[~bdZddlmZddlZddlZddlZddlmZddlm Z ddl m Z ddl Z ddl mZddlmZmZmZmZdd lmZdd lmZmZmZmZdd lmZ ejd Zda d ZGdde Z!GddeZ"ddddddddedddddddfdZ# d6dZ$dZ%dZ&efdZ'efdZ(d Z)efd!Z*d"Z+d#Z,d$Z-Gd%d&e Z.Gd'd(e Z/d)Z0d*Z1d+Z2d,Z3dddddd-dddd.ddddd/eddfd0Z4d1ddddddedddddddfd2Z5d1ddddddeddddddfd3Z6d7d4Z7d5Z8dS)8zU Connect to a VMOMI ServiceInstance. Detailed description (for [e]pydoc goes here). )reraiseN) ElementTree) ExpatError http_client) HTTPBasicAuth)vimvmodlSoapStubAdapterSessionOrientedStub) CONNECTION_POOL_IDLE_TIMEOUT_SEC)nsMap versionIdMap versionMapIsChildVersion)GetServiceVersionsz(^\[.+\]|[^:]+)(:\d+)?$cX|s'|dvr#ddl}t|dr|j}|S)z Connections to 'localhost' do not need SSL verification as a certificate will never match. The OS provides security by only allowing root to bind to low-numbered ports. ) localhostz 127.0.0.1z::1rN_create_unverified_context)sslhasattrr)host sslContextrs //usr/lib/python3/dist-packages/pyVim/connect.py localSslFixupr9sI :$"CCC 34 5 5 :7799J c$eZdZdZdZdZdZdS)closingzt Helper class for using closable objects in a 'with' statement, similar to the one provided by contextlib. c||_dSNobj)selfr"s r__init__zclosing.__init__Js dhhhrc|jSr r!r#s r __enter__zclosing.__enter__Ls Xorc8|jdSr )r"closer#exc_infos r__exit__zclosing.__exit__Ns hnnrN)__name__ __module__ __qualname____doc__r$r'r,rrrrEsKrrceZdZdZejjfZeddZ edZ eddZ e ddZ dS)VimSessionOrientedStubzyA vim-specific SessionOrientedStub. See the SessionOrientedStub class in pyVmomi/SoapAdapter.py for more information.Ncfd}|S)Return a function that will call the vim.SessionManager.Login() method with the given parameters. The result of this function can be passed as the "loginMethod" to a SessionOrientedStub constructor.ctjd|}|jj}|js#|jjdSdSNServiceInstance)r r8contentsessionManagercurrentSessionLogin)soapStubsismlocalepasswordusernames r_doLoginz._doLogin`s[!"3X>>j'! H J % + +Hh G G G G G H Hrr1)rBrAr@rCs``` rmakeUserLoginMethodz*VimSessionOrientedStub.makeUserLoginMethod[s6 HHHHHHH orcfd}|S)r5ctjd|}|jj}|js!|jjdSdSr7)r r8r9r:r;LoginExtensionByCertificate)r=r>r? extensionKeys rrCzAVimSessionOrientedStub.makeExtensionLoginMethod.._doLoginmsW!"3X>>j'! P J % A A, O O O O O P Prr1)rHrCs` rmakeExtensionLoginMethodz/VimSessionOrientedStub.makeExtensionLoginMethodhs( PPPPP orcsJfd}|S)arReturn a function that will call the vim.SessionManager.LoginByToken() after obtaining a HoK SAML token from the STS. The result of this function can be passed as the "loginMethod" to a SessionOrientedStub constructor. @param stsUrl: URL of the SAML Token issuing service. (i.e. SSO server). @param stsCert: public key of the STS service. cddlm|jd}|jd }||fd}t jd|}|jj}|j sk| |5 |_ |jj d|_ n #d|_ wxYw ddddS#1swxYwYdSdS)Nsso cert_filekey_filests_urlsts_certc2|Sr )add_saml_context)requestkey samlAssertionrNs r_requestModifierz^VimSessionOrientedStub.makeCertHokTokenLoginMethod.._doLogin.._requestModifiers''DD Drr8) rN schemeArgsSsoAuthenticatorget_hok_saml_assertionr r8r9r:r;requestModifier samlToken LoginByToken) r=cert authenticatorrYr>r?rWrXrNstsCertstsUrls @@@rrCzDVimSessionOrientedStub.makeCertHokTokenLoginMethod.._doLogins      $[1":.--f7>.@@'==d3GG E E E E E E E!"3X>>j'! ,))*:;; , ,,'4($*+88:::'+($$t($++++$  , , , , , , , , , , , , , , , , , , , ,s*C%C=C CCC#&C#r1)rdrcrCs`` rmakeCertHokTokenLoginMethodz2VimSessionOrientedStub.makeCertHokTokenLoginMethodus4nnn,,,,,,.orc6sJsJsJfd}|S)aReturn a function that will call the vim.SessionManager.LoginByToken() after obtaining a Bearer token from the STS. The result of this function can be passed as the "loginMethod" to a SessionOrientedStub constructor. @param username: username of the user/service registered with STS. @param password: password of the user/service registered with STS. @param stsUrl: URL of the SAML Token issueing service. (i.e. SSO server). @param stsCert: public key of the STS service. clddlm}|jd}|jd}| }| ||}t jd|}|jj}|j s; ||_ |jj d|_ dS#d|_ wxYwdS)NrLrMrOrPrQr8) rZrNr[r\get_bearer_saml_assertionr r8r9r:r;r_r`) r=rNrarWrbrXr>r?rArcrdrBs rrCzGVimSessionOrientedStub.makeCredBearerTokenLoginMethod.._doLogins      #K0":.--f7>.@@&@@AIAEADFF!"3X>>j'! ) )$1x!z(55777$(x!!!Dx!((((  ) )s :%B(( B1r1)rBrArdrcrCs```` rmakeCredBearerTokenLoginMethodz5VimSessionOrientedStub.makeCredBearerTokenLoginMethodsX  nnn))))))))&orr ) r-r.r/r0r faultNotAuthenticatedSESSION_EXCEPTIONS staticmethodrDrIrerir1rrr3r3Rs66  i    L   L !!!L!F/3$$$L$$$rr3rrootrZhostdSOAP/sdkuserpassc tjt|}|}|d}|ddkr|ddd}|d*t |ddd}n#t $r }Yd}~nd}~wwxYwt || } |r| Jt|} n| sd} d\}}|d krt||||||| || | | | | \}}n3|d krt||||| || | | | || \}}ntd t||S) aQ Connect to the specified server, login and return the service instance object. Throws any exception back to caller. The service instance object is also saved in the library for easy access. Clients should modify the service parameter only when connecting to a VMOMI server other than hostd/vpxd. For both of the latter, the default value is fine. @param host: Which host to connect to. @type host: string @param port: Port @type port: int @param user: User @type user: string @param pwd: Password @type pwd: string @param service: Service @type service: string @param adapter: Adapter @type adapter: string @param namespace: Namespace *** Deprecated: Use version instead *** @type namespace: string @param path: Path @type path: string @param connectionPoolTimeout: Timeout in secs for idle connections to close, specify negative numbers for never closing the connections @type connectionPoolTimeout: int @param version: Version @type version: string @param keyFile: ssl key file path @type keyFile: string @param certFile: ssl cert file path @type certFile: string @param thumbprint: host cert thumbprint @type thumbprint: string @param sslContext: SSL Context describing the various SSL options. It is only supported in Python 2.7.9 or higher. @type sslContext: SSL.Context @param b64token: base64 encoded token @type b64token: string @param mechanism: authentication mechanism: userpass or sspi @type mechanism: string NrLr[zvim.version.version6)NNrssspizoThe provided connection mechanism is not available, the supported mechanisms are userpass or sspi) rematch_rxgroupint ValueErrorrr__Login __LoginBySSPI ExceptionSetSi)rportuserpwdserviceadapter namespacepathconnectionPoolTimeoutversionkeyFilecertFile thumbprintrb64token mechanisminfover>stubs rConnectrsf  Xc4 d  1  GsNN::a==2&D JJqMM %tzz!}}QRR())D     dddd dJ//:' ___9%gg '&g82t:tT3'4 (J DY[[hb$$VtT7GWd&*j(Tikkhb$$ ; < << 999 9sBB B0+B0cttdrtj}nd}t|||||||||| | | || | S)a/ Provides a standard method for connecting to a specified server without SSL verification. Useful when connecting to servers with self-signed certificates or when you wish to ignore SSL altogether. Will attempt to create an unverified SSL context and then connect via the Connect method. rN)rrrrrrrrrrrrrrr)rrrr)rrrrrrrrrrrrrrrs r ConnectNoSSLrsoc/00133jjj t!!%!!#''#% ' ' ''rcBt|tddSzc Disconnect (logout) service instance @param si: Service instance (returned from Connect) N)__Logoutrr>s r Disconnectr6s  B<<<;;;;;rc |jj}nt#t$rg}t|jdkr%d|z}t j|d|z}t j|d}~wwxYw||}t|j 5}| }dddn #1swxYwY|j |fS)Nrz8Malformed response while querying for local ticket: "%s"msgz&Failed to query for local ticket: "%s")userName) r9r:rtyper-r rjHostConnectFaultAcquireLocalTicketopenpasswordFilePathreadr)r>rr:er localTicketfr9s rGetLocalTicketrAs"3z0nn 333 a \ ) )IAMy))c)22 27!;y))c)22 2 3 22D2AA; [ )**ag   ''s'  BA"A;;B-CCCc t||||||| | | | \} }}|dkr|s t||\}}n#YnxYw | j||d}n'#tjj$rt$r}d}~wwxYw||fS)aC Private method that performs the actual Connect and returns a connected service instance object. @param host: Which host to connect to. @type host: string @param port: Port @type port: int @param user: User @type user: string @param pwd: Password @type pwd: string @param service: Service @type service: string @param adapter: Adapter @type adapter: string @param version: Version @type version: string @param path: Path @type path: string @param keyFile: ssl key file path @type keyFile: string @param certFile: ssl cert file path @type certFile: string @param thumbprint: host cert thumbprint @type thumbprint: string @param sslContext: SSL Context describing the various SSL options. It is only supported in Python 2.7.9 or higher. @type sslContext: SSL.Context @param connectionPoolTimeout: Timeout in secs for idle connections to close, specify negative numbers for never closing the connections @type connectionPoolTimeout: int rN)__RetrieveContentrr:r<r rj InvalidLoginr)rrrrrrrrrrrrrr9r>rxrs rrrTsJ)tWgt)0(J Tikk7B k#%b$//$   & &tS$ 7 7aa )          d(?s :>AB=A>>Bc t||||||||| | \} } }| td | j| }n'#tjj$rt$r}d}~wwxYw| |fS)a- Private method that performs the actual Connect and returns a connected service instance object. @param host: Which host to connect to. @type host: string @param port: Port @type port: int @param service: Service @type service: string @param adapter: Adapter @type adapter: string @param version: Version @type version: string @param path: Path @type path: string @param keyFile: ssl key file path @type keyFile: string @param certFile: ssl cert file path @type certFile: string @param thumbprint: host cert thumbprint @type thumbprint: string @param sslContext: SSL Context describing the various SSL options. It is only supported in Python 2.7.9 or higher. @type sslContext: SSL.Context @param b64token: base64 encoded token @type b64token: string @param connectionPoolTimeout: Timeout in secs for idle connections to close, specify negative numbers for never closing the connections @type connectionPoolTimeout: int Nz#Token is not defined for sspi login)rrr: LoginBySSPIr rjr)rrrrrrrrrrrrr9r>rrrs rrrsF)tWgt)0(J Tikk7B ; < <<  , ,X 6 6aa )          d(?sA A.(A))A.c |r/|}|jdSdS#t$r }Yd}~dSd}~wwxYwr)RetrieveContentr:Logoutr)r>r9rs rrrss  )%%''   & & ( ( ( ( ())     ddddd s/5 A A c 4|dkrt|t|||||||||  } tjd| } d} | } n#t j$rt$r} tj \}}}|rNtj t| }ttj j ||n-tj t| Yd} ~ nd} ~ wwxYw| | | fS)a Retrieve service instance for connection. @param host: Which host to connect to. @type host: string @param port: Port @type port: int @param adapter: Adapter @type adapter: string @param version: Version @type version: string @param path: Path @type path: string @param keyFile: ssl key file path @type keyFile: string @param certFile: ssl cert file path @type certFile: string @param connectionPoolTimeout: Timeout in secs for idle connections to close, specify negative numbers for never closing the connections @type connectionPoolTimeout: int rq)rr certKeyFilerrrrr8Nr)r~r r r8rr MethodFaultrsysr+rjrstrr)rrrrrrrrrrrr>r9rrvalue tracebackrjs rrrsG0 w   $gD&-%/J0E G G G4 -t442 77""$$gg       7 7 7 "%tUI 7++A+77 +UI > > > > **s1vv*66 6 ? > > > > 7 2t sAD4BD  DctS)z! Get the saved service instance. _sir1rrGetSir s :rc |adS)z! Set the saved service instance. Nrrs rrrs  333rcNt}|r|SdS)z Get the global saved stub. N)r_GetStubrs rGetStubrs& 2 [[]] $rc eZdZdZdZdZdS) Connectionc0||_||_d|_dSr argskwargsr>r#rrs rr$zConnection.__init__'didkdgggrcFt|ji|j|_|jSr )rrrr>r&s rr'zConnection.__enter__,s!2dk22dg WnrcN|jrt|jd|_dSdSr r>rr*s rr,zConnection.__exit__01  DG   rNr-r.r/r$r'r,r1rrrr&A rrc eZdZdZdZdZdS)SmartConnectionc0||_||_d|_dSr rrs rr$zSmartConnection.__init__6rrcFt|ji|j|_|jSr ) SmartConnectrrr>r&s rr'zSmartConnection.__enter__;s!di74;77dg WnrcN|jrt|jd|_dSdSr rr*s rr,zSmartConnection.__exit__?rrNrr1rrrr5rrrc|dkr|rd|ini}tj|fd|i|}n2|dkrtj||}ntd|zdz|d||}|jd kr9 tj| }|S#t$rYnwxYwd S) a Private method that returns a root from ElementTree for a remote XML document. @param protocol: What protocol to use for the connection (e.g. https or http). @type protocol: string @param server: Which server to connect to. @type server: string @param port: Port @type port: int @param path: Path @type path: string @param sslContext: SSL Context describing the various SSL options. It is only supported in Python 2.7.9 or higher. @type sslContext: SSL.Context httpscontextrhttp)rz Protocol z not supported.GETN) rHTTPSConnectionHTTPConnectionrrV getresponsestatusr fromstringrr) protocolserverrrrrconnresponsetrees r__GetElementTreerDs"'*4< :&&"f  ( E Ed Ef E EddF  'T : : :dd kH,/@@ A AA<<t  8o&x}}77   $s 'B44 CCcft||||dz|}||St||||dz|}|S)a Private method that returns a root from an ElementTree describing the API versions supported by the specified server. The result will be vimServiceVersions.xml if it exists, otherwise vimService.wsdl if it exists, otherwise None. @param protocol: What protocol to use for the connection (e.g. https or http). @type protocol: string @param server: Which server to connect to. @type server: string @param port: Port @type port: int @param path: Path @type path: string @param sslContext: SSL Context describing the various SSL options. It is only supported in Python 2.7.9 or higher. @type sslContext: SSL.Context z/vimServiceVersions.xmlNz/vimService.wsdl)r)rrrrrrs r__GetServiceVersionDescriptionrjsX& 8VT";;Z I I4  k 8VT"44j B B4 ;rc|}|jdkr|ddkr%td|dzt|}d}|dD]G}|d}||krdS|dD]}|j|krdSHnTd }|d |z}t|dd d}t||rdSd S) a Private method that returns true if the service version description document indicates that the desired version is supported @param desiredVersion: The version we want to see if the server supports (eg. vim.version.version2. @type desiredVersion: string @param serviceVersionDescription: A root ElementTree for vimServiceVersions.xml or vimService.wsdl. @type serviceVersionDescription: root ElementTree namespacesrz1.0z>vimServiceVersions.xml has version %s, which is not understoodNrTzpriorVersions/versionz http://schemas.xmlsoap.org/wsdl/z .//{%s}importF) tagget RuntimeErrorrfindallfindtexttextfindrr) desiredVersionserviceVersionDescriptionrodesiredVersionIdsupportedVersionr versionIdwsdlNS importElements r__VersionIsSupportedrsP $4 h, )   % %(+/88I+>+>@AA A%n5||K00)'' 22 ) ) )44&../FGG   .$4445  2f/44_v5MNNm#M$5$5k$B$B122$FG (. 9 9 %rct|||||}|dSt|ts|g}|D]}t||r|cSdS)aL Private method that returns the most preferred API version supported by the specified server, @param protocol: What protocol to use for the connection (e.g. https or http). @type protocol: string @param server: Which server to connect to. @type server: string @param port: Port @type port: int @param path: Path @type path: string @param preferredApiVersions: Acceptable API version(s) (e.g. vim.version.version3) If a list of versions is specified the versions should be ordered from most to least preferred. @type preferredApiVersions: string or string list @param sslContext: SSL Context describing the various SSL options. It is only supported in Python 2.7.9 or higher. @type sslContext: SSL.Context N)r isinstancelistr)rrrrpreferredApiVersionsrrrs r__FindSupportedVersionrs, >h>D>B>B>H  J J  ' T )4 0 0635-~ n.G H H    $rPTc*| td} t||}t|dkrdnd|||| |}|t|d|dt did|d |d |d |d |d |d|d|d|d| d| d| d| d|d|d|d|d|S)a Determine the most preferred API version supported by the specified server, then create a soap stub adapter using that version The parameters are the same as for pyVmomi.SoapStubAdapter except for version which is renamed to prefferedApiVersions @param preferredApiVersions: Acceptable API version(s) (e.g. vim.version.version3) If a list of versions is specified the versions should be ordered from most to least preferred. If None is specified, the list of versions support by pyVmomi will be used. @type preferredApiVersions: string or string list Nvim25rrr: is not a VIM serverrrrurlsockpoolSizerr httpProxyHost httpProxyPort sslProxyPathr cacertsFileracceptCompressedResponsesrr_rr1)rrrrr )rrrrrrrrr r r rr rr rr_rrs rSmartStubAdapterrst,"/88dJ//:,qWWf-1-1-1-A-7 99  TTT444@ A AA  F F Ftt F$$ FTT F!c F(, F7?x F#+8 F9D F)6  FFS] F(4|  FAK  F '2k  F SYY: t!! *(=!#''#% ' ' ''rcttdrtj}nd}t|||||||||| | | || | S)a4 Provides a standard method for connecting to a specified server without SSL verification. Useful when connecting to servers with self-signed certificates or when you wish to ignore SSL altogether. Will attempt to create an unverified SSL context and then connect via the SmartConnect method. rN)rrrrrrrrrrrrrrr)rrrr)rrrrrrrrrrrrrrrs rSmartConnectNoSSLrZsoc/00133jjj    & -B,@& (",", (!* , , ,,rcLtj|t||dS)z Open the specified URL, using HTTP basic authentication to provide the specified credentials to the server as part of the request. Returns the response as a file-like object. F)authverify)requestsrr)rrrs rOpenUrlWithBasicAuthrzs% ,stS!9!9% H H HHrcfddlm}t|dstj|j|jkrd}n1|j|jkrd}ntj|j }|d||}i}|j r |j |d<tj ||d S) z Open the specified path using HTTP, using the host/port/protocol associated with the specified stub. If the stub has a session cookie, it is included with the HTTP request. Returns the response as a file-like object. rrschemerrz://CookieF)headersr) six.movesrrr rj NotSupportedrrrrcookierr)rrrrhostPortrrs rOpenPathWithStubr s%$$$$$ $ ! !' K $ $ & && {111hh {222hh K $ $ & &&i8 ((DD 13 7 k&+gh ,sGE : : ::r)rrnrorZrprqNrrNNNNNrs)rorZ)9r0sixrrryr xml.etreerxml.parsers.expatrrrr requests.authrpyVmomir r r r pyVmomi.SoapAdapterr pyVmomi.VmomiSupportrrrrrcompiler{rrobjectrr3rrrrrrrrrrrrrrrrrrrrrr r1rrr*s*  !!!!!!((((((!!!!!!''''''DDDDDDDDDDDD@@@@@@PPPPPPPPPPPP333333bj+,,         f   lllll0lll^3VVt&"B$$dj S S S S j?AGMGK*4''''@ ( ( (*#C7777~)I0000h    Ee5555t                f      L@$$$T$$$L&CfD1"#'r $$T/3+K#,F,F,F,F\" #FPR vEe&*D4 TDJP'P'P'P'd '[sUW%FJj+/!% ,,,,@IIII;;;;;r