X-Git-Url: http://git.onelab.eu/?p=sfa.git;a=blobdiff_plain;f=sfa%2Fmethods%2FRenew.py;h=48f1a44a60b9159f3ccf11eeba11f762e37337e2;hp=ca412bd5d96086649748396fd6c32da26e4c9c71;hb=HEAD;hpb=9fe1cc1bbb72921e1fe94e9a7997cd387073d863 diff --git a/sfa/methods/Renew.py b/sfa/methods/Renew.py index ca412bd5..48f1a44a 100644 --- a/sfa/methods/Renew.py +++ b/sfa/methods/Renew.py @@ -3,44 +3,70 @@ import datetime from sfa.util.faults import InsufficientRights from sfa.util.xrn import urn_to_hrn from sfa.util.method import Method -from sfa.util.sfatime import utcparse +from sfa.util.sfatime import utcparse, add_datetime +from sfa.util.sfalogging import logger from sfa.trust.credential import Credential from sfa.storage.parameter import Parameter + class Renew(Method): """ - Renews the resources in the specified slice or slivers by + Renews the resources in the specified slice or slivers by extending the lifetime. - - @param surn ([string]) List of URNs of to renew + + @param urns ([string]) List of URNs of to renew @param credentials ([string]) of credentials @param expiration_time (string) requested time of expiration @param options (dict) options """ - interfaces = ['aggregate', 'slicemgr'] + interfaces = ['aggregate'] accepts = [ Parameter(type([str]), "Slice URN"), Parameter(type([str]), "List of credentials"), Parameter(str, "Expiration time in RFC 3339 format"), Parameter(dict, "Options"), - ] + ] returns = Parameter(bool, "Success or Failure") def call(self, urns, creds, expiration_time, options): - self.api.logger.info("interface: %s\ttarget-hrn: %s\tcaller-creds: %s\tmethod-name: %s"%(self.api.interface, urns, creds, self.name)) - # Find the valid credentials - valid_creds = self.api.auth.checkCredentials(creds, 'renewsliver', urns) + valid_creds = self.api.auth.checkCredentialsSpeaksFor( + creds, 'renewsliver', urns, + check_sliver_callback=self.api.driver.check_sliver_credentials, + options=options) + the_credential = Credential(cred=valid_creds[0]) + actual_caller_hrn = the_credential.actual_caller_hrn() + logger.info("interface: %s\tcaller-hrn: %s\ttarget-urns: %s\texpiration:%s\tmethod-name: %s" % + (self.api.interface, actual_caller_hrn, urns, expiration_time, self.name)) - # Validate that the time does not go beyond the credential's expiration time - requested_time = utcparse(expiration_time) + # extend as long as possible : take the min of requested and + # now+SFA_MAX_SLICE_RENEW + if options.get('geni_extend_alap'): + # ignore requested time and set to max + expiration_time = add_datetime(datetime.datetime.utcnow( + ), days=int(self.api.config.SFA_MAX_SLICE_RENEW)) + + # Validate that the time does not go beyond the credential's expiration + # time + requested_expire = utcparse(expiration_time) + logger.info("requested_expire = %s" % requested_expire) + credential_expire = the_credential.get_expiration() + logger.info("credential_expire = %s" % credential_expire) max_renew_days = int(self.api.config.SFA_MAX_SLICE_RENEW) - if requested_time > Credential(cred=valid_creds[0]).get_expiration(): - raise InsufficientRights('Renewsliver: Credential expires before requested expiration time') - if requested_time > datetime.datetime.utcnow() + datetime.timedelta(days=max_renew_days): - raise Exception('Cannot renew > %s days from now' % max_renew_days) - return self.api.manager.Renew(self.api, urns, creds, expiration_time, options) - + max_expire = datetime.datetime.utcnow() + datetime.timedelta(days=max_renew_days) + if requested_expire > credential_expire: + # used to throw an InsufficientRights exception here, this was not + # right + logger.warning("Requested expiration %s, after credential expiration (%s) -> trimming to the latter/sooner" % + (requested_expire, credential_expire)) + requested_expire = credential_expire + if requested_expire > max_expire: + # likewise + logger.warning("Requested expiration %s, after maximal expiration %s days (%s) -> trimming to the latter/sooner" % + (requested_expire, self.api.config.SFA_MAX_SLICE_RENEW, max_expire)) + requested_expire = max_expire + + return self.api.manager.Renew(self.api, urns, creds, requested_expire, options)