|
|
@ -1,22 +1,39 @@ |
|
|
|
#!/usr/bin/env python |
|
|
|
#!/usr/bin/env python |
|
|
|
# -*- coding: utf-8 -*- |
|
|
|
# -*- coding: utf-8 -*- |
|
|
|
# |
|
|
|
# |
|
|
|
|
|
|
|
import sys |
|
|
|
|
|
|
|
import os |
|
|
|
|
|
|
|
import django |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
BASE_DIR = os.path.dirname(__file__) |
|
|
|
|
|
|
|
APP_DIR = os.path.abspath(os.path.dirname(BASE_DIR)) |
|
|
|
|
|
|
|
sys.path.append(APP_DIR) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
os.environ['DJANGO_SETTINGS_MODULE'] = 'jumpserver.settings' |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
try: |
|
|
|
|
|
|
|
django.setup() |
|
|
|
|
|
|
|
except IndexError: |
|
|
|
|
|
|
|
pass |
|
|
|
|
|
|
|
|
|
|
|
import base64 |
|
|
|
import base64 |
|
|
|
from binascii import hexlify |
|
|
|
from binascii import hexlify |
|
|
|
import os |
|
|
|
|
|
|
|
import sys |
|
|
|
import sys |
|
|
|
import threading |
|
|
|
import threading |
|
|
|
import traceback |
|
|
|
import traceback |
|
|
|
import tty |
|
|
|
import tty |
|
|
|
import termios |
|
|
|
import termios |
|
|
|
import struct, fcntl, signal, socket, select |
|
|
|
import struct |
|
|
|
|
|
|
|
import fcntl |
|
|
|
|
|
|
|
import signal |
|
|
|
|
|
|
|
import socket |
|
|
|
|
|
|
|
import select |
|
|
|
import errno |
|
|
|
import errno |
|
|
|
|
|
|
|
|
|
|
|
import paramiko |
|
|
|
import paramiko |
|
|
|
from paramiko.py3compat import b, u, decodebytes |
|
|
|
from paramiko.py3compat import b, u, decodebytes |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
from .hands import ssh_key_gen |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
paramiko.util.log_to_file('demo_server.log') |
|
|
|
paramiko.util.log_to_file('demo_server.log') |
|
|
|
|
|
|
|
|
|
|
@ -24,24 +41,42 @@ host_key = paramiko.RSAKey(filename='test_rsa.key') |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
class SSHService(paramiko.ServerInterface): |
|
|
|
class SSHService(paramiko.ServerInterface): |
|
|
|
# 'data' is the output of base64.encodestring(str(key)) |
|
|
|
# data = (b'AAAAB3NzaC1yc2EAAAABIwAAAIEAyO4it3fHlmGZWJaGrfeHOVY7RWO3P9M7hp' |
|
|
|
# (using the "user_rsa_key" files) |
|
|
|
# b'fAu7jJ2d7eothvfeuoRFtJwhUmZDluRdFyhFY/hFAh76PJKGAusIqIQKlkJxMC' |
|
|
|
data = (b'AAAAB3NzaC1yc2EAAAABIwAAAIEAyO4it3fHlmGZWJaGrfeHOVY7RWO3P9M7hp' |
|
|
|
# b'KDqIexkgHAfID/6mqvmnSJf0b5W8v5h2pI/stOSwTQ+pxVhwJ9ctYDhRSlF0iT' |
|
|
|
b'fAu7jJ2d7eothvfeuoRFtJwhUmZDluRdFyhFY/hFAh76PJKGAusIqIQKlkJxMC' |
|
|
|
# b'UWT10hcuO4Ks8=') |
|
|
|
b'KDqIexkgHAfID/6mqvmnSJf0b5W8v5h2pI/stOSwTQ+pxVhwJ9ctYDhRSlF0iT' |
|
|
|
# good_pub_key = paramiko.RSAKey(data=decodebytes(data)) |
|
|
|
b'UWT10hcuO4Ks8=') |
|
|
|
|
|
|
|
good_pub_key = paramiko.RSAKey(data=decodebytes(data)) |
|
|
|
ssh_key_path = os.path.join(BASE_DIR, 'keys', 'ssh_host_key') |
|
|
|
|
|
|
|
ssh_pub_key_path = ssh_key_path + '.pub' |
|
|
|
|
|
|
|
|
|
|
|
def __init__(self): |
|
|
|
def __init__(self): |
|
|
|
self.event = threading.Event() |
|
|
|
self.event = threading.Event() |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@classmethod |
|
|
|
|
|
|
|
def get_host_key(cls): |
|
|
|
|
|
|
|
if os.path.isfile(cls.ssh_pub_key_path): |
|
|
|
|
|
|
|
with open(cls.ssh_pub_key_path) as f: |
|
|
|
|
|
|
|
ssh_pub_key = f.read() |
|
|
|
|
|
|
|
else: |
|
|
|
|
|
|
|
ssh_key, ssh_pub_key = cls.host_key_gen() |
|
|
|
|
|
|
|
return ssh_pub_key |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@classmethod |
|
|
|
|
|
|
|
def host_key_gen(cls): |
|
|
|
|
|
|
|
ssh_key, ssh_pub_key = ssh_key_gen() |
|
|
|
|
|
|
|
with open(cls.ssh_key_path, 'w') as f: |
|
|
|
|
|
|
|
with open(cls.ssh_pub_key_path, 'w') as f2: |
|
|
|
|
|
|
|
f.write(ssh_key) |
|
|
|
|
|
|
|
f2.write(ssh_pub_key) |
|
|
|
|
|
|
|
return ssh_key, ssh_pub_key |
|
|
|
|
|
|
|
|
|
|
|
def check_channel_request(self, kind, chanid): |
|
|
|
def check_channel_request(self, kind, chanid): |
|
|
|
if kind == 'session': |
|
|
|
if kind == 'session': |
|
|
|
return paramiko.OPEN_SUCCEEDED |
|
|
|
return paramiko.OPEN_SUCCEEDED |
|
|
|
return paramiko.OPEN_FAILED_ADMINISTRATIVELY_PROHIBITED |
|
|
|
return paramiko.OPEN_FAILED_ADMINISTRATIVELY_PROHIBITED |
|
|
|
|
|
|
|
|
|
|
|
def check_auth_password(self, username, password): |
|
|
|
def check_auth_password(self, username, password): |
|
|
|
print(username, password) |
|
|
|
|
|
|
|
if (username == 'robey') and (password == 'foo'): |
|
|
|
if (username == 'robey') and (password == 'foo'): |
|
|
|
return paramiko.AUTH_SUCCESSFUL |
|
|
|
return paramiko.AUTH_SUCCESSFUL |
|
|
|
return paramiko.AUTH_FAILED |
|
|
|
return paramiko.AUTH_FAILED |
|
|
@ -151,7 +186,6 @@ class SSHServer: |
|
|
|
pass |
|
|
|
pass |
|
|
|
print(server_data) |
|
|
|
print(server_data) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
except Exception as e: |
|
|
|
except Exception as e: |
|
|
|
print('*** Caught exception: ' + str(e.__class__) + ': ' + str(e)) |
|
|
|
print('*** Caught exception: ' + str(e.__class__) + ': ' + str(e)) |
|
|
|
traceback.print_exc() |
|
|
|
traceback.print_exc() |
|
|
@ -167,7 +201,7 @@ class SSHServer: |
|
|
|
try: |
|
|
|
try: |
|
|
|
client, addr = self.sock.accept() |
|
|
|
client, addr = self.sock.accept() |
|
|
|
print('Listening for connection ...') |
|
|
|
print('Listening for connection ...') |
|
|
|
threading.Thread(target=self.handle_ssh_request, args=( client, addr)).start() |
|
|
|
threading.Thread(target=self.handle_ssh_request, args=(client, addr)).start() |
|
|
|
except Exception as e: |
|
|
|
except Exception as e: |
|
|
|
print('*** Bind failed: ' + str(e)) |
|
|
|
print('*** Bind failed: ' + str(e)) |
|
|
|
traceback.print_exc() |
|
|
|
traceback.print_exc() |