Sync from SUSE:SLFO:Main python-pyspnego revision ef4e1fc93c4d54e77041d84d51491e5e
This commit is contained in:
commit
cac2fb33b2
23
.gitattributes
vendored
Normal file
23
.gitattributes
vendored
Normal file
@ -0,0 +1,23 @@
|
||||
## Default LFS
|
||||
*.7z filter=lfs diff=lfs merge=lfs -text
|
||||
*.bsp filter=lfs diff=lfs merge=lfs -text
|
||||
*.bz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.gem filter=lfs diff=lfs merge=lfs -text
|
||||
*.gz filter=lfs diff=lfs merge=lfs -text
|
||||
*.jar filter=lfs diff=lfs merge=lfs -text
|
||||
*.lz filter=lfs diff=lfs merge=lfs -text
|
||||
*.lzma filter=lfs diff=lfs merge=lfs -text
|
||||
*.obscpio filter=lfs diff=lfs merge=lfs -text
|
||||
*.oxt filter=lfs diff=lfs merge=lfs -text
|
||||
*.pdf filter=lfs diff=lfs merge=lfs -text
|
||||
*.png filter=lfs diff=lfs merge=lfs -text
|
||||
*.rpm filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.tgz filter=lfs diff=lfs merge=lfs -text
|
||||
*.ttf filter=lfs diff=lfs merge=lfs -text
|
||||
*.txz filter=lfs diff=lfs merge=lfs -text
|
||||
*.whl filter=lfs diff=lfs merge=lfs -text
|
||||
*.xz filter=lfs diff=lfs merge=lfs -text
|
||||
*.zip filter=lfs diff=lfs merge=lfs -text
|
||||
*.zst filter=lfs diff=lfs merge=lfs -text
|
||||
BIN
pyspnego-0.11.2.tar.gz
(Stored with Git LFS)
Normal file
BIN
pyspnego-0.11.2.tar.gz
(Stored with Git LFS)
Normal file
Binary file not shown.
272
python-pyspnego.changes
Normal file
272
python-pyspnego.changes
Normal file
@ -0,0 +1,272 @@
|
||||
-------------------------------------------------------------------
|
||||
Mon Nov 11 20:27:41 UTC 2024 - Martin Hauke <mardnh@gmx.de>
|
||||
|
||||
- Update to version 0.11.2
|
||||
* Fix CredSSP acceptor with LibreSSL.
|
||||
* Bump dev deps and add 3.13 support.
|
||||
* Update integration tests for 3.13.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Aug 5 19:04:53 UTC 2024 - Dirk Müller <dmueller@suse.com>
|
||||
|
||||
- update to 0.11.1:
|
||||
* Import `ARC4` cipher from the new `decrepits` module sub-
|
||||
package, this removes the warning issued in newer versions of
|
||||
the `cryptography` library
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jun 20 07:36:41 UTC 2024 - Dirk Müller <dmueller@suse.com>
|
||||
|
||||
- update to 0.11.0:
|
||||
* Support input password string encoded with the
|
||||
`surrogatepass` error option
|
||||
* This allows the caller to provide a password for a gMSA or
|
||||
machine account that could contain invalid surrogate pairs
|
||||
for both NTLM and Kerberos auth.
|
||||
* Stop using deprecated `datetime.dateime.utcnow()` for CredSSP
|
||||
acceptor context
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Jun 8 22:35:51 UTC 2024 - Dirk Müller <dmueller@suse.com>
|
||||
|
||||
- update to 0.10.2:
|
||||
* Another rename of the `sspi` package dependency to `sspilib`
|
||||
* Rename `sspi` package dependency to `sspic` to avoid
|
||||
conflicts with pywin32
|
||||
* Drop support for Python 3.7 - new minimum is 3.8+
|
||||
* Moved SSPI bindings out into a separate package called `sspi`
|
||||
This simplifies this project as it doesn't have to worry
|
||||
about SSPI correctness. The `sspi` package improves
|
||||
performance and memory allocation with a more robust API
|
||||
* Fixes an issue with Cython 3 allowing it to align with more
|
||||
modern versions going forward
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 4 18:26:17 UTC 2023 - Martin Hauke <mardnh@gmx.de>
|
||||
|
||||
- Update to version 0.9.2
|
||||
* Only CI related changes
|
||||
- Update to version 0.9.1
|
||||
* Always set the NTLMSSP_REQUEST_VERSION flag on the
|
||||
NTLM Negotiate message. This aligns the behaviour with how
|
||||
SSPI generates this message.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed May 10 07:03:54 UTC 2023 - Dirk Müller <dmueller@suse.com>
|
||||
|
||||
- update to 0.9.0:
|
||||
* Added the `spnego.ContextReq.dce_style` flag to enable DCE
|
||||
authentication mode
|
||||
* The value for `spnego.iov.BufferType.sign_only` on SSPI has
|
||||
changed from representing `SECBUFFER_MECHLIST` to
|
||||
`SECBUFFER_READONLY_WITH_CHECKSUM`
|
||||
* Added the IOV buffer type
|
||||
`spnego.iov.BufferType.data_readonly`
|
||||
* Added limited support for `wrap_iov` and `unwrap_iov` in the
|
||||
Python NTLM context provider.
|
||||
* Added the `query_message_sizes()` function on a context to
|
||||
retrieve the important message sizes
|
||||
Currently this only contains the size of the message
|
||||
`header`, also known as the signature or security trailer
|
||||
* Added the `spnego.ContextReq.no_integrity` flag to disable
|
||||
integrity/confidentiality on Kerberos/Negotiate contexts
|
||||
* Added optional kwargs to `step()` on a security context
|
||||
`channel_bindings`
|
||||
* Added support for decoding the following TLS payloads with
|
||||
`python -m spnego --token ...`
|
||||
* Client Hello
|
||||
* Server Hello
|
||||
* Certificate
|
||||
* Server Key Exchange
|
||||
* Client Key Exchange
|
||||
* Certificate Request
|
||||
* Added the `new_context()` method on the context proxies to
|
||||
provide an easy and efficient way to re-use the context
|
||||
credentials and options for a new context
|
||||
* Removed use of `gssntlmssp` to simplify codebase and ensure a
|
||||
consistent experience across OS versions
|
||||
* Using NTLM on a non-Windows system will use the Python NTLM
|
||||
implementation instead
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue May 9 13:49:10 UTC 2023 - Johannes Kastl <kastl@b1-systems.de>
|
||||
|
||||
- add sle15_python_module_pythons
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Nov 9 18:35:52 UTC 2022 - Yogalakshmi Arunachalam <yarunachalam@suse.com>
|
||||
|
||||
- Update to 0.6.3
|
||||
* Ignore GSS_S_NO_CONTEXT errors on GSSAPI after stepping through the token exchange before the context is complete
|
||||
This is raised by MIT krb5 before 1.14.x and can be ignored
|
||||
|
||||
- Update to 0.6.2
|
||||
* Fix up sdist and wheels to include py.typed type annotation marker
|
||||
|
||||
- Update to 0.6.1
|
||||
* Added Python 3.11 wheel
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Oct 28 20:23:03 UTC 2022 - Yogalakshmi Arunachalam <yarunachalam@suse.com>
|
||||
|
||||
- Update to 0.6.0
|
||||
* Drop support for Python 3.6 - new minimum is 3.7+
|
||||
* Moved setuptools config into pyproject.toml and made Cython a build requirement for Windows
|
||||
For most users this is a hidden change
|
||||
If a tool follows the PEP 517 standard, like pip, this build dependency will work automatically
|
||||
The pre cythonised files are no longer included in the sdist going forward
|
||||
|
||||
- Update to 0.5.4
|
||||
* Fix str of enum values when running in Python 3.11 to be consistent with older versions
|
||||
* Support gssapi on 1.5.x which comes with RHEL 8.
|
||||
|
||||
- Update to 0.5.3
|
||||
* Fix heap allocation errors when running with heap allocation monitoring on Windows
|
||||
|
||||
- Update to 0.5.2
|
||||
* Added custom MD4 hashing code for NTLM to use.
|
||||
Newer Linux distributions ship with OpenSSL 3.x which typically disables MD4 breaking the use of hashlib.new('md4', b"")
|
||||
Using this custom code allows NTLM to continue to work
|
||||
While it's bad to continue to use older hashing mechanisms in this case there is no valid alternative available
|
||||
|
||||
- Update to 0.5.1
|
||||
* Call gss_inquire_sec_context_by_oid(ctx, spnego_req_mechlistMIC_oid) when using pure NTLM over GSSAPI to ensure the token contains a MIC
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Oct 1 12:14:25 UTC 2022 - Dirk Müller <dmueller@suse.com>
|
||||
|
||||
- update to 0.5.0:
|
||||
* Added the `auth_stage` extra_info for a CredSSP context to give a human
|
||||
friendly indication of what sub auth stage it is up to.
|
||||
* Added the `protocol_version` extra_info for a CredSSP context to return the
|
||||
negotiated CredSSP protocol version.
|
||||
* Added the `credssp_min_protocol` keyword argument for a CredSSP context to
|
||||
set a minimum version the caller will accept of the peer.
|
||||
* This can be set to `5+` to ensure the peer supports and applies the mitigations for CVE-2018-0886.
|
||||
* Added safeguards when trying to retrieve the completed context attributes
|
||||
of `NegotiateProxy` before any contexts have been set up
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Feb 22 09:26:20 UTC 2022 - Dirk Müller <dmueller@suse.com>
|
||||
|
||||
- update to 0.4.0:
|
||||
* Add `usage` argument for `tls.default_tls_context` to control whether the
|
||||
context is for a initiator or acceptor
|
||||
* Add type annotations and include `py.typed` in the package for downstream
|
||||
library use
|
||||
* Expose the `ContextProxy` class for type annotation use
|
||||
* Added `get_extra_info` to `ContextProxy` to expose a common way to retrieve
|
||||
context specific information, this is currently used by CredSSP to retrieve
|
||||
* `client_credential`: The delegated client credential for acceptors
|
||||
once the context is complete
|
||||
* `sslcontext`: The SSL context used to create the TLS object
|
||||
* `ssl_object`: The TLS object used during the CredSSP exchange
|
||||
* The `client_credential` property on `CredSSP` has been removed in
|
||||
favour of `context.get_extra_info('client_credential')
|
||||
* Added support for custom credential types
|
||||
* Can be used to for things like NTLM authentication with NT/LM hashes,
|
||||
Kerberos with a keytab or from an explicit CCache, etc
|
||||
* Support calling SSPI through `pyspnego`'s Negotiate proxy context
|
||||
* This allows users on Windows to still use Negotiate auth but with a
|
||||
complex set of credentials
|
||||
* Also opens up the ability to use Negotiate but only with Kerberos auth
|
||||
* The `username` and `password` property on the auth context object are
|
||||
deprecated and will return `None` until it is removed in a future release
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Nov 6 11:10:17 UTC 2021 - Ben Greiner <code@bnavigator.de>
|
||||
|
||||
- Reactivate python36 build
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Oct 29 18:44:17 UTC 2021 - Martin Hauke <mardnh@gmx.de>
|
||||
|
||||
- Update to version 0.3.1
|
||||
* Do not convert GSSAPI service to lowercase for GSSAPI and
|
||||
uppercase for SSPI
|
||||
* SPNs are case insensitive on Windows but case sensitive on
|
||||
Linux
|
||||
* Convering the service portion to upper or lower case could
|
||||
cause problems finding the target server on non-Windows
|
||||
GSSAPI implementations
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Oct 25 19:41:06 UTC 2021 - Martin Hauke <mardnh@gmx.de>
|
||||
|
||||
- Update to version 0.3.0
|
||||
Packaging Changes
|
||||
* Changed project structure to a src layout
|
||||
* Include both Cython pyx/pyd and C files for SSPI in the
|
||||
sdist generated
|
||||
* Added Python 3.10 wheel
|
||||
Bugfixes
|
||||
* Ensure bad SPNEGO token inputs are raised as InvalidTokenError
|
||||
rather than struct.error
|
||||
- Update to version 0.2.0
|
||||
Breaking Changes
|
||||
* Drop support for Python 2.7 and 3.5 - new minimum is 3.6+
|
||||
* Made the gss, negotiate, ntlm, sspi exports private, use the
|
||||
spnego.client and spnego.server functions instead
|
||||
+ A deprecation warning is raised when importing from these
|
||||
package directly and this will be removed in the next major
|
||||
release
|
||||
Features
|
||||
* Added support for CredSSP authentication using
|
||||
protocol='credssp'
|
||||
* Allow optional keyword arguments to be used with spnego.client
|
||||
and spnego.server to control authentication specific options
|
||||
Bugfixes
|
||||
* Use Kerberos API to acquire Kerberos credential to get a
|
||||
forwardable token in a thread safe manner
|
||||
* Fix default credential logic when no username is provided
|
||||
based on GSSAPI rules rather than just the default principal
|
||||
* Ignore SPNEGO mechListMIC if it contains the same value as
|
||||
the responseToken due to an old Windows SPNEGO logic bug.
|
||||
* Do not use SSPI when auth='ntlm' and the password is in the
|
||||
form {lm_hash}:{nt_hash}
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu May 13 16:27:28 UTC 2021 - Martin Hauke <mardnh@gmx.de>
|
||||
|
||||
- Update to version 0.1.6
|
||||
* Change enum type of iov.BufferType to IntEnum to fix load on
|
||||
Python 3.10 - #10
|
||||
* Make pyspnego-parse and entry point which uses __main__.py in
|
||||
the spnego package. This allows users to use the parser script
|
||||
by running python -m spnego --token ...
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jan 12 09:47:29 UTC 2021 - Martin Hauke <mardnh@gmx.de>
|
||||
|
||||
- Update to version 0.1.5
|
||||
* Respect NETBIOS_COMPUTER_NAME when getting the workstation
|
||||
name for NTLM tokens. This matches the behaviour of gss-ntlmssp
|
||||
to ensure a consistent approach.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Dec 4 08:13:16 UTC 2020 - Martin Hauke <mardnh@gmx.de>
|
||||
|
||||
- Update to version 0.1.4
|
||||
* Only send negState: request-mic for the first reply from an
|
||||
acceptor for Negotiate auth.
|
||||
* Strict interpretations of SPNEGO will fail if the initiator
|
||||
sends this state as it is against the RFC.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Oct 29 16:47:02 UTC 2020 - Martin Hauke <mardnh@gmx.de>
|
||||
|
||||
- Update to version 0.1.3
|
||||
* Added Python 3.9 to CI
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sun Oct 25 15:53:36 UTC 2020 - Martin Hauke <mardnh@gmx.de>
|
||||
|
||||
- Update to version 0.1.2
|
||||
* Fix up WinRM wrapping on SSPI
|
||||
- Update to version 0.1.1
|
||||
* Include the cython files in the built sdist
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Aug 22 14:27:14 UTC 2020 - Martin Hauke <mardnh@gmx.de>
|
||||
|
||||
- Initial package, version 0.1.0
|
||||
83
python-pyspnego.spec
Normal file
83
python-pyspnego.spec
Normal file
@ -0,0 +1,83 @@
|
||||
#
|
||||
# spec file for package python-pyspnego
|
||||
#
|
||||
# Copyright (c) 2024 SUSE LLC
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
# upon. The license for this file, and modifications and additions to the
|
||||
# file, is the same license as for the pristine package itself (unless the
|
||||
# license for the pristine package is not an Open Source License, in which
|
||||
# case the license is the MIT License). An "Open Source License" is a
|
||||
# license that conforms to the Open Source Definition (Version 1.9)
|
||||
# published by the Open Source Initiative.
|
||||
|
||||
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
||||
#
|
||||
|
||||
|
||||
%{?sle15_python_module_pythons}
|
||||
Name: python-pyspnego
|
||||
Version: 0.11.2
|
||||
Release: 0
|
||||
Summary: Python SPNEGO authentication library
|
||||
License: MIT
|
||||
Group: Development/Languages/Python
|
||||
URL: https://github.com/jborean93/pyspnego
|
||||
Source: https://github.com/jborean93/pyspnego/archive/v%{version}.tar.gz#/pyspnego-%{version}.tar.gz
|
||||
BuildRequires: %{python_module pip}
|
||||
BuildRequires: %{python_module setuptools}
|
||||
BuildRequires: %{python_module wheel}
|
||||
BuildRequires: python-rpm-macros
|
||||
# SECTION test requirements
|
||||
BuildRequires: %{python_module dataclasses if %python-base < 3.7}
|
||||
BuildRequires: %{python_module cryptography}
|
||||
BuildRequires: %{python_module pytest-mock}
|
||||
BuildRequires: %{python_module pytest}
|
||||
# /SECTION
|
||||
BuildRequires: fdupes
|
||||
Requires: python-cryptography
|
||||
%if 0%{python_version_nodots} < 37
|
||||
Requires: python-dataclasses
|
||||
%endif
|
||||
Requires(post): update-alternatives
|
||||
Requires(postun): update-alternatives
|
||||
Suggests: python-gssapi >= 1.5.0
|
||||
Suggests: python-ruamel.yaml
|
||||
BuildArch: noarch
|
||||
%python_subpackages
|
||||
|
||||
%description
|
||||
Library to handle SPNEGO (Negotiate, NTLM, Kerberos) authentication.
|
||||
Also includes a packet parser that can be used to decode raw
|
||||
NTLM/SPNEGO/Kerberos tokens into a human readable format.
|
||||
|
||||
%prep
|
||||
%setup -q -n pyspnego-%{version}
|
||||
sed -i '1{/^#!/ d}' src/spnego/__main__.py
|
||||
|
||||
%build
|
||||
%pyproject_wheel
|
||||
|
||||
%install
|
||||
%pyproject_install
|
||||
%python_clone -a %{buildroot}%{_bindir}/pyspnego-parse
|
||||
%python_expand %fdupes %{buildroot}%{$python_sitelib}
|
||||
|
||||
%post
|
||||
%python_install_alternative pyspnego-parse
|
||||
|
||||
%postun
|
||||
%python_uninstall_alternative pyspnego-parse
|
||||
|
||||
%check
|
||||
%pytest
|
||||
|
||||
%files %{python_files}
|
||||
%license LICENSE
|
||||
%doc CHANGELOG.md README.md
|
||||
%python_alternative %{_bindir}/pyspnego-parse
|
||||
%{python_sitelib}/spnego
|
||||
%{python_sitelib}/pyspnego-%{version}.dist-info
|
||||
|
||||
%changelog
|
||||
Loading…
x
Reference in New Issue
Block a user