晋太元中,武陵人捕鱼为业。缘溪行,忘路之远近。忽逢桃花林,夹岸数百步,中无杂树,芳草鲜美,落英缤纷。渔人甚异之,复前行,欲穷其林。 林尽水源,便得一山,山有小口,仿佛若有光。便舍船,从口入。初极狭,才通人。复行数十步,豁然开朗。土地平旷,屋舍俨然,有良田、美池、桑竹之属。阡陌交通,鸡犬相闻。其中往来种作,男女衣着,悉如外人。黄发垂髫,并怡然自乐。 见渔人,乃大惊,问所从来。具答之。便要还家,设酒杀鸡作食。村中闻有此人,咸来问讯。自云先世避秦时乱,率妻子邑人来此绝境,不复出焉,遂与外人间隔。问今是何世,乃不知有汉,无论魏晋。此人一一为具言所闻,皆叹惋。余人各复延至其家,皆出酒食。停数日,辞去。此中人语云:“不足为外人道也。”(间隔 一作:隔绝) 既出,得其船,便扶向路,处处志之。及郡下,诣太守,说如此。太守即遣人随其往,寻向所志,遂迷,不复得路。 南阳刘子骥,高尚士也,闻之,欣然规往。未果,寻病终。后遂无问津者。
|
Server : Apache System : Linux srv.rainic.com 4.18.0-553.47.1.el8_10.x86_64 #1 SMP Wed Apr 2 05:45:37 EDT 2025 x86_64 User : rainic ( 1014) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /usr/share/crypto-policies/python/policygenerators/ |
Upload File : |
# SPDX-License-Identifier: LGPL-2.1-or-later
# Copyright (c) 2019 Red Hat, Inc.
# Copyright (c) 2019 Tomáš Mráz <tmraz@fedoraproject.org>
from .configgenerator import ConfigGenerator
class KRB5Generator(ConfigGenerator):
CONFIG_NAME = 'krb5'
SCOPES = {'kerberos', 'krb5'}
cipher_map = {
'CAMELLIA-256-CBC':'camellia256-cts-cmac',
'CAMELLIA-128-CBC':'camellia128-cts-cmac',
'CAMELLIA-128-CTS':'camellia128-cts-cmac'
}
cipher_mac_map = {
'AES-256-CBC-HMAC-SHA1':'aes256-cts-hmac-sha1-96',
'AES-256-CBC-HMAC-SHA2-384':'aes256-cts-hmac-sha384-192',
'AES-128-CBC-HMAC-SHA1':'aes128-cts-hmac-sha1-96',
'AES-128-CBC-HMAC-SHA2-256':'aes128-cts-hmac-sha256-128',
# 'RC4-128-HMAC-MD5':'arcfour-hmac-md5' # forced last, see below
}
@classmethod
def generate_config(cls, policy):
p = policy.enabled
sep = ' '
cfg = '[libdefaults]\n'
cfg += 'permitted_enctypes = '
s = ''
for j in p['mac']:
for i in p['cipher']:
try:
s = cls.append(s, cls.cipher_mac_map[i + '-' + j], sep)
except KeyError:
pass
for i in p['cipher']:
try:
s = cls.append(s, cls.cipher_map[i], sep)
except KeyError:
pass
if 'RC4-128' in p['cipher'] and 'HMAC-MD5' in p['mac']:
s = cls.append(s, 'arcfour-hmac-md5', sep)
cfg += s + '\n'
# By default libkrb5 sets the min_bits to 2048, don't
# go lower than that.
if policy.integers['min_dh_size'] > 2048:
# $string .= "pkinit_dh_min_bits=$min_dh_size\n";
# krb5.conf only accepts 2048 or 4096
cfg += 'pkinit_dh_min_bits=4096\n'
return cfg
@classmethod
def test_config(cls, config): # pylint: disable=unused-argument
return True