/mandos/release : revision 237.2.208

1

#!/usr/bin/python

2

# -*- mode: python; coding: utf-8 -*-

3

#

4

# Mandos Monitor - Control and monitor the Mandos server

5

#

6

7

8

#

9

# This program is free software: you can redistribute it and/or modify

10

# it under the terms of the GNU General Public License as published by

11

# the Free Software Foundation, either version 3 of the License, or

12

# (at your option) any later version.

13

#

14

# This program is distributed in the hope that it will be useful,

15

# but WITHOUT ANY WARRANTY; without even the implied warranty of

16

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

17

# GNU General Public License for more details.

18

#

19

# You should have received a copy of the GNU General Public License

20

# along with this program. If not, see <http://www.gnu.org/licenses/>.

21

#

22

# Contact the authors at <mandos@fukt.bsnet.se>.

23

#

3

24

4

25

from __future__ import division, absolute_import, with_statement

5

26

23

44

24

45

locale.setlocale(locale.LC_ALL, u'')

25

46

47

import logging

48

logging.getLogger('dbus.proxies').setLevel(logging.CRITICAL)

49

26

50

# Some useful constants

27

51

domain = 'se.bsnet.fukt'

28

52

server_interface = domain + '.Mandos'

29

53

client_interface = domain + '.Mandos.Client'

30

version = "1.0.14"

54

version = "1.0.15"

31

55

32

56

# Always run in monochrome mode

33

57

urwid.curses_display.curses.has_colors = lambda : False

37

61

urwid.curses_display.curses.A_UNDERLINE |= (

38

62

urwid.curses_display.curses.A_BLINK)

39

63

64

def isoformat_to_datetime(iso):

65

"Parse an ISO 8601 date string to a datetime.datetime()"

66

if not iso:

67

return None

68

d, t = iso.split(u"T", 1)

69

year, month, day = d.split(u"-", 2)

70

hour, minute, second = t.split(u":", 2)

71

second, fraction = divmod(float(second), 1)

72

return datetime.datetime(int(year),

73

int(month),

74

int(day),

75

int(hour),

76

int(minute),

77

int(second), # Whole seconds

78

int(fraction*1000000)) # Microseconds

79

40

80

class MandosClientPropertyCache(object):

41

81

"""This wraps a Mandos Client D-Bus proxy object, caches the

42

82

properties and calls a hook function when any of them are

50

90

self.property_changed,

51

91

client_interface,

52

92

byte_arrays=True)

53

93

54

94

self.properties.update(

55

95

self.proxy.GetAll(client_interface,

56

96

dbus_interface = dbus.PROPERTIES_IFACE))

57

super(MandosClientPropertyCache, self).__init__(

58

proxy_object=proxy_object, *args, **kwargs)

97

98

#XXX This break good super behaviour!

99

# super(MandosClientPropertyCache, self).__init__(

100

# *args, **kwargs)

59

101

60

102

def property_changed(self, property=None, value=None):

61

103

"""This is called whenever we get a PropertyChanged signal

80

122

# Logger

81

123

self.logger = logger

82

124

125

self._update_timer_callback_tag = None

126

self._update_timer_callback_lock = 0

127

self.last_checker_failed = False

128

83

129

# The widget shown normally

84

130

self._text_widget = urwid.Text(u"")

85

131

# The widget shown when we have focus

89

135

*args, **kwargs)

90

136

self.update()

91

137

self.opened = False

138

139

last_checked_ok = isoformat_to_datetime(self.properties

140

[u"LastCheckedOK"])

141

if last_checked_ok is None:

142

self.last_checker_failed = True

143

else:

144

self.last_checker_failed = ((datetime.datetime.utcnow()

145

- last_checked_ok)

146

> datetime.timedelta

147

(milliseconds=

148

self.properties

149

[u"Interval"]))

150

151

if self.last_checker_failed:

152

self.using_timer(True)

153

154

if self.need_approval:

155

self.using_timer(True)

156

92

157

self.proxy.connect_to_signal(u"CheckerCompleted",

93

158

self.checker_completed,

94

159

client_interface,

101

166

self.got_secret,

102

167

client_interface,

103

168

byte_arrays=True)

169

self.proxy.connect_to_signal(u"NeedApproval",

170

self.need_approval,

171

client_interface,

172

byte_arrays=True)

104

173

self.proxy.connect_to_signal(u"Rejected",

105

174

self.rejected,

106

175

client_interface,

107

176

byte_arrays=True)

108

177

178

def property_changed(self, property=None, value=None):

179

super(self, MandosClientWidget).property_changed(property,

180

value)

181

if property == u"ApprovalPending":

182

using_timer(bool(value))

183

184

def using_timer(self, flag):

185

"""Call this method with True or False when timer should be

186

activated or deactivated.

187

"""

188

old = self._update_timer_callback_lock

189

if flag:

190

self._update_timer_callback_lock += 1

191

else:

192

self._update_timer_callback_lock -= 1

193

if old == 0 and self._update_timer_callback_lock:

194

self._update_timer_callback_tag = (gobject.timeout_add

195

(1000,

196

self.update_timer))

197

elif old and self._update_timer_callback_lock == 0:

198

gobject.source_remove(self._update_timer_callback_tag)

199

self._update_timer_callback_tag = None

200

109

201

def checker_completed(self, exitstatus, condition, command):

110

202

if exitstatus == 0:

111

self.logger(u'Checker for client %s (command "%s")'

112

u' was successful'

113

% (self.properties[u"name"], command))

203

if self.last_checker_failed:

204

self.last_checker_failed = False

205

self.using_timer(False)

206

#self.logger(u'Checker for client %s (command "%s")'

207

# u' was successful'

208

# % (self.properties[u"Name"], command))

209

self.update()

114

210

return

211

# Checker failed

212

if not self.last_checker_failed:

213

self.last_checker_failed = True

214

self.using_timer(True)

115

215

if os.WIFEXITED(condition):

116

216

self.logger(u'Checker for client %s (command "%s")'

117

217

u' failed with exit code %s'

118

% (self.properties[u"name"], command,

218

% (self.properties[u"Name"], command,

119

219

os.WEXITSTATUS(condition)))

120

return

121

if os.WIFSIGNALED(condition):

220

elif os.WIFSIGNALED(condition):

122

221

self.logger(u'Checker for client %s (command "%s")'

123

222

u' was killed by signal %s'

124

% (self.properties[u"name"], command,

223

% (self.properties[u"Name"], command,

125

224

os.WTERMSIG(condition)))

126

return

127

if os.WCOREDUMP(condition):

225

elif os.WCOREDUMP(condition):

128

226

self.logger(u'Checker for client %s (command "%s")'

129

227

u' dumped core'

130

% (self.properties[u"name"], command))

131

self.logger(u'Checker for client %s completed mysteriously')

228

% (self.properties[u"Name"], command))

229

else:

230

self.logger(u'Checker for client %s completed'

231

u' mysteriously')

232

self.update()

132

233

133

234

def checker_started(self, command):

134

self.logger(u'Client %s started checker "%s"'

135

% (self.properties[u"name"], unicode(command)))

235

#self.logger(u'Client %s started checker "%s"'

236

# % (self.properties[u"Name"], unicode(command)))

237

pass

136

238

137

239

def got_secret(self):

240

self.last_checker_failed = False

138

241

self.logger(u'Client %s received its secret'

139

% self.properties[u"name"])

140

141

def rejected(self):

142

self.logger(u'Client %s was rejected'

143

% self.properties[u"name"])

242

% self.properties[u"Name"])

243

244

def need_approval(self, timeout, default):

245

if not default:

246

message = u'Client %s needs approval within %s seconds'

247

else:

248

message = u'Client %s will get its secret in %s seconds'

249

self.logger(message

250

% (self.properties[u"Name"], timeout/1000))

251

self.using_timer(True)

252

253

def rejected(self, reason):

254

self.logger(u'Client %s was rejected; reason: %s'

255

% (self.properties[u"Name"], reason))

144

256

145

257

def selectable(self):

146

258

"""Make this a "selectable" widget.

168

280

u"bold-underline-blink":

169

281

u"bold-underline-blink-standout",

170

282

}

171

283

172

284

# Rebuild focus and non-focus widgets using current properties

173

self._text = (u'%(name)s: %(enabled)s'

174

% { u"name": self.properties[u"name"],

175

u"enabled":

176

(u"enabled"

177

if self.properties[u"enabled"]

178

else u"DISABLED")})

285

286

# Base part of a client. Name!

287

base = (u'%(name)s: '

288

% {u"name": self.properties[u"Name"]})

289

if not self.properties[u"Enabled"]:

290

message = u"DISABLED"

291

elif self.properties[u"ApprovalPending"]:

292

timeout = datetime.timedelta(milliseconds

293

= self.properties

294

[u"ApprovalDelay"])

295

last_approval_request = isoformat_to_datetime(

296

self.properties[u"LastApprovalRequest"])

297

if last_approval_request is not None:

298

timer = timeout - (datetime.datetime.utcnow()

299

- last_approval_request)

300

else:

301

timer = datetime.timedelta()

302

if self.properties[u"ApprovedByDefault"]:

303

message = u"Approval in %s. (d)eny?"

304

else:

305

message = u"Denial in %s. (a)pprove?"

306

message = message % unicode(timer).rsplit(".", 1)[0]

307

elif self.last_checker_failed:

308

timeout = datetime.timedelta(milliseconds

309

= self.properties

310

[u"Timeout"])

311

last_ok = isoformat_to_datetime(

312

max((self.properties[u"LastCheckedOK"]

313

or self.properties[u"Created"]),

314

self.properties[u"LastEnabled"]))

315

timer = timeout - (datetime.datetime.utcnow() - last_ok)

316

message = (u'A checker has failed! Time until client'

317

u' gets disabled: %s'

318

% unicode(timer).rsplit(".", 1)[0])

319

else:

320

message = u"enabled"

321

self._text = "%s%s" % (base, message)

322

179

323

if not urwid.supports_unicode():

180

324

self._text = self._text.encode("ascii", "replace")

181

325

textlist = [(u"normal", self._text)]

192

336

if self.update_hook is not None:

193

337

self.update_hook()

194

338

339

def update_timer(self):

340

"called by gobject"

341

self.update()

342

return True # Keep calling this

343

195

344

def delete(self):

345

if self._update_timer_callback_tag is not None:

346

gobject.source_remove(self._update_timer_callback_tag)

347

self._update_timer_callback_tag = None

196

348

if self.delete_hook is not None:

197

349

self.delete_hook(self)

198

350

205

357

def keypress(self, (maxcol,), key):

206

358

"""Handle keys.

207

359

This overrides the method from urwid.FlowWidget"""

208

if key == u"e" or key == u"+":

209

self.proxy.Enable()

210

elif key == u"d" or key == u"-":

211

self.proxy.Disable()

360

if key == u"+":

361

self.proxy.Enable(dbus_interface = client_interface)

362

elif key == u"-":

363

self.proxy.Disable(dbus_interface = client_interface)

364

elif key == u"a":

365

self.proxy.Approve(dbus.Boolean(True, variant_level=1),

366

dbus_interface = client_interface)

367

elif key == u"d":

368

self.proxy.Approve(dbus.Boolean(False, variant_level=1),

369

dbus_interface = client_interface)

212

370

elif key == u"r" or key == u"_" or key == u"ctrl k":

213

371

self.server_proxy_object.RemoveClient(self.proxy

214

372

.object_path)

215

373

elif key == u"s":

216

self.proxy.StartChecker()

374

self.proxy.StartChecker(dbus_interface = client_interface)

217

375

elif key == u"S":

218

self.proxy.StopChecker()

376

self.proxy.StopChecker(dbus_interface = client_interface)

219

377

elif key == u"C":

220

self.proxy.CheckedOK()

378

self.proxy.CheckedOK(dbus_interface = client_interface)

221

379

# xxx

222

380

# elif key == u"p" or key == "=":

223

381

# self.proxy.pause()

246

404

use them as an excuse to shift focus away from this widget.

247

405

"""

248

406

def keypress(self, (maxcol, maxrow), key):

249

ret = super(ConstrainedListBox, self).keypress((maxcol, maxrow), key)

407

ret = super(ConstrainedListBox, self).keypress((maxcol,

408

maxrow), key)

250

409

if ret in (u"up", u"down"):

251

410

return

252

411

return ret

369

528

Call this when the widget layout needs to change"""

370

529

self.uilist = []

371

530

#self.uilist.append(urwid.ListBox(self.clients))

372

self.uilist.append(urwid.Frame(ConstrainedListBox(self.clients),

531

self.uilist.append(urwid.Frame(ConstrainedListBox(self.

532

clients),

373

533

#header=urwid.Divider(),

374

534

header=None,

375

footer=urwid.Divider(div_char=self.divider)))

535

footer=

536

urwid.Divider(div_char=

537

self.divider)))

376

538

if self.log_visible:

377

539

self.uilist.append(self.logbox)

378

540

pass

396

558

"""Toggle visibility of the log buffer."""

397

559

self.log_visible = not self.log_visible

398

560

self.rebuild()

399

self.log_message(u"Log visibility changed to: "

400

+ unicode(self.log_visible))

561

#self.log_message(u"Log visibility changed to: "

562

# + unicode(self.log_visible))

401

563

402

564

def change_log_display(self):

403

565

"""Change type of log display.

408

570

self.log_wrap = u"clip"

409

571

for textwidget in self.log:

410

572

textwidget.set_wrap_mode(self.log_wrap)

411

self.log_message(u"Wrap mode: " + self.log_wrap)

573

#self.log_message(u"Wrap mode: " + self.log_wrap)

412

574

413

575

def find_and_remove_client(self, path, name):

414

576

"""Find an client from its object path and remove it.

441

603

if path is None:

442

604

path = client.proxy.object_path

443

605

self.clients_dict[path] = client

444

self.clients.sort(None, lambda c: c.properties[u"name"])

606

self.clients.sort(None, lambda c: c.properties[u"Name"])

445

607

self.refresh()

446

608

447

609

def remove_client(self, client, path=None):

522

684

self.log_message_raw((u"bold",

523

685

u" "

524

686

.join((u"Clients:",

525

u"e: Enable",

526

u"d: Disable",

687

u"+: Enable",

688

u"-: Disable",

527

689

u"r: Remove",

528

690

u"s: Start new checker",

529

691

u"S: Stop checker",

530

u"C: Checker OK"))))

692

u"C: Checker OK",

693

u"a: Approve",

694

u"d: Deny"))))

531

695

self.refresh()

532

696

elif key == u"tab":

533

697

if self.topwidget.get_focus() is self.logbox:

561

725

ui = UserInterface()

562

726

try:

563

727

ui.run()

728

except KeyboardInterrupt:

729

ui.screen.stop()

564

730

except Exception, e:

565

731

ui.log_message(unicode(e))

566

732

ui.screen.stop()