def pre_auth(self, transport, account_name):
"""
Authenticates using username and domain key.
"""
auth_token = AuthToken()
auth_token.account_name = account_name
domain = util.get_domain(account_name)
if domain == None:
raise AuthException('Invalid auth token account')
if domain in self.domains:
domain_key = self.domains[domain]
else:
domain_key = None
if domain_key == None:
raise AuthException('Invalid domain key for domain %s' % domain)
self.log.debug('Initialized domain key for account %s' % account_name)
expires = 0
timestamp = int(time() * 1000)
pak = hmac.new(
domain_key, '%s|%s|%s|%s' %
(account_name, sconstant.E_NAME, expires, timestamp),
hashlib.sha1).hexdigest()
attrs = {sconstant.A_BY: sconstant.V_NAME}
account = SOAPpy.Types.stringType(data=account_name, attrs=attrs)
attrs = {
sconstant.A_TIMESTAMP: timestamp,
sconstant.A_EXPIRES: expires
}
preauth = SOAPpy.Types.stringType(data=pak,
name=sconstant.E_PREAUTH,
attrs=attrs)
params = {sconstant.E_ACCOUNT: account, sconstant.E_PREAUTH: preauth}
self.log.debug('Authenticating account %s using domain key' %
account_name)
try:
res = transport.invoke(zconstant.NS_ZIMBRA_ACC_URL,
sconstant.AuthRequest, params, auth_token)
except SoapException as exc:
raise AuthException(unicode(exc), exc)
auth_token.token = res.authToken
auth_token.session_id = res.sessionId
self.log.info('Authenticated account %s, session id %s' %
(account_name, auth_token.session_id))
return auth_token
def auth(self, transport, account_name, password):
if not account_name == self.account_name:
raise AuthException('Invalid username')
if not password == self.password:
raise AuthException('Invalid password')
token = AuthToken()
token.account_name = self.account_name
token.token = self.token
token.session_id = self.session_id
return token
def auth(self, transport, account_name, password):
"""
Authenticates using username and password.
"""
auth_token = AuthToken()
auth_token.account_name = account_name
attrs = {sconstant.A_BY: sconstant.V_NAME}
account = SOAPpy.Types.stringType(data=account_name, attrs=attrs)
params = {sconstant.E_ACCOUNT: account, sconstant.E_PASSWORD: password}
self.log.debug('Authenticating account %s' % account_name)
try:
res = transport.invoke(zconstant.NS_ZIMBRA_ACC_URL,
sconstant.AuthRequest, params, auth_token)
except SoapException as exc:
raise AuthException(unicode(exc), exc)
auth_token.token = res.authToken
if hasattr(res, 'sessionId'):
auth_token.session_id = res.sessionId
self.log.info('Authenticated account %s, session id %s' %
(account_name, auth_token.session_id))
return auth_token
def authenticate_admin(self, transport, account_name, password):
"""
Authenticates administrator using username and password.
"""
Authenticator.authenticate_admin(self, transport, account_name,
password)
auth_token = AuthToken()
auth_token.account_name = account_name
params = {
sconstant.E_NAME: account_name,
sconstant.E_PASSWORD: password
}
self.log.debug('Authenticating admin %s' % account_name)
try:
res = transport.invoke(zconstant.NS_ZIMBRA_ADMIN_URL,
sconstant.AuthRequest, params, auth_token)
except SoapException as exc:
raise AuthException(unicode(exc), exc)
auth_token.token = res.authToken
auth_token.session_id = res.sessionId
self.log.info('Authenticated admin %s, session id %s' %
(account_name, auth_token.session_id))
return auth_token
def pre_auth(self, transport, account_name):
if not account_name == self.account_name:
raise AuthException('Invalid username')
token = AuthToken()
token.account_name = self.account_name
token.token = self.token
token.session_id = self.session_id
return token
def invoke(self, ns, request_name, params={}, simplify=False):
"""
Invokes zimbra method using established authentication session.
@param req: zimbra request
@parm params: request params
@param simplify: True to return python object, False to return xml struct
@return: zimbra response
@raise AuthException: if authentication fails
@raise SoapException: wrapped server exception
"""
if self.auth_token == None:
raise AuthException('Unable to invoke zimbra method')
if util.empty(request_name):
raise ZimbraClientException('Invalid request')
return self.transport.invoke(ns,
request_name,
params,
self.auth_token,
simplify)