Current File : //lib/python2.7/site-packages/passlib/apache.pyo
�
���Xc@�s�dZddlmZddlZeje�ZddlZddlm	Z	ddl
mZmZddl
mZddlmZddlmZdd	lmZmZmZdd
lmZddlmZmZmZmZdd
gZe�Z dZ!dZ"dZ#dZ$dZ%defd��YZ&e'�Z(d�Z)e)�Z*d�Z+e+�Z,de&fd��YZ-d
e&fd��YZ.dS(s(passlib.apache - apache password supporti����(twith_statementN(twarn(texctregistry(tCryptContext(tExpectedStringError(thtdigest(trender_bytestto_bytestis_ascii_codec(tdeprecated_method(t
join_bytestunicodetBytesIOtPY3tHtpasswdFiletHtdigestFilet:t#s:

	tskippedtrecordt_CommonFilecB�s=eZdZdZdZdZdZeZ	dZ
dZed��Z
ed��Zdeeeded�Zd�Zed��Zejd��Zed��Zd	�Zded
�Zd�Zd�Zd
�Zd�Zd�Zdd�Zd�Zd�Z d�Z!d�Z"d�Z#dd�Z$d�Z%RS(s0common framework for HtpasswdFile & HtdigestFilecK�s8d|krtd��n||�}|j|�|S(s�create new object from raw string.

        :type data: unicode or bytes
        :arg data:
            database to load, as single string.

        :param \*\*kwds:
            all other keywords are the same as in the class constructor
        tpaths$'path' not accepted by from_string()(t	TypeErrortload_string(tclstdatatkwdstself((s2/usr/lib/python2.7/site-packages/passlib/apache.pytfrom_stringKs

cK�s||�}|j|�|S(s�create new object from file, without binding object to file.

        :type path: str
        :arg path:
            local filepath to load from

        :param \*\*kwds:
            all other keywords are the same as in the class constructor
        (tload(RRRR((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt	from_path\s
sutf-8cC�s�|s(tdtdd�d}t}nt|�sCtd��n||_||_||_||_d|_	|s�tdtdd�t
}n|r�|r�|j�ni|_g|_
dS(Ns�``encoding=None`` is deprecated as of Passlib 1.6, and will cause a ValueError in Passlib 1.8, use ``return_unicode=False`` instead.t
stacklevelisutf-8s'encoding must be 7-bit ascii compatibleisp``autoload=False`` is deprecated as of Passlib 1.6, and will be removed in Passlib 1.8, use ``new=True`` instead(RtDeprecationWarningtFalseR	t
ValueErrortencodingtreturn_unicodetautosavet_patht_mtimetTrueRt_recordst_source(RRtnewtautoloadR&R$R%((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt__init__ns(
						
	

	cC�syd}|jr|d7}n|jr9|d|j7}n|jdkr\|d|j7}nd|jjt|�|fS(Nts autosave=Trues path=%rsutf-8s encoding=%rs<%s 0x%0x%s>(R&R'R$t	__class__t__name__tid(Rttail((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt__repr__�s	
	cC�s|jS(N(R'(R((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�scC�s(||jkrd|_n||_dS(Ni(R'R((Rtvalue((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�scC�s|jS(s7modify time when last loaded (if bound to a local file)(R((R((s2/usr/lib/python2.7/site-packages/passlib/apache.pytmtime�scC�sU|jstd|��n|jrG|jtjj|j�krGtS|j�tS(sBReload from ``self.path`` only if file has changed since last loads%r is not bound to a local file(	R'tRuntimeErrorR(tosRtgetmtimeR"RR)(R((s2/usr/lib/python2.7/site-packages/passlib/apache.pytload_if_changed�s	'
cC�s�|dk	r=t|d��}d|_|j|�WdQXn�|sstdtd|jj�tdd�|j	�S|j
r�t|j
d��,}tjj
|j
�|_|j|�WdQXntd|jj��tS(	s�Load state from local file.
        If no path is specified, attempts to load from ``self.path``.

        :type path: str
        :arg path: local file to load from

        :type force: bool
        :param force:
            if ``force=False``, only load from ``self.path`` if file
            has changed since last load.

            .. deprecated:: 1.6
                This keyword will be removed in Passlib 1.8;
                Applications should use :meth:`load_if_changed` instead.
        trbiNs�%(name)s.load(force=False) is deprecated as of Passlib 1.6,and will be removed in Passlib 1.8; use %(name)s.load_if_changed() instead.tnameR is2%s().path is not set, an explicit path is required(tNonetopenR(t_load_linesRtdictR0R1R!R:R'R8RR9R7R)(RRtforcetfh((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�s 	

	cC�s5t||jd�}d|_|jt|��dS(s@Load state from unicode or bytes string, replacing current stateRiN(RR$R(R?R
(RR((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�s	cC�s'|j}i}g}d}x�t|�D]�\}}|j�}|sV|jt�rf||7}q(n|||d�\}	}
|	|kr�tjd|	�||7}q(n|r�|jt|f�d}n|
||	<|jt	|	f�q(W|j
�r|jt|f�n||_||_dS(sload from sequence of listsR/is1username occurs multiple times in source file: %rN(
t
_parse_recordt	enumeratetlstript
startswitht_BHASHtlogtwarningtappendt_SKIPPEDt_RECORDtrstripR*R+(RtlinestparsetrecordstsourceRtidxtlinettmptkeyR5((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR?�s.	

	
	cC�std��dS(s)parse line of file into (key, value) pairs!should be implemented in subclassN(tNotImplementedError(RRtlineno((s2/usr/lib/python2.7/site-packages/passlib/apache.pyRCscC�sB|j}||k}|||<|s>|jjt|f�n|S(s�
        helper for setting record which takes care of inserting source line if needed;

        :returns:
            bool if key already present
        (R*R+RJRL(RRUR5RPtexisting((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt_set_records	
cC�s#|jr|jr|j�ndS(s0subclass helper to call save() after any changesN(R&R'tsave(R((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt	_autosave!scC�s�|dk	r:t|d��}|j|j��WdQXnJ|jrn|j|j�tjj|j�|_	nt
d|jj��dS(shSave current state to file.
        If no path is specified, attempts to save to ``self.path``.
        twbNs%%s().path is not set, cannot autosave(
R=R>t
writelinest_iter_linesR'RZR8RR9R(R7R0R1(RRRB((s2/usr/lib/python2.7/site-packages/passlib/apache.pyRZ&s	cC�st|j��S(s)Export current state as a string of bytes(RR^(R((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt	to_string4scc�sb|j}xR|jD]G\}}|tkr3|Vq||krEqn|j|||�VqWdS(s#iterator yielding lines of databaseN(R*R+RKt_render_record(RRPtactiontcontent((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR^@s	cC�std��dS(s,given key/value pair, encode as line of files!should be implemented in subclassN(RV(RRUR5((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR`[scC�s|j|d�S(s)user-specific wrapper for _encode_field()tuser(t
_encode_field(RRc((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt_encode_userbscC�s|j|d�S(s*realm-specific wrapper for _encode_field()trealm(Rd(RRf((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt
_encode_realmfstfieldcC�s�t|t�r$|j|j�}n!t|t�sEt||��nt|�dkrptd||f��ntd�|D��r�td||f��n|S(s+convert field to internal representation.

        internal representation is always bytes. byte strings are left as-is,
        unicode strings encoding using file's default encoding (or ``utf-8``
        if no encoding has been specified).

        :raises UnicodeEncodeError:
            if unicode value cannot be encoded using default encoding.

        :raises ValueError:
            if resulting byte string contains a forbidden character,
            or is too long (>255 bytes).

        :returns:
            encoded identifer as bytes
        i�s%%s must be at most 255 characters: %rcs�s|]}|tkVqdS(N(t_INVALID_FIELD_CHARS(t.0tc((s2/usr/lib/python2.7/site-packages/passlib/apache.pys	<genexpr>�ss"%s contains invalid characters: %r(	t
isinstanceRtencodeR$tbytesRtlenR#tany(RR5tparam((s2/usr/lib/python2.7/site-packages/passlib/apache.pyRdjscC�s!|jr|j|j�S|SdS(sWdecode field from internal representation to format
        returns by users() method, etc.

        :raises UnicodeDecodeError:
            if unicode value cannot be decoded using default encoding.
            (usually indicates wrong encoding set for file).

        :returns:
            field as unicode or bytes, as appropriate.
        N(R%tdecodeR$(RR5((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt
_decode_field�s	N(&R1t
__module__t__doc__R=R$R%R'R(R"R&R*R+tclassmethodRRR)RR.R4tpropertyRtsetterR6R:RRR?RCRYR[RZR_R^R`ReRgRdRs(((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR,s>"			$		*								cC�s�d}x-ddgD]}tj|�r|}PqqWtjd�rKdnd}tj�|s�tjdddddg�ntd|p�dd	dd|p�|p�dd
|p�dd|p�ddd�}|jd|dd|d�|S(Ntbcrypttsha256_crypttportable_apache_24thost_apache_24tlinux_apache_24tportablethostt
apr_md5_crypttportable_apache_22thost_apache_22tlinux_apache_22(R=Rthas_os_crypt_supportthas_backendt_warn_no_bcrypttcleartupdateR@(t	host_bestR<Rytdefaults((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt_init_default_schemes�s*
		
cC�srdddddddg}|jtj��|d dg|}tt|�d	|j�}t|d
td�S(NRyRztsha512_cryptt	des_cryptR�t	ldap_sha1t	plaintextiRUtdefaultR�(textendRtget_supported_os_crypt_schemestsortedtsettindexRthtpasswd_defaults(tschemest	preferred((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt_init_htpasswd_context�s	cB�s�eZdZdded�Zd�Zd�Zd�Zd�Z	e
dddd	d
d�d��Zd
�Zd�Z
e
dddd	d
d�d��Zd�Zd�Ze
dddd	d
d�d��ZRS(s�class for reading & writing Htpasswd files.

    The class constructor accepts the following arguments:

    :type path: filepath
    :param path:

        Specifies path to htpasswd file, use to implicitly load from and save to.

        This class has two modes of operation:

        1. It can be "bound" to a local file by passing a ``path`` to the class
           constructor. In this case it will load the contents of the file when
           created, and the :meth:`load` and :meth:`save` methods will automatically
           load from and save to that file if they are called without arguments.

        2. Alternately, it can exist as an independant object, in which case
           :meth:`load` and :meth:`save` will require an explicit path to be
           provided whenever they are called. As well, ``autosave`` behavior
           will not be available.

           This feature is new in Passlib 1.6, and is the default if no
           ``path`` value is provided to the constructor.

        This is also exposed as a readonly instance attribute.

    :type new: bool
    :param new:

        Normally, if *path* is specified, :class:`HtpasswdFile` will
        immediately load the contents of the file. However, when creating
        a new htpasswd file, applications can set ``new=True`` so that
        the existing file (if any) will not be loaded.

        .. versionadded:: 1.6
            This feature was previously enabled by setting ``autoload=False``.
            That alias has been deprecated, and will be removed in Passlib 1.8

    :type autosave: bool
    :param autosave:

        Normally, any changes made to an :class:`HtpasswdFile` instance
        will not be saved until :meth:`save` is explicitly called. However,
        if ``autosave=True`` is specified, any changes made will be
        saved to disk immediately (assuming *path* has been set).

        This is also exposed as a writeable instance attribute.

    :type encoding: str
    :param encoding:

        Optionally specify character encoding used to read/write file
        and hash passwords. Defaults to ``utf-8``, though ``latin-1``
        is the only other commonly encountered encoding.

        This is also exposed as a readonly instance attribute.

    :type default_scheme: str
    :param default_scheme:
        Optionally specify default scheme to use when encoding new passwords.

        This can be any of the schemes with builtin Apache support,
        OR natively supported by the host OS's :func:`crypt.crypt` function.

        * Builtin schemes include ``"bcrypt"`` (apache 2.4+), ``"apr_md5_crypt"`,
          and ``"des_crypt"``.

        * Schemes commonly supported by Unix hosts
          include ``"bcrypt"``, ``"sha256_crypt"``, and ``"des_crypt"``.

        In order to not have to sort out what you should use,
        passlib offers a number of aliases, that will resolve
        to the most appropriate scheme based on your needs:

        * ``"portable"``, ``"portable_apache_24"`` -- pick scheme that's portable across hosts
          running apache >= 2.4. **This will be the default as of Passlib 2.0**.

        * ``"portable_apache_22"`` -- pick scheme that's portable across hosts
          running apache >= 2.4. **This is the default up to Passlib 1.9**.

        * ``"host"``, ``"host_apache_24"`` -- pick strongest scheme supported by
           apache >= 2.4 and/or host OS.

        * ``"host_apache_22"`` -- pick strongest scheme supported by
           apache >= 2.2 and/or host OS.

        .. versionadded:: 1.6
            This keyword was previously named ``default``. That alias
            has been deprecated, and will be removed in Passlib 1.8.

        .. versionchanged:: 1.6.3

            Added support for ``"bcrypt"``, ``"sha256_crypt"``, and ``"portable"`` alias.

        .. versionchanged:: 1.7

            Added apache 2.4 semantics, and additional aliases.

    :type context: :class:`~passlib.context.CryptContext`
    :param context:
        :class:`!CryptContext` instance used to create
        and verify the hashes found in the htpasswd file.
        The default value is a pre-built context which supports all
        of the hashes officially allowed in an htpasswd file.

        This is also exposed as a readonly instance attribute.

        .. warning::

            This option may be used to add support for non-standard hash
            formats to an htpasswd file. However, the resulting file
            will probably not be usable by another application,
            and particularly not by Apache.

    :param autoload:
        Set to ``False`` to prevent the constructor from automatically
        loaded the file from disk.

        .. deprecated:: 1.6
            This has been replaced by the *new* keyword.
            Instead of setting ``autoload=False``, you should use
            ``new=True``. Support for this keyword will be removed
            in Passlib 1.8.

    :param default:
        Change the default algorithm used to hash new passwords.

        .. deprecated:: 1.6
            This has been renamed to *default_scheme* for clarity.
            Support for this alias will be removed in Passlib 1.8.

    Loading & Saving
    ================
    .. automethod:: load
    .. automethod:: load_if_changed
    .. automethod:: load_string
    .. automethod:: save
    .. automethod:: to_string

    Inspection
    ================
    .. automethod:: users
    .. automethod:: check_password
    .. automethod:: get_hash

    Modification
    ================
    .. automethod:: set_password
    .. automethod:: delete

    Alternate Constructors
    ======================
    .. automethod:: from_string

    Attributes
    ==========
    .. attribute:: path

        Path to local file that will be used as the default
        for all :meth:`load` and :meth:`save` operations.
        May be written to, initialized by the *path* constructor keyword.

    .. attribute:: autosave

        Writeable flag indicating whether changes will be automatically
        written to *path*.

    Errors
    ======
    :raises ValueError:
        All of the methods in this class will raise a :exc:`ValueError` if
        any user name contains a forbidden character (one of ``:\r\n\t\x00``),
        or is longer than 255 characters.
    cK�s�d|kr1tdtdd�|jd�}n|r�|tkrZtd|tj�ntj||�}|jd|�}n||_	t
t|�j||�dS(NR�s{``default`` is deprecated as of Passlib 1.6, and will be removed in Passlib 1.8, it has been renamed to ``default_scheem``.R isPHtpasswdFile: no bcrypt backends available, using fallback for default scheme %r(
RR!tpopR�RtPasslibSecurityWarningR�tgettcopytcontexttsuperRR.(RRtdefault_schemeR�R((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR.�s

	cC�s>|j�jt�}t|�dkr:td|��n|S(Nis/malformed htpasswd file (error reading line %d)(RMtsplitt_BCOLONRoR#(RRRWtresult((s2/usr/lib/python2.7/site-packages/passlib/apache.pyRC�s

cC�std||�S(Ns%s:%s
(R(RRcthash((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR`�scC�s#g|jD]}|j|�^q
S(s6
        Return list of all users in database
        (R*Rs(RRc((s2/usr/lib/python2.7/site-packages/passlib/apache.pytusers�scC�s"|jj|�}|j||�S(s�Set password for user; adds user if needed.

        :returns:
            * ``True`` if existing user was updated.
            * ``False`` if user account was added.

        .. versionchanged:: 1.6
            This method was previously called ``update``, it was renamed
            to prevent ambiguity with the dictionary method.
            The old alias is deprecated, and will be removed in Passlib 1.8.
        (R�R�tset_hash(RRctpasswordR�((s2/usr/lib/python2.7/site-packages/passlib/apache.pytset_password�st
deprecateds1.6tremoveds1.8treplacementR�cC�s|j||�S(sset password for user(R�(RRcR�((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�scC�s1y|j|j|�SWntk
r,dSXdS(sReturn hash stored for user, or ``None`` if user not found.

        .. versionchanged:: 1.6
            This method was previously named ``find``, it was renamed
            for clarity. The old name is deprecated, and will be removed
            in Passlib 1.8.
        N(R*RetKeyErrorR=(RRc((s2/usr/lib/python2.7/site-packages/passlib/apache.pytget_hash	s
cC�sYtr*t|t�r*|j|j�}n|j|�}|j||�}|j�|S(s�
        semi-private helper which allows writing a hash directly;
        adds user if needed.

        .. warning::
            does not (currently) do any validation of the hash string

        .. versionadded:: 1.7
        (RRltstrRmR$ReRYR[(RRcR�RX((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�s
R�cC�s
|j|�S(sreturn hash for user(R�(RRc((s2/usr/lib/python2.7/site-packages/passlib/apache.pytfind(scC�s:y|j|j|�=Wntk
r+tSX|j�tS(s�Delete user's entry.

        :returns:
            * ``True`` if user deleted.
            * ``False`` if user not found.
        (R*ReR�R"R[R)(RRc((s2/usr/lib/python2.7/site-packages/passlib/apache.pytdelete/s

cC�s�|j|�}|jj|�}|dkr1dSt|t�rU|j|j�}n|jj	||�\}}|r�|dk	r�||j|<|j
�n|S(sM
        Verify password for specified user.
        If algorithm marked as deprecated by CryptContext, will automatically be re-hashed.

        :returns:
            * ``None`` if user not found.
            * ``False`` if user found, but password does not match.
            * ``True`` if user found and password matches.

        .. versionchanged:: 1.6
            This method was previously called ``verify``, it was renamed
            to prevent ambiguity with the :class:`!CryptContext` method.
            The old alias is deprecated, and will be removed in Passlib 1.8.
        N(ReR*R�R=RlRRmR$R�tverify_and_updateR[(RRcR�R�toktnew_hash((s2/usr/lib/python2.7/site-packages/passlib/apache.pytcheck_password=s

R�cC�s|j||�S(sverify password for user(R�(RRcR�((s2/usr/lib/python2.7/site-packages/passlib/apache.pytverify\sN(R1RtRuR=thtpasswd_contextR.RCR`R�R�R
R�R�R�R�R�R�R�(((s2/usr/lib/python2.7/site-packages/passlib/apache.pyRs �					
			cB�seZdZdZddd�Zd�Zd�Zd�Zd�Z	d�Z
d�Zdd�Zde
d	�Zed
ddd
dd�d��Zdd�Zde
d�Zed
ddd
dd�d��Zdd�Zd�Zde
d�Zed
ddd
dd�d��ZRS(s�class for reading & writing Htdigest files.

    The class constructor accepts the following arguments:

    :type path: filepath
    :param path:

        Specifies path to htdigest file, use to implicitly load from and save to.

        This class has two modes of operation:

        1. It can be "bound" to a local file by passing a ``path`` to the class
           constructor. In this case it will load the contents of the file when
           created, and the :meth:`load` and :meth:`save` methods will automatically
           load from and save to that file if they are called without arguments.

        2. Alternately, it can exist as an independant object, in which case
           :meth:`load` and :meth:`save` will require an explicit path to be
           provided whenever they are called. As well, ``autosave`` behavior
           will not be available.

           This feature is new in Passlib 1.6, and is the default if no
           ``path`` value is provided to the constructor.

        This is also exposed as a readonly instance attribute.

    :type default_realm: str
    :param default_realm:

        If ``default_realm`` is set, all the :class:`HtdigestFile`
        methods that require a realm will use this value if one is not
        provided explicitly. If unset, they will raise an error stating
        that an explicit realm is required.

        This is also exposed as a writeable instance attribute.

        .. versionadded:: 1.6

    :type new: bool
    :param new:

        Normally, if *path* is specified, :class:`HtdigestFile` will
        immediately load the contents of the file. However, when creating
        a new htpasswd file, applications can set ``new=True`` so that
        the existing file (if any) will not be loaded.

        .. versionadded:: 1.6
            This feature was previously enabled by setting ``autoload=False``.
            That alias has been deprecated, and will be removed in Passlib 1.8

    :type autosave: bool
    :param autosave:

        Normally, any changes made to an :class:`HtdigestFile` instance
        will not be saved until :meth:`save` is explicitly called. However,
        if ``autosave=True`` is specified, any changes made will be
        saved to disk immediately (assuming *path* has been set).

        This is also exposed as a writeable instance attribute.

    :type encoding: str
    :param encoding:

        Optionally specify character encoding used to read/write file
        and hash passwords. Defaults to ``utf-8``, though ``latin-1``
        is the only other commonly encountered encoding.

        This is also exposed as a readonly instance attribute.

    :param autoload:
        Set to ``False`` to prevent the constructor from automatically
        loaded the file from disk.

        .. deprecated:: 1.6
            This has been replaced by the *new* keyword.
            Instead of setting ``autoload=False``, you should use
            ``new=True``. Support for this keyword will be removed
            in Passlib 1.8.

    Loading & Saving
    ================
    .. automethod:: load
    .. automethod:: load_if_changed
    .. automethod:: load_string
    .. automethod:: save
    .. automethod:: to_string

    Inspection
    ==========
    .. automethod:: realms
    .. automethod:: users
    .. automethod:: check_password(user[, realm], password)
    .. automethod:: get_hash

    Modification
    ============
    .. automethod:: set_password(user[, realm], password)
    .. automethod:: delete
    .. automethod:: delete_realm

    Alternate Constructors
    ======================
    .. automethod:: from_string

    Attributes
    ==========
    .. attribute:: default_realm

        The default realm that will be used if one is not provided
        to methods that require it. By default this is ``None``,
        in which case an explicit realm must be provided for every
        method call. Can be written to.

    .. attribute:: path

        Path to local file that will be used as the default
        for all :meth:`load` and :meth:`save` operations.
        May be written to, initialized by the *path* constructor keyword.

    .. attribute:: autosave

        Writeable flag indicating whether changes will be automatically
        written to *path*.

    Errors
    ======
    :raises ValueError:
        All of the methods in this class will raise a :exc:`ValueError` if
        any user name or realm contains a forbidden character (one of ``:\r\n\t\x00``),
        or is longer than 255 characters.
    cK�s&||_tt|�j||�dS(N(t
default_realmR�RR.(RRR�R((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR.�s	cC�sY|j�jt�}t|�dkr:td|��n|\}}}||f|fS(Nis/malformed htdigest file (error reading line %d)(RMR�R�RoR#(RRRWR�RcRfR�((s2/usr/lib/python2.7/site-packages/passlib/apache.pyRCs
cC�s|\}}td|||�S(Ns	%s:%s:%s
(R(RRUR�RcRf((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR`
scC�s7|dkr3|j}|dkr3td��q3n|S(NsGyou must specify a realm explicitly, or set the default_realm attribute(R=R�R(RRf((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt_require_realms
	cC�s|j|�}|j|d�S(NRf(R�Rd(RRf((s2/usr/lib/python2.7/site-packages/passlib/apache.pyRgscC�s|j|�|j|�fS(N(ReRg(RRcRf((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt_encode_keyscC�s9td�|jD��}g|D]}|j|�^q S(s%Return list of all realms in databasecs�s|]}|dVqdS(iN((RjRU((s2/usr/lib/python2.7/site-packages/passlib/apache.pys	<genexpr>#s(R�R*Rs(RtrealmsRf((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�!scC�sF|j|�}g|jD])}|d|kr|j|d�^qS(s�Return list of all users in specified realm.

        * uses ``self.default_realm`` if no realm explicitly provided.
        * returns empty list if realm not found.
        ii(RgR*Rs(RRfRU((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�&scC�s\|tkrd|}}n|j|�}tj|||d|j�}|j|||�S(s�Set password for user; adds user & realm if needed.

        If ``self.default_realm`` has been set, this may be called
        with the syntax ``set_password(user, password)``,
        otherwise it must be called with all three arguments:
        ``set_password(user, realm, password)``.

        :returns:
            * ``True`` if existing user was updated
            * ``False`` if user account added.
        R$N(t_UNSETR=R�RR�R$R�(RRcRfR�R�((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�Hs
R�s1.6R�s1.8R�R�cC�s|j|||�S(sset password for user(R�(RRcRfR�((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�[scC�sS|j||�}|jj|�}|dkr4dStrO|j|j�}n|S(s�Return :class:`~passlib.hash.htdigest` hash stored for user.

        * uses ``self.default_realm`` if no realm explicitly provided.
        * returns ``None`` if user or realm not found.

        .. versionchanged:: 1.6
            This method was previously named ``find``, it was renamed
            for clarity. The old name is deprecated, and will be removed
            in Passlib 1.8.
        N(R�R*R�R=RRrR$(RRcRfRUR�((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�ascC�sx|tkrd|}}ntrFt|t�rF|j|j�}n|j||�}|j||�}|j	�|S(s�
        semi-private helper which allows writing a hash directly;
        adds user & realm if needed.

        If ``self.default_realm`` has been set, this may be called
        with the syntax ``set_hash(user, hash)``,
        otherwise it must be called with all three arguments:
        ``set_hash(user, realm, hash)``.

        .. warning::
            does not (currently) do any validation of the hash string

        .. versionadded:: 1.7
        N(
R�R=RRlR�RmR$R�RYR[(RRcRfR�RURX((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR�ts
R�cC�s|j||�S(sreturn hash for user(R�(RRcRf((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR��scC�sC|j||�}y|j|=Wntk
r4tSX|j�tS(s�Delete user's entry for specified realm.

        if realm is not specified, uses ``self.default_realm``.

        :returns:
            * ``True`` if user deleted,
            * ``False`` if user not found in realm.
        (R�R*R�R"R[R)(RRcRfRU((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR��s	

cC�sm|j|�}|j}g|D]}|d|kr|^q}x|D]
}||=qHW|j�t|�S(s�Delete all users for specified realm.

        if realm is not specified, uses ``self.default_realm``.

        :returns: number of users deleted (0 if realm not found)
        i(RgR*R[Ro(RRfRPRUtkeys((s2/usr/lib/python2.7/site-packages/passlib/apache.pytdelete_realm�s	)

cC�s�|tkrd|}}n|j|�}|j|�}|jj||f�}|dkrbdStj||||d|j�S(s�Verify password for specified user + realm.

        If ``self.default_realm`` has been set, this may be called
        with the syntax ``check_password(user, password)``,
        otherwise it must be called with all three arguments:
        ``check_password(user, realm, password)``.

        :returns:
            * ``None`` if user or realm not found.
            * ``False`` if user found, but password does not match.
            * ``True`` if user found and password matches.

        .. versionchanged:: 1.6
            This method was previously called ``verify``, it was renamed
            to prevent ambiguity with the :class:`!CryptContext` method.
            The old alias is deprecated, and will be removed in Passlib 1.8.
        R$N(	R�R=ReRgR*R�RR�R$(RRcRfR�R�((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR��sR�cC�s|j|||�S(sverify password for user(R�(RRcRfR�((s2/usr/lib/python2.7/site-packages/passlib/apache.pyR��sN(R1RtRuR=R�R.RCR`R�RgR�R�R�R�R�R
R�R�R�R�R�R�R�R�(((s2/usr/lib/python2.7/site-packages/passlib/apache.pyRis,�
						"	(/Rut
__future__Rtloggingt	getLoggerR1RHR8twarningsRtpasslibRRtpasslib.contextRtpasslib.excRtpasslib.hashRt
passlib.utilsRRR	tpasslib.utils.decorR
tpasslib.utils.compatRRR
Rt__all__tobjectR�R�RGRiRKRLRR�R�R�R�R�R�RR(((s2/usr/lib/python2.7/site-packages/passlib/apache.pyt<module>s<"		��		(		%	�b