o b@sdZddlmZddlmZddlmZmZmZddl m Z ddl m Z e dZ e dZe d Ze rBerBerBdd lmZdd lmZGd d d e ZdS)z! Tests for L{twisted.conch.tap}. )StreamServerEndpointService)error)ISSHPrivateKeyIUsernamePasswordUsernamePassword) requireModule)TestCase cryptographypyasn1ztwisted.conch.unix)tap)OpenSSHFactoryc@sleZdZdZes dZesdZesdZdZddZ dd Z d d Z d d Z ddZ ddZddZddZdS)MakeServiceTestsz' Tests for L{tap.makeService}. zcan't run without cryptographyzCannot run without PyASN1z can't run on non-posix computers)siamusersthisispasswordcCsV||_t|jd}|d|jWdn1swYt|_dS)z/ Create a file with two users. zwb+:N) mktempfilenameopenwritejoinusernamePasswordr Optionsoptions)selffr=/usr/lib/python3/dist-packages/twisted/conch/test/test_tap.pysetUp(s zMakeServiceTests.setUpcCs@t}t|}||t||jjd||jt dS)z L{tap.makeService} returns a L{StreamServerEndpointService} instance running on TCP port 22, and the linked protocol factory is an instance of L{OpenSSHFactory}. N) r r makeServiceassertIsInstancer assertEqualendpoint_portfactoryr )rconfigservicerrr test_basic1s   zMakeServiceTests.test_basiccCsNd}|t|jdd|t|jdd||t|jdd|fdS)z Make sure that if the C{--auth} command-line option is not passed, the default checkers are (for backwards compatibility): SSH and UNIX credInterfacesz)SSH should be one of the default checkersz*UNIX should be one of the default checkers credCheckersz&There should be %d checkers by defaultN)assertInrrrrlen)r numCheckersrrrtest_defaultAuths=s  z"MakeServiceTests.test_defaultAuthscCs0|jdd|jg|t|jdddS)z The C{--auth} command-line option will add a checker to the list of checkers, and it should be the only auth checker --authfile:r(Nr parseOptionsrrr*rrrrtest_authAddedTszMakeServiceTests.test_authAddedcCs4|jdd|jddg|t|jdddS)z Multiple C{--auth} command-line options will add all checkers specified to the list ofcheckers, and there should only be the specified auth checkers (no default checkers). r-r.zmemory:testuser:testpasswordr(r&Nr0r2rrrtest_multipleAuthAdded\sz'MakeServiceTests.test_multipleAuthAddedcCsH|jdd|jg|jdd}t|jdd}|||tjS)z The checker created by the C{--auth} command-line option returns a L{Deferred} that fails with L{UnauthorizedLogin} when presented with credentials that are unknown to that checker. r-r.r(rfake) rr1rrr assertFailurerequestAvatarIdrUnauthorizedLogin)rcheckerinvalidrrrtest_authFailurels  z!MakeServiceTests.test_authFailurecsPjddjgjdd}tj|}fdd}||S)z The checker created by the C{--auth} command-line option returns a L{Deferred} that returns the avatar id when presented with credentials that are known to that checker. r-r.r(r5cs|jdS)N)rusername)r=correctrrr checkSuccesssz7MakeServiceTests.test_authSuccess..checkSuccess)rr1rrrr8 addCallback)rr:dr@rr>rtest_authSuccesszs    z!MakeServiceTests.test_authSuccesscCs8t}t|}|jj}|t|jt t hdS)z The L{OpenSSHFactory} built by L{tap.makeService} has a portal with L{ISSHPrivateKey} and L{IUsernamePassword} interfaces registered as checkers. N) r rrr"portalrsetcheckerskeysrr)rr#r$rDrrr test_checkerss  zMakeServiceTests.test_checkersN)__name__ __module__ __qualname____doc__r skipr unixrrr%r,r3r4r<rCrHrrrrr s"   r N)rLtwisted.application.internetr twisted.credrtwisted.cred.credentialsrrrtwisted.python.reflectrtwisted.trial.unittestrr r rN twisted.conchr $twisted.conch.openssh_compat.factoryr r rrrrs