o j3 @sddlZddlZddlmZddlmZmZddlmZddl m Z ddl m Z ddl mZd dd Zd d Zed kr@edSdS)N)logger)KerberosClientFactorykerberos_url_help_epilog)KerberosSecretType) KerberosSPN)KerberosCredential)Kirbic slt|}|}t|}t|}|jtjkr8t d| IdHt d| ||IdH\} } } nRt d|j jD]F} z+t d| tj| dd} || }| ||IdH\} } } t dWnty}z t d|WYd}~qCd}~ww|dur|j|td |t| | } tt| |dur| |td dS) Nz Getting TGTzGetting S4UselfzGetting TGS via TGT from CCACHEzTrying to get SPN with %shex)encodingzSucsess!z-This ticket is not usable it seems Reason: %szTicket stored in ccache file %szDone!)rfrom_url get_clientrfrom_spnfrom_upn secret_typerCCACHErdebugget_TGTS4U2self credentialccacheget_all_tgt_kirbisinfo get_usernamer from_kirbito_hexget_client_newcred Exceptionto_fileprintrfrom_ticketdatastrlogging) kerberos_urlspn targetuser kirbifile ccachefilecuclient service_spn target_usertgs encTGSRepPartkeykirbi ccred_tester1/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/minikerberos/examples/getS4U2self.py getS4U2self s@               r3cCsddl}|jd|jtd}|jddd|jddd|jd d d dd |jd dd|jddd|jddd|}|jdkrItt j n|jdkrUtt j ntdt t|j|j|j|j|jdS)Nrz0Gets an S4U2self ticket impersonating given user) descriptionformatter_classepilogz--kirbizPkirbi file to store the TGS ticket in, otherwise kirbi will be printed to stdout)helpz--ccachez&ccache file to store the TGT ticket inz-vz --verbosecount)actiondefaultr"z3Machine account credentials in kerberos URL format.r#zthe service principal in format /@ Example: cifs/fileserver.test.corp@TEST.corp for a TGS ticket to be used for file access on server "fileserver". IMPORTANT: SERVER'S HOSTNAME MUST BE USED, NOT IP!!!r$)argparseArgumentParserRawDescriptionHelpFormatterr add_argument parse_argsverbosersetLevelr!WARNINGINFOasynciorunr3r"r#r$r.r)r=parserargsr1r1r2main2s   $rJ__main__)NN)r!rF minikerberosrminikerberos.common.factoryrrminikerberos.common.constantsrminikerberos.common.spnrminikerberos.common.credsrminikerberos.common.kirbirr3rJ__name__r1r1r1r2s      &