Current File : //usr/lib/python2.7/site-packages/salt/utils/dns.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l m Z d d l m Z y d d l Z e! Z" Wn e# k
r]e$ Z" n Xy d d l% Z% e! Z& Wn e# k
r�e$ Z& n Xe j' j( j) d � d k Z+ d Z, e j' j( j) d
� d k Z- e j' j( j) d � d k Z. e j' j( j) d � d k Z/ i e j0 j1 j2 d
6Z3 e j4 e5 � Z6 d e7 f d � � YZ8 d � Z9 e$ d � Z: d � Z; d � Z< d � Z= d � Z> d � Z? d � Z@ d d d d � ZA d d d d � ZB d d � ZC d d d � ZD d d d d � ZE d d d � ZF d d d e$ e$ d d � ZG d d d e$ e$ d d � ZH e! e! d � ZI d! � ZJ d" � ZK d# � ZL d$ d% � ZM d& � ZN d' � ZO d( � ZP d) � ZQ d$ d$ d* � ZR d+ d d, � ZS d- � ZT d. � ZU d/ � ZV d0 � ZW d1 � ZX d+ d e$ d d2 � ZY d3 d4 � ZZ d5 d6 � Z[ d S(7 u�
Compendium of generic DNS utilities
# Examples:
dns.lookup(name, rdtype, ...)
dns.query(name, rdtype, ...)
dns.srv_rec(data)
dns.srv_data('my1.example.com', 389, prio=10, weight=100)
dns.srv_name('ldap/tcp', 'example.com')
i ( t absolute_importt print_functiont unicode_literalsN( t ipaddress( t OrderedDict( t six( t zipu digu) +search +fail +noall +answer +nocl +nottlu drillu hostu nslookupu cmd.run_allt RFCc B@ s� e Z d Z d Z e d d d d f � Z e d d! f � Z e d" d# d$ d% f � Z e d& d' f � Z e d( d) d* f � Z d+ Z
e d, d � � Z
RS(- uL
Simple holding class for all RFC/IANA registered lists & standards
u issueu issuewildu iodefi u rsai u dsai u ecdsai u ed25519u sha1u sha256i u pkixtau pkixeeu danetau daneeeu certu spkiu fullu sha512u tcpu udpu sctpc C@ sp | | k r | S| d k rO g | j � D] \ } } | | k r) | ^ q) d S| j � | j � j | � Sd S( Nu ini����( t itemst keyst valuest index( t lookupt reft matcht codet name( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt validater s
3( u issueu issuewildu iodef( i u rsa( i u dsa( i u ecdsa( i u ed25519( i u sha1( i u sha256( i u pkixta( i u pkixee( i u daneta( i u daneee( i u cert( i u spki( i u full( i u sha256( i u sha512( u tcpu udpu sctpN( t __name__t
__module__t __doc__t CAA_TAGSR t
SSHFP_ALGOt
SSHFP_HASHt
TLSA_USAGEt TLSA_SELECTt
TLSA_MATCHINGt SRV_PROTOt staticmethodt NoneR ( ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR A s: c C@ si y6 t | � } d | k o& d k n s1 t � | SWn, t t f k
rd t d j | � � � n Xd S( Ni i�� u Invalid port {0}( t intt AssertionErrort
ValueErrort format( t port( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _to_port} s "c C@ s� | j d � } d | k s' t d � � | s| t rH t j | � j } q| t j d | � j � } t j
d j | | � � n | g } xT t r� | j
d � } | d k r� Pn | | d } | | k r� Pn | j | � q� W| S( u0
Split out a domain in its parents
Leverages tldextract to take the TLDs from publicsuffix.org
or makes a valiant approximation of that
:param domain: dc2.ams2.example.com
:param tld: Include TLD in list
:return: [ 'dc2.ams2.example.com', 'ams2.example.com', 'example.com']
u .u Provide a decent domainuC ((?:(?:ac|biz|com?|info|edu|gov|mil|name|net|n[oi]m|org)\.)?[^.]+)$u; Without tldextract, dns.util resolves the TLD of {0} to {1}i i ( t rstripR t HAS_TLDEXTRACTt
tldextractt extractt suffixt ret searcht groupt logt infoR! t Truet findt append( t domaint tldt rest idx( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _tree� s" c C@ s� g } g | D] } | d ^ q
} x~ | r� t j � t | � } x[ t | � D]M \ } } | | 8} | d k rO | j | j | � d � | j | � PqO qO Wq& W| S( Nu weighti u name( t randomt sumt enumerateR0 t pop( t recsR3 t rect weightst rndt it w( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _weighted_order� s
c C@ sl t | t � r9 t | j � d � | � } | | } | St | t t f � r^ t j | | � S| | � Sd S( Ni ( t
isinstancet dictt typeR t listt tupleR R ( t rec_datat rec_castR3 ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _cast� s
c C@ s0 y� | j d � } t | � t | � k s0 t � t | � t | � k r| t | � d } | d | !d j | | � g } n t | � d k r� t | d t t | j � � � � } n% t d � t | j
� | � D� � } | SWnI t t t t
f k
r+} t
d j | | d j | j � � � � � n Xd S( u�
schema = OrderedDict({
'prio': int,
'weight': int,
'port': to_port,
'name': str,
})
rec_data = '10 20 25 myawesome.nl'
res = {'prio': 10, 'weight': 20, 'port': 25 'name': 'myawesome.nl'}
u i i u c s@ s0 | ]& \ \ } } } | t | | � f Vq d S( N( RH ( t .0t
field_nameRG t rec_field( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pys <genexpr>� s u" Unable to cast "{0}" as "{2}": {1}N( t splitt lenR t joinRH t nextt iterR
RB R R t AttributeErrort TypeErrorR R! R ( t schemaRF t
rec_fieldst cutoffR3 t e( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _data2rec� s" $( c C@ s# t | t t f � s! | g } n t � } y� x� | D]� } t | | � } | r[ | | k sa t � | j | � } | | k r� g | | <n t | � d k r� t t | j
� � � } n | | j | � q4 W| SWnL t t f k
r } t d j
d j | � d j | j � � | � � � n Xd S( Ni u- Unable to cast "{0}" as a group of "{1}": {2}u ,u ( RA RD RE R RW R R9 RM RO RP R
R0 R R! RN R ( RS t recs_datat group_keyR3 t rdataR4 RV ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _data2rec_group� s&
c G@ s
d j | � S( Nu ( RN ( RZ ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _rec2data s c C@ sC | j t j � } | j d � r; | j d � r; | d d !S| Sd S( Nu "u 'i i����( u "u '( u "u '( t stript stringt
whitespacet
startswitht endswith( t data( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _data_clean s c
C@ s� d j t | � } | rJ | d j g | D] } d j | � ^ q( � 7} n | d k r� | r{ t t | � t | � � } n t | � } | d j | � 7} n | r� | d 7} n t d d j | | � d t d d
�} d | d k r t d
j | � � � nM | d d k r?t
j d | d | d j t
j d � � t S| d sMg St } g } x| | d j � D]j } | j d d � \ }
} } | d k r�| d k r�qjn | d k r�t } qjn | j t | � � qjW| r�| r�| r�t S| Sd S( u�
Use dig to lookup addresses
:param name: Name of record to search
:param rdtype: DNS record type
:param timeout: server response timeout
:param servers: [] of servers to use
:return: [] of records or False if error
u dig {0} -t {1} u u @{0} u
+time={0} u +dnssec +adflag u cmd.run_allu {0} {1}t python_shellt output_loglevelu quietu ignoring invalid typeu stderru Invalid DNS type {}u retcodei u dig returned (%s): %su ;u stdouti u CNAMEu RRSIGN( R! t DIG_OPTIONSRN R R t floatRM t __salt__t FalseR R, t warningR] R^ R_ t
splitlinesRL R. R0 Rc (
R t rdtypet timeoutt serverst securet cmdt srvt validatedR3 t linet _t rtypeRZ ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _lookup_dig sB 2
("
c
C@ s� d } | r | d 7} n | d j | | � 7} | rg | d j g | D] } d j | � ^ qE � 7} n t d | d | d t d d
�} | d d k r� t j d
| d | d � t St | d j � � } t } g } y� d }
x d |
k rt | � }
q� Wx� t r�t | � }
|
j
� }
|
s9|
j d � r=Pn |
j d d � d \ } } | d k rw| d k rwqn< | d k r�t } qn$ | | k r�t d j | � � � n | j t | � � qWWn t k
r�n X| r�| r�| r�t S| Sd S( u�
Use drill to lookup addresses
:param name: Name of record to search
:param rdtype: DNS record type
:param timeout: command return timeout
:param servers: [] of servers to use
:return: [] of records or False if error
u drill u -D -o ad u {0} {1} u u @{0} u cmd.run_allRm Rd Re u quietu retcodei u drill returned (%s): %su stderru stdoutu ANSWER SECTIONu ;;i i����u CNAMEu RRSIGu Invalid DNS type {}N( R! RN Rh Ri R, Rj RP Rk RO R. R] R` RL R R R0 Rc t
StopIteration(
R Rl Rm Rn Ro Rp Rq t
lookup_resRr R3 Rs t l_typet l_rec( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt
_lookup_drillA sL
2
c C@ s� y" i t j d 6t j d 6| } Wn& t k
rJ t d j | � � � n X| ra t j d � n yA g t j | d | d t j
� D] } | d d ^ q� } | SWn t j k
r� t SXd S( u�
Use Python's socket interface to lookup addresses
:param name: Name of record to search
:param rdtype: A or AAAA
:param timeout: ignored
:return: [] of addresses or False if error
u Au AAAAu" Invalid DNS type {} for gai lookupu< Ignoring timeout on gai resolver; fix resolv.conf to do thati i N(
t sockett AF_INETt AF_INET6t KeyErrorR R! R, R- t getaddrinfoR t SOCK_RAWt gaierrorRi ( R Rl Rm t sock_tt sockt addresses( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _lookup_gaiy s
9c C@ s� d j | � } | r1 | d j t | � � 7} n | | 7} | d k r] | d j | � 7} n t d | d t d d �} d | d k r� t d
j | � � � nC | d d k r� t j d
| d | d � t Sd | d k r� g Sg } | d k r | d n | d j d � d } x� | j � D]� } | d k rHd | k rHq$n | j d d � d } x5 d D]- } | j
| � re| t | � d } PqeqeW| j t
| � � q$W| S( u�
Use host to lookup addresses
:param name: Name of record to search
:param server: Server to query
:param rdtype: DNS record type
:param timeout: server response wait
:return: [] of records or False if error
u host -t {0} u -W {0} u {0}u cmd.run_allRd Re u quietu invalid typeu stderru Invalid DNS type {}u retcodei u host returned (%s): %su has nou stdoutu
i����u CNAMEu is an aliasu i u recordu addressu
handled byu alias fori N( u recordu addressu
handled byu alias for( R! R R Rh Ri R R, Rj RL Rk R` RM R0 Rc ( R Rl Rm t serverRp R3 t _stdoutRs t prefix( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _lookup_host� s4
-
c C@ s t j j � } | d k r- t | � | _ n | r? | | _ n | r] | j t j j 7_ n y? g | j
| | d t �D] } t | j
� � ^ qy } | SWna t j j k
r� t d j | � � � n6 t j j t j j t j j t j j f k
r� t SXd S( u�
Use dnspython to lookup addresses
:param name: Name of record to search
:param rdtype: DNS record type
:param timeout: query timeout
:param server: [] of server(s) to try in order
:return: [] of records or False if error
t raise_on_no_answeru Invalid DNS type {}N( t dnst resolvert ResolverR Rg t lifetimet nameserverst ednsflagst flagst DOt queryRi Rc t to_textt rdatatypet UnknownRdatatypeR R! t NXDOMAINt YXDOMAINt
NoNameserverst exceptiont Timeout( R Rl Rm Rn Ro R� t rrR3 ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _lookup_dnspython� s$ 4
c C@ s� d j | | � } | d k r: | d j t | � � 7} n | d k r\ | d j | � 7} n t d | d t d d �} | d d k r� t j d
| d | d j � d j t j
d
� � t St | d j � � } g } y�t | � } d | k rt
d j | � � � n x& t r8| | k r)Pn t | � } qWx!t r\| j � } | sd| j d � rhPn� | d k r�d | k r�| j � d d } t | � } q<n� | d k r�| j d � } nr | j d � r�t | � } | j d d � } nB | j | � r6d | k r$| j d d � } q6| j d � } n | j t | d � � t | � } q<WWn t k
rqn X| d k r�d j | d � g S| Sd S( u�
Use nslookup to lookup addresses
:param name: Name of record to search
:param rdtype: DNS record type
:param timeout: server response timeout
:param server: server to query
:return: [] of records or False if error
u nslookup -query={0} {1}u
-timeout={0}u {0}u cmd.run_allRd Re u quietu retcodei u nslookup returned (%s): %su stdouti����u ;u unknown query typeu Invalid DNS type {}u *u CNAMEu canonical nameu SOAu =u Name:u :i u N( R! R R Rh Ri R, Rj Rk R] R^ R_ RP RO R R. R` RL R0 Rc Rw RN ( R Rl Rm R� Rp Rx R3 Rs ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _lookup_nslookup� s\ %
c @ s� i } � p | j d d � � | p3 | j d d � } � pK | j d d � � | pc | j d t � } | j � } d t t | d k � | f � f d t t f d
t t f d t
t f d t t
o� | f d
t t o� | f f } yK � d k rt d � | D� � \ � }
n t � f d � | D� � }
Wn( t k
rYt j d � | | � t SXi | d 6} � r�t � t t f � s�� g � n � d k r�� | d <q�| r�| t � � :} n � f d � } | |
� }
n | s�| g } n� d }
| d k r| j d � d }
n | j d |
� d }
| |
} | d |
!} t | | � } | d k r�g | D] } | | ^ qg} n | r�| t | � :} n | r�| | d <n | r�| | d <n x* | D]" } |
d | | � } | r�| Sq�W| S( uI
Lookup DNS records and return their data
:param name: name to lookup
:param rdtype: DNS record type
:param method: gai (getaddrinfo()), dnspython, dig, drill, host, nslookup or auto (default)
:param servers: (list of) server(s) to try in-order
:param timeout: query timeout or a valiant approximation of that
:param walk: Walk the DNS upwards looking for the record type or name/recordtype if walk='name'.
:param walk_tld: Include the final domain in the walk
:param secure: return only DNSSEC secured responses
:return: [] of record data
u methodu autou secureu serversu timeoutu gaiu Au AAAAu dnspythonu digu drillu hostu nslookupc s@ s* | ] \ } } } | r | | f Vq d S( N( ( RI t rnamet rcbt rtest( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pys <genexpr>O s c 3@ s0 | ]& \ } } } | � k r | r | Vq d S( N( ( RI R� R� R� ( t method( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pys <genexpr>R s uZ Unable to lookup %s/%s: Resolver method %s invalid, unsupported or unable to perform queryu rdtypec @ s% t j � � � � f d � � } | S( Nc @ s1 x* � D]" } � d | | � } | r | Sq Wd S( NR� ( ( t
res_kwargsR� t s_res( t resolv_funcRn ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _wrapperi s
( t functoolst wraps( R� R� ( Rn ( R� s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt _multi_srvrh s !i u SRVu TLSAu .i u nameR N( u Au AAAA( u dnspythonu digu drill( u SRVu TLSA( t getR Ri t upperR� t anyR� t
HAS_DNSPYTHONRv t HAS_DIGR{ t HAS_DRILLR� t HAS_HOSTR� t HAS_NSLOOKUPRO Rw R, t errorRA RD RE RM R/ R5 ( R Rl R� Rn Rm t walkt walk_tldRo t optst
query_methodsR� R� R� R4 R1 R� R3 ( ( R� Rn s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR ! sl "
c
C@ s� | j � } i | d 6| d 6| d 6| d 6| d 6| d 6} | d k rg | j d � rg t | � } n | d k r� g t | d
| � D] } | j d � r� | ^ q� }
|
s� t | | | � }
q� n t | | | � }
i t d 6t d
6t d 6t d 6t d 6t
d 6t d 6t d 6t
d 6} |
s/| | k r3|
S| d k reg |
D] } | | | � ^ qF} n3 | d k r�| | |
d � } n | | |
� } | S( u�
Query DNS for information.
Where `lookup()` returns record data, `query()` tries to interpret the data and return it's results
:param name: name to lookup
:param rdtype: DNS record type
:param method: gai (getaddrinfo()), pydns, dig, drill, host, nslookup or auto (default)
:param servers: (list of) server(s) to try in-order
:param timeout: query timeout or a valiant approximation of that
:param secure: return only DNSSEC secured response
:param walk: Walk the DNS upwards looking for the record type or name/recordtype if walk='name'.
:param walk_tld: Include the top-level domain in the walk
:return: [] of records
u methodu serversu timeoutu walku walk_tldu secureu PTRu arpau SPFu TXTu v=spfu Au AAAAu CAAu MXu SOAu SRVu SSHFPu TLSAi ( u Au AAAAu SSHFPu TLSA( u SOAu SPF( R� Ra t ptr_nameR R` t a_rect aaaa_rect caa_rect mx_rect soa_rect spf_rect srv_rect sshfp_rect tlsa_rec(
R Rl R� Rn Rm R� R� Ro t qargst answert qrest rec_mapR3 ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� � sB
4
& c K@ sf i } | r4 t | d | � } | r4 | | d <q4 n | rb t | d | � } | rb | | d <qb n | S( u�
Return a list of addresses for name
ip6:
Return IPv6 addresses
ip4:
Return IPv4 addresses
the rest is passed on to lookup()
u AAAAu ip6u Au ip4( R ( R t ip4t ip6t kwargsR3 ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt host� s c C@ s% t d t j f f � } t | | � S( u}
Validate and parse DNS record data for an A record
:param rdata: DNS record data
:return: { 'address': ip }
u address( R R t IPv4AddressRW ( RZ t rschema( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� � s c C@ s% t d t j f f � } t | | � S( u�
Validate and parse DNS record data for an AAAA record
:param rdata: DNS record data
:return: { 'address': ip }
u address( R R t IPv6AddressRW ( RZ R� ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� � s c C@ s� t d d � f d t j f d d � f f � } t | | d � } x� d D]� } | j | t � } | sm qI n xt t | � D]f \ } } d | k r� qz n | j d d � \ } } t d
� t j | � D� � } i | | 6| | <qz WqI W| S( uz
Validate and parse DNS record data for a CAA record
:param rdata: DNS record data
:return: dict w/fields
u flagsc S@ s t | � d k r d g Sg S( Ni u critical( R ( t flag( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt <lambda> s u tagu valuec S@ s
| j d � S( Nu ',"( R] ( t val( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� s u issueu issuewildu ;i c s@ s | ] } | j d � Vq d S( u =N( RL ( RI t param( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pys <genexpr> s ( u issueu issuewild(
R R R R[ R� Ri R8 RL RB t shlex( t rdatasR� R3 t tagt tag_resR4 R� t params( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� s
i
c C@ s t t | � | � S( u�
Generate MX record data
:param target: server
:param preference: preference number
:return: DNS record data
( R\ R ( t targett
preference( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt mx_data! s c C@ s. t d t f d t f f � } t | | d � S( uz
Validate and parse DNS record data for MX record(s)
:param rdata: DNS record data
:return: dict w/fields
u
preferenceu name( R R t strR[ ( R� R� ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� + s c C@ s= y t j | � j SWn" t k
r8 t j d | � t SXd S( u_
Return PTR name of given IP
:param rdata: IP address
:return: PTR record name
u; Unable to generate PTR record; %s is not a valid IP addressN( R t
ip_addresst reverse_pointerR R, R� Ri ( RZ ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� 8 s
c C@ sX t d t f d t f d t f d t f d t f d t f d t f f � } t | | � S( u{
Validate and parse DNS record data for SOA record(s)
:param rdata: DNS record data
:return: dict w/fields
u mnameu rnameu serialu refreshu retryu expireu minimum( R R� R RW ( RZ R� ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� H s c C@ s� | j d � } | j d � j d � s6 t d � � n t � } t � } x\| D]T} | j d � r� | j d d � \ } } | | k r� t d j | � � � n | j | � qO n i } | d d k r� | d | d <| d } n d | k r | j d d � \ } } n; d | k r@| j d � } | d | !} | | } n d } | | | <| s\qO n= | d k r�t j | � } | j
t | d � k s�t � n | | d <qO W| S( u{
Validate and parse DNS record data for SPF record(s)
:param rdata: DNS record data
:return: dict w/fields
u i u v=spfu Not an SPF recordu expu redirectu =i u! Modifier {0} can only appear onceu +u -u ~u ?u qualifieru :u /u ip4u ip6i����u value( u expu redirect( u +u -u ~u ?N( u ip4u ip6( RL R9 R` R R t setR R! t addR/ R R t ip_interfacet versionR R ( RZ t
spf_fieldsR3 t modst mech_spect modR� t mechR4 ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� Z s>
"c C@ s t | | | | � S( uw
Generate SRV record data
:param target:
:param port:
:param prio:
:param weight:
:return:
( R\ ( R� R" t priot weight( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt srv_data� s u tcpc C@ se t j | t j � } t | t � s0 | j � r? t | � } n | rR d | } n d j | | | � S( u�
Generate SRV record name
:param svc: ldap, 389 etc
:param proto: tcp, udp, sctp etc.
:param domain: name to append
:return:
u .u _{0}._{1}{2}( R R R RA R t isdigitR# R! ( t svct protoR1 ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt srv_name� s
c C@ s@ t d t f d t f d t f d t f f � } t | | d � S( u{
Validate and parse DNS record data for SRV record(s)
:param rdata: DNS record data
:return: dict w/fields
u priou weightu portu name( R R R# R� R[ ( R� R� ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� � s c C@ sn t j | t j d � } t j | t j � } t j | � } | j t j | � � | j � } t
| | | � S( u�
Generate an SSHFP record
:param key_t: rsa/dsa/ecdsa/ed25519
:param hash_t: sha1/sha256
:param pub: the SSH public key
u in( R R R R t hashlibt newt updatet base64t b64decodet hexdigestR\ ( t key_tt hash_tt pubt hashert ssh_fp( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt
sshfp_data� s c C@ s= t d t j f d t j f d d � f f � } t | | � S( u|
Validate and parse DNS record data for TLSA record(s)
:param rdata: DNS record data
:return: dict w/fields
u algorithmu fp_hashu fingerprintc S@ s
| j � S( N( t lower( R� ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� � s ( R R R R RW ( RZ R� ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� � s
c C@ s� t j | t j � } t j | t j � } t j | t j � } t j | j � � } | d k rr t j | � } n/ t
j t j | � } | j | � | j
� } t | | | | � S( u�
Generate a TLSA rec
:param pub: Pub key in PEM format
:param usage:
:param selector:
:param matching:
:return: TLSA data portion
i ( R R R R R t sslt PEM_cert_to_DER_certR] t binasciit b2a_hexR� R� R� R� R\ ( R� t usaget selectort matchingt cert_fpR� ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt tlsa_data� s c C@ sF t d t j f d t j f d t j f d t f f � } t | | � S( u|
Validate and parse DNS record data for TLSA record(s)
:param rdata: DNS record data
:return: dict w/fields
u usageu selectoru matchingu pub( R R R R R R� RW ( RZ R� ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� � s c C@ sk t t | | | � d d | d | �} | s1 t Sg } x- | j � D] \ } } | j t | � � qD W| S( u�
Find an SRV service in a domain or it's parents
:param svc: service to find (ldap, 389, etc)
:param proto: protocol the service talks (tcp, udp, etc)
:param domain: domain to start search in
:param walk: walk the parents if domain doesn't provide the service
:param secure: only return DNSSEC-validated results
:return: [
[ prio1server1, prio1server2 ],
[ prio2server1, prio2server2 ],
] (the servers will already be weighted according to the SRV rules)
u SRVR� Ro ( R� R� Ri R R0 R@ ( R� R� R1 R� Ro R� R3 Rt R: ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt service s 'u
/etc/servicesc C@ sZ i } t j j j | d � ��} x�| j � D]�} t j j j | j � � } t | � s. | j d � rq q. n9 d | k r� | j
d d � \ } } | j � } n d } | j
� } | j d � j
d � \ } } t
| � } x| D] } | j | i � } | j | t � } | sKi | d 6| d 6}
| r>| |
d <n |
| | <n� | d } t | t t f � rz| j | � n | | g | d <| j d t � } | r�| s�| | d <q�| | k r�d j | | � | d <q�n | | | <q� Wq. WWd QXx^ | j � D]P \ }
}
t |
� d k r<|
j � j � | |
<qqt |
j � � | |
<qW| S(
u�
Parse through system-known services
:return: {
'svc': [
{ 'port': port
'proto': proto,
'desc': comment
},
],
}
u ru #i u /u portu protou descu {0}, {1}N( t saltt utilst filest fopent readlinest stringutilst
to_unicodeR] RM R` RL R R9 R R� Ri RA RD RE R0 R! R R
( t
services_fileR3 t svc_defst svc_deft commentR" R� R t svc_rest pp_resR� t
curr_protot curr_descRb ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt services' sP
u /etc/resolv.confc C@ s| g } g } g } g } g } d } g } y9t j j j | � ��} x�| D]�} t j j j | � j � j � } yd| d j � | d }
} t t
j d � | � � } |
d k r�| d } y� t j
| � }
|
j } t |
� }
|
| k r| j |
� n | d k r-|
| k r-| j |
� n( | d k rU|
| k rU| j |
� n Wq�t k
r~} t j d | | � q�XnT|
d k r�| d } n;|
d
k r�| } n&|
d k r�x| D]� } y t j | � } Wn& t k
r} t j d | | � q�Xd | k r�| j d k rkt j | j � }
t j j j |
� } t j d
j |
| � d t �} n | j d k r�q�n | | k r�| j | � q�q�Wn3 |
d k r�| d | k r�| j | d � q�n WqL t k
r�qL qL XqL WWd QX| r| rt j d | � n i | d 6| d 6| d 6g | D] } | j ^ q6d 6| d 6| d
6| d 6SWn t k
rwi SXd S( uN
Parse a resolver configuration file (traditionally /etc/resolv.conf)
u i i c S@ s | d d k S( Ni u #u ;( u #u ;( ( t x( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyR� } s u
nameserveri i u %s: %su domainu searchu sortlistu /u {0}{1}t strictu optionsNu: %s: The domain and search keywords are mutually exclusive.u nameserversu ip4_nameserversu ip6_nameservers( R R R R R R R] RL R� RD t itertoolst takewhileR R� R� R� R0 R R, R� t
ip_networkR t text_typet network_addresst networkt natural_ipv4_netmaskR! Ri t
IndexErrort debugt with_netmaskt IOError( t srcR� t ip4_nameserverst ip6_nameserversR* t sortlistR1 t optionst src_fileRs t directivet argt addrt ip_addrR� t exct ip_rawt ip_nett maskt ip( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt parse_resolvg s�
!
(\ R t
__future__R R R R� R� R� R t loggingR6 R) R� R| R� R^ R� t salt.utils.filesR t salt.utils.networkt salt.utils.patht salt.utils.stringutilst salt.modules.cmdmodt salt._compatR t salt.utils.odictR t salt.extR t salt.ext.six.movesR t dns.resolverR� R. R� t ImportErrorRi R& R% R t patht whichR R� Rf R� R� R� t modulest cmdmodt run_allRh t getLoggerR R, t objectR R# R5 R@ RH RW R[ R\ Rc Rv R{ R� R� R� R� R R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R R� R R R/ ( ( ( s2 /usr/lib/python2.7/site-packages/salt/utils/dns.pyt <module> s�
< " $ 38 * H j =
7 @
Mini Shell