관리-도구
편집 파일: winrm.cpython-39.pyc
a �)g� � @ s� d dl mZmZmZ eZdZd dlZd dlZd dl Z d dl Z d dl Z d dl Z d dl Z d dlZd dlZd dlZd dlmZ d dlmZ dZzd dlZdZW n ey� Y n0 d dlmZ d d lm Z m Z d d lm Z d d l m Z d d l!m"Z" d d l#m$Z$m%Z%m&Z& d dl'm(Z( d dl)m*Z* d dl+m,Z, d dl-m.Z. d dl/m0Z0 zHd dl1Z1d dl1m2Z2 d dl3m4Z4m5Z5m6Z6 d dl7m8Z8 d dl9Z:dZ;dZ<W n. e�y� Z= zdZ;e=Z<W Y dZ=[=n dZ=[=0 0 zd dl>Z>dZ?dZ@W n. e�y� Z= zdZ?e=Z@W Y dZ=[=n dZ=[=0 0 dZAz4d dlBZBeCeBd��r.eeBjDjE�ZFdeFjGv �r.dZAW n& e�yV Z= z W Y dZ=[=n dZ=[=0 0 zd dlHZHdZIW n e�y� dZIY n0 e0� ZJG dd� de*�ZKdS )� )�absolute_import�division�print_functiona; author: Ansible Core Team name: winrm short_description: Run tasks over Microsoft's WinRM description: - Run commands or put/fetch on a target via WinRM - This plugin allows extra arguments to be passed that are supported by the protocol but not explicitly defined here. They should take the form of variables declared with the following pattern C(ansible_winrm_<option>). version_added: "2.0" extends_documentation_fragment: - connection_pipelining requirements: - pywinrm (python library) options: # figure out more elegant 'delegation' remote_addr: description: - Address of the windows machine default: inventory_hostname vars: - name: inventory_hostname - name: ansible_host - name: ansible_winrm_host type: str remote_user: description: - The user to log in as to the Windows machine vars: - name: ansible_user - name: ansible_winrm_user keyword: - name: remote_user type: str remote_password: description: Authentication password for the C(remote_user). Can be supplied as CLI option. vars: - name: ansible_password - name: ansible_winrm_pass - name: ansible_winrm_password type: str aliases: - password # Needed for --ask-pass to come through on delegation port: description: - port for winrm to connect on remote target - The default is the https (5986) port, if using http it should be 5985 vars: - name: ansible_port - name: ansible_winrm_port default: 5986 keyword: - name: port type: integer scheme: description: - URI scheme to use - If not set, then will default to C(https) or C(http) if I(port) is C(5985). choices: [http, https] vars: - name: ansible_winrm_scheme type: str path: description: URI path to connect to default: '/wsman' vars: - name: ansible_winrm_path type: str transport: description: - List of winrm transports to attempt to use (ssl, plaintext, kerberos, etc) - If None (the default) the plugin will try to automatically guess the correct list - The choices available depend on your version of pywinrm type: list elements: string vars: - name: ansible_winrm_transport kerberos_command: description: kerberos command to use to request a authentication ticket default: kinit vars: - name: ansible_winrm_kinit_cmd type: str kinit_args: description: - Extra arguments to pass to C(kinit) when getting the Kerberos authentication ticket. - By default no extra arguments are passed into C(kinit) unless I(ansible_winrm_kerberos_delegation) is also set. In that case C(-f) is added to the C(kinit) args so a forwardable ticket is retrieved. - If set, the args will overwrite any existing defaults for C(kinit), including C(-f) for a delegated ticket. type: str vars: - name: ansible_winrm_kinit_args version_added: '2.11' kinit_env_vars: description: - A list of environment variables to pass through to C(kinit) when getting the Kerberos authentication ticket. - By default no environment variables are passed through and C(kinit) is run with a blank slate. - The environment variable C(KRB5CCNAME) cannot be specified here as it's used to store the temp Kerberos ticket used by WinRM. type: list elements: str default: [] ini: - section: winrm key: kinit_env_vars vars: - name: ansible_winrm_kinit_env_vars version_added: '2.12' kerberos_mode: description: - kerberos usage mode. - The managed option means Ansible will obtain kerberos ticket. - While the manual one means a ticket must already have been obtained by the user. - If having issues with Ansible freezing when trying to obtain the Kerberos ticket, you can either set this to C(manual) and obtain it outside Ansible or install C(pexpect) through pip and try again. choices: [managed, manual] vars: - name: ansible_winrm_kinit_mode type: str connection_timeout: description: - Sets the operation and read timeout settings for the WinRM connection. - Corresponds to the C(operation_timeout_sec) and C(read_timeout_sec) args in pywinrm so avoid setting these vars with this one. - The default value is whatever is set in the installed version of pywinrm. vars: - name: ansible_winrm_connection_timeout type: int N)�getfullargspec)� urlunsplitFT)� constants)� AnsibleError�AnsibleConnectionFailure)�AnsibleFileNotFound)�_filter_non_json_lines)�boolean)�to_bytes� to_native�to_text)� binary_type)�ConnectionBase)� _parse_clixml)� secure_hash)�Display)�Response)� WinRMError�WinRMOperationTimeoutError�WinRMTransportError)�Protocol�spawn�echoc s� e Zd ZdZdZdZdZdZdZ� fdd�Z dd � Z d d � Z d d � Z dd� Z d(dd�Zd)dd�Z� fdd�Zdd� Zd*dd �Zd+� fd d � Zd,d d!�Z� fd"d#�Z� fd$d%�Zd&d'� Z� ZS )-� Connectionz"WinRM connections over HTTP/HTTPS.�winrm)z.ps1z.exe� FTc sz d| _ d| _d | _d | _d | _d| _tt| �j|i |�� t j svt � d�� t j� t � d�� t j� t � d�� t j� d S )NTZ powershellZrequests_credsspZrequests_kerberosZurllib3)Zalways_pipeline_modulesZhas_native_async�protocol�shell_idZdelegateZ _shell_type�superr �__init__�CZ DEFAULT_DEBUG�loggingZ getLoggerZsetLevel�INFO)�self�args�kwargs�� __class__� �D/usr/lib/python3.9/site-packages/ansible/plugins/connection/winrm.pyr" � s zConnection.__init__c C s@ | � d�| _| � d�| _| � d�| _| � d�| _| � d�| _| jd u rZ| jdkrTdnd| _| � d �| _| � d �| _| � d �| _| � d �| _ t t d �r�t t j �| _nt g d��| _| jd u s�| jd d u �r| jdkr�dgndg}t�r| j�rd| jv �rdg| | _n|| _t | j��| j�}|�r>tdtt|�dd� ��| � d�}|d u �rxd| jv �or| jd u�or| jdk| _n"|dk�r�d| _n|dk�r�d | _h d �}t| j| jd �| _ttj�}t |j�}|�|� d d � | � d!�D �}|�|�}|D ]} t � d"� | �� �q�|�|�� |�D ] } | � d!�d#| | j| < �q d S )$NZ remote_addrZ remote_userZremote_password�port�schemeia �http�https�pathZkerberos_command� transportZconnection_timeout�FEATURE_SUPPORTED_AUTHTYPES)� plaintext�ssl�kerberosr r5 r4 �@r6 z?The installed version of WinRM does not support transport(s) %sZ simplerepr)Z nonstringZ kerberos_moder ZmanagedTZmanualF> �passwordr2 r& Z kinit_cmd�usernamer1 r. � kinit_mode�endpoint)r9 r8 c S s h | ]}|� d d��qS )Zansible_winrm_r )�replace��.0�vr+ r+ r, � <setcomp>3 � z1Connection._build_winrm_kwargs.<locals>.<setcomp>�_extraszYansible_winrm_{0} unsupported by pywinrm (is an up-to-date version of pywinrm installed?)zansible_winrm_%s) � get_option� _winrm_host� _winrm_user� _winrm_pass� _winrm_port� _winrm_scheme� _winrm_path� _kinit_cmd�_winrm_transport�_winrm_connection_timeout�hasattrr �setr3 Z_winrm_supported_authtypes� HAVE_KERBEROS� differencer r �list� _kerb_managed�dict� _winrm_kwargsr r r" r' �update�display�warning�format� intersection) r& Ztransport_selectorZunsupported_transportsr: Zinternal_kwarg_mask�argspecZsupported_winrm_argsZpassed_winrm_argsZunsupported_args�argr+ r+ r, �_build_winrm_kwargs� sT � & z Connection._build_winrm_kwargsc C s� |d u r d}t �� | _t�d| jj � d| jj }|tjd< ttjd |d�}| � d�}|D ]$}||vr^|tjv r^tj| ||< q^| j g}| � d�}|r�d d � t � |�D �}|� |� n t| � d ��d d ��r�|�d� |�|� t�r�d} |�d�} t|ddd�}t�d| � ztj| |d|d d�} W n@ tj�yl } z$d| t| �f } t| ��W Y d } ~ n d } ~ 0 0 z| �d� | �|� W n8 t �y� } z t�dt| � � W Y d } ~ n d } ~ 0 0 | � � }| � � | j }n�d} t |ddd�}t�d| � z t!j"|t!j#t!j#t!j#|d �}W n@ t �yV } z&d| j t| �f } t| ��W Y d } ~ n d } ~ 0 0 |�$|d �\}}|j%dk}|dk�r�t|�&� �}|�'t|�d �}d || |f } t| ��t�d | � d S )!Nr zcreating Kerberos CC at %szFILE:%s� KRB5CCNAME�PATH)r^ r] �kinit_env_vars� kinit_argsc S s g | ]}|� � rt|��qS r+ )�stripr )r> �ar+ r+ r, � <listcomp>U rA z)Connection._kerb_auth.<locals>.<listcomp>rB Z!ansible_winrm_kerberos_delegationFz-f�pexpectr �utf-8�surrogate_or_strict)�encoding�errorsz+calling kinit with pexpect for principal %s�< )�timeout�envr z5Kerberos auth failure when calling kinit cmd '%s': %sz.*:z%kinit with pexpect raised OSError: %s� subprocessz.calling kinit with subprocess for principal %s)�stdin�stdout�stderrrk � z <redacted>z2Kerberos auth failure for principal %s with %s: %sz kinit succeeded for principal %s)(�tempfileZNamedTemporaryFileZ _kerb_ccacherV �vvvvv�name�os�environrS rC rJ �shlex�split�extendr �get�append� HAS_PEXPECT�popr Zvvvvrd r ZExceptionPexpectr r �expectZsendline�OSError�read�waitZ exitstatusr rl �Popen�PIPEZ communicate� returncodera r< )r& Z principalr8 Z krb5ccnameZkrb5envr_ �varZ kinit_cmdliner` Zproc_mechanism�command�child�err�err_msgro �rc�prn Zexp_msgr+ r+ r, � _kerb_auth@ s� �� � � � �� � � �zConnection._kerb_authc C sT t jd| j| j| jf | jd� | j}trdt �d| � zt�|� W n tj yZ Y n 0 d| }d|| jf }t | j || j ddf�}g }| j D �]�}|dkr�ts�|�d� q�| jr�| �| j| j� t jd ||f | jd� zt| j�� }| j�r | j|d < | jd |d < t|fd |i|��}| j�sJ|jdd�| _t jd| j | jd� |W S t�y( } z�t|�� � } t � td�| t j ��r�t d��t � td�| �} | �r�t!| �"� d �} | dk�r�d} n | dk�r�|W Y d}~ S |�d|| f � t jd| tt#�$� �f | jd� W Y d}~q�d}~0 0 q�|�rHt%d�&t't(|����nt d ��dS ) z? Establish a WinRM connection over HTTP/HTTPS. z8ESTABLISH WINRM CONNECTION FOR USER: %s on PORT %s TO %s��hostz,checking if winrm_host %s is an IPv6 addressz[%s]z%s:%dr r6 z6kerberos: the python kerberos library is not installedz'WINRM CONNECT: transport=%s endpoint=%sZoperation_timeout_sec� Zread_timeout_secr2 i� )ZcodepagezWINRM OPEN SHELL: %szOperation\s+?timed\s+?outz the connection attempt timed outzCode\s+?(\d{3})r i� z5the specified credentials were rejected by the serveri� Nz%s: %sz WINRM CONNECTION ERROR: %s %sz, z'No transport found for WinRM connection))rV �vvvrE rG rD � HAS_IPADDRESS�debug� ipaddress� IPv6Address�AddressValueErrorr rH rI rK rO rz rR r� rF rr rT �copyrL r r Z open_shell� Exceptionr ra �re�search�Ir �int�groups� traceback� format_excr �join�mapr ) r& Z winrm_host�netlocr; rh r2 Z winrm_kwargsr �er� �m�coder+ r+ r, �_winrm_connect� sd �� 8zConnection._winrm_connectc C s� |D ]�\}}t dd�D ]�}z | j| j| j|||d� W n� ty` t�d� |s\t�d� Y nb t y� } zJ|dks�dt |�vr�� t�d|� d �� t�d� W Y d }~qW Y d }~n d }~0 0 qqqd S ) Nr� � )�eofz�WSMan OperationTimeout during send input, attempting to continue. If this continues to occur, try increasing the connection_timeout value for this host.� � z'wsmanfault_code': '170'z WSMan send failed on attempt z2 as the command is busy, trying to send data again) �range�_winrm_send_inputr r r rV rW �time�sleepr �str)r& � command_id�stdin_iterator�dataZis_lastZattemptr� r+ r+ r, �_winrm_write_stdin� s" � "z Connection._winrm_write_stdinc C sv d|j dd|d�i}|d �di ��di ��di �}d|d < ||d < t�t|��|d < |rbd |d < |�t�|�� d S )Nz env:Envelopez;http://schemas.microsoft.com/wbem/wsman/1/windows/shell/cmdz<http://schemas.microsoft.com/wbem/wsman/1/windows/shell/Send)Z resource_uri�actionr zenv:Bodyzrsp:Sendz rsp:Streamrm z@Namez @CommandIdz#text�truez@End)Z_get_soap_header� setdefault�base64� b64encoder Z send_message� xmltodictZunparse)r& r r r� rm r� Zrq�streamr+ r+ r, r� s ��z Connection._winrm_send_inputr+ Nc C sH | j s| �� | _ d| _|r4tjd||f | jd� ntjd||f | jd� d }�z��z�d}| j j| jt |�t t |�|d u d�}z|r�| � ||� W nR t y� } z:t� dt|�jt|�f � t�t�� � d}W Y d }~n d }~0 0 | j �| j|�}ttdd� |D ���} |�r.tjd t| � | jd� ntjd t| � | jd� tjd t| j� | jd� tjd t| j� | jd� |�r�z t| j�\} } t�| � W nP t �y� t | jd d �} | � d��r�t | �} t dt | j�t | �f ��Y n0 | W W |�rNz| j �!| j|� W S t"�yL } z$| j#dk�r.� t� d� W Y d } ~ S d } ~ 0 0 S t$j%j&�y� } z t'dt |� ��W Y d }~n d }~0 0 W |�rDz| j �!| j|� W n> t"�y� } z$| j#dk�rƂ t� d� W Y d } ~ n d } ~ 0 0 n\|�rBz| j �!| j|� W n> t"�y@ } z$| j#dk�r"� t� d� W Y d } ~ n d } ~ 0 0 0 d S )NTzWINRM EXEC %r %rr� F)Zconsole_mode_stdinz<ERROR DURING WINRM SEND INPUT - attempting to recover: %s %sc s s$ | ] }t |t�rt|�n|V qd S �N)� isinstancer r r= r+ r+ r, � <genexpr>* rA z)Connection._winrm_exec.<locals>.<genexpr>zWINRM RESULT %rzWINRM STDOUT %szWINRM STDERR %sre �rg � #< CLIXMLz.winrm send_input failed; stdout: %s stderr %si� z]Failed to cleanup running WinRM command, resources might still be in use on the target serverzwinrm connection error: %s)(r r� � _connectedrV rr rD ZvvvvvvZ run_commandr r r� r� r� rW �type�__name__r r� r� r� Zget_command_outputr �tuple�std_out�std_errr �json�loads� ValueError� startswithr r r Zcleanup_commandr r� �requests� exceptionsZTimeoutr )r& r� r' � from_execr� r� Zstdin_push_failed�exZ resptupleZresponseZfiltered_outputZdummyro r� �excr+ r+ r, � _winrm_exec s| $� � �( "� zConnection._winrm_execc sZ t stdtt� ��nts*tdtt� ��tt| ��� | j sV| � � | � � | _ d| _ | S )Nz&winrm or requests is not installed: %sz xmltodict is not installed: %sT) � HAS_WINRMr r �WINRM_IMPORT_ERR� HAS_XMLTODICT�XMLTODICT_IMPORT_ERRr! r �_connectr r\ r� r� �r& r) r+ r, r� W s zConnection._connectc C s" | j s d S d | _d | _| �� d S r� )r� r r r� r� r+ r+ r, �resete s zConnection.reset�@ c c sD t |�}t|�}td||�D ]"}|||| � || |kfV q d S )Nr )r �lenr� )r& Zpayload� buffer_sizeZ payload_bytesZ byte_count�ir+ r+ r, �_wrapper_payload_streaml s z"Connection._wrapper_payload_streamc s� t t| �j|||d� | jj|dddd�}t�d� d }|rF| �|�}| j|d |dd � d|d�}t |j �|_ t |j �|_ |j � d �r�zt |j �|_ W n ty� Y n0 |j|j |j fS ) N)�in_data�sudoableTF��as_listZ strict_mode� preserve_rczEXEC (via pipeline wrapper)r r� )r� r� r� )r! r � exec_command�_shell�_encode_scriptrV r� r� r� r r� r� r� r r� � status_code)r& �cmdr� r� � cmd_partsr� �resultr) r+ r, r� r s zConnection.exec_command�� c # s� t j�t|dd��}d}tt|dd�d����t� �fdd�d�D ]R}|t|�7 }| jjd|||t|�f | j d � t � |�d }|�� � |kfV q@|dkr�d V W d � n1 s�0 Y d S ) Nrf �rh r �rbc s �� � �S r� )r r+ �r� Zin_filer+ r, �<lambda>� rA z5Connection._put_file_stdin_iterator.<locals>.<lambda>rA z*WINRM PUT "%s" to "%s" (offset=%d size=%d)r� s )r T) rt r1 �getsizer �open�iterr� Z_displayrr rD r� r� �tell)r& �in_path�out_pathr� Zin_size�offsetZout_dataZb64_datar+ r� r, �_put_file_stdin_iterator� s "z#Connection._put_file_stdin_iteratorc sh t t| ��||� | j�|�}tjd||f | jd� tj � t |dd��sZt dt |� ��d}|�| j�|��}| jj|dddd �}| j|d |d d � | �||�d �}|jd kr�tt |j���zt�|j�}W nP t�y t |jd d�}|�d��rt|�}tdt |j�t |�f ��Y n0 |� d�} | �s:td��t |�} | | k�sdtd�t | �t | ����d S )NzPUT "%s" TO "%s"r� rf r� z#file or module does not exist: "%s"a� begin {{ $path = '{0}' $DebugPreference = "Continue" $ErrorActionPreference = "Stop" Set-StrictMode -Version 2 $fd = [System.IO.File]::Create($path) $sha1 = [System.Security.Cryptography.SHA1CryptoServiceProvider]::Create() $bytes = @() #initialize for empty file case }} process {{ $bytes = [System.Convert]::FromBase64String($input) $sha1.TransformBlock($bytes, 0, $bytes.Length, $bytes, 0) | Out-Null $fd.Write($bytes, 0, $bytes.Length) }} end {{ $sha1.TransformFinalBlock($bytes, 0, 0) | Out-Null $hash = [System.BitConverter]::ToString($sha1.Hash).Replace("-", "").ToLowerInvariant() $fd.Close() Write-Output "{{""sha1"":""$hash""}}" }} TFr� r r� )r� re r� r� z,winrm put_file failed; stdout: %s stderr %sZsha1z Remote sha1 was not returnedz2Remote sha1 hash {0} does not match local hash {1}) r! r �put_filer� �_unquoterV r� rD rt r1 �existsr r r rX �_escaper� r� r� r� r r� r� r� r� r� r� r ry r ) r& r� r� Zscript_template�scriptr� r� Z put_outputro Z remote_sha1Z local_sha1r) r+ r, r� � s0 $ zConnection.put_filec s� t t| ��||� | j�|�}|�dd�}tjd||f | jd� d}d }�zVd}�zdt || j� |�|d� }tj d |||f | jd� | jj |d d d �}| � |d |d d � �}|jdkr�tt|j���|j�� dkr�d } nt�|j�� �} | d u �rW �q�n^|�s6tj�t|dd���r$W �q�tt|dd�d�}|�| � t | �|k �rTW �q�|t | �7 }W qR t �y� t � � t dt|� ��Y qR0 qRW |�r�|�!� n|�r�|�!� 0 d S )N�\�/zFETCH "%s" TO "%s"r� i r a. $path = '%(path)s' If (Test-Path -Path $path -PathType Leaf) { $buffer_size = %(buffer_size)d $offset = %(offset)d $stream = New-Object -TypeName IO.FileStream($path, [IO.FileMode]::Open, [IO.FileAccess]::Read, [IO.FileShare]::ReadWrite) $stream.Seek($offset, [System.IO.SeekOrigin]::Begin) > $null $buffer = New-Object -TypeName byte[] $buffer_size $bytes_read = $stream.Read($buffer, 0, $buffer_size) if ($bytes_read -gt 0) { $bytes = $buffer[0..($bytes_read - 1)] [System.Convert]::ToBase64String($bytes) } $stream.Close() > $null } ElseIf (Test-Path -Path $path -PathType Container) { Write-Host "[DIR]"; } Else { Write-Error "$path does not exist"; Exit 1; } )r� r1 r� z$WINRM FETCH "%s" to "%s" (offset=%d)TF)r� r� r� z[DIR]rf r� �wbz failed to transfer file to "%s")"r! r � fetch_filer� r� r< rV r� rD rS r� rr r� r� r� �IOErrorr r� r� ra r� Z b64decodert r1 �isdirr r� �writer� r� r� � print_excr �close) r& r� r� r� Zout_filer� r� r� r� r� r) r+ r, r� � sJ � �zConnection.fetch_filec C sF | j r0| jr0tjd| j | jd� | j �| j� d | _d | _ d| _d S )NzWINRM CLOSE SHELL: %sr� F)r r rV rr rD Z close_shellr� r� r+ r+ r, r s zConnection.close)F)r+ FN)r� )NT)r� )r� � __module__� __qualname__�__doc__r2 Z!module_implementation_preferencesZallow_executableZhas_pipeliningZ allow_extrasr" r\ r� r� r� r� r� r� r� r� r� r� r� r� r � __classcell__r+ r+ r) r, r � s* J`;% I ? Cr )LZ __future__r r r r� Z __metaclass__Z DOCUMENTATIONr� r$ rt r� r� r� rq rv rl r� �inspectr � urllib.parser rO r6 � ImportErrorZansibler r# Zansible.errorsr r r Z ansible.module_utils.json_utilsr Z)ansible.module_utils.parsing.convert_boolr Zansible.module_utils._textr r r Zansible.module_utils.sixr Zansible.plugins.connectionr Z ansible.plugins.shell.powershellr Zansible.utils.hashingr Zansible.utils.displayr r r Zwinrm.exceptionsr r r Zwinrm.protocolr Zrequests.exceptionsr� r� r� r� r� r� r� r{ rd rM r r" rZ r' r� r� rV r r+ r+ r+ r, �<module> s�