To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to server.py
- browse files at revision 24.1.19
- compare with another revision
- download diff
- download tarball
- view history from revision 24.1.19
- Committer: Björn Påhlsson
- Date: 2008-08-04 21:27:53 UTC
- mfrom: (45 mandos)
- mto: (237.7.1 mandos) (24.1.154 mandos)
- mto: This revision was merged to the branch mainline in revision 46.
- Revision ID: belorn@braxen-20080804212753-rdghixnyfxb7w3u5
merge
- files removed:
- .bzr-builddeb
- debian
- debian/po
- files renamed:
- plugin-runner.c => plugbasedclient.c
- plugins.d/mandos-client.c => plugins.d/mandosclient.c
- plugins.d/password-prompt.c => plugins.d/passprompt.c
- mandos.conf => server.conf
- mandos => server.py
- files modified:
- Makefile
added
removed
server.py
6
6
# This program is partly derived from an example program for an Avahi
7
7
# service publisher, downloaded from
8
8
# <http://avahi.org/wiki/PythonPublishExample>. This includes the
9
# methods "add" and "remove" in the "AvahiService" class, the
10
# "server_state_changed" and "entry_group_state_changed" functions,
11
# and some lines in "main".
9
# following functions: "AvahiService.add", "AvahiService.remove",
10
# "server_state_changed", "entry_group_state_changed", and some lines
11
# in "main".
12
12
#
13
13
# Everything else is
14
# Copyright © 2008,2009 Teddy Hogeborn
15
# Copyright © 2008,2009 Björn Påhlsson
14
# Copyright © 2007-2008 Teddy Hogeborn & Björn Påhlsson
16
15
#
17
16
# This program is free software: you can redistribute it and/or modify
18
17
# it under the terms of the GNU General Public License as published by
25
24
# GNU General Public License for more details.
26
25
#
27
26
# You should have received a copy of the GNU General Public License
28
# along with this program. If not, see
29
# <http://www.gnu.org/licenses/>.
27
# along with this program. If not, see <http://www.gnu.org/licenses/>.
30
28
#
31
29
# Contact the authors at <mandos@fukt.bsnet.se>.
32
30
#
33
31
34
from __future__ import division, with_statement, absolute_import
32
from __future__ import division
35
33
36
34
import SocketServer
37
35
import socket
38
import optparse
36
import select
37
from optparse import OptionParser
39
38
import datetime
40
39
import errno
41
40
import gnutls.crypto
55
54
import stat
56
55
import logging
57
56
import logging.handlers
58
import pwd
59
from contextlib import closing
60
57
61
58
import dbus
62
import dbus.service
63
59
import gobject
64
60
import avahi
65
61
from dbus.mainloop.glib import DBusGMainLoop
66
62
import ctypes
67
import ctypes.util
68
69
version = "1.0.4"
63
64
# Brief description of the operation of this program:
65
#
66
# This server announces itself as a Zeroconf service. Connecting
67
# clients use the TLS protocol, with the unusual quirk that this
68
# server program acts as a TLS "client" while a connecting client acts
69
# as a TLS "server". The client (acting as a TLS "server") must
70
# supply an OpenPGP certificate, and the fingerprint of this
71
# certificate is used by this server to look up (in a list read from a
72
# file at start time) which binary blob to give the client. No other
73
# authentication or authorization is done by this server.
74
70
75
71
76
logger = logging.Logger('mandos')
72
syslogger = (logging.handlers.SysLogHandler
73
(facility = logging.handlers.SysLogHandler.LOG_DAEMON,
74
address = "/dev/log"))
75
syslogger.setFormatter(logging.Formatter
76
('Mandos: %(levelname)s: %(message)s'))
77
syslogger = logging.handlers.SysLogHandler\
78
(facility = logging.handlers.SysLogHandler.LOG_DAEMON)
79
syslogger.setFormatter(logging.Formatter\
80
('%(levelname)s: %(message)s'))
77
81
logger.addHandler(syslogger)
82
del syslogger
78
83
79
console = logging.StreamHandler()
80
console.setFormatter(logging.Formatter('%(name)s: %(levelname)s:'
81
' %(message)s'))
82
logger.addHandler(console)
83
84
84
85
class AvahiError(Exception):
85
def __init__(self, value, *args, **kwargs):
86
def __init__(self, value):
86
87
self.value = value
87
super(AvahiError, self).__init__(value, *args, **kwargs)
88
def __unicode__(self):
89
return unicode(repr(self.value))
88
def __str__(self):
89
return repr(self.value)
90
90
91
91
class AvahiServiceError(AvahiError):
92
92
pass
112
112
a sensible number of times
113
113
"""
114
114
def __init__(self, interface = avahi.IF_UNSPEC, name = None,
115
servicetype = None, port = None, TXT = None,
116
domain = "", host = "", max_renames = 32768):
115
type = None, port = None, TXT = None, domain = "",
116
host = "", max_renames = 12):
117
117
self.interface = interface
118
118
self.name = name
119
self.type = servicetype
119
self.type = type
120
120
self.port = port
121
self.TXT = TXT if TXT is not None else []
121
if TXT is None:
122
self.TXT = []
123
else:
124
self.TXT = TXT
122
125
self.domain = domain
123
126
self.host = host
124
127
self.rename_count = 0
125
self.max_renames = max_renames
126
128
def rename(self):
127
129
"""Derived from the Avahi example code"""
128
130
if self.rename_count >= self.max_renames:
129
logger.critical(u"No suitable Zeroconf service name found"
130
u" after %i retries, exiting.",
131
self.rename_count)
132
raise AvahiServiceError(u"Too many renames")
133
self.name = server.GetAlternativeServiceName(self.name)
134
logger.info(u"Changing Zeroconf service name to %r ...",
135
str(self.name))
136
syslogger.setFormatter(logging.Formatter
137
('Mandos (%s): %%(levelname)s:'
138
' %%(message)s' % self.name))
131
logger.critical(u"No suitable service name found after %i"
132
u" retries, exiting.", rename_count)
133
raise AvahiServiceError("Too many renames")
134
name = server.GetAlternativeServiceName(name)
135
logger.error(u"Changing name to %r ...", name)
139
136
self.remove()
140
137
self.add()
141
138
self.rename_count += 1
147
144
"""Derived from the Avahi example code"""
148
145
global group
149
146
if group is None:
150
group = dbus.Interface(bus.get_object
151
(avahi.DBUS_NAME,
147
group = dbus.Interface\
148
(bus.get_object(avahi.DBUS_NAME,
152
149
server.EntryGroupNew()),
153
avahi.DBUS_INTERFACE_ENTRY_GROUP)
150
avahi.DBUS_INTERFACE_ENTRY_GROUP)
154
151
group.connect_to_signal('StateChanged',
155
152
entry_group_state_changed)
156
logger.debug(u"Adding Zeroconf service '%s' of type '%s' ...",
153
logger.debug(u"Adding service '%s' of type '%s' ...",
157
154
service.name, service.type)
158
155
group.AddService(
159
156
self.interface, # interface
170
167
# End of Avahi example code
171
168
172
169
173
def _datetime_to_dbus(dt, variant_level=0):
174
"""Convert a UTC datetime.datetime() to a D-Bus type."""
175
return dbus.String(dt.isoformat(), variant_level=variant_level)
176
177
178
class Client(dbus.service.Object):
170
class Client(object):
179
171
"""A representation of a client host served by this server.
180
172
Attributes:
181
name: string; from the config file, used in log messages
173
name: string; from the config file, used in log messages
182
174
fingerprint: string (40 or 32 hexadecimal digits); used to
183
175
uniquely identify the client
184
secret: bytestring; sent verbatim (over TLS) to client
185
host: string; available for use by the checker command
186
created: datetime.datetime(); (UTC) object creation
187
last_enabled: datetime.datetime(); (UTC)
188
enabled: bool()
189
last_checked_ok: datetime.datetime(); (UTC) or None
190
timeout: datetime.timedelta(); How long from last_checked_ok
191
until this client is invalid
192
interval: datetime.timedelta(); How often to start a new checker
193
disable_hook: If set, called by disable() as disable_hook(self)
194
checker: subprocess.Popen(); a running checker process used
195
to see if the client lives.
196
'None' if no process is running.
176
secret: bytestring; sent verbatim (over TLS) to client
177
fqdn: string (FQDN); available for use by the checker command
178
created: datetime.datetime(); object creation, not client host
179
last_checked_ok: datetime.datetime() or None if not yet checked OK
180
timeout: datetime.timedelta(); How long from last_checked_ok
181
until this client is invalid
182
interval: datetime.timedelta(); How often to start a new checker
183
stop_hook: If set, called by stop() as stop_hook(self)
184
checker: subprocess.Popen(); a running checker process used
185
to see if the client lives.
186
'None' if no process is running.
197
187
checker_initiator_tag: a gobject event source tag, or None
198
disable_initiator_tag: - '' -
188
stop_initiator_tag: - '' -
199
189
checker_callback_tag: - '' -
200
190
checker_command: string; External command which is run to check if
201
191
client lives. %() expansions are done at
202
192
runtime with vars(self) as dict, so that for
203
193
instance %(name)s can be used in the command.
204
use_dbus: bool(); Whether to provide D-Bus interface and signals
205
dbus_object_path: dbus.ObjectPath ; only set if self.use_dbus
194
Private attibutes:
195
_timeout: Real variable for 'timeout'
196
_interval: Real variable for 'interval'
197
_timeout_milliseconds: Used when calling gobject.timeout_add()
198
_interval_milliseconds: - '' -
206
199
"""
207
def timeout_milliseconds(self):
208
"Return the 'timeout' attribute in milliseconds"
209
return ((self.timeout.days * 24 * 60 * 60 * 1000)
210
+ (self.timeout.seconds * 1000)
211
+ (self.timeout.microseconds // 1000))
212
213
def interval_milliseconds(self):
214
"Return the 'interval' attribute in milliseconds"
215
return ((self.interval.days * 24 * 60 * 60 * 1000)
216
+ (self.interval.seconds * 1000)
217
+ (self.interval.microseconds // 1000))
218
219
def __init__(self, name = None, disable_hook=None, config=None,
220
use_dbus=True):
200
def _set_timeout(self, timeout):
201
"Setter function for 'timeout' attribute"
202
self._timeout = timeout
203
self._timeout_milliseconds = ((self.timeout.days
204
* 24 * 60 * 60 * 1000)
205
+ (self.timeout.seconds * 1000)
206
+ (self.timeout.microseconds
207
// 1000))
208
timeout = property(lambda self: self._timeout,
209
_set_timeout)
210
del _set_timeout
211
def _set_interval(self, interval):
212
"Setter function for 'interval' attribute"
213
self._interval = interval
214
self._interval_milliseconds = ((self.interval.days
215
* 24 * 60 * 60 * 1000)
216
+ (self.interval.seconds
217
* 1000)
218
+ (self.interval.microseconds
219
// 1000))
220
interval = property(lambda self: self._interval,
221
_set_interval)
222
del _set_interval
223
def __init__(self, name = None, stop_hook=None, config={}):
221
224
"""Note: the 'checker' key in 'config' sets the
222
225
'checker_command' attribute and *not* the 'checker'
223
226
attribute."""
224
227
self.name = name
225
if config is None:
226
config = {}
227
228
logger.debug(u"Creating client %r", self.name)
228
self.use_dbus = use_dbus
229
if self.use_dbus:
230
self.dbus_object_path = (dbus.ObjectPath
231
("/Mandos/clients/"
232
+ self.name.replace(".", "_")))
233
dbus.service.Object.__init__(self, bus,
234
self.dbus_object_path)
235
229
# Uppercase and remove spaces from fingerprint for later
236
230
# comparison purposes with return value from the fingerprint()
237
231
# function
238
self.fingerprint = (config["fingerprint"].upper()
239
.replace(u" ", u""))
232
self.fingerprint = config["fingerprint"].upper()\
233
.replace(u" ", u"")
240
234
logger.debug(u" Fingerprint: %s", self.fingerprint)
241
235
if "secret" in config:
242
236
self.secret = config["secret"].decode(u"base64")
243
237
elif "secfile" in config:
244
with closing(open(os.path.expanduser
245
(os.path.expandvars
246
(config["secfile"])))) as secfile:
247
self.secret = secfile.read()
238
sf = open(config["secfile"])
239
self.secret = sf.read()
240
sf.close()
248
241
else:
249
242
raise TypeError(u"No secret or secfile for client %s"
250
243
% self.name)
251
self.host = config.get("host", "")
252
self.created = datetime.datetime.utcnow()
253
self.enabled = False
254
self.last_enabled = None
244
self.fqdn = config.get("fqdn", "")
245
self.created = datetime.datetime.now()
255
246
self.last_checked_ok = None
256
247
self.timeout = string_to_delta(config["timeout"])
257
248
self.interval = string_to_delta(config["interval"])
258
self.disable_hook = disable_hook
249
self.stop_hook = stop_hook
259
250
self.checker = None
260
251
self.checker_initiator_tag = None
261
self.disable_initiator_tag = None
252
self.stop_initiator_tag = None
262
253
self.checker_callback_tag = None
263
self.checker_command = config["checker"]
264
265
def enable(self):
254
self.check_command = config["checker"]
255
def start(self):
266
256
"""Start this client's checker and timeout hooks"""
267
self.last_enabled = datetime.datetime.utcnow()
268
257
# Schedule a new checker to be started an 'interval' from now,
269
258
# and every interval from then on.
270
self.checker_initiator_tag = (gobject.timeout_add
271
(self.interval_milliseconds(),
272
self.start_checker))
259
self.checker_initiator_tag = gobject.timeout_add\
260
(self._interval_milliseconds,
261
self.start_checker)
273
262
# Also start a new checker *right now*.
274
263
self.start_checker()
275
# Schedule a disable() when 'timeout' has passed
276
self.disable_initiator_tag = (gobject.timeout_add
277
(self.timeout_milliseconds(),
278
self.disable))
279
self.enabled = True
280
if self.use_dbus:
281
# Emit D-Bus signals
282
self.PropertyChanged(dbus.String(u"enabled"),
283
dbus.Boolean(True, variant_level=1))
284
self.PropertyChanged(dbus.String(u"last_enabled"),
285
(_datetime_to_dbus(self.last_enabled,
286
variant_level=1)))
287
288
def disable(self):
289
"""Disable this client."""
290
if not getattr(self, "enabled", False):
264
# Schedule a stop() when 'timeout' has passed
265
self.stop_initiator_tag = gobject.timeout_add\
266
(self._timeout_milliseconds,
267
self.stop)
268
def stop(self):
269
"""Stop this client.
270
The possibility that a client might be restarted is left open,
271
but not currently used."""
272
# If this client doesn't have a secret, it is already stopped.
273
if self.secret:
274
logger.info(u"Stopping client %s", self.name)
275
self.secret = None
276
else:
291
277
return False
292
logger.info(u"Disabling client %s", self.name)
293
if getattr(self, "disable_initiator_tag", False):
294
gobject.source_remove(self.disable_initiator_tag)
295
self.disable_initiator_tag = None
278
if getattr(self, "stop_initiator_tag", False):
279
gobject.source_remove(self.stop_initiator_tag)
280
self.stop_initiator_tag = None
296
281
if getattr(self, "checker_initiator_tag", False):
297
282
gobject.source_remove(self.checker_initiator_tag)
298
283
self.checker_initiator_tag = None
299
284
self.stop_checker()
300
if self.disable_hook:
301
self.disable_hook(self)
302
self.enabled = False
303
if self.use_dbus:
304
# Emit D-Bus signal
305
self.PropertyChanged(dbus.String(u"enabled"),
306
dbus.Boolean(False, variant_level=1))
285
if self.stop_hook:
286
self.stop_hook(self)
307
287
# Do not run this again if called by a gobject.timeout_add
308
288
return False
309
310
289
def __del__(self):
311
self.disable_hook = None
312
self.disable()
313
314
def checker_callback(self, pid, condition, command):
290
self.stop_hook = None
291
self.stop()
292
def checker_callback(self, pid, condition):
315
293
"""The checker has completed, so take appropriate actions."""
294
now = datetime.datetime.now()
316
295
self.checker_callback_tag = None
317
296
self.checker = None
318
if self.use_dbus:
319
# Emit D-Bus signal
320
self.PropertyChanged(dbus.String(u"checker_running"),
321
dbus.Boolean(False, variant_level=1))
322
if (os.WIFEXITED(condition)
323
and (os.WEXITSTATUS(condition) == 0)):
297
if os.WIFEXITED(condition) \
298
and (os.WEXITSTATUS(condition) == 0):
324
299
logger.info(u"Checker for %(name)s succeeded",
325
300
vars(self))
326
if self.use_dbus:
327
# Emit D-Bus signal
328
self.CheckerCompleted(dbus.Boolean(True),
329
dbus.UInt16(condition),
330
dbus.String(command))
331
self.bump_timeout()
301
self.last_checked_ok = now
302
gobject.source_remove(self.stop_initiator_tag)
303
self.stop_initiator_tag = gobject.timeout_add\
304
(self._timeout_milliseconds,
305
self.stop)
332
306
elif not os.WIFEXITED(condition):
333
307
logger.warning(u"Checker for %(name)s crashed?",
334
308
vars(self))
335
if self.use_dbus:
336
# Emit D-Bus signal
337
self.CheckerCompleted(dbus.Boolean(False),
338
dbus.UInt16(condition),
339
dbus.String(command))
340
309
else:
341
310
logger.info(u"Checker for %(name)s failed",
342
311
vars(self))
343
if self.use_dbus:
344
# Emit D-Bus signal
345
self.CheckerCompleted(dbus.Boolean(False),
346
dbus.UInt16(condition),
347
dbus.String(command))
348
349
def bump_timeout(self):
350
"""Bump up the timeout for this client.
351
This should only be called when the client has been seen,
352
alive and well.
353
"""
354
self.last_checked_ok = datetime.datetime.utcnow()
355
gobject.source_remove(self.disable_initiator_tag)
356
self.disable_initiator_tag = (gobject.timeout_add
357
(self.timeout_milliseconds(),
358
self.disable))
359
if self.use_dbus:
360
# Emit D-Bus signal
361
self.PropertyChanged(
362
dbus.String(u"last_checked_ok"),
363
(_datetime_to_dbus(self.last_checked_ok,
364
variant_level=1)))
365
366
312
def start_checker(self):
367
313
"""Start a new checker subprocess if one is not running.
368
314
If a checker already exists, leave it running and do
377
323
# is as it should be.
378
324
if self.checker is None:
379
325
try:
380
# In case checker_command has exactly one % operator
381
command = self.checker_command % self.host
326
# In case check_command has exactly one % operator
327
command = self.check_command % self.fqdn
382
328
except TypeError:
383
329
# Escape attributes for the shell
384
330
escaped_attrs = dict((key, re.escape(str(val)))
385
331
for key, val in
386
332
vars(self).iteritems())
387
333
try:
388
command = self.checker_command % escaped_attrs
334
command = self.check_command % escaped_attrs
389
335
except TypeError, error:
390
336
logger.error(u'Could not format string "%s":'
391
u' %s', self.checker_command, error)
337
u' %s', self.check_command, error)
392
338
return True # Try again later
393
339
try:
394
340
logger.info(u"Starting checker %r for %s",
395
341
command, self.name)
396
# We don't need to redirect stdout and stderr, since
397
# in normal mode, that is already done by daemon(),
398
# and in debug mode we don't want to. (Stdin is
399
# always replaced by /dev/null.)
400
342
self.checker = subprocess.Popen(command,
401
343
close_fds=True,
402
344
shell=True, cwd="/")
403
if self.use_dbus:
404
# Emit D-Bus signal
405
self.CheckerStarted(command)
406
self.PropertyChanged(
407
dbus.String("checker_running"),
408
dbus.Boolean(True, variant_level=1))
409
self.checker_callback_tag = (gobject.child_watch_add
410
(self.checker.pid,
411
self.checker_callback,
412
data=command))
413
except OSError, error:
345
self.checker_callback_tag = gobject.child_watch_add\
346
(self.checker.pid,
347
self.checker_callback)
348
except subprocess.OSError, error:
414
349
logger.error(u"Failed to start subprocess: %s",
415
350
error)
416
351
# Re-run this periodically if run by gobject.timeout_add
417
352
return True
418
419
353
def stop_checker(self):
420
354
"""Force the checker process, if any, to stop."""
421
355
if self.checker_callback_tag:
423
357
self.checker_callback_tag = None
424
358
if getattr(self, "checker", None) is None:
425
359
return
426
logger.debug(u"Stopping checker for %(name)s", vars(self))
360
logger.debug("Stopping checker for %(name)s", vars(self))
427
361
try:
428
362
os.kill(self.checker.pid, signal.SIGTERM)
429
363
#os.sleep(0.5)
433
367
if error.errno != errno.ESRCH: # No such process
434
368
raise
435
369
self.checker = None
436
if self.use_dbus:
437
self.PropertyChanged(dbus.String(u"checker_running"),
438
dbus.Boolean(False, variant_level=1))
439
440
370
def still_valid(self):
441
371
"""Has the timeout not yet passed for this client?"""
442
if not getattr(self, "enabled", False):
443
return False
444
now = datetime.datetime.utcnow()
372
now = datetime.datetime.now()
445
373
if self.last_checked_ok is None:
446
374
return now < (self.created + self.timeout)
447
375
else:
448
376
return now < (self.last_checked_ok + self.timeout)
449
450
## D-Bus methods & signals
451
_interface = u"org.mandos_system.Mandos.Client"
452
453
# BumpTimeout - method
454
BumpTimeout = dbus.service.method(_interface)(bump_timeout)
455
BumpTimeout.__name__ = "BumpTimeout"
456
457
# CheckerCompleted - signal
458
@dbus.service.signal(_interface, signature="bqs")
459
def CheckerCompleted(self, success, condition, command):
460
"D-Bus signal"
461
pass
462
463
# CheckerStarted - signal
464
@dbus.service.signal(_interface, signature="s")
465
def CheckerStarted(self, command):
466
"D-Bus signal"
467
pass
468
469
# GetAllProperties - method
470
@dbus.service.method(_interface, out_signature="a{sv}")
471
def GetAllProperties(self):
472
"D-Bus method"
473
return dbus.Dictionary({
474
dbus.String("name"):
475
dbus.String(self.name, variant_level=1),
476
dbus.String("fingerprint"):
477
dbus.String(self.fingerprint, variant_level=1),
478
dbus.String("host"):
479
dbus.String(self.host, variant_level=1),
480
dbus.String("created"):
481
_datetime_to_dbus(self.created, variant_level=1),
482
dbus.String("last_enabled"):
483
(_datetime_to_dbus(self.last_enabled,
484
variant_level=1)
485
if self.last_enabled is not None
486
else dbus.Boolean(False, variant_level=1)),
487
dbus.String("enabled"):
488
dbus.Boolean(self.enabled, variant_level=1),
489
dbus.String("last_checked_ok"):
490
(_datetime_to_dbus(self.last_checked_ok,
491
variant_level=1)
492
if self.last_checked_ok is not None
493
else dbus.Boolean (False, variant_level=1)),
494
dbus.String("timeout"):
495
dbus.UInt64(self.timeout_milliseconds(),
496
variant_level=1),
497
dbus.String("interval"):
498
dbus.UInt64(self.interval_milliseconds(),
499
variant_level=1),
500
dbus.String("checker"):
501
dbus.String(self.checker_command,
502
variant_level=1),
503
dbus.String("checker_running"):
504
dbus.Boolean(self.checker is not None,
505
variant_level=1),
506
}, signature="sv")
507
508
# IsStillValid - method
509
IsStillValid = (dbus.service.method(_interface, out_signature="b")
510
(still_valid))
511
IsStillValid.__name__ = "IsStillValid"
512
513
# PropertyChanged - signal
514
@dbus.service.signal(_interface, signature="sv")
515
def PropertyChanged(self, property, value):
516
"D-Bus signal"
517
pass
518
519
# SetChecker - method
520
@dbus.service.method(_interface, in_signature="s")
521
def SetChecker(self, checker):
522
"D-Bus setter method"
523
self.checker_command = checker
524
# Emit D-Bus signal
525
self.PropertyChanged(dbus.String(u"checker"),
526
dbus.String(self.checker_command,
527
variant_level=1))
528
529
# SetHost - method
530
@dbus.service.method(_interface, in_signature="s")
531
def SetHost(self, host):
532
"D-Bus setter method"
533
self.host = host
534
# Emit D-Bus signal
535
self.PropertyChanged(dbus.String(u"host"),
536
dbus.String(self.host, variant_level=1))
537
538
# SetInterval - method
539
@dbus.service.method(_interface, in_signature="t")
540
def SetInterval(self, milliseconds):
541
self.interval = datetime.timedelta(0, 0, 0, milliseconds)
542
# Emit D-Bus signal
543
self.PropertyChanged(dbus.String(u"interval"),
544
(dbus.UInt64(self.interval_milliseconds(),
545
variant_level=1)))
546
547
# SetSecret - method
548
@dbus.service.method(_interface, in_signature="ay",
549
byte_arrays=True)
550
def SetSecret(self, secret):
551
"D-Bus setter method"
552
self.secret = str(secret)
553
554
# SetTimeout - method
555
@dbus.service.method(_interface, in_signature="t")
556
def SetTimeout(self, milliseconds):
557
self.timeout = datetime.timedelta(0, 0, 0, milliseconds)
558
# Emit D-Bus signal
559
self.PropertyChanged(dbus.String(u"timeout"),
560
(dbus.UInt64(self.timeout_milliseconds(),
561
variant_level=1)))
562
563
# Enable - method
564
Enable = dbus.service.method(_interface)(enable)
565
Enable.__name__ = "Enable"
566
567
# StartChecker - method
568
@dbus.service.method(_interface)
569
def StartChecker(self):
570
"D-Bus method"
571
self.start_checker()
572
573
# Disable - method
574
@dbus.service.method(_interface)
575
def Disable(self):
576
"D-Bus method"
577
self.disable()
578
579
# StopChecker - method
580
StopChecker = dbus.service.method(_interface)(stop_checker)
581
StopChecker.__name__ = "StopChecker"
582
583
del _interface
584
377
585
378
586
379
def peer_certificate(session):
587
380
"Return the peer's OpenPGP certificate as a bytestring"
588
381
# If not an OpenPGP certificate...
589
if (gnutls.library.functions
590
.gnutls_certificate_type_get(session._c_object)
591
!= gnutls.library.constants.GNUTLS_CRT_OPENPGP):
382
if gnutls.library.functions.gnutls_certificate_type_get\
383
(session._c_object) \
384
!= gnutls.library.constants.GNUTLS_CRT_OPENPGP:
592
385
# ...do the normal thing
593
386
return session.peer_certificate
594
387
list_size = ctypes.c_uint()
595
cert_list = (gnutls.library.functions
596
.gnutls_certificate_get_peers
597
(session._c_object, ctypes.byref(list_size)))
388
cert_list = gnutls.library.functions.gnutls_certificate_get_peers\
389
(session._c_object, ctypes.byref(list_size))
598
390
if list_size.value == 0:
599
391
return None
600
392
cert = cert_list[0]
604
396
def fingerprint(openpgp):
605
397
"Convert an OpenPGP bytestring to a hexdigit fingerprint string"
606
398
# New GnuTLS "datum" with the OpenPGP public key
607
datum = (gnutls.library.types
608
.gnutls_datum_t(ctypes.cast(ctypes.c_char_p(openpgp),
609
ctypes.POINTER
610
(ctypes.c_ubyte)),
611
ctypes.c_uint(len(openpgp))))
399
datum = gnutls.library.types.gnutls_datum_t\
400
(ctypes.cast(ctypes.c_char_p(openpgp),
401
ctypes.POINTER(ctypes.c_ubyte)),
402
ctypes.c_uint(len(openpgp)))
612
403
# New empty GnuTLS certificate
613
404
crt = gnutls.library.types.gnutls_openpgp_crt_t()
614
(gnutls.library.functions
615
.gnutls_openpgp_crt_init(ctypes.byref(crt)))
405
gnutls.library.functions.gnutls_openpgp_crt_init\
406
(ctypes.byref(crt))
616
407
# Import the OpenPGP public key into the certificate
617
(gnutls.library.functions
618
.gnutls_openpgp_crt_import(crt, ctypes.byref(datum),
619
gnutls.library.constants
620
.GNUTLS_OPENPGP_FMT_RAW))
621
# Verify the self signature in the key
622
crtverify = ctypes.c_uint()
623
(gnutls.library.functions
624
.gnutls_openpgp_crt_verify_self(crt, 0, ctypes.byref(crtverify)))
625
if crtverify.value != 0:
626
gnutls.library.functions.gnutls_openpgp_crt_deinit(crt)
627
raise gnutls.errors.CertificateSecurityError("Verify failed")
408
gnutls.library.functions.gnutls_openpgp_crt_import\
409
(crt, ctypes.byref(datum),
410
gnutls.library.constants.GNUTLS_OPENPGP_FMT_RAW)
628
411
# New buffer for the fingerprint
629
buf = ctypes.create_string_buffer(20)
630
buf_len = ctypes.c_size_t()
412
buffer = ctypes.create_string_buffer(20)
413
buffer_length = ctypes.c_size_t()
631
414
# Get the fingerprint from the certificate into the buffer
632
(gnutls.library.functions
633
.gnutls_openpgp_crt_get_fingerprint(crt, ctypes.byref(buf),
634
ctypes.byref(buf_len)))
415
gnutls.library.functions.gnutls_openpgp_crt_get_fingerprint\
416
(crt, ctypes.byref(buffer), ctypes.byref(buffer_length))
635
417
# Deinit the certificate
636
418
gnutls.library.functions.gnutls_openpgp_crt_deinit(crt)
637
419
# Convert the buffer to a Python bytestring
638
fpr = ctypes.string_at(buf, buf_len.value)
420
fpr = ctypes.string_at(buffer, buffer_length.value)
639
421
# Convert the bytestring to hexadecimal notation
640
422
hex_fpr = u''.join(u"%02X" % ord(char) for char in fpr)
641
423
return hex_fpr
642
424
643
425
644
class TCP_handler(SocketServer.BaseRequestHandler, object):
426
class tcp_handler(SocketServer.BaseRequestHandler, object):
645
427
"""A TCP request handler class.
646
428
Instantiated by IPv6_TCPServer for each request to handle it.
647
429
Note: This will run in its own forked process."""
648
430
649
431
def handle(self):
650
432
logger.info(u"TCP connection from: %s",
651
unicode(self.client_address))
652
session = (gnutls.connection
653
.ClientSession(self.request,
654
gnutls.connection
655
.X509Credentials()))
433
unicode(self.client_address))
434
session = gnutls.connection.ClientSession\
435
(self.request, gnutls.connection.X509Credentials())
656
436
657
437
line = self.request.makefile().readline()
658
438
logger.debug(u"Protocol version: %r", line)
671
451
#priority = ':'.join(("NONE", "+VERS-TLS1.1", "+AES-256-CBC",
672
452
# "+SHA1", "+COMP-NULL", "+CTYPE-OPENPGP",
673
453
# "+DHE-DSS"))
674
# Use a fallback default, since this MUST be set.
675
priority = self.server.settings.get("priority", "NORMAL")
676
(gnutls.library.functions
677
.gnutls_priority_set_direct(session._c_object,
678
priority, None))
454
priority = "NORMAL" # Fallback default, since this
455
# MUST be set.
456
if self.server.settings["priority"]:
457
priority = self.server.settings["priority"]
458
gnutls.library.functions.gnutls_priority_set_direct\
459
(session._c_object, priority, None);
679
460
680
461
try:
681
462
session.handshake()
691
472
session.bye()
692
473
return
693
474
logger.debug(u"Fingerprint: %s", fpr)
475
client = None
694
476
for c in self.server.clients:
695
477
if c.fingerprint == fpr:
696
478
client = c
697
479
break
698
else:
480
if not client:
699
481
logger.warning(u"Client not found for fingerprint: %s",
700
482
fpr)
701
483
session.bye()
708
490
vars(client))
709
491
session.bye()
710
492
return
711
## This won't work here, since we're in a fork.
712
# client.bump_timeout()
713
493
sent_size = 0
714
494
while sent_size < len(client.secret):
715
495
sent = session.send(client.secret[sent_size:])
720
500
session.bye()
721
501
722
502
723
class IPv6_TCPServer(SocketServer.ForkingMixIn,
724
SocketServer.TCPServer, object):
503
class IPv6_TCPServer(SocketServer.ForkingTCPServer, object):
725
504
"""IPv6 TCP server. Accepts 'None' as address and/or port.
726
505
Attributes:
727
506
settings: Server settings
728
507
clients: Set() of Client objects
729
enabled: Boolean; whether this server is activated yet
730
508
"""
731
509
address_family = socket.AF_INET6
732
510
def __init__(self, *args, **kwargs):
736
514
if "clients" in kwargs:
737
515
self.clients = kwargs["clients"]
738
516
del kwargs["clients"]
739
self.enabled = False
740
super(IPv6_TCPServer, self).__init__(*args, **kwargs)
517
return super(type(self), self).__init__(*args, **kwargs)
741
518
def server_bind(self):
742
519
"""This overrides the normal server_bind() function
743
520
to bind to an interface if one was specified, and also NOT to
762
539
in6addr_any = "::"
763
540
self.server_address = (in6addr_any,
764
541
self.server_address[1])
765
elif not self.server_address[1]:
542
elif self.server_address[1] is None:
766
543
self.server_address = (self.server_address[0],
767
544
0)
768
# if self.settings["interface"]:
769
# self.server_address = (self.server_address[0],
770
# 0, # port
771
# 0, # flowinfo
772
# if_nametoindex
773
# (self.settings
774
# ["interface"]))
775
return super(IPv6_TCPServer, self).server_bind()
776
def server_activate(self):
777
if self.enabled:
778
return super(IPv6_TCPServer, self).server_activate()
779
def enable(self):
780
self.enabled = True
545
return super(type(self), self).server_bind()
781
546
782
547
783
548
def string_to_delta(interval):
793
558
datetime.timedelta(1)
794
559
>>> string_to_delta(u'1w')
795
560
datetime.timedelta(7)
796
>>> string_to_delta('5m 30s')
797
datetime.timedelta(0, 330)
798
561
"""
799
timevalue = datetime.timedelta(0)
800
for s in interval.split():
801
try:
802
suffix = unicode(s[-1])
803
value = int(s[:-1])
804
if suffix == u"d":
805
delta = datetime.timedelta(value)
806
elif suffix == u"s":
807
delta = datetime.timedelta(0, value)
808
elif suffix == u"m":
809
delta = datetime.timedelta(0, 0, 0, 0, value)
810
elif suffix == u"h":
811
delta = datetime.timedelta(0, 0, 0, 0, 0, value)
812
elif suffix == u"w":
813
delta = datetime.timedelta(0, 0, 0, 0, 0, 0, value)
814
else:
815
raise ValueError
816
except (ValueError, IndexError):
562
try:
563
suffix=unicode(interval[-1])
564
value=int(interval[:-1])
565
if suffix == u"d":
566
delta = datetime.timedelta(value)
567
elif suffix == u"s":
568
delta = datetime.timedelta(0, value)
569
elif suffix == u"m":
570
delta = datetime.timedelta(0, 0, 0, 0, value)
571
elif suffix == u"h":
572
delta = datetime.timedelta(0, 0, 0, 0, 0, value)
573
elif suffix == u"w":
574
delta = datetime.timedelta(0, 0, 0, 0, 0, 0, value)
575
else:
817
576
raise ValueError
818
timevalue += delta
819
return timevalue
577
except (ValueError, IndexError):
578
raise ValueError
579
return delta
820
580
821
581
822
582
def server_state_changed(state):
823
583
"""Derived from the Avahi example code"""
824
584
if state == avahi.SERVER_COLLISION:
825
logger.error(u"Zeroconf server name collision")
585
logger.error(u"Server name collision")
826
586
service.remove()
827
587
elif state == avahi.SERVER_RUNNING:
828
588
service.add()
830
590
831
591
def entry_group_state_changed(state, error):
832
592
"""Derived from the Avahi example code"""
833
logger.debug(u"Avahi state change: %i", state)
593
logger.debug(u"state change: %i", state)
834
594
835
595
if state == avahi.ENTRY_GROUP_ESTABLISHED:
836
logger.debug(u"Zeroconf service established.")
596
logger.debug(u"Service established.")
837
597
elif state == avahi.ENTRY_GROUP_COLLISION:
838
logger.warning(u"Zeroconf service name collision.")
598
logger.warning(u"Service name collision.")
839
599
service.rename()
840
600
elif state == avahi.ENTRY_GROUP_FAILURE:
841
logger.critical(u"Avahi: Error in group state changed %s",
601
logger.critical(u"Error in group state changed %s",
842
602
unicode(error))
843
raise AvahiGroupError(u"State changed: %s" % unicode(error))
603
raise AvahiGroupError("State changed: %s", str(error))
844
604
845
605
def if_nametoindex(interface):
846
606
"""Call the C function if_nametoindex(), or equivalent"""
847
607
global if_nametoindex
848
608
try:
849
if_nametoindex = (ctypes.cdll.LoadLibrary
850
(ctypes.util.find_library("c"))
851
.if_nametoindex)
609
if "ctypes.util" not in sys.modules:
610
import ctypes.util
611
if_nametoindex = ctypes.cdll.LoadLibrary\
612
(ctypes.util.find_library("c")).if_nametoindex
852
613
except (OSError, AttributeError):
853
614
if "struct" not in sys.modules:
854
615
import struct
857
618
def if_nametoindex(interface):
858
619
"Get an interface index the hard way, i.e. using fcntl()"
859
620
SIOCGIFINDEX = 0x8933 # From /usr/include/linux/sockios.h
860
with closing(socket.socket()) as s:
861
ifreq = fcntl.ioctl(s, SIOCGIFINDEX,
862
struct.pack("16s16x", interface))
621
s = socket.socket()
622
ifreq = fcntl.ioctl(s, SIOCGIFINDEX,
623
struct.pack("16s16x", interface))
624
s.close()
863
625
interface_index = struct.unpack("I", ifreq[16:20])[0]
864
626
return interface_index
865
627
return if_nametoindex(interface)
866
628
867
629
868
def daemon(nochdir = False, noclose = False):
630
def daemon(nochdir, noclose):
869
631
"""See daemon(3). Standard BSD Unix function.
870
632
This should really exist as os.daemon, but it doesn't (yet)."""
871
633
if os.fork():
873
635
os.setsid()
874
636
if not nochdir:
875
637
os.chdir("/")
876
if os.fork():
877
sys.exit()
878
638
if not noclose:
879
639
# Close all standard open file descriptors
880
640
null = os.open(os.path.devnull, os.O_NOCTTY | os.O_RDWR)
889
649
890
650
891
651
def main():
892
parser = optparse.OptionParser(version = "%%prog %s" % version)
652
global main_loop_started
653
main_loop_started = False
654
655
parser = OptionParser()
893
656
parser.add_option("-i", "--interface", type="string",
894
657
metavar="IF", help="Bind to interface IF")
895
658
parser.add_option("-a", "--address", type="string",
896
659
help="Address to listen for requests on")
897
660
parser.add_option("-p", "--port", type="int",
898
661
help="Port number to receive requests on")
899
parser.add_option("--check", action="store_true",
662
parser.add_option("--check", action="store_true", default=False,
900
663
help="Run self-test")
901
parser.add_option("--debug", action="store_true",
664
parser.add_option("--debug", action="store_true", default=False,
902
665
help="Debug mode; run in foreground and log to"
903
666
" terminal")
904
667
parser.add_option("--priority", type="string", help="GnuTLS"
909
672
default="/etc/mandos", metavar="DIR",
910
673
help="Directory to search for configuration"
911
674
" files")
912
parser.add_option("--no-dbus", action="store_false",
913
dest="use_dbus",
914
help=optparse.SUPPRESS_HELP) # XXX: Not done yet
915
options = parser.parse_args()[0]
675
(options, args) = parser.parse_args()
916
676
917
677
if options.check:
918
678
import doctest
927
687
"priority":
928
688
"SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP",
929
689
"servicename": "Mandos",
930
"use_dbus": "True",
931
690
}
932
691
933
692
# Parse config file for server-global settings
934
693
server_config = ConfigParser.SafeConfigParser(server_defaults)
935
694
del server_defaults
936
server_config.read(os.path.join(options.configdir, "mandos.conf"))
695
server_config.read(os.path.join(options.configdir, "server.conf"))
696
server_section = "server"
937
697
# Convert the SafeConfigParser object to a dict
938
server_settings = server_config.defaults()
939
# Use getboolean on the boolean config options
940
server_settings["debug"] = (server_config.getboolean
941
("DEFAULT", "debug"))
942
server_settings["use_dbus"] = (server_config.getboolean
943
("DEFAULT", "use_dbus"))
698
server_settings = dict(server_config.items(server_section))
699
# Use getboolean on the boolean config option
700
server_settings["debug"] = server_config.getboolean\
701
(server_section, "debug")
944
702
del server_config
945
703
946
704
# Override the settings from the config file with command line
947
705
# options, if set.
948
706
for option in ("interface", "address", "port", "debug",
949
"priority", "servicename", "configdir",
950
"use_dbus"):
707
"priority", "servicename", "configdir"):
951
708
value = getattr(options, option)
952
709
if value is not None:
953
710
server_settings[option] = value
954
711
del options
955
712
# Now we have our good server settings in "server_settings"
956
713
957
# For convenience
958
debug = server_settings["debug"]
959
use_dbus = server_settings["use_dbus"]
960
use_dbus = False # XXX: Not done yet
961
962
if not debug:
963
syslogger.setLevel(logging.WARNING)
964
console.setLevel(logging.WARNING)
965
966
if server_settings["servicename"] != "Mandos":
967
syslogger.setFormatter(logging.Formatter
968
('Mandos (%s): %%(levelname)s:'
969
' %%(message)s'
970
% server_settings["servicename"]))
971
972
714
# Parse config file with clients
973
715
client_defaults = { "timeout": "1h",
974
716
"interval": "5m",
975
"checker": "fping -q -- %%(host)s",
976
"host": "",
717
"checker": "fping -q -- %%(fqdn)s",
977
718
}
978
719
client_config = ConfigParser.SafeConfigParser(client_defaults)
979
720
client_config.read(os.path.join(server_settings["configdir"],
980
721
"clients.conf"))
981
722
982
clients = Set()
983
tcp_server = IPv6_TCPServer((server_settings["address"],
984
server_settings["port"]),
985
TCP_handler,
986
settings=server_settings,
987
clients=clients)
988
pidfilename = "/var/run/mandos.pid"
989
try:
990
pidfile = open(pidfilename, "w")
991
except IOError, error:
992
logger.error("Could not open file %r", pidfilename)
993
994
try:
995
uid = pwd.getpwnam("_mandos").pw_uid
996
gid = pwd.getpwnam("_mandos").pw_gid
997
except KeyError:
998
try:
999
uid = pwd.getpwnam("mandos").pw_uid
1000
gid = pwd.getpwnam("mandos").pw_gid
1001
except KeyError:
1002
try:
1003
uid = pwd.getpwnam("nobody").pw_uid
1004
gid = pwd.getpwnam("nogroup").pw_gid
1005
except KeyError:
1006
uid = 65534
1007
gid = 65534
1008
try:
1009
os.setuid(uid)
1010
os.setgid(gid)
1011
except OSError, error:
1012
if error[0] != errno.EPERM:
1013
raise error
1014
1015
723
global service
1016
724
service = AvahiService(name = server_settings["servicename"],
1017
servicetype = "_mandos._tcp", )
725
type = "_mandos._tcp", );
1018
726
if server_settings["interface"]:
1019
service.interface = (if_nametoindex
1020
(server_settings["interface"]))
727
service.interface = if_nametoindex(server_settings["interface"])
1021
728
1022
729
global main_loop
1023
730
global bus
1026
733
DBusGMainLoop(set_as_default=True )
1027
734
main_loop = gobject.MainLoop()
1028
735
bus = dbus.SystemBus()
1029
server = dbus.Interface(bus.get_object(avahi.DBUS_NAME,
1030
avahi.DBUS_PATH_SERVER),
1031
avahi.DBUS_INTERFACE_SERVER)
736
server = dbus.Interface(
737
bus.get_object( avahi.DBUS_NAME, avahi.DBUS_PATH_SERVER ),
738
avahi.DBUS_INTERFACE_SERVER )
1032
739
# End of Avahi example code
1033
if use_dbus:
1034
bus_name = dbus.service.BusName(u"org.mandos-system.Mandos",
1035
bus)
740
741
debug = server_settings["debug"]
742
743
if debug:
744
console = logging.StreamHandler()
745
# console.setLevel(logging.DEBUG)
746
console.setFormatter(logging.Formatter\
747
('%(levelname)s: %(message)s'))
748
logger.addHandler(console)
749
del console
750
751
clients = Set()
752
def remove_from_clients(client):
753
clients.remove(client)
754
if not clients:
755
logger.critical(u"No clients left, exiting")
756
sys.exit()
1036
757
1037
758
clients.update(Set(Client(name = section,
759
stop_hook = remove_from_clients,
1038
760
config
1039
= dict(client_config.items(section)),
1040
use_dbus = use_dbus)
761
= dict(client_config.items(section)))
1041
762
for section in client_config.sections()))
1042
if not clients:
1043
logger.warning(u"No clients defined")
1044
1045
if debug:
1046
# Redirect stdin so all checkers get /dev/null
1047
null = os.open(os.path.devnull, os.O_NOCTTY | os.O_RDWR)
1048
os.dup2(null, sys.stdin.fileno())
1049
if null > 2:
1050
os.close(null)
1051
else:
1052
# No console logging
1053
logger.removeHandler(console)
1054
# Close all input and output, do double fork, etc.
1055
daemon()
1056
1057
try:
1058
pid = os.getpid()
1059
pidfile.write(str(pid) + "\n")
1060
pidfile.close()
1061
del pidfile
1062
except IOError:
1063
logger.error(u"Could not write to file %r with PID %d",
1064
pidfilename, pid)
1065
except NameError:
1066
# "pidfile" was never created
1067
pass
1068
del pidfilename
763
764
if not debug:
765
daemon(False, False)
1069
766
1070
767
def cleanup():
1071
768
"Cleanup function; run on exit"
1078
775
1079
776
while clients:
1080
777
client = clients.pop()
1081
client.disable_hook = None
1082
client.disable()
778
client.stop_hook = None
779
client.stop()
1083
780
1084
781
atexit.register(cleanup)
1085
782
1088
785
signal.signal(signal.SIGHUP, lambda signum, frame: sys.exit())
1089
786
signal.signal(signal.SIGTERM, lambda signum, frame: sys.exit())
1090
787
1091
if use_dbus:
1092
class MandosServer(dbus.service.Object):
1093
"""A D-Bus proxy object"""
1094
def __init__(self):
1095
dbus.service.Object.__init__(self, bus,
1096
"/Mandos")
1097
_interface = u"org.mandos_system.Mandos"
1098
1099
@dbus.service.signal(_interface, signature="oa{sv}")
1100
def ClientAdded(self, objpath, properties):
1101
"D-Bus signal"
1102
pass
1103
1104
@dbus.service.signal(_interface, signature="o")
1105
def ClientRemoved(self, objpath):
1106
"D-Bus signal"
1107
pass
1108
1109
@dbus.service.method(_interface, out_signature="ao")
1110
def GetAllClients(self):
1111
return dbus.Array(c.dbus_object_path for c in clients)
1112
1113
@dbus.service.method(_interface, out_signature="a{oa{sv}}")
1114
def GetAllClientsWithProperties(self):
1115
return dbus.Dictionary(
1116
((c.dbus_object_path, c.GetAllProperties())
1117
for c in clients),
1118
signature="oa{sv}")
1119
1120
@dbus.service.method(_interface, in_signature="o")
1121
def RemoveClient(self, object_path):
1122
for c in clients:
1123
if c.dbus_object_path == object_path:
1124
clients.remove(c)
1125
# Don't signal anything except ClientRemoved
1126
c.use_dbus = False
1127
c.disable()
1128
# Emit D-Bus signal
1129
self.ClientRemoved(object_path)
1130
return
1131
raise KeyError
1132
@dbus.service.method(_interface)
1133
def Quit(self):
1134
main_loop.quit()
1135
1136
del _interface
1137
1138
mandos_server = MandosServer()
1139
1140
788
for client in clients:
1141
if use_dbus:
1142
# Emit D-Bus signal
1143
mandos_server.ClientAdded(client.dbus_object_path,
1144
client.GetAllProperties())
1145
client.enable()
1146
1147
tcp_server.enable()
1148
tcp_server.server_activate()
1149
789
client.start()
790
791
tcp_server = IPv6_TCPServer((server_settings["address"],
792
server_settings["port"]),
793
tcp_handler,
794
settings=server_settings,
795
clients=clients)
1150
796
# Find out what port we got
1151
797
service.port = tcp_server.socket.getsockname()[1]
1152
798
logger.info(u"Now listening on address %r, port %d, flowinfo %d,"
1166
812
1167
813
gobject.io_add_watch(tcp_server.fileno(), gobject.IO_IN,
1168
814
lambda *args, **kwargs:
1169
(tcp_server.handle_request
1170
(*args[2:], **kwargs) or True))
815
tcp_server.handle_request\
816
(*args[2:], **kwargs) or True)
1171
817
1172
logger.debug(u"Starting main loop")
818
logger.debug("Starting main loop")
819
main_loop_started = True
1173
820
main_loop.run()
1174
821
except AvahiError, error:
1175
logger.critical(u"AvahiError: %s", error)
822
logger.critical(u"AvahiError: %s" + unicode(error))
1176
823
sys.exit(1)
1177
824
except KeyboardInterrupt:
1178
825
if debug:
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0