minor updates
authorJosh Karlin <jkarlin@bbn.com>
Wed, 5 May 2010 18:53:29 +0000 (18:53 +0000)
committerJosh Karlin <jkarlin@bbn.com>
Wed, 5 May 2010 18:53:29 +0000 (18:53 +0000)
sfa/client/sfi.py
sfa/managers/registry_manager_pl.py
sfa/methods/DeleteSliver.py
sfa/methods/Shutdown.py
sfa/methods/get_credential.py
sfa/methods/get_geni_aggregates.py
sfa/trust/auth.py
sfa/trust/credential.py
sfa/trust/rights.py

index 5b79247..655d4e0 100755 (executable)
@@ -689,6 +689,7 @@ class Sfi:
         record_filepath = args[0]
         rec_file = self.get_record_file(record_filepath)
         record = load_record_from_file(rec_file).as_dict()
+        print record
         return self.registry.register(auth_cred, record)
     
     # update named registry entry
index 63827fc..5ef992c 100644 (file)
@@ -18,6 +18,8 @@ def get_credential(api, xrn, type, is_self=False):
         hrn = urn_to_hrn(xrn)[0]
     else:
         hrn, type = urn_to_hrn(xrn)
+        
+    api.logger.info("Getting credential for " + xrn)
     # Is this a root or sub authority
     auth_hrn = api.auth.get_authority(hrn)
     if not auth_hrn or hrn == api.config.SFA_INTERFACE_HRN:
index ed09a95..9d02ed9 100644 (file)
@@ -21,7 +21,6 @@ class DeleteSliver(Method):
 
     def call(self, slice_xrn, creds):
         hrn, type = urn_to_hrn(slice_xrn)
-
         self.api.logger.info("interface: %s\ttarget-hrn: %s\tmethod-name: %s"%(self.api.interface, hrn, self.name))
 
         # Find the valid credentials
index 0cf52cb..cd36532 100644 (file)
@@ -19,7 +19,7 @@ class Shutdown(Method):
         ]
     returns = Parameter(bool, "Success or Failure")
 
-    def call(self, slice_xrn, creds, expiration_time):
+    def call(self, slice_xrn, creds):
         hrn, type = urn_to_hrn(slice_xrn)
 
         self.api.logger.info("interface: %s\ttarget-hrn: %s\tcaller-creds: %s\tmethod-name: %s"%(self.api.interface, hrn, creds, self.name))
index c624b1b..01b7dee 100644 (file)
@@ -10,6 +10,8 @@ from sfa.util.parameter import Parameter, Mixed
 from sfa.util.debug import log
 from sfa.trust.credential import Credential
 
+from sfa.util.sfalogging import logger
+
 class get_credential(Method):
     """
     Retrive a credential for an object
@@ -44,7 +46,6 @@ class get_credential(Method):
         self.api.logger.info("interface: %s\tcaller-hrn: %s\ttarget-hrn: %s\tmethod-name: %s"%(self.api.interface, origin_hrn, hrn, self.name))        
         self.api.auth.check(cred, 'getcredential')
         self.api.auth.verify_object_belongs_to_me(hrn)
-
         # send the call to the right manager
         manager_base = 'sfa.managers'
         mgr_type = self.api.config.SFA_REGISTRY_TYPE
index edbb73b..e556c6e 100644 (file)
@@ -31,7 +31,9 @@ class get_geni_aggregates(Method):
     def call(self, cred, xrn = None):
         hrn, type = urn_to_hrn(xrn)
         self.api.auth.check(cred, 'list')
-        geni_aggs = Aggregates(self.api, '/etc/sfa/geni_aggregates.xml')
+        
+        geni_aggs = Aggregates(self.api, '/etc/sfa/geni_aggregates.xml')        
+
         hrn_list = [] 
         if hrn:
             if isinstance(hrn, StringTypes):
@@ -43,8 +45,15 @@ class get_geni_aggregates(Method):
             interfaces = geni_aggs.interfaces
         else:
             interfaces = [interface for interface in geni_aggs.interfaces if interface['hrn'] in hrn_list]
+        
+        # Remove Aggregate's default sfa-aggregate 
+        interfaces = interfaces[:-1]
 
         # Remove empty interfaces
         interfaces = [interface for interface in interfaces if interface['hrn'] != '']
 
+        # Add urns
+        for interface in interfaces:
+            interface['urn'] = hrn_to_urn(interface['hrn'], 'authority')
+
         return interfaces
index 45f3d14..b1ba623 100644 (file)
@@ -238,6 +238,8 @@ class Auth:
         rl = RightList()
         type = record['type']
 
+        logger.info("caller_hrn = " + caller_hrn + " type = " + type)
+
         if type=="slice":
             researchers = record.get("researcher", [])
             pis = record.get("PI", [])
@@ -251,6 +253,7 @@ class Auth:
         elif type == "authority":
             pis = record.get("PI", [])
             operators = record.get("operator", [])
+            logger.info("pis = " + str(pis) + " ops = " + str(operators))
             if (caller_hrn == self.config.SFA_INTERFACE_HRN):
                 rl.add("authority")
                 rl.add("sa")
index 1ab34a8..aeac9de 100644 (file)
@@ -657,8 +657,6 @@ class Credential(object):
             refs.append("Sig_%s" % ref)
 
         for ref in refs:
-            logger.info('%s --verify --node-id "%s" %s %s 2>&1' \
-                            % (self.xmlsec_path, ref, cert_args, filename))
             verified = os.popen('%s --verify --node-id "%s" %s %s 2>&1' \
                             % (self.xmlsec_path, ref, cert_args, filename)).read()
             if not verified.strip().startswith("OK"):
index 3c12df4..5e826ea 100644 (file)
@@ -22,9 +22,9 @@ privilege_table = {"authority": ["register", "remove", "update", "resolve", "lis
                    "sa": ["getticket", "redeemslice", "redeemticket", "createslice", "createsliver", "deleteslice", "deletesliver", "updateslice",  
                           "getsliceresources", "getticket", "loanresources", "stopslice", "startslice", "renewsliver",
                           "deleteslice", "deletesliver", "resetslice", "listslices", "listnodes", "getpolicy", "sliverstatus"],
-                   "embed": ["getticket", "redeemslice", "redeemticket", "createslice", "createsliver",  "deleteslice", "deletesliver", "updateslice", "sliverstatus", "getsliceresources", "shutdown"],
+                   "embed": ["getticket", "redeemslice", "redeemticket", "createslice", "createsliver", "renewsliver", "deleteslice", "deletesliver", "updateslice", "sliverstatus", "getsliceresources", "shutdown"],
                    "bind": ["getticket", "loanresources", "redeemticket"],
-                   "control": ["updateslice", "createslice", "createsliver", "sliverstatus", "stopslice", "startslice", "deleteslice", "deletesliver", "resetslice", "getsliceresources", "getgids"],
+                   "control": ["updateslice", "createslice", "createsliver", "renewsliver", "sliverstatus", "stopslice", "startslice", "deleteslice", "deletesliver", "resetslice", "getsliceresources", "getgids"],
                    "info": ["listslices", "listnodes", "getpolicy","listresources"],
                    "ma": ["setbootstate", "getbootstate", "reboot", "getgids", "gettrustedcerts"],
                    "operator": ["gettrustedcerts", "getgids"]}