o j`^ @sddlmZddZGdddeZGdddeZGdd d eZGd d d eZd Zd ZGdddeZ GdddeZ GdddeZ GdddeZ GdddeZ GdddeZidddddddd d!d"d#d$d%d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5d6d7d8d d9id d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdXdYdZid[d\d]d^d_d`dadbdcdddedfdgdhdidjdkdldmdndodpdqdrdsdtdudvdwdxdydzd{d|id}d~dddddddddddddddddddddddddddddddddddddddddd ZGdddeZGdddeZGdddeZGdddeZGdddeZGdddeZdS))EnumcCs6t}tddD]}|dq|D]}d||<q|S)Nr )listrangeappend)flags finalFlagsifr /root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/impacket/krb5/constants.py encodeFlagss   rc@s\eZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZdZdZdS)ApplicationTagNumbersr N)__name__ __module__ __qualname__Ticket Authenticator EncTicketPartAS_REQAS_REPTGS_REQTGS_REPAP_REQAP_REP RESERVED16 RESERVED17KRB_SAFEKRB_PRIVKRB_CRED EncASRepPart EncTGSRepPart EncApRepPartEncKrbPrivPartEncKrbCredPart KRB_ERRORr r r r r s*rc@DeZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdS)PrincipalNameTyperrrrrrr~N)r#r$r% NT_UNKNOWN NT_PRINCIPAL NT_SRV_INST NT_SRV_HST NT_SRV_XHSTNT_UIDNT_X500_PRINCIPAL NT_SMTP_NAME NT_ENTERPRISE NT_WELLKNOWNNT_SRV_HST_DOMAINNT_MS_PRINCIPALNT_MS_PRINCIPAL_AND_IDNT_ENT_PRINCIPAL_AND_IDr r r r r;6sr;c@seZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ!dZ"d Z#d!Z$d"Z%d#Z&d$Z'd%Z(d&Z)d'Z*d(Z+d)Z,d*Z-d+Z.d,Z/d-Z0d.Z1d/S)0PreAuthenticationDataTypesrrrr=r>r? rrrrrrrrrrrr")efghijklN)2r#r$r% PA_TGS_REQPA_ENC_TIMESTAMP PA_PW_SALTPA_ENC_UNIX_TIMEPA_SANDIA_SECUREID PA_SESAME PA_OSF_DCEPA_CYBERSAFE_SECUREID PA_AFS3_SALT PA_ETYPE_INFOPA_SAM_CHALLENGEPA_SAM_RESPONSEPA_PK_AS_REQ_OLDPA_PK_AS_REP_OLD PA_PK_AS_REQ PA_PK_AS_REPPA_ETYPE_INFO2PA_USE_SPECIFIED_KVNOPA_SAM_REDIRECTPA_GET_FROM_TYPED_DATA TD_PADATAPA_SAM_ETYPE_INFO PA_ALT_PRINCPA_SAM_CHALLENGE2PA_SAM_RESPONSE2 PA_EXTRA_TGTTD_PKINIT_CMS_CERTIFICATESTD_KRB_PRINCIPAL TD_KRB_REALMTD_TRUSTED_CERTIFIERSTD_CERTIFICATE_INDEXTD_APP_DEFINED_ERROR TD_REQ_NONCE TD_REQ_SEQPA_PAC_REQUEST PA_FOR_USERPA_S4U_X509_USER PA_FX_COOKIE PA_FX_FAST PA_FX_ERRORPA_ENCRYPTED_CHALLENGEKERB_KEY_LIST_REQKERB_KEY_LIST_REPPA_SUPPORTED_ENCTYPESPA_PAC_OPTIONSKERB_SUPERSEDED_BY_USERKERB_DMSA_KEY_PACKAGEr r r r rQFs`rQc@s0eZdZdZdZdZdZdZdZdZ dZ d Z d S) AddressTyperrr=r>r?rrrrVN) r#r$r%IPv4 DirectionalChaosNetXNSISODECNET_Phase_IV AppleTalk_DDPNetBiosIPv6r r r r rwsrrrc@s@eZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdS)AuthorizationDataTyperrrr<r=r>r?rR@ABrarbN)r#r$r%AD_IF_RELEVANTAD_INTENDED_FOR_SERVER!AD_INTENDED_FOR_APPLICATION_CLASS AD_KDC_ISSUED AD_AND_ORAD_MANDATORY_TICKET_EXTENSIONSAD_IN_TICKET_EXTENSIONSAD_MANDATORY_FOR_KDCOSF_DCESESAMEAD_OSF_DCE_PKI_CERTID AD_WIN2K_PACAD_ETYPE_NEGOTIATIONr r r r rsrc@eZdZdZdS)TransitedEncodingTypesrN)r#r$r%DOMAIN_X500_COMPRESSr r r r rrc@r)ProtocolVersionNumberr=N)r#r$r%pvnor r r r rrrc@s<eZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd S)KerberosMessageTypesrrrrrrrrrrrr"N)r#r$r% KRB_AS_REQ KRB_AS_REP KRB_TGS_REQ KRB_TGS_REP KRB_AP_REQ KRB_AP_REPKRB_RESERVED16KRB_RESERVED17r1r2r3r9r r r r rsrc@r:) NameTypesrrrrr<r=r>r?rrrr@rArBN)r#r$r%KRB_NT_UNKNOWNKRB_NT_PRINCIPALKRB_NT_SRV_INSTKRB_NT_SRV_HSTKRB_NT_SRV_XHST KRB_NT_UIDKRB_NT_X500_PRINCIPALKRB_NT_SMTP_NAMEKRB_NT_ENTERPRISEKRB_NT_WELLKNOWNKRB_NT_SRV_HST_DOMAINKRB_NT_MS_PRINCIPALKRB_NT_MS_PRINCIPAL_AND_IDKRB_NT_ENT_PRINCIPAL_AND_IDr r r r rsrc@s@eZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ!d Z"d!Z#d"Z$d#Z%d$Z&d%Z'd&Z(d'Z)d(Z*d)Z+d*Z,d+Z-d,Z.d-Z/d.Z0d/Z1d0Z2d1Z3d2Z4d3Z5d4Z6d5Z7d6Z8d7Z9d8Z:d9Z;d:Zd=Z?d>Z@d?ZAd@ZBdAZCdBZDdCZEdDZFdEZGdFZHdGZIdHZJdIZKdJZLdKZMdLZNdMZOdNS)O ErrorCodesrrrrr<r=r>r?rRrSrrrrrrrrrTrrrrUrVrrrr r!rWr!"#$%&'(rX*,-./01234<=>?rrrCDEFGHIJKLMNOPQZ[\]N)Pr#r$r% KDC_ERR_NONEKDC_ERR_NAME_EXPKDC_ERR_SERVICE_EXPKDC_ERR_BAD_PVNOKDC_ERR_C_OLD_MAST_KVNOKDC_ERR_S_OLD_MAST_KVNOKDC_ERR_C_PRINCIPAL_UNKNOWNKDC_ERR_S_PRINCIPAL_UNKNOWNKDC_ERR_PRINCIPAL_NOT_UNIQUEKDC_ERR_NULL_KEYKDC_ERR_CANNOT_POSTDATEKDC_ERR_NEVER_VALIDKDC_ERR_POLICYKDC_ERR_BADOPTIONKDC_ERR_ETYPE_NOSUPPKDC_ERR_SUMTYPE_NOSUPPKDC_ERR_PADATA_TYPE_NOSUPPKDC_ERR_TRTYPE_NOSUPPKDC_ERR_CLIENT_REVOKEDKDC_ERR_SERVICE_REVOKEDKDC_ERR_TGT_REVOKEDKDC_ERR_CLIENT_NOTYETKDC_ERR_SERVICE_NOTYETKDC_ERR_KEY_EXPIREDKDC_ERR_PREAUTH_FAILEDKDC_ERR_PREAUTH_REQUIREDKDC_ERR_SERVER_NOMATCHKDC_ERR_MUST_USE_USER2USERKDC_ERR_PATH_NOT_ACCEPTEDKDC_ERR_SVC_UNAVAILABLEKRB_AP_ERR_BAD_INTEGRITYKRB_AP_ERR_TKT_EXPIREDKRB_AP_ERR_TKT_NYVKRB_AP_ERR_REPEATKRB_AP_ERR_NOT_USKRB_AP_ERR_BADMATCHKRB_AP_ERR_SKEWKRB_AP_ERR_BADADDRKRB_AP_ERR_BADVERSIONKRB_AP_ERR_MSG_TYPEKRB_AP_ERR_MODIFIEDKRB_AP_ERR_BADORDERKRB_AP_ERR_BADKEYVERKRB_AP_ERR_NOKEYKRB_AP_ERR_MUT_FAILKRB_AP_ERR_BADDIRECTIONKRB_AP_ERR_METHODKRB_AP_ERR_BADSEQKRB_AP_ERR_INAPP_CKSUMKRB_AP_PATH_NOT_ACCEPTEDKRB_ERR_RESPONSE_TOO_BIGKRB_ERR_GENERICKRB_ERR_FIELD_TOOLONGKDC_ERROR_CLIENT_NOT_TRUSTEDKDC_ERROR_KDC_NOT_TRUSTEDKDC_ERROR_INVALID_SIGKDC_ERR_KEY_TOO_WEAKKDC_ERR_CERTIFICATE_MISMATCHKRB_AP_ERR_NO_TGTKDC_ERR_WRONG_REALM KRB_AP_ERR_USER_TO_USER_REQUIREDKDC_ERR_CANT_VERIFY_CERTIFICATEKDC_ERR_INVALID_CERTIFICATEKDC_ERR_REVOKED_CERTIFICATE!KDC_ERR_REVOCATION_STATUS_UNKNOWN%KDC_ERR_REVOCATION_STATUS_UNAVAILABLEKDC_ERR_CLIENT_NAME_MISMATCHKDC_ERR_KDC_NAME_MISMATCH KDC_ERR_INCONSISTENT_KEY_PURPOSE#KDC_ERR_DIGEST_IN_CERT_NOT_ACCEPTED$KDC_ERR_PA_CHECKSUM_MUST_BE_INCLUDED*KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED+KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTEDKDC_ERR_PREAUTH_EXPIRED"KDC_ERR_MORE_PREAUTH_DATA_REQUIRED&KDC_ERR_PREAUTH_BAD_AUTHENTICATION_SET%KDC_ERR_UNKNOWN_CRITICAL_FAST_OPTIONSr r r r rsr)rzNo errorr)rz&Client's entry in database has expiredr)rz&Server's entry in database has expiredr)rz/Requested protocol version number not supportedr<)rz(Client's key encrypted in old master keyr=)rz(Server's key encrypted in old master keyr>)rz%Client not found in Kerberos databaser?)rz%Server not found in Kerberos databaserR)r z&Multiple principal entries in databaserS)r z#The client or server has a null keyr)r z"Ticket not eligible for postdatingr)r z*Requested starttime is later than end timer)r zKDC policy rejects requestr)rz'KDC cannot accommodate requested optionr)rz&KDC has no support for encryption typer)rz$KDC has no support for checksum type)rz"KDC has no support for padata type)rz%KDC has no support for transited typer)rz%Clients credentials have been revokedrT)rz(Credentials for server have been revokedr)rzTGT has been revokedr)rz%Client not yet valid; try again laterr)rz%Server not yet valid; try again laterrU)rz.Password has expired; change password to resetrV)rz*Pre-authentication information was invalidr)rz&Additional pre-authentication requiredr)rz'Requested server and ticket don't matchr)rz)Server principal valid for user2user onlyr )rz!KDC Policy rejects transited pathr!)rzA service is not availablerW)rz)Integrity check on decrypted field failedr)r zTicket expiredr)r!zTicket not yet validr)r"zRequest is a replayr)r#zThe ticket isn't for usr)r$z$Ticket and authenticator don't matchr)r%zClock skew too greatr)r&zIncorrect net addressr)r'zProtocol version mismatchr)r(zInvalid msg typerX)r)zMessage stream modifiedr)r*zMessage out of orderr)r+z)Specified version of key is not availabler)r,zService key not availabler)r-zMutual authentication failedr)r.zIncorrect message directionr)r/z*Alternative authentication method requiredr)r0z$Incorrect sequence number in messager)r1z)Inappropriate type of checksum in messager)r2zPolicy rejects transited pathr)r3z(Response too big for UDP; retry with TCPr)r4z%Generic error (description in e-text)r)r5z)Field is too long for this implementationr)r6Reserved for PKINITr)r7rNr)r8rNr)r9rNr)r:rNr)r;z)No TGT available to validate USER-TO-USERr)r<zReserved for future user)r=zTicket must be for USER-TO-USERr)r>rNr)r?rNr)r@rNr)rArNr)rBrNr)rCrNr)rDrN)rEz;Certificate cannot be used for PKINIT client authentication)rFzSDigest algorithm for the public key in the certificate is not acceptable by the KDC)rGz2The paChecksum filed in the request is not present)rHzPThe digest algorithm used by the id-pkinit-authData is not acceptable by the KDC)rIzFThe KDC does not support the public key encryption key delivery method)rJzPre-authentication has expired)rKz.Additional pre-authentication data is required)rLz@KDC cannot accommodate requested pre-authentication data element)rMzUnknown critical option) rrrrrrrrrc@sLeZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdS) TicketFlagsrrrrr<r=r>r?rRrSrrrrrrN)r#r$r%reserved forwardable forwarded proxiableproxy may_postdate postdatedinvalid renewableinitial pre_authent hw_authenttransited_policy_checkedok_as_delegate enc_pa_rep anonymousr r r r rOs"rOc@`eZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZdZdZdZdS) KDCOptionsrrrrr<r=r>r?rRrSrrrrrrrrr r"rWN)r#r$r%rPrQrRrSrTallow_postdaterVunused7rXunused9unused10opt_hardware_authunused12unused13cname_in_addl_tkt canonicalizedisable_transited_check renewable_okenc_tkt_in_skeyrenewvalidater r r r ra,rac@seZdZdZdZdZdS) APOptionsrrrN)r#r$r%rPuse_session_keymutual_requiredr r r r rqsrqc@seZdZdZdZdZdZdS) PAPacOptionsrrrrN)r#r$r%claims branch_awareforward_to_full_dc%resource_based_constrained_delegationr r r r rts rtc@r`)EncryptionTypesrrrr<r=r>r?rSrrrrrrrrrrUrVriyN)r#r$r% des_cbc_crc des_cbc_md4 des_cbc_md5 _reserved_4 des3_cbc_md5 _reserved_6 des3_cbc_sha1dsaWithSHA1_CmsOIDmd5WithRSAEncryption_CmsOIDsha1WithRSAEncryption_CmsOID rc2CBC_EnvOIDrsaEncryption_EnvOIDrsaES_OAEP_ENV_OIDdes_ede3_cbc_Env_OIDdes3_cbc_sha1_kdaes128_cts_hmac_sha1_96aes256_cts_hmac_sha1_96rc4_hmac rc4_hmac_expsubkey_keymaterialrc4_hmac_old_expr r r r ryrpryc@s$eZdZdZdZdZdZdZdZdS) ChecksumTypesrRr<ivrrrN) r#r$r% rsa_md5_des rsa_md4_deshmac_md5hmac_sha1_des3_kdhmac_sha1_96_aes128hmac_sha1_96_aes256r r r r rsrN)impacket.dcerpc.v5.enumrrrr;rQrKERB_NON_KERB_SALTKERB_NON_KERB_CKSUM_SALTrrrrrrERROR_MESSAGESrOrarqrtryrr r r r sN  1 v      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEP