2
2
# -*- mode: python; coding: utf-8 -*-
4
# Mandos Monitor - Control and monitor the Mandos server
6
# Copyright © 2009-2011 Teddy Hogeborn
7
# Copyright © 2009-2011 Björn Påhlsson
9
# This program is free software: you can redistribute it and/or modify
10
# it under the terms of the GNU General Public License as published by
11
# the Free Software Foundation, either version 3 of the License, or
12
# (at your option) any later version.
14
# This program is distributed in the hope that it will be useful,
15
# but WITHOUT ANY WARRANTY; without even the implied warranty of
16
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17
# GNU General Public License for more details.
19
# You should have received a copy of the GNU General Public License
20
# along with this program. If not, see <http://www.gnu.org/licenses/>.
22
# Contact the authors at <mandos@recompile.se>.
4
from __future__ import division, absolute_import, with_statement
25
from __future__ import (division, absolute_import, print_function,
97
130
self.logger = logger
99
132
self._update_timer_callback_tag = None
133
self._update_timer_callback_lock = 0
100
134
self.last_checker_failed = False
102
136
# The widget shown normally
103
self._text_widget = urwid.Text(u"")
137
self._text_widget = urwid.Text("")
104
138
# The widget shown when we have focus
105
self._focus_text_widget = urwid.Text(u"")
139
self._focus_text_widget = urwid.Text("")
106
140
super(MandosClientWidget, self).__init__(
107
141
update_hook=update_hook, delete_hook=delete_hook,
110
144
self.opened = False
111
self.proxy.connect_to_signal(u"CheckerCompleted",
112
self.checker_completed,
115
self.proxy.connect_to_signal(u"CheckerStarted",
116
self.checker_started,
119
self.proxy.connect_to_signal(u"GotSecret",
123
self.proxy.connect_to_signal(u"Rejected",
127
146
last_checked_ok = isoformat_to_datetime(self.properties
129
148
if last_checked_ok is None:
130
149
self.last_checker_failed = True
133
152
- last_checked_ok)
134
153
> datetime.timedelta
136
self.properties["interval"]))
137
158
if self.last_checker_failed:
159
self.using_timer(True)
161
if self.need_approval:
162
self.using_timer(True)
164
self.match_objects = (
165
self.proxy.connect_to_signal("CheckerCompleted",
166
self.checker_completed,
169
self.proxy.connect_to_signal("CheckerStarted",
170
self.checker_started,
173
self.proxy.connect_to_signal("GotSecret",
177
self.proxy.connect_to_signal("NeedApproval",
181
self.proxy.connect_to_signal("Rejected",
185
#self.logger('Created client %s' % (self.properties["Name"]))
187
def property_changed(self, property=None, value=None):
188
super(self, MandosClientWidget).property_changed(property,
190
if property == "ApprovalPending":
191
using_timer(bool(value))
193
def using_timer(self, flag):
194
"""Call this method with True or False when timer should be
195
activated or deactivated.
197
old = self._update_timer_callback_lock
199
self._update_timer_callback_lock += 1
201
self._update_timer_callback_lock -= 1
202
if old == 0 and self._update_timer_callback_lock:
203
# Will update the shown timer value every second
138
204
self._update_timer_callback_tag = (gobject.timeout_add
140
206
self.update_timer))
207
elif old and self._update_timer_callback_lock == 0:
208
gobject.source_remove(self._update_timer_callback_tag)
209
self._update_timer_callback_tag = None
142
211
def checker_completed(self, exitstatus, condition, command):
143
212
if exitstatus == 0:
144
213
if self.last_checker_failed:
145
214
self.last_checker_failed = False
146
gobject.source_remove(self._update_timer_callback_tag)
147
self._update_timer_callback_tag = None
148
self.logger(u'Checker for client %s (command "%s")'
150
% (self.properties[u"name"], command))
215
self.using_timer(False)
216
#self.logger('Checker for client %s (command "%s")'
218
# % (self.properties["Name"], command))
154
222
if not self.last_checker_failed:
155
223
self.last_checker_failed = True
156
self._update_timer_callback_tag = (gobject.timeout_add
224
self.using_timer(True)
159
225
if os.WIFEXITED(condition):
160
self.logger(u'Checker for client %s (command "%s")'
161
u' failed with exit code %s'
162
% (self.properties[u"name"], command,
226
self.logger('Checker for client %s (command "%s")'
227
' failed with exit code %s'
228
% (self.properties["Name"], command,
163
229
os.WEXITSTATUS(condition)))
164
230
elif os.WIFSIGNALED(condition):
165
self.logger(u'Checker for client %s (command "%s")'
166
u' was killed by signal %s'
167
% (self.properties[u"name"], command,
231
self.logger('Checker for client %s (command "%s")'
232
' was killed by signal %s'
233
% (self.properties["Name"], command,
168
234
os.WTERMSIG(condition)))
169
235
elif os.WCOREDUMP(condition):
170
self.logger(u'Checker for client %s (command "%s")'
172
% (self.properties[u"name"], command))
236
self.logger('Checker for client %s (command "%s")'
238
% (self.properties["Name"], command))
174
self.logger(u'Checker for client %s completed mysteriously')
240
self.logger('Checker for client %s completed'
177
244
def checker_started(self, command):
178
self.logger(u'Client %s started checker "%s"'
179
% (self.properties[u"name"], unicode(command)))
245
"""Server signals that a checker started. This could be useful
246
to log in the future. """
247
#self.logger('Client %s started checker "%s"'
248
# % (self.properties["Name"], unicode(command)))
181
251
def got_secret(self):
182
self.logger(u'Client %s received its secret'
183
% self.properties[u"name"])
186
self.logger(u'Client %s was rejected'
187
% self.properties[u"name"])
252
self.last_checker_failed = False
253
self.logger('Client %s received its secret'
254
% self.properties["Name"])
256
def need_approval(self, timeout, default):
258
message = 'Client %s needs approval within %s seconds'
260
message = 'Client %s will get its secret in %s seconds'
262
% (self.properties["Name"], timeout/1000))
263
self.using_timer(True)
265
def rejected(self, reason):
266
self.logger('Client %s was rejected; reason: %s'
267
% (self.properties["Name"], reason))
189
269
def selectable(self):
190
270
"""Make this a "selectable" widget.
191
271
This overrides the method from urwid.FlowWidget."""
194
def rows(self, (maxcol,), focus=False):
274
def rows(self, maxcolrow, focus=False):
195
275
"""How many rows this widget will occupy might depend on
196
276
whether we have focus or not.
197
277
This overrides the method from urwid.FlowWidget"""
198
return self.current_widget(focus).rows((maxcol,), focus=focus)
278
return self.current_widget(focus).rows(maxcolrow, focus=focus)
200
280
def current_widget(self, focus=False):
201
281
if focus or self.opened:
205
285
def update(self):
206
286
"Called when what is visible on the screen should be updated."
207
287
# How to add standout mode to a style
208
with_standout = { u"normal": u"standout",
209
u"bold": u"bold-standout",
211
u"underline-blink-standout",
212
u"bold-underline-blink":
213
u"bold-underline-blink-standout",
288
with_standout = { "normal": "standout",
289
"bold": "bold-standout",
291
"underline-blink-standout",
292
"bold-underline-blink":
293
"bold-underline-blink-standout",
216
296
# Rebuild focus and non-focus widgets using current properties
217
self._text = (u'%(name)s: %(enabled)s%(timer)s'
218
% { u"name": self.properties[u"name"],
221
if self.properties[u"enabled"]
223
u"timer": (unicode(datetime.timedelta
229
- isoformat_to_datetime
230
(max((self.properties
235
self.properties[u"last_enabled"]))))
236
if (self.last_checker_failed
298
# Base part of a client. Name!
300
% {"name": self.properties["Name"]})
301
if not self.properties["Enabled"]:
303
elif self.properties["ApprovalPending"]:
304
timeout = datetime.timedelta(milliseconds
307
last_approval_request = isoformat_to_datetime(
308
self.properties["LastApprovalRequest"])
309
if last_approval_request is not None:
310
timer = timeout - (datetime.datetime.utcnow()
311
- last_approval_request)
313
timer = datetime.timedelta()
314
if self.properties["ApprovedByDefault"]:
315
message = "Approval in %s. (d)eny?"
317
message = "Denial in %s. (a)pprove?"
318
message = message % unicode(timer).rsplit(".", 1)[0]
319
elif self.last_checker_failed:
320
# When checker has failed, print a timer until client expires
321
expires = self.properties["Expires"]
323
timer = datetime.timedelta(0)
325
expires = datetime.datetime.strptime(expires,
326
'%Y-%m-%dT%H:%M:%S.%f')
327
timer = expires - datetime.datetime.utcnow()
328
message = ('A checker has failed! Time until client'
330
% unicode(timer).rsplit(".", 1)[0])
333
self._text = "%s%s" % (base, message)
240
335
if not urwid.supports_unicode():
241
336
self._text = self._text.encode("ascii", "replace")
242
textlist = [(u"normal", self._text)]
337
textlist = [("normal", self._text)]
243
338
self._text_widget.set_text(textlist)
244
339
self._focus_text_widget.set_text([(with_standout[text[0]],
254
349
self.update_hook()
256
351
def update_timer(self):
352
"""called by gobject. Will indefinitely loop until
353
gobject.source_remove() on tag is called"""
259
355
return True # Keep calling this
357
def delete(self, *args, **kwargs):
262
358
if self._update_timer_callback_tag is not None:
263
359
gobject.source_remove(self._update_timer_callback_tag)
264
360
self._update_timer_callback_tag = None
361
for match in self.match_objects:
363
self.match_objects = ()
265
364
if self.delete_hook is not None:
266
365
self.delete_hook(self)
366
return super(MandosClientWidget, self).delete(*args, **kwargs)
268
def render(self, (maxcol,), focus=False):
368
def render(self, maxcolrow, focus=False):
269
369
"""Render differently if we have focus.
270
370
This overrides the method from urwid.FlowWidget"""
271
return self.current_widget(focus).render((maxcol,),
371
return self.current_widget(focus).render(maxcolrow,
274
def keypress(self, (maxcol,), key):
374
def keypress(self, maxcolrow, key):
276
376
This overrides the method from urwid.FlowWidget"""
277
if key == u"e" or key == u"+":
279
elif key == u"d" or key == u"-":
281
elif key == u"r" or key == u"_" or key == u"ctrl k":
378
self.proxy.Enable(dbus_interface = client_interface,
381
self.proxy.Disable(dbus_interface = client_interface,
384
self.proxy.Approve(dbus.Boolean(True, variant_level=1),
385
dbus_interface = client_interface,
388
self.proxy.Approve(dbus.Boolean(False, variant_level=1),
389
dbus_interface = client_interface,
391
elif key == "R" or key == "_" or key == "ctrl k":
282
392
self.server_proxy_object.RemoveClient(self.proxy
285
self.proxy.StartChecker()
287
self.proxy.StopChecker()
289
self.proxy.CheckedOK()
396
self.proxy.StartChecker(dbus_interface = client_interface,
399
self.proxy.StopChecker(dbus_interface = client_interface,
402
self.proxy.CheckedOK(dbus_interface = client_interface,
291
# elif key == u"p" or key == "=":
405
# elif key == "p" or key == "=":
292
406
# self.proxy.pause()
293
# elif key == u"u" or key == ":":
407
# elif key == "u" or key == ":":
294
408
# self.proxy.unpause()
295
# elif key == u"RET":
331
445
self.screen = urwid.curses_display.Screen()
333
447
self.screen.register_palette((
335
u"default", u"default", None),
337
u"default", u"default", u"bold"),
339
u"default", u"default", u"underline"),
341
u"default", u"default", u"standout"),
342
(u"bold-underline-blink",
343
u"default", u"default", (u"bold", u"underline")),
345
u"default", u"default", (u"bold", u"standout")),
346
(u"underline-blink-standout",
347
u"default", u"default", (u"underline", u"standout")),
348
(u"bold-underline-blink-standout",
349
u"default", u"default", (u"bold", u"underline",
449
"default", "default", None),
451
"default", "default", "bold"),
453
"default", "default", "underline"),
455
"default", "default", "standout"),
456
("bold-underline-blink",
457
"default", "default", ("bold", "underline")),
459
"default", "default", ("bold", "standout")),
460
("underline-blink-standout",
461
"default", "default", ("underline", "standout")),
462
("bold-underline-blink-standout",
463
"default", "default", ("bold", "underline",
353
467
if urwid.supports_unicode():
354
self.divider = u"─" # \u2500
355
#self.divider = u"━" # \u2501
468
self.divider = "─" # \u2500
469
#self.divider = "━" # \u2501
357
#self.divider = u"-" # \u002d
358
self.divider = u"_" # \u005f
471
#self.divider = "-" # \u002d
472
self.divider = "_" # \u005f
360
474
self.screen.start()
375
489
# This keeps track of whether self.uilist currently has
376
490
# self.logbox in it or not
377
491
self.log_visible = True
378
self.log_wrap = u"any"
492
self.log_wrap = "any"
381
self.log_message_raw((u"bold",
382
u"Mandos Monitor version " + version))
383
self.log_message_raw((u"bold",
495
self.log_message_raw(("bold",
496
"Mandos Monitor version " + version))
497
self.log_message_raw(("bold",
386
500
self.busname = domain + '.Mandos'
387
501
self.main_loop = gobject.MainLoop()
388
self.bus = dbus.SystemBus()
389
mandos_dbus_objc = self.bus.get_object(
390
self.busname, u"/", follow_name_owner_changes=True)
391
self.mandos_serv = dbus.Interface(mandos_dbus_objc,
395
mandos_clients = (self.mandos_serv
396
.GetAllClientsWithProperties())
397
except dbus.exceptions.DBusException:
398
mandos_clients = dbus.Dictionary()
401
.connect_to_signal(u"ClientRemoved",
402
self.find_and_remove_client,
403
dbus_interface=server_interface,
406
.connect_to_signal(u"ClientAdded",
408
dbus_interface=server_interface,
411
.connect_to_signal(u"ClientNotFound",
412
self.client_not_found,
413
dbus_interface=server_interface,
415
for path, client in mandos_clients.iteritems():
416
client_proxy_object = self.bus.get_object(self.busname,
418
self.add_client(MandosClientWidget(server_proxy_object
421
=client_proxy_object,
431
503
def client_not_found(self, fingerprint, address):
432
self.log_message((u"Client with address %s and fingerprint %s"
433
u" could not be found" % (address,
504
self.log_message(("Client with address %s and fingerprint %s"
505
" could not be found" % (address,
436
508
def rebuild(self):
458
532
and len(self.log) > self.max_log_length):
459
533
del self.log[0:len(self.log)-self.max_log_length-1]
460
534
self.logbox.set_focus(len(self.logbox.body.contents),
461
coming_from=u"above")
464
538
def toggle_log_display(self):
465
539
"""Toggle visibility of the log buffer."""
466
540
self.log_visible = not self.log_visible
468
self.log_message(u"Log visibility changed to: "
469
+ unicode(self.log_visible))
542
#self.log_message("Log visibility changed to: "
543
# + unicode(self.log_visible))
471
545
def change_log_display(self):
472
546
"""Change type of log display.
473
547
Currently, this toggles wrapping of text lines."""
474
if self.log_wrap == u"clip":
475
self.log_wrap = u"any"
548
if self.log_wrap == "clip":
549
self.log_wrap = "any"
477
self.log_wrap = u"clip"
551
self.log_wrap = "clip"
478
552
for textwidget in self.log:
479
553
textwidget.set_wrap_mode(self.log_wrap)
480
self.log_message(u"Wrap mode: " + self.log_wrap)
554
#self.log_message("Wrap mode: " + self.log_wrap)
482
556
def find_and_remove_client(self, path, name):
483
"""Find an client from its object path and remove it.
557
"""Find a client by its object path and remove it.
485
559
This is connected to the ClientRemoved signal from the
486
560
Mandos server object."""
534
610
"""Start the main loop and exit when it's done."""
611
self.bus = dbus.SystemBus()
612
mandos_dbus_objc = self.bus.get_object(
613
self.busname, "/", follow_name_owner_changes=True)
614
self.mandos_serv = dbus.Interface(mandos_dbus_objc,
618
mandos_clients = (self.mandos_serv
619
.GetAllClientsWithProperties())
620
except dbus.exceptions.DBusException:
621
mandos_clients = dbus.Dictionary()
624
.connect_to_signal("ClientRemoved",
625
self.find_and_remove_client,
626
dbus_interface=server_interface,
629
.connect_to_signal("ClientAdded",
631
dbus_interface=server_interface,
634
.connect_to_signal("ClientNotFound",
635
self.client_not_found,
636
dbus_interface=server_interface,
638
for path, client in mandos_clients.iteritems():
639
client_proxy_object = self.bus.get_object(self.busname,
641
self.add_client(MandosClientWidget(server_proxy_object
644
=client_proxy_object,
536
655
self._input_callback_tag = (gobject.io_add_watch
537
656
(sys.stdin.fileno(),
563
682
except KeyError: # :-)
566
if key == u"q" or key == u"Q":
685
if key == "q" or key == "Q":
569
elif key == u"window resize":
688
elif key == "window resize":
570
689
self.size = self.screen.get_cols_rows()
572
elif key == u"\f": # Ctrl-L
691
elif key == "\f": # Ctrl-L
574
elif key == u"l" or key == u"D":
693
elif key == "l" or key == "D":
575
694
self.toggle_log_display()
577
elif key == u"w" or key == u"i":
696
elif key == "w" or key == "i":
578
697
self.change_log_display()
580
elif key == u"?" or key == u"f1" or key == u"esc":
699
elif key == "?" or key == "f1" or key == "esc":
581
700
if not self.log_visible:
582
701
self.log_visible = True
584
self.log_message_raw((u"bold",
588
u"l: Log window toggle",
589
u"TAB: Switch window",
591
self.log_message_raw((u"bold",
597
u"s: Start new checker",
703
self.log_message_raw(("bold",
707
"l: Log window toggle",
708
"TAB: Switch window",
710
self.log_message_raw(("bold",
716
"s: Start new checker",
602
723
if self.topwidget.get_focus() is self.logbox:
603
724
self.topwidget.set_focus(0)
605
726
self.topwidget.set_focus(self.logbox)
607
#elif (key == u"end" or key == u"meta >" or key == u"G"
728
#elif (key == "end" or key == "meta >" or key == "G"
609
730
# pass # xxx end-of-buffer
610
#elif (key == u"home" or key == u"meta <" or key == u"g"
731
#elif (key == "home" or key == "meta <" or key == "g"
612
733
# pass # xxx beginning-of-buffer
613
#elif key == u"ctrl e" or key == u"$":
734
#elif key == "ctrl e" or key == "$":
614
735
# pass # xxx move-end-of-line
615
#elif key == u"ctrl a" or key == u"^":
736
#elif key == "ctrl a" or key == "^":
616
737
# pass # xxx move-beginning-of-line
617
#elif key == u"ctrl b" or key == u"meta (" or key == u"h":
738
#elif key == "ctrl b" or key == "meta (" or key == "h":
618
739
# pass # xxx left
619
#elif key == u"ctrl f" or key == u"meta )" or key == u"l":
740
#elif key == "ctrl f" or key == "meta )" or key == "l":
620
741
# pass # xxx right
622
743
# pass # scroll up log
624
745
# pass # scroll down log
625
746
elif self.topwidget.selectable():
626
747
self.topwidget.keypress(self.size, key)