Module Expr Str Import alias alias alias alias TryExcept body Import alias handlers ExceptHandler type NameLoad body Assign NameStore NameLoad orelse Import alias TryExcept body Import alias handlers ExceptHandler type NameLoad body Assign NameStore NameLoad TryExcept body Import alias handlers ExceptHandler type NameLoad body Assign NameStore NameLoad orelse Assign NameStore NameLoad TryExcept body ImportFrom alias handlers ExceptHandler type NameLoad body Assign NameStore NameLoad ImportFrom alias alias ImportFrom alias ImportFrom alias ImportFrom alias ImportFrom alias alias ImportFrom alias alias ImportFrom alias ImportFrom alias alias alias ImportFrom alias ImportFrom alias FunctionDef arguments args NameParam NameParam defaults body Return CompareEq Call AttributeLoad NameLoad attr NameLoad NameLoad NameLoad decorator_list FunctionDef arguments args NameParam defaults body Expr Str If CompareIs NameLoad NameLoad body Return NameLoad Return Call AttributeLoad NameLoad attr NameLoad decorator_list FunctionDef arguments args NameParam defaults body Expr Str If CompareIsNot NameLoad NameLoad body Assign NameStore AttributeLoad NameLoad attr orelse If CompareIsNot NameLoad NameLoad body Assign NameStore AttributeLoad NameLoad attr orelse Return NameLoad Return Call NameLoad Num Num NameLoad NameLoad decorator_list ClassDef bases body Expr Str Assign NameStore TupleLoad NameLoad Expr Call NameLoad NameLoad FunctionDef arguments args NameParam NameParam defaults NameLoad body If CompareIs NameLoad NameLoad body Assign NameStore ListLoad NameLoad NameLoad Assign AttributeStore NameLoad attr NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults body For NameStore AttributeLoad NameLoad attr body TryExcept body Assign NameStore Call NameLoad AttributeLoad NameLoad attr handlers ExceptHandler type NameLoad body Return Call AttributeLoad NameLoad attr Call NameLoad Str orelse If CompareIsNot NameLoad NameLoad body Assign NameStore SubscriptLoad NameLoad Index Num If CompareEq NameLoad Str body Continue If Call NameLoad NameLoad AttributeLoad NameLoad attr body Return Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr Return Call AttributeLoad NameLoad attr Call NameLoad Str decorator_list decorator_list ClassDef bases body Expr Str Expr Call NameLoad NameLoad Assign NameStore TupleLoad NameLoad Assign NameStore NameLoad FunctionDef arguments args NameParam NameParam defaults body Assign NameStore Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr Return NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults body Expr Str If UnaryOpNot NameLoad body Return Call AttributeLoad NameLoad attr Call NameLoad Str If UnaryOpNot AttributeLoad NameLoad attr body Return Call AttributeLoad NameLoad attr Call AttributeLoad NameLoad attr orelse TryExcept body Assign NameStore Call AttributeLoad AttributeLoad NameLoad attr attr AttributeLoad NameLoad attr If Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr AttributeLoad NameLoad attr body Return AttributeLoad NameLoad attr handlers ExceptHandler body Expr Call AttributeLoad NameLoad attr Return Call AttributeLoad NameLoad attr Call NameLoad Str Return Call AttributeLoad NameLoad attr Call NameLoad Str decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str Assign NameStore Call AttributeLoad AttributeLoad NameLoad attr attr AttributeLoad NameLoad attr Assign NameStore Call AttributeLoad Call NameLoad AttributeLoad NameLoad attr attr Str Assign NameStore ListLoad Str Str Return ListComp Call AttributeLoad NameLoad attr NameLoad comprehension NameStore NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str Assign TupleStore NameStore NameStore TupleLoad Call AttributeLoad NameLoad attr Call AttributeLoad NameLoad attr Assign TupleStore NameStore NameStore SubscriptLoad Call AttributeLoad AttributeLoad NameLoad attr attr AttributeLoad NameLoad attr Slice Num Num For NameStore Call AttributeLoad NameLoad attr NameLoad body If UnaryOpNot Call AttributeLoad NameLoad attr body Continue TryExcept body Assign NameStore Call AttributeLoad NameLoad attr handlers ExceptHandler type NameLoad name NameStore body If CompareEq AttributeLoad NameLoad attr AttributeLoad NameLoad attr body Assign NameStore Call NameLoad NameLoad NameLoad AttributeLoad NameLoad attr orelse Raise For NameStore NameLoad body Assign NameStore Call AttributeLoad NameLoad attr If CompareLt Call NameLoad NameLoad Num body Continue TryExcept body If CompareEq Call AttributeLoad NameLoad attr SubscriptLoad NameLoad Index Num AttributeLoad NameLoad attr body Return NameLoad handlers ExceptHandler type AttributeLoad NameLoad attr body Continue Return NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults body If UnaryOpNot Call AttributeLoad NameLoad attr NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Return Call AttributeLoad NameLoad attr Call NameLoad Str Return NameLoad decorator_list decorator_list ClassDef bases body Expr Str Expr Call NameLoad NameLoad FunctionDef arguments args NameParam defaults body Assign AttributeStore NameLoad attr Dict Assign AttributeStore NameLoad attr Dict decorator_list FunctionDef arguments args NameParam defaults body Return Call AttributeLoad AttributeLoad NameLoad attr attr decorator_list Assign NameStore Call NameLoad NameLoad FunctionDef arguments args NameParam NameParam defaults vararg body If UnaryOpNot NameLoad body Assign NameStore AttributeLoad NameLoad attr For NameStore NameLoad body Assign SubscriptStore AttributeLoad NameLoad attr Index NameLoad NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str Assign NameStore Call NameLoad NameLoad For NameStore NameLoad body Assign NameStore Call AttributeLoad AttributeLoad NameLoad attr attr NameLoad If CompareIsNot NameLoad NameLoad body Assign NameStore Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr NameLoad Return Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr NameLoad Return Call AttributeLoad NameLoad attr Call NameLoad BinOpMod Str Call AttributeLoad Str attr Call NameLoad AttributeLoad NameLoad attr NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults body Expr Str If CompareNotIn NameLoad AttributeLoad NameLoad attr body Assign SubscriptStore AttributeLoad NameLoad attr Index NameLoad ListLoad Expr Call AttributeLoad SubscriptLoad AttributeLoad NameLoad attr Index NameLoad attr NameLoad If Call AttributeLoad NameLoad attr NameLoad body Delete SubscriptDel AttributeLoad NameLoad attr Index NameLoad Return NameLoad orelse Raise Call AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str Return NameLoad decorator_list decorator_list
N/A N/A 
Provide L{ICredentialsChecker} implementations to be used in Conch protocols.
 N/A os base64 binascii errno N/A N/A N/A pwd N/A N/A N/A ImportError N/A N/A pwd None N/A N/A crypt N/A N/A N/A spwd N/A N/A N/A ImportError N/A N/A spwd None N/A N/A N/A shadow N/A N/A N/A ImportError N/A N/A shadow None N/A N/A shadow None N/A N/A twisted.cred pamauth N/A N/A N/A ImportError N/A N/A pamauth None zope.interface implements providedBy twisted.conch error twisted.conch.ssh keys twisted.cred.checkers ICredentialsChecker twisted.cred.credentials IUsernamePassword ISSHPrivateKey twisted.cred.error UnauthorizedLogin UnhandledCredentials twisted.internet defer twisted.python failure reflect log twisted.python.util runAsEffectiveUser twisted.python.filepath FilePath verifyCryptedPassword N/A N/A crypted pw N/A N/A N/A N/A N/A N/A crypt crypt pw crypted crypted N/A _pwdGetByName N/A N/A username N/A N/A N/A 
    Look up a user in the /etc/passwd database using the pwd module.  If the
    pwd module is not available, return None.

    @param username: the username of the user to return the passwd database
        information for.
     N/A N/A pwd None N/A N/A None N/A N/A N/A pwd getpwnam username N/A _shadowGetByName N/A N/A username N/A N/A N/A 
    Look up a user in the /etc/shadow database using the spwd or shadow
    modules.  If neither module is available, return None.

    @param username: the username of the user to return the shadow database
        information for.
     N/A N/A spwd None N/A N/A f N/A spwd getspnam N/A N/A N/A shadow None N/A N/A f N/A shadow getspnam N/A N/A None N/A N/A runAsEffectiveUser 0 0 f username N/A UNIXPasswordDatabase N/A N/A N/A 
    A checker which validates users out of the UNIX password databases, or
    databases of a compatible format.

    @ivar _getByNameFunctions: a C{list} of functions which are called in order
        to valid a user.  The default value is such that the /etc/passwd
        database will be tried first, followed by the /etc/shadow database.
     N/A credentialInterfaces N/A IUsernamePassword N/A N/A implements ICredentialsChecker __init__ N/A N/A self getByNameFunctions N/A None N/A N/A N/A getByNameFunctions None N/A N/A getByNameFunctions N/A _pwdGetByName _shadowGetByName N/A N/A self _getByNameFunctions getByNameFunctions N/A requestAvatarId N/A N/A self credentials N/A N/A N/A func N/A self _getByNameFunctions N/A N/A N/A N/A pwnam N/A func N/A credentials username N/A N/A N/A KeyError N/A N/A N/A N/A defer fail N/A UnauthorizedLogin invalid username N/A N/A N/A pwnam None N/A N/A crypted N/A pwnam N/A 1 N/A N/A crypted N/A N/A N/A N/A verifyCryptedPassword crypted N/A credentials password N/A N/A N/A N/A defer succeed N/A credentials username N/A N/A N/A defer fail N/A UnauthorizedLogin unable to verify password N/A N/A SSHPublicKeyDatabase N/A N/A N/A 
    Checker that authenticates SSH public keys, based on public keys listed in
    authorized_keys and authorized_keys2 files in user .ssh/ directories.
     N/A N/A implements ICredentialsChecker N/A credentialInterfaces N/A ISSHPrivateKey N/A _userdb pwd requestAvatarId N/A N/A self credentials N/A N/A N/A d N/A N/A defer maybeDeferred N/A self checkKey credentials N/A N/A N/A d addCallback N/A self _cbRequestAvatarId credentials N/A N/A N/A d addErrback N/A self _ebRequestAvatarId N/A d N/A _cbRequestAvatarId N/A N/A self validKey credentials N/A N/A N/A 
        Check whether the credentials themselves are valid, now that we know
        if the key matches the user.

        @param validKey: A boolean indicating whether or not the public key
            matches a key in the user's authorized_keys file.

        @param credentials: The credentials offered by the user.
        @type credentials: L{ISSHPrivateKey} provider

        @raise UnauthorizedLogin: (as a failure) if the key does not match the
            user in C{credentials}. Also raised if the user provides an invalid
            signature.

        @raise ValidPublicKey: (as a failure) if the key matches the user but
            the credentials do not include a signature. See
            L{error.ValidPublicKey} for more information.

        @return: The user's username, if authentication was successful.
         N/A N/A validKey N/A N/A N/A N/A failure Failure N/A UnauthorizedLogin invalid key N/A N/A N/A credentials signature N/A N/A N/A N/A failure Failure N/A N/A error ValidPublicKey N/A N/A N/A N/A pubKey N/A N/A N/A keys Key fromString N/A credentials blob N/A N/A N/A pubKey verify N/A credentials signature N/A credentials sigData N/A N/A N/A credentials username N/A N/A N/A N/A N/A N/A log err N/A N/A N/A failure Failure N/A UnauthorizedLogin error while verifying key N/A N/A N/A failure Failure N/A UnauthorizedLogin unable to verify key N/A getAuthorizedKeysFiles N/A N/A self credentials N/A N/A N/A 
        Return a list of L{FilePath} instances for I{authorized_keys} files
        which might contain information about authorized keys for the given
        credentials.

        On OpenSSH servers, the default location of the file containing the
        list of authorized public keys is
        U{$HOME/.ssh/authorized_keys<http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config>}.

        I{$HOME/.ssh/authorized_keys2} is also returned, though it has been
        U{deprecated by OpenSSH since
        2001<http://marc.info/?m=100508718416162>}.

        @return: A list of L{FilePath} instances to files with the authorized keys.
         N/A pwent N/A N/A N/A self _userdb getpwnam N/A credentials username N/A root N/A N/A N/A FilePath N/A pwent pw_dir child .ssh N/A files N/A authorized_keys authorized_keys2 N/A N/A N/A N/A root child f N/A f files N/A checkKey N/A N/A self credentials N/A N/A N/A 
        Retrieve files containing authorized keys and check against user
        credentials.
         N/A N/A uid gid N/A N/A N/A os geteuid N/A N/A os getegid N/A N/A ouid ogid N/A N/A N/A N/A self _userdb getpwnam N/A credentials username N/A 2 4 N/A filepath N/A N/A self getAuthorizedKeysFiles credentials N/A N/A N/A N/A N/A filepath exists N/A N/A N/A N/A N/A lines N/A N/A filepath open N/A N/A N/A IOError N/A e N/A N/A N/A N/A e errno N/A errno EACCES N/A N/A lines N/A runAsEffectiveUser ouid ogid N/A filepath open N/A N/A N/A l lines N/A N/A l2 N/A N/A l split N/A N/A N/A len l2 2 N/A N/A N/A N/A N/A N/A N/A N/A base64 decodestring N/A l2 N/A 1 N/A credentials blob N/A N/A True N/A N/A N/A N/A binascii Error N/A N/A N/A False N/A _ebRequestAvatarId N/A N/A self f N/A N/A N/A N/A N/A N/A f check UnauthorizedLogin N/A N/A N/A N/A log msg f N/A N/A N/A failure Failure N/A UnauthorizedLogin unable to get avatar id N/A f N/A N/A SSHProtocolChecker N/A N/A N/A 
    SSHProtocolChecker is a checker that requires multiple authentications
    to succeed.  To add a checker, call my registerChecker method with
    the checker and the interface.

    After each successful authenticate, I call my areDone method with the
    avatar id.  To get a list of the successful credentials for an avatar id,
    use C{SSHProcotolChecker.successfulCredentials[avatarId]}.  If L{areDone}
    returns True, the authentication has succeeded.
     N/A N/A implements ICredentialsChecker __init__ N/A N/A self N/A N/A N/A N/A self checkers N/A N/A N/A self successfulCredentials N/A N/A get_credentialInterfaces N/A N/A self N/A N/A N/A N/A N/A N/A self checkers keys N/A N/A credentialInterfaces N/A property get_credentialInterfaces registerChecker N/A N/A self checker N/A credentialInterfaces N/A N/A N/A credentialInterfaces N/A N/A credentialInterfaces N/A checker credentialInterfaces N/A credentialInterface credentialInterfaces N/A N/A N/A N/A self checkers N/A credentialInterface checker N/A requestAvatarId N/A N/A self credentials N/A N/A N/A 
        Part of the L{ICredentialsChecker} interface.  Called by a portal with
        some credentials to check if they'll authenticate a user.  We check the
        interfaces that the credentials provide against our list of acceptable
        checkers.  If one of them matches, we ask that checker to verify the
        credentials.  If they're valid, we call our L{_cbGoodAuthentication}
        method to continue.

        @param credentials: the credentials the L{Portal} wants us to verify
         N/A ifac N/A providedBy credentials N/A i ifac N/A N/A c N/A N/A N/A self checkers get i N/A N/A c None N/A N/A d N/A N/A defer maybeDeferred N/A c requestAvatarId credentials N/A N/A N/A d addCallback N/A self _cbGoodAuthentication credentials N/A N/A N/A defer fail N/A UnhandledCredentials N/A No checker for %s N/A N/A ,  join N/A map N/A reflect qual ifac N/A _cbGoodAuthentication N/A N/A self avatarId credentials N/A N/A N/A 
        Called if a checker has verified the credentials.  We call our
        L{areDone} method to see if the whole of the successful authentications
        are enough.  If they are, we return the avatar ID returned by the first
        checker.
         N/A N/A avatarId N/A self successfulCredentials N/A N/A N/A N/A self successfulCredentials N/A avatarId N/A N/A N/A N/A N/A N/A self successfulCredentials N/A avatarId append credentials N/A N/A N/A self areDone avatarId N/A N/A N/A N/A self successfulCredentials N/A avatarId N/A avatarId N/A N/A N/A N/A error NotEnoughAuthentication N/A areDone N/A N/A self avatarId N/A N/A N/A 
        Override to determine if the authentication is finished for a given
        avatarId.

        @param avatarId: the avatar returned by the first checker.  For
            this checker to function correctly, all the checkers must
            return the same avatar ID.
         N/A True N/A N/A