61
61
from dbus.mainloop.glib import DBusGMainLoop
66
65
logger = logging.Logger('mandos')
67
66
syslogger = logging.handlers.SysLogHandler\
68
(facility = logging.handlers.SysLogHandler.LOG_DAEMON,
67
(facility = logging.handlers.SysLogHandler.LOG_DAEMON)
70
68
syslogger.setFormatter(logging.Formatter\
71
('Mandos: %(levelname)s: %(message)s'))
69
('%(levelname)s: %(message)s'))
72
70
logger.addHandler(syslogger)
74
console = logging.StreamHandler()
75
console.setFormatter(logging.Formatter('%(name)s: %(levelname)s:'
77
logger.addHandler(console)
79
74
class AvahiError(Exception):
80
75
def __init__(self, value):
108
103
def __init__(self, interface = avahi.IF_UNSPEC, name = None,
109
104
type = None, port = None, TXT = None, domain = "",
110
host = "", max_renames = 32768):
105
host = "", max_renames = 12):
111
106
self.interface = interface
119
114
self.domain = domain
121
116
self.rename_count = 0
122
self.max_renames = max_renames
123
117
def rename(self):
124
118
"""Derived from the Avahi example code"""
125
119
if self.rename_count >= self.max_renames:
126
120
logger.critical(u"No suitable service name found after %i"
127
121
u" retries, exiting.", rename_count)
128
122
raise AvahiServiceError("Too many renames")
129
self.name = server.GetAlternativeServiceName(self.name)
130
logger.info(u"Changing name to %r ...", str(self.name))
131
syslogger.setFormatter(logging.Formatter\
132
('Mandos (%s): %%(levelname)s:'
133
' %%(message)s' % self.name))
123
name = server.GetAlternativeServiceName(name)
124
logger.error(u"Changing name to %r ...", name)
136
127
self.rename_count += 1
172
163
fingerprint: string (40 or 32 hexadecimal digits); used to
173
164
uniquely identify the client
174
165
secret: bytestring; sent verbatim (over TLS) to client
175
host: string; available for use by the checker command
166
fqdn: string (FQDN); available for use by the checker command
176
167
created: datetime.datetime(); object creation, not client host
177
168
last_checked_ok: datetime.datetime() or None if not yet checked OK
178
169
timeout: datetime.timedelta(); How long from last_checked_ok
240
231
raise TypeError(u"No secret or secfile for client %s"
242
self.host = config.get("host", "")
233
self.fqdn = config.get("fqdn", "")
243
234
self.created = datetime.datetime.now()
244
235
self.last_checked_ok = None
245
236
self.timeout = string_to_delta(config["timeout"])
268
259
The possibility that a client might be restarted is left open,
269
260
but not currently used."""
270
261
# If this client doesn't have a secret, it is already stopped.
271
if hasattr(self, "secret") and self.secret:
272
263
logger.info(u"Stopping client %s", self.name)
273
264
self.secret = None
322
313
if self.checker is None:
324
315
# In case check_command has exactly one % operator
325
command = self.check_command % self.host
316
command = self.check_command % self.fqdn
326
317
except TypeError:
327
318
# Escape attributes for the shell
328
319
escaped_attrs = dict((key, re.escape(str(val)))
355
346
self.checker_callback_tag = None
356
347
if getattr(self, "checker", None) is None:
358
logger.debug(u"Stopping checker for %(name)s", vars(self))
349
logger.debug("Stopping checker for %(name)s", vars(self))
360
351
os.kill(self.checker.pid, signal.SIGTERM)
537
528
in6addr_any = "::"
538
529
self.server_address = (in6addr_any,
539
530
self.server_address[1])
540
elif not self.server_address[1]:
531
elif self.server_address[1] is None:
541
532
self.server_address = (self.server_address[0],
543
# if self.settings["interface"]:
544
# self.server_address = (self.server_address[0],
550
534
return super(type(self), self).server_bind()
563
547
datetime.timedelta(1)
564
548
>>> string_to_delta(u'1w')
565
549
datetime.timedelta(7)
566
>>> string_to_delta('5m 30s')
567
datetime.timedelta(0, 330)
569
timevalue = datetime.timedelta(0)
570
for s in interval.split():
572
suffix=unicode(s[-1])
575
delta = datetime.timedelta(value)
577
delta = datetime.timedelta(0, value)
579
delta = datetime.timedelta(0, 0, 0, 0, value)
581
delta = datetime.timedelta(0, 0, 0, 0, 0, value)
583
delta = datetime.timedelta(0, 0, 0, 0, 0, 0, value)
586
except (ValueError, IndexError):
552
suffix=unicode(interval[-1])
553
value=int(interval[:-1])
555
delta = datetime.timedelta(value)
557
delta = datetime.timedelta(0, value)
559
delta = datetime.timedelta(0, 0, 0, 0, value)
561
delta = datetime.timedelta(0, 0, 0, 0, 0, value)
563
delta = datetime.timedelta(0, 0, 0, 0, 0, 0, value)
566
except (ValueError, IndexError):
592
571
def server_state_changed(state):
664
643
global main_loop_started
665
644
main_loop_started = False
667
parser = OptionParser(version = "%%prog %s" % version)
646
parser = OptionParser()
668
647
parser.add_option("-i", "--interface", type="string",
669
648
metavar="IF", help="Bind to interface IF")
670
649
parser.add_option("-a", "--address", type="string",
673
652
help="Port number to receive requests on")
674
653
parser.add_option("--check", action="store_true", default=False,
675
654
help="Run self-test")
676
parser.add_option("--debug", action="store_true",
655
parser.add_option("--debug", action="store_true", default=False,
677
656
help="Debug mode; run in foreground and log to"
679
658
parser.add_option("--priority", type="string", help="GnuTLS"
705
684
server_config = ConfigParser.SafeConfigParser(server_defaults)
706
685
del server_defaults
707
686
server_config.read(os.path.join(options.configdir, "mandos.conf"))
687
server_section = "server"
708
688
# Convert the SafeConfigParser object to a dict
709
server_settings = server_config.defaults()
689
server_settings = dict(server_config.items(server_section))
710
690
# Use getboolean on the boolean config option
711
691
server_settings["debug"] = server_config.getboolean\
692
(server_section, "debug")
713
693
del server_config
715
695
# Override the settings from the config file with command line
723
703
# Now we have our good server settings in "server_settings"
725
debug = server_settings["debug"]
728
syslogger.setLevel(logging.WARNING)
729
console.setLevel(logging.WARNING)
731
if server_settings["servicename"] != "Mandos":
732
syslogger.setFormatter(logging.Formatter\
733
('Mandos (%s): %%(levelname)s:'
735
% server_settings["servicename"]))
737
705
# Parse config file with clients
738
706
client_defaults = { "timeout": "1h",
739
707
"interval": "5m",
740
"checker": "fping -q -- %%(host)s",
708
"checker": "fping -q -- %%(fqdn)s",
743
710
client_config = ConfigParser.SafeConfigParser(client_defaults)
744
711
client_config.read(os.path.join(server_settings["configdir"],
762
729
avahi.DBUS_INTERFACE_SERVER )
763
730
# End of Avahi example code
732
debug = server_settings["debug"]
735
console = logging.StreamHandler()
736
# console.setLevel(logging.DEBUG)
737
console.setFormatter(logging.Formatter\
738
('%(levelname)s: %(message)s'))
739
logger.addHandler(console)
766
743
def remove_from_clients(client):
767
744
clients.remove(client)
775
752
= dict(client_config.items(section)))
776
753
for section in client_config.sections()))
778
logger.critical(u"No clients defined")
782
logger.removeHandler(console)
785
pidfilename = "/var/run/mandos/mandos.pid"
788
pidfile = open(pidfilename, "w")
789
pidfile.write(str(pid) + "\n")
793
logger.error(u"Could not write %s file with PID %d",
794
pidfilename, os.getpid())
797
759
"Cleanup function; run on exit"
844
806
tcp_server.handle_request\
845
807
(*args[2:], **kwargs) or True)
847
logger.debug(u"Starting main loop")
809
logger.debug("Starting main loop")
848
810
main_loop_started = True
850
812
except AvahiError, error: