1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
|
#!/usr/bin/perl
use strict;
use warnings;
use DBI;
use Data::Dumper;
$| = 1;
my $SCIRE_CONFIG_FILE = '/home/pcody/gentoo/scire-newfu/etc/scireserver.conf'; #will be /etc/scire.conf when released.
my %conf;
my $conf_file = (defined($conf{config})) ? $conf{config} : $SCIRE_CONFIG_FILE;
read_config_file($conf_file);
Dumper(\%conf);
my $identified = 0; #Global variable to determine if already identified or not.
# Somehow this feels insecure.
#Connect to the Database.
my $connect_string = "DBI:$conf{db_type}:$conf{db_name};host=$conf{db_host}";
print STDERR "Connecting to $connect_string\n";
#my $dbh = DBI->connect($connect_string, $conf{db_user}, $conf{db_passwd}, { RaiseError => 1 } )
# or die "Could not connect to database: $DBI::errstr";
while(<>) {
chomp( my $line = $_);
if ($line =~ /^STARTRESPONSE (.+?) (.+)$/) { #If it's multi-line, parse accordingly.
print STDERR "Handling multiline response\n";
my ($size,$md5) = ($1,$2);
my $full_cmd = "";
while(<>) {
my $multi_line = $_;
last if $multi_line =~ /^ENDRESPONSE$/;
$full_cmd .= $multi_line;
}
#Verify size and md5. FIXME agaffney can you code this part?
#FIXME code what to do. no use yet. will be used for returning jobs.
} else { #Handle normal single-line commands.
print STDERR "Handling single-line response\n";
print STDERR "DEBUG: line is: $line\n";
if($line =~ /^QUIT$/) {
print "OK\n";
exit;
}
if ($line =~ /^REGISTER "(.+?)" "(.+)"$/) {
my ($mac,$ip) = ($1, $2);
register_client($mac, $ip);
next; #End switch here. You can go no further.
}
if($line =~ /^IDENTIFY (.+)$/) {
my $fingerprint = $1;
identify_client($fingerprint);
next; #End switch here. You can go no further.
}
unless($identified == 1) {
print "ERROR This client has not yet been authorized. Please identify!\n";
next;
}
if ($line =~ /^GET_JOBS(.*)$/) {
my @existing_jobs = split(/ /,$1) if defined($1);
get_jobs(@existing_jobs);
} elsif ($line =~ /^GET_JOB (.+)$/) {
my $job = $1;
get_job($job);
} elsif ($line =~ /^SET_JOB_STATUS (.+?) "(.+)"$/) {
my ($jobid,$status) = ($1, $2);
set_job_status($jobid,$status);
} else {
print "ERROR This command $line, is unknown. Please try again.\n";
}
}
}
sub read_config_file {
my $conf_file = shift;
open(FH, "< ${conf_file}") or die("Couldn't open the config file ${conf_file}: $!");
while (<FH>) {
chomp;
next if /^\s*(?:#|$)/;
if(/^\s*(.+?)\s*=\s*(.+?)\s*(?:#.*)?$/) {
unless(defined($conf{lc($1)})) { #Don't overwrite anything specified in cmdline
$conf{lc($1)} = $2;
}
}
}
close(FH) or die("Couldn't close the config file ${conf_file}: $!");
# print "Conf file $conf_file read.\n";
}
#New clients must be registered so they can be given a key to use (perhaps for job file transfers?) for authentication. This must be allowed before identifying.
sub register_client {
my ($mac,$ip) = @_;
#Validate your inputs!
$mac =~ /^[a-zA-Z0-9\:]+$/ or print "ERROR invalid mac $mac!\n";
$ip =~ /^[a-zA-Z0-9\.\:]+$/ or print "ERROR invalid ip $ip!\n";
my ($query, $status_id, $id);
eval {
$query = 'SELECT statusid FROM client_status WHERE statusname = "Pending"';
print STDERR "DEBUG: Query is $query\n";
$status_id = "4"; #db.conn.GetRow($query)
};
($@) and print "ERROR Could not get status id: $DBI::errstr";
eval {
$query = 'LOCK TABLES `gacl_axo_seq` WRITE';
print STDERR "DEBUG: Query is $query\n";
#execute it
$query = 'SELECT id FROM `gacl_axo_seq`';
print STDERR "DEBUG: Query is $query\n";
$id = "56"; #execute $query
$query = 'UPDATE `gacl_axo_seq` SET id=%s';
print STDERR "DEBUG: Query is $query\n";
#execute with $id
$query = 'UNLOCK TABLES';
print STDERR "DEBUG: Query is $query\n";
};
($@) and print "ERROR during fetching of id sequence: $DBI::errstr";
eval {
$query = 'INSERT INFO `gacl_axo` (id,section_value,value,order_value,name,hidden VALUES (%s,"clients",%s,1,%s,0)';
print STDERR "DEBUG: Query is $query\n";
#execute with $id, $hostname, $hostname
#NOTE: not sure if this query is still valid. may be using id instead of hostname for one of those two now.
$query = 'INSERT INTO clients (clientid,digest,cert,hostname,mac,ip,status) VALUES (%s,%s,%s,%s,%s,%s,%s)';
print STDERR "DEBUG: Query is $query\n";
#execute with $id, client_cert.digest("sha1"),crypto.dump_certificate(crypto.FILETYPE_PEM,client_cert),$hostname,$mac,$ip,$status_id))
};
($@) and print "ERROR Could not insert client with $query: $DBI::errstr";
print "OK\n";
}
#Identify the client by looking up the fingerprint in the database, and matching it up.
sub identify_client {
my $fingerprint = shift;
$fingerprint =~ s/"//g; #Clear the quotes.
$fingerprint =~ /^[A-Za-z0-9]+$/ or print "ERROR invalid fingerprint!\n";
#Validate your inputs!
my $query = 'SELECT client_status.statusname FROM clients JOIN client_status on (clients.status = client_status.statusid) WHERE clients.digest=%s';
print STDERR "Query is $query , key is $fingerprint\n";
$identified = 1;
print "OK\n";
}
sub get_jobs {
my (@existing_jobs) = (@_);
#Validate your inputs!
my $query;
}
sub get_job {
my $job = shift;
#Validate your inputs!
}
sub set_job_status {
my ($jobid,$status) = @_;
#Validate your inputs!
}
|
GitWeb