1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
|
'''Cobalt proxy provides client access to cobalt components'''
__revision__ = '$Revision$'
import logging, socket, time, xmlrpclib, ConfigParser, httplib
class CobaltComponentError(Exception):
'''This error signals component connection errors'''
pass
def verify_cb(conn, cert, errnum, depth, ok):
print 'Got certificate: %s' % cert.get_subject()
return ok
class poSSLFile:
def __init__(self, sock, master):
self.sock = sock
self.master = master
#self.read = self.sock.read
self.master.count += 1
def close(self):
self.master.count -= 1
if not self.master.count:
self.sock.close()
def readline(self):
print "in readline"
data = ''
char = self.read(1)
while char != '\n':
data += char
char = self.read(1)
print data
return data
def read(self, size=None):
print "in read", size
if size:
data = ''
while not data:
try:
data = self.sock.read(size)
except OpenSSL.SSL.ZeroReturnError:
break
return data
else:
print "no size"
data = self.sock.read()
return data
class pSockMaster:
def __init__(self, connection):
self._connection = connection
self.sendall = self._connection.send
self.count = 1
def makefile(self, mode, bufsize=None):
return poSSLFile(self._connection, self)
def close(self):
self.count -= 1
if not self.count:
self._connection.close()
class PHTTPSConnection(httplib.HTTPSConnection):
"This class allows communication via SSL."
def __init__(self, host, port=None, key_file=None, cert_file=None,
strict=None):
httplib.HTTPSConnection.__init__(self, host, port, strict)
self.ctx = OpenSSL.SSL.Context(OpenSSL.SSL.SSLv23_METHOD)
self.ctx.set_verify(OpenSSL.SSL.VERIFY_PEER, verify_cb)
self.ctx.use_privatekey_file ('/tmp/keys/client.pkey')
self.ctx.use_certificate_file('/tmp/keys/client.cert')
self.ctx.load_verify_locations('/tmp/keys/CA.cert')
def connect(self):
"Connect to a host on a given (SSL) port."
self._sock = OpenSSL.SSL.Connection(self.ctx,
socket.socket(socket.AF_INET, socket.SOCK_STREAM))
self._sock.connect((self.host, self.port))
self.sock = pSockMaster(self._sock)
def send(self, msg):
print "sending message %s" % (msg)
self._sock.sendall(msg)
class PHTTPS(httplib.HTTPS):
_connection_class = PHTTPSConnection
class OSSafeTransport(xmlrpclib.Transport):
"""Handles an HTTPS transaction to an XML-RPC server."""
def make_connection(self, host):
# create a HTTPS connection object from a host descriptor
# host may be a string, or a (host, x509-dict) tuple
host, extra_headers, x509 = self.get_host_info(host)
return PHTTPS(host, None, '/tmp/keys/client.pkey', '/tmp/keys/client.cert')
def _parse_response(self, file, sock):
# read response from input file/socket, and parse it
p, u = self.getparser()
while 1:
if sock:
response = sock.recv(1024)
else:
try:
response = file.read(1024)
except OpenSSL.SSL.ZeroReturnError:
break
if not response:
break
if self.verbose:
print "body:", repr(response)
p.feed(response)
file.close()
p.close()
return u.close()
class SafeProxy:
'''Wrapper for proxy'''
_cfile = ConfigParser.ConfigParser()
_cfpath = '/etc/bcfg2.conf'
_cfile.read([_cfpath])
try:
_components = _cfile._sections['components']
except KeyError:
print "cobalt.conf doesn't contain a valid components section"
raise SystemExit, 1
try:
_authinfo = ('root', _cfile.get('communication', 'password'))
except KeyError:
print "cobalt.conf doesn't contain a valid communication setup"
raise SystemExit, 1
_retries = 4
def __init__(self, component, url=None):
self.component = component
self.log = logging.getLogger(component)
if url != None:
address = url
else:
address = self.__get_location(component)
try:
self.proxy = xmlrpclib.ServerProxy(address, transport=xmlrpclib.SafeTransport())
except IOError, io_error:
self.log.error("Invalid server URL %s: %s" % (address, io_error))
raise CobaltComponentError
except:
self.log.error("Failed to initialize xml-rpc", exc_info=1)
def run_method(self, methodName, methodArgs):
''' Perform an XMLRPC invocation against the server'''
method = getattr(self.proxy, methodName)
for irs in range(self._retries):
try:
ret = apply(method, self._authinfo + methodArgs)
if irs > 0:
self.log.warning("Required %d attempts to contact %s for operation %s" %
(irs, self.component, methodName))
self.log.debug("%s completed successfully" % (methodName))
return ret
except xmlrpclib.ProtocolError:
self.log.error("Server failure: Protocol Error")
raise xmlrpclib.Fault(20, "Server Failure")
except xmlrpclib.Fault:
self.log.debug("Operation %s completed with fault" % (methodName))
raise
except socket.sslerror:
self.log.debug("Attempt %d of %d failed due to SSL negotiation failure" %
((irs + 1), self._retries))
except socket.error, serr:
self.log.debug("Attempting %s (%d of %d) failed because %s" % (methodName, (irs+1),
self._retries, serr))
except:
self.log.error("Unknown failure", exc_info=1)
break
time.sleep(0.5)
self.log.error("%s failed:\nCould not connect to %s" % (methodName, self.component))
raise xmlrpclib.Fault(20, "Server Failure")
def __get_location(self, name):
'''Perform component location lookups if needed'''
if self._components.has_key(name):
return self._components[name]
slp = SafeProxy('service-location', url=self._cfile.get('components', 'service-location'))
try:
sdata = slp.run_method('LookupService',
([{'tag':'location', 'name':name, 'url':'*'}],))
except xmlrpclib.Fault:
raise CobaltComponentError, "No Such Component"
if sdata:
curl = sdata[0]['url']
self._components[name] = curl
return curl
def dummy(self):
'''dummy method for pylint'''
return True
class ComponentProxy(SafeProxy):
'''Component Proxy instantiates a SafeProxy to a component and registers local functions
based on its definition'''
name = 'dummy'
methods = []
def __init__(self, url=None):
SafeProxy.__init__(self, self.name, url)
for method in self.methods:
setattr(self, method, eval('lambda *x:self.run_method(method, x)',
{'self':self, 'method':method}))
class service_location(ComponentProxy):
'''service-location component-specific proxy'''
name = 'service-location'
methods = ['AssertService', 'LookupService', 'DeassertService']
class allocation_manager(ComponentProxy):
'''allocation manager specific component proxy'''
name = 'allocation-manager'
methods = ['GetProject']
class file_stager(ComponentProxy):
'''File staging component'''
name = 'file-stager'
methods = ['StageInit', 'FinalizeStage']
class process_manager(ComponentProxy):
'''process manager specific component proxy'''
name = 'process-manager'
methods = ['CreateProcessGroup', 'GetProcessGroup', 'KillProcessGroup', 'WaitProcessGroup']
class queue_manager(ComponentProxy):
'''queue manager proxy'''
name = 'queue-manager'
methods = ['AddJob', 'GetJobs', 'DelJobs', 'RunJobs', 'SetJobs', 'SetJobID']
class scheduler(ComponentProxy):
'''scheduler proxy'''
name = 'scheduler'
methods = ['AddReservation', 'DelReservation', 'GetPartition', 'AddPartition', 'DelPartition', 'Set']
class bcfg2(ComponentProxy):
'''bcfg2 client code'''
name = 'bcfg2'
methods = ['AssertProfile', 'GetConfig', 'GetProbes', 'RecvProbeData', 'RecvStats']
class CommDict(dict):
'''CommDict is a dictionary that automatically instantiates a component proxy upon access'''
commnames = {'pm':process_manager, 'fs':file_stager, 'am':allocation_manager,
'sched':scheduler, 'qm':queue_manager}
def __getitem__(self, name):
if not self.has_key(name):
self.__setitem__(name, self.commnames[name]())
return dict.__getitem__(self, name)
|
