D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
lib
/
python3.9
/
site-packages
/
ipapython
/
__pycache__
/
Filename :
dnsutil.cpython-39.opt-1.pyc
back
Copy
a }�fmV � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Zd dl Zd dl Z d dl m Z e jrneZe�e�Zdadd� Zdd� Zdd� Zd d � Zd d � ZG d d� dejj�Z G dd� dej j �Z e j G dd� dej!j"��Z#e#ej!j$�e#_$e#ej!j%�e#_%e#d�e#_&e#d�e#_'dd� dD �Z(dd� Z)dd� Z*d d � Z+d d � Z,d d!� Z-d"d#� Z.d$d%� Z/d/d'd(�Z0d)d*� Z1d+d,� Z2d0d-d.�Z3dS )1� N��UnsafeIPAddressc C s t d u rt� a t S �N)� ipa_resolver� DNSResolver� r r �5/usr/lib/python3.9/site-packages/ipapython/dnsutil.py�get_ipa_resolver. s r c O s t � j| i |��S r )r �resolve��args�kwargsr r r r 5 s r c O s t � j| i |��S r )r �resolve_addressr r r r r 9 s r c O s$ d|vrt � |d< tjj| i |��S )N�resolver)r �dnsr � zone_for_namer r r r r = s r c C s t � adS )z Re-initialize ipa resolver. N)r r r r r r �reset_default_resolverD s r c sb e Zd ZdZ� fdd�Zdd� Z� fdd�Zdd � Z� fd d �Ze d d � �Z e j dd � �Z � Z S )r a4 DNS stub resolver compatible with both dnspython < 2.0.0 and dnspython >= 2.0.0. Set `use_search_by_default` attribute to `True`, which determines the default for whether the search list configured in the system's resolver configuration is used for relative names, and whether the resolver's domain may be added to relative names. Increase the default lifetime which determines the number of seconds to spend trying to get an answer to the question. dnspython 2.0.0 changes this to 5sec, while the previous one was 30sec. c sH d | _ t� j|i |�� | �� tt� d| j�| _tt� d| j�| _d S )Nr r ) � _nameservers�super�__init__�reset_ipa_defaults�getattr�queryr �_resolve_addressr )�selfr r �� __class__r r r Y s �zDNSResolver.__init__c C s, d| _ t| j t| j� d d�| _d| _dS )a BIND's default timeout for resolver is 10sec. If that changes then it causes Timeout (instead of SERVFAIL) exception for dnspython if BIND under high load. So, let's make it the same + operation time. dnspython default is 2sec � � �- TN)�timeout�min�len� nameserversZlifetimeZuse_search_by_default�r r r r r d s z DNSResolver.reset_ipa_defaultsc s t � �� | �� d S r )r �resetr r$ r r r r% s s zDNSResolver.resetc O s( | j tj�|�g|�R dtjji|��S )zzQuery nameservers for PTR records. :param ip_address: IPv4 or IPv6 address :type ip_address: str �rdtype)r r Z reversenameZ from_address� rdatatypeZPTR)r � ip_addressr r r r r r w s ����z DNSResolver._resolve_addressc sN t � j|i |�� tt�| j��}d}d}||v rD||v rD|�|� || _dS )z� dnspython tries nameservers sequentially(not parallel). IPA controlled BIND always listen on IPv6 if available, so no need to send requests to both IPv4 and IPv6 endpoints of the same NS(though BIND handles this). z::1z 127.0.0.1N)r �read_resolv_conf�list�dict�fromkeysr# �remove)r r r r# Z ipv6_loopbackZ ipv4_loopbackr r r r) � s z DNSResolver.read_resolv_confc C s | j S r )r r$ r r r r# � s zDNSResolver.nameserversc C s� t | d�r| j}ni }t|t�r�g }|D ]�}|�� }t|�dkr�|d dkr�|d }z&t|d �}|dk sr|dkrxt� �W n" ty� td|d ��Y n0 |||< |�|� q(|}t t j j d �r�t j j j � | |� n|| _|| _d S ) a? *nameservers*, a ``list`` of nameservers with optional ports: "SERVER_IP port PORT_NUMBER". Overloads dns.resolver.Resolver.nameservers setter to split off ports into nameserver_ports after setting nameservers successfully with the setter in dns.resolver.Resolver. �nameserver_ports� � �portr r i�� z*invalid nameserver: %s is not a valid portr# N)�hasattrr. � isinstancer* �splitr" �int� ValueError�appendr r �Resolverr# �__set__r )r r# r. r Z nameserverZsplitsr1 r r r r# � s4 �� ) �__name__� __module__� __qualname__�__doc__r r r% r r) �propertyr# �setter� __classcell__r r r r r K s r c @ s e Zd ZddhZdZdS )�DNSZoneAlreadyExists�zone�nszGDNS zone {zone} already exists in DNS and is handled by server(s): {ns}N)r: r; r< Z supp_kwargs�fmtr r r r rA � s rA c s� e Zd ZdZed(dd��Zd)� fdd� Zdd� ZeZdd � Z d d � Z d d � Z e j r\dd� Zndd� Z� fdd�Z� fdd�Z� fdd�Z� fdd�Zd*� fdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Z� ZS )+�DNSNameNc C s | t j�||��S r )r �name� from_text)�cls�labels�originr r r rG � s zDNSName.from_textc s~ zHt |t�r"tj�t|�|�j}nt |tjj�r6|j}tt | �� |� W n0 t yx } ztj � |��W Y d }~n d }~0 0 d S r )r3 �strr rF rG �unicoderI �Namer rE r � UnicodeError� exception� SyntaxError)r rI rJ �er r r r � s zDNSName.__init__c C s dS )NTr r$ r r r �__bool__� s zDNSName.__bool__c C s t | j�S r )rE rI r$ r r r �__copy__� s zDNSName.__copy__c C s t t�| j|��S r )rE �copy�deepcopyrI )r �memor r r � __deepcopy__� s zDNSName.__deepcopy__c C s | � � S r )Z to_unicoder$ r r r �__str__� s zDNSName.__str__c C s | � � �d�S )N�ascii)�to_text�decoder$ r r r �ToASCII� s zDNSName.ToASCIIc C s | � � S r �rZ r$ r r r r\ � s c s t tt | ��� �S r )rE r � canonicalizer$ r r r r^ � s zDNSName.canonicalizec s t tt | ��|��S r )rE r � concatenate)r �otherr r r r_ � s zDNSName.concatenatec s t tt | ��|��S r )rE r � relativize�r rJ r r r ra s zDNSName.relativizec s t tt | ��|��S r )rE r � derelativizerb r r r rc s zDNSName.derelativizeTc s t tt | �j||d��S )N)rJ ra )rE r �choose_relativity)r rJ ra r r r rd s �zDNSName.choose_relativityc C s | � | j�S r )rc �rootr$ r r r � make_absolute s zDNSName.make_absolutec C s t dd� | jD ��S )Nc s s | ]}|� d �V qdS )zxn--N)� startswith)�.0Zlabelr r r � <genexpr> � z!DNSName.is_idn.<locals>.<genexpr>)�anyrI r$ r r r �is_idn s zDNSName.is_idnc C s | � | j�S r )� is_subdomain� ip4_rev_zoner$ r r r �is_ip4_reverse s zDNSName.is_ip4_reversec C s | � | j�S r )rm � ip6_rev_zoner$ r r r �is_ip6_reverse s zDNSName.is_ip6_reversec C s | � � p| �� S r )ro rq r$ r r r � is_reverse s zDNSName.is_reversec C s t | j�dkS )Nr )r" rI r$ r r r �is_empty s zDNSName.is_empty)N)N)NT)r: r; r< rI � classmethodrG r rR Z __nonzero__rS rW rX �sixZPY2r\ r^ r_ ra rc rd rf rl ro rq rr rs r@ r r r r rE � s. rE )zin-addr�arpa� )Zip6rv rw c C s g | ]}t |��� �qS r )rE rf �rh �aezr r r � <listcomp>) rj rz )bz10.IN-ADDR.ARPAz16.172.IN-ADDR.ARPAz17.172.IN-ADDR.ARPAz18.172.IN-ADDR.ARPAz19.172.IN-ADDR.ARPAz20.172.IN-ADDR.ARPAz21.172.IN-ADDR.ARPAz22.172.IN-ADDR.ARPAz23.172.IN-ADDR.ARPAz24.172.IN-ADDR.ARPAz25.172.IN-ADDR.ARPAz26.172.IN-ADDR.ARPAz27.172.IN-ADDR.ARPAz28.172.IN-ADDR.ARPAz29.172.IN-ADDR.ARPAz30.172.IN-ADDR.ARPAz31.172.IN-ADDR.ARPAz168.192.IN-ADDR.ARPAz64.100.IN-ADDR.ARPAz65.100.IN-ADDR.ARPAz66.100.IN-ADDR.ARPAz67.100.IN-ADDR.ARPAz68.100.IN-ADDR.ARPAz69.100.IN-ADDR.ARPAz70.100.IN-ADDR.ARPAz71.100.IN-ADDR.ARPAz72.100.IN-ADDR.ARPAz73.100.IN-ADDR.ARPAz74.100.IN-ADDR.ARPAz75.100.IN-ADDR.ARPAz76.100.IN-ADDR.ARPAz77.100.IN-ADDR.ARPAz78.100.IN-ADDR.ARPAz79.100.IN-ADDR.ARPAz80.100.IN-ADDR.ARPAz81.100.IN-ADDR.ARPAz82.100.IN-ADDR.ARPAz83.100.IN-ADDR.ARPAz84.100.IN-ADDR.ARPAz85.100.IN-ADDR.ARPAz86.100.IN-ADDR.ARPAz87.100.IN-ADDR.ARPAz88.100.IN-ADDR.ARPAz89.100.IN-ADDR.ARPAz90.100.IN-ADDR.ARPAz91.100.IN-ADDR.ARPAz92.100.IN-ADDR.ARPAz93.100.IN-ADDR.ARPAz94.100.IN-ADDR.ARPAz95.100.IN-ADDR.ARPAz96.100.IN-ADDR.ARPAz97.100.IN-ADDR.ARPAz98.100.IN-ADDR.ARPAz99.100.IN-ADDR.ARPAz100.100.IN-ADDR.ARPAz101.100.IN-ADDR.ARPAz102.100.IN-ADDR.ARPAz103.100.IN-ADDR.ARPAz104.100.IN-ADDR.ARPAz105.100.IN-ADDR.ARPAz106.100.IN-ADDR.ARPAz107.100.IN-ADDR.ARPAz108.100.IN-ADDR.ARPAz109.100.IN-ADDR.ARPAz110.100.IN-ADDR.ARPAz111.100.IN-ADDR.ARPAz112.100.IN-ADDR.ARPAz113.100.IN-ADDR.ARPAz114.100.IN-ADDR.ARPAz115.100.IN-ADDR.ARPAz116.100.IN-ADDR.ARPAz117.100.IN-ADDR.ARPAz118.100.IN-ADDR.ARPAz119.100.IN-ADDR.ARPAz120.100.IN-ADDR.ARPAz121.100.IN-ADDR.ARPAz122.100.IN-ADDR.ARPAz123.100.IN-ADDR.ARPAz124.100.IN-ADDR.ARPAz125.100.IN-ADDR.ARPAz126.100.IN-ADDR.ARPAz127.100.IN-ADDR.ARPAz0.IN-ADDR.ARPAz127.IN-ADDR.ARPAz254.169.IN-ADDR.ARPAz2.0.192.IN-ADDR.ARPAz100.51.198.IN-ADDR.ARPAz113.0.203.IN-ADDR.ARPAz 255.255.255.255.IN-ADDR.ARPAzH0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPAzH1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPAz D.F.IP6.ARPAz8.E.F.IP6.ARPAz9.E.F.IP6.ARPAzA.E.F.IP6.ARPAzB.E.F.IP6.ARPAz8.B.D.0.1.0.0.2.IP6.ARPAzEMPTY.AS112.ARPAc C s dS )a� Raise AssertionError if name is not DNSName or is not absolute. >>> assert_absolute_dnsname(DNSName('absolute.name.example.')) >>> assert_absolute_dnsname(DNSName('relative.name.example')) Traceback (most recent call last): ... AssertionError: name must be absolute, ... >>> assert_absolute_dnsname('absolute.string.example.') Traceback (most recent call last): ... AssertionError: name must be DNSName instance, ... Nr �rF r r r �assert_absolute_dnsname] s r| c C s t | � | tv S )a� True if specified zone name exactly matches an automatic empty zone. >>> is_auto_empty_zone(DNSName('in-addr.arpa.')) False >>> is_auto_empty_zone(DNSName('10.in-addr.arpa.')) True >>> is_auto_empty_zone(DNSName('1.10.in-addr.arpa.')) False >>> is_auto_empty_zone(DNSName('10.in-addr.arpa')) Traceback (most recent call last): ... AssertionError: ... )r| � EMPTY_ZONES)rB r r r �is_auto_empty_zonep s r~ c C s& t | � tD ]}| �|�r dS q dS )a True if specified absolute name is a subdomain of an automatic empty zone. DNS domain is a subdomain of itself so this function returns True for zone apexes, too. >>> inside_auto_empty_zone(DNSName('in-addr.arpa.')) False >>> inside_auto_empty_zone(DNSName('10.in-addr.arpa.')) True >>> inside_auto_empty_zone(DNSName('1.10.in-addr.arpa.')) True >>> inside_auto_empty_zone(DNSName('1.10.in-addr.arpa')) Traceback (most recent call last): ... AssertionError: ... TF)r| r} rm )rF ry r r r �inside_auto_empty_zone� s r c s6 t � � tjjtjjtjjh�t� �fdd�tD ��S )a� True if specified absolute name is a sub/superdomain of an automatic empty zone. DNS domain is a subdomain of itself so this function returns True for zone apexes, too. >>> related_to_auto_empty_zone(DNSName('.')) True >>> related_to_auto_empty_zone(DNSName('in-addr.arpa.')) True >>> related_to_auto_empty_zone(DNSName('10.in-addr.arpa.')) True >>> related_to_auto_empty_zone(DNSName('1.10.in-addr.arpa.')) True >>> related_to_auto_empty_zone(DNSName('unrelated.example.')) False >>> related_to_auto_empty_zone(DNSName('1.10.in-addr.arpa')) Traceback (most recent call last): ... AssertionError: ... c 3 s | ]}� � |�d �v V qdS �r N)Z fullcomparerx �rF Z relationsr r ri � s �z-related_to_auto_empty_zone.<locals>.<genexpr>)r| r rF ZNAMERELN_SUBDOMAINZNAMERELN_EQUALZNAMERELN_SUPERDOMAINrk r} r{ r r� r �related_to_auto_empty_zone� s ��r� c C s t | �}tdd� |D ��S )a^ Detect if given host is using IP address belonging to an automatic empty zone. Information from --ip-address option used in installed is lost by the time when upgrade is run. Use IP addresses from DNS as best approximation. This is brain-dead and duplicates logic from DNS installer but I did not find other way around. c s s | ]}t t|j��V qd S r )r rE Z reverse_dns�rh �ipr r r ri � s �z+has_empty_zone_addresses.<locals>.<genexpr>)�resolve_ip_addressesrk )�hostname� ip_addressesr r r �has_empty_zone_addresses� s �r� c C s t | t�st| �} | �� } g }|D ]�}z@t| |�}t�dt|�|| d�dd� |D ��� |�|j � W q" t j j y� } z(t�d|� W Y d}~ �qW Y d}~q"d}~0 t j j y� } zt�d|� W Y d}~q"d}~0 t jj�y } z t�d| ||� � W Y d}~q"d}~0 0 q"|S )a Get Resource Record sets for given FQDN. CNAME chain is followed during resolution but CNAMEs are not returned in the resulting rrset. :returns: set of dns.rrset.RRset objects, can be empty if the FQDN does not exist or if none of rrtypes exist z found %d %s records for %s: %s� c s s | ]}t |�V qd S r )rK �rh �rrr r r ri � rj z!resolve_rrsets.<locals>.<genexpr>�%sNz DNS query for %s %s failed: %s)r3 rE rf r �logger�debugr" �joinr7 �rrsetr r ZNXDOMAINZNoAnswerrO � DNSException�error)�fqdnZrdtypes�rrsetsr& �answer�exr r r �resolve_rrsets� s. � $ r� c C s6 t | ddg�}t� }|D ]}|�dd� |D �� q|S )z�Get IP addresses from DNS A/AAAA records for given host (using DNS). :returns: list of IP addresses as UnsafeIPAddress objects �AZAAAAc S s h | ] }t |��qS r r r� r r r � <setcomp>� rj z'resolve_ip_addresses.<locals>.<setcomp>)r� �set�update)r� r� r� r� r r r r� � s r� Tc C s4 t �d| � t| t�s"t| ��� } t| �r.d S z t| �}W n� tjj y� } zhd| |f }|r�t|tj j �r�t � d|� W Y d }~d S t |��nt � d|� W Y d }~d S W Y d }~n d }~0 0 || k�r0zdd� t| d�D �}W n< tjj �y } z t �d| |� g }W Y d }~n d }~0 0 t| �� |d��d S ) Nz'Checking DNS domain %s, please wait ...z#DNS check for domain %s failed: %s.r� c S s g | ] }|� � �qS r r] )rh Zansr r r rz rj z&check_zone_overlap.<locals>.<listcomp>ZNSz1Failed to resolve nameserver(s) for domain %s: %s)rB rC )r� �infor3 rE rf r~ r r rO r� r Z NoNameserversZwarningr6 r r� rA rZ )rB Zraise_on_errorZcontaining_zonerQ �msgrC r r r �check_zone_overlap� s2 $ �r� c s� t ��dkr�S t�fdd��D ��r4t��� �S d� g }t���t ��dkr�t�dt� fdd��D ���}d}��� D ].}||jp�� 7 }||krz�� |� |� |� qzqD�r�|� �� � � |S )z?Weighted population sorting for records with same priority r0 c 3 s | ]}|j � d j kV qdS r� ��weightr� )�recordsr r ri , rj z _mix_weight.<locals>.<genexpr>g{�G�z�?r c 3 s | ]}|j p� V qd S r r� r� )�noweightr r ri 6 rj g ) r" �all�randomZshuffler� Zuniform�sumrT r� r- r7 �pop)r� �resultZurnZaccr� r )r� r� r � _mix_weight# s& r� c C s� t | t�d�d�} g }t� }| D ]2}|jt|dd�f}||vr |�|� |�|� q g }g }|D ]8}|rx|d j|jkr�|�|� q`|� t |�� |g}q`|r�|� t |�� |S )a. RFC 2782 sorting algorithm for SRV and URI records RFC 2782 defines a sorting algorithms for SRV records, that is also used for sorting URI records. Records are sorted by priority and than randomly shuffled according to weight. This implementation also removes duplicate entries. �priority)�keyr1 Nr ) �sorted�operator� attrgetterr� �targetr r7 �addr� �extendr� )r� Z uniquerecords�seenr� r� r� Zsameprior r r �sort_prio_weightD s$ r� c K s< |du rt }nt|d|j�}|| fdtjji|��}t|�S )z�Query SRV records and sort reply according to RFC 2782 :param qname: query name, _service._proto.domain. :return: list of dns.rdtypes.IN.SRV.SRV instances Nr r& )r r r r r' ZSRVr� )Zqnamer r Z resolve_fr� r r r � query_srvl s r� )T)N)4rT Zloggingr� r� Zdns.namer Z dns.exceptionZ dns.resolverZdns.rdataclassZ dns.rdatatypeZdns.reversenameru Zipapython.ipautilr ZPY3rK rL Z getLoggerr: r� r r r r r r r r8 r rO r� rA Zpython_2_unicode_compatiblerF rM rE re �emptyrn rp r} r| r~ r r� r� r� r� r� r� r� r� r r r r �<module> sP {Q 4 ' %!(