4 from sfa.util.faults import *
5 from sfa.util.xrn import hrn_to_urn
6 from sfa.util.method import Method
7 from sfa.util.parameter import Parameter, Mixed
8 from sfa.trust.auth import Auth
9 from sfa.util.table import SfaTable
10 from sfa.trust.certificate import Keypair
11 from sfa.trust.gid import create_uuid
13 class get_key(Method):
15 Generate a new keypair and gid for requesting caller (component).
16 @return 1 If successful
19 interfaces = ['registry']
23 returns = Parameter(int, "1 if successful, faults otherwise")
26 # verify that the callers's ip address exist in the db and is an inteface
27 # for a node in the db
28 (ip, port) = self.api.remote_addr
29 interfaces = self.api.plshell.GetInterfaces(self.api.plauth, {'ip': ip}, ['node_id'])
31 raise NonExistingRecord("no such ip %(ip)s" % locals())
32 nodes = self.api.plshell.GetNodes(self.api.plauth, [interfaces[0]['node_id']], ['node_id', 'hostname'])
34 raise NonExistingRecord("no such node using ip %(ip)s" % locals())
37 # look up the sfa record
39 records = table.findObjects({'type': 'node', 'pointer': node['node_id']})
41 raise RecordNotFound("pointer:" + str(node['node_id']))
44 # generate a new keypair and gid
46 pkey = Keypair(create=True)
47 urn = hrn_to_urn(record['hrn'], record['type'])
48 gid_object = self.api.auth.hierarchy.create_gid(urn, uuid, pkey)
49 gid = gid_object.save_to_string(save_parents=True)
56 # attempt the scp the key
57 # and gid onto the node
58 # this will only work for planetlab based components
59 (kfd, key_filename) = tempfile.mkstemp()
60 (gfd, gid_filename) = tempfile.mkstemp()
61 pkey.save_to_file(key_filename)
62 gid_object.save_to_file(gid_filename, save_parents=True)
63 host = node['hostname']
64 key_dest="/etc/sfa/node.key"
65 gid_dest="/etc/sfa/node.gid"
67 #identity = "/etc/planetlab/root_ssh_key.rsa"
68 identity = "/etc/sfa/root_ssh_key"
69 scp_options=" -i %(identity)s " % locals()
70 scp_options+="-o StrictHostKeyChecking=no " % locals()
71 scp_key_command="%(scp)s %(scp_options)s %(key_filename)s root@%(host)s:%(key_dest)s" %\
73 scp_gid_command="%(scp)s %(scp_options)s %(gid_filename)s root@%(host)s:%(gid_dest)s" %\
76 all_commands = [scp_key_command, scp_gid_command]
78 for command in all_commands:
79 (status, output) = commands.getstatusoutput(command)
81 raise Exception, output
83 for filename in [key_filename, gid_filename]: