| Server IP : 198.38.94.13 / Your IP : 216.73.217.33 Web Server : Apache System : Linux d4744.dxb1.stableserver.net 5.14.0-611.49.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Apr 21 16:39:08 EDT 2026 x86_64 User : revivere ( 1140) PHP Version : 8.2.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /opt/saltstack/salt/lib/python3.10/site-packages/zmq/ssh/__pycache__/ |
Upload File : |
o
;j-4 � @ s� d Z ddlZddlZddlZddlZddlZddlZddlZddlmZm Z ddl
m Z z$e� � � e�
de� ddlZejjZW d � n1 sJw Y W n eyc dZG dd� de�ZY nw dd lmZ zddlZW n ey{ dZY nw G d
d � d e�Zd d
� Ze�dej�Zd'dd�Z dd� Z dd� Z d(dd�Z d(dd�Z d)dd �Z!d d � Z"d d � Z# d)d!d"�Z$d*d#d$�Z%ej&d%kr�e$Z'ne!Z'g d&�Z(dS )+zXBasic ssh tunnel utilities, and convenience functions for tunneling
zeromq connections.
� N)�getpass�getuser)�Process�ignorec @ � e Zd ZdS )� SSHExceptionN��__name__�
__module__� __qualname__� r r �B/opt/saltstack/salt/lib/python3.10/site-packages/zmq/ssh/tunnel.pyr � r � )�forward_tunnelc @ r )�MaxRetryExceededNr r r r r
r ) r r c C sZ g }g }t | �D ]}t�� }|�d� |�|�� d � |�|� q|D ]}|�� q$|S )z4Select and return n random ports that are available.)� r r )�range�socket�bind�append� getsockname�close)�nZportsZsockets�i�sockr r r
�select_random_ports- s
r s pass(word|phrase)c C s* |du r t jdk}|st}nt}|| |�S )z�Attempt to make an ssh connection without a password.
This is mainly used for requiring password input only once
when many tunnels may be connected to the same server.
If paramiko is None, the default for the platform is chosen.
N�win32)�sys�platform�_try_passwordless_openssh�_try_passwordless_paramiko)�server�keyfile�paramiko�fr r r
�try_passwordless_sshA s
r& c C s� t du rtd��d| }|r|d| 7 }|d7 }tj�� }|�dd� d}t j||d�}d }t|�D ],}z|j|t gd
d �}|d krFt
d
��W dS t j yS Y q2 t j y^ Y dS w t
d|� d���)z.Try passwordless login with shell ssh command.Nz!pexpect unavailable, use paramikozssh -f z -i z exit� SSH_ASKPASS�,Are you sure you want to continue connecting��env�
皙�����?��timeoutr �2The authenticity of the host can't be established.TF�
Failed after � attempts)�pexpect� ImportError�os�environ�copy�pop�spawnr �expect�
_password_patr �TIMEOUT�EOFr ) r" r# �cmdr* �
ssh_newkey�p� MAX_RETRY�_r r r r
r Q s4
�� ��r c C s� t du rd}tjdkr|d7 }t|��|d7 }t|��t| �\}} }t �� }tj�d�}z|� |� W n t
y< Y nw tj � dd�}|rTt
t |� d��}|�|� � z |j| |||d d
� W n t jyk Y d S w |�� d S ) z%Try passwordless login with paramiko.NzParamiko unavailable, r z=Paramiko is required for ssh tunneled connections on Windows.z use OpenSSH.z~/.ssh/known_hostsZ PYZMQ_PARAMIKO_HOST_KEY_POLICY�PolicyT)�username� key_filename�
look_for_keysF)r$ r r r3 �
_split_server� SSHClientr4 �path�
expanduserZload_host_keys�FileNotFoundErrorr5 �get�getattr�set_missing_host_key_policy�connectZAuthenticationExceptionr ) r" r# �msgrC �port�clientZ known_hostsZ policy_name�policyr r r
r! t s8
� �
��r! �< c C s& t ||||||d�\}}| �|� |S )aT Connect a socket to an address via an ssh tunnel.
This is a wrapper for socket.connect(addr), when addr is not accessible
from the local machine. It simply creates an ssh tunnel using the remaining args,
and calls socket.connect('tcp://localhost:lport') where lport is the randomly
selected local port of the tunnel.
)r# �passwordr$ r. )� open_tunnelrN ) r �addrr" r# rT r$ r. Znew_url�tunnelr r r
�tunnel_connection� s
�
rX c C st t d�d }| �d�\}} | �d�\}} t| �} |du r!tjdk}|r&t}
nt}
|
|| |||||d�} d|� �| fS ) z�Open a tunneled connection from a 0MQ url.
For use inside tunnel_connection.
Returns
-------
(url, tunnel) : (str, object)
The 0MQ url that has been forwarded, and the tunnel object
r r z://�:Nr )�remoteipr# rT r. ztcp://127.0.0.1:)r �split�intr r �paramiko_tunnel�openssh_tunnel) rV r" r# rT r$ r. �lportZ transport�ip�rportZtunnelfrW r r r
rU � s&
� rU � 127.0.0.1c C s t du rtd��d}|r|d| 7 }d|v r$|�d�\}}|d|� �7 }|� d|� �} t j| dd �\}
} | snt|
|
�d
�d |
�d �� �} |� d
| � d|� d|� d|� � } t j| dd �\}
} | snt�t| � ddd�� | S |� d| � d|� d|� d|� d|� � } t
j � � }
|
�
dd� d}t j| |
d�}d}d}t|�D ]b}z|j|tgdd�}|dkr�td ��W n2 t jy� Y q� t jy� |jr�t|j� t|j� t|j� td | � d ���|j Y S w |r�td � d}|du r�t|� d ��}|� |� d}q�t d!|� d"���)#a Create an ssh tunnel using command-line ssh that connects port lport
on this machine to localhost:rport on server. The tunnel
will automatically close when not in use, remaining open
for a minimum of timeout seconds for an initial connection.
This creates a tunnel redirecting `localhost:lport` to `remoteip:rport`,
as seen from `server`.
keyfile and password may be specified, but ssh config is checked for defaults.
Parameters
----------
lport : int
local port for connecting to the tunnel from this machine.
rport : int
port on the remote machine to connect to.
server : str
The ssh server to connect to. The full ssh server string will be parsed.
user@server:port
remoteip : str [Default: 127.0.0.1]
The remote ip, specifying the destination of the tunnel.
Default is localhost, which means that the tunnel would redirect
localhost:lport on this machine to localhost:rport on the *server*.
keyfile : str; path to private key file
This specifies a key to be used in ssh login, default None.
Regular default ssh keys will be used without specifying this argument.
password : str;
Your ssh password to the ssh server. Note that if this is left None,
you will be prompted for it if passwordless key based login is unavailable.
timeout : int [default: 60]
The time (in seconds) after which no activity will result in the tunnel
closing. This prevents orphaned tunnels from running forever.
Nz(pexpect unavailable, use paramiko_tunnelzssh z-i rY z -p z
-O check T)Zwithexitstatuss (pid=� � )z -O forward -L 127.0.0.1:� z
-O forwardz -O cancelr z -f -S none -L 127.0.0.1:z sleep r' r( r) Fr+ r, r- r r/ ztunnel 'z' failed to startz Password rejected, try again�
's password: r0 r1 ) r2 r3 r[ �runr\ �find�atexit�register� _stop_tunnel�replacer4 r5 r6 r7 r8 r r9 r: r r; r< �
exitstatus�print�beforeZafter� RuntimeError�pidr Zsendliner )r_ ra r" rZ r# rT r. ZsshrP r= �outputrm rq r* r> rW Zfailedr@ rA r r r r
r^ � sd & &
��
�
r^ c C s t �| � d S �N)r2 rg )r= r r r
rk - s rk c C sN d| v r
| � dd�\}} nt� }d| v r | � d�\} }t|�}nd}|| |fS )N�@r rY � )r[ r r\ )r" rC rP r r r
rF 1 s
rF c C s` t du rtd��|du rt||�st|� d��}tt| |||ft||d�d�}d|_|�� |S )a launch a tunner with paramiko in a subprocess. This should only be used
when shell ssh is unavailable (e.g. Windows).
This creates a tunnel redirecting `localhost:lport` to `remoteip:rport`,
as seen from `server`.
If you are familiar with ssh tunnels, this creates the tunnel:
ssh server -L localhost:lport:remoteip:rport
keyfile and password may be specified, but ssh config is checked for defaults.
Parameters
----------
lport : int
local port for connecting to the tunnel from this machine.
rport : int
port on the remote machine to connect to.
server : str
The ssh server to connect to. The full ssh server string will be parsed.
user@server:port
remoteip : str [Default: 127.0.0.1]
The remote ip, specifying the destination of the tunnel.
Default is localhost, which means that the tunnel would redirect
localhost:lport on this machine to localhost:rport on the *server*.
keyfile : str; path to private key file
This specifies a key to be used in ssh login, default None.
Regular default ssh keys will be used without specifying this argument.
password : str;
Your ssh password to the ssh server. Note that if this is left None,
you will be prompted for it if passwordless key based login is unavailable.
timeout : int [default: 60]
The time (in seconds) after which no activity will result in the tunnel
closing. This prevents orphaned tunnels from running forever.
NzParamiko not availablerf )r# rT )�target�args�kwargsT) r$ r3 r! r r �_paramiko_tunnel�dict�daemon�start)r_ ra r" rZ r# rT r. r? r r r
r] > s *
�r] c
C s t |�\}}}t�� }|�� |�t�� � z
|j||||d|d� W n$ tyG } ztd|� d|� d| ��� t �
d� W Y d} ~ nd} ~ ww t � t j t j
� z t| |||�� � W dS tyo td� t �
d � Y dS ty� } ztd
| � �� t �
d � W Y d} ~ dS d} ~ ww ) z�Function for actually starting a paramiko tunnel, to be passed
to multiprocessing.Process(target=this), and not called directly.
T)rC rD rE rT z*** Failed to connect to rY z: r Nz'SIGINT: Port forwarding stopped cleanlyr z#Port forwarding stopped uncleanly: � )rF r$ rG Zload_system_host_keysrM Z
WarningPolicyrN � Exceptionrn r �exit�signal�SIGINT�SIG_IGNr Z
get_transport�KeyboardInterrupt)
r_ ra r" rZ r# rT rC rP rQ �er r r
ry y s:
��� ��ry r )rX �
ssh_tunnelr^ r] r& rs )NNNrS )rb NNrS )NN))�__doc__ri r4 �rer� r r �warningsr r �multiprocessingr �catch_warnings� simplefilter�DeprecationWarningr$ Z
ssh_exceptionr r3 r~ Zforwardr r2 r r �compile�
IGNORECASEr: r& r r! rX rU r^ rk rF r] ry r r� �__all__r r r r
�<module> s^
�� � �
#!
�
$
�_
�
;
)