FM / medusa

/usr/lib/python2.6/site-packages/supervisor/medusa/

/usr/lib/python2.6/site-packages/supervisor/medusa

Name	Size	Mode	Actions
auth_handler.py	4739	0644	edit dl rm
auth_handler.pyc	4513	0644	edit dl rm
auth_handler.pyo	4513	0644	edit dl rm
chat_server.py	4535	0644	edit dl rm
chat_server.pyc	6427	0644	edit dl rm
chat_server.pyo	6427	0644	edit dl rm
counter.py	1440	0644	edit dl rm
counter.pyc	2039	0644	edit dl rm
counter.pyo	2039	0644	edit dl rm
default_handler.py	6331	0644	edit dl rm
default_handler.pyc	5034	0644	edit dl rm
default_handler.pyo	5034	0644	edit dl rm
event_loop.py	2981	0644	edit dl rm
event_loop.pyc	3513	0644	edit dl rm
event_loop.pyo	3513	0644	edit dl rm
filesys.py	11206	0644	edit dl rm
filesys.pyc	13598	0644	edit dl rm
filesys.pyo	13598	0644	edit dl rm
ftp_server.py	40552	0644	edit dl rm
ftp_server.pyc	34727	0644	edit dl rm
ftp_server.pyo	34727	0644	edit dl rm
http_date.py	3415	0644	edit dl rm
http_date.pyc	3468	0644	edit dl rm
http_date.pyo	3468	0644	edit dl rm
http_server.py	25217	0644	edit dl rm
http_server.pyc	21468	0644	edit dl rm
http_server.pyo	21468	0644	edit dl rm
logger.py	8000	0644	edit dl rm
logger.pyc	10990	0644	edit dl rm
logger.pyo	10990	0644	edit dl rm
medusa_gif.py	2772	0644	edit dl rm
medusa_gif.pyc	1156	0644	edit dl rm
medusa_gif.pyo	1156	0644	edit dl rm
monitor.py	11054	0644	edit dl rm
monitor.pyc	12285	0644	edit dl rm
monitor.pyo	12285	0644	edit dl rm
monitor_client.py	3273	0644	edit dl rm
monitor_client.pyc	5390	0644	edit dl rm
monitor_client.pyo	5390	0644	edit dl rm
monitor_client_win32.py	1334	0644	edit dl rm
monitor_client_win32.pyc	2094	0644	edit dl rm
monitor_client_win32.pyo	2094	0644	edit dl rm
m_syslog.py	7351	0644	edit dl rm
m_syslog.pyc	4006	0644	edit dl rm
m_syslog.pyo	4006	0644	edit dl rm
producers.py	9439	0644	edit dl rm
producers.pyc	11634	0644	edit dl rm
producers.pyo	11634	0644	edit dl rm
put_handler.py	3324	0644	edit dl rm
put_handler.pyc	3511	0644	edit dl rm
put_handler.pyo	3511	0644	edit dl rm
redirecting_handler.py	1403	0644	edit dl rm
redirecting_handler.pyc	2159	0644	edit dl rm
redirecting_handler.pyo	2159	0644	edit dl rm
resolver.py	15559	0644	edit dl rm
resolver.pyc	12401	0644	edit dl rm
resolver.pyo	12401	0644	edit dl rm
rpc_client.py	9675	0644	edit dl rm
rpc_client.pyc	10346	0644	edit dl rm
rpc_client.pyo	10346	0644	edit dl rm
rpc_server.py	9953	0644	edit dl rm
rpc_server.pyc	9536	0644	edit dl rm
rpc_server.pyo	9536	0644	edit dl rm
script_handler.py	6554	0644	edit dl rm
script_handler.pyc	6651	0644	edit dl rm
script_handler.pyo	6651	0644	edit dl rm
setup.py	496	0644	edit dl rm
setup.pyc	729	0644	edit dl rm
setup.pyo	729	0644	edit dl rm
status_handler.py	9352	0644	edit dl rm
status_handler.pyc	9672	0644	edit dl rm
status_handler.pyo	9672	0644	edit dl rm
unix_user_handler.py	2312	0644	edit dl rm
unix_user_handler.pyc	2361	0644	edit dl rm
unix_user_handler.pyo	2361	0644	edit dl rm
virtual_handler.py	1724	0644	edit dl rm
virtual_handler.pyc	3164	0644	edit dl rm
virtual_handler.pyo	3164	0644	edit dl rm
xmlrpc_handler.py	2944	0644	edit dl rm
xmlrpc_handler.pyc	3784	0644	edit dl rm
xmlrpc_handler.pyo	3784	0644	edit dl rm
__init__.py	128	0644	edit dl rm
__init__.pyc	277	0644	edit dl rm
__init__.pyo	277	0644	edit dl rm

Edit: /usr/lib/python2.6/site-packages/supervisor/medusa/auth_handler.py (4739B)

# -*- Mode: Python -*-
#
#       Author: Sam Rushing <rushing@nightmare.com>
#       Copyright 1996-2000 by Sam Rushing
#                                                All Rights Reserved.
#

RCS_ID =  '$Id: auth_handler.py,v 1.1.1.1 2006/06/26 06:36:05 chrism Exp $'

# support for 'basic' authenticaion.

import base64
import md5
import re
import string
import time
import counter

import default_handler

get_header = default_handler.get_header

import producers

# This is a 'handler' that wraps an authorization method
# around access to the resources normally served up by
# another handler.

# does anyone support digest authentication? (rfc2069)

class auth_handler:
    def __init__ (self, dict, handler, realm='default'):
        self.authorizer = dictionary_authorizer (dict)
        self.handler = handler
        self.realm = realm
        self.pass_count = counter.counter()
        self.fail_count = counter.counter()

def match (self, request):
        # by default, use the given handler's matcher
        return self.handler.match (request)

def handle_request (self, request):
        # authorize a request before handling it...
        scheme = get_header (AUTHORIZATION, request.header)

if scheme:
            scheme = string.lower (scheme)
            if scheme == 'basic':
                cookie = get_header (AUTHORIZATION, request.header, 2)
                try:
                    decoded = base64.decodestring (cookie)
                except:
                    print 'malformed authorization info <%s>' % cookie
                    request.error (400)
                    return
                auth_info = string.split (decoded, ':')
                if self.authorizer.authorize (auth_info):
                    self.pass_count.increment()
                    request.auth_info = auth_info
                    self.handler.handle_request (request)
                else:
                    self.handle_unauthorized (request)
            #elif scheme == 'digest':
            #       print 'digest: ',AUTHORIZATION.group(2)
            else:
                print 'unknown/unsupported auth method: %s' % scheme
                self.handle_unauthorized(request)
        else:
            # list both?  prefer one or the other?
            # you could also use a 'nonce' here. [see below]
            #auth = 'Basic realm="%s" Digest realm="%s"' % (self.realm, self.realm)
            #nonce = self.make_nonce (request)
            #auth = 'Digest realm="%s" nonce="%s"' % (self.realm, nonce)
            #request['WWW-Authenticate'] = auth
            #print 'sending header: %s' % request['WWW-Authenticate']
            self.handle_unauthorized (request)

def handle_unauthorized (self, request):
        # We are now going to receive data that we want to ignore.
        # to ignore the file data we're not interested in.
        self.fail_count.increment()
        request.channel.set_terminator (None)
        request['Connection'] = 'close'
        request['WWW-Authenticate'] = 'Basic realm="%s"' % self.realm
        request.error (401)

def make_nonce (self, request):
        "A digest-authentication <nonce>, constructed as suggested in RFC 2069"
        ip = request.channel.server.ip
        now = str(long(time.time()))
        if now[-1:] == 'L':
            now = now[:-1]
        private_key = str (id (self))
        nonce = string.join ([ip, now, private_key], ':')
        return self.apply_hash (nonce)

def apply_hash (self, s):
        "Apply MD5 to a string <s>, then wrap it in base64 encoding."
        m = md5.new()
        m.update (s)
        d = m.digest()
        # base64.encodestring tacks on an extra linefeed.
        return base64.encodestring (d)[:-1]

def status (self):
        # Thanks to mwm@contessa.phone.net (Mike Meyer)
        r = [
                producers.simple_producer (
                        '<li>Authorization Extension : '
                        '<b>Unauthorized requests:</b> %s<ul>' % self.fail_count
                        )
                ]
        if hasattr (self.handler, 'status'):
            r.append (self.handler.status())
        r.append (
                producers.simple_producer ('</ul>')
                )
        return producers.composite_producer(r)

class dictionary_authorizer:
    def __init__ (self, dict):
        self.dict = dict

def authorize (self, auth_info):
        [username, password] = auth_info
        if (self.dict.has_key (username)) and (self.dict[username] == password):
            return 1
        else:
            return 0

AUTHORIZATION = re.compile (
        #               scheme  challenge
        'Authorization: ([^ ]+) (.*)',
        re.IGNORECASE
        )

cmd: