uLab
/
remotelaboratory
mirror of https://mirror.git.trinitydesktop.org/gitea/uLab/remotelaboratory
0
0
Fork 0
Code Issues Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'b4426c06a4'
${ noResults }
remotelaboratory/servers/admin_user_mgmt_server_lin/src/admin_user_mgmt.cpp

665 lines
21 KiB
Raw Blame History

/*
* Remote Laboratory User Management Server
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License along
* with this program; if not, write to the Free Software Foundation, Inc.,
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
*
* (c) 2013 Timothy Pearson
* Raptor Engineering
* http://www.raptorengineeringinc.com
*/
#include <stdio.h> /* perror() */
#include <stdlib.h> /* atoi() */
#include <sys/types.h>
#include <sys/socket.h>
#include <unistd.h> /* read() */
#include <errno.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <netdb.h>
#include <fcntl.h>
#include <termios.h>
#include <unistd.h>
#include <sys/signal.h>
#include <sys/types.h>
#include <tqtimer.h>
#include <tqfile.h>
#include <tdelocale.h>
#include "admin_user_mgmt.h"
#define ABORT_SOCKET(s) s->close(); \
s->disconnect(); \
delete s; \
s = NULL;
#define NETWORK_COMM_TIMEOUT_MS 5000
/* exception handling */
struct exit_exception {
int c;
exit_exception(int c):c(c) { }
};
enum connectionStates {
StateIdle = 0
};
/*
The SysCtlSocket class provides a socket that is connected with a client.
For every client that connects to the server, the server creates a new
instance of this class.
*/
SysCtlSocket::SysCtlSocket(int sock, TQObject *parent, const char *name) :
TDEKerberosServerSocket(parent, name), m_criticalSection(0), m_loopTimer(NULL), m_config(static_cast<UserMgmtServer*>(parent)->m_config), m_terminals_database(NULL), m_workspaces_database(NULL), m_commandLoopState(StateIdle)
{
// Initialize timers
m_kerberosInitTimer = new TQTimer();
connect(m_kerberosInitTimer, SIGNAL(timeout()), this, SLOT(finishKerberosHandshake()));
m_servClientTimeout = new TQTimer();
setServiceName("ulab");
line = 0;
connect(this, SIGNAL(connectionClosed()), SLOT(connectionClosedHandler()));
connect(this, SIGNAL(connectionClosed()), parent, SLOT(remoteConnectionClosed()));
setSocket(sock);
if (connectToDatabase() != 0) {
exit(1);
}
m_minGID = m_config->readNumEntry("MinimumGID", 500);
m_maxGID = m_config->readNumEntry("MaximumGID", 65533);
}
SysCtlSocket::~SysCtlSocket() {
if (m_servClientTimeout) {
m_servClientTimeout->stop();
delete m_servClientTimeout;
m_servClientTimeout = NULL;
}
if (m_kerberosInitTimer) {
m_kerberosInitTimer->stop();
delete m_kerberosInitTimer;
m_kerberosInitTimer = NULL;
}
if (m_loopTimer) {
m_loopTimer->stop();
delete m_loopTimer;
m_loopTimer = NULL;
}
}
void SysCtlSocket::close() {
if (state() == TQSocket::Connected) {
TDEKerberosServerSocket::close();
connectionClosedHandler();
TQTimer::singleShot(0, parent(), SLOT(remoteConnectionClosed()));
}
}
void SysCtlSocket::connectionClosedHandler() {
printf("[DEBUG] Connection from %s closed\n\r", m_remoteHost.ascii());
if (m_criticalSection > 0) {
throw exit_exception(-1);
}
}
void SysCtlSocket::initiateKerberosHandshake() {
setUsingKerberos(true);
m_kerberosInitTimer->start(100, TRUE);
}
void SysCtlSocket::finishKerberosHandshake() {
if (kerberosStatus() == TDEKerberosServerSocket::KerberosInitializing) {
m_kerberosInitTimer->start(100, TRUE);
return;
}
if (kerberosStatus() == TDEKerberosServerSocket::KerberosInUse) {
m_config->setGroup("Security");
TQString masterUser = m_config->readEntry("masteruser");
TQString masterRealm = m_config->readEntry("masterrealm");
if (masterRealm == "") {
masterRealm = "(NULL)";
}
if ((m_authenticatedUserName != masterUser) || (m_authenticatedRealmName != masterRealm)) {
printf("[DEBUG] Connection from %s closed due to authentication failure (attempted connection as user %s@%s)\n\r", m_remoteHost.ascii(), m_authenticatedUserName.ascii(), m_authenticatedRealmName.ascii());
close();
return;
}
setDataTimeout(NETWORK_COMM_TIMEOUT_MS);
TQDataStream ds(this);
ds.setPrintableData(true);
ds << TQString("OK");
writeEndOfFrame();
enterCommandLoop();
return;
}
else {
printf("[DEBUG] Connection from %s closed due to Kerberos failure\n\r", m_remoteHost.ascii()); fflush(stdout);
close();
return;
}
}
void SysCtlSocket::commandLoop() {
bool transferred_data;
m_criticalSection++;
try {
transferred_data = false;
if (state() == TQSocket::Connected) {
if (m_commandLoopState == StateIdle) {
// Certain commands can come in at any time during some operations
if (canReadLine()) {
processPendingData();
}
if (canReadFrame()) {
TQDataStream ds(this);
ds.setPrintableData(true);
TQString command;
ds >> command;
if (command == "LIST") {
TQString subCommand;
ds >> subCommand;
if (subCommand == "TERMINALS") {
clearFrameTail();
ds << TQString("OK");
TQStringList list;
TQSqlCursor databaseServersCursor("servers", TRUE, m_terminals_database);
databaseServersCursor.select();
while (databaseServersCursor.next()) {
list.append(databaseServersCursor.value("name").toString());
}
ds << list;
writeEndOfFrame();
}
else if (subCommand == "WORKSPACES") {
clearFrameTail();
ds << TQString("OK");
StationList list;
TQSqlCursor databaseStationsCursor("stations", TRUE, m_workspaces_database);
TQSqlCursor databaseServicesCursor("services", TRUE, m_workspaces_database);
TQSqlCursor databaseServiceTypesCursor("servicetypes", TRUE, m_workspaces_database);
databaseStationsCursor.select();
while (databaseStationsCursor.next()) {
StationType st;
st.id = databaseStationsCursor.value("pk").toInt();
st.name = databaseStationsCursor.value("name").toString();
st.description = databaseStationsCursor.value("description").toString();
databaseServicesCursor.select(TQString("station=%1").arg(databaseStationsCursor.value("pk").toInt()));
while (databaseServicesCursor.next()) {
databaseServiceTypesCursor.select(TQString("serviceid=%1").arg(databaseServicesCursor.value("servicetype").toInt()));
ServiceType svt;
if (databaseServiceTypesCursor.next()) {
svt.type = databaseServiceTypesCursor.value("serviceid").toInt();
svt.name = databaseServiceTypesCursor.value("name").toString();
svt.description = databaseServiceTypesCursor.value("description").toString();
svt.clientLibrary = databaseServiceTypesCursor.value("client_library").toString();
svt.version = databaseServiceTypesCursor.value("version").toInt();
char tempchar;
tempchar = databaseServiceTypesCursor.value("single_instance").toInt();
svt.singleInstance = (tempchar != 0);
}
if (svt.name == "") {
svt.name = i18n("<unknown>");
}
if (svt.description == "") {
svt.description = i18n("<unknown>");
}
st.services.append(svt);
}
list.append(st);
}
ds << list;
writeEndOfFrame();
}
else {
clearFrameTail();
ds << TQString("ERRINVCMD");
writeEndOfFrame();
}
}
else if (command == "LISTGROUPACCESS") {
TQString subCommand;
ds >> subCommand;
if (subCommand == "TERMINALS") {
clearFrameTail();
ds << TQString("OK");
TerminalServiceAuthGroupList list;
// First search the database for groups...
TQSqlCursor databasePermissionsCursor("allowed_servers", TRUE, m_terminals_database);
databasePermissionsCursor.select();
while (databasePermissionsCursor.next()) {
TerminalServiceAuthGroupType agt;
TerminalServiceAuthGroupList::iterator it = list.findByName(databasePermissionsCursor.value("groupname").toString());
if (it != list.end()) {
agt = *it;
list.remove(it);
}
else {
agt.protocolVersion = 1;
agt.groupName = databasePermissionsCursor.value("groupname").toString();
agt.maximumActiveSessionCount = 0;
}
agt.allowedServerNames.append(databasePermissionsCursor.value("server").toString());
list.append(agt);
}
// ...then search the session limit database for groups...
TQSqlCursor databaseLimitsCursor("groups", TRUE, m_terminals_database);
databaseLimitsCursor.select();
while (databaseLimitsCursor.next()) {
TerminalServiceAuthGroupType agt;
TerminalServiceAuthGroupList::iterator it = list.findByName(databaseLimitsCursor.value("groupname").toString());
if (it != list.end()) {
agt = *it;
list.remove(it);
}
else {
agt.protocolVersion = 1;
agt.groupName = databaseLimitsCursor.value("groupname").toString();
}
agt.maximumActiveSessionCount = databaseLimitsCursor.value("sesslimit").toUInt();
list.append(agt);
}
// ...then search LDAP for groups that were not already in the database
struct group* group;
setgrent();
while ((group = getgrent())) {
if ((group->gr_gid >= m_minGID) && (group->gr_gid <= m_maxGID)) {
TerminalServiceAuthGroupType agt;
TerminalServiceAuthGroupList::iterator it = list.findByName(TQString(group->gr_name));
if (it == list.end()) {
agt.protocolVersion = 1;
agt.groupName = TQString(group->gr_name);
agt.maximumActiveSessionCount = 0;
list.append(agt);
}
}
}
endgrent();
ds << list;
writeEndOfFrame();
}
else if (subCommand == "WORKSPACES") {
clearFrameTail();
ds << TQString("OK");
WorkspaceServiceAuthGroupList list;
// First search the database for groups...
TQSqlCursor databasePermissionsCursor("permissions", TRUE, m_workspaces_database);
databasePermissionsCursor.select();
while (databasePermissionsCursor.next()) {
WorkspaceServiceAuthGroupType agt;
WorkspaceServiceAuthGroupList::iterator it = list.findByName(databasePermissionsCursor.value("groupname").toString());
if (it != list.end()) {
agt = *it;
list.remove(it);
}
else {
agt.protocolVersion = 1;
agt.groupName = databasePermissionsCursor.value("groupname").toString();
}
agt.allowedStationIDs.append(databasePermissionsCursor.value("station").toUInt());
list.append(agt);
}
// ...then search LDAP for groups that were not already in the database
struct group* group;
setgrent();
while ((group = getgrent())) {
if ((group->gr_gid >= m_minGID) && (group->gr_gid <= m_maxGID)) {
WorkspaceServiceAuthGroupType agt;
WorkspaceServiceAuthGroupList::iterator it = list.findByName(TQString(group->gr_name));
if (it == list.end()) {
agt.protocolVersion = 1;
agt.groupName = TQString(group->gr_name);
list.append(agt);
}
}
}
endgrent();
ds << list;
writeEndOfFrame();
}
else {
clearFrameTail();
ds << TQString("ERRINVCMD");
writeEndOfFrame();
}
}
else if (command == "SETGROUPACCESS") {
TQString subCommand;
ds >> subCommand;
if (subCommand == "TERMINALS") {
TerminalServiceAuthGroupList list;
ds >> list;
clearFrameTail();
bool success = true;
TQSqlCursor databasePermissionsCursor("allowed_servers", TRUE, m_terminals_database);
TQSqlCursor databaseLimitsCursor("groups", TRUE, m_terminals_database);
TerminalServiceAuthGroupList::iterator it;
for (it = list.begin(); it != list.end(); ++it) {
TerminalServiceAuthGroupType agt = *it;
// Delete all existing entries for this group in perparation for update
databasePermissionsCursor.select(TQString("groupname='%1'").arg(agt.groupName));
while (databasePermissionsCursor.next()) {
databasePermissionsCursor.primeDelete();
databasePermissionsCursor.del(false);
}
databaseLimitsCursor.select(TQString("groupname='%1'").arg(agt.groupName));
while (databaseLimitsCursor.next()) {
databaseLimitsCursor.primeDelete();
databaseLimitsCursor.del(false);
}
// Insert all entries for this group from the information structure
TQStringList::iterator it2;
for (it2 = agt.allowedServerNames.begin(); it2 != agt.allowedServerNames.end(); ++it2) {
TQSqlRecord *buffer = databasePermissionsCursor.primeInsert();
buffer->setValue("groupname", agt.groupName);
buffer->setValue("server", *it2);
databasePermissionsCursor.insert();
buffer = databaseLimitsCursor.primeInsert();
buffer->setValue("groupname", agt.groupName);
buffer->setValue("sesslimit", agt.maximumActiveSessionCount);
databaseLimitsCursor.insert();
}
}
if (success) {
ds << TQString("OK");
}
else {
ds << TQString("ERRFAILED");
}
writeEndOfFrame();
}
else if (subCommand == "WORKSPACES") {
WorkspaceServiceAuthGroupList list;
ds >> list;
clearFrameTail();
bool success = true;
TQSqlCursor databasePermissionsCursor("permissions", TRUE, m_workspaces_database);
WorkspaceServiceAuthGroupList::iterator it;
for (it = list.begin(); it != list.end(); ++it) {
WorkspaceServiceAuthGroupType agt = *it;
// Delete all existing entries for this group in perparation for update
databasePermissionsCursor.select(TQString("groupname='%1'").arg(agt.groupName));
while (databasePermissionsCursor.next()) {
databasePermissionsCursor.primeDelete();
databasePermissionsCursor.del(false);
}
// Insert all entries for this group from the information structure
TQInt32List::iterator it2;
for (it2 = agt.allowedStationIDs.begin(); it2 != agt.allowedStationIDs.end(); ++it2) {
TQSqlRecord *buffer = databasePermissionsCursor.primeInsert();
buffer->setValue("groupname", agt.groupName);
buffer->setValue("station", *it2);
databasePermissionsCursor.insert();
}
}
if (success) {
ds << TQString("OK");
}
else {
ds << TQString("ERRFAILED");
}
writeEndOfFrame();
}
else {
clearFrameTail();
ds << TQString("ERRINVCMD");
writeEndOfFrame();
}
}
else if (command == "DELETEGROUPACCESS") {
TQString subCommand;
ds >> subCommand;
if (subCommand == "TERMINALS") {
TerminalServiceAuthGroupList list;
ds >> list;
clearFrameTail();
bool success = true;
TQSqlCursor databasePermissionsCursor("allowed_servers", TRUE, m_terminals_database);
TerminalServiceAuthGroupList::iterator it;
for (it = list.begin(); it != list.end(); ++it) {
TerminalServiceAuthGroupType agt = *it;
// Delete all existing entries for this group
databasePermissionsCursor.select(TQString("groupname='%1'").arg(agt.groupName));
while (databasePermissionsCursor.next()) {
databasePermissionsCursor.primeDelete();
databasePermissionsCursor.del(false);
}
}
if (success) {
ds << TQString("OK");
}
else {
ds << TQString("ERRFAILED");
}
writeEndOfFrame();
}
else if (subCommand == "WORKSPACES") {
WorkspaceServiceAuthGroupList list;
ds >> list;
clearFrameTail();
bool success = true;
TQSqlCursor databasePermissionsCursor("permissions", TRUE, m_workspaces_database);
WorkspaceServiceAuthGroupList::iterator it;
for (it = list.begin(); it != list.end(); ++it) {
WorkspaceServiceAuthGroupType agt = *it;
// Delete all existing entries for this group
databasePermissionsCursor.select(TQString("groupname='%1'").arg(agt.groupName));
while (databasePermissionsCursor.next()) {
databasePermissionsCursor.primeDelete();
databasePermissionsCursor.del(false);
}
}
if (success) {
ds << TQString("OK");
}
else {
ds << TQString("ERRFAILED");
}
writeEndOfFrame();
}
else {
clearFrameTail();
ds << TQString("ERRINVCMD");
writeEndOfFrame();
}
}
else {
clearFrameTail();
}
transferred_data = true;
}
}
}
m_criticalSection--;
if (transferred_data) {
if (m_loopTimer) m_loopTimer->start(0, TRUE);
}
else {
if (m_loopTimer) m_loopTimer->start(100, TRUE);
}
return;
}
catch (...) {
m_criticalSection--;
return;
}
}
int SysCtlSocket::enterCommandLoop() {
m_commandLoopState = StateIdle;
if (!m_loopTimer) {
m_loopTimer = new TQTimer();
connect(m_loopTimer, SIGNAL(timeout()), this, SLOT(commandLoop()));
}
if (m_loopTimer) m_loopTimer->start(0, TRUE);
return 0;
}
int SysCtlSocket::connectToDatabase() {
if ((m_terminals_database) && (m_workspaces_database)) {
return -2;
}
m_terminals_database = TQSqlDatabase::database("terminals");
m_workspaces_database = TQSqlDatabase::database("workspaces");
if ((!m_terminals_database) || (!m_workspaces_database)) {
printf("[ERROR] Databases were not constructed by the application\n\r"); fflush(stdout);
return -1;
}
return 0;
}
/*
The UserMgmtServer class handles new connections to the server. For every
client that connects, it creates a new SysCtlSocket -- that instance is now
responsible for the communication with that client.
*/
UserMgmtServer::UserMgmtServer(TQObject* parent, int port, KSimpleConfig* config) :
TQServerSocket( port, 1, parent ), m_config(config), m_numberOfConnections(0), m_terminals_database(NULL), m_workspaces_database(NULL), m_sqlPingTimer(NULL) {
if (connectToDatabase() != 0) {
exit(1);
}
if ( !ok() ) {
printf("[ERROR] Failed to bind to port %d\n\r", port);
exit(1);
}
printf("[INFO] Server started on port %d\n\r", port); fflush(stdout);
}
UserMgmtServer::~UserMgmtServer() {
if (m_sqlPingTimer) {
m_sqlPingTimer->stop();
delete m_sqlPingTimer;
m_sqlPingTimer = NULL;
}
if (m_terminals_database) {
TQSqlDatabase::removeDatabase(m_terminals_database);
m_terminals_database = NULL;
}
if (m_workspaces_database) {
TQSqlDatabase::removeDatabase(m_workspaces_database);
m_workspaces_database = NULL;
}
}
int UserMgmtServer::connectToDatabase() {
m_config->setGroup("Terminals Database");
m_terminals_database = TQSqlDatabase::addDatabase(m_config->readEntry("driver"), "terminals");
m_terminals_database->setDatabaseName(m_config->readEntry("database"));
m_terminals_database->setUserName(m_config->readEntry("username"));
m_terminals_database->setPassword(m_config->readEntry("password"));
m_terminals_database->setHostName(m_config->readEntry("server"));
if(!m_terminals_database->open()) {
printf("[ERROR] Failed to connect to control database on server '%s' [%s]\n\r", m_terminals_database->hostName().ascii(), m_terminals_database->lastError().text().ascii()); fflush(stdout);
TQSqlDatabase::removeDatabase(m_terminals_database);
m_terminals_database = NULL;
return -1;
}
m_config->setGroup("Workspaces Database");
m_workspaces_database = TQSqlDatabase::addDatabase(m_config->readEntry("driver"), "workspaces");
m_workspaces_database->setDatabaseName(m_config->readEntry("database"));
m_workspaces_database->setUserName(m_config->readEntry("username"));
m_workspaces_database->setPassword(m_config->readEntry("password"));
m_workspaces_database->setHostName(m_config->readEntry("server"));
if(!m_workspaces_database->open()) {
printf("[ERROR] Failed to connect to control database on server '%s' [%s]\n\r", m_workspaces_database->hostName().ascii(), m_workspaces_database->lastError().text().ascii()); fflush(stdout);
TQSqlDatabase::removeDatabase(m_workspaces_database);
m_workspaces_database = NULL;
return -1;
}
// FIXME
// We currently have no way to handle something as simple as the database server going offline!
// Start database ping process
m_sqlPingTimer = new TQTimer();
connect(m_sqlPingTimer, SIGNAL(timeout()), this, SLOT(pingSQLServer()));
m_sqlPingTimer->start(60*1000);
return 0;
}
void UserMgmtServer::pingSQLServer() {
TQSqlQuery terminals_query(TQString::null, m_terminals_database);
terminals_query.exec("SELECT * FROM sessions");
TQSqlQuery workspaces_query(TQString::null, m_workspaces_database);
workspaces_query.exec("SELECT * FROM activity");
}
void UserMgmtServer::newConnection(int socket) {
SysCtlSocket *s = new SysCtlSocket(socket, this);
s->m_remoteHost = s->peerAddress().toString();
printf("[DEBUG] New connection from %s\n\r", s->m_remoteHost.ascii());
if (m_numberOfConnections > 0) {
printf("[DEBUG] Connection from %s closed due to multiple access attempt\n\r", s->m_remoteHost.ascii());
ABORT_SOCKET(s)
return;
}
connect(s, SIGNAL(connectionClosed()), s, SLOT(deleteLater()));
s->initiateKerberosHandshake();
emit newConnect(s);
}
void UserMgmtServer::remoteConnectionClosed() {
m_numberOfConnections--;
}
Reference in new issue View Git Blame Copy Permalink