Gecko [ nbspublicschool.com ]

Name	Size	Permission
__init__.py	3.83 KB	-rw-r--r--
__init__.pyc	3.69 KB	-rw-r--r--
__init__.pyo	3.69 KB	-rw-r--r--
_version.py	80 B	-rw-r--r--
_version.pyc	270 B	-rw-r--r--
_version.pyo	270 B	-rw-r--r--
_winapi.py	10.91 KB	-rw-r--r--
_winapi.pyc	11.62 KB	-rw-r--r--
_winapi.pyo	11.48 KB	-rw-r--r--
agent.py	12.29 KB	-rw-r--r--
agent.pyc	15.79 KB	-rw-r--r--
agent.pyo	15.79 KB	-rw-r--r--
auth_handler.py	26.4 KB	-rw-r--r--
auth_handler.pyc	18.3 KB	-rw-r--r--
auth_handler.pyo	18.3 KB	-rw-r--r--
ber.py	4.16 KB	-rw-r--r--
ber.pyc	4.1 KB	-rw-r--r--
ber.pyo	4.1 KB	-rw-r--r--
buffered_pipe.py	7.33 KB	-rw-r--r--
buffered_pipe.pyc	6.98 KB	-rw-r--r--
buffered_pipe.pyo	6.98 KB	-rw-r--r--
channel.py	46.77 KB	-rw-r--r--
channel.pyc	47.31 KB	-rw-r--r--
channel.pyo	47.24 KB	-rw-r--r--
client.py	27.13 KB	-rw-r--r--
client.pyc	23.24 KB	-rw-r--r--
client.pyo	23.24 KB	-rw-r--r--
common.py	7.41 KB	-rw-r--r--
common.pyc	5.97 KB	-rw-r--r--
common.pyo	5.97 KB	-rw-r--r--
compress.py	1.22 KB	-rw-r--r--
compress.pyc	1.43 KB	-rw-r--r--
compress.pyo	1.43 KB	-rw-r--r--
config.py	10.78 KB	-rw-r--r--
config.pyc	7.55 KB	-rw-r--r--
config.pyo	7.55 KB	-rw-r--r--
dsskey.py	7.9 KB	-rw-r--r--
dsskey.pyc	7.84 KB	-rw-r--r--
dsskey.pyo	7.84 KB	-rw-r--r--
ecdsakey.py	9.37 KB	-rw-r--r--
ecdsakey.pyc	10.3 KB	-rw-r--r--
ecdsakey.pyo	10.3 KB	-rw-r--r--
file.py	18.76 KB	-rw-r--r--
file.pyc	16 KB	-rw-r--r--
file.pyo	16 KB	-rw-r--r--
hostkeys.py	12.08 KB	-rw-r--r--
hostkeys.pyc	13.54 KB	-rw-r--r--
hostkeys.pyo	13.49 KB	-rw-r--r--
kex_gex.py	9.67 KB	-rw-r--r--
kex_gex.pyc	7.73 KB	-rw-r--r--
kex_gex.pyo	7.73 KB	-rw-r--r--
kex_group1.py	5.42 KB	-rw-r--r--
kex_group1.pyc	4.55 KB	-rw-r--r--
kex_group1.pyo	4.55 KB	-rw-r--r--
kex_group14.py	1.67 KB	-rw-r--r--
kex_group14.pyc	1019 B	-rw-r--r--
kex_group14.pyo	1019 B	-rw-r--r--
kex_gss.py	24.28 KB	-rw-r--r--
kex_gss.pyc	19.46 KB	-rw-r--r--
kex_gss.pyo	19.46 KB	-rw-r--r--
message.py	9.29 KB	-rw-r--r--
message.pyc	11.68 KB	-rw-r--r--
message.pyo	11.68 KB	-rw-r--r--
packet.py	18.95 KB	-rw-r--r--
packet.pyc	15.93 KB	-rw-r--r--
packet.pyo	15.93 KB	-rw-r--r--
pipe.py	3.91 KB	-rw-r--r--
pipe.pyc	5.37 KB	-rw-r--r--
pipe.pyo	5.37 KB	-rw-r--r--
pkey.py	13.01 KB	-rw-r--r--
pkey.pyc	13.85 KB	-rw-r--r--
pkey.pyo	13.85 KB	-rw-r--r--
primes.py	4.83 KB	-rw-r--r--
primes.pyc	3.36 KB	-rw-r--r--
primes.pyo	3.36 KB	-rw-r--r--
proxy.py	4.38 KB	-rw-r--r--
proxy.pyc	3.98 KB	-rw-r--r--
proxy.pyo	3.98 KB	-rw-r--r--
py3compat.py	3.87 KB	-rw-r--r--
py3compat.pyc	5.59 KB	-rw-r--r--
py3compat.pyo	5.51 KB	-rw-r--r--
resource.py	2.49 KB	-rw-r--r--
resource.pyc	2.21 KB	-rw-r--r--
resource.pyo	2.21 KB	-rw-r--r--
rsakey.py	5.43 KB	-rw-r--r--
rsakey.pyc	6.37 KB	-rw-r--r--
rsakey.pyo	6.32 KB	-rw-r--r--
server.py	29.38 KB	-rw-r--r--
server.pyc	31.6 KB	-rw-r--r--
server.pyo	31.6 KB	-rw-r--r--
sftp.py	6.06 KB	-rw-r--r--
sftp.pyc	5.66 KB	-rw-r--r--
sftp.pyo	5.66 KB	-rw-r--r--
sftp_attr.py	7.7 KB	-rw-r--r--
sftp_attr.pyc	6.94 KB	-rw-r--r--
sftp_attr.pyo	6.94 KB	-rw-r--r--
sftp_client.py	31.47 KB	-rw-r--r--
sftp_client.pyc	31.51 KB	-rw-r--r--
sftp_client.pyo	31.51 KB	-rw-r--r--
sftp_file.py	19.59 KB	-rw-r--r--
sftp_file.pyc	19.21 KB	-rw-r--r--
sftp_file.pyo	19.21 KB	-rw-r--r--
sftp_handle.py	7.34 KB	-rw-r--r--
sftp_handle.pyc	7.43 KB	-rw-r--r--
sftp_handle.pyo	7.43 KB	-rw-r--r--
sftp_server.py	18 KB	-rw-r--r--
sftp_server.pyc	14.2 KB	-rw-r--r--
sftp_server.pyo	14.2 KB	-rw-r--r--
sftp_si.py	11.65 KB	-rw-r--r--
sftp_si.pyc	12.51 KB	-rw-r--r--
sftp_si.pyo	12.51 KB	-rw-r--r--
ssh_exception.py	6.03 KB	-rw-r--r--
ssh_exception.pyc	7.11 KB	-rw-r--r--
ssh_exception.pyo	7.11 KB	-rw-r--r--
ssh_gss.py	21.39 KB	-rw-r--r--
ssh_gss.pyc	18.78 KB	-rw-r--r--
ssh_gss.pyo	18.78 KB	-rw-r--r--
transport.py	103.08 KB	-rw-r--r--
transport.pyc	89.02 KB	-rw-r--r--
transport.pyo	89.02 KB	-rw-r--r--
util.py	8.24 KB	-rw-r--r--
util.pyc	9.95 KB	-rw-r--r--
util.pyo	9.95 KB	-rw-r--r--
win_pageant.py	4.11 KB	-rw-r--r--
win_pageant.pyc	4.2 KB	-rw-r--r--
win_pageant.pyo	4.2 KB	-rw-r--r--

Code Editor : ssh_gss.py

# Copyright (C) 2013-2014 science + computing ag
# Author: Sebastian Deiss <sebastian.deiss@t-online.de>
#
#
# This file is part of paramiko.
#
# Paramiko is free software; you can redistribute it and/or modify it under the
# terms of the GNU Lesser General Public License as published by the Free
# Software Foundation; either version 2.1 of the License, or (at your option)
# any later version.
#
# Paramiko is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
# A PARTICULAR PURPOSE.  See the GNU Lesser General Public License for more
# details.
#
# You should have received a copy of the GNU Lesser General Public License
# along with Paramiko; if not, write to the Free Software Foundation, Inc.,
# 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA.

"""
This module provides GSS-API / SSPI  authentication as defined in :rfc:`4462`.

.. note:: Credential delegation is not supported in server mode.

.. seealso:: :doc:`/api/kex_gss`

.. versionadded:: 1.15
"""

import struct
import os
import sys

"""
:var bool GSS_AUTH_AVAILABLE:
    Constraint that indicates if GSS-API / SSPI is available.
"""
GSS_AUTH_AVAILABLE = True

from pyasn1.type.univ import ObjectIdentifier
from pyasn1.codec.der import encoder, decoder

from paramiko.common import MSG_USERAUTH_REQUEST
from paramiko.ssh_exception import SSHException

"""
:var str _API: Constraint for the used API
"""
_API = "MIT"

try:
    import gssapi
except (ImportError, OSError):
    try:
        import sspicon
        import sspi
        _API = "SSPI"
    except ImportError:
        GSS_AUTH_AVAILABLE = False
        _API = None

def GSSAuth(auth_method, gss_deleg_creds=True):
    """
    Provide SSH2 GSS-API / SSPI authentication.

:param str auth_method: The name of the SSH authentication mechanism
                            (gssapi-with-mic or gss-keyex)
    :param bool gss_deleg_creds: Delegate client credentials or not.
                                 We delegate credentials by default.
    :return: Either an `._SSH_GSSAPI` (Unix) object or an
             `_SSH_SSPI` (Windows) object
    :rtype: Object

:raise ImportError: If no GSS-API / SSPI module could be imported.

:see: `RFC 4462 <http://www.ietf.org/rfc/rfc4462.txt>`_
    :note: Check for the available API and return either an `._SSH_GSSAPI`
           (MIT GSSAPI) object or an `._SSH_SSPI` (MS SSPI) object. If you
           get python-gssapi working on Windows, python-gssapi
           will be used and a `._SSH_GSSAPI` object will be returned.
           If there is no supported API available,
           ``None`` will be returned.
    """
    if _API == "MIT":
        return _SSH_GSSAPI(auth_method, gss_deleg_creds)
    elif _API == "SSPI" and os.name == "nt":
        return _SSH_SSPI(auth_method, gss_deleg_creds)
    else:
        raise ImportError("Unable to import a GSS-API / SSPI module!")

class _SSH_GSSAuth(object):
    """
    Contains the shared variables and methods of `._SSH_GSSAPI` and
    `._SSH_SSPI`.
    """
    def __init__(self, auth_method, gss_deleg_creds):
        """
        :param str auth_method: The name of the SSH authentication mechanism
                                (gssapi-with-mic or gss-keyex)
        :param bool gss_deleg_creds: Delegate client credentials or not
        """
        self._auth_method = auth_method
        self._gss_deleg_creds = gss_deleg_creds
        self._gss_host = None
        self._username = None
        self._session_id = None
        self._service = "ssh-connection"
        """
        OpenSSH supports Kerberos V5 mechanism only for GSS-API authentication,
        so we also support the krb5 mechanism only.
        """
        self._krb5_mech = "1.2.840.113554.1.2.2"

# client mode
        self._gss_ctxt = None
        self._gss_ctxt_status = False

# server mode
        self._gss_srv_ctxt = None
        self._gss_srv_ctxt_status = False
        self.cc_file = None

def set_service(self, service):
        """
        This is just a setter to use a non default service.
        I added this method, because RFC 4462 doesn't specify "ssh-connection"
        as the only service value.

:param str service: The desired SSH service
        :rtype: Void
        """
        if service.find("ssh-"):
            self._service = service

def set_username(self, username):
        """
        Setter for C{username}. If GSS-API Key Exchange is performed, the
        username is not set by C{ssh_init_sec_context}.

:param str username: The name of the user who attempts to login
        :rtype: Void
        """
        self._username = username

def ssh_gss_oids(self, mode="client"):
        """
        This method returns a single OID, because we only support the
        Kerberos V5 mechanism.

:param str mode: Client for client mode and server for server mode
        :return: A byte sequence containing the number of supported
                 OIDs, the length of the OID and the actual OID encoded with
                 DER
        :rtype: Bytes
        :note: In server mode we just return the OID length and the DER encoded
               OID.
        """
        OIDs = self._make_uint32(1)
        krb5_OID = encoder.encode(ObjectIdentifier(self._krb5_mech))
        OID_len = self._make_uint32(len(krb5_OID))
        if mode == "server":
            return OID_len + krb5_OID
        return OIDs + OID_len + krb5_OID

def ssh_check_mech(self, desired_mech):
        """
        Check if the given OID is the Kerberos V5 OID (server mode).

:param str desired_mech: The desired GSS-API mechanism of the client
        :return: ``True`` if the given OID is supported, otherwise C{False}
        :rtype: Boolean
        """
        mech, __ = decoder.decode(desired_mech)
        if mech.__str__() != self._krb5_mech:
            return False
        return True

# Internals
    #--------------------------------------------------------------------------
    def _make_uint32(self, integer):
        """
        Create a 32 bit unsigned integer (The byte sequence of an integer).

:param int integer: The integer value to convert
        :return: The byte sequence of an 32 bit integer
        :rtype: Bytes
        """
        return struct.pack("!I", integer)

def _ssh_build_mic(self, session_id, username, service, auth_method):
        """
        Create the SSH2 MIC filed for gssapi-with-mic.

:param str session_id: The SSH session ID
        :param str username: The name of the user who attempts to login
        :param str service: The requested SSH service
        :param str auth_method: The requested SSH authentication mechanism
        :return: The MIC as defined in RFC 4462. The contents of the
                 MIC field are:
                 string    session_identifier,
                 byte      SSH_MSG_USERAUTH_REQUEST,
                 string    user-name,
                 string    service (ssh-connection),
                 string    authentication-method
                           (gssapi-with-mic or gssapi-keyex)
        :rtype: Bytes
        """
        mic = self._make_uint32(len(session_id))
        mic += session_id
        mic += struct.pack('B', MSG_USERAUTH_REQUEST)
        mic += self._make_uint32(len(username))
        mic += username.encode()
        mic += self._make_uint32(len(service))
        mic += service.encode()
        mic += self._make_uint32(len(auth_method))
        mic += auth_method.encode()
        return mic

class _SSH_GSSAPI(_SSH_GSSAuth):
    """
    Implementation of the GSS-API MIT Kerberos Authentication for SSH2.

:see: `.GSSAuth`
    """
    def __init__(self, auth_method, gss_deleg_creds):
        """
        :param str auth_method: The name of the SSH authentication mechanism
                                (gssapi-with-mic or gss-keyex)
        :param bool gss_deleg_creds: Delegate client credentials or not
        """
        _SSH_GSSAuth.__init__(self, auth_method, gss_deleg_creds)

if self._gss_deleg_creds:
            self._gss_flags = (gssapi.C_PROT_READY_FLAG,
                               gssapi.C_INTEG_FLAG,
                               gssapi.C_MUTUAL_FLAG,
                               gssapi.C_DELEG_FLAG)
        else:
            self._gss_flags = (gssapi.C_PROT_READY_FLAG,
                               gssapi.C_INTEG_FLAG,
                               gssapi.C_MUTUAL_FLAG)

def ssh_init_sec_context(self, target, desired_mech=None,
                             username=None, recv_token=None):
        """
        Initialize a GSS-API context.

:param str username: The name of the user who attempts to login
        :param str target: The hostname of the target to connect to
        :param str desired_mech: The negotiated GSS-API mechanism
                                 ("pseudo negotiated" mechanism, because we
                                 support just the krb5 mechanism :-))
        :param str recv_token: The GSS-API token received from the Server
        :raise SSHException: Is raised if the desired mechanism of the client
                             is not supported
        :return: A ``String`` if the GSS-API has returned a token or ``None`` if
                 no token was returned
        :rtype: String or None
        """
        self._username = username
        self._gss_host = target
        targ_name = gssapi.Name("host@" + self._gss_host,
                                gssapi.C_NT_HOSTBASED_SERVICE)
        ctx = gssapi.Context()
        ctx.flags = self._gss_flags
        if desired_mech is None:
            krb5_mech = gssapi.OID.mech_from_string(self._krb5_mech)
        else:
            mech, __ = decoder.decode(desired_mech)
            if mech.__str__() != self._krb5_mech:
                raise SSHException("Unsupported mechanism OID.")
            else:
                krb5_mech = gssapi.OID.mech_from_string(self._krb5_mech)
        token = None
        try:
            if recv_token is None:
                self._gss_ctxt = gssapi.InitContext(peer_name=targ_name,
                                                    mech_type=krb5_mech,
                                                    req_flags=ctx.flags)
                token = self._gss_ctxt.step(token)
            else:
                token = self._gss_ctxt.step(recv_token)
        except gssapi.GSSException:
            raise gssapi.GSSException("{0} Target: {1}".format(sys.exc_info()[1],
                                                               self._gss_host))
        self._gss_ctxt_status = self._gss_ctxt.established
        return token

def ssh_get_mic(self, session_id, gss_kex=False):
        """
        Create the MIC token for a SSH2 message.

:param str session_id: The SSH session ID
        :param bool gss_kex: Generate the MIC for GSS-API Key Exchange or not
        :return: gssapi-with-mic:
                 Returns the MIC token from GSS-API for the message we created
                 with ``_ssh_build_mic``.
                 gssapi-keyex:
                 Returns the MIC token from GSS-API with the SSH session ID as
                 message.
        :rtype: String
        :see: `._ssh_build_mic`
        """
        self._session_id = session_id
        if not gss_kex:
            mic_field = self._ssh_build_mic(self._session_id,
                                            self._username,
                                            self._service,
                                            self._auth_method)
            mic_token = self._gss_ctxt.get_mic(mic_field)
        else:
            # for key exchange with gssapi-keyex
            mic_token = self._gss_srv_ctxt.get_mic(self._session_id)
        return mic_token

def ssh_accept_sec_context(self, hostname, recv_token, username=None):
        """
        Accept a GSS-API context (server mode).

:param str hostname: The servers hostname
        :param str username: The name of the user who attempts to login
        :param str recv_token: The GSS-API Token received from the server,
                               if it's not the initial call.
        :return: A ``String`` if the GSS-API has returned a token or ``None``
                if no token was returned
        :rtype: String or None
        """
        # hostname and username are not required for GSSAPI, but for SSPI
        self._gss_host = hostname
        self._username = username
        if self._gss_srv_ctxt is None:
            self._gss_srv_ctxt = gssapi.AcceptContext()
        token = self._gss_srv_ctxt.step(recv_token)
        self._gss_srv_ctxt_status = self._gss_srv_ctxt.established
        return token

def ssh_check_mic(self, mic_token, session_id, username=None):
        """
        Verify the MIC token for a SSH2 message.

:param str mic_token: The MIC token received from the client
        :param str session_id: The SSH session ID
        :param str username: The name of the user who attempts to login
        :return: None if the MIC check was successful
        :raises gssapi.GSSException: if the MIC check failed
        """
        self._session_id = session_id
        self._username = username
        if self._username is not None:
            # server mode
            mic_field = self._ssh_build_mic(self._session_id,
                                        self._username,
                                        self._service,
                                        self._auth_method)
            self._gss_srv_ctxt.verify_mic(mic_field, mic_token)
        else:
            # for key exchange with gssapi-keyex
            # client mode
            self._gss_ctxt.verify_mic(self._session_id,
                                      mic_token)

@property
    def credentials_delegated(self):
        """
        Checks if credentials are delegated (server mode).

:return: ``True`` if credentials are delegated, otherwise ``False``
        :rtype: bool
        """
        if self._gss_srv_ctxt.delegated_cred is not None:
            return True
        return False

def save_client_creds(self, client_token):
        """
        Save the Client token in a file. This is used by the SSH server
        to store the client credentials if credentials are delegated
        (server mode).

:param str client_token: The GSS-API token received form the client
        :raise NotImplementedError: Credential delegation is currently not
                                    supported in server mode
        """
        raise NotImplementedError

class _SSH_SSPI(_SSH_GSSAuth):
    """
    Implementation of the Microsoft SSPI Kerberos Authentication for SSH2.

if self._gss_deleg_creds:
            self._gss_flags = sspicon.ISC_REQ_INTEGRITY |\
                              sspicon.ISC_REQ_MUTUAL_AUTH |\
                              sspicon.ISC_REQ_DELEGATE
        else:
            self._gss_flags = sspicon.ISC_REQ_INTEGRITY |\
                              sspicon.ISC_REQ_MUTUAL_AUTH

def ssh_init_sec_context(self, target, desired_mech=None,
                             username=None, recv_token=None):
        """
        Initialize a SSPI context.

:param str username: The name of the user who attempts to login
        :param str target: The FQDN of the target to connect to
        :param str desired_mech: The negotiated SSPI mechanism
                                 ("pseudo negotiated" mechanism, because we
                                 support just the krb5 mechanism :-))
        :param recv_token: The SSPI token received from the Server
        :raise SSHException: Is raised if the desired mechanism of the client
                             is not supported
        :return: A ``String`` if the SSPI has returned a token or ``None`` if
                 no token was returned
        :rtype: String or None
        """
        self._username = username
        self._gss_host = target
        error = 0
        targ_name = "host/" + self._gss_host
        if desired_mech is not None:
            mech, __ = decoder.decode(desired_mech)
            if mech.__str__() != self._krb5_mech:
                raise SSHException("Unsupported mechanism OID.")
        try:
            if recv_token is None:
                self._gss_ctxt = sspi.ClientAuth("Kerberos",
                                                 scflags=self._gss_flags,
                                                 targetspn=targ_name)
            error, token = self._gss_ctxt.authorize(recv_token)
            token = token[0].Buffer
        except:
            raise Exception("{0}, Target: {1}".format(sys.exc_info()[1],
                                                      self._gss_host))
        if error == 0:
            """
            if the status is GSS_COMPLETE (error = 0) the context is fully
            established an we can set _gss_ctxt_status to True.
            """
            self._gss_ctxt_status = True
            token = None
            """
            You won't get another token if the context is fully established,
            so i set token to None instead of ""
            """
        return token

def ssh_get_mic(self, session_id, gss_kex=False):
        """
        Create the MIC token for a SSH2 message.

:param str session_id: The SSH session ID
        :param bool gss_kex: Generate the MIC for Key Exchange with SSPI or not
        :return: gssapi-with-mic:
                 Returns the MIC token from SSPI for the message we created
                 with ``_ssh_build_mic``.
                 gssapi-keyex:
                 Returns the MIC token from SSPI with the SSH session ID as
                 message.
        :rtype: String
        :see: `._ssh_build_mic`
        """
        self._session_id = session_id
        if not gss_kex:
            mic_field = self._ssh_build_mic(self._session_id,
                                            self._username,
                                            self._service,
                                            self._auth_method)
            mic_token = self._gss_ctxt.sign(mic_field)
        else:
            # for key exchange with gssapi-keyex
            mic_token = self._gss_srv_ctxt.sign(self._session_id)
        return mic_token

def ssh_accept_sec_context(self, hostname, username, recv_token):
        """
        Accept a SSPI context (server mode).

:param str hostname: The servers FQDN
        :param str username: The name of the user who attempts to login
        :param str recv_token: The SSPI Token received from the server,
                               if it's not the initial call.
        :return: A ``String`` if the SSPI has returned a token or ``None`` if
                 no token was returned
        :rtype: String or None
        """
        self._gss_host = hostname
        self._username = username
        targ_name = "host/" + self._gss_host
        self._gss_srv_ctxt = sspi.ServerAuth("Kerberos", spn=targ_name)
        error, token = self._gss_srv_ctxt.authorize(recv_token)
        token = token[0].Buffer
        if error == 0:
            self._gss_srv_ctxt_status = True
            token = None
        return token

def ssh_check_mic(self, mic_token, session_id, username=None):
        """
        Verify the MIC token for a SSH2 message.

:param str mic_token: The MIC token received from the client
        :param str session_id: The SSH session ID
        :param str username: The name of the user who attempts to login
        :return: None if the MIC check was successful
        :raises sspi.error: if the MIC check failed
        """
        self._session_id = session_id
        self._username = username
        if username is not None:
            # server mode
            mic_field = self._ssh_build_mic(self._session_id,
                                            self._username,
                                            self._service,
                                            self._auth_method)
            # Verifies data and its signature.  If verification fails, an 
            # sspi.error will be raised.
            self._gss_srv_ctxt.verify(mic_field, mic_token)
        else:
            # for key exchange with gssapi-keyex
            # client mode
            # Verifies data and its signature.  If verification fails, an 
            # sspi.error will be raised.
            self._gss_ctxt.verify(self._session_id, mic_token)

@property
    def credentials_delegated(self):
        """
        Checks if credentials are delegated (server mode).

:return: ``True`` if credentials are delegated, otherwise ``False``
        :rtype: Boolean
        """
        return (
                self._gss_flags & sspicon.ISC_REQ_DELEGATE
                ) and (
                self._gss_srv_ctxt_status or (self._gss_flags)
           )

def save_client_creds(self, client_token):
        """
        Save the Client token in a file. This is used by the SSH server
        to store the client credentails if credentials are delegated
        (server mode).

:param str client_token: The SSPI token received form the client
        :raise NotImplementedError: Credential delegation is currently not
                                    supported in server mode
        """
        raise NotImplementedError

${this.title}

Code Editor : ssh_gss.py