From fac3b5e83cd67c043ef6e25a9411e9e0b76b69e1 Mon Sep 17 00:00:00 2001 From: Faiyaz Ahmed Date: Thu, 6 Nov 2008 22:26:03 +0000 Subject: [PATCH] Rough draft to support admin tickets from "blessed" interfaces. --- api.py | 31 +++++++++++++++++++++++++++---- api_calls.py | 18 ++++++++++++++++++ 2 files changed, 45 insertions(+), 4 deletions(-) diff --git a/api.py b/api.py index f8200fb..0eac3e0 100644 --- a/api.py +++ b/api.py @@ -17,6 +17,7 @@ import socket import struct import threading import xmlrpclib +import sys import accounts import database @@ -25,6 +26,13 @@ import sliver_vs import ticket import tools from api_calls import * +try: + sys.path.append("/etc/planetlab") + from plc_config import * +except: + logger.log("api: Warning: Configuration file /etc/planetlab/plc_config.py not found", 2) + PLC_SLICE_PREFIX="pl" + logger.log("api: Warning: admin slice prefix set to %s" %(PLC_SLICE_PREFIX), 2) API_SERVER_PORT = 812 UNIX_ADDR = '/tmp/sliver_mgr.api' @@ -56,17 +64,32 @@ class APIRequestHandler(SimpleXMLRPCServer.SimpleXMLRPCRequestHandler): ucred = self.request.getsockopt(socket.SOL_SOCKET, SO_PEERCRED, sizeof_struct_ucred) xid = struct.unpack('3i', ucred)[2] caller_name = pwd.getpwuid(xid)[0] - if method_name not in ('ReCreate', 'Help', 'Ticket', 'GetXIDs', 'GetSSHKeys'): + # Special case the genicw + if method_name == "AdminTicket": + if caller_name == 'PLC_SLICE_PREFIX'+"_genicw": + try: result = method(*args) + except Exception, err: raise xmlrpclib.Fault(104, 'Error in call: %s' %err) + else: + raise xmlrpclib.Fault(108, '%s: Permission denied.' % caller_name) + # Anyone can call these functions + elif method_name not in ('ReCreate', 'Help', 'Ticket', 'GetXIDs', 'GetSSHKeys'): + # Authenticate the caller if not in the above fncts. target_name = args[0] + # Gather target slice's object. target_rec = database.db.get(target_name) + # only work on slivers. Sannity check. if not (target_rec and target_rec['type'].startswith('sliver.')): raise xmlrpclib.Fault(102, \ 'Invalid argument: the first argument must be a sliver name.') - if not caller_name in (target_name, target_rec['delegations']): + # only manipulate slivers who delegate you authority + if caller_name in (target_name, target_rec['delegations']): + try: result = method(target_rec, *args[1:]) + except Exception, err: raise xmlrpclib.Fault(104, 'Error in call: %s' %err) + else: raise xmlrpclib.Fault(108, '%s: Permission denied.' % caller_name) - try: result = method(target_rec, *args[1:]) + else: # Execute anonymous call. + try: result = method(*args) except Exception, err: raise xmlrpclib.Fault(104, 'Error in call: %s' %err) - else: result = method(*args) if result == None: result = 1 return result diff --git a/api_calls.py b/api_calls.py index cd97e13..128a11f 100644 --- a/api_calls.py +++ b/api_calls.py @@ -121,6 +121,24 @@ def Ticket(ticket): except Exception, err: raise xmlrpclib.Fault(102, 'Ticket error: ' + str(err)) +@export_to_docbook(roles=['self'], + accepts=[Parameter(str, 'A ticket returned from GetSlivers()')], + returns=Parameter(int, '1 if successful')) +@export_to_api(1) +def AdminTicket(ticket): + """Admin interface to create slivers based on ticket returned by GetSlivers(). + """ + try: + data, = xmlrpclib.loads(ticket)[0] + name = data['slivers'][0]['name'] + if data != None: + deliver_ticket(data) + logger.log('Admin Ticket delivered for %s' % name) + Create(database.db.get(name)) + except Exception, err: + raise xmlrpclib.Fault(102, 'Ticket error: ' + str(err)) + + @export_to_docbook(roles=['self'], accepts=[], returns={'sliver_name' : Parameter(int, 'the associated xid')}) -- 2.43.0