1 | cdef extern from "moira/moira.h": |
---|
2 | int mr_krb5_auth(char * prog) |
---|
3 | int mr_auth(char * prog) |
---|
4 | int mr_connect(char * server) |
---|
5 | int mr_disconnect() |
---|
6 | int mr_host(char * host_buf, int buf_size) |
---|
7 | int mr_motd(char ** motd) |
---|
8 | int mr_noop() |
---|
9 | int mr_query(char * handle, int argc, char ** argv, |
---|
10 | int (*callback)(int, char **, void *), object callarg) |
---|
11 | int mr_access(char *handle, int argc, char ** argv) |
---|
12 | int mr_proxy(char *principal, char *orig_authtype) |
---|
13 | |
---|
14 | enum: |
---|
15 | MR_SUCCESS |
---|
16 | MR_CONT |
---|
17 | |
---|
18 | cdef extern from "com_err.h": |
---|
19 | ctypedef long errcode_t |
---|
20 | char * error_message(errcode_t) |
---|
21 | |
---|
22 | cdef extern from "stdlib.h": |
---|
23 | ctypedef unsigned long size_t |
---|
24 | void * malloc(size_t size) |
---|
25 | void free(void * ptr) |
---|
26 | |
---|
27 | class MoiraException(Exception): |
---|
28 | def code(self): |
---|
29 | return self.args[0] |
---|
30 | code = property(code) |
---|
31 | |
---|
32 | __connected = False |
---|
33 | |
---|
34 | def _error(code): |
---|
35 | raise MoiraException, (code, error_message(code)) |
---|
36 | |
---|
37 | def connect(server=''): |
---|
38 | """ |
---|
39 | Establish a connection to a Moira server. |
---|
40 | |
---|
41 | A server may be specified, but it is optional. If specified, it |
---|
42 | should be of the form hostname:portname. Portname will be looked |
---|
43 | up in /etc/services if specified, but it is optional as well. |
---|
44 | |
---|
45 | If no server is specified, the server will be found from the |
---|
46 | MOIRASERVER environment variable, Hesiod, or a compiled in default |
---|
47 | (in that order). |
---|
48 | |
---|
49 | This function raises a MoiraException if the connection is |
---|
50 | not successful. |
---|
51 | """ |
---|
52 | global __connected |
---|
53 | |
---|
54 | if __connected: |
---|
55 | disconnect() |
---|
56 | |
---|
57 | status = mr_connect(server) |
---|
58 | if status != MR_SUCCESS: |
---|
59 | _error(status) |
---|
60 | else: |
---|
61 | __connected = True |
---|
62 | |
---|
63 | def disconnect(): |
---|
64 | """ |
---|
65 | Disconnect from the active Moira server |
---|
66 | """ |
---|
67 | global __connected |
---|
68 | if __connected: |
---|
69 | mr_disconnect() |
---|
70 | __connected = False |
---|
71 | |
---|
72 | def auth(program, krb4=False): |
---|
73 | """ |
---|
74 | Authenticate to the Moira server with Kerberos tickets. If krb4 is |
---|
75 | True, then Kerberos version 4 will be used. Otherwise, Kerberos |
---|
76 | version 5 is used. |
---|
77 | |
---|
78 | The program argument identifies the connecting program to the |
---|
79 | Moira server. This is used for setting the modwith field when |
---|
80 | modifications are made. |
---|
81 | |
---|
82 | Note that the use of Kerberos version 4 is deprecated and highly |
---|
83 | discouraged |
---|
84 | """ |
---|
85 | if krb4: |
---|
86 | status = mr_auth(program) |
---|
87 | else: |
---|
88 | status = mr_krb5_auth(program) |
---|
89 | if status != MR_SUCCESS: |
---|
90 | _error(status) |
---|
91 | |
---|
92 | def host(): |
---|
93 | """ |
---|
94 | Return the name of the host the client is connected to. |
---|
95 | """ |
---|
96 | cdef char buffer[512] |
---|
97 | status = mr_host(buffer, 512) |
---|
98 | if status != MR_SUCCESS: |
---|
99 | _error(status) |
---|
100 | return buffer |
---|
101 | |
---|
102 | def motd(): |
---|
103 | """ |
---|
104 | Retrieve the current message of the day from the server. |
---|
105 | """ |
---|
106 | cdef char * motd |
---|
107 | status = mr_motd(&motd) |
---|
108 | if status != MR_SUCCESS: |
---|
109 | _error(status) |
---|
110 | if motd != NULL: |
---|
111 | return motd |
---|
112 | |
---|
113 | def noop(): |
---|
114 | """ |
---|
115 | Does "no operation" to the server, just making sure it's still |
---|
116 | there |
---|
117 | """ |
---|
118 | status = mr_noop() |
---|
119 | if status: |
---|
120 | _error(status) |
---|
121 | |
---|
122 | def _access(handle, *args): |
---|
123 | """ |
---|
124 | Verifies that the authenticated user has the access to perform the |
---|
125 | given query. |
---|
126 | """ |
---|
127 | cdef int argc, i |
---|
128 | argc = len(args) |
---|
129 | cdef char ** argv |
---|
130 | argv = <char **>malloc(argc * sizeof(char *)) |
---|
131 | |
---|
132 | if argv != NULL: |
---|
133 | for i in xrange(argc): |
---|
134 | argv[i] = args[i] |
---|
135 | |
---|
136 | status = mr_access(handle, argc, argv) |
---|
137 | free(argv) |
---|
138 | |
---|
139 | if status: |
---|
140 | _error(status) |
---|
141 | |
---|
142 | def _query(handle, callback, *args): |
---|
143 | cdef int argc, i |
---|
144 | argc = len(args) |
---|
145 | cdef char ** argv |
---|
146 | argv = <char **>malloc(argc * sizeof(char *)) |
---|
147 | |
---|
148 | if argv != NULL: |
---|
149 | for i in xrange(argc): |
---|
150 | argv[i] = args[i] |
---|
151 | |
---|
152 | status = mr_query(handle, argc, argv, _call_python_callback, callback) |
---|
153 | free(argv) |
---|
154 | |
---|
155 | if status: |
---|
156 | _error(status) |
---|
157 | |
---|
158 | def proxy(principal, orig_authtype): |
---|
159 | """ |
---|
160 | Authenticate as a proxy for another principal. |
---|
161 | |
---|
162 | For those with sufficient privilege, proxy allows an authenticated |
---|
163 | user to impersonate another. |
---|
164 | |
---|
165 | The principal argument contains the Kerberos principal for which |
---|
166 | this user is proxying, and orig_authtype is the mechanism by which |
---|
167 | the proxied user originally authenticated to the proxier. |
---|
168 | """ |
---|
169 | status = mr_proxy(principal, orig_authtype) |
---|
170 | if status != MR_SUCCESS: |
---|
171 | _error(status) |
---|
172 | |
---|
173 | cdef int _call_python_callback(int argc, char ** argv, void * hint): |
---|
174 | cdef object callback |
---|
175 | callback = <object>hint |
---|
176 | result = [] |
---|
177 | cdef int i |
---|
178 | for i in xrange(argc): |
---|
179 | result.append(argv[i]) |
---|
180 | callback(tuple(result)) |
---|
181 | return MR_CONT |
---|