _default_kt _ctx O:default_rcache _default_rc O:default_ccache _default_cc Os:__getattr__ default_realm OO!O:__setattr__ argument 2 must be a string _princ OO!:rd_rep auth_context _ac (iz#) (iiNI) Oi:__getitem__ index out of range O:mk_rep fileno (O) OOs:recvauth options server O:principal OOs:sendauth client data must be a string type BLANK O:__len__ OO:__eq__ cobj OO|i:genaddrs O|OO!:__init__ conobj O:__repr__ OO|O:__init__ OO:initialize O|SOOO:__init__ ccname ppo default O|zOO:__init__ Oz#|iOOO:rd_req (iiii) (iOOOOOO) flags localseqnumber remoteseqnumber O|OSiOOOO:mk_req OO(iz#)(iiii)OOOz#z#O A ccache is required flags must be an integer tmp useruserkey iz# zIzI invalid address: %.400s Os# OO|O:init_creds_keytab OO!|ii:get_credentials z#i authdata must be a sequence (NN(iz#)(iiii)iiNz#z#N) self in_data mk_priv rd_priv fh init in_creds basepid primary_principal This module implements python bindings to the Kerberos 5 API. ENCTYPE_AES128_CTS_HMAC_SHA1_96 ENCTYPE_AES256_CTS_HMAC_SHA1_96 KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM KRB5_KEYUSAGE_KRB_PRIV_ENCPART KRB5_KEYUSAGE_KRB_CRED_ENCPART KRB5_KEYUSAGE_APP_DATA_ENCRYPT KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT KRB5_KEYUSAGE_ENC_CHALLENGE_KDC KDC_OPT_DISABLE_TRANSITED_CHECK TKT_FLG_TRANSIT_POLICY_CHECKED KRB5_PADATA_ENC_SANDIA_SECURID KRB5_PADATA_USE_SPECIFIED_KVNO KRB5_PADATA_GET_FROM_TYPED_DATA KRB5_PADATA_ENCRYPTED_CHALLENGE KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE KRB5_AUTHDATA_MANDATORY_FOR_KDC KRB5_AUTHDATA_INITIAL_VERIFIED_CAS KRB5_AUTHDATA_ETYPE_NEGOTIATION KRB5_KPASSWD_INITIAL_FLAG_NEEDED KRB5_AUTH_CONTEXT_RET_SEQUENCE KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR KRB5_GC_CONSTRAINED_DELEGATION KRB5_PRINCIPAL_PARSE_REQUIRE_REALM KRB5_PRINCIPAL_PARSE_ENTERPRISE KRB5_PRINCIPAL_UNPARSE_NO_REALM KRB5_PRINCIPAL_UNPARSE_DISPLAY KRB5_PRINCIPAL_COMPARE_IGNORE_REALM KRB5_PRINCIPAL_COMPARE_ENTERPRISE KRB5_PRINCIPAL_COMPARE_CASEFOLD KRB5_GET_INIT_CREDS_OPT_TKT_LIFE KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE KRB5_GET_INIT_CREDS_OPT_FORWARDABLE KRB5_GET_INIT_CREDS_OPT_PROXIABLE KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT KRB5_GET_INIT_CREDS_OPT_CANONICALIZE KRB5_GET_INIT_CREDS_OPT_ANONYMOUS KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN KRB5KDC_ERR_PRINCIPAL_NOT_UNIQUE KRB5KDC_ERR_PADATA_TYPE_NOSUPP KRB5KDC_ERR_MUST_USE_USER2USER KRB5KDC_ERR_CLIENT_NOT_TRUSTED KRB5KDC_ERR_DH_KEY_PARAMETERS_NOT_ACCEPTED KRB5KDC_ERR_CERTIFICATE_MISMATCH KRB5KRB_AP_ERR_USER_TO_USER_REQUIRED KRB5KDC_ERR_CANT_VERIFY_CERTIFICATE KRB5KDC_ERR_INVALID_CERTIFICATE KRB5KDC_ERR_REVOKED_CERTIFICATE KRB5KDC_ERR_REVOCATION_STATUS_UNKNOWN KRB5KDC_ERR_REVOCATION_STATUS_UNAVAILABLE KRB5KDC_ERR_CLIENT_NAME_MISMATCH KRB5KDC_ERR_INCONSISTENT_KEY_PURPOSE KRB5KDC_ERR_DIGEST_IN_CERT_NOT_ACCEPTED KRB5KDC_ERR_PA_CHECKSUM_MUST_BE_INCLUDED KRB5KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED KRB5KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTED KRB5KDC_ERR_UNKNOWN_CRITICAL_FAST_OPTION KRB5_KDB_STORED_MKEY_NOTCURRENT %.50s instance has no attribute '%.400s' You cannot set attribute '%.400s' auth_context keyword argument required A server keyword argument is required Second argument must be a CCache Second argument must be a RCache Second argument must be a Keytab Second argument must be a Principal Invalid type %s for argument 1 primary_principal argument must be a Principal A server principal is required port numbers cannot be greater than 65535 authdata must be a sequence or string pk_default_context Context_init AuthContext_setattr AuthContext_init Principal_init CCache__init__ RCache_init Keytab_init krbV.Krb5Error OO err_code message ; 7 $ ! ed df g i 4j j4 $l\ m o q Ts t< u\ v tw w$ yL || } } ă T$ TT T T Ĉ < T| d t, D\ Ԓ $ D T < dl ,
Ԧ
T
d tD t $ d zR x @ N Nb
B d < D BZB B(A0A8DPBC
8G0A(B BBBX t8A0A(B BBB $ bI [@Ct
F $ cI [@Ct
F $ dI [@Ct
F < f, AP@J}
AG
AH F
AA K
AD \ gU D P$ t Xg [P_c
C $ h gPXj
G $ hj gPXj
G $ l gPXj
G $ m gPXj
G < < Po AMCD`b
AAG -
AAA | p D c
I D @q AMCDPV
AAC
AAG KAA \ r BECB A(A0Bf
(A BBEH O
(A BBBA A(A BBB D hrb Db
J q $ d r MN@O
D , s M[dp
D pw hw $ `w ZI@Xi
D , 8y M^pB
C D } D b
J _ , d (~ AP HQ
AE
AK , ~ AP HQ
AE
AK , AP HQ
AE
AK $ D j
B D
D K
A , ACACLPJ
AAH , L AUDP]O
AAH < | ` AUDPs
AAH l
AAA L Ѓ AMDPJ
AAH F
AAH p
CAD P
AAF $ 0U AM
Zh
H 4 4 h AMD0HQ
AAC
AAD , l @ AUDP^
AAD 4 AP Hz
AD
AF W
AH $ 8L V0c^
I , ` AUBDpm
AAE , P 4 D H BMA CD@"
AABC , | y AKDX
AAF $ AXPz
AF h L ` BCBB B(A0A8D]
8A0A(B BBBG , < ^QC
A T l `@ BMA DPJ
AABH
AABA b
AABJ , H ^QڏE
B , AM
}s
B , $ h AMDpEt
AAC , T H AMDpEt
AAC , ( kDB
G , AW
ps
E $ k MKI0CB
P6 Ap $ ,
pp X0I
A (0! 4
o P
@2! P
) o ` o o Z o 00! 64 F4 V4 f4 v4 4 4 4 4 4 4 4 4 5 5 &5 65 F5 V5 f5 v5 5 5 5 5 5 5 5 5 6 6 &6 66 F6 V6 f6 v6 6 6 6 6 6 6 6 6 7 7 &7 67 F7 V7 f7 v7 7 7 7 7 7 7 7 7 8 8 &8 68 F8 V8 f8 v8 8 8 8 8 8 8 8 8 9 9 &9 69 F9 V9 f9 v9 9 9 9 9 9 9 9 9 : : &: 6: F: V: f: v: : : : : : : : : ; __init__() -> KrbV.Context
:Summary : Create a Krb Context object.
Internal function, do not use.
:Purpose :
The KrbV.Context structure is designed to hold all per-thread state.
All global variables that are thread-specific are stored in this structure,
including default encryption-types, credentials-cache (ticket file), and
default realms. The internals of the structure should never be accessed
directly, functions exist for extracting information.
:Return value :
__init__() returns a Context object.
default_ccache(context) -> CCache object
:Summary : Retrieve the default credentials-cache object from the current
Kerberos context, or from the ticket-file, if necessary.
:Parameters :
context : KrbV.Context
The current Kerberos context holds the host's kerberos config-data,
including default encryption-types, credentials-cache (ticket file),
and default realms.
:Purpose :
default_ccache() loads the default ticket-file's contents into a CCache
object. The default ticket-file's pathname is part of the krb context.
BTW, only kerberos clients have ticket files; this is where a client's
short-lived tickets and session keys stay, while a user is logged-in.
:Action and side-effects :
krb_context.default_ccache() calls CCache.__init__(context=krb_context),
which in turn calls the krblib C routine krb5_cc_default().
krb5_cc_default() looks in the krb context for the default filename of
the ticket file, and then reads the ticket-file's contents into a
credentials-cache (a C data-structure), Finally, default_ccache()
converts the C-struct credentials-cache to a CCache object.
:Return value :
A CCache object, containing the user's tickets and session-keys.
default_rcache(context) -> KrbV.Context.RCache object
:Summary : Retrieve the default replay-cache object from
the current Kerberos context.
:Parameters :
context : KrbV.Context
The current Kerberos context holds the host's kerberos config-data,
including default encryption-types, credentials-cache (ticket file),
and default realms.
:Purpose :
default_rcache() loads the default replay-cache into an RCache object.
Only kerberized application-servers have replay caches.
:Action and side-effects :
krb_context.default_rcache() calls RCache.__init__(context=krb_context),
which in turn calls the krblib C routine krb5_rc_default().
krb5_rc_default() looks in the krb context for the default replay cache,
and default_rcache() converts the C-struct replay-cache to an RCache
object.
:Return value :
An RCache object, containing the user's tickets and session-keys.
default_keytab(context) -> KrbV.Context.Keytab object
:Summary : Retrieve the default key-table object from the current,
Kerberos context or from the default keytab-file, if necessary.
:Parameters :
context : KrbV.Context
The current Kerberos context holds the host's kerberos config-data,
including default encryption-types, credentials-cache (ticket file),
and default realms.
:Purpose :
default_keytab() loads the default keytab-file's contents into a Keytab
object. The default keytab-file's pathname is part of the krb context.
Only kerberos servers have keytab files; this is where a server's
long-lived secret keys stay. The keytab in not encrypted, so that the
server can cold-start without a human operator's help.
:Action and side-effects :
KrbV.Context.default_keytab() calls RCache.__init__(context=krb_context),
which in turn calls the krblib C routine krb5_rc_default().
krb5_rc_default() looks in the krb context for the default replay cache,
and default_keytab() converts the C-struct replay-cache to an RCache
object.
:Return value :
An RCache object, containing the user's tickets and session-keys.
mk_req(in_data, options, server, keytab, auth_context) ->
(auth_context, int, tkt-cipher [,tkt-plain])
:Parameters:
server krbV.Principal :
The server name. The server principal in the AP_REQ must
be the same as the principal specified by this parameter.
data : str (optional)
A small buffer containing a message to send in the authenticator.
If data is 'None', then mk_req() will use the string 'BLANK' as the
message to be protected.
BUG: This should be a msg-checksum, not the message itself.
options : int (optional)
KRB_AP_REQ flags. Valid flag values are:
* AP_OPTS_MUTUAL_REQUIRED :
The client requires mutual authentication, ie, kerberized
proof of the server's identity.
Normally, you should always use this flag, but only for
the first send_auth() call on a connection.
* AP_OPTS_USE_SESSION_KEY :
Specific for user-to-user (ie, peer-to-peer) connections.
Not used for most client-server applications.
* AP_OPTS_USE_SUBKEY :
The application client or server can choose a sub-session
key, but this usually isn't necessary.
These KRB_AP_REQ flags can be OR'ed together, as needed.
For details about the use of user-to-user and subkeys, see RFC 4120.
If the options are not needed, specify 'None' for this parameter.
client : krbV.Principal (optional)
The client name.
ccache : KrbV.CCache (optional)
auth_context : KrbV.AuthContext
Info about the kerberos-session, especially:
* the client's principal-name, and
* any session-key the server shares with the client.
creds tuple :
BUG: this parameter should be a Creds object, not a tuple.
For details of the creds tuple's structure, see the doc-string for
'Creds_tuple', elsewhere in this document.
:Summary: Prepare a Krb 'application request' message.
:Purpose :
An application-client calls mk_req() to prepare a client's authenticated
request for service (AP_REQ). The client must then explicitly send the
AP_REQ message to the application-server; mk_req() doesn't send the message.
The client's AP_REQ message contains the client's encrypted service-ticket
and an encrypted timestamp (aka 'authenticator').
The client calls mk_req() as the first step in an authenticated handshake.
:Action & side-effects :
mk_req() doesn't actually send the AP_REQ message across the network;
mk_req() only encodes and encrypts the AP_REQ message.
However, mk_req() can ask the TGS for application tickets, if necessary.
If you call mk_req() with a client-principal object (so that creds=='None'),
mk_req() will use the client & service principals to get and use a service-
ticket, with which to construct the AP_REQ message. In case mk_req() does
request a new ticket, you should refresh your ccache parameter before calling
mk_req() again, so that your next mk_req() call can use the new ticket.
The caller must supply either a client parameter or a creds parameter.
If you call mk_req() with both a client-principal and credentials, mk_req()
will use the credentials' client-principal as the client's name.
:Return value:
mk_req() returns a tuple of 2 elements:
0. An AuthContext. The input authentication context, or a new
AuthContext if the input AuthContext value was 'None'.
In either case, the retval's AuthContext contains any new
application that mk_req() may have requested from the TGS.
1. An output string, containing the new AP_REQ message. The caller's
code must transmit this AP_REQ message to the application-server.
:See also:
KrbV.Context methods : rd_req(), mk_rep(), rd_rep();
KrbV.AuthContext methods : mk_priv(), rd_priv()
rd_req(in_data, options, server, keytab, auth_context) ->
(auth_context, int, tkt-cipher [,tkt-plain])
:Parameters:
in_data : buffer
The buffer containing the AP_REQ message.
options : int
The options from the AP_REQ message, as prepared by mk_req().
If the options are not needed, specify 'None' for this parameter.
BUG: This should be an Output parameter, and the rd_req() method
ignores the input options. rd_req() does return the output options
correctly, in the retval tuple.
server : krbV.Principal
The server name. The server principal in the AP_REQ must
be the same as the principal specified by this parameter.
Specify 'None' if any server principal is acceptable.
keytab : KrbV.keytab
The key table that contains the server key. The default key table
is used if 'None' is specified for this parameter.
auth_context : KrbV.auth_context
info about the kerberos-session, especially:
* the server's principal-name,
* any session-key the server shares with the client,
* the session's replay-cache.
:Summary: Parse a Krb 'application request' message.
:Purpose :
An application server calls rd_req() in order to authenticate a client's
request for service (AP_REQ). The client's AP_REQ message includes the
client's encrypted service-ticket and an encrypted timestamp (aka
'authenticator'). rd_req() decrypts both of these.
The server calls rd_req() as the 2nd step in an authenticated handshake.
:Action & side-effects :
rd_req() doesn't actually read the AP_REQ message from the network;
rd_req() only decrypts, decodes, and interprets the AP_REQ message.
rd_req() decrypts the AP_REQ message, checks the message for freshness,
and checks to make sure that the encrypted client-name matches the client
who requested service.
rd_req() populates an AuthContext for this session, with the following:
* The client's name (from the decrypted ticket);
* The client's session-key (from the decrypted ticket);
* The AP_REQ message's timestamp (from the decrypted authenticator);
* A handle for a replay cache (which holds this first authenticator).
:Return value:
rd_req() returns a tuple of 3 or 4 elements (usually 4):
0. An auth context, including the AP_REQ's decrypted authenticator.
This is the input authentication context, or a new AuthContext
object if the input AuthContext value was 'None'.
1. The client request's stipulated security options.
For example, the client sends the flag krbV.AP_OPTS_MUTUAL_REQUIRED
in order to tell the server to authenticate itself in return.
2. The server's Principal object,
3. A tuple, containing the plaintext of the ticket that mk_req() sent:
a. ticket flags,
b. session-key, including the enctype,
c. the authenticated name of the client who sent the AP_REQ,
d. list of transited realms (if this was an inter-realm AP_REQ),
e. ticket-validity times: auth, start, end, renew_till,
f. array of pointers to addresses,
g. authorization data.
Whew!
:See also:
KrbV.Context methods : mk_req(), mk_rep(), rd_rep();
KrbV.AuthContext methods : mk_priv(), rd_priv()
The krb5_rd_req() man page fully explains rd_req()'s actions & results.
Context_sendauth(fd, version, options, server, client, ccache, data) ->
auth_context
:Summary : Offer and complete an authenticated message-handshake and back.
:Parameters :
fd : file descriptor
a network socket (TCP only, not UDP)
version : str
the client's version of the application protocol.
options : int (optional)
KRB_AP_REQ flags. Valid flag values are:
* AP_OPTS_MUTUAL_REQUIRED :
The client requires mutual authentication, ie, kerberized
proof of the server's identity.
Normally, you need to use this flag, but only for
the first send_auth() call on a connection.
* AP_OPTS_USE_SESSION_KEY :
Specific for user-to-user (ie, peer-to-peer) connections.
Not useful for most client-server applications.
* AP_OPTS_USE_SUBKEY :
The application client or server can choose a sub-session
key, but this usually isn't necessary.
These KRB_AP_REQ flags can be OR'ed together, as needed.
For details about the use of user-to-user and subkeys, see RFC 4120.
server : KrbV.Principal
The application server's principal/instance name.
client : KrbV.Principal (optional)
The application client's principal/instance name.
ccache : KrbV.CCache (optional)
The client's credentials cache.
data : str
A plaintext message to be sent in authenticated form.
The first two arguments are positional, and the rest are all
keyword-parameters.
:Purpose :
sendauth() is a high-level routine that both sends a client's AP_REQ
service-request _and_ receives the server's corresponding AP_REP reply.
Further, sendauth() will automatically get service-tickets if necessary.
No application-specific data get exchanged, except for version numbers.
Note that only application-clients can call sendauth; the
corresponding server-side method is recvauth().
The handshake's outcome is that the client & server both get complete
AuthContext objects, which they then can use to exchange encrypted
application-traffic via the AuthContext methods mk_priv() & rd_priv().
:Action & side-effects :
A sendauth()/recvauth() handshake seeks agreement on :
* Application-version number;
* Client authentication;
* Server authentication (optionally).
sendauth() may ask the TGS for fresh application-credentials, and will
then add this new ticket and session-key to the credentials cache.
:Return value:
sendauth() returns only a new auth_context object, but this is a BUG:
The corresponding C call, krb5_sendauth(), also returns :
* the decrypted reply-message from the server (for interpretation),
* the application service-ticket (for reuse);
* a KRB_ERROR structure (in case the client fails to authentocate).
Context.sendauth() should return a tuple.
:See also:
KrbV.Context method : recvauth()
KrbV.AuthContext methods : mk_priv(), rd_priv()
Context_recvauth(fd, version, options, client, server, ccache, data) ->
auth_context
:Summary : Accept and complete an authenticated message-handshake.
:Parameters :
fd : file descriptor
a network socket (TCP only, not UDP)
version : str
the client's version of the application protocol.
server : KrbV.Principal (optional)
The application server's principal/instance name.
keytab : KrbV.Keytab (optional)
The key table which contains the serer's secret key.
options : int (optional)
No server-side flags are defined yet for recvauth() in the krb5 C API.
The first two arguments are positional, and the rest are all
keyword-parameters.
BUG: recvauth() should have an auth_context parameter, which holds the
server's replay cache object.
:Purpose :
recvauth() is a high-level routine that both receives a client's AP_REQ
service-request _and_ sends the server's corresponding AP_REP reply.
No application-specific data get exchanged, except for version numbers.
Note that only application-servers can call recvauth; the
corresponding client-side call is sendauth().
The handshake's outcome is that the client & server both get complete
AuthContext objects, which they then can use to exchange encrypted
application-traffic via the AuthContext methods mk_priv() & rd_priv().
sendauth()/recvauth() is supposed to be easier to use than the similar-
but-lower-level KrbV.Context methods mk_req(),rd_req(),mk_rep(),rd_rep().
:Action & side-effects :
A sendauth()/recvauth() handshake seeks agreement on :
* Application-version number;
* Client authentication;
* Server authentication (optionally).
BUG: recvauth() needs an auth_context parameter, so that recvauth()
can add the AP_REQ's authenticator to the auth_context's replay cache.
:Return value:
recvauth() returns only a new auth_context object, but this is a BUG:
The corresponding C call, krb5_recvauth(), also returns :
* the application service-ticket (for reuse);
* a KRB_ERROR structure (in case the version numbers don't match, or
the client fails to authenticate).
Context.sendauth() should return a tuple.
:See also:
KrbV.Context method : sendauth()
KrbV.AuthContext methods : mk_priv(), rd_priv()
mk_rep(auth_context) -> str
:Summary : Create Kerberos AP_REP Message (Authentication Handshake Reply)
:Parameters :
auth_context : KrbV.AuthContext
info about the kerberos-session, especially:
* the client's & server's principal-names,
* any session-key the server shares with the client,
* the session's replay-cache.
:Purpose :
An application server calls mk_rep() to prepare an AP_REP reply, after
having authenticated a client's request for service (AP_REQ).
:Action & side-effects:
mk_rep() prepares, but doesn't send, an AP_REP handshake-reply message.
The most important part of this AP_REP message is the server's echo of
the client's encrypted timestamp, re-encrypted for the client's eyes.
The client will interpret the server's echo of the timestamp as proof
that it really is the correct app-server who is on the other end of the
connection (since the server had to be able to decrypt the client's ticket,
in order to encrypt the AP_REQ authenticator).
The server calls mk_rep() as the 3rd step in an authenticated handshake.
:Return value:
mk_rep() returns a Python string containing the AP_REP message.
:See also:
KrbV.Context methods : mk_req(), rd_req(), rd_rep();
KrbV.AuthContext methods : mk_priv(), rd_priv()
rd_rep(in_data, auth_context) -> AP_REP tuple
:Parameters :
in_data : buffer
The buffer containing the AP_REP message.
auth_context : KrbV.auth_context
info about the kerberos-session, especially:
* the client's & server's principal-names,
* any session-key the server shares with the client,
* the session's replay-cache.
:Summary: Parse a Krb 'application reply' message.
:Purpose :
An application-client calls rd_rep() in order to authenticate the
app-server's AP_REP message. The app-server's AP_REP message's main
content is the server's echoed-&-reencrypted version of the client's
encrypted timestamp (a.k.a. 'authenticator').
The client calls rd_rep() as the 4rd step in an authenticated handshake.
This step completes the client's authentication with the app-server.
:Action & side-effects :
rd_rep() doesn't actually read the AP_REP message from the network;
rd_rep() only decrypts, decodes, and interprets the AP_REP message.
rd_rep() checks whether the AP_REP message's encrypted timestamp matches
exactly the encrypted timestamp that the client originally sent in the
handshake's initial AP_REQ message.
:Return value:
A tuple containing the contents of the contents of the AP_REP message.
BUG: rd_rep() should return at least a string containing the AP_REP
message's contents, so that the client can confirm the server's echoed
timestamp. If these four routines {rd,mk}_re{p,q} are to support subkeys,
then rd_rep() should also return the modified AuthContext parameter.
__setattr__(string, value-object) -> 'None'
:Summary : Set a KrbV.Context member object's value, by name.
Internal function, do not use.
:Purpose :
__setattr__() supports only the following Context-members:
* default_realm : Set the default realm.
:Return value :
'None', or NULL.
__getattr__(string) -> PyObject
:Summary : Retrieve a KrbV.Context member object by name.
Internal function, do not use.
:Purpose :
__getattr__() supports only the following Object-members:
* _ctx : Sort of a copy() method?
* default_realm : The default realm is extracted from the krb.conf file
:Return value :
This method's retval-type corresponds to the member-name parameter.
__init__() -> KrbV.AuthContext
:Summary : Create a KrbV AuthContext object.
Internal function, do not use.
:Purpose :
The KrbV.AuthContext class holds an authenticated connection's
state, just as krb5.Context holds a thread or process's state.
KrbV.AuthContext is used by the KrbV functions that directly
support authentication between an app-server & its client.
This class contains the addresses and port numbers for the
client and the server, keyblocks and sub-keys, sequence numbers,
replay cache, and checksum-type, various flags, and more.
:Return Value :
__init__() returns an AuthContext object.
:Other Methods :
genaddrs()
mk_priv() .
rd_priv()
genaddrs(file_desc, flags) -> NULL, None, or a kerberos error code
:Summary : Copy some or all of the socket's addresses and ports to the
AuthContext object.
:Parameters :
file_handle : A socket's file-handle object;
flags : integer
0x00000001 : generate the local network address.
0x00000002 : generate the remote network address.
0x00000004 : generate the local network address and the local port.
0x00000008 : generate the remote network address and the local port.
These flags can be OR'ed toegether, so as to extract some or all of
the socket's addresses and ports, selectively.
:Purpose :
genaddrs() populates the AuthContext with optional addresses & ports.
Some applications need these addresses in order to authenticate
principals by IP-address, or for getting forwardable or proxiable
tickets.
:Return value :
If the retval is:
* None, then the genaddrs() call was successful.
* NULL, then the socket's file-handle couldn't be converted to a
file-descriptor.
* Non-zero, then the kerberos library call returned an error.
mk_priv() -> string, NULL or a kerberos error code
:Summary : mk_priv() encrypts and integrity-protects a buffer of plaintext.
:Parameters :
in_data : string
This buffer contains application-specific plaintext.
:Purpose :
Applications call mk_priv() in order to protect an outgoing application
message from eavesdropping and from on-the-fly alteration. Either side
of an application, client or server, can use mk_priv() before sending
sensitive application traffic. The resulting ciphertext is called a
KRB_PRIV message. After the other side receives this KRB_PRIV message,
the recipient will use rd_priv() to decrypt and validate the message's
contents.
:Return Value :
A KRB_PRIV message, which is a string containing the ciphertext.
:Action & side-effects :
mk_priv() can be computationally expensive, if the application is
sending lots of encrypted traffic back-and-forth. Developers should
use mk_priv() only when privacy is really necessary; often, it's
enough to use mk_safe() instead, so as to protect the message only
from on-the-fly alteration, without the expense of encryption.
rd_priv() -> string, NULL or a kerberos error code
:Summary : rd_priv() decrypts and integrity-checks a buffer of ciphertext.
:Parameters :
in_data : string
This buffer contains application-specific ciphertext, and is called
a KRB_PRIV message.
:Purpose :
Applications call rd_priv() in order to receive an incoming application
message that the sender protected from eavesdropping and from on-the-
fly alteration. Either side of an application, client or server, can
use rd_priv() upon receiving protected, sensitive application traffic.
The incoming ciphertext is called a KRB_PRIV message, and was prepared
by the sender via a mk_priv() call.
:Return Value :
A string containing the decrypted plaintext, or an error code, if
rd_priv() detected tampering.
:Action & side-effects :
rd_priv() can be computationally expensive, if the application is
sending lots of encrypted traffic back-and-forth. Developers should
use rd_priv() only when privacy is really necessary; often, it's
enough to use rd_safe() instead, so as to protect the message only
from on-the-fly alteration, without the expense of encryption.
__setattr__(string, value-object) -> 'None' , NULL, or a kerberos error code.
:Summary : Set a member-field in the AuthContext object.
Internal function, do not use.
:Parameters :
__setattr__() supports only the following AuthContext-members:
* addrs : tuple ( local_addr, local_port, remote_addr, remote_port)
* flags : integer; valid flag values are:
KRB5_AUTH_CONTEXT_DO_TIME Use timestamps
KRB5_AUTH_CONTEXT_RET_TIME Save timestamps to output structure
KRB5_AUTH_CONTEXT_DO_SEQUENCE Use sequence numbers
KRB5_AUTH_CONTEXT_RET_SEQUENCE Copy sequence numbers to output structure
* rcache : rcache object (Replay cache)
* useruserkey : tuple ( enctype, string) (encryption key)
:Purpose :
__setattr__ changes the AuthContext contents, so as to control the behavior
of the many krb-lib calls that use the AuthContext as a parameter.
:Return value :
'None' means 'success,'
NULL means 'invalid value,'
non-zero integer is a kerberos error-code.
__getattr__(string) -> value-object.
:Summary : Get a member-field in the AuthContext object.
Internal function, do not use.
:Parameters :
__getattr__() can get only the following AuthContext-members:
* addrs : tuple ( local_addr, local_port, remote_addr, remote_port)
* flags : integer; valid flag values are:
KRB5_AUTH_CONTEXT_DO_TIME Use timestamps
KRB5_AUTH_CONTEXT_RET_TIME Save timestamps to output structure
KRB5_AUTH_CONTEXT_DO_SEQUENCE Use sequence numbers
KRB5_AUTH_CONTEXT_RET_SEQUENCE Copy sequence numbers to output structure
* key : tuple containing the keyblock contents
:Return value :
NULL means 'invalid attribute,'
non-zero integer is a kerberos error-code.
__init__(string, KrbV.Context) -> KrbV.Principal
:Summary : Create a Principal object.
Internal function, do not use.
:Parameters :
name : string eg, johhndoe@EXAMPLE.COM
:Purpose :
A kerberos principal is the basic account-indentifier for all users and
application-services that Kerberos authenticates. The Principal object
contains mostly names:
* The 'principal name': the user's name or the service's name,
* The Kerberos 'realm name', which identifies which kerberos
key-database knows about this user or service.
* A service-principal also contains an FQDN for a server
that offers the service.
For example:
* 'johndoe/EXAMPLE.COM' is a user's principal, containing both
his Principal name johndoe and his realm name EXAMPLE.COM
* 'NFS/filer-1.EXAMPLE.COM' is a server's principal, containing
the principal name NFS, the server's FQDN, including the realm name.
:Return Value :
A Principal object, containing the name components.
:Other methods :
__getitem__()
__len__()
__eq__()
__repr__()
__getitem__(integer) -> string
:Summary : Get the i^th name component from a principal.
Internal function, do not use.
:Parameters :
index : integer
:Return value :
A string containing the indexed name-component in the principal.
__getitem__() returns NULL if anything goes wrong.
:Purpose :
A Principal holds names in a parsed array of name-components, where
a 'component' is a string that appears between dots or slashes.
__getitem__() is a krb-internal routine, mostly used for comparing
principals, and for reassembling the name-components.
__len__() -> integer
:Summary : Get the number of name-components that a principal has.
Internal function, do not use.
:Return value :
A string containing how many name-component are in the principal.
__getitem__() returns NULL if anything goes wrong.
:Purpose :
A Principal holds names in a parsed array of name-components, where
a 'component' is a string that appears between dots or slashes.
__len__() is a krb-internal routine, mostly used for comparing
principals, and when reassembling the name-components.
__eq__( Principal, Principal) -> integer or None
:Summary : Compare two principals' names.
Internal function, do not use.
:Parameters :
Two Principals.
:Return value :
1, if the principals are equal;
None, if the principals are different.
__repr__() -> string
:Summary : Make a printable string from the Principal.
Internal function, do not use.
:Purpose :
Reassemble a principal's name-components, to make a printable
representation of the principal.
__setattr__(string, object) -> NULL, or None.
:Summary : Set the value of a member-field in the Principal object.
Internal function, do not use.
:Parameters :
This method _doesn't_ support setting the following members:
* realm : string eg, EXAMPLE.COM
* name : string eg, johndoe
:Return Value :
NULL means you tried to set a disallowed member's value.
None means you successfully set some other member's value.
__getattr__(string) -> string
:Summary : Get the value of a member-field in the Principal object.
Internal function, do not use.
:Parameters :
This method supports only the following members:
* realm : string eg, EXAMPLE.COM
* name : string eg, johndoe
:Return Value :
__getattr__() always returns a string, unless the krb library call fails.
__init__() -> CCache
:Summary : Create a new Credentials Cache.
:Parameters :
name : string (optional) pathname for ticket file
ccache : CCache (optional) empty CCache object
primary_principal : Principal (optional)
context : Context (optional)
:Return Value :
CCache object
:Other Methods :
initialize()
__eq__()
get_credentials()
init_creds_keytab()
principal()
__eq__(CCache, CCache) -> 1 or None
:Summary : Compare two credentials-cache objects, by Principal-name
Internal function, do not use.
:Parameters :
Two Credentials Cache (CCache) objects.
:Return Value :
1 if the two CCache objects have the same principal name,
None if the two CCache objects' principal names are different.
principal() -> Principal
:Summary : Get the value of the CCache's principal member.
:Return Value :
KrbV.Principal
:Purpose :
Get the Principal object for the user or service that owns the CCache.
get_credentials(Creds_tuple, integer, integer) -> Creds_tuple
:Summary : Get an application-service ticket.
:Parameters :
in_creds : Creds_tuple
options : integer
0x00000001 KRB5_GC_USER_USER Get a peer-to-peer ticket
0x00000002 KRB5_GC_CACHED Don't request a new ticket
basepid : integer (unused?)
:Return Value :
Creds_tuple
:Purpose :
get_credentials() is the normal way for an application client to
get tickets on the user's behalf.
:Action & side-effects :
* If the CCache contains up-to-date tickets for this service,
get_credentials() retrieves those tickets from in_creds or the CCache.
* If the CCache doesn't have up-to-date tickets, get_credentials()
uses the user's TGT, in the in_creds parameter, to request tickets.
* Either way, get credentials() returns an up-to-date application-ticket.
* get_credentials() also may use the CCache self-object to find the TGT
and to store the new tickets.
:See also :
init_creds_keytab() - for application-servers that need to request & use
client-side tickets.
init_creds_keytab(keytab, principal) -> NULL, None, or krb error code
:Summary : Get a server's initial credentials, using a keytab.
:Parameters :
keytab
principal
:Return value :
None means everything worked.
NULL means the principal name was invalid.
nonzero integer means the TGT-request failed somehow.
:See also :
get_credentials() - for application-clients that need to request & use
tickets.
initialize(Principal) -> None, NULL, or krb error code.
:Summary : Initialize a CCache for a principal
:Parameters :
Principal : the user or service that owns this ccache.
:Return value :
None means everything worked.
NULL means the principal name was invalid.
nonzero integer means the krb library threw an error.
:See also :
init_creds_keytab() - for services that need to request & use client-
side.
__setattr__() -> NULL or None
:Summary : Set the value of a member-field in the CCache object.
Internal function, do not use.
:Parameters :
__setattr__() method _doesn't_ support setting the following members:
* name
* type
:Return Value :
NULL means you tried to set a disallowed member's value.
None means you successfully set some other member's value.
__getattr__(string) -> string
:Summary : Get the value of a member-field in the CCache object.
Internal function, do not use.
:Parameters :
__getattr__() method can access only the following members:
* name : string name for the ticket cache, with no type prefix.
* type : string CCache type-prefix.
:Return Value :
NULL means you tried to access a member that has no value.
None means a krb llibrary call threw an error.
__init__(context, string) -> NULL or None
:Summary : Initialize a new RCache object (replay cache).
Internal function, do not use.
:Parameters :
context : KrbV.Context (optional) kerberos context object
name : string (optional) a unique name for the cache
:Return Value :
None means success
NULL means the krb library couldn't find a replay-cache.
:Purpose :
A replay-cache is a server-side object, which the server's krb-lib uses
to detect and reject replays of recently-offered client credentials.
:Other Methods :
__eq__() - Compare two replay caches by principal name.
__eq__() -> 1 or None
:Summary : Compare two replay caches, by Principal-name.
Internal function, do not use.
:Parameters :
Two RCache objects.
:Return value :
1 means the two RCache objects have the same principal name.
None means the RCache objects have different principal names.
__setattr__() -> NULL
:Summary : Vestigial internal function, do not use.
:Purpose:
In recent versions of Kerberos, the rcache has become a totally opaque
object, and there are no public methods to set RCache attributes.
__getattr__() -> NULL
:Summary : Vestigial internal function, do not use.
:Purpose:
In recent versions of Kerberos, the rcache has become a totally opaque
object, and there are no public methods to get information about it.
__init__(context, string) -> NULL or None
:Summary : Initialize a new Keytab object.
Internal function, do not use.
:Parameters :
context : Context object (optional) kerberos context object
name : string (optional)
The key table name in the format 'type:name'.
The type must be a registered keytab type.
The name must be unique for this type.
keytab : Keytab object (optional)
:Return Value :
None means success
NULL means the krb library couldn't find a keytab.
:Purpose :
A Keytab is a server-side object, which the server's krb-lib uses
to access an application-server's secret key.
:Action & side-effects:
* If __init__() gets called without a Keytab name parameter, then the
server's default keytab gets opened.
* The new Keytab's context attribute is filled with the context parameter.
:Other Methods :
__eq__() - Compare two keytab objects by principal name.
__eq__() -> 1 or None
:Summary : Compare two Keytab objects, by Principal-name.
Internal function, do not use.
:Parameters :
Two Keytab objects.
:Return value :
1 means the two Keytab objects have the same principal name.
None means the Keytab objects have different principal names.
__setattr__() -> NULL or None
:Summary : Set the value of a member-field in the Keytab object.
Internal function, do not use.
:Parameters :
__setattr__() method _doesn't_ support setting the following members:
* name
:Return Value :
NULL means you tried to set a disallowed member's value.
None means you successfully set some other member's value.
__getattr__(string) -> string
:Summary : Get the value of a member-field in the Keytab object.
Internal function, do not use.
:Parameters :
__getattr__() method can access only the following members:
* name : string name for the keytab file, in 'type:name' format.
:Return Value :
NULL means you tried to access a member that has no value.
None means a krb llibrary call threw an error.
; 5! p 9! B! p Ѐ I! Q! v @i!
К @~! ~
@! h
` !
`! P ! !
M &
&
` !
`! ! ! p ! P @! +
4
0 ! G
!
!
! " " " M +
"
"
И @" [ " B 0 @ " %" )" -"
M
M +
1"
7" ;" <" @>"
F" @ @J" N" M M +
krbVmodule.so.debug b& .shstrtab .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .text .fini .rodata .eh_frame_hdr .eh_frame .ctors .dtors .jcr .data.rel.ro .dynamic .got .got.plt .data .bss .gnu_debuglink $ o L ( H 0 P P
8 o Z Z E o ` ` ` T ^ ) ) P
h 4 4 c 4 4 n ; ; t z > T
0! 0 0! 0 0! 0 (0! (0 00! 00 1! 1 p @2! @2 5! 5 # Y" Y P Y Y