To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to mandos-monitor
- browse files at revision 579
- compare with another revision
- download diff
- download tarball
- view history from revision 579
- Committer: Teddy Hogeborn
- Date: 2012-05-07 19:13:15 UTC
- Revision ID: teddy@recompile.se-20120507191315-tbe55n4u1uq3l7ft
* mandos: Use all new builtins.
* mandos-ctl: - '' -
* mandos-monitor: - '' -
* mandos-ctl: - '' -
* mandos-monitor: - '' -
- files added:
- network-hooks.d/openvpn
- files modified:
- DBUS-API
added
removed
mandos-monitor
3
3
#
4
4
# Mandos Monitor - Control and monitor the Mandos server
5
5
#
6
# Copyright © 2009-2011 Teddy Hogeborn
7
# Copyright © 2009-2011 Björn Påhlsson
6
# Copyright © 2009-2012 Teddy Hogeborn
7
# Copyright © 2009-2012 Björn Påhlsson
8
8
#
9
9
# This program is free software: you can redistribute it and/or modify
10
10
# it under the terms of the GNU General Public License as published by
17
17
# GNU General Public License for more details.
18
18
#
19
19
# You should have received a copy of the GNU General Public License
20
# along with this program. If not, see <http://www.gnu.org/licenses/>.
20
# along with this program. If not, see
21
# <http://www.gnu.org/licenses/>.
21
22
#
22
23
# Contact the authors at <mandos@recompile.se>.
23
24
#
25
26
from __future__ import (division, absolute_import, print_function,
26
27
unicode_literals)
27
28
29
from future_builtins import *
30
28
31
import sys
29
32
import os
30
33
import signal
52
55
domain = 'se.recompile'
53
56
server_interface = domain + '.Mandos'
54
57
client_interface = domain + '.Mandos.Client'
55
version = "1.4.1"
58
version = "1.5.3"
56
59
57
60
# Always run in monochrome mode
58
61
urwid.curses_display.curses.has_colors = lambda : False
131
134
132
135
self._update_timer_callback_tag = None
133
136
self._update_timer_callback_lock = 0
134
self.last_checker_failed = False
135
137
136
138
# The widget shown normally
137
139
self._text_widget = urwid.Text("")
145
147
146
148
last_checked_ok = isoformat_to_datetime(self.properties
147
149
["LastCheckedOK"])
148
if last_checked_ok is None:
149
self.last_checker_failed = True
150
else:
151
self.last_checker_failed = ((datetime.datetime.utcnow()
152
- last_checked_ok)
153
> datetime.timedelta
154
(milliseconds=
155
self.properties
156
["Interval"]))
157
150
158
if self.last_checker_failed:
151
if self.properties ["LastCheckerStatus"] != 0:
159
152
self.using_timer(True)
160
153
161
154
if self.need_approval:
182
175
self.rejected,
183
176
client_interface,
184
177
byte_arrays=True))
185
#self.logger('Created client %s' % (self.properties["Name"]))
178
#self.logger('Created client {0}'
179
# .format(self.properties["Name"]))
186
180
187
181
def property_changed(self, property=None, value=None):
188
182
super(self, MandosClientWidget).property_changed(property,
189
183
value)
190
184
if property == "ApprovalPending":
191
185
using_timer(bool(value))
192
186
if property == "LastCheckerStatus":
187
using_timer(value != 0)
188
#self.logger('Checker for client {0} (command "{1}") was '
189
# ' successful'.format(self.properties["Name"],
190
# command))
191
193
192
def using_timer(self, flag):
194
193
"""Call this method with True or False when timer should be
195
194
activated or deactivated.
210
209
211
210
def checker_completed(self, exitstatus, condition, command):
212
211
if exitstatus == 0:
213
if self.last_checker_failed:
214
self.last_checker_failed = False
215
self.using_timer(False)
216
#self.logger('Checker for client %s (command "%s")'
217
# ' was successful'
218
# % (self.properties["Name"], command))
219
212
self.update()
220
213
return
221
214
# Checker failed
222
if not self.last_checker_failed:
223
self.last_checker_failed = True
224
self.using_timer(True)
225
215
if os.WIFEXITED(condition):
226
self.logger('Checker for client %s (command "%s")'
227
' failed with exit code %s'
228
% (self.properties["Name"], command,
229
os.WEXITSTATUS(condition)))
216
self.logger('Checker for client {0} (command "{1}")'
217
' failed with exit code {2}'
218
.format(self.properties["Name"], command,
219
os.WEXITSTATUS(condition)))
230
220
elif os.WIFSIGNALED(condition):
231
self.logger('Checker for client %s (command "%s")'
232
' was killed by signal %s'
233
% (self.properties["Name"], command,
234
os.WTERMSIG(condition)))
221
self.logger('Checker for client {0} (command "{1}") was'
222
' killed by signal {2}'
223
.format(self.properties["Name"], command,
224
os.WTERMSIG(condition)))
235
225
elif os.WCOREDUMP(condition):
236
self.logger('Checker for client %s (command "%s")'
226
self.logger('Checker for client {0} (command "{1}")'
237
227
' dumped core'
238
% (self.properties["Name"], command))
228
.format(self.properties["Name"], command))
239
229
else:
240
self.logger('Checker for client %s completed'
241
' mysteriously')
230
self.logger('Checker for client {0} completed'
231
' mysteriously'
232
.format(self.properties["Name"]))
242
233
self.update()
243
234
244
235
def checker_started(self, command):
245
#self.logger('Client %s started checker "%s"'
246
# % (self.properties["Name"], unicode(command)))
236
"""Server signals that a checker started. This could be useful
237
to log in the future. """
238
#self.logger('Client {0} started checker "{1}"'
239
# .format(self.properties["Name"],
240
# unicode(command)))
247
241
pass
248
242
249
243
def got_secret(self):
250
self.last_checker_failed = False
251
self.logger('Client %s received its secret'
252
% self.properties["Name"])
244
self.logger('Client {0} received its secret'
245
.format(self.properties["Name"]))
253
246
254
247
def need_approval(self, timeout, default):
255
248
if not default:
256
message = 'Client %s needs approval within %s seconds'
249
message = 'Client {0} needs approval within {1} seconds'
257
250
else:
258
message = 'Client %s will get its secret in %s seconds'
259
self.logger(message
260
% (self.properties["Name"], timeout/1000))
251
message = 'Client {0} will get its secret in {1} seconds'
252
self.logger(message.format(self.properties["Name"],
253
timeout/1000))
261
254
self.using_timer(True)
262
255
263
256
def rejected(self, reason):
264
self.logger('Client %s was rejected; reason: %s'
265
% (self.properties["Name"], reason))
257
self.logger('Client {0} was rejected; reason: {1}'
258
.format(self.properties["Name"], reason))
266
259
267
260
def selectable(self):
268
261
"""Make this a "selectable" widget.
294
287
# Rebuild focus and non-focus widgets using current properties
295
288
296
289
# Base part of a client. Name!
297
base = ('%(name)s: '
298
% {"name": self.properties["Name"]})
290
base = '{name}: '.format(name=self.properties["Name"])
299
291
if not self.properties["Enabled"]:
300
292
message = "DISABLED"
301
293
elif self.properties["ApprovalPending"]:
310
302
else:
311
303
timer = datetime.timedelta()
312
304
if self.properties["ApprovedByDefault"]:
313
message = "Approval in %s. (d)eny?"
305
message = "Approval in {0}. (d)eny?"
314
306
else:
315
message = "Denial in %s. (a)pprove?"
316
message = message % unicode(timer).rsplit(".", 1)[0]
317
elif self.last_checker_failed:
318
# When checker has failed, print a timer until client expires
307
message = "Denial in {0}. (a)pprove?"
308
message = message.format(unicode(timer).rsplit(".", 1)[0])
309
elif self.properties["LastCheckerStatus"] != 0:
310
# When checker has failed, show timer until client expires
319
311
expires = self.properties["Expires"]
320
312
if expires == "":
321
313
timer = datetime.timedelta(0)
322
314
else:
323
expires = datetime.datetime.strptime(expires,
324
'%Y-%m-%dT%H:%M:%S.%f')
315
expires = (datetime.datetime.strptime
316
(expires, '%Y-%m-%dT%H:%M:%S.%f'))
325
317
timer = expires - datetime.datetime.utcnow()
326
318
message = ('A checker has failed! Time until client'
327
' gets disabled: %s'
328
% unicode(timer).rsplit(".", 1)[0])
319
' gets disabled: {0}'
320
.format(unicode(timer).rsplit(".", 1)[0]))
329
321
else:
330
322
message = "enabled"
331
self._text = "%s%s" % (base, message)
323
self._text = "{0}{1}".format(base, message)
332
324
333
325
if not urwid.supports_unicode():
334
326
self._text = self._text.encode("ascii", "replace")
497
489
498
490
self.busname = domain + '.Mandos'
499
491
self.main_loop = gobject.MainLoop()
500
self.bus = dbus.SystemBus()
501
mandos_dbus_objc = self.bus.get_object(
502
self.busname, "/", follow_name_owner_changes=True)
503
self.mandos_serv = dbus.Interface(mandos_dbus_objc,
504
dbus_interface
505
= server_interface)
506
try:
507
mandos_clients = (self.mandos_serv
508
.GetAllClientsWithProperties())
509
except dbus.exceptions.DBusException:
510
mandos_clients = dbus.Dictionary()
511
512
(self.mandos_serv
513
.connect_to_signal("ClientRemoved",
514
self.find_and_remove_client,
515
dbus_interface=server_interface,
516
byte_arrays=True))
517
(self.mandos_serv
518
.connect_to_signal("ClientAdded",
519
self.add_new_client,
520
dbus_interface=server_interface,
521
byte_arrays=True))
522
(self.mandos_serv
523
.connect_to_signal("ClientNotFound",
524
self.client_not_found,
525
dbus_interface=server_interface,
526
byte_arrays=True))
527
for path, client in mandos_clients.iteritems():
528
client_proxy_object = self.bus.get_object(self.busname,
529
path)
530
self.add_client(MandosClientWidget(server_proxy_object
531
=self.mandos_serv,
532
proxy_object
533
=client_proxy_object,
534
properties=client,
535
update_hook
536
=self.refresh,
537
delete_hook
538
=self.remove_client,
539
logger
540
=self.log_message),
541
path=path)
542
492
543
493
def client_not_found(self, fingerprint, address):
544
self.log_message(("Client with address %s and fingerprint %s"
545
" could not be found" % (address,
546
fingerprint)))
494
self.log_message("Client with address {0} and fingerprint"
495
" {1} could not be found"
496
.format(address, fingerprint))
547
497
548
498
def rebuild(self):
549
499
"""This rebuilds the User Interface.
559
509
self.divider)))
560
510
if self.log_visible:
561
511
self.uilist.append(self.logbox)
562
pass
563
512
self.topwidget = urwid.Pile(self.uilist)
564
513
565
514
def log_message(self, message):
603
552
client = self.clients_dict[path]
604
553
except KeyError:
605
554
# not found?
606
self.log_message("Unknown client %r (%r) removed", name,
607
path)
555
self.log_message("Unknown client {0!r} ({1!r}) removed"
556
.format(name, path))
608
557
return
609
558
client.delete()
610
559
649
598
650
599
def run(self):
651
600
"""Start the main loop and exit when it's done."""
601
self.bus = dbus.SystemBus()
602
mandos_dbus_objc = self.bus.get_object(
603
self.busname, "/", follow_name_owner_changes=True)
604
self.mandos_serv = dbus.Interface(mandos_dbus_objc,
605
dbus_interface
606
= server_interface)
607
try:
608
mandos_clients = (self.mandos_serv
609
.GetAllClientsWithProperties())
610
except dbus.exceptions.DBusException:
611
mandos_clients = dbus.Dictionary()
612
613
(self.mandos_serv
614
.connect_to_signal("ClientRemoved",
615
self.find_and_remove_client,
616
dbus_interface=server_interface,
617
byte_arrays=True))
618
(self.mandos_serv
619
.connect_to_signal("ClientAdded",
620
self.add_new_client,
621
dbus_interface=server_interface,
622
byte_arrays=True))
623
(self.mandos_serv
624
.connect_to_signal("ClientNotFound",
625
self.client_not_found,
626
dbus_interface=server_interface,
627
byte_arrays=True))
628
for path, client in mandos_clients.iteritems():
629
client_proxy_object = self.bus.get_object(self.busname,
630
path)
631
self.add_client(MandosClientWidget(server_proxy_object
632
=self.mandos_serv,
633
proxy_object
634
=client_proxy_object,
635
properties=client,
636
update_hook
637
=self.refresh,
638
delete_hook
639
=self.remove_client,
640
logger
641
=self.log_message),
642
path=path)
643
652
644
self.refresh()
653
645
self._input_callback_tag = (gobject.io_add_watch
654
646
(sys.stdin.fileno(),
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0