4 from sfa.util.config import Config
5 from sfa.util.xrn import Xrn, get_leaf, get_authority, hrn_to_urn
7 from sfa.trust.gid import create_uuid
8 from sfa.trust.certificate import convert_public_key, Keypair
10 from sfa.storage.alchemy import dbsession
11 from sfa.storage.model import RegRecord, RegAuthority, RegSlice, RegNode, RegUser, RegKey
13 from sfa.nitos.nitosshell import NitosShell
14 from sfa.nitos.nitosxrn import hostname_to_hrn, slicename_to_hrn, email_to_hrn, hrn_to_nitos_slicename, username_to_hrn
16 def _get_site_hrn(interface_hrn, site):
17 hrn = ".".join([interface_hrn, site['name']])
23 def __init__ (self, auth_hierarchy, logger):
24 self.auth_hierarchy = auth_hierarchy
27 def add_options (self, parser):
28 # we don't have any options for now
31 # hrn hash is initialized from current db
32 # remember just-created records as we go
33 # xxx might make sense to add a UNIQUE constraint in the db itself
34 def remember_record_by_hrn (self, record):
35 tuple = (record.type, record.hrn)
36 if tuple in self.records_by_type_hrn:
37 self.logger.warning ("NitosImporter.remember_record_by_hrn: duplicate (%s,%s)"%tuple)
39 self.records_by_type_hrn [ tuple ] = record
41 # ditto for pointer hash
42 def remember_record_by_pointer (self, record):
43 if record.pointer == -1:
44 self.logger.warning ("NitosImporter.remember_record_by_pointer: pointer is void")
46 tuple = (record.type, record.pointer)
47 if tuple in self.records_by_type_pointer:
48 self.logger.warning ("NitosImporter.remember_record_by_pointer: duplicate (%s,%s)"%tuple)
50 self.records_by_type_pointer [ ( record.type, record.pointer,) ] = record
52 def remember_record (self, record):
53 self.remember_record_by_hrn (record)
54 self.remember_record_by_pointer (record)
56 def locate_by_type_hrn (self, type, hrn):
57 return self.records_by_type_hrn.get ( (type, hrn), None)
59 def locate_by_type_pointer (self, type, pointer):
60 return self.records_by_type_pointer.get ( (type, pointer), None)
62 # a convenience/helper function to see if a record is already known
63 # a former, broken, attempt (in 2.1-9) had been made
64 # to try and use 'pointer' as a first, most significant attempt
65 # the idea being to preserve stuff as much as possible, and thus
66 # to avoid creating a new gid in the case of a simple hrn rename
67 # however this of course doesn't work as the gid depends on the hrn...
68 #def locate (self, type, hrn=None, pointer=-1):
70 # attempt = self.locate_by_type_pointer (type, pointer)
71 # if attempt : return attempt
73 # attempt = self.locate_by_type_hrn (type, hrn,)
74 # if attempt : return attempt
77 # this makes the run method a bit abtruse - out of the way
79 def run (self, options):
81 interface_hrn = config.SFA_INTERFACE_HRN
82 root_auth = config.SFA_REGISTRY_ROOT_AUTH
83 shell = NitosShell (config)
85 ######## retrieve all existing SFA objects
86 all_records = dbsession.query(RegRecord).all()
88 # create hash by (type,hrn)
89 # we essentially use this to know if a given record is already known to SFA
90 self.records_by_type_hrn = \
91 dict ( [ ( (record.type, record.hrn) , record ) for record in all_records ] )
92 # create hash by (type,pointer)
93 self.records_by_type_pointer = \
94 dict ( [ ( (record.type, record.pointer) , record ) for record in all_records
95 if record.pointer != -1] )
97 # initialize record.stale to True by default, then mark stale=False on the ones that are in use
98 for record in all_records: record.stale=True
100 ######## retrieve NITOS data
102 # retrieve only required stuf
103 site = shell.getTestbedInfo()
105 # create a hash of sites by login_base
106 # # sites_by_login_base = dict ( [ ( site['login_base'], site ) for site in sites ] )
107 # Get all NITOS users
108 users = shell.getUsers()
109 # create a hash of users by user_id
110 users_by_id = dict ( [ ( user['user_id'], user) for user in users ] )
111 # Get all NITOS public keys
112 # accumulate key ids for keys retrieval
114 # for person in persons:
115 # key_ids.extend(person['key_ids'])
116 # keys = shell.GetKeys( {'peer_id': None, 'key_id': key_ids,
117 # 'key_type': 'ssh'} )
118 # # create a hash of keys by key_id
119 # keys_by_id = dict ( [ ( key['key_id'], key ) for key in keys ] )
120 # create a dict user_id -> [ (nitos)keys ]
121 keys_by_user_id = dict ( [ ( user['user_id'], user['keys']) for user in users ] )
122 # Get all nitos nodes
123 nodes = shell.getNodes({}, [])
124 # create hash by node_id
125 nodes_by_id = dict ( [ (node['node_id'], node) for node in nodes ] )
126 # Get all nitos slices
127 slices = shell.getSlices({}, [])
128 # create hash by slice_id
129 slices_by_id = dict ( [ (slice['slice_id'], slice) for slice in slices ] )
135 site_hrn = _get_site_hrn(interface_hrn, site)
136 # import if hrn is not in list of existing hrns or if the hrn exists
137 # but its not a site record
138 site_record=self.locate_by_type_hrn ('authority', site_hrn)
141 urn = hrn_to_urn(site_hrn, 'authority')
142 if not self.auth_hierarchy.auth_exists(urn):
143 self.auth_hierarchy.create_auth(urn)
144 auth_info = self.auth_hierarchy.get_auth_info(urn)
145 site_record = RegAuthority(hrn=site_hrn, gid=auth_info.get_gid_object(),
147 authority=get_authority(site_hrn))
148 site_record.just_created()
149 dbsession.add(site_record)
151 self.logger.info("NitosImporter: imported authority (site) : %s" % site_record)
152 self.remember_record (site_record)
154 # if the site import fails then there is no point in trying to import the
155 # site's child records (node, slices, persons), so skip them.
156 self.logger.log_exc("NitosImporter: failed to import site. Skipping child records")
159 # xxx update the record ...
161 site_record.stale=False
163 # import node records
165 site_auth = get_authority(site_hrn)
166 site_name = site['name']
167 node_hrn = hostname_to_hrn(site_auth, site_name, node['hostname'])
168 # xxx this sounds suspicious
169 if len(node_hrn) > 64: node_hrn = node_hrn[:64]
170 node_record = self.locate_by_type_hrn ( 'node', node_hrn )
173 pkey = Keypair(create=True)
174 urn = hrn_to_urn(node_hrn, 'node')
175 node_gid = self.auth_hierarchy.create_gid(urn, create_uuid(), pkey)
176 node_record = RegNode (hrn=node_hrn, gid=node_gid,
177 pointer =node['node_id'],
178 authority=get_authority(node_hrn))
179 node_record.just_created()
180 dbsession.add(node_record)
182 self.logger.info("NitosImporter: imported node: %s" % node_record)
183 self.remember_record (node_record)
185 self.logger.log_exc("NitosImporter: failed to import node")
187 # xxx update the record ...
190 node_record.stale=False
195 user_hrn = username_to_hrn(interface_hrn, site['name'], user['username'])
196 # xxx suspicious again
197 if len(user_hrn) > 64: user_hrn = user_hrn[:64]
198 user_urn = hrn_to_urn(user_hrn, 'user')
200 user_record = self.locate_by_type_hrn ( 'user', user_hrn)
202 # return a tuple pubkey (a nitos key object) and pkey (a Keypair object)
203 def init_user_key (user):
207 # randomly pick first key in set
208 for key in user['keys']:
211 pkey = convert_public_key(pubkey)
216 self.logger.warn('NitosImporter: unable to convert public key for %s' % user_hrn)
217 pkey = Keypair(create=True)
219 # the user has no keys. Creating a random keypair for the user's gid
220 self.logger.warn("NitosImporter: user %s does not have a NITOS public key"%user_hrn)
221 pkey = Keypair(create=True)
222 return (pubkey, pkey)
227 (pubkey,pkey) = init_user_key (user)
228 user_gid = self.auth_hierarchy.create_gid(user_urn, create_uuid(), pkey)
229 user_gid.set_email(user['email'])
230 user_record = RegUser (hrn=user_hrn, gid=user_gid,
231 pointer=user['user_id'],
232 authority=get_authority(user_hrn),
235 user_record.reg_keys=[RegKey (pubkey)]
237 self.logger.warning("No key found for user %s"%user_record)
238 user_record.just_created()
239 dbsession.add (user_record)
241 self.logger.info("NitosImporter: imported user: %s" % user_record)
242 self.remember_record ( user_record )
244 # update the record ?
245 # if user's primary key has changed then we need to update the
246 # users gid by forcing an update here
247 sfa_keys = user_record.reg_keys
249 def sfa_key_in_list (sfa_key,nitos_user_keys):
250 for nitos_key in nitos_user_keys:
251 if nitos_key==sfa_key: return True
253 # are all the SFA keys known to nitos ?
255 if not sfa_keys and user['keys']:
258 for sfa_key in sfa_keys:
259 if not sfa_key_in_list (sfa_key.key,user['keys']):
263 (pubkey,pkey) = init_user_key (user)
264 user_gid = self.auth_hierarchy.create_gid(user_urn, create_uuid(), pkey)
266 user_record.reg_keys=[]
268 user_record.reg_keys=[ RegKey (pubkey)]
269 user_record.gid = user_gid
270 user_record.just_updated()
271 self.logger.info("NitosImporter: updated user: %s" % user_record)
272 user_record.email = user['email']
274 user_record.stale=False
276 self.logger.log_exc("NitosImporter: failed to import user %s %s"%(user['user_id'],user['email']))
281 slice_hrn = slicename_to_hrn(interface_hrn, site['name'], slice['slice_name'])
282 slice_record = self.locate_by_type_hrn ('slice', slice_hrn)
285 pkey = Keypair(create=True)
286 urn = hrn_to_urn(slice_hrn, 'slice')
287 slice_gid = self.auth_hierarchy.create_gid(urn, create_uuid(), pkey)
288 slice_record = RegSlice (hrn=slice_hrn, gid=slice_gid,
289 pointer=slice['slice_id'],
290 authority=get_authority(slice_hrn))
291 slice_record.just_created()
292 dbsession.add(slice_record)
294 self.logger.info("NitosImporter: imported slice: %s" % slice_record)
295 self.remember_record ( slice_record )
297 self.logger.log_exc("NitosImporter: failed to import slice")
299 # xxx update the record ...
300 self.logger.warning ("Slice update not yet implemented")
302 # record current users affiliated with the slice
303 slice_record.reg_researchers = \
304 [ self.locate_by_type_pointer ('user',int(user_id)) for user_id in slice['user_ids'] ]
306 slice_record.stale=False
309 ### remove stale records
310 # special records must be preserved
311 system_hrns = [interface_hrn, root_auth, interface_hrn + '.slicemanager']
312 for record in all_records:
313 if record.hrn in system_hrns:
315 if record.peer_authority:
318 for record in all_records:
319 try: stale=record.stale
322 self.logger.warning("stale not found with %s"%record)
324 self.logger.info("NitosImporter: deleting stale record: %s" % record)
325 dbsession.delete(record)