server: Support pre-authentication banners

The ssh protocol allows for the server to send a pre-authentication
banner. It may be sent any time between the start of authentication and
successful authentication. This commit allow ServerInterface subclasses
to define messages which we'll send right right at the start of
authentication before we send the supported authentication methods.

1 files changed, 8 insertions, 0 deletions

diff --git a/paramiko/auth_handler.py b/paramiko/auth_handler.py
index ae88179e..e229df8d 100644
--- a/paramiko/auth_handler.py
+++ b/paramiko/auth_handler.py
@@ -36,6 +36,7 @@ from paramiko.common import (
     cMSG_USERAUTH_GSSAPI_MIC, MSG_USERAUTH_GSSAPI_RESPONSE,
     MSG_USERAUTH_GSSAPI_TOKEN, MSG_USERAUTH_GSSAPI_ERROR,
     MSG_USERAUTH_GSSAPI_ERRTOK, MSG_USERAUTH_GSSAPI_MIC, MSG_NAMES,
+    cMSG_USERAUTH_BANNER
 )
 from paramiko.message import Message
 from paramiko.py3compat import bytestring
@@ -225,6 +226,13 @@ class AuthHandler (object):
             m.add_byte(cMSG_SERVICE_ACCEPT)
             m.add_string(service)
             self.transport._send_message(m)
+            banner, language = self.transport.server_object.get_banner()
+            if banner:
+                m = Message()
+                m.add_byte(cMSG_USERAUTH_BANNER)
+                m.add_string(banner)
+                m.add_string(language)
+                self.transport._send_message(m)
             return
         # dunno this one
         self._disconnect_service_not_available()