def cmdHandler(self, From, srcpid, ppid, rfd, pkPid, pkTid, command, pkData):
print "RPC_UNIX: TA cmd:", command
# find connection data
conn = None
for co in self.conns:
if pkTid == co.sock.fileno():
conn = co
break
if co == None:
print "RPC_UNIX: bork bork"
self.procHelper.sendParentCommand("INSU_OFF", self.procHelper.myPID, pkTid, 0)
return
# parse cmd
if command == "INTU_AUTH":
print "RPC_UNIX: connAuth"
user = RPCData.userInfo()
user.name = pwd.getpwuid(conn.euid)[0]
user.realm = "local"
user.uid = conn.euid
user.group = ""
a = user.toString()
self.procHelper.sendParentCommand("IRSU_AUTH", self.procHelper.myPID, conn.sock.fileno(), a)
elif command == "INTU_COK":
print "RPC_UNIX: connOK"
conn.state = 1
self.procHelper.addReadHnd(conn.sock.fileno())
elif command == "LNTU_KILL":
print "RPC_UNIX: connKill"
fd = conn.sock.fileno() + 0
self.procHelper.delReadHnd(fd)
conn.sock.close()
self.conns.remove(conn)
print "New RFDSET:", self.procHelper.extRFDs
elif command == "TNTU_ARTA":
print "RPC_UNIX: arta"
a = conn.rpc.toString()
self.procHelper.sendParentCommand("TRSU_DATA", self.procHelper.myPID, conn.sock.fileno(), a)
conn.rpc = None
if conn.state == -1:
self.procHelper.sendParentCommand("INSU_OFF", self.procHelper.myPID, conn.sock.fileno(), 0)
fd = conn.sock.fileno() + 0
self.procHelper.delReadHnd(fd)
conn.sock.close()
self.conns.remove(conn)
elif command == "TNTU_TANF":
if conn.rpc.RPCModel() == "new":
print "RPC_UNIX: TNTU_TANF"
a = conn.rpc.toString()
self.procHelper.SendRootCmd("TRSU_RTA", conn.sock.fileno(), a, 0)
else:
self.procHelper.sendParentCommand("INSU_OFF", self.procHelper.myPID, conn.sock.fileno(), a)
elif command == "TRTU_SNDR":
if conn.state == -1:
self.procHelper.sendParentCommand("INSU_OFF", self.procHelper.myPID, conn.sock.fileno(), 0)
fd = conn.sock.fileno() + 0
self.procHelper.delReadHnd(fd)
conn.sock.close()
self.conns.remove(conn)
return
print "RPC_UNIX: sndr"
a = RPCData.RPCStruct()
a.fromString(pkData)
x = conn.sock.fileno()
#print "SOCK INODE:", x, "->", self.procHelper.getfdName(x)
try:
conn.sock.send(a.xml)
except:
print "Socket Error:", x, "->", self.procHelper.getfdName(x)
#print "AFTER SEND, SOCK INODE:", x, "->", self.procHelper.getfdName(x)
self.procHelper.sendParentCommand("LNSU_MCL", self.procHelper.myPID, conn.sock.fileno(), 0)
return 1
def do_POST(self):
"""Serve a GET request."""
global COMARHELPER
server_version = "COMARRPC-HTTP/" + __version__
if self.headers.has_key("content-length"):
size = int(self.headers.getheader("content-length"))
else:
size = 0
if size == 0:
self.send_response(415)
self.send_header("Content-type", "text/html")
msg = "<html><head><title>415 - Bad Data format</title></head><body>HTTP/415 Bad Request<br>Unknown POST Data</br></body></html>"
self.send_header("Content-length", str(len(msg)))
self.end_headers()
self.wfile.write(msg)
self.close_connection = 1
return
xdata = self.rfile.read(size)
cli = self.client_address
cli_ip = cli[0]
cli_port = cli[1]
cli_uid = -1
cli_name = ""
cli_realm = ""
lverify = 0
if cli_ip == "127.0.0.1":
cli_str="%s:%s" % (cli_ip, cli_port)
i = 5
ln = None
#while i:
# try:
p = open("/proc/net/tcp")
ln = p.readlines()
p.close()
#print "L=", ln
p = cli_ip.split(".")
for i in [0, 1, 2, 3]:
p[i] = int(p[i])
ipstr = "%02X%02X%02X%02X:%04X" % (p[3], p[2], p[1], p[0], cli_port)
#print "Search TCP Conn Table:", ipstr
del ln[0]
if len(ln):
for l in ln:
l = l.strip()
#print "Process :", l
while l.find(" ") > -1:
l = l.replace(" ", " ")
n = l.split(" ")
#print n
if n[1] == ipstr:
#print n
cli_uid = int(n[7])
pw = pwd.getpwuid(cli_uid)
cli_name = pw[0]
cli_realm = "localhost"
else:
# We must check a header info, for authentication..
digType = self.headers.getheader("digest-type")
digValue = self.headers.getheader("digest-value")
digId = self.headers.getheader("digest-ttsid")
ruser = self.headers.getheader("user")
rrealm = self.headers.getheader("realm")
self.procHelper.sendParentCommand("INSU_CONN", self.procHelper.myPID, 0, None)
self.debugout(self.DEBUG_CONN, "Accepted 'B'onnection Auth Info:", digType, ":", digValue, ":", digId)
#cmd, tid, pkData, loop = 40):
dta = self.procHelper.SendRootCmd( "IRSU_RTD", 0, "%s %s" % (self.client_address[0], digId))
if dta:
tval = dta[3]
mypass = "******"
res = COMARHELPER.authhelper.digest(algo=digType, buf = xdata + tval, key = mypass)
if res == digValue:
self.debugout(self.DEBUG_AUTH, "Authenticaton passed:", ruser, rrealm, digValue, "=", res)
cli_name = ruser
cli_uid = 65500
cli_realm = rrealm
lverify = 1
if 0:
print "PROC HANDLER:", self.procHelper
print "HEADERS:\n", self.headers
print "POST Method:", self.path, "::", size
self.debugout(self.DEBUG_CONN, "User '%s' over '%s' connected from %s:%d" % (cli_name, cli_realm, cli_ip, cli_port), time.time())
if cli_name == "":
self.send_response(415)
self.send_header("Content-type", "text/html")
self.end_headers()
self.wfile.write("<html><head><title>401 - Authenticaton Required</title></head><body>HTTP/401 No Auth Info<br>You must use COMAR Authenticaton Extension Formats</br></body></html>")
self.close_connection = 1
return
# With hacked forkedHTTPServer implemantation, we are already forked. But this
# hack only isolate this code and main code.
# We can work more session implementation for thus.
# WE ARE A CONNECTOR.
# WE ARE ALREADY FORKED AND WAITING FOR SENDRESPONSE.
# WE PERFORM A CAPSULATION FOR ALL ACCEPTED DATA WITH RPCDATA
# AND SEND TO IT OUR PARENT. OUR LOGICAL PARENT IS NOT LISTENER.
# LP IS OBJSESS ROOT.
# THIS IS A BIG PROBLEM..
lsecure = 0
msgCryptMethod = self.headers.getheader("crypt-method")
if msgCryptMethod:
self.debugout(self.DEBUG_CRYPT, "Crypted xDATA:", msgCryptMethod)
pubkey = self.headers.getheader("crypt-publickey")
if pubkey == None:
pubkey = COMARHELPER.authhelper.digest(algo="HMAC-MD5", buf = mypass, key = "")
self.debugout(self.DEBUG_CRYPT, "Use key:", pubkey)
xdata = COMARHELPER.authhelper.encrypt( algo=digType, buf = xdata, key = pubkey)
lsecure = COMARHELPER.authhelper.cryptLevel( msgCryptMethod )
rpc = RPCData.RPCStruct(xmlData=xdata)
if rpc != None and rpc.TTSID == "":
self.send_response(415)
self.send_header("Content-type", "text/html")
self.end_headers()
self.wfile.write("<html><head><title>415 - Bad Data format</title></head><body>HTTP/415 Bad Request<br>You must use CXRPC Data</br></body></html>")
self.close_connection = 1
return
# We can write a small routine for source.
if cli_uid == 0:
cli_uid = -1
user = RPCData.userInfo()
user.name = cli_name
user.realm = cli_realm
user.uid = cli_uid
user.group = ""
self.debugout(self.DEBUG_CONN, "TTSID:", rpc.TTSID, "::: From:", self.address_string(), "CALL:", rpc.Type)
#msg = rpc.toString()
#print self.procHelper.WriteFDs
ci = RPCData.connectionInfo()
ci.protocol = PROTOCOL
ci.protoAddr = "%s:%s" % (cli_ip, cli_port)
ci.auth = 1 # Authenticated
ci.secure = lsecure # Not secure.
ci.verify = lverify # Not verified.
ci.isStream = 1 # Yes, keep-alive stream..
ci.online = 1 # We are online, currently
ci.host = cli_ip
ci.CID = "%s:%s" % (os.getpid(), time.time())
a = ci.toString()
# First, we are start a new connection.
# HTTP/HTTPS Ptorocols, uses one TA for per PID.
# But, many RPC-SERVER Modules can be use multiple TID's.
self.procHelper.sendParentCommand("IRSU_CONN", self.procHelper.myPID, 0, a)
# TA Manager Connector Subsytem can be send TNSU_AUTH" or "LNSU_KILL".
# if TA Manager don't accept our connection (No TA)
rv = 1
while rv:
x = 0
lp = 3
while not x:
x = self.procHelper.waitForParentCmd()
lp -= 1
if lp == 0:
break
if lp:
self.debugout(self.DEBUG_IPC, "Wait for Parent...")
pcmd = self.procHelper.getParentCommand()
self.debugout(self.DEBUG_IPC, "HTTPD: Parent send:", pcmd)
if pcmd == None:
if len(self.procHelper.ReadFDs) < 2:
self.debugout(self.DEBUG_IPC, "HTTPD: Parent dead..:", pcmd)
os._exit(0)
else:
cmd = pcmd[2]
if cmd == "TRTU_SNDR":
self.debugout(self.DEBUG_PCMD ,"HTTPD: Response Send")
sdata = RPCData.RPCStruct()
sdata.fromString(pcmd[3])
msg = sdata.xml
self.send_header("Content-type", "text/xml")
self.send_header("Content-length", str(len(msg)))
self.end_headers()
self.wfile.write(msg)
self.debugout(self.DEBUG_CONN, "HTTPD: Send Job Complete")
self.procHelper.sendParentCommand("LNSU_MCL", self.procHelper.myPID, int(pcmd[1]))
#os.kill(parentPid, signum)
elif cmd == "LNSU_ERR":
self.send_response(404)
msg = "<html><head><title>405 - Invalid Transaction</title></head><body>HTTP 1.0/405 Transaction Not found<br>Please check your call</br></body></html>"
self.send_header("Content-type", "text/html")
self.send_header("Content-length", str(len(msg)))
self.end_headers()
self.wfile.write(msg)
rv = 0
self.close_connection = 1
elif cmd == "LNSU_MCL":
# Our data accepted. We must inform client..
if rpc.Priority != "INTERACTIVE":
nrpc = RPCData.RPCStruct(TTSID="TEMPORARY")
nrpc.Priority = "NORMAL"
nrpc.makeRPCData("RESPONSE")
nrpc["TTSID"] = rpc.TTSID
nrpc["status"] = "QUEUE"
msg = nrpc.xml
if ci.secure:
self.debugout(self.DEBUG_CRYPT, "Crypting msg..")
msg = COMARHELPER.authhelper.crypt(algo = msgCryptMethod, buf = msg, key = mypass)
self.send_header("Content-type", "text/xml")
self.send_header("Content-length", str(len(msg)))
self.end_headers()
self.wfile.write(msg)
self.debugout(self.DEBUG_CONN, "HTTPD: Job Queued..")
self.close_connection = 1
rv = 0
elif cmd == "TNTU_ARTA":
# A previously created remote call
#print "Response For CKTA remote:", rpc.RPCModel()
if rpc.RPCModel() == "remote":
a = rpc.toString()
self.procHelper.sendParentCommand("TRSU_DATA", self.procHelper.myPID, 0, a)
else:
self.do_HEAD()
self.close_connection = 1
rv = 0
elif cmd == "TNTU_LOC":
# A local Session.
#print "Response For CKTA local"
if rpc.RPCModel() == "local":
a = rpc.toString()
self.procHelper.sendParentCommand("TRSU_DATA", self.procHelper.myPID, 0, a)
else:
self.do_GET()
self.close_connection = 1
rv = 0
elif cmd == "TNTU_TANF":
self.debugout(self.DEBUG_PCMD, "Response For CKTA new:", rpc.RPCModel)
if rpc.RPCModel() == "new":
a = rpc.toString()
self.debugout(self.DEBUG_IPC, "Sending TRSU_RTA to", self.procHelper.myPID,"->", self.procHelper.gloPPid)
#self.procHelper.dumpInfo()
#cmd, tid, pkData, loop = 40
self.procHelper.SendRootCmd("TRSU_RTA", 0, a, 0)
#self.procHelper.SendRootCmd("TRSU_RTA", self.procHelper.myPID, 0, a)
else:
self.procHelper.sendParentCommand("INSU_OFF", self.procHelper.myPID, 0, a)
self.send_response(404)
self.send_header("Content-type", "text/html")
self.end_headers()
self.wfile.write("<html><head><title>404 - Transaction Not found</title></head><body>HTTP 1.0/404 Transaction Not found<br>Please check your call</br></body></html>")
self.close_connection = 1
rv = 0
elif cmd == "TNTU_DATA":
#print "HTTPD: Send Accepted Data."
a = rpc.toString()
self.procHelper.sendParentCommand("TRSU_DATA", self.procHelper.myPID, 0, a)
elif cmd == "LNTU_KILL":
# KILL SELF :(
self.debugout(self.DEBUG_CONN, "HTTPD: Close Connection:", pcmd[2])
rv = 0
elif cmd == "INTU_COK":
# Connection Accepted..
t = rpc.TTSID
self.procHelper.sendParentCommand("TRSU_CKTA", self.procHelper.myPID, 0, t)
elif cmd == "TNTU_CONN": # Read Connection Info..
#print "Parent want Connection info.."
ci = RPCData.connectionInfo()
ci.protocol = PROTOCOL
ci.protoAddr = "%s:%s" % (cli_ip, cli_port)
ci.auth = 1 # Authenticated
ci.secure = 0 # Not secure.
ci.verify = 0 # Not verified.
ci.isStream = 1 # Yes, keep-alive stream..
ci.online = 1 # We are online, currently
a = ci.toString()
self.procHelper.sendParentCommand("TRSU_CONN", self.procHelper.myPID, 0, a)
elif cmd == "INTU_AUTH":
#print "Send Auth Data:"
a = user.toString()
# we use always TID = 0. We don't use multiple calls.
self.procHelper.sendParentCommand("IRSU_AUTH", self.procHelper.myPID, 0, a)
self.procHelper.sendParentCommand("INSU_OFF", self.procHelper.myPID, 0, None)
self.debugout(self.DEBUG_CONN, "HTTPD: END OF REQ - ", self.address_string(), rpc.TTSID, time.time())
self.close_connection = 1