/mandos/trunk : revision 24.2.4

1

#!/usr/bin/python

2

# -*- mode: python; coding: utf-8 -*-

3

#

4

# Mandos Monitor - Control and monitor the Mandos server

5

#

6

7

8

#

9

# This program is free software: you can redistribute it and/or modify

10

# it under the terms of the GNU General Public License as published by

11

# the Free Software Foundation, either version 3 of the License, or

12

# (at your option) any later version.

13

#

14

# This program is distributed in the hope that it will be useful,

15

# but WITHOUT ANY WARRANTY; without even the implied warranty of

16

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

17

# GNU General Public License for more details.

18

#

19

# You should have received a copy of the GNU General Public License

20

# along with this program. If not, see <http://www.gnu.org/licenses/>.

21

#

22

# Contact the authors at <mandos@fukt.bsnet.se>.

23

#

24

3

25

4

from __future__ import division, absolute_import, with_statement

26

5

51

30

domain = 'se.bsnet.fukt'

52

31

server_interface = domain + '.Mandos'

53

32

client_interface = domain + '.Mandos.Client'

54

version = "1.2"

33

version = "1.0.15"

55

34

56

35

# Always run in monochrome mode

57

36

urwid.curses_display.curses.has_colors = lambda : False

61

40

urwid.curses_display.curses.A_UNDERLINE |= (

62

41

urwid.curses_display.curses.A_BLINK)

63

42

64

def isoformat_to_datetime(iso):

65

"Parse an ISO 8601 date string to a datetime.datetime()"

66

if not iso:

67

return None

68

d, t = iso.split(u"T", 1)

69

year, month, day = d.split(u"-", 2)

70

hour, minute, second = t.split(u":", 2)

71

second, fraction = divmod(float(second), 1)

72

return datetime.datetime(int(year),

73

int(month),

74

int(day),

75

int(hour),

76

int(minute),

77

int(second), # Whole seconds

78

int(fraction*1000000)) # Microseconds

79

80

43

class MandosClientPropertyCache(object):

81

44

"""This wraps a Mandos Client D-Bus proxy object, caches the

82

45

properties and calls a hook function when any of them are

94

57

self.properties.update(

95

58

self.proxy.GetAll(client_interface,

96

59

dbus_interface = dbus.PROPERTIES_IFACE))

97

98

#XXX This break good super behaviour!

99

# super(MandosClientPropertyCache, self).__init__(

100

# *args, **kwargs)

60

super(MandosClientPropertyCache, self).__init__(

61

proxy_object=proxy_object, *args, **kwargs)

101

62

102

63

def property_changed(self, property=None, value=None):

103

64

"""This is called whenever we get a PropertyChanged signal

122

83

# Logger

123

84

self.logger = logger

124

85

125

self._update_timer_callback_tag = None

126

self._update_timer_callback_lock = 0

127

self.last_checker_failed = False

128

129

86

# The widget shown normally

130

87

self._text_widget = urwid.Text(u"")

131

88

# The widget shown when we have focus

135

92

*args, **kwargs)

136

93

self.update()

137

94

self.opened = False

138

139

last_checked_ok = isoformat_to_datetime(self.properties

140

[u"LastCheckedOK"])

141

if last_checked_ok is None:

142

self.last_checker_failed = True

143

else:

144

self.last_checker_failed = ((datetime.datetime.utcnow()

145

- last_checked_ok)

146

> datetime.timedelta

147

(milliseconds=

148

self.properties

149

[u"Interval"]))

150

151

if self.last_checker_failed:

152

self.using_timer(True)

153

154

if self.need_approval:

155

self.using_timer(True)

156

157

95

self.proxy.connect_to_signal(u"CheckerCompleted",

158

96

self.checker_completed,

159

97

client_interface,

175

113

client_interface,

176

114

byte_arrays=True)

177

115

178

def property_changed(self, property=None, value=None):

179

super(self, MandosClientWidget).property_changed(property,

180

value)

181

if property == u"ApprovalPending":

182

using_timer(bool(value))

183

184

def using_timer(self, flag):

185

"""Call this method with True or False when timer should be

186

activated or deactivated.

187

"""

188

old = self._update_timer_callback_lock

189

if flag:

190

self._update_timer_callback_lock += 1

191

else:

192

self._update_timer_callback_lock -= 1

193

if old == 0 and self._update_timer_callback_lock:

194

self._update_timer_callback_tag = (gobject.timeout_add

195

(1000,

196

self.update_timer))

197

elif old and self._update_timer_callback_lock == 0:

198

gobject.source_remove(self._update_timer_callback_tag)

199

self._update_timer_callback_tag = None

200

201

116

def checker_completed(self, exitstatus, condition, command):

202

117

if exitstatus == 0:

203

if self.last_checker_failed:

204

self.last_checker_failed = False

205

self.using_timer(False)

206

118

#self.logger(u'Checker for client %s (command "%s")'

207

119

# u' was successful'

208

# % (self.properties[u"Name"], command))

209

self.update()

120

# % (self.properties[u"name"], command))

210

121

return

211

# Checker failed

212

if not self.last_checker_failed:

213

self.last_checker_failed = True

214

self.using_timer(True)

215

122

if os.WIFEXITED(condition):

216

123

self.logger(u'Checker for client %s (command "%s")'

217

124

u' failed with exit code %s'

218

% (self.properties[u"Name"], command,

125

% (self.properties[u"name"], command,

219

126

os.WEXITSTATUS(condition)))

220

elif os.WIFSIGNALED(condition):

127

return

128

if os.WIFSIGNALED(condition):

221

129

self.logger(u'Checker for client %s (command "%s")'

222

130

u' was killed by signal %s'

223

% (self.properties[u"Name"], command,

131

% (self.properties[u"name"], command,

224

132

os.WTERMSIG(condition)))

225

elif os.WCOREDUMP(condition):

133

return

134

if os.WCOREDUMP(condition):

226

135

self.logger(u'Checker for client %s (command "%s")'

227

136

u' dumped core'

228

% (self.properties[u"Name"], command))

229

else:

230

self.logger(u'Checker for client %s completed'

231

u' mysteriously')

232

self.update()

137

% (self.properties[u"name"], command))

138

self.logger(u'Checker for client %s completed mysteriously')

233

139

234

140

def checker_started(self, command):

235

141

#self.logger(u'Client %s started checker "%s"'

236

# % (self.properties[u"Name"], unicode(command)))

142

# % (self.properties[u"name"], unicode(command)))

237

143

pass

238

144

239

145

def got_secret(self):

240

self.last_checker_failed = False

241

146

self.logger(u'Client %s received its secret'

242

% self.properties[u"Name"])

147

% self.properties[u"name"])

243

148

244

149

def need_approval(self, timeout, default):

245

150

if not default:

247

152

else:

248

153

message = u'Client %s will get its secret in %s seconds'

249

154

self.logger(message

250

% (self.properties[u"Name"], timeout/1000))

251

self.using_timer(True)

155

% (self.properties[u"name"], timeout/1000))

252

156

253

157

def rejected(self, reason):

254

158

self.logger(u'Client %s was rejected; reason: %s'

255

% (self.properties[u"Name"], reason))

159

% (self.properties[u"name"], reason))

256

160

257

161

def selectable(self):

258

162

"""Make this a "selectable" widget.

280

184

u"bold-underline-blink":

281

185

u"bold-underline-blink-standout",

282

186

}

283

187

284

188

# Rebuild focus and non-focus widgets using current properties

285

286

# Base part of a client. Name!

287

base = (u'%(name)s: '

288

% {u"name": self.properties[u"Name"]})

289

if not self.properties[u"Enabled"]:

290

message = u"DISABLED"

291

elif self.properties[u"ApprovalPending"]:

292

timeout = datetime.timedelta(milliseconds

293

= self.properties

294

[u"ApprovalDelay"])

295

last_approval_request = isoformat_to_datetime(

296

self.properties[u"LastApprovalRequest"])

297

if last_approval_request is not None:

298

timer = timeout - (datetime.datetime.utcnow()

299

- last_approval_request)

300

else:

301

timer = datetime.timedelta()

302

if self.properties[u"ApprovedByDefault"]:

303

message = u"Approval in %s. (d)eny?"

304

else:

305

message = u"Denial in %s. (a)pprove?"

306

message = message % unicode(timer).rsplit(".", 1)[0]

307

elif self.last_checker_failed:

308

timeout = datetime.timedelta(milliseconds

309

= self.properties

310

[u"Timeout"])

311

last_ok = isoformat_to_datetime(

312

max((self.properties[u"LastCheckedOK"]

313

or self.properties[u"Created"]),

314

self.properties[u"LastEnabled"]))

315

timer = timeout - (datetime.datetime.utcnow() - last_ok)

316

message = (u'A checker has failed! Time until client'

317

u' gets disabled: %s'

318

% unicode(timer).rsplit(".", 1)[0])

319

else:

320

message = u"enabled"

321

self._text = "%s%s" % (base, message)

322

189

self._text = (u'%(name)s: %(enabled)s'

190

% { u"name": self.properties[u"name"],

191

u"enabled":

192

(u"enabled"

193

if self.properties[u"enabled"]

194

else u"DISABLED")})

323

195

if not urwid.supports_unicode():

324

196

self._text = self._text.encode("ascii", "replace")

325

197

textlist = [(u"normal", self._text)]

336

208

if self.update_hook is not None:

337

209

self.update_hook()

338

210

339

def update_timer(self):

340

"called by gobject"

341

self.update()

342

return True # Keep calling this

343

344

211

def delete(self):

345

if self._update_timer_callback_tag is not None:

346

gobject.source_remove(self._update_timer_callback_tag)

347

self._update_timer_callback_tag = None

348

212

if self.delete_hook is not None:

349

213

self.delete_hook(self)

350

214

357

221

def keypress(self, (maxcol,), key):

358

222

"""Handle keys.

359

223

This overrides the method from urwid.FlowWidget"""

360

if key == u"+":

361

self.proxy.Enable(dbus_interface = client_interface)

362

elif key == u"-":

363

self.proxy.Disable(dbus_interface = client_interface)

364

elif key == u"a":

365

self.proxy.Approve(dbus.Boolean(True, variant_level=1),

366

dbus_interface = client_interface)

367

elif key == u"d":

368

self.proxy.Approve(dbus.Boolean(False, variant_level=1),

369

dbus_interface = client_interface)

370

elif key == u"R" or key == u"_" or key == u"ctrl k":

224

if key == u"e" or key == u"+":

225

self.proxy.Enable()

226

elif key == u"d" or key == u"-":

227

self.proxy.Disable()

228

elif key == u"r" or key == u"_" or key == u"ctrl k":

371

229

self.server_proxy_object.RemoveClient(self.proxy

372

230

.object_path)

373

231

elif key == u"s":

374

self.proxy.StartChecker(dbus_interface = client_interface)

232

self.proxy.StartChecker()

375

233

elif key == u"S":

376

self.proxy.StopChecker(dbus_interface = client_interface)

234

self.proxy.StopChecker()

377

235

elif key == u"C":

378

self.proxy.CheckedOK(dbus_interface = client_interface)

236

self.proxy.CheckedOK()

379

237

# xxx

380

238

# elif key == u"p" or key == "=":

381

239

# self.proxy.pause()

383

241

# self.proxy.unpause()

384

242

# elif key == u"RET":

385

243

# self.open()

244

elif key == u"+":

245

self.proxy.Approve(True)

246

elif key == u"-":

247

self.proxy.Approve(False)

386

248

else:

387

249

return key

388

250

404

266

use them as an excuse to shift focus away from this widget.

405

267

"""

406

268

def keypress(self, (maxcol, maxrow), key):

407

ret = super(ConstrainedListBox, self).keypress((maxcol,

408

maxrow), key)

269

ret = super(ConstrainedListBox, self).keypress((maxcol, maxrow), key)

409

270

if ret in (u"up", u"down"):

410

271

return

411

272

return ret

528

389

Call this when the widget layout needs to change"""

529

390

self.uilist = []

530

391

#self.uilist.append(urwid.ListBox(self.clients))

531

self.uilist.append(urwid.Frame(ConstrainedListBox(self.

532

clients),

392

self.uilist.append(urwid.Frame(ConstrainedListBox(self.clients),

533

393

#header=urwid.Divider(),

534

394

header=None,

535

footer=

536

urwid.Divider(div_char=

537

self.divider)))

395

footer=urwid.Divider(div_char=self.divider)))

538

396

if self.log_visible:

539

397

self.uilist.append(self.logbox)

540

398

pass

558

416

"""Toggle visibility of the log buffer."""

559

417

self.log_visible = not self.log_visible

560

418

self.rebuild()

561

#self.log_message(u"Log visibility changed to: "

562

# + unicode(self.log_visible))

419

self.log_message(u"Log visibility changed to: "

420

+ unicode(self.log_visible))

563

421

564

422

def change_log_display(self):

565

423

"""Change type of log display.

570

428

self.log_wrap = u"clip"

571

429

for textwidget in self.log:

572

430

textwidget.set_wrap_mode(self.log_wrap)

573

#self.log_message(u"Wrap mode: " + self.log_wrap)

431

self.log_message(u"Wrap mode: " + self.log_wrap)

574

432

575

433

def find_and_remove_client(self, path, name):

576

434

"""Find an client from its object path and remove it.

603

461

if path is None:

604

462

path = client.proxy.object_path

605

463

self.clients_dict[path] = client

606

self.clients.sort(None, lambda c: c.properties[u"Name"])

464

self.clients.sort(None, lambda c: c.properties[u"name"])

607

465

self.refresh()

608

466

609

467

def remove_client(self, client, path=None):

684

542

self.log_message_raw((u"bold",

685

543

u" "

686

544

.join((u"Clients:",

687

u"+: Enable",

688

u"-: Disable",

689

u"R: Remove",

545

u"e: Enable",

546

u"d: Disable",

547

u"r: Remove",

690

548

u"s: Start new checker",

691

549

u"S: Stop checker",

692

u"C: Checker OK",

693

u"a: Approve",

694

u"d: Deny"))))

550

u"C: Checker OK"))))

695

551

self.refresh()

696

552

elif key == u"tab":

697

553

if self.topwidget.get_focus() is self.logbox:

725

581

ui = UserInterface()

726

582

try:

727

583

ui.run()

728

except KeyboardInterrupt:

729

ui.screen.stop()

730

584

except Exception, e:

731

585

ui.log_message(unicode(e))

732

586

ui.screen.stop()