11
11
# and some lines in "main".
13
13
# Everything else is
14
# Copyright © 2008 Teddy Hogeborn
15
# Copyright © 2008 Björn Påhlsson
14
# Copyright © 2008,2009 Teddy Hogeborn
15
# Copyright © 2008,2009 Björn Påhlsson
17
17
# This program is free software: you can redistribute it and/or modify
18
18
# it under the terms of the GNU General Public License as published by
82
82
logger.addHandler(console)
84
84
class AvahiError(Exception):
85
def __init__(self, value):
85
def __init__(self, value, *args, **kwargs):
87
super(AvahiError, self).__init__()
89
return repr(self.value)
87
super(AvahiError, self).__init__(value, *args, **kwargs)
88
def __unicode__(self):
89
return unicode(repr(self.value))
91
91
class AvahiServiceError(AvahiError):
178
178
class Client(dbus.service.Object):
179
179
"""A representation of a client host served by this server.
181
name: string; from the config file, used in log messages
181
name: string; from the config file, used in log messages and
182
183
fingerprint: string (40 or 32 hexadecimal digits); used to
183
184
uniquely identify the client
184
185
secret: bytestring; sent verbatim (over TLS) to client
201
202
client lives. %() expansions are done at
202
203
runtime with vars(self) as dict, so that for
203
204
instance %(name)s can be used in the command.
204
dbus_object_path: dbus.ObjectPath
206
_timeout: Real variable for 'timeout'
207
_interval: Real variable for 'interval'
208
_timeout_milliseconds: Used when calling gobject.timeout_add()
209
_interval_milliseconds: - '' -
205
use_dbus: bool(); Whether to provide D-Bus interface and signals
206
dbus_object_path: dbus.ObjectPath ; only set if self.use_dbus
211
def _set_timeout(self, timeout):
212
"Setter function for the 'timeout' attribute"
213
self._timeout = timeout
214
self._timeout_milliseconds = ((self.timeout.days
215
* 24 * 60 * 60 * 1000)
216
+ (self.timeout.seconds * 1000)
217
+ (self.timeout.microseconds
220
self.PropertyChanged(dbus.String(u"timeout"),
221
(dbus.UInt64(self._timeout_milliseconds,
223
timeout = property(lambda self: self._timeout, _set_timeout)
226
def _set_interval(self, interval):
227
"Setter function for the 'interval' attribute"
228
self._interval = interval
229
self._interval_milliseconds = ((self.interval.days
230
* 24 * 60 * 60 * 1000)
231
+ (self.interval.seconds
233
+ (self.interval.microseconds
236
self.PropertyChanged(dbus.String(u"interval"),
237
(dbus.UInt64(self._interval_milliseconds,
239
interval = property(lambda self: self._interval, _set_interval)
242
def __init__(self, name = None, disable_hook=None, config=None):
208
def timeout_milliseconds(self):
209
"Return the 'timeout' attribute in milliseconds"
210
return ((self.timeout.days * 24 * 60 * 60 * 1000)
211
+ (self.timeout.seconds * 1000)
212
+ (self.timeout.microseconds // 1000))
214
def interval_milliseconds(self):
215
"Return the 'interval' attribute in milliseconds"
216
return ((self.interval.days * 24 * 60 * 60 * 1000)
217
+ (self.interval.seconds * 1000)
218
+ (self.interval.microseconds // 1000))
220
def __init__(self, name = None, disable_hook=None, config=None,
243
222
"""Note: the 'checker' key in 'config' sets the
244
223
'checker_command' attribute and *not* the 'checker'
246
self.dbus_object_path = (dbus.ObjectPath
248
+ name.replace(".", "_")))
249
dbus.service.Object.__init__(self, bus,
250
self.dbus_object_path)
251
226
if config is None:
254
228
logger.debug(u"Creating client %r", self.name)
229
self.use_dbus = False # During __init__
255
230
# Uppercase and remove spaces from fingerprint for later
256
231
# comparison purposes with return value from the fingerprint()
281
256
self.disable_initiator_tag = None
282
257
self.checker_callback_tag = None
283
258
self.checker_command = config["checker"]
259
self.last_connect = None
260
# Only now, when this client is initialized, can it show up on
262
self.use_dbus = use_dbus
264
self.dbus_object_path = (dbus.ObjectPath
266
+ self.name.replace(".", "_")))
267
dbus.service.Object.__init__(self, bus,
268
self.dbus_object_path)
285
270
def enable(self):
286
271
"""Start this client's checker and timeout hooks"""
288
273
# Schedule a new checker to be started an 'interval' from now,
289
274
# and every interval from then on.
290
275
self.checker_initiator_tag = (gobject.timeout_add
291
(self._interval_milliseconds,
276
(self.interval_milliseconds(),
292
277
self.start_checker))
293
278
# Also start a new checker *right now*.
294
279
self.start_checker()
295
280
# Schedule a disable() when 'timeout' has passed
296
281
self.disable_initiator_tag = (gobject.timeout_add
297
(self._timeout_milliseconds,
282
(self.timeout_milliseconds(),
299
284
self.enabled = True
301
self.PropertyChanged(dbus.String(u"enabled"),
302
dbus.Boolean(True, variant_level=1))
303
self.PropertyChanged(dbus.String(u"last_enabled"),
304
(_datetime_to_dbus(self.last_enabled,
287
self.PropertyChanged(dbus.String(u"enabled"),
288
dbus.Boolean(True, variant_level=1))
289
self.PropertyChanged(dbus.String(u"last_enabled"),
290
(_datetime_to_dbus(self.last_enabled,
307
293
def disable(self):
308
294
"""Disable this client."""
333
320
"""The checker has completed, so take appropriate actions."""
334
321
self.checker_callback_tag = None
335
322
self.checker = None
337
self.PropertyChanged(dbus.String(u"checker_running"),
338
dbus.Boolean(False, variant_level=1))
339
if (os.WIFEXITED(condition)
340
and (os.WEXITSTATUS(condition) == 0)):
341
logger.info(u"Checker for %(name)s succeeded",
343
324
# Emit D-Bus signal
344
self.CheckerCompleted(dbus.Boolean(True),
345
dbus.UInt16(condition),
346
dbus.String(command))
348
elif not os.WIFEXITED(condition):
325
self.PropertyChanged(dbus.String(u"checker_running"),
326
dbus.Boolean(False, variant_level=1))
327
if os.WIFEXITED(condition):
328
exitstatus = os.WEXITSTATUS(condition)
330
logger.info(u"Checker for %(name)s succeeded",
334
logger.info(u"Checker for %(name)s failed",
338
self.CheckerCompleted(dbus.Int16(exitstatus),
339
dbus.Int64(condition),
340
dbus.String(command))
349
342
logger.warning(u"Checker for %(name)s crashed?",
352
self.CheckerCompleted(dbus.Boolean(False),
353
dbus.UInt16(condition),
354
dbus.String(command))
356
logger.info(u"Checker for %(name)s failed",
359
self.CheckerCompleted(dbus.Boolean(False),
360
dbus.UInt16(condition),
361
dbus.String(command))
346
self.CheckerCompleted(dbus.Int16(-1),
347
dbus.Int64(condition),
348
dbus.String(command))
363
350
def bump_timeout(self):
364
351
"""Bump up the timeout for this client.
368
355
self.last_checked_ok = datetime.datetime.utcnow()
369
356
gobject.source_remove(self.disable_initiator_tag)
370
357
self.disable_initiator_tag = (gobject.timeout_add
371
(self._timeout_milliseconds,
358
(self.timeout_milliseconds(),
373
self.PropertyChanged(dbus.String(u"last_checked_ok"),
374
(_datetime_to_dbus(self.last_checked_ok,
362
self.PropertyChanged(
363
dbus.String(u"last_checked_ok"),
364
(_datetime_to_dbus(self.last_checked_ok,
377
367
def start_checker(self):
378
368
"""Start a new checker subprocess if one is not running.
411
401
self.checker = subprocess.Popen(command,
413
403
shell=True, cwd="/")
415
self.CheckerStarted(command)
416
self.PropertyChanged(dbus.String("checker_running"),
417
dbus.Boolean(True, variant_level=1))
406
self.CheckerStarted(command)
407
self.PropertyChanged(
408
dbus.String("checker_running"),
409
dbus.Boolean(True, variant_level=1))
418
410
self.checker_callback_tag = (gobject.child_watch_add
419
411
(self.checker.pid,
420
412
self.checker_callback,
456
449
return now < (self.last_checked_ok + self.timeout)
458
451
## D-Bus methods & signals
459
_interface = u"org.mandos_system.Mandos.Client"
452
_interface = u"se.bsnet.fukt.Mandos.Client"
461
454
# BumpTimeout - method
462
455
BumpTimeout = dbus.service.method(_interface)(bump_timeout)
463
456
BumpTimeout.__name__ = "BumpTimeout"
465
458
# CheckerCompleted - signal
466
@dbus.service.signal(_interface, signature="bqs")
467
def CheckerCompleted(self, success, condition, command):
459
@dbus.service.signal(_interface, signature="nxs")
460
def CheckerCompleted(self, exitcode, waitstatus, command):
500
493
if self.last_checked_ok is not None
501
494
else dbus.Boolean (False, variant_level=1)),
502
495
dbus.String("timeout"):
503
dbus.UInt64(self._timeout_milliseconds,
496
dbus.UInt64(self.timeout_milliseconds(),
504
497
variant_level=1),
505
498
dbus.String("interval"):
506
dbus.UInt64(self._interval_milliseconds,
499
dbus.UInt64(self.interval_milliseconds(),
507
500
variant_level=1),
508
501
dbus.String("checker"):
509
502
dbus.String(self.checker_command,
529
525
def SetChecker(self, checker):
530
526
"D-Bus setter method"
531
527
self.checker_command = checker
529
self.PropertyChanged(dbus.String(u"checker"),
530
dbus.String(self.checker_command,
533
533
# SetHost - method
534
534
@dbus.service.method(_interface, in_signature="s")
535
535
def SetHost(self, host):
536
536
"D-Bus setter method"
539
self.PropertyChanged(dbus.String(u"host"),
540
dbus.String(self.host, variant_level=1))
539
542
# SetInterval - method
540
543
@dbus.service.method(_interface, in_signature="t")
541
544
def SetInterval(self, milliseconds):
542
self.interval = datetime.timdeelta(0, 0, 0, milliseconds)
545
self.interval = datetime.timedelta(0, 0, 0, milliseconds)
547
self.PropertyChanged(dbus.String(u"interval"),
548
(dbus.UInt64(self.interval_milliseconds(),
544
551
# SetSecret - method
545
552
@dbus.service.method(_interface, in_signature="ay",
552
559
@dbus.service.method(_interface, in_signature="t")
553
560
def SetTimeout(self, milliseconds):
554
561
self.timeout = datetime.timedelta(0, 0, 0, milliseconds)
563
self.PropertyChanged(dbus.String(u"timeout"),
564
(dbus.UInt64(self.timeout_milliseconds(),
556
567
# Enable - method
557
568
Enable = dbus.service.method(_interface)(enable)
885
parser = OptionParser(version = "%%prog %s" % version)
896
parser = optparse.OptionParser(version = "%%prog %s" % version)
886
897
parser.add_option("-i", "--interface", type="string",
887
898
metavar="IF", help="Bind to interface IF")
888
899
parser.add_option("-a", "--address", type="string",
889
900
help="Address to listen for requests on")
890
901
parser.add_option("-p", "--port", type="int",
891
902
help="Port number to receive requests on")
892
parser.add_option("--check", action="store_true", default=False,
903
parser.add_option("--check", action="store_true",
893
904
help="Run self-test")
894
905
parser.add_option("--debug", action="store_true",
895
906
help="Debug mode; run in foreground and log to"
925
941
server_config.read(os.path.join(options.configdir, "mandos.conf"))
926
942
# Convert the SafeConfigParser object to a dict
927
943
server_settings = server_config.defaults()
928
# Use getboolean on the boolean config option
944
# Use getboolean on the boolean config options
929
945
server_settings["debug"] = (server_config.getboolean
930
946
("DEFAULT", "debug"))
947
server_settings["use_dbus"] = (server_config.getboolean
948
("DEFAULT", "use_dbus"))
931
949
del server_config
933
951
# Override the settings from the config file with command line
934
952
# options, if set.
935
953
for option in ("interface", "address", "port", "debug",
936
"priority", "servicename", "configdir"):
954
"priority", "servicename", "configdir",
937
956
value = getattr(options, option)
938
957
if value is not None:
939
958
server_settings[option] = value
941
960
# Now we have our good server settings in "server_settings"
943
963
debug = server_settings["debug"]
964
use_dbus = server_settings["use_dbus"]
946
967
syslogger.setLevel(logging.WARNING)
978
999
uid = pwd.getpwnam("_mandos").pw_uid
1000
gid = pwd.getpwnam("_mandos").pw_gid
979
1001
except KeyError:
981
1003
uid = pwd.getpwnam("mandos").pw_uid
1004
gid = pwd.getpwnam("mandos").pw_gid
982
1005
except KeyError:
984
1007
uid = pwd.getpwnam("nobody").pw_uid
1008
gid = pwd.getpwnam("nogroup").pw_gid
985
1009
except KeyError:
988
gid = pwd.getpwnam("_mandos").pw_gid
991
gid = pwd.getpwnam("mandos").pw_gid
994
gid = pwd.getpwnam("nogroup").pw_gid
1019
1034
avahi.DBUS_PATH_SERVER),
1020
1035
avahi.DBUS_INTERFACE_SERVER)
1021
1036
# End of Avahi example code
1022
bus_name = dbus.service.BusName(u"org.mandos-system.Mandos", bus)
1038
bus_name = dbus.service.BusName(u"se.bsnet.fukt.Mandos", bus)
1024
1040
clients.update(Set(Client(name = section,
1026
= dict(client_config.items(section)))
1042
= dict(client_config.items(section)),
1043
use_dbus = use_dbus)
1027
1044
for section in client_config.sections()))
1028
1045
if not clients:
1029
logger.critical(u"No clients defined")
1046
logger.warning(u"No clients defined")
1033
1049
# Redirect stdin so all checkers get /dev/null
1075
1091
signal.signal(signal.SIGHUP, lambda signum, frame: sys.exit())
1076
1092
signal.signal(signal.SIGTERM, lambda signum, frame: sys.exit())
1078
class MandosServer(dbus.service.Object):
1079
"""A D-Bus proxy object"""
1081
dbus.service.Object.__init__(self, bus,
1083
_interface = u"org.mandos_system.Mandos"
1085
@dbus.service.signal(_interface, signature="oa{sv}")
1086
def ClientAdded(self, objpath, properties):
1090
@dbus.service.signal(_interface, signature="o")
1091
def ClientRemoved(self, objpath):
1095
@dbus.service.method(_interface, out_signature="ao")
1096
def GetAllClients(self):
1097
return dbus.Array(c.dbus_object_path for c in clients)
1099
@dbus.service.method(_interface, out_signature="a{oa{sv}}")
1100
def GetAllClientsWithProperties(self):
1101
return dbus.Dictionary(
1102
((c.dbus_object_path, c.GetAllProperties())
1106
@dbus.service.method(_interface, in_signature="o")
1107
def RemoveClient(self, object_path):
1109
if c.dbus_object_path == object_path:
1117
mandos_server = MandosServer()
1095
class MandosServer(dbus.service.Object):
1096
"""A D-Bus proxy object"""
1098
dbus.service.Object.__init__(self, bus, "/")
1099
_interface = u"se.bsnet.fukt.Mandos"
1101
@dbus.service.signal(_interface, signature="oa{sv}")
1102
def ClientAdded(self, objpath, properties):
1106
@dbus.service.signal(_interface, signature="os")
1107
def ClientRemoved(self, objpath, name):
1111
@dbus.service.method(_interface, out_signature="ao")
1112
def GetAllClients(self):
1113
return dbus.Array(c.dbus_object_path for c in clients)
1115
@dbus.service.method(_interface, out_signature="a{oa{sv}}")
1116
def GetAllClientsWithProperties(self):
1117
return dbus.Dictionary(
1118
((c.dbus_object_path, c.GetAllProperties())
1122
@dbus.service.method(_interface, in_signature="o")
1123
def RemoveClient(self, object_path):
1125
if c.dbus_object_path == object_path:
1127
# Don't signal anything except ClientRemoved
1131
self.ClientRemoved(object_path, c.name)
1137
mandos_server = MandosServer()
1119
1139
for client in clients:
1121
mandos_server.ClientAdded(client.dbus_object_path,
1122
client.GetAllProperties())
1142
mandos_server.ClientAdded(client.dbus_object_path,
1143
client.GetAllProperties())
1123
1144
client.enable()
1125
1146
tcp_server.enable()