From 42c4b7f7c358b593b9b328a2e2499d8c185baf3e Mon Sep 17 00:00:00 2001
From: Thierry Parmentelat <thierry.parmentelat@sophia.inria.fr>
Date: Thu, 29 Sep 2011 17:27:17 +0200
Subject: [PATCH] first cherrypy skeleton for the onelab sso

---
 onelab-sso/NOTES                 | 22 ++++++++++++++++++++++
 onelab-sso/OnelabSingleSignOn.py | 17 +++++++++++++++++
 onelab-sso/client.py             | 13 +++++++++++++
 onelab-sso/server.py             | 23 +++++++++++++++++++++++
 4 files changed, 75 insertions(+)
 create mode 100644 onelab-sso/NOTES
 create mode 100644 onelab-sso/OnelabSingleSignOn.py
 create mode 100755 onelab-sso/client.py
 create mode 100755 onelab-sso/server.py

diff --git a/onelab-sso/NOTES b/onelab-sso/NOTES
new file mode 100644
index 0000000..615b34a
--- /dev/null
+++ b/onelab-sso/NOTES
@@ -0,0 +1,22 @@
+********** requirements
+requires cherrypy 3.x:
+. available in f14 with
+yum install python-cherrypy
+. available in macos with
+sudo port install py26-cherrypy3
+
+note that running https requires the OpenSSL module as well
+. f14
+yum install pyOpenSSL
+. macos
+???
+
+********** SSL
+on my devel box I created a fake cert using
+. openssl req -new -x509 -days 120 -set_serial $RANDOM -batch -subj "/CN=zankai.inria.fr" -nodes -keyout zankai.key -out zankai.crt
+
+worked like a charm 
+
+********** xmlrpc
+http://www.cherrypy.org/wiki/BuiltinTools#tools.xmlrpc
+http://tools.cherrypy.org/wiki/XmlRpcIntrospection
diff --git a/onelab-sso/OnelabSingleSignOn.py b/onelab-sso/OnelabSingleSignOn.py
new file mode 100644
index 0000000..64b916c
--- /dev/null
+++ b/onelab-sso/OnelabSingleSignOn.py
@@ -0,0 +1,17 @@
+import cherrypy
+
+interface_version='0.0'
+
+class OnelabSingleSignOn (cherrypy._cptools.XMLRPCController):
+    def version (self):
+        return interface_version
+    version.exposed=True
+
+    # basically this goes at several places to see if this user is known
+    # first sequential implementation should be ok for our needs
+    # given that we'd have only 2 places to check
+    # details of the return structure to be specified
+    def AuthCheck (self, login, password):
+        return { 'alt': "not implemented yet", }
+    AuthCheck.exposed=True
+
diff --git a/onelab-sso/client.py b/onelab-sso/client.py
new file mode 100755
index 0000000..3ced7a4
--- /dev/null
+++ b/onelab-sso/client.py
@@ -0,0 +1,13 @@
+#!/usr/bin/env python
+
+import xmlrpclib
+import traceback
+
+url="https://localhost:9999/xmlrpc"
+try:
+    server = xmlrpclib.Server(url)
+    print url,'get version',server.version()
+    print url,'AuthCheck',server.AuthCheck("john.doe@foo.com","weirdpassword")
+except:
+    print 'something wrong with url=',url
+    traceback.print_exc()
diff --git a/onelab-sso/server.py b/onelab-sso/server.py
new file mode 100755
index 0000000..10a3ab4
--- /dev/null
+++ b/onelab-sso/server.py
@@ -0,0 +1,23 @@
+#!/usr/bin/env python
+
+import cherrypy
+
+from OnelabSingleSignOn import OnelabSingleSignOn
+
+interface_path='/xmlrpc'
+mydir="/Users/parmentelat/git/infrastructure/onelab-sso/"
+
+cherrypy.tree.mount(OnelabSingleSignOn(), interface_path)
+
+tweaks={'xmlrpc_filter.on':True,
+        'request.dispatch': cherrypy.dispatch.XMLRPCDispatcher(),
+        }
+
+cherrypy.config.update( {interface_path: tweaks})
+
+cherrypy.server.socket_host=            '0.0.0.0'
+cherrypy.server.socket_port=            9999
+cherrypy.server.ssl_certificate=        mydir+"zankai.crt"
+cherrypy.server.ssl_private_key=        mydir+"zankai.key"
+
+cherrypy.server.start() 
-- 
2.43.0