36
41
from dbus.mainloop.glib import DBusGMainLoop
45
from gi.repository import GObject as gobject
45
locale.setlocale(locale.LC_ALL, u'')
51
if sys.version_info.major == 2:
54
locale.setlocale(locale.LC_ALL, '')
48
logging.getLogger(u'dbus.proxies').setLevel(logging.CRITICAL)
57
logging.getLogger('dbus.proxies').setLevel(logging.CRITICAL)
50
59
# Some useful constants
51
domain = u'se.bsnet.fukt'
52
server_interface = domain + u'.Mandos'
53
client_interface = domain + u'.Mandos.Client'
56
# Always run in monochrome mode
57
urwid.curses_display.curses.has_colors = lambda : False
59
# Urwid doesn't support blinking, but we want it. Since we have no
60
# use for underline on its own, we make underline also always blink.
61
urwid.curses_display.curses.A_UNDERLINE |= (
62
urwid.curses_display.curses.A_BLINK)
60
domain = 'se.recompile'
61
server_interface = domain + '.Mandos'
62
client_interface = domain + '.Mandos.Client'
64
65
def isoformat_to_datetime(iso):
65
66
"Parse an ISO 8601 date string to a datetime.datetime()"
68
d, t = iso.split(u"T", 1)
69
year, month, day = d.split(u"-", 2)
70
hour, minute, second = t.split(u":", 2)
69
d, t = iso.split("T", 1)
70
year, month, day = d.split("-", 2)
71
hour, minute, second = t.split(":", 2)
71
72
second, fraction = divmod(float(second), 1)
72
73
return datetime.datetime(int(year),
82
83
properties and calls a hook function when any of them are
85
def __init__(self, proxy_object=None, *args, **kwargs):
86
def __init__(self, proxy_object=None, properties=None, **kwargs):
86
87
self.proxy = proxy_object # Mandos Client proxy object
88
self.properties = dict()
89
self.proxy.connect_to_signal(u"PropertyChanged",
90
self.property_changed,
94
self.properties.update(
95
self.proxy.GetAll(client_interface,
96
dbus_interface = dbus.PROPERTIES_IFACE))
98
#XXX This break good super behaviour!
99
# super(MandosClientPropertyCache, self).__init__(
88
self.properties = dict() if properties is None else properties
89
self.property_changed_match = (
90
self.proxy.connect_to_signal("PropertiesChanged",
91
self.properties_changed,
92
dbus.PROPERTIES_IFACE,
95
if properties is None:
96
self.properties.update(
97
self.proxy.GetAll(client_interface,
99
= dbus.PROPERTIES_IFACE))
101
super(MandosClientPropertyCache, self).__init__(**kwargs)
102
def property_changed(self, property=None, value=None):
103
"""This is called whenever we get a PropertyChanged signal
104
It updates the changed property in the "properties" dict.
103
def properties_changed(self, interface, properties, invalidated):
104
"""This is called whenever we get a PropertiesChanged signal
105
It updates the changed properties in the "properties" dict.
106
107
# Update properties dict with new value
107
self.properties[property] = value
108
self.properties.update(properties)
111
self.property_changed_match.remove()
110
114
class MandosClientWidget(urwid.FlowWidget, MandosClientPropertyCache):
123
127
self.logger = logger
125
129
self._update_timer_callback_tag = None
126
self._update_timer_callback_lock = 0
127
self.last_checker_failed = False
129
131
# The widget shown normally
130
self._text_widget = urwid.Text(u"")
132
self._text_widget = urwid.Text("")
131
133
# The widget shown when we have focus
132
self._focus_text_widget = urwid.Text(u"")
133
super(MandosClientWidget, self).__init__(
134
update_hook=update_hook, delete_hook=delete_hook,
134
self._focus_text_widget = urwid.Text("")
135
super(MandosClientWidget, self).__init__(**kwargs)
137
137
self.opened = False
139
last_checked_ok = isoformat_to_datetime(self.properties
141
if last_checked_ok is None:
142
self.last_checker_failed = True
144
self.last_checker_failed = ((datetime.datetime.utcnow()
151
if self.last_checker_failed:
152
self.using_timer(True)
154
if self.need_approval:
155
self.using_timer(True)
157
self.proxy.connect_to_signal(u"CheckerCompleted",
158
self.checker_completed,
161
self.proxy.connect_to_signal(u"CheckerStarted",
162
self.checker_started,
165
self.proxy.connect_to_signal(u"GotSecret",
169
self.proxy.connect_to_signal(u"NeedApproval",
173
self.proxy.connect_to_signal(u"Rejected",
139
self.match_objects = (
140
self.proxy.connect_to_signal("CheckerCompleted",
141
self.checker_completed,
144
self.proxy.connect_to_signal("CheckerStarted",
145
self.checker_started,
148
self.proxy.connect_to_signal("GotSecret",
152
self.proxy.connect_to_signal("NeedApproval",
156
self.proxy.connect_to_signal("Rejected",
160
self.logger('Created client {}'
161
.format(self.properties["Name"]), level=0)
178
def property_changed(self, property=None, value=None):
179
super(self, MandosClientWidget).property_changed(property,
181
if property == u"ApprovalPending":
182
using_timer(bool(value))
184
163
def using_timer(self, flag):
185
164
"""Call this method with True or False when timer should be
186
165
activated or deactivated.
188
old = self._update_timer_callback_lock
190
self._update_timer_callback_lock += 1
192
self._update_timer_callback_lock -= 1
193
if old == 0 and self._update_timer_callback_lock:
167
if flag and self._update_timer_callback_tag is None:
168
# Will update the shown timer value every second
194
169
self._update_timer_callback_tag = (gobject.timeout_add
196
171
self.update_timer))
197
elif old and self._update_timer_callback_lock == 0:
172
elif not (flag or self._update_timer_callback_tag is None):
198
173
gobject.source_remove(self._update_timer_callback_tag)
199
174
self._update_timer_callback_tag = None
201
176
def checker_completed(self, exitstatus, condition, command):
202
177
if exitstatus == 0:
203
if self.last_checker_failed:
204
self.last_checker_failed = False
205
self.using_timer(False)
206
#self.logger(u'Checker for client %s (command "%s")'
208
# % (self.properties[u"Name"], command))
178
self.logger('Checker for client {} (command "{}")'
179
' succeeded'.format(self.properties["Name"],
212
if not self.last_checker_failed:
213
self.last_checker_failed = True
214
self.using_timer(True)
215
184
if os.WIFEXITED(condition):
216
self.logger(u'Checker for client %s (command "%s")'
217
u' failed with exit code %s'
218
% (self.properties[u"Name"], command,
219
os.WEXITSTATUS(condition)))
185
self.logger('Checker for client {} (command "{}") failed'
187
.format(self.properties["Name"], command,
188
os.WEXITSTATUS(condition)))
220
189
elif os.WIFSIGNALED(condition):
221
self.logger(u'Checker for client %s (command "%s")'
222
u' was killed by signal %s'
223
% (self.properties[u"Name"], command,
224
os.WTERMSIG(condition)))
190
self.logger('Checker for client {} (command "{}") was'
191
' killed by signal {}'
192
.format(self.properties["Name"], command,
193
os.WTERMSIG(condition)))
225
194
elif os.WCOREDUMP(condition):
226
self.logger(u'Checker for client %s (command "%s")'
228
% (self.properties[u"Name"], command))
195
self.logger('Checker for client {} (command "{}") dumped'
196
' core'.format(self.properties["Name"],
230
self.logger(u'Checker for client %s completed'
199
self.logger('Checker for client {} completed'
201
.format(self.properties["Name"]))
234
204
def checker_started(self, command):
235
#self.logger(u'Client %s started checker "%s"'
236
# % (self.properties[u"Name"], unicode(command)))
205
"""Server signals that a checker started."""
206
self.logger('Client {} started checker "{}"'
207
.format(self.properties["Name"],
239
210
def got_secret(self):
240
self.last_checker_failed = False
241
self.logger(u'Client %s received its secret'
242
% self.properties[u"Name"])
211
self.logger('Client {} received its secret'
212
.format(self.properties["Name"]))
244
214
def need_approval(self, timeout, default):
246
message = u'Client %s needs approval within %s seconds'
216
message = 'Client {} needs approval within {} seconds'
248
message = u'Client %s will get its secret in %s seconds'
250
% (self.properties[u"Name"], timeout/1000))
251
self.using_timer(True)
218
message = 'Client {} will get its secret in {} seconds'
219
self.logger(message.format(self.properties["Name"],
253
222
def rejected(self, reason):
254
self.logger(u'Client %s was rejected; reason: %s'
255
% (self.properties[u"Name"], reason))
223
self.logger('Client {} was rejected; reason: {}'
224
.format(self.properties["Name"], reason))
257
226
def selectable(self):
258
227
"""Make this a "selectable" widget.
273
242
def update(self):
274
243
"Called when what is visible on the screen should be updated."
275
244
# How to add standout mode to a style
276
with_standout = { u"normal": u"standout",
277
u"bold": u"bold-standout",
279
u"underline-blink-standout",
280
u"bold-underline-blink":
281
u"bold-underline-blink-standout",
245
with_standout = { "normal": "standout",
246
"bold": "bold-standout",
248
"underline-blink-standout",
249
"bold-underline-blink":
250
"bold-underline-blink-standout",
284
253
# Rebuild focus and non-focus widgets using current properties
286
255
# Base part of a client. Name!
287
base = (u'%(name)s: '
288
% {u"name": self.properties[u"Name"]})
289
if not self.properties[u"Enabled"]:
290
message = u"DISABLED"
291
elif self.properties[u"ApprovalPending"]:
256
base = '{name}: '.format(name=self.properties["Name"])
257
if not self.properties["Enabled"]:
259
self.using_timer(False)
260
elif self.properties["ApprovalPending"]:
292
261
timeout = datetime.timedelta(milliseconds
293
262
= self.properties
295
264
last_approval_request = isoformat_to_datetime(
296
self.properties[u"LastApprovalRequest"])
265
self.properties["LastApprovalRequest"])
297
266
if last_approval_request is not None:
298
timer = timeout - (datetime.datetime.utcnow()
299
- last_approval_request)
267
timer = max(timeout - (datetime.datetime.utcnow()
268
- last_approval_request),
269
datetime.timedelta())
301
271
timer = datetime.timedelta()
302
if self.properties[u"ApprovedByDefault"]:
303
message = u"Approval in %s. (d)eny?"
305
message = u"Denial in %s. (a)pprove?"
306
message = message % unicode(timer).rsplit(".", 1)[0]
307
elif self.last_checker_failed:
308
timeout = datetime.timedelta(milliseconds
311
last_ok = isoformat_to_datetime(
312
max((self.properties[u"LastCheckedOK"]
313
or self.properties[u"Created"]),
314
self.properties[u"LastEnabled"]))
315
timer = timeout - (datetime.datetime.utcnow() - last_ok)
316
message = (u'A checker has failed! Time until client'
317
u' gets disabled: %s'
318
% unicode(timer).rsplit(".", 1)[0])
272
if self.properties["ApprovedByDefault"]:
273
message = "Approval in {}. (d)eny?"
275
message = "Denial in {}. (a)pprove?"
276
message = message.format(str(timer).rsplit(".", 1)[0])
277
self.using_timer(True)
278
elif self.properties["LastCheckerStatus"] != 0:
279
# When checker has failed, show timer until client expires
280
expires = self.properties["Expires"]
282
timer = datetime.timedelta(0)
284
expires = (datetime.datetime.strptime
285
(expires, '%Y-%m-%dT%H:%M:%S.%f'))
286
timer = max(expires - datetime.datetime.utcnow(),
287
datetime.timedelta())
288
message = ('A checker has failed! Time until client'
290
.format(str(timer).rsplit(".", 1)[0]))
291
self.using_timer(True)
321
self._text = u"%s%s" % (base, message)
294
self.using_timer(False)
295
self._text = "{}{}".format(base, message)
323
297
if not urwid.supports_unicode():
324
self._text = self._text.encode(u"ascii", u"replace")
325
textlist = [(u"normal", self._text)]
298
self._text = self._text.encode("ascii", "replace")
299
textlist = [("normal", self._text)]
326
300
self._text_widget.set_text(textlist)
327
301
self._focus_text_widget.set_text([(with_standout[text[0]],
357
336
def keypress(self, maxcolrow, key):
359
338
This overrides the method from urwid.FlowWidget"""
361
self.proxy.Enable(dbus_interface = client_interface)
363
self.proxy.Disable(dbus_interface = client_interface)
340
self.proxy.Enable(dbus_interface = client_interface,
343
self.proxy.Disable(dbus_interface = client_interface,
365
346
self.proxy.Approve(dbus.Boolean(True, variant_level=1),
366
dbus_interface = client_interface)
347
dbus_interface = client_interface,
368
350
self.proxy.Approve(dbus.Boolean(False, variant_level=1),
369
dbus_interface = client_interface)
370
elif key == u"R" or key == u"_" or key == u"ctrl k":
351
dbus_interface = client_interface,
353
elif key == "R" or key == "_" or key == "ctrl k":
371
354
self.server_proxy_object.RemoveClient(self.proxy
374
self.proxy.StartChecker(dbus_interface = client_interface)
376
self.proxy.StopChecker(dbus_interface = client_interface)
378
self.proxy.CheckedOK(dbus_interface = client_interface)
358
self.proxy.StartChecker(dbus_interface = client_interface,
361
self.proxy.StopChecker(dbus_interface = client_interface,
364
self.proxy.CheckedOK(dbus_interface = client_interface,
380
# elif key == u"p" or key == "=":
367
# elif key == "p" or key == "=":
381
368
# self.proxy.pause()
382
# elif key == u"u" or key == ":":
369
# elif key == "u" or key == ":":
383
370
# self.proxy.unpause()
384
# elif key == u"RET":
389
def property_changed(self, property=None, value=None,
391
"""Call self.update() if old value is not new value.
376
def properties_changed(self, interface, properties, invalidated):
377
"""Call self.update() if any properties changed.
392
378
This overrides the method from MandosClientPropertyCache"""
393
property_name = unicode(property)
394
old_value = self.properties.get(property_name)
395
super(MandosClientWidget, self).property_changed(
396
property=property, value=value, *args, **kwargs)
397
if self.properties.get(property_name) != old_value:
379
old_values = { key: self.properties.get(key)
380
for key in properties.keys() }
381
super(MandosClientWidget, self).properties_changed(
382
interface, properties, invalidated)
383
if any(old_values[key] != self.properties.get(key)
384
for key in old_values):
414
401
"""This is the entire user interface - the whole screen
415
402
with boxes, lists of client widgets, etc.
417
def __init__(self, max_log_length=1000):
404
def __init__(self, max_log_length=1000, log_level=1):
418
405
DBusGMainLoop(set_as_default=True)
420
407
self.screen = urwid.curses_display.Screen()
422
409
self.screen.register_palette((
424
u"default", u"default", None),
426
u"default", u"default", u"bold"),
428
u"default", u"default", u"underline"),
430
u"default", u"default", u"standout"),
431
(u"bold-underline-blink",
432
u"default", u"default", (u"bold", u"underline")),
434
u"default", u"default", (u"bold", u"standout")),
435
(u"underline-blink-standout",
436
u"default", u"default", (u"underline", u"standout")),
437
(u"bold-underline-blink-standout",
438
u"default", u"default", (u"bold", u"underline",
411
"default", "default", None),
413
"bold", "default", "bold"),
415
"underline,blink", "default", "underline,blink"),
417
"standout", "default", "standout"),
418
("bold-underline-blink",
419
"bold,underline,blink", "default", "bold,underline,blink"),
421
"bold,standout", "default", "bold,standout"),
422
("underline-blink-standout",
423
"underline,blink,standout", "default",
424
"underline,blink,standout"),
425
("bold-underline-blink-standout",
426
"bold,underline,blink,standout", "default",
427
"bold,underline,blink,standout"),
442
430
if urwid.supports_unicode():
443
self.divider = u"─" # \u2500
444
#self.divider = u"━" # \u2501
431
self.divider = "─" # \u2500
432
#self.divider = "━" # \u2501
446
#self.divider = u"-" # \u002d
447
self.divider = u"_" # \u005f
434
#self.divider = "-" # \u002d
435
self.divider = "_" # \u005f
449
437
self.screen.start()
464
454
# This keeps track of whether self.uilist currently has
465
455
# self.logbox in it or not
466
456
self.log_visible = True
467
self.log_wrap = u"any"
457
self.log_wrap = "any"
470
self.log_message_raw((u"bold",
471
u"Mandos Monitor version " + version))
472
self.log_message_raw((u"bold",
460
self.log_message_raw(("bold",
461
"Mandos Monitor version " + version))
462
self.log_message_raw(("bold",
475
465
self.busname = domain + '.Mandos'
476
466
self.main_loop = gobject.MainLoop()
477
self.bus = dbus.SystemBus()
478
mandos_dbus_objc = self.bus.get_object(
479
self.busname, u"/", follow_name_owner_changes=True)
480
self.mandos_serv = dbus.Interface(mandos_dbus_objc,
484
mandos_clients = (self.mandos_serv
485
.GetAllClientsWithProperties())
486
except dbus.exceptions.DBusException:
487
mandos_clients = dbus.Dictionary()
490
.connect_to_signal(u"ClientRemoved",
491
self.find_and_remove_client,
492
dbus_interface=server_interface,
495
.connect_to_signal(u"ClientAdded",
497
dbus_interface=server_interface,
500
.connect_to_signal(u"ClientNotFound",
501
self.client_not_found,
502
dbus_interface=server_interface,
504
for path, client in mandos_clients.iteritems():
505
client_proxy_object = self.bus.get_object(self.busname,
507
self.add_client(MandosClientWidget(server_proxy_object
510
=client_proxy_object,
520
468
def client_not_found(self, fingerprint, address):
521
self.log_message((u"Client with address %s and fingerprint %s"
522
u" could not be found" % (address,
469
self.log_message("Client with address {} and fingerprint {}"
470
" could not be found"
471
.format(address, fingerprint))
525
473
def rebuild(self):
526
474
"""This rebuilds the User Interface.
537
485
if self.log_visible:
538
486
self.uilist.append(self.logbox)
540
487
self.topwidget = urwid.Pile(self.uilist)
542
def log_message(self, message):
489
def log_message(self, message, level=1):
490
"""Log message formatted with timestamp"""
491
if level < self.log_level:
543
493
timestamp = datetime.datetime.now().isoformat()
544
self.log_message_raw(timestamp + u": " + message)
494
self.log_message_raw("{}: {}".format(timestamp, message),
546
def log_message_raw(self, markup):
497
def log_message_raw(self, markup, level=1):
547
498
"""Add a log message to the log buffer."""
499
if level < self.log_level:
548
501
self.log.append(urwid.Text(markup, wrap=self.log_wrap))
549
502
if (self.max_log_length
550
503
and len(self.log) > self.max_log_length):
551
504
del self.log[0:len(self.log)-self.max_log_length-1]
552
505
self.logbox.set_focus(len(self.logbox.body.contents),
553
coming_from=u"above")
556
509
def toggle_log_display(self):
557
510
"""Toggle visibility of the log buffer."""
558
511
self.log_visible = not self.log_visible
560
#self.log_message(u"Log visibility changed to: "
561
# + unicode(self.log_visible))
513
self.log_message("Log visibility changed to: {}"
514
.format(self.log_visible), level=0)
563
516
def change_log_display(self):
564
517
"""Change type of log display.
565
518
Currently, this toggles wrapping of text lines."""
566
if self.log_wrap == u"clip":
567
self.log_wrap = u"any"
519
if self.log_wrap == "clip":
520
self.log_wrap = "any"
569
self.log_wrap = u"clip"
522
self.log_wrap = "clip"
570
523
for textwidget in self.log:
571
524
textwidget.set_wrap_mode(self.log_wrap)
572
#self.log_message(u"Wrap mode: " + self.log_wrap)
525
self.log_message("Wrap mode: {}".format(self.log_wrap),
574
528
def find_and_remove_client(self, path, name):
575
"""Find an client from its object path and remove it.
529
"""Find a client by its object path and remove it.
577
531
This is connected to the ClientRemoved signal from the
578
532
Mandos server object."""
626
577
"""Start the main loop and exit when it's done."""
578
self.bus = dbus.SystemBus()
579
mandos_dbus_objc = self.bus.get_object(
580
self.busname, "/", follow_name_owner_changes=True)
581
self.mandos_serv = dbus.Interface(mandos_dbus_objc,
585
mandos_clients = (self.mandos_serv
586
.GetAllClientsWithProperties())
587
if not mandos_clients:
588
self.log_message_raw(("bold", "Note: Server has no clients."))
589
except dbus.exceptions.DBusException:
590
self.log_message_raw(("bold", "Note: No Mandos server running."))
591
mandos_clients = dbus.Dictionary()
594
.connect_to_signal("ClientRemoved",
595
self.find_and_remove_client,
596
dbus_interface=server_interface,
599
.connect_to_signal("ClientAdded",
601
dbus_interface=server_interface,
604
.connect_to_signal("ClientNotFound",
605
self.client_not_found,
606
dbus_interface=server_interface,
608
for path, client in mandos_clients.items():
609
client_proxy_object = self.bus.get_object(self.busname,
611
self.add_client(MandosClientWidget(server_proxy_object
614
=client_proxy_object,
628
625
self._input_callback_tag = (gobject.io_add_watch
629
626
(sys.stdin.fileno(),
655
652
except KeyError: # :-)
658
if key == u"q" or key == u"Q":
655
if key == "q" or key == "Q":
661
elif key == u"window resize":
658
elif key == "window resize":
662
659
self.size = self.screen.get_cols_rows()
664
elif key == u"\f": # Ctrl-L
661
elif key == "ctrl l":
666
elif key == u"l" or key == u"D":
664
elif key == "l" or key == "D":
667
665
self.toggle_log_display()
669
elif key == u"w" or key == u"i":
667
elif key == "w" or key == "i":
670
668
self.change_log_display()
672
elif key == u"?" or key == u"f1" or key == u"esc":
670
elif key == "?" or key == "f1" or key == "esc":
673
671
if not self.log_visible:
674
672
self.log_visible = True
676
self.log_message_raw((u"bold",
680
u"l: Log window toggle",
681
u"TAB: Switch window",
683
self.log_message_raw((u"bold",
689
u"s: Start new checker",
674
self.log_message_raw(("bold",
678
"l: Log window toggle",
679
"TAB: Switch window",
680
"w: Wrap (log lines)",
681
"v: Toggle verbose log",
683
self.log_message_raw(("bold",
689
"s: Start new checker",
696
696
if self.topwidget.get_focus() is self.logbox:
697
697
self.topwidget.set_focus(0)
699
699
self.topwidget.set_focus(self.logbox)
701
#elif (key == u"end" or key == u"meta >" or key == u"G"
702
if self.log_level == 0:
704
self.log_message("Verbose mode: Off")
707
self.log_message("Verbose mode: On")
708
#elif (key == "end" or key == "meta >" or key == "G"
703
710
# pass # xxx end-of-buffer
704
#elif (key == u"home" or key == u"meta <" or key == u"g"
711
#elif (key == "home" or key == "meta <" or key == "g"
706
713
# pass # xxx beginning-of-buffer
707
#elif key == u"ctrl e" or key == u"$":
714
#elif key == "ctrl e" or key == "$":
708
715
# pass # xxx move-end-of-line
709
#elif key == u"ctrl a" or key == u"^":
716
#elif key == "ctrl a" or key == "^":
710
717
# pass # xxx move-beginning-of-line
711
#elif key == u"ctrl b" or key == u"meta (" or key == u"h":
718
#elif key == "ctrl b" or key == "meta (" or key == "h":
712
719
# pass # xxx left
713
#elif key == u"ctrl f" or key == u"meta )" or key == u"l":
720
#elif key == "ctrl f" or key == "meta )" or key == "l":
714
721
# pass # xxx right
716
723
# pass # scroll up log
718
725
# pass # scroll down log
719
726
elif self.topwidget.selectable():
720
727
self.topwidget.keypress(self.size, key)