/mandos/trunk : revision 24.1.155

1

#!/usr/bin/python

2

# -*- mode: python; coding: utf-8 -*-

3

#

4

# Mandos Monitor - Control and monitor the Mandos server

5

#

6

7

8

#

9

# This program is free software: you can redistribute it and/or modify

10

# it under the terms of the GNU General Public License as published by

11

# the Free Software Foundation, either version 3 of the License, or

12

# (at your option) any later version.

13

#

14

# This program is distributed in the hope that it will be useful,

15

# but WITHOUT ANY WARRANTY; without even the implied warranty of

16

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

17

# GNU General Public License for more details.

18

#

19

# You should have received a copy of the GNU General Public License

20

# along with this program. If not, see <http://www.gnu.org/licenses/>.

21

#

22

# Contact the authors at <mandos@fukt.bsnet.se>.

23

#

24

3

25

4

from __future__ import division, absolute_import, with_statement

26

5

61

40

urwid.curses_display.curses.A_UNDERLINE |= (

62

41

urwid.curses_display.curses.A_BLINK)

63

42

64

def isoformat_to_datetime(iso):

65

"Parse an ISO 8601 date string to a datetime.datetime()"

66

if not iso:

67

return None

68

d, t = iso.split(u"T", 1)

69

year, month, day = d.split(u"-", 2)

70

hour, minute, second = t.split(u":", 2)

71

second, fraction = divmod(float(second), 1)

72

return datetime.datetime(int(year),

73

int(month),

74

int(day),

75

int(hour),

76

int(minute),

77

int(second), # Whole seconds

78

int(fraction*1000000)) # Microseconds

79

80

43

class MandosClientPropertyCache(object):

81

44

"""This wraps a Mandos Client D-Bus proxy object, caches the

82

45

properties and calls a hook function when any of them are

122

85

# Logger

123

86

self.logger = logger

124

87

125

self._update_timer_callback_tag = None

126

self._update_timer_callback_lock = 0

127

self.last_checker_failed = False

128

129

88

# The widget shown normally

130

89

self._text_widget = urwid.Text(u"")

131

90

# The widget shown when we have focus

135

94

*args, **kwargs)

136

95

self.update()

137

96

self.opened = False

138

139

last_checked_ok = isoformat_to_datetime(self.properties

140

[u"LastCheckedOK"])

141

if last_checked_ok is None:

142

self.last_checker_failed = True

143

else:

144

self.last_checker_failed = ((datetime.datetime.utcnow()

145

- last_checked_ok)

146

> datetime.timedelta

147

(milliseconds=

148

self.properties

149

[u"Interval"]))

150

151

if self.last_checker_failed:

152

self.using_timer(True)

153

154

if self.need_approval:

155

self.using_timer(True)

156

157

97

self.proxy.connect_to_signal(u"CheckerCompleted",

158

98

self.checker_completed,

159

99

client_interface,

175

115

client_interface,

176

116

byte_arrays=True)

177

117

178

def property_changed(self, property=None, value=None):

179

super(self, MandosClientWidget).property_changed(property,

180

value)

181

if property == u"ApprovalPending":

182

using_timer(bool(value))

183

184

def using_timer(self, flag):

185

"""Call this method with True or False when timer should be

186

activated or deactivated.

187

"""

188

old = self._update_timer_callback_lock

189

if flag:

190

self._update_timer_callback_lock += 1

191

else:

192

self._update_timer_callback_lock -= 1

193

if old == 0 and self._update_timer_callback_lock:

194

self._update_timer_callback_tag = (gobject.timeout_add

195

(1000,

196

self.update_timer))

197

elif old and self._update_timer_callback_lock == 0:

198

gobject.source_remove(self._update_timer_callback_tag)

199

self._update_timer_callback_tag = None

200

201

118

def checker_completed(self, exitstatus, condition, command):

202

119

if exitstatus == 0:

203

if self.last_checker_failed:

204

self.last_checker_failed = False

205

self.using_timer(False)

206

120

#self.logger(u'Checker for client %s (command "%s")'

207

121

# u' was successful'

208

# % (self.properties[u"Name"], command))

209

self.update()

122

# % (self.properties[u"name"], command))

210

123

return

211

# Checker failed

212

if not self.last_checker_failed:

213

self.last_checker_failed = True

214

self.using_timer(True)

215

124

if os.WIFEXITED(condition):

216

125

self.logger(u'Checker for client %s (command "%s")'

217

126

u' failed with exit code %s'

218

% (self.properties[u"Name"], command,

127

% (self.properties[u"name"], command,

219

128

os.WEXITSTATUS(condition)))

220

elif os.WIFSIGNALED(condition):

129

return

130

if os.WIFSIGNALED(condition):

221

131

self.logger(u'Checker for client %s (command "%s")'

222

132

u' was killed by signal %s'

223

% (self.properties[u"Name"], command,

133

% (self.properties[u"name"], command,

224

134

os.WTERMSIG(condition)))

225

elif os.WCOREDUMP(condition):

135

return

136

if os.WCOREDUMP(condition):

226

137

self.logger(u'Checker for client %s (command "%s")'

227

138

u' dumped core'

228

% (self.properties[u"Name"], command))

229

else:

230

self.logger(u'Checker for client %s completed'

231

u' mysteriously')

232

self.update()

139

% (self.properties[u"name"], command))

140

self.logger(u'Checker for client %s completed mysteriously')

233

141

234

142

def checker_started(self, command):

235

143

#self.logger(u'Client %s started checker "%s"'

236

# % (self.properties[u"Name"], unicode(command)))

144

# % (self.properties[u"name"], unicode(command)))

237

145

pass

238

146

239

147

def got_secret(self):

240

self.last_checker_failed = False

241

148

self.logger(u'Client %s received its secret'

242

% self.properties[u"Name"])

149

% self.properties[u"name"])

243

150

244

151

def need_approval(self, timeout, default):

245

152

if not default:

247

154

else:

248

155

message = u'Client %s will get its secret in %s seconds'

249

156

self.logger(message

250

% (self.properties[u"Name"], timeout/1000))

251

self.using_timer(True)

157

% (self.properties[u"name"], timeout/1000))

252

158

253

159

def rejected(self, reason):

254

160

self.logger(u'Client %s was rejected; reason: %s'

255

% (self.properties[u"Name"], reason))

161

% (self.properties[u"name"], reason))

256

162

257

163

def selectable(self):

258

164

"""Make this a "selectable" widget.

284

190

# Rebuild focus and non-focus widgets using current properties

285

191

286

192

# Base part of a client. Name!

287

base = (u'%(name)s: '

288

% {u"name": self.properties[u"Name"]})

289

if not self.properties[u"Enabled"]:

290

message = u"DISABLED"

291

elif self.properties[u"ApprovalPending"]:

292

timeout = datetime.timedelta(milliseconds

293

= self.properties

294

[u"ApprovalDelay"])

295

last_approval_request = isoformat_to_datetime(

296

self.properties[u"LastApprovalRequest"])

297

if last_approval_request is not None:

298

timer = timeout - (datetime.datetime.utcnow()

299

- last_approval_request)

300

else:

301

timer = datetime.timedelta()

302

if self.properties[u"ApprovedByDefault"]:

303

message = u"Approval in %s. (d)eny?"

304

else:

305

message = u"Denial in %s. (a)pprove?"

306

message = message % unicode(timer).rsplit(".", 1)[0]

307

elif self.last_checker_failed:

308

timeout = datetime.timedelta(milliseconds

309

= self.properties

310

[u"Timeout"])

311

last_ok = isoformat_to_datetime(

312

max((self.properties[u"LastCheckedOK"]

313

or self.properties[u"Created"]),

314

self.properties[u"LastEnabled"]))

315

timer = timeout - (datetime.datetime.utcnow() - last_ok)

316

message = (u'A checker has failed! Time until client'

317

u' gets disabled: %s'

318

% unicode(timer).rsplit(".", 1)[0])

193

self._text = (u'%(name)s: '

194

% {u"name": self.properties[u"name"]})

195

196

if self.properties[u"approved_pending"]:

197

if self.properties[u"approved_by_default"]:

198

self._text += u"Connection established to client. (d)eny?"

199

else:

200

self._text += u"Seeks approval to send secret. (a)pprove?"

319

201

else:

320

message = u"enabled"

321

self._text = "%s%s" % (base, message)

322

202

self._text += (u'%(enabled)s'

203

% {u"enabled":

204

(u"enabled"

205

if self.properties[u"enabled"]

206

else u"DISABLED")})

323

207

if not urwid.supports_unicode():

324

208

self._text = self._text.encode("ascii", "replace")

325

209

textlist = [(u"normal", self._text)]

336

220

if self.update_hook is not None:

337

221

self.update_hook()

338

222

339

def update_timer(self):

340

"called by gobject"

341

self.update()

342

return True # Keep calling this

343

344

223

def delete(self):

345

if self._update_timer_callback_tag is not None:

346

gobject.source_remove(self._update_timer_callback_tag)

347

self._update_timer_callback_tag = None

348

224

if self.delete_hook is not None:

349

225

self.delete_hook(self)

350

226

367

243

elif key == u"d":

368

244

self.proxy.Approve(dbus.Boolean(False, variant_level=1),

369

245

dbus_interface = client_interface)

370

elif key == u"R" or key == u"_" or key == u"ctrl k":

246

elif key == u"r" or key == u"_" or key == u"ctrl k":

371

247

self.server_proxy_object.RemoveClient(self.proxy

372

248

.object_path)

373

249

elif key == u"s":

383

259

# self.proxy.unpause()

384

260

# elif key == u"RET":

385

261

# self.open()

262

# elif key == u"+":

263

# self.proxy.Approve(True)

264

# elif key == u"-":

265

# self.proxy.Approve(False)

386

266

else:

387

267

return key

388

268

404

284

use them as an excuse to shift focus away from this widget.

405

285

"""

406

286

def keypress(self, (maxcol, maxrow), key):

407

ret = super(ConstrainedListBox, self).keypress((maxcol,

408

maxrow), key)

287

ret = super(ConstrainedListBox, self).keypress((maxcol, maxrow), key)

409

288

if ret in (u"up", u"down"):

410

289

return

411

290

return ret

528

407

Call this when the widget layout needs to change"""

529

408

self.uilist = []

530

409

#self.uilist.append(urwid.ListBox(self.clients))

531

self.uilist.append(urwid.Frame(ConstrainedListBox(self.

532

clients),

410

self.uilist.append(urwid.Frame(ConstrainedListBox(self.clients),

533

411

#header=urwid.Divider(),

534

412

header=None,

535

footer=

536

urwid.Divider(div_char=

537

self.divider)))

413

footer=urwid.Divider(div_char=self.divider)))

538

414

if self.log_visible:

539

415

self.uilist.append(self.logbox)

540

416

pass

558

434

"""Toggle visibility of the log buffer."""

559

435

self.log_visible = not self.log_visible

560

436

self.rebuild()

561

#self.log_message(u"Log visibility changed to: "

562

# + unicode(self.log_visible))

437

self.log_message(u"Log visibility changed to: "

438

+ unicode(self.log_visible))

563

439

564

440

def change_log_display(self):

565

441

"""Change type of log display.

570

446

self.log_wrap = u"clip"

571

447

for textwidget in self.log:

572

448

textwidget.set_wrap_mode(self.log_wrap)

573

#self.log_message(u"Wrap mode: " + self.log_wrap)

449

self.log_message(u"Wrap mode: " + self.log_wrap)

574

450

575

451

def find_and_remove_client(self, path, name):

576

452

"""Find an client from its object path and remove it.

603

479

if path is None:

604

480

path = client.proxy.object_path

605

481

self.clients_dict[path] = client

606

self.clients.sort(None, lambda c: c.properties[u"Name"])

482

self.clients.sort(None, lambda c: c.properties[u"name"])

607

483

self.refresh()

608

484

609

485

def remove_client(self, client, path=None):

686

562

.join((u"Clients:",

687

563

u"+: Enable",

688

564

u"-: Disable",

689

u"R: Remove",

565

u"r: Remove",

690

566

u"s: Start new checker",

691

567

u"S: Stop checker",

692

568

u"C: Checker OK",

725

601

ui = UserInterface()

726

602

try:

727

603

ui.run()

728

except KeyboardInterrupt:

729

ui.screen.stop()

730

604

except Exception, e:

731

605

ui.log_message(unicode(e))

732

606

ui.screen.stop()