o j @sddlZddlZddlmZddlmZmZddlmZddl m Z ddl m Z ddl mZd dd Zd d Zed kr@edSdS)N)logger)KerberosClientFactorykerberos_url_help_epilog)KerberosSecretType) KerberosSPN)KerberosCredential)Kirbic s^t|}|}t|}|jtjkr2t d| IdHt d| |IdH\}}} nQt d|j j D]E} z*td| tj| dd} || }| |IdH\}}} tdWnty} z t d| WYd} ~ q=d} ~ ww|dur|j |td |t||} tt| |dur| |td dS) Nz Getting TGTz Getting DMSAzGetting TGS via TGT from CCACHEzTrying to get SPN with %shex)encodingzSucsess!z-This ticket is not usable it seems Reason: %szTicket stored in ccache file %szDone!)rfrom_url get_clientrfrom_upn secret_typerCCACHErdebugget_TGTdmsa credentialccacheget_all_tgt_kirbisinfo get_usernamer from_kirbito_hexget_client_newcred Exceptionto_fileprintrfrom_ticketdatastrlogging) kerberos_url targetuser kirbifile ccachefilecuclient target_usertgs encTGSRepPartkeykirbi ccred_tester./root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/minikerberos/examples/getDmsa.pydMSA s>              r0cCsddl}|jd|jtd}|jddd|jddd|jd d d dd |jd dd|jddd|}|jdkrBtt j n|jdkrNtt j ntdt t|j|j|j|jdS)Nrz0Gets an S4U2self ticket impersonating given user) descriptionformatter_classepilogz--kirbizPkirbi file to store the TGS ticket in, otherwise kirbi will be printed to stdout)helpz--ccachez&ccache file to store the TGT ticket inz-vz --verbosecount)actiondefaultr!z3Machine account credentials in kerberos URL format.r")argparseArgumentParserRawDescriptionHelpFormatterr add_argument parse_argsverbosersetLevelr WARNINGINFOasynciorunr0r!r"r+r)r:parserargsr.r.r/main/s    rG__main__)NN)r rC minikerberosrminikerberos.common.factoryrrminikerberos.common.constantsrminikerberos.common.spnrminikerberos.common.credsrminikerberos.common.kirbirr0rG__name__r.r.r.r/s      $