ssh-handler 1.0.1__tar.gz → 1.0.3__tar.gz

{ssh_handler-1.0.1 → ssh_handler-1.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ssh-handler
-Version: 1.0.1
+Version: 1.0.3
 Summary: Extensive SSH/SFTP/SCP/FTP handler built on Paramiko, for test automation, CLIs and PyQt5 tools.
 Author: ssh-handler contributors
 License-Expression: MIT
@@ -20,10 +20,13 @@ Provides-Extra: scp
 Requires-Dist: scp>=0.14; extra == "scp"
 Provides-Extra: gui
 Requires-Dist: PyQt5>=5.15; extra == "gui"
+Provides-Extra: winrm
+Requires-Dist: pywinrm>=0.4.3; extra == "winrm"
 Provides-Extra: all
 Requires-Dist: keyring>=23.0; extra == "all"
 Requires-Dist: scp>=0.14; extra == "all"
 Requires-Dist: PyQt5>=5.15; extra == "all"
+Requires-Dist: pywinrm>=0.4.3; extra == "all"
 Dynamic: license-file
 
 # ssh-handler
@@ -185,6 +188,46 @@ CredentialStore("my_test_lab").set("CORP\\myuser", prompt_password())
 python -m ssh_handler store-credential --user myuser --domain CORP --service my_test_lab
 ```
 
+## RDP-only Windows hosts: auto-enable SSH once (WinRM bootstrap)
+
+A freshly imaged corporate Windows box often has **RDP and WinRM open but no SSH
+server** (port 22 closed). You can't start sshd *over* SSH when SSH is down — but
+if WinRM is reachable, the handler can use it as a one-time bootstrap channel.
+
+Set one flag and connect normally:
+
+```python
+from ssh_handler import SSHHandler, SSHConfig
+
+cfg = SSHConfig(
+    host="10.232.9.22", domain="CORP", username="myuser", password="pw",
+    auto_bootstrap_via_winrm=True,   # if SSH is down but WinRM is up, enable sshd, then retry
+)
+with SSHHandler(cfg) as ssh:         # 1st run: enables sshd over WinRM, then connects
+    print(ssh.run("whoami").stdout)  # every later run: connects straight over SSH
+```
+
+**It's genuinely one-time.** The bootstrap installs the OpenSSH Server capability,
+starts `sshd` with **Automatic** startup, and adds a **persistent** firewall rule —
+so it survives reboots. After the first run, port 22 is already open and the
+handler connects directly over SSH; WinRM is never touched again.
+
+Do it explicitly instead of automatically if you prefer:
+
+```python
+ssh = SSHHandler(cfg)
+ssh.bootstrap_sshd_via_winrm()       # one-time setup
+ssh.connect()
+```
+
+Requirements: `pip install "ssh-handler[winrm]"` (pulls in `pywinrm`; uses NTLM so
+domain creds work without Kerberos), and the account must be a **local
+administrator** on the target. If SSH already works, this code path never runs.
+
+When a connection just fails, the error now self-diagnoses — it probes the SSH and
+RDP ports and tells you *why* (e.g. "Port 22 is closed but RDP (3389) is open … no
+SSH server listening"). Call `ssh.diagnose()` for a pre-flight reachability check.
+
 ## Confidential credentials
 
 | Mechanism | What it does |
@@ -310,8 +353,9 @@ with FTPHandler(FTPConfig(host="ftp.example.com", username="u",
 ssh_handler/
   config.py       SSHConfig, FTPConfig
   credentials.py  Secret, CredentialStore, mask, prompt_password
-  core.py         SSHHandler, ShellSession   (SSH + SFTP + SCP)
+  core.py         SSHHandler, ShellSession   (SSH + SFTP + SCP + diagnose)
   ftp.py          FTPHandler                 (FTP / FTPS)
+  winrm_bootstrap.py  enable_openssh_via_winrm   (one-time sshd enable over WinRM)
   pool.py         SSHPool                    (parallel multi-host)
   cli.py          argparse entry point       (python -m ssh_handler / ssh-handler)
   pyqt_worker.py  SSHWorker                  (PyQt5, lazy import)