def setupRESTAccessCodes(self):
user = self.session().value('localId')
fields = self.request().fields()
policyName, pathPrefix, policyType = Nodes.cmcDecodeNodeMode(fields)
if 'addAccessCode' in fields:
desc = fields['accessCodeAdd_desc']
if 'true' == fields.get('addAccessCode_generate'):
self.sendAction(pathPrefix + '/papi/action/generate_access_code',
('user', 'string', user),
('desc', 'string', desc))
else:
data = fields['addAccessCode_data']
self.sendAction(pathPrefix + '/papi/action/import_access_code',
('data', 'string', data),
('desc', 'string', desc))
elif 'editAccessCode' in fields:
desc = fields['accessCodeEdit_desc']
jti = fields['accessCodeEdit_jti']
self.setNodes(('%s/papi/config/code/%s/desc' % (pathPrefix, jti), 'string', desc))
elif 'removeAccessCode' in fields:
FormUtils.deleteNodesFromConfigForm(self.mgmt,
self.cmcPolicyRetarget('/papi/config/code'),
'accesscode_',
fields)
def jobsAction(self):
id, val = FormUtils.getPrefixedField('controlJob_', self.fields)
if id:
self.mgmt.set(('/sched/job/%s/enable' % id, 'bool',
('enabled' == val) and 'true' or 'false'))
elif 'removeJobs' in self.fields:
fieldPrefix = 'selectedJob_'
FormUtils.deleteNodesFromConfigForm(self.mgmt,
'/sched/job', 'selectedJob_', self.fields)
elif 'editJob_cancelJob' in self.fields:
job = '/sched/job/%s' % self.fields['editJob_jobId']
self.mgmt.delete(job)
elif 'editJob_executeJob' in self.fields:
job = self.fields['editJob_jobId']
self.sendAction('/sched/job/actions/execute',
('job_id', 'string', job))
elif 'editJob_modifyJob' in self.fields:
prefix = '/sched/job/%s/%%s' % self.fields['editJob_jobId']
if self.fields['editJob_datetime']:
datetime = self.fields['editJob_datetime']
else:
datetime = time.strftime('%Y/%m/%d %H:%M:%S', time.gmtime(0))
datetime = datetime.split(' ')
apply = [
(prefix % 'name', 'string', self.fields.get('editJob_name', "")),
(prefix % 'comment', 'string',
self.fields.get('editJob_comment', "")),
(prefix % 'date', 'date', datetime[0]),
(prefix % 'time', 'time_sec', datetime[1]),
(prefix % 'recurring', 'uint32',
self.fields.get('editJob_frequency', "")),
(prefix % 'enable', 'bool',
self.fields.get('editJob_enable', "false"))
]
self.mgmt.set(*apply)
def _populateDropDownLists( self ):
codes = SystemCode.codeGroup('NSTS')
official = ' '.join([c.code for c in codes if c.category=='OFFC'])
unofficial = ' '.join([c.code for c in codes if c.category=='UOFC'])
unpublished = ' '.join([c.code for c in codes if c.category=='NPUB'])
FormUtils.populateCodeCombo(self.uSearchNameStatus,'NSTS',True,
[(official,'(Official)'),
(unofficial,'(Unofficial)'),
(unpublished,'(Unpublished)')
])
FormUtils.populateCodeCombo(self.uSearchFeatClass,'FCLS',True)
self.uSearchFeatClass.currentIndexChanged.connect( self._populateFeatTypeDropdown )
def xmlizeFiles(self, directory, fileType):
# stat table contains triples of (time, file, stat)
statTable = []
fields = self.request().fields()
for f in findSysFiles(directory):
s = os.stat(os.path.join(basicPathName, directory, f))
md5sum = self.readMd5Sum(directory, f)
statTable.append((s[stat.ST_MTIME], f, s, md5sum))
# sort first by reverse time, then by name
statTable.sort(lambda a,b: cmp(b[0], a[0]) or FormUtils.alphanumericCompare(a[1], b[1]))
result = self.doc.createElement(directory)
for sysMtime, eachFile, fileStat, md5Sum in statTable:
sysBytes = fileStat[stat.ST_SIZE]
sysTimeStr = time.strftime('%Y/%m/%d %H:%M',
time.localtime(sysMtime))
fileEl = self.doc.createElement('file')
fileEl.setAttribute('name', eachFile)
fileEl.setAttribute(
'href', '/mgmt/download?f=%s&type=%s' % (eachFile, fileType))
# bytes are for column sorting
fileEl.setAttribute('bytes', '%d' % sysBytes)
fileEl.setAttribute('sizeStr', GraphUtils.scale(
sysBytes, GraphUtils.SCALER_HUNDREDS_OF_BYTES))
# timestamp is for column sorting
fileEl.setAttribute('timestamp', '%d' % sysMtime)
fileEl.setAttribute('timestring', sysTimeStr)
fileEl.setAttribute('md5sum', '%s' % md5Sum)
result.appendChild(fileEl)
self.doc.documentElement.appendChild(result)
self.writeXmlDoc()
def smtpAction(self):
if 'apply' in self.fields:
## eventRecipients and failureRecipients are word lists
eventRecipients = self.fields.get('eventRecipients', '')
Nodes.setWordList(self.mgmt,
self.cmcPolicyRetarget('/email/notify/events/recipients'),
eventRecipients)
failureRecipients = self.fields.get('failureRecipients', '')
Nodes.setWordList(self.mgmt,
self.cmcPolicyRetarget('/email/notify/failures/recipients'),
failureRecipients)
params = []
# remove the 'from_address' if the checkbox is unchecked
if 'enableFromAddress' not in self.fields:
params.append((self.cmcPolicyRetarget('/email/client/from_address'), 'string', ''))
FormUtils.setNodesFromConfigForm(self.mgmt, self.fields, *params)
def logsAction(self):
logServerBase = self.cmcPolicyRetarget('/logging/syslog/action/host')
filterBase = self.cmcPolicyRetarget('/logging/syslog/config/filter/process')
if 'addRemote' in self.fields:
addServer = self.fields.get('addLogServer_Host')
addSeverity = self.fields.get('addLogServer_Severity', 'notice')
self.mgmt.set(
('%s/%s' % (logServerBase, addServer), 'hostname', addServer),
('%s/%s/selector/0/priority' % (logServerBase, addServer),
'string', addSeverity))
elif 'removeLogservers' in self.fields:
FormUtils.deleteNodesFromConfigForm(self.mgmt, logServerBase,
'logserver_', self.fields)
elif 'addFilter' in self.fields:
process = self.fields.get('addFilter_Process')
level = self.fields.get('addFilter_Level')
self.mgmt.set(
('%s/%s' % (filterBase, process), 'string', process),
('%s/%s/level' % (filterBase, process), 'string', level))
elif 'removeFilters' in self.fields:
FormUtils.deleteNodesFromConfigForm(self.mgmt, filterBase,
'filter_', self.fields)
elif 'apply' in self.fields:
if self.fields.get('thresholdSize'):
thresholdSize = self.fields.get('thresholdSize')
thresholdSize = str(max(1, int(thresholdSize)) * 1024 * 1024)
tsNode = self.cmcPolicyRetarget('/logging/rotation/global/criteria/threshold_size')
self.setNodes((tsNode, 'uint64', thresholdSize))
if 'editPolicy' not in self.fields:
# SH:
oldKeep = int(self.mgmt.get('/logging/rotation/global/keep_number'))
self.setFormNodes()
newKeep = int(self.mgmt.get('/logging/rotation/global/keep_number'))
obsolete = []
if newKeep < oldKeep:
logfiles = logDownload.fillLogCategories('messages')
obsolete = ['/var/log/messages.%s' % x
for x in logfiles['ArchivedPlain']
if newKeep < int(x)]
obsolete += ['/var/log/messages.%s.gz' % x
for x in logfiles['ArchivedCompressed']
if newKeep < int(x)]
for x in obsolete:
os.unlink(x)
else:
# CMC
self.setFormNodes()
def monitoredPorts(self):
base = RVBDUtils.monitoredPortsPath(self.fields)
if 'addPort' in self.fields.keys():
number = self.fields.get('addPort_number')
if Nodes.present(self.mgmt, '%s/%s' % (base, number)):
self.setFormError("Port %s is already being monitored." % number)
return
else:
desc = self.fields.get('addPort_desc')
self.setNodes(('%s/%s/desc' % (base, number), 'string', desc))
elif 'removePorts' in self.fields.keys():
FormUtils.deleteNodesFromConfigForm(self.mgmt, base, 'ck_', self.fields)
elif 'editPort' in self.fields.keys():
number = self.fields.get('editPort_number', None)
desc = self.fields.get('editPort_desc', None)
self.setNodes(('%s/%s/desc' % (base, number), 'string', desc))
def removeDiagnosticFile(self):
fields = self.request().fields()
if 'removeFiles' in fields and 'dir' in fields:
directory = fields['dir']
if directory not in allowedDirs:
raise OSError, "'%s' is not a permitted system file category." % directory
path = basicPathName + directory
for systemFile in FormUtils.getPrefixedFieldNames('ck_', fields):
self.sendAction('/file/delete_diagnostic',
('local_dir', 'string', path),
('local_filename', 'string', systemFile))
def internal(**kw):
return '\n'.join([pprint.pformat(item)
for item in FormUtils.getDynamicListFields('testList', kw)])
def tcpDumps(self):
# dump capture files table on top
if 'removeFiles' in self.fields:
self.removeDiagnosticFile()
# running tcp dumps table below:
elif 'addTcpDump' in self.fields:
ifaces = FormUtils.getPrefixedFieldNames('iface_', self.fields)
# We need to handle RiOS interfaces and host interfaces (BOB boxes).
riosIfaces = []
hostIfaces = []
for iface in ifaces:
if iface == 'All':
pass
elif iface.startswith('host_'):
hostIfaces.append(iface[5:])
else:
riosIfaces.append(iface)
name = self.fields.get('addDump_captureName', '').strip()
bufferSize = self.fields.get('addDump_bufferSize')
snapLength = self.fields.get('addDump_snapLength')
rotateCount = self.fields.get('addDump_rotation', '0')
fileSize = self.fields.get('addDump_captureMax', '0')
duration = self.fields.get('addDump_captureDuration', '0')
flags = self.fields.get('addDump_flags', '')
vlan = self.fields.get('addDump_vlanEnable')
# for the ip and port fields, parse the comma-delimited list
# return an empty list for the default cases
def listOrEmpty(name):
val = self.fields.get(name, '').strip().lower()
if val in ('', 'all', '0.0.0.0', '0'):
return []
return map(str.strip, val.split(','))
sched = self.fields.get('addDump_schedule')
args = [('rotate_count', 'uint32', rotateCount),
('custom', 'string', flags)] + \
[('sip', 'ipv4addr', si) for si in listOrEmpty('addDump_srcIps')] + \
[('sport', 'uint16', sp) for sp in listOrEmpty('addDump_srcPorts')] + \
[('dip', 'ipv4addr', di) for di in listOrEmpty('addDump_dstIps')] + \
[('dport', 'uint16', dp) for dp in listOrEmpty('addDump_dstPorts')]
if '0' != duration:
args.append(('duration', 'duration_sec', duration))
if '0' != fileSize:
args.append(('file_size', 'uint32', fileSize))
if bufferSize:
args.append(('buffer_size', 'uint32', bufferSize))
if snapLength:
args.append(('snap_len', 'uint32', snapLength))
if name:
args.append(('cap_name', 'string', name))
if 'true' == vlan:
args.append(('dot1q', 'bool', 'true'))
if 'true' == sched:
schedDate = self.fields.get('addDump_scheduleDate', '')
schedTime = self.fields.get('addDump_scheduleTime', '')
args.append(('sched_date', 'date', schedDate))
args.append(('sched_time', 'time_sec', schedTime))
if riosIfaces:
riosArgs = list(args)
riosArgs += [('interface', 'string', iface) for iface in riosIfaces]
self.sendAction('/rbt/tcpdump/action/start', *riosArgs)
if hostIfaces:
hostArgs = list(args)
hostArgs += [('interface', 'string', iface) for iface in hostIfaces]
self.sendAction('/host/tcpdump/action/start', *hostArgs)
if not riosIfaces and not hostIfaces:
self.setFormError('An interface must be selected.')
elif 'removeTcpCaptures':
captures = FormUtils.getPrefixedFieldNames('select_', self.fields)
riosCaptures = Nodes.getMgmtLocalChildrenNames(self.mgmt, '/rbt/tcpdump/state/capture')
if RVBDUtils.isBOB():
hostCaptures = Nodes.getMgmtLocalChildrenNames(self.mgmt, '/host/tcpdump/state/capture')
for capture in captures:
name, runningOn = capture.split('/')
# it could have finished while the user was admiring the page
if runningOn == 'RiOS' and name in riosCaptures:
self.sendAction('/rbt/tcpdump/action/stop',
('cap_name', 'string', name))
elif runningOn == 'Hypervisor' and name in hostCaptures:
self.sendAction('/host/tcpdump/action/stop',
('cap_name', 'string', name))
def snmpAction(self):
base = self.cmcPolicyRetarget('/snmp/trapsink/sink')
userBase = self.cmcPolicyRetarget('/snmp/usm/users')
nameBase = self.cmcPolicyRetarget('/snmp/vacm/sec_names')
groupBase = self.cmcPolicyRetarget('/snmp/vacm/groups')
groupSpec = {'sec_name': 'string',
'sec_model': 'string'}
aclBase = self.cmcPolicyRetarget('/snmp/vacm/acls')
aclSpec = {'group_name': 'string',
'sec_level': 'string',
'read_view': 'string'}
id, val = FormUtils.getPrefixedField('controlReceiver_', self.fields)
if id:
self.mgmt.set(('%s/%s/enable' % (base, id), 'bool', ('enabled' == val) and 'true' or 'false'))
if 'addReceiver' in self.fields:
host = self.fields.get('addReceiver_host')
port = self.fields.get('addReceiver_port')
version = self.fields.get('addReceiver_version')
enable = self.fields.get('addReceiver_enable', 'false')
pre = '%s/%s' % (base, host)
nodes = [(pre + '/type', 'string', version),
(pre + '/enable', 'bool', enable)]
if port:
nodes += [(pre + '/port', 'uint16', port)]
if 'trap-v3' != version:
# version 1, version 2
community = self.fields.get('addReceiver_community', '')
nodes += [(pre + '/community', 'string', community)]
else:
# version 3
user = self.fields.get('addReceiver_user')
mode = self.fields.get('addReceiver_mode')
protocol = self.fields.get('addReceiver_protocol')
auth = self.fields.get('addReceiver_auth')
# key from the user, or derrived from the password
if 'password'== mode:
password = self.fields.get('addReceiver_password')
key = self.sendAction('/snmp/usm/actions/generate_auth_key',
('password', 'string', password),
('hash_function', 'string', protocol))
key = key.get('auth_key', '')
else:
key = self.fields.get('addReceiver_key')
nodes += [(pre + '/username', 'string', user),
(pre + '/hash_function', 'string', protocol),
(pre + '/auth_key', 'string', key),
(pre + '/sec_level', 'string', auth)]
# AuthPriv option of Security Level
if 'authpriv'== auth:
privacyMode = self.fields.get('addReceiver_privacyMode')
if 'authPrivacy'== privacyMode:
# Use the same key generated from authentication password or entered for authentication
privacyKey = key
elif 'password'== privacyMode:
# Generate key from privacy password entered by user
privacyPassword = self.fields.get('addReceiver_privacyPassword')
privacyKey = self.sendAction('/snmp/usm/actions/generate_auth_key',
('password', 'string', privacyPassword),
('hash_function', 'string', protocol))
privacyKey = privacyKey.get('auth_key', '')
elif 'key'== privacyMode:
# Use privacy key provided by the user
privacyKey = self.fields.get('addReceiver_privacyKey')
privacyProtocol = self.fields.get('addReceiver_privacyProtocol')
nodes += [(pre + '/privacy_protocol', 'string', privacyProtocol),
(pre + '/privacy_key', 'string', privacyKey)]
self.setNodes(*nodes)
elif 'removeReceivers' in self.fields:
FormUtils.deleteNodesFromConfigForm(self.mgmt, base, 'ck_', self.fields)
elif 'addSnmpUser' in self.fields:
name = self.fields.get('addSnmpUser_name')
protocol = self.fields.get('addSnmpUser_protocol')
if 'password'== self.fields.get('addSnmpUser_mode'):
password = self.fields.get('addSnmpUser_password')
key = self.sendAction('/snmp/usm/actions/generate_auth_key',
('password', 'string', password),
('hash_function', 'string', protocol))
key = key.get('auth_key', '')
else:
key = self.fields.get('addSnmpUser_key', '')
nodes = [('%s/%s' % (userBase, name), 'string', name),
('%s/%s/auth_key' % (userBase, name), 'string', key),
('%s/%s/hash_function' % (userBase, name), 'string', protocol)]
privacyOption = self.fields.get('addSnmpUser_privacyOption', 'false')
if 'true' == privacyOption:
# The user wishes to use the privacy feature, therefore checkbox is checked.
privacyProtocol = self.fields.get('addSnmpUser_privacyProtocol')
privacyMode = self.fields.get('addSnmpUser_privacyMode')
if 'authPrivacy' == privacyMode:
# Use the same key generated from authentication or entered for authentication
privacyKey = key
elif 'password' == privacyMode:
# Generate key from password entered for privacy
privacyPassword = self.fields.get('addSnmpUser_privacyPassword')
privacyKey = self.sendAction('/snmp/usm/actions/generate_auth_key',
('password', 'string', privacyPassword),
('hash_function', 'string', protocol))
privacyKey = privacyKey.get('auth_key', '')
elif 'key' == privacyMode:
# Use the privacy key provided by the user
privacyKey = self.fields.get('addSnmpUser_privacyKey')
elif 'false' == privacyOption:
# Privacy feature not to be used. Clear the privacy_key and privacy_protocol nodes
privacyKey = ''
privacyProtocol = ''
nodes += [('%s/%s/privacy_protocol' % (userBase, name), 'string', privacyProtocol),
('%s/%s/privacy_key' % (userBase, name), 'string', privacyKey)]
self.setNodes(*nodes)
elif 'removeSnmpUsers' in self.fields:
FormUtils.deleteNodesFromConfigForm(
self.mgmt, userBase, 'snmpUser_', self.fields)
elif 'addSecurityName' in self.fields:
name = self.fields.get('addSecurityName_name')
community = self.fields.get('addSecurityName_community')
ipBits = self.fields.get('addSecurityName_ip', ':')
if '/' not in ipBits:
return
ip, maskBits = ipBits.split('/')
self.setNodes(
('%s/%s' % (nameBase, name), 'string', name),
('%s/%s/community' % (nameBase, name), 'string', community),
('%s/%s/src/ip' % (nameBase, name), 'ipv6addr', ip),
('%s/%s/src/mask_len' % (nameBase, name), 'uint8', maskBits))
elif 'removeSecurityNames' in self.fields:
FormUtils.deleteNodesFromConfigForm(
self.mgmt, nameBase, 'secName_', self.fields)
elif 'addGroup' in self.fields:
name = self.fields.get('addGroup_name')
i = 0
while True:
model = self.fields.get('addSnmpGroup_secModel_%d' % i)
if 'editPolicy' in self.fields:
if model == 'usm':
user = self.fields.get('addSnmpGroupUsm_secName_%d' % i)
else:
user = self.fields.get('addSnmpGroup_secName_%d' % i)
else:
user = self.fields.get('addSnmpGroup_secName_%d' % i)
if not (user and model):
break
path = '%s/%s/grp_entry' % (groupBase, name)
Nodes.editNodeSequence(self.mgmt, path, groupSpec, 'add', -1,
{'sec_name': user,
'sec_model': model})
i += 1
elif 'removeGroups' in self.fields:
FormUtils.deleteNodesFromConfigForm(self.mgmt,
groupBase,
'group_',
self.fields)
elif 'addView' in self.fields:
name = self.fields.get('addView_name')
incField = self.fields.get('addView_includes')
# If the addView_includes/_excludes field is blank, then we want a blank list.
includes = incField and [inc.strip() for inc in incField.split('\n') if inc.strip() != ''] or []
excField = self.fields.get('addView_excludes')
excludes = excField and [exc.strip() for exc in excField.split('\n') if exc.strip() != ''] or []
viewBase = self.cmcPolicyRetarget('/snmp/vacm/views/%s' % name)
# Note: Because we don't call Nodes.deleteChildNodes here, adding a view with the
# same name as an existing view will append those OIDs, rather than overwriting
# the whole list of OIDs.
nodes = [(viewBase, 'string', name)] + \
[('%s/included/%s' % (viewBase, inc), 'string', inc) for inc in includes] + \
[('%s/excluded/%s' % (viewBase, exc), 'string', exc) for exc in excludes]
self.setNodes(*nodes)
elif 'editView' in self.fields:
name = self.fields.get('editView_name')
incField = self.fields.get('editView_includes')
# If the editView_includes/_excludes field is blank, then we want a blank list.
includes = incField and [inc.strip() for inc in incField.split('\n') if inc.strip() != ''] or []
excField = self.fields.get('editView_excludes')
excludes = excField and [exc.strip() for exc in excField.split('\n') if exc.strip() != ''] or []
viewBase = self.cmcPolicyRetarget('/snmp/vacm/views/%s' % name)
Nodes.deleteChildNodes(self.mgmt, viewBase + '/included')
Nodes.deleteChildNodes(self.mgmt, viewBase + '/excluded')
nodes = [('%s/included/%s' % (viewBase, inc), 'string', inc) for inc in includes] + \
[('%s/excluded/%s' % (viewBase, exc), 'string', exc) for exc in excludes]
self.setNodes(*nodes)
elif 'removeViews' in self.fields:
viewBase = self.cmcPolicyRetarget('/snmp/vacm/views')
FormUtils.deleteNodesFromConfigForm(self.mgmt,
viewBase,
'view_',
self.fields)
elif 'addAcl' in self.fields:
group = self.fields.get('addAcl_group')
auth = self.fields.get('addAcl_auth')
readView = self.fields.get('addAcl_readView')
# group/sec pairs must be unique, so if there's currently
# a group/sec like this one, we replace it
acls = Nodes.getMgmtSetEntries(self.mgmt, aclBase)
for k, v in acls.iteritems():
if (group == v.get('group_name')) and \
(auth == v.get('sec_level')):
Nodes.editNodeSequence(self.mgmt, aclBase, aclSpec, 'edit', int(k),
{'group_name': group,
'sec_level': auth,
'read_view': readView})
break;
else:
Nodes.editNodeSequence(self.mgmt, aclBase, aclSpec, 'add', -1,
{'group_name': group,
'sec_level': auth,
'read_view': readView})
elif 'removeAcls' in self.fields:
acls = FormUtils.getPrefixedFieldNames('acl_', self.fields)
Nodes.editNodeSequence(self.mgmt, aclBase, aclSpec, 'remove', map(int, acls))
def _populateFeatTypeDropdown( self, index ):
fclass=QtUtils.comboValue(self.uSearchFeatClass)
if fclass:
FormUtils.populateCodeCombo(self.uSearchFeatType,'FTYP',True, category=str(fclass))
else:
self.uSearchFeatType.clear()
