b99f2078a1
This fix provides to Synergy a security mechanism highly configurable. The security policies are pluggable so that it is possible to define any kind of authorization checks. This commit includes a very simple authorization plugin (i.e. synergy.auth.plugin.LocalHostAuthorization) which denies any command coming from clients having IP address different from the Synergy's one. Bug: #1691352 Change-Id: I2535b2a3edeea5e56cd8918d01070a6f8a534c3e Sem-Ver: bugfix
151 lines
4.5 KiB
Python
151 lines
4.5 KiB
Python
import json
|
|
import requests
|
|
|
|
from synergy.common.utils import objectHookHandler
|
|
from tabulate import tabulate
|
|
|
|
|
|
__author__ = "Lisa Zangrando"
|
|
__email__ = "lisa.zangrando[AT]pd.infn.it"
|
|
__copyright__ = """Copyright (c) 2015 INFN - INDIGO-DataCloud
|
|
All Rights Reserved
|
|
|
|
Licensed under the Apache License, Version 2.0;
|
|
you may not use this file except in compliance with the
|
|
License. You may obtain a copy of the License at:
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing,
|
|
software distributed under the License is distributed on an
|
|
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
|
|
either express or implied.
|
|
See the License for the specific language governing
|
|
permissions and limitations under the License."""
|
|
|
|
|
|
class HTTPCommand(object):
|
|
|
|
def __init__(self, name):
|
|
self.name = name
|
|
self.token = None
|
|
|
|
def getName(self):
|
|
return self.name
|
|
|
|
def setToken(self, token):
|
|
self.token = token
|
|
|
|
def configureParser(self, subparser):
|
|
raise NotImplementedError("not implemented!")
|
|
|
|
def execute(self, synergy_url, payload=None):
|
|
headers = None
|
|
|
|
if self.token:
|
|
headers = {"Content-Type": "application/json",
|
|
"Accept": "application/json",
|
|
"User-Agent": "synergy_client",
|
|
"X-Auth-Token": self.token.getId()}
|
|
|
|
request = requests.get(synergy_url, headers=headers, params=payload)
|
|
request.raise_for_status()
|
|
|
|
try:
|
|
self.results = json.loads(
|
|
request.text,
|
|
object_hook=objectHookHandler)
|
|
except ValueError:
|
|
self.results = request.json()
|
|
|
|
return self.results
|
|
|
|
def getResults(self):
|
|
return self.results
|
|
|
|
|
|
class ManagerCommand(HTTPCommand):
|
|
|
|
def __init__(self):
|
|
super(ManagerCommand, self).__init__("Manager")
|
|
|
|
def configureParser(self, subparser):
|
|
manager_parser = subparser.add_parser('manager')
|
|
manager_parsers = manager_parser.add_subparsers(dest="command")
|
|
|
|
manager_parsers.add_parser(
|
|
"list", add_help=True, help="list the managers")
|
|
|
|
status_parser = manager_parsers.add_parser(
|
|
"status", add_help=True, help="show the managers status")
|
|
|
|
status_parser.add_argument(
|
|
"manager", nargs='*', help="one or more manager name")
|
|
|
|
start_parser = manager_parsers.add_parser(
|
|
"start", add_help=True, help="start the manager")
|
|
|
|
start_parser.add_argument(
|
|
"manager", nargs='+', help="one or more manager name")
|
|
|
|
stop_parser = manager_parsers.add_parser(
|
|
"stop", add_help=True, help="stop the manager")
|
|
|
|
stop_parser.add_argument(
|
|
"manager", nargs='+', help="one or more manager name")
|
|
|
|
def execute(self, synergy_url, args=None):
|
|
table = []
|
|
headers = []
|
|
url = synergy_url
|
|
|
|
if args.command == "list":
|
|
headers.append("manager")
|
|
url += "/synergy/list"
|
|
|
|
managers = super(ManagerCommand, self).execute(url)
|
|
|
|
for manager in managers:
|
|
table.append([manager.getName()])
|
|
else:
|
|
headers.append("manager")
|
|
headers.append("status")
|
|
headers.append("rate (min)")
|
|
url += "/synergy/" + args.command
|
|
|
|
managers = super(ManagerCommand, self).execute(
|
|
url, {"manager": args.manager})
|
|
|
|
if args.command == "status":
|
|
for manager in managers:
|
|
table.append([manager.getName(),
|
|
manager.getStatus(),
|
|
manager.getRate()])
|
|
else:
|
|
for manager in managers:
|
|
msg = manager.get("message")
|
|
|
|
table.append([manager.getName(),
|
|
manager.getStatus() + " (%s)" % msg,
|
|
manager.getRate()])
|
|
|
|
print(tabulate(table, headers, tablefmt="fancy_grid"))
|
|
|
|
|
|
class ExecuteCommand(HTTPCommand):
|
|
|
|
def __init__(self, name):
|
|
super(ExecuteCommand, self).__init__(name)
|
|
|
|
def execute(self, synergy_url, manager, command, args=None):
|
|
if args is None:
|
|
args = {}
|
|
|
|
url = synergy_url + "/synergy/execute"
|
|
|
|
payload = {"manager": manager,
|
|
"command": command,
|
|
"args": json.dumps(args)}
|
|
|
|
return super(ExecuteCommand, self).execute(url, payload)
|