| Server IP : 162.19.112.25 / Your IP : 216.73.216.88 Web Server : LiteSpeed System : Linux qamar.tasjeel.ae 5.14.0-611.55.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 19 15:19:29 EDT 2026 x86_64 User : archiart ( 1428) PHP Version : 8.2.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /proc/self/root/lib/python3.9/site-packages/ipapython/__pycache__/ |
Upload File : |
a
�jimV � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Zd dl
Zd dl Z d dl m
Z
e jrneZe�e�Zdadd� Zdd� Zdd� Zd d
� Zd d � ZG d
d� dejj�Z G dd� dej j �Z e j G dd� dej!j"��Z#e#ej!j$�e#_$e#ej!j%�e#_%e#d�e#_&e#d�e#_'dd� dD �Z(dd� Z)dd� Z*d d � Z+d d � Z,d d!� Z-d"d#� Z.d$d%� Z/d/d'd(�Z0d)d*� Z1d+d,� Z2d0d-d.�Z3dS )1� N��UnsafeIPAddressc C s t d u rt� a t S �N)� ipa_resolver� DNSResolver� r r �5/usr/lib/python3.9/site-packages/ipapython/dnsutil.py�get_ipa_resolver. s r c O s t � j| i |��S r )r �resolve��args�kwargsr r r r
5 s r
c O s t � j| i |��S r )r �resolve_addressr r r r r 9 s r c O s$ d|vrt � |d< tjj| i |��S )N�resolver)r �dnsr �
zone_for_namer r r r r = s
r c C s
t � adS )z Re-initialize ipa resolver.
N)r r r r r r �reset_default_resolverD s r c sb e Zd ZdZ� fdd�Zdd� Z� fdd�Zdd � Z� fd
d �Ze d d
� �Z
e
j dd
� �Z
� Z S )r a4 DNS stub resolver compatible with both dnspython < 2.0.0
and dnspython >= 2.0.0.
Set `use_search_by_default` attribute to `True`, which
determines the default for whether the search list configured
in the system's resolver configuration is used for relative
names, and whether the resolver's domain may be added to relative
names.
Increase the default lifetime which determines the number of seconds
to spend trying to get an answer to the question. dnspython 2.0.0
changes this to 5sec, while the previous one was 30sec.
c sH d | _ t� j|i |�� | �� tt� d| j�| _tt� d| j�| _d S )Nr
r ) � _nameservers�super�__init__�reset_ipa_defaults�getattr�queryr
�_resolve_addressr )�selfr r
�� __class__r r r Y s �zDNSResolver.__init__c C s, d| _ t| j t| j� d d�| _d| _dS )a
BIND's default timeout for resolver is 10sec.
If that changes then it causes Timeout (instead of SERVFAIL)
exception for dnspython if BIND under high load. So, let's make
it the same + operation time.
dnspython default is 2sec
� � �- TN)�timeout�min�len� nameserversZlifetimeZuse_search_by_default�r r r r r d s z DNSResolver.reset_ipa_defaultsc s t � �� | �� d S r )r �resetr r$ r r r r% s s
zDNSResolver.resetc O s( | j tj�|�g|�R dtjji|��S )zzQuery nameservers for PTR records.
:param ip_address: IPv4 or IPv6 address
:type ip_address: str
�rdtype)r
r Z reversenameZ from_address� rdatatypeZPTR)r �
ip_addressr r
r r r r w s
����z DNSResolver._resolve_addressc sN t � j|i |�� tt�| j��}d}d}||v rD||v rD|�|� || _dS )z�
dnspython tries nameservers sequentially(not parallel).
IPA controlled BIND always listen on IPv6 if available,
so no need to send requests to both IPv4 and IPv6 endpoints
of the same NS(though BIND handles this).
z::1z 127.0.0.1N)r �read_resolv_conf�list�dict�fromkeysr# �remove)r r r
r# Z
ipv6_loopbackZ
ipv4_loopbackr r r r) � s
z DNSResolver.read_resolv_confc C s | j S r )r r$ r r r r# � s zDNSResolver.nameserversc C s� t | d�r| j}ni }t|t�r�g }|D ]�}|�� }t|�dkr�|d dkr�|d }z&t|d �}|dk sr|dkrxt� �W n" ty� td|d ��Y n0 |||< |�|� q(|}t t j
j d �r�t j
j j �
| |� n|| _|| _d
S ) a?
*nameservers*, a ``list`` of nameservers with optional ports:
"SERVER_IP port PORT_NUMBER".
Overloads dns.resolver.Resolver.nameservers setter to split off ports
into nameserver_ports after setting nameservers successfully with the
setter in dns.resolver.Resolver.
�nameserver_ports� � �portr r i�� z*invalid nameserver: %s is not a valid portr# N)�hasattrr. �
isinstancer* �splitr" �int�
ValueError�appendr r �Resolverr# �__set__r )r r# r. r Z
nameserverZsplitsr1 r r r r# � s4
��
)
�__name__�
__module__� __qualname__�__doc__r r r% r r) �propertyr# �setter�
__classcell__r r r r r K s
r c @ s e Zd ZddhZdZdS )�DNSZoneAlreadyExists�zone�nszGDNS zone {zone} already exists in DNS and is handled by server(s): {ns}N)r: r; r< Z supp_kwargs�fmtr r r r rA � s rA c s� e Zd ZdZed(dd��Zd)� fdd� Zdd� ZeZdd � Z d
d � Z
d d
� Z e j
r\dd� Zndd� Z� fdd�Z� fdd�Z� fdd�Z� fdd�Zd*� fdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Z� ZS )+�DNSNameNc C s | t j�||��S r )r �name� from_text)�cls�labels�originr r r rG � s zDNSName.from_textc
s~ zHt |t�r"tj�t|�|�j}nt |tjj�r6|j}tt | ��
|� W n0 t yx } ztj �
|��W Y d }~n
d }~0 0 d S r )r3 �strr rF rG �unicoderI �Namer rE r � UnicodeError� exception� SyntaxError)r rI rJ �er r r r � s
zDNSName.__init__c C s dS )NTr r$ r r r �__bool__� s zDNSName.__bool__c C s
t | j�S r )rE rI r$ r r r �__copy__� s zDNSName.__copy__c C s t t�| j|��S r )rE �copy�deepcopyrI )r �memor r r � __deepcopy__� s zDNSName.__deepcopy__c C s | � � S r )Z
to_unicoder$ r r r �__str__� s zDNSName.__str__c C s | � � �d�S )N�ascii)�to_text�decoder$ r r r �ToASCII� s zDNSName.ToASCIIc C s | � � S r �rZ r$ r r r r\ � s c s t tt | ��� �S r )rE r � canonicalizer$ r r r r^ � s zDNSName.canonicalizec s t tt | ��|��S r )rE r � concatenate)r �otherr r r r_ � s zDNSName.concatenatec s t tt | ��|��S r )rE r �
relativize�r rJ r r r ra s zDNSName.relativizec s t tt | ��|��S r )rE r � derelativizerb r r r rc s zDNSName.derelativizeTc s t tt | �j||d��S )N)rJ ra )rE r �choose_relativity)r rJ ra r r r rd s �zDNSName.choose_relativityc C s | � | j�S r )rc �rootr$ r r r �
make_absolute
s zDNSName.make_absolutec C s t dd� | jD ��S )Nc s s | ]}|� d �V qdS )zxn--N)�
startswith)�.0Zlabelr r r � <genexpr> � z!DNSName.is_idn.<locals>.<genexpr>)�anyrI r$ r r r �is_idn
s zDNSName.is_idnc C s | � | j�S r )� is_subdomain� ip4_rev_zoner$ r r r �is_ip4_reverse s zDNSName.is_ip4_reversec C s | � | j�S r )rm � ip6_rev_zoner$ r r r �is_ip6_reverse s zDNSName.is_ip6_reversec C s | � � p| �� S r )ro rq r$ r r r �
is_reverse s zDNSName.is_reversec C s t | j�dkS )Nr )r" rI r$ r r r �is_empty s zDNSName.is_empty)N)N)NT)r: r; r< rI � classmethodrG r rR Z __nonzero__rS rW rX �sixZPY2r\ r^ r_ ra rc rd rf rl ro rq rr rs r@ r r r r rE � s.
rE )zin-addr�arpa� )Zip6rv rw c C s g | ]}t |��� �qS r )rE rf �rh �aezr r r �
<listcomp>) rj rz )bz10.IN-ADDR.ARPAz16.172.IN-ADDR.ARPAz17.172.IN-ADDR.ARPAz18.172.IN-ADDR.ARPAz19.172.IN-ADDR.ARPAz20.172.IN-ADDR.ARPAz21.172.IN-ADDR.ARPAz22.172.IN-ADDR.ARPAz23.172.IN-ADDR.ARPAz24.172.IN-ADDR.ARPAz25.172.IN-ADDR.ARPAz26.172.IN-ADDR.ARPAz27.172.IN-ADDR.ARPAz28.172.IN-ADDR.ARPAz29.172.IN-ADDR.ARPAz30.172.IN-ADDR.ARPAz31.172.IN-ADDR.ARPAz168.192.IN-ADDR.ARPAz64.100.IN-ADDR.ARPAz65.100.IN-ADDR.ARPAz66.100.IN-ADDR.ARPAz67.100.IN-ADDR.ARPAz68.100.IN-ADDR.ARPAz69.100.IN-ADDR.ARPAz70.100.IN-ADDR.ARPAz71.100.IN-ADDR.ARPAz72.100.IN-ADDR.ARPAz73.100.IN-ADDR.ARPAz74.100.IN-ADDR.ARPAz75.100.IN-ADDR.ARPAz76.100.IN-ADDR.ARPAz77.100.IN-ADDR.ARPAz78.100.IN-ADDR.ARPAz79.100.IN-ADDR.ARPAz80.100.IN-ADDR.ARPAz81.100.IN-ADDR.ARPAz82.100.IN-ADDR.ARPAz83.100.IN-ADDR.ARPAz84.100.IN-ADDR.ARPAz85.100.IN-ADDR.ARPAz86.100.IN-ADDR.ARPAz87.100.IN-ADDR.ARPAz88.100.IN-ADDR.ARPAz89.100.IN-ADDR.ARPAz90.100.IN-ADDR.ARPAz91.100.IN-ADDR.ARPAz92.100.IN-ADDR.ARPAz93.100.IN-ADDR.ARPAz94.100.IN-ADDR.ARPAz95.100.IN-ADDR.ARPAz96.100.IN-ADDR.ARPAz97.100.IN-ADDR.ARPAz98.100.IN-ADDR.ARPAz99.100.IN-ADDR.ARPAz100.100.IN-ADDR.ARPAz101.100.IN-ADDR.ARPAz102.100.IN-ADDR.ARPAz103.100.IN-ADDR.ARPAz104.100.IN-ADDR.ARPAz105.100.IN-ADDR.ARPAz106.100.IN-ADDR.ARPAz107.100.IN-ADDR.ARPAz108.100.IN-ADDR.ARPAz109.100.IN-ADDR.ARPAz110.100.IN-ADDR.ARPAz111.100.IN-ADDR.ARPAz112.100.IN-ADDR.ARPAz113.100.IN-ADDR.ARPAz114.100.IN-ADDR.ARPAz115.100.IN-ADDR.ARPAz116.100.IN-ADDR.ARPAz117.100.IN-ADDR.ARPAz118.100.IN-ADDR.ARPAz119.100.IN-ADDR.ARPAz120.100.IN-ADDR.ARPAz121.100.IN-ADDR.ARPAz122.100.IN-ADDR.ARPAz123.100.IN-ADDR.ARPAz124.100.IN-ADDR.ARPAz125.100.IN-ADDR.ARPAz126.100.IN-ADDR.ARPAz127.100.IN-ADDR.ARPAz0.IN-ADDR.ARPAz127.IN-ADDR.ARPAz254.169.IN-ADDR.ARPAz2.0.192.IN-ADDR.ARPAz100.51.198.IN-ADDR.ARPAz113.0.203.IN-ADDR.ARPAz 255.255.255.255.IN-ADDR.ARPAzH0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPAzH1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPAz D.F.IP6.ARPAz8.E.F.IP6.ARPAz9.E.F.IP6.ARPAzA.E.F.IP6.ARPAzB.E.F.IP6.ARPAz8.B.D.0.1.0.0.2.IP6.ARPAzEMPTY.AS112.ARPAc C s2 t | t�sJ dt| � ��| �� s.J d| ��dS )a� Raise AssertionError if name is not DNSName or is not absolute.
>>> assert_absolute_dnsname(DNSName('absolute.name.example.'))
>>> assert_absolute_dnsname(DNSName('relative.name.example'))
Traceback (most recent call last):
...
AssertionError: name must be absolute, ...
>>> assert_absolute_dnsname('absolute.string.example.')
Traceback (most recent call last):
...
AssertionError: name must be DNSName instance, ...
z'name must be DNSName instance, got '%s'z name must be absolute, got '%s'N)r3 rE �type� is_absolute�rF r r r �assert_absolute_dnsname] s �r~ c C s t | � | tv S )a� True if specified zone name exactly matches an automatic empty zone.
>>> is_auto_empty_zone(DNSName('in-addr.arpa.'))
False
>>> is_auto_empty_zone(DNSName('10.in-addr.arpa.'))
True
>>> is_auto_empty_zone(DNSName('1.10.in-addr.arpa.'))
False
>>> is_auto_empty_zone(DNSName('10.in-addr.arpa'))
Traceback (most recent call last):
...
AssertionError: ...
)r~ � EMPTY_ZONES)rB r r r �is_auto_empty_zonep s r� c C s& t | � tD ]}| �|�r dS q dS )a
True if specified absolute name is a subdomain of an automatic empty
zone.
DNS domain is a subdomain of itself so this function
returns True for zone apexes, too.
>>> inside_auto_empty_zone(DNSName('in-addr.arpa.'))
False
>>> inside_auto_empty_zone(DNSName('10.in-addr.arpa.'))
True
>>> inside_auto_empty_zone(DNSName('1.10.in-addr.arpa.'))
True
>>> inside_auto_empty_zone(DNSName('1.10.in-addr.arpa'))
Traceback (most recent call last):
...
AssertionError: ...
TF)r~ r rm )rF ry r r r �inside_auto_empty_zone� s
r� c s6 t � � tjjtjjtjjh�t� �fdd�tD ��S )a� True if specified absolute name is a sub/superdomain of an automatic
empty zone.
DNS domain is a subdomain of itself so this function
returns True for zone apexes, too.
>>> related_to_auto_empty_zone(DNSName('.'))
True
>>> related_to_auto_empty_zone(DNSName('in-addr.arpa.'))
True
>>> related_to_auto_empty_zone(DNSName('10.in-addr.arpa.'))
True
>>> related_to_auto_empty_zone(DNSName('1.10.in-addr.arpa.'))
True
>>> related_to_auto_empty_zone(DNSName('unrelated.example.'))
False
>>> related_to_auto_empty_zone(DNSName('1.10.in-addr.arpa'))
Traceback (most recent call last):
...
AssertionError: ...
c 3 s | ]}� � |�d �v V qdS �r N)Z fullcomparerx �rF Z relationsr r ri � s �z-related_to_auto_empty_zone.<locals>.<genexpr>)r~ r rF ZNAMERELN_SUBDOMAINZNAMERELN_EQUALZNAMERELN_SUPERDOMAINrk r r} r r� r �related_to_auto_empty_zone� s ��r� c C s t | �}tdd� |D ��S )a^ Detect if given host is using IP address belonging to
an automatic empty zone.
Information from --ip-address option used in installed is lost by
the time when upgrade is run. Use IP addresses from DNS as best
approximation.
This is brain-dead and duplicates logic from DNS installer
but I did not find other way around.
c s s | ]}t t|j��V qd S r )r� rE Z reverse_dns�rh �ipr r r ri � s �z+has_empty_zone_addresses.<locals>.<genexpr>)�resolve_ip_addressesrk )�hostname� ip_addressesr r r �has_empty_zone_addresses� s �r� c C s* |s J d��t | t�s t| �} | �� } g }|D ]�}z@t| |�}t�dt|�|| d�dd� |D ��� |�|j � W q. t
j j y� } z(t�d|� W Y d}~ �q&W Y d}~q.d}~0 t
j j
y� } zt�d|� W Y d}~q.d}~0 t
jj�y" } z t�d| ||� � W Y d}~q.d}~0 0 q.|S ) a
Get Resource Record sets for given FQDN.
CNAME chain is followed during resolution
but CNAMEs are not returned in the resulting rrset.
:returns:
set of dns.rrset.RRset objects, can be empty
if the FQDN does not exist or if none of rrtypes exist
zrdtypes must not be emptyz found %d %s records for %s: %s� c s s | ]}t |�V qd S r )rK �rh �rrr r r ri � rj z!resolve_rrsets.<locals>.<genexpr>�%sNz DNS query for %s %s failed: %s)r3 rE rf r
�logger�debugr" �joinr7 �rrsetr r ZNXDOMAINZNoAnswerrO � DNSException�error)�fqdnZrdtypes�rrsetsr& �answer�exr r r �resolve_rrsets� s0
� $ r� c C s6 t | ddg�}t� }|D ]}|�dd� |D �� q|S )z�Get IP addresses from DNS A/AAAA records for given host (using DNS).
:returns:
list of IP addresses as UnsafeIPAddress objects
�AZAAAAc S s h | ] }t |��qS r r r� r r r � <setcomp>� rj z'resolve_ip_addresses.<locals>.<setcomp>)r� �set�update)r� r� r� r� r r r r� � s
r� Tc
C s4 t �d| � t| t�s"t| ��� } t| �r.d S z t| �}W n� tjj y� } zhd| |f }|r�t|tj
j �r�t � d|� W Y d }~d S t
|��nt � d|� W Y d }~d S W Y d }~n
d }~0 0 || k�r0zdd� t| d�D �}W n< tjj �y } z t �d| |� g }W Y d }~n
d }~0 0 t| �� |d��d S ) Nz'Checking DNS domain %s, please wait ...z#DNS check for domain %s failed: %s.r� c S s g | ] }|� � �qS r r] )rh Zansr r r rz rj z&check_zone_overlap.<locals>.<listcomp>ZNSz1Failed to resolve nameserver(s) for domain %s: %s)rB rC )r� �infor3 rE rf r� r r rO r� r Z
NoNameserversZwarningr6 r
r� rA rZ )rB Zraise_on_errorZcontaining_zonerQ �msgrC r r r �check_zone_overlap� s2
$
�r� c s� t ��dkr�S t�fdd��D ��r4t��� �S d� g }t���t ��dkr�t�dt� fdd��D ���}d}��� D ].}||jp�� 7 }||krz�� |� |�
|� qzqD�r�|�
�� � � |S )z?Weighted population sorting for records with same priority
r0 c 3 s | ]}|j � d j kV qdS r� ��weightr� )�recordsr r ri , rj z _mix_weight.<locals>.<genexpr>g{�G�z�?r c 3 s | ]}|j p� V qd S r r� r� )�noweightr r ri 6 rj g ) r" �all�randomZshuffler� Zuniform�sumrT r� r- r7 �pop)r� �resultZurnZaccr� r )r� r� r � _mix_weight# s&
r� c C s� t | t�d�d�} g }t� }| D ]2}|jt|dd�f}||vr |�|� |�|� q g }g }|D ]8}|rx|d j|jkr�|�|� q`|� t
|�� |g}q`|r�|� t
|�� |S )a. RFC 2782 sorting algorithm for SRV and URI records
RFC 2782 defines a sorting algorithms for SRV records, that is also used
for sorting URI records. Records are sorted by priority and than randomly
shuffled according to weight.
This implementation also removes duplicate entries.
�priority)�keyr1 Nr ) �sorted�operator�
attrgetterr� �targetr r7 �addr� �extendr� )r� Z
uniquerecords�seenr� r� r� Zsameprior r r �sort_prio_weightD s$
r� c K s< |du rt }nt|d|j�}|| fdtjji|��}t|�S )z�Query SRV records and sort reply according to RFC 2782
:param qname: query name, _service._proto.domain.
:return: list of dns.rdtypes.IN.SRV.SRV instances
Nr
r& )r
r r r r' ZSRVr� )Zqnamer r
Z resolve_fr� r r r � query_srvl s
r� )T)N)4rT Zloggingr� r� Zdns.namer Z
dns.exceptionZ dns.resolverZdns.rdataclassZ
dns.rdatatypeZdns.reversenameru Zipapython.ipautilr ZPY3rK rL Z getLoggerr: r� r r r
r r r r r8 r rO r� rA Zpython_2_unicode_compatiblerF rM rE re �emptyrn rp r r~ r� r� r� r� r� r� r� r� r� r� r r r r �<module> sP
{Q
4 '
%!(