### $Id$ ### $URL$ from sfa.util.faults import * from sfa.util.method import Method from sfa.util.parameter import Parameter, Mixed from sfa.trust.auth import Auth from sfa.util.genitable import GeniTable from sfa.util.sfaticket import SfaTicket from sfa.util.slices import class get_ticket(Method): """ Retrieve a ticket. This operation is currently implemented on PLC only (see SFA, engineering decisions); it is not implemented on components. The ticket is filled in with information from the PLC database. This information includes resources, and attributes such as user keys and initscripts. @param cred credential string @param name name of the slice to retrieve a ticket for @param rspec resource specification dictionary @return the string representation of a ticket object """ interfaces = ['registry'] accepts = [ Parameter(str, "Credential string"), Parameter(str, "Human readable name of slice to retrive a ticket for (hrn)"), Parameter(str, "Resource specification (rspec)"), Mixed(Parameter(str, "Request hash"), Parameter(None, "Request hash not specified")) ] returns = Parameter(str, "String represeneation of a ticket object") def call(self, cred, hrn, request_hash=None): self.api.auth.authenticateCred(cred, [cred, hrn], request_hash) self.api.auth.check(cred, "getticket") self.api.auth.verify_object_belongs_to_me(hrn) self.api.auth.verify_object_permission(hrn) table = GeniTable() records = table.findObjects({'hrn': hrn, 'type': 'slice'}) if not records: raise RecordNotFound(hrn) record = records object_gid = record.get_gid_object() new_ticket = SfaTicket(subject = object_gid.get_subject()) new_ticket.set_gid_caller(self.client_gid) new_ticket.set_gid_object(object_gid) new_ticket.set_issuer(key=auth_info.get_pkey_object(), subject=auth_hrn) new_ticket.set_pubkey(object_gid.get_pubkey()) # get sliver info slivers = Slices(self.api).get_slivers(hrn) if not slivers: raise SliverDoesNotExist(hrn) sliver = slivers[0] # get initscripts initscripts = None sliver['initscripts'] = initscripts # get rspec info # conver plc slice tags to rspec attributes rspec = None new_ticket.set_attributes(sliver) new_ticket.set_rspec(rspec) new_ticket.set_parent(self.api.auth.hierarchy.get_auth_ticket(auth_hrn)) new_ticket.encode() new_ticket.sign() return new_ticket.save_to_string(save_parents=True)