![[tokkee]](http://tokkee.org/images/avatar.png){kind=avatar}
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: eef9675)
raw | patch | inline | side by side (parent: eef9675)
| author | cajus <cajus@594d385d-05f5-0310-b6e9-bd551577e9d8> | |
| Wed, 12 Dec 2007 14:13:27 +0000 (14:13 +0000) | ||
| committer | cajus <cajus@594d385d-05f5-0310-b6e9-bd551577e9d8> | |
| Wed, 12 Dec 2007 14:13:27 +0000 (14:13 +0000) |
git-svn-id: https://oss.gonicus.de/repositories/gosa/trunk@8107 594d385d-05f5-0310-b6e9-bd551577e9d8
50 files changed:
diff --git a/gosa-si/arp-handler-d b/gosa-si/arp-handler-d
--- /dev/null
+++ b/gosa-si/arp-handler-d
@@ -0,0 +1,563 @@
+#!/usr/bin/perl
+#===============================================================================
+#
+# FILE: gosa-support-daemon.pl
+#
+# USAGE: ./.gosa-support-daemon.pl
+#
+# DESCRIPTION:
+#
+# OPTIONS: ---
+# REQUIREMENTS: ---
+# BUGS: ---
+# NOTES: ---
+# AUTHOR: Andreas Rettenberger, <rettenberger@gonicus.de>
+# COMPANY: Gonicus GmbH, Arnsberg
+# VERSION: 1.0
+# CREATED: 21.08.2007 15:13:51 CEST
+# REVISION: ---
+#===============================================================================
+
+use strict;
+use warnings;
+use Getopt::Long;
+use Config::IniFiles;
+use POSIX;
+use Fcntl;
+use Net::LDAP;
+use Net::LDAP::LDIF;
+use Net::LDAP::Entry;
+use Switch;
+
+
+my ($verbose, $cfg_file, $log_file, $pid_file, $foreground);
+my ($timeout, $mailto, $mailfrom, $user, $group);
+my ($procid, $pid, $loglevel);
+my ($fifo_path, $max_process_timeout, $max_process );
+my %daemon_children;
+my ($ldap, $bind_phrase, $password, $ldap_base) ;
+
+$procid = -1 ;
+$foreground = 0 ;
+$verbose = 0 ;
+$max_process = 2 ;
+$max_process_timeout = 1 ;
+$ldap_base = "dc=gonicus,dc=de" ;
+#$ldap_path = "/var/run/gosa-support-daemon.socket";
+#$log_path = "/var/log/gosa-support-daemon.log";
+#$pid_path = "/var/run/gosa-support-daemon/gosa-support-daemon.pid";
+
+#---------------------------------------------------------------------------
+# parse commandline options
+#---------------------------------------------------------------------------
+Getopt::Long::Configure( "bundling" );
+GetOptions( "v|verbose+" => \$verbose,
+ "c|config=s" => \$cfg_file,
+ "h|help" => \&usage,
+ "l|logfile=s" => \$log_file,
+ "p|pid=s" => \$pid_file,
+ "f|foreground" => \$foreground);
+
+#---------------------------------------------------------------------------
+# read and set config parameters
+#---------------------------------------------------------------------------
+my %cfg_defaults =
+("Allgemein" =>
+ {"timeout" => [ \$timeout, 1000 ],
+ "mailto" => [ \$mailto, 'root@localhost' ],
+ "mailfrom" => [ \$mailfrom, 'sps-daemon@localhost' ],
+ "user" => [ \$user, "nobody" ],
+ "group" => [ \$group, "nogroup" ],
+ "fifo_path" => [ \$fifo_path, "/home/rettenbe/gonicus/gosa-support/tmp/fifo" ],
+ "log_file" => [ \$log_file, "/home/rettenbe/gonicus/gosa-support/tmp/gosa-support.log" ],
+ "pid_file" => [ \$pid_file, "/home/rettenbe/gonicus/gosa-support/tmp/gosa-support.pid" ],
+ "loglevel" => [ \$loglevel, 1]
+ },
+"LDAP" =>
+ {"bind" => [ \$bind_phrase, "cn=ldapadmin,dc=gonicus,dc=de" ],
+ "password" => [ \$password, "tester" ],
+ }
+ );
+&read_configfile;
+
+
+#=== FUNCTION ================================================================
+# NAME: check_cmdline_param
+# PURPOSE: checks all commandline parameters to validity
+# PARAMETERS: none
+# RETURNS: none
+# DESCRIPTION: ????
+# THROWS: no exceptions
+# COMMENTS: none
+# SEE ALSO: n/a
+#===============================================================================
+sub check_cmdline_param () {
+ my $err_config;
+ my $err_log;
+ my $err_pid;
+ my $err_counter = 0;
+ if( not defined( $cfg_file)) {
+ $err_config = "please specify a config file";
+ $err_counter += 1;
+ }
+ if( not defined( $log_file)) {
+ $err_log = "please specify a log file";
+ $err_counter += 1;
+ }
+ if( not defined( $pid_file)) {
+ $err_pid = "please specify a pid file";
+ $err_counter += 1;
+ }
+ if( $err_counter > 0 ) {
+ &usage( "", 1 );
+ if( defined( $err_config)) { print STDERR "$err_config\n"}
+ if( defined( $err_log)) { print STDERR "$err_log\n" }
+ if( defined( $err_pid)) { print STDERR "$err_pid\n"}
+ print STDERR "\n";
+ exit( -1 );
+ }
+}
+
+#=== FUNCTION ================================================================
+# NAME: check_pid
+# PURPOSE:
+# PARAMETERS: none
+# RETURNS: none
+# DESCRIPTION: ????
+# THROWS: no exceptions
+# COMMENTS: none
+# SEE ALSO: n/a
+#===============================================================================
+sub check_pid {
+ if( open( LOCK_FILE, "<$pid_file") ) {
+ $procid = <LOCK_FILE>;
+ if( defined $procid ) {
+ chomp( $procid );
+ if( -f "/proc/$procid/stat" ) {
+ my($stat) = `cat /proc/$procid/stat` =~ m/$procid \((.+)\).*/;
+ print "\t".$stat."\n";
+ if( "sps-daemon.pl" eq $stat ) {
+ close( LOCK_FILE );
+ exit -1;
+ }
+ }
+ }
+ close( LOCK_FILE );
+ unlink( $pid_file );
+ }
+
+ # Try to open PID file
+ if (!sysopen(LOCK_FILE, $pid_file, O_WRONLY|O_CREAT|O_EXCL, 0644)) {
+ my($msg) = "Couldn't obtain lockfile '$pid_file' ";
+ if (open(LOCK_FILE, "<", $pid_file) && ($pid = <LOCK_FILE>)) {
+ chomp($pid);
+ $msg .= "(PID $pid)\n";
+ } else {
+ $msg .= "(unable to read PID)\n";
+ }
+ if ( ! $foreground ) {
+ daemon_log( $msg."\n");
+ } else {
+ print( STDERR " $msg " );
+ }
+ exit( -1 );
+ }
+}
+
+#=== FUNCTION ================================================================
+# NAME: read_configfile
+# PURPOSE: read the configuration file and provide the programm with
+# parameters
+# PARAMETERS: none
+# RETURNS: none
+# DESCRIPTION: ????
+# THROWS: no exceptions
+# COMMENTS: none
+# SEE ALSO: n/a
+#===============================================================================
+sub read_configfile {
+ my $log_time = localtime(time);
+ my $cfg;
+ if( defined( $cfg_file) && ( length($cfg_file) > 0 )) {
+ if( -r $cfg_file ) {
+ $cfg = Config::IniFiles->new( -file => $cfg_file );
+ } else {
+ usage( "Couldn't read config file: $cfg_file \n" );
+ }
+ } else {
+ $cfg = Config::IniFiles->new() ;
+ }
+
+ foreach my $section (keys %cfg_defaults) { # "Parse" config into values
+ foreach my $param (keys %{$cfg_defaults{ $section }}) {
+ my $pinfo = $cfg_defaults{ $section }{ $param };
+ ${@$pinfo[ 0 ]} = $cfg->val( $section, $param, @$pinfo[ 1 ] );
+ }
+ }
+
+ if(-e $log_file ) { unlink $log_file }
+ daemon_log("$log_time: config file read\n");
+}
+
+#=== FUNCTION ================================================================
+# NAME: daemon_log
+# PURPOSE: log messages to specified logfile
+# PARAMETERS: $msg, $level
+# RETURNS: ????
+# DESCRIPTION: Takes a message ($msg) and append it to the logfile. The
+# standard log-level ($level) is 1. Messages whith higher level
+# than the verbosity-level (defined by commandline) are printed
+# out to commandline. Messages with log-level lower than 2 are
+# not logged to logfile!
+# THROWS: no exceptions
+# COMMENTS: none
+# SEE ALSO: n/a
+#===============================================================================
+sub daemon_log {
+ my( $msg, $level ) = @_;
+ if(not defined $msg) { return }
+ if(not defined $level) { $level = 1 }
+ open(LOG_HANDLE, ">>$log_file");
+ if(not defined open( LOG_HANDLE, ">>$log_file" ) ) { return }
+ chomp($msg);
+ #if( $verbose >= $level ) { print "$msg"."\n" }
+ if( $level <= 1 ) { print LOG_HANDLE $msg."\n" }
+ if( $foreground ) { print $msg."\n" }
+ close( LOG_HANDLE );
+ }
+
+#=== FUNCTION ================================================================
+# NAME: signal handler
+# PURPOSE: catches signals from the programm and do diffrent things
+# than default
+# PARAMETERS: none
+# RETURNS: none
+# DESCRIPTION: sighandler
+# THROWS: no exceptions
+# COMMENTS: none
+# SEE ALSO: n/a
+#===============================================================================
+sub sigINT {
+ my $log_time = localtime(time);
+ print "INT\n";
+ if( -p $fifo_path ) {
+ close FIFO ;
+ unlink($fifo_path) ;
+ daemon_log( "$log_time: FIFO closed after signal INT!\n") ;
+ }
+ if(defined($ldap)) {
+ $ldap->unbind;
+ }
+ $SIG{INT} = "DEFAULT" ;
+ kill INT => $$ ;
+}
+$SIG{INT} = \&sigINT ;
+
+#=== FUNCTION ================================================================
+# NAME: usage
+# PURPOSE:
+# PARAMETERS: none
+# RETURNS: none
+# DESCRIPTION: print out the usage of the program
+# THROWS: no exceptions
+# COMMENTS: none
+# SEE ALSO: n/a
+#===============================================================================
+sub usage {
+ my( $text, $help ) = @_;
+ $text = undef if( "h" eq $text );
+ (defined $text) && print STDERR "\n$text\n";
+ if( (defined $help && $help) || (!defined $help && !defined $text) ) {
+ print STDERR << "EOF" ;
+usage: $0 [-hvf] [-c config, -l logfile, -p pidfile]
+
+ -h : this (help) message
+ -c <file> : config file
+ -l <file> : log file (example: /var/log/sps/sps.log)
+ -p <file> : pid file (example: /var/run/sps/sps.pid)
+ -f : foreground (don"t fork)
+ -v : be verbose (multiple to increase verbosity)
+EOF
+ }
+ print "\n" ;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: open_fifo
+# PURPOSE:
+# PARAMETERS: $fifo_path
+# RETURNS: 0: FIFO couldn"t be setup, 1: FIFO setup correctly
+# DESCRIPTION: creates a FIFO at $fifo_path
+# THROWS: no exceptions
+# COMMENTS: none
+# SEE ALSO: n/a
+#===============================================================================
+sub open_fifo {
+ my ($fifo_path) = @_ ;
+ my $log_time = localtime( time );
+ if( -p $fifo_path ) {
+ daemon_log("$log_time: FIFO at $fifo_path already exists\n");
+ return 0;
+ }
+ POSIX::mkfifo($fifo_path, 0666) or die "can't mkfifo $fifo_path: $!";
+ daemon_log( "$log_time: FIFO started at $fifo_path\n" ) ;
+ return 1;
+ }
+
+
+#=== FUNCTION ================================================================
+# NAME: add_ldap_entry
+# PURPOSE: adds an element to ldap-tree
+# PARAMETERS:
+# RETURNS: none
+# DESCRIPTION: ????
+# THROWS: no exceptions
+# COMMENTS: none
+# SEE ALSO: n/a
+#===============================================================================
+sub add_ldap_entry {
+ my ($ldap_tree, $ldap_base, $mac, $gotoSysStatus, $ip, $interface, $desc) = @_;
+ my $dn = "cn=$mac,ou=incoming,$ldap_base";
+ my $s_res = &search_ldap_entry($ldap_tree, $ldap_base, "(|(macAddress=$mac)(dhcpHWAddress=ethernet $mac))");
+ my $c_res = $s_res->count;
+ if($c_res == 1) {
+ daemon_log("WARNING: macAddress $mac already in LDAP", 1);
+ return;
+ } elsif($c_res > 0) {
+ daemon_log("ERROR: macAddress $mac exists $c_res times in LDAP", 1);
+ return;
+ }
+
+ # create LDAP entry
+ my $entry = Net::LDAP::Entry->new( $dn );
+ $entry->dn($dn);
+ $entry->add("objectClass" => "goHard");
+ $entry->add("cn" => $mac);
+ $entry->add("macAddress" => $mac);
+ if(defined $gotoSysStatus) {$entry->add("gotoSysStatus" => $gotoSysStatus)}
+ if(defined $ip) {$entry->add("ipHostNumber" => $ip) }
+ #if(defined $interface) { }
+ if(defined $desc) {$entry->add("description" => $desc) }
+
+ # submit entry to LDAP
+ my $result = $entry->update ($ldap_tree);
+
+ # for $result->code constants please look at Net::LDAP::Constant
+ my $log_time = localtime( time );
+ if($result->code == 68) { # entry already exists
+ daemon_log("WARNING: $log_time: $dn ".$result->error, 3);
+ } elsif($result->code == 0) { # everything went fine
+ daemon_log("$log_time: add entry $dn to ldap", 1);
+ } else { # if any other error occur
+ daemon_log("ERROR: $log_time: $dn, ".$result->code.", ".$result->error, 1);
+ }
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: change_ldap_entry
+# PURPOSE: ????
+# PARAMETERS: ????
+# RETURNS: ????
+# DESCRIPTION: ????
+# THROWS: no exceptions
+# COMMENTS: none
+# SEE ALSO: n/a
+#===============================================================================
+sub change_ldap_entry {
+ my ($ldap_tree, $ldap_base, $mac, $gotoSysStatus ) = @_;
+
+ # check if ldap_entry exists or not
+ my $s_res = &search_ldap_entry($ldap_tree, $ldap_base, "(|(macAddress=$mac)(dhcpHWAddress=ethernet $mac))");
+ my $c_res = $s_res->count;
+ if($c_res == 0) {
+ daemon_log("WARNING: macAddress $mac not in LDAP", 1);
+ return;
+ } elsif($c_res > 1) {
+ daemon_log("ERROR: macAddress $mac exists $c_res times in LDAP", 1);
+ return;
+ }
+
+ my $s_res_entry = $s_res->pop_entry();
+ my $dn = $s_res_entry->dn();
+ my $result = $ldap->modify( $dn, replace => {'gotoSysStatus' => $gotoSysStatus } );
+
+ # for $result->code constants please look at Net::LDAP::Constant
+ my $log_time = localtime( time );
+ if($result->code == 32) { # entry doesnt exists
+ &add_ldap_entry($mac, $gotoSysStatus);
+ } elsif($result->code == 0) { # everything went fine
+ daemon_log("$log_time: entry $dn changed successful", 1);
+ } else { # if any other error occur
+ daemon_log("ERROR: $log_time: $dn, ".$result->code.", ".$result->error, 1);
+ }
+
+ return;
+}
+
+#=== FUNCTION ================================================================
+# NAME: search_ldap_entry
+# PURPOSE: ????
+# PARAMETERS: [Net::LDAP] $ldap_tree - object of an ldap-tree
+# string $sub_tree - dn of the subtree the search is performed
+# string $search_string - either a string or a Net::LDAP::Filter object
+# RETURNS: [Net::LDAP::Search] $msg - result object of the performed search
+# DESCRIPTION: ????
+# THROWS: no exceptions
+# COMMENTS: none
+# SEE ALSO: n/a
+#===============================================================================
+sub search_ldap_entry {
+ my ($ldap_tree, $sub_tree, $search_string) = @_;
+ my $msg = $ldap_tree->search( # perform a search
+ base => $sub_tree,
+ filter => $search_string,
+ ) or daemon_log("cannot perform search at ldap: $@", 1);
+# if(defined $msg) {
+# print $sub_tree."\t".$search_string."\t";
+# print $msg->count."\n";
+# foreach my $entry ($msg->entries) { $entry->dump; };
+# }
+
+ return $msg;
+}
+
+
+
+#========= MAIN = main ========================================================
+daemon_log( "####### START DAEMON ######\n", 1 );
+&check_cmdline_param ;
+&check_pid;
+&open_fifo($fifo_path);
+
+# Just fork, if we"re not in foreground mode
+if( ! $foreground ) { $pid = fork(); }
+else { $pid = $$; }
+
+# Do something useful - put our PID into the pid_file
+if( 0 != $pid ) {
+ open( LOCK_FILE, ">$pid_file" );
+ print LOCK_FILE "$pid\n";
+ close( LOCK_FILE );
+ if( !$foreground ) { exit( 0 ) };
+}
+
+
+if( not -p $fifo_path ) { die "fifo file disappeared\n" }
+sysopen(FIFO, $fifo_path, O_RDONLY) or die "can't read from $fifo_path: $!" ;
+
+while( 1 ) {
+ # checke alle prozesse im hash daemon_children ob sie noch aktiv sind, wenn
+ # nicht, dann entferne prozess aus hash
+ while( (my $key, my $val) = each( %daemon_children) ) {
+ my $status = waitpid( $key, &WNOHANG) ;
+ if( $status == -1 ) {
+ delete $daemon_children{$key} ;
+ daemon_log("childprocess finished: $key", 3) ;
+ }
+ }
+
+ # ist die max_process anzahl von prozesskindern erreicht, dann warte und
+ # prüfe erneut, ob in der zwischenzeit prozesse fertig geworden sind
+ if( keys( %daemon_children ) >= $max_process ) {
+ sleep($max_process_timeout) ;
+ next ;
+ }
+
+ my $msg = <FIFO>;
+ if( not defined( $msg )) { next ; }
+
+ chomp( $msg );
+ if( length( $msg ) == 0 ) { next ; }
+
+ my $forked_pid = fork();
+#=== PARENT = parent ==========================================================
+ if ( $forked_pid != 0 ) {
+ daemon_log("childprocess forked: $forked_pid", 3) ;
+ $daemon_children{$forked_pid} = 0 ;
+ }
+#=== CHILD = child ============================================================
+ else {
+ # parse the incoming message from arp, split the message and return
+ # the values in an array. not defined values are set to "none"
+ #my ($mac, $ip, $interface, $arp_sig, $desc) = &parse_input( $msg ) ;
+ daemon_log( "childprocess read from arp: $fifo_path\nline: $msg", 3);
+ my ($mac, $ip, $interface, $arp_sig, $desc) = split('\s', $msg, 5);
+
+ # create connection to LDAP
+ $ldap = Net::LDAP->new( "localhost" ) or die "$@";
+ $ldap->bind($bind_phrase,
+ password => $password,
+ ) ;
+
+ switch($arp_sig) {
+ case 0 {&change_ldap_entry($ldap, $ldap_base,
+ $mac, "ip-changed",
+ )}
+ case 1 {&change_ldap_entry($ldap, $ldap_base,
+ $mac, "mac-not-whitelisted",
+ )}
+ case 2 {&change_ldap_entry($ldap, $ldap_base,
+ $mac, "mac-in-blacklist",
+ )}
+ case 3 {&add_ldap_entry($ldap, $ldap_base,
+ $mac, "new-mac-address", $ip,
+ $interface, $desc,
+ )}
+ case 4 {&change_ldap_entry($ldap, $ldap_base,
+ $mac, "unauthorized-arp-request",
+ )}
+ case 5 {&change_ldap_entry($ldap, $ldap_base,
+ $mac, "abusive-number-of-arp-requests",
+ )}
+ case 6 {&change_ldap_entry($ldap, $ldap_base,
+ $mac, "ether-and-arp-mac-differs",
+ )}
+ case 7 {&change_ldap_entry($ldap, $ldap_base,
+ $mac, "flood-detected",
+ )}
+ case 8 {&add_ldap_entry($ldap, $ldap_base,
+ $mac, $ip, "new-system",
+ )}
+ case 9 {&change_ldap_entry($ldap, $ldap_base,
+ $mac, "mac-changed",
+ )}
+ }
+
+
+ # ldap search
+# my $base_phrase = "dc=gonicus,dc=de";
+# my $filter_phrase = "cn=keinesorge";
+# my $attrs_phrase = "cn macAdress";
+# my $msg_search = $ldap->search( base => $base_phrase,
+# filter => $filter_phrase,
+# attrs => $attrs_phrase,
+# );
+# $msg_search->code && die $msg_search->error;
+#
+# my @entries = $msg_search->entries;
+# my $max = $msg_search->count;
+# print "anzahl der entries: $max\n";
+# my $i;
+# for ( $i = 0 ; $i < $max ; $i++ ) {
+# my $entry = $msg_search->entry ( $i );
+# foreach my $attr ( $entry->attributes ) {
+# if( not $attr eq "cn") {
+# next;
+# }
+# print join( "\n ", $attr, $entry->get_value( $attr ) ), "\n\n";
+# }
+# }
+
+ # ldap add
+
+
+ $ldap->unbind;
+ exit;
+ }
+
+}
+
+
diff --git a/gosa-si/arp-handler-d.cfg b/gosa-si/arp-handler-d.cfg
--- /dev/null
@@ -0,0 +1,14 @@
+[Allgemein]
+timeout = 1000
+mailto = root@localhost
+mailfrom = gosa-sd@localhost
+user = rettenbe
+group = usr
+fifo_path = /home/rettenbe/gonicus/projekte/gosa-trunk/contrib/daemon/fifo
+log_file = /home/rettenbe/gonicus/projekte/gosa-trunk/contrib/daemon/gosa-sd.log
+pid_file = /home/rettenbe/gonicus/projekte/gosa-trunk/contrib/daemon/gosa-sd.pid
+loglevel = 1
+
+[LDAP]
+bind = cn=ldapadmin,dc=gonicus,dc=de
+password = tester
diff --git a/gosa-si/daemon/arp-handler-d b/gosa-si/daemon/arp-handler-d
+++ /dev/null
@@ -1,563 +0,0 @@
-#!/usr/bin/perl
-#===============================================================================
-#
-# FILE: gosa-support-daemon.pl
-#
-# USAGE: ./.gosa-support-daemon.pl
-#
-# DESCRIPTION:
-#
-# OPTIONS: ---
-# REQUIREMENTS: ---
-# BUGS: ---
-# NOTES: ---
-# AUTHOR: Andreas Rettenberger, <rettenberger@gonicus.de>
-# COMPANY: Gonicus GmbH, Arnsberg
-# VERSION: 1.0
-# CREATED: 21.08.2007 15:13:51 CEST
-# REVISION: ---
-#===============================================================================
-
-use strict;
-use warnings;
-use Getopt::Long;
-use Config::IniFiles;
-use POSIX;
-use Fcntl;
-use Net::LDAP;
-use Net::LDAP::LDIF;
-use Net::LDAP::Entry;
-use Switch;
-
-
-my ($verbose, $cfg_file, $log_file, $pid_file, $foreground);
-my ($timeout, $mailto, $mailfrom, $user, $group);
-my ($procid, $pid, $loglevel);
-my ($fifo_path, $max_process_timeout, $max_process );
-my %daemon_children;
-my ($ldap, $bind_phrase, $password, $ldap_base) ;
-
-$procid = -1 ;
-$foreground = 0 ;
-$verbose = 0 ;
-$max_process = 2 ;
-$max_process_timeout = 1 ;
-$ldap_base = "dc=gonicus,dc=de" ;
-#$ldap_path = "/var/run/gosa-support-daemon.socket";
-#$log_path = "/var/log/gosa-support-daemon.log";
-#$pid_path = "/var/run/gosa-support-daemon/gosa-support-daemon.pid";
-
-#---------------------------------------------------------------------------
-# parse commandline options
-#---------------------------------------------------------------------------
-Getopt::Long::Configure( "bundling" );
-GetOptions( "v|verbose+" => \$verbose,
- "c|config=s" => \$cfg_file,
- "h|help" => \&usage,
- "l|logfile=s" => \$log_file,
- "p|pid=s" => \$pid_file,
- "f|foreground" => \$foreground);
-
-#---------------------------------------------------------------------------
-# read and set config parameters
-#---------------------------------------------------------------------------
-my %cfg_defaults =
-("Allgemein" =>
- {"timeout" => [ \$timeout, 1000 ],
- "mailto" => [ \$mailto, 'root@localhost' ],
- "mailfrom" => [ \$mailfrom, 'sps-daemon@localhost' ],
- "user" => [ \$user, "nobody" ],
- "group" => [ \$group, "nogroup" ],
- "fifo_path" => [ \$fifo_path, "/home/rettenbe/gonicus/gosa-support/tmp/fifo" ],
- "log_file" => [ \$log_file, "/home/rettenbe/gonicus/gosa-support/tmp/gosa-support.log" ],
- "pid_file" => [ \$pid_file, "/home/rettenbe/gonicus/gosa-support/tmp/gosa-support.pid" ],
- "loglevel" => [ \$loglevel, 1]
- },
-"LDAP" =>
- {"bind" => [ \$bind_phrase, "cn=ldapadmin,dc=gonicus,dc=de" ],
- "password" => [ \$password, "tester" ],
- }
- );
-&read_configfile;
-
-
-#=== FUNCTION ================================================================
-# NAME: check_cmdline_param
-# PURPOSE: checks all commandline parameters to validity
-# PARAMETERS: none
-# RETURNS: none
-# DESCRIPTION: ????
-# THROWS: no exceptions
-# COMMENTS: none
-# SEE ALSO: n/a
-#===============================================================================
-sub check_cmdline_param () {
- my $err_config;
- my $err_log;
- my $err_pid;
- my $err_counter = 0;
- if( not defined( $cfg_file)) {
- $err_config = "please specify a config file";
- $err_counter += 1;
- }
- if( not defined( $log_file)) {
- $err_log = "please specify a log file";
- $err_counter += 1;
- }
- if( not defined( $pid_file)) {
- $err_pid = "please specify a pid file";
- $err_counter += 1;
- }
- if( $err_counter > 0 ) {
- &usage( "", 1 );
- if( defined( $err_config)) { print STDERR "$err_config\n"}
- if( defined( $err_log)) { print STDERR "$err_log\n" }
- if( defined( $err_pid)) { print STDERR "$err_pid\n"}
- print STDERR "\n";
- exit( -1 );
- }
-}
-
-#=== FUNCTION ================================================================
-# NAME: check_pid
-# PURPOSE:
-# PARAMETERS: none
-# RETURNS: none
-# DESCRIPTION: ????
-# THROWS: no exceptions
-# COMMENTS: none
-# SEE ALSO: n/a
-#===============================================================================
-sub check_pid {
- if( open( LOCK_FILE, "<$pid_file") ) {
- $procid = <LOCK_FILE>;
- if( defined $procid ) {
- chomp( $procid );
- if( -f "/proc/$procid/stat" ) {
- my($stat) = `cat /proc/$procid/stat` =~ m/$procid \((.+)\).*/;
- print "\t".$stat."\n";
- if( "sps-daemon.pl" eq $stat ) {
- close( LOCK_FILE );
- exit -1;
- }
- }
- }
- close( LOCK_FILE );
- unlink( $pid_file );
- }
-
- # Try to open PID file
- if (!sysopen(LOCK_FILE, $pid_file, O_WRONLY|O_CREAT|O_EXCL, 0644)) {
- my($msg) = "Couldn't obtain lockfile '$pid_file' ";
- if (open(LOCK_FILE, "<", $pid_file) && ($pid = <LOCK_FILE>)) {
- chomp($pid);
- $msg .= "(PID $pid)\n";
- } else {
- $msg .= "(unable to read PID)\n";
- }
- if ( ! $foreground ) {
- daemon_log( $msg."\n");
- } else {
- print( STDERR " $msg " );
- }
- exit( -1 );
- }
-}
-
-#=== FUNCTION ================================================================
-# NAME: read_configfile
-# PURPOSE: read the configuration file and provide the programm with
-# parameters
-# PARAMETERS: none
-# RETURNS: none
-# DESCRIPTION: ????
-# THROWS: no exceptions
-# COMMENTS: none
-# SEE ALSO: n/a
-#===============================================================================
-sub read_configfile {
- my $log_time = localtime(time);
- my $cfg;
- if( defined( $cfg_file) && ( length($cfg_file) > 0 )) {
- if( -r $cfg_file ) {
- $cfg = Config::IniFiles->new( -file => $cfg_file );
- } else {
- usage( "Couldn't read config file: $cfg_file \n" );
- }
- } else {
- $cfg = Config::IniFiles->new() ;
- }
-
- foreach my $section (keys %cfg_defaults) { # "Parse" config into values
- foreach my $param (keys %{$cfg_defaults{ $section }}) {
- my $pinfo = $cfg_defaults{ $section }{ $param };
- ${@$pinfo[ 0 ]} = $cfg->val( $section, $param, @$pinfo[ 1 ] );
- }
- }
-
- if(-e $log_file ) { unlink $log_file }
- daemon_log("$log_time: config file read\n");
-}
-
-#=== FUNCTION ================================================================
-# NAME: daemon_log
-# PURPOSE: log messages to specified logfile
-# PARAMETERS: $msg, $level
-# RETURNS: ????
-# DESCRIPTION: Takes a message ($msg) and append it to the logfile. The
-# standard log-level ($level) is 1. Messages whith higher level
-# than the verbosity-level (defined by commandline) are printed
-# out to commandline. Messages with log-level lower than 2 are
-# not logged to logfile!
-# THROWS: no exceptions
-# COMMENTS: none
-# SEE ALSO: n/a
-#===============================================================================
-sub daemon_log {
- my( $msg, $level ) = @_;
- if(not defined $msg) { return }
- if(not defined $level) { $level = 1 }
- open(LOG_HANDLE, ">>$log_file");
- if(not defined open( LOG_HANDLE, ">>$log_file" ) ) { return }
- chomp($msg);
- #if( $verbose >= $level ) { print "$msg"."\n" }
- if( $level <= 1 ) { print LOG_HANDLE $msg."\n" }
- if( $foreground ) { print $msg."\n" }
- close( LOG_HANDLE );
- }
-
-#=== FUNCTION ================================================================
-# NAME: signal handler
-# PURPOSE: catches signals from the programm and do diffrent things
-# than default
-# PARAMETERS: none
-# RETURNS: none
-# DESCRIPTION: sighandler
-# THROWS: no exceptions
-# COMMENTS: none
-# SEE ALSO: n/a
-#===============================================================================
-sub sigINT {
- my $log_time = localtime(time);
- print "INT\n";
- if( -p $fifo_path ) {
- close FIFO ;
- unlink($fifo_path) ;
- daemon_log( "$log_time: FIFO closed after signal INT!\n") ;
- }
- if(defined($ldap)) {
- $ldap->unbind;
- }
- $SIG{INT} = "DEFAULT" ;
- kill INT => $$ ;
-}
-$SIG{INT} = \&sigINT ;
-
-#=== FUNCTION ================================================================
-# NAME: usage
-# PURPOSE:
-# PARAMETERS: none
-# RETURNS: none
-# DESCRIPTION: print out the usage of the program
-# THROWS: no exceptions
-# COMMENTS: none
-# SEE ALSO: n/a
-#===============================================================================
-sub usage {
- my( $text, $help ) = @_;
- $text = undef if( "h" eq $text );
- (defined $text) && print STDERR "\n$text\n";
- if( (defined $help && $help) || (!defined $help && !defined $text) ) {
- print STDERR << "EOF" ;
-usage: $0 [-hvf] [-c config, -l logfile, -p pidfile]
-
- -h : this (help) message
- -c <file> : config file
- -l <file> : log file (example: /var/log/sps/sps.log)
- -p <file> : pid file (example: /var/run/sps/sps.pid)
- -f : foreground (don"t fork)
- -v : be verbose (multiple to increase verbosity)
-EOF
- }
- print "\n" ;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: open_fifo
-# PURPOSE:
-# PARAMETERS: $fifo_path
-# RETURNS: 0: FIFO couldn"t be setup, 1: FIFO setup correctly
-# DESCRIPTION: creates a FIFO at $fifo_path
-# THROWS: no exceptions
-# COMMENTS: none
-# SEE ALSO: n/a
-#===============================================================================
-sub open_fifo {
- my ($fifo_path) = @_ ;
- my $log_time = localtime( time );
- if( -p $fifo_path ) {
- daemon_log("$log_time: FIFO at $fifo_path already exists\n");
- return 0;
- }
- POSIX::mkfifo($fifo_path, 0666) or die "can't mkfifo $fifo_path: $!";
- daemon_log( "$log_time: FIFO started at $fifo_path\n" ) ;
- return 1;
- }
-
-
-#=== FUNCTION ================================================================
-# NAME: add_ldap_entry
-# PURPOSE: adds an element to ldap-tree
-# PARAMETERS:
-# RETURNS: none
-# DESCRIPTION: ????
-# THROWS: no exceptions
-# COMMENTS: none
-# SEE ALSO: n/a
-#===============================================================================
-sub add_ldap_entry {
- my ($ldap_tree, $ldap_base, $mac, $gotoSysStatus, $ip, $interface, $desc) = @_;
- my $dn = "cn=$mac,ou=incoming,$ldap_base";
- my $s_res = &search_ldap_entry($ldap_tree, $ldap_base, "(|(macAddress=$mac)(dhcpHWAddress=ethernet $mac))");
- my $c_res = $s_res->count;
- if($c_res == 1) {
- daemon_log("WARNING: macAddress $mac already in LDAP", 1);
- return;
- } elsif($c_res > 0) {
- daemon_log("ERROR: macAddress $mac exists $c_res times in LDAP", 1);
- return;
- }
-
- # create LDAP entry
- my $entry = Net::LDAP::Entry->new( $dn );
- $entry->dn($dn);
- $entry->add("objectClass" => "goHard");
- $entry->add("cn" => $mac);
- $entry->add("macAddress" => $mac);
- if(defined $gotoSysStatus) {$entry->add("gotoSysStatus" => $gotoSysStatus)}
- if(defined $ip) {$entry->add("ipHostNumber" => $ip) }
- #if(defined $interface) { }
- if(defined $desc) {$entry->add("description" => $desc) }
-
- # submit entry to LDAP
- my $result = $entry->update ($ldap_tree);
-
- # for $result->code constants please look at Net::LDAP::Constant
- my $log_time = localtime( time );
- if($result->code == 68) { # entry already exists
- daemon_log("WARNING: $log_time: $dn ".$result->error, 3);
- } elsif($result->code == 0) { # everything went fine
- daemon_log("$log_time: add entry $dn to ldap", 1);
- } else { # if any other error occur
- daemon_log("ERROR: $log_time: $dn, ".$result->code.", ".$result->error, 1);
- }
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: change_ldap_entry
-# PURPOSE: ????
-# PARAMETERS: ????
-# RETURNS: ????
-# DESCRIPTION: ????
-# THROWS: no exceptions
-# COMMENTS: none
-# SEE ALSO: n/a
-#===============================================================================
-sub change_ldap_entry {
- my ($ldap_tree, $ldap_base, $mac, $gotoSysStatus ) = @_;
-
- # check if ldap_entry exists or not
- my $s_res = &search_ldap_entry($ldap_tree, $ldap_base, "(|(macAddress=$mac)(dhcpHWAddress=ethernet $mac))");
- my $c_res = $s_res->count;
- if($c_res == 0) {
- daemon_log("WARNING: macAddress $mac not in LDAP", 1);
- return;
- } elsif($c_res > 1) {
- daemon_log("ERROR: macAddress $mac exists $c_res times in LDAP", 1);
- return;
- }
-
- my $s_res_entry = $s_res->pop_entry();
- my $dn = $s_res_entry->dn();
- my $result = $ldap->modify( $dn, replace => {'gotoSysStatus' => $gotoSysStatus } );
-
- # for $result->code constants please look at Net::LDAP::Constant
- my $log_time = localtime( time );
- if($result->code == 32) { # entry doesnt exists
- &add_ldap_entry($mac, $gotoSysStatus);
- } elsif($result->code == 0) { # everything went fine
- daemon_log("$log_time: entry $dn changed successful", 1);
- } else { # if any other error occur
- daemon_log("ERROR: $log_time: $dn, ".$result->code.", ".$result->error, 1);
- }
-
- return;
-}
-
-#=== FUNCTION ================================================================
-# NAME: search_ldap_entry
-# PURPOSE: ????
-# PARAMETERS: [Net::LDAP] $ldap_tree - object of an ldap-tree
-# string $sub_tree - dn of the subtree the search is performed
-# string $search_string - either a string or a Net::LDAP::Filter object
-# RETURNS: [Net::LDAP::Search] $msg - result object of the performed search
-# DESCRIPTION: ????
-# THROWS: no exceptions
-# COMMENTS: none
-# SEE ALSO: n/a
-#===============================================================================
-sub search_ldap_entry {
- my ($ldap_tree, $sub_tree, $search_string) = @_;
- my $msg = $ldap_tree->search( # perform a search
- base => $sub_tree,
- filter => $search_string,
- ) or daemon_log("cannot perform search at ldap: $@", 1);
-# if(defined $msg) {
-# print $sub_tree."\t".$search_string."\t";
-# print $msg->count."\n";
-# foreach my $entry ($msg->entries) { $entry->dump; };
-# }
-
- return $msg;
-}
-
-
-
-#========= MAIN = main ========================================================
-daemon_log( "####### START DAEMON ######\n", 1 );
-&check_cmdline_param ;
-&check_pid;
-&open_fifo($fifo_path);
-
-# Just fork, if we"re not in foreground mode
-if( ! $foreground ) { $pid = fork(); }
-else { $pid = $$; }
-
-# Do something useful - put our PID into the pid_file
-if( 0 != $pid ) {
- open( LOCK_FILE, ">$pid_file" );
- print LOCK_FILE "$pid\n";
- close( LOCK_FILE );
- if( !$foreground ) { exit( 0 ) };
-}
-
-
-if( not -p $fifo_path ) { die "fifo file disappeared\n" }
-sysopen(FIFO, $fifo_path, O_RDONLY) or die "can't read from $fifo_path: $!" ;
-
-while( 1 ) {
- # checke alle prozesse im hash daemon_children ob sie noch aktiv sind, wenn
- # nicht, dann entferne prozess aus hash
- while( (my $key, my $val) = each( %daemon_children) ) {
- my $status = waitpid( $key, &WNOHANG) ;
- if( $status == -1 ) {
- delete $daemon_children{$key} ;
- daemon_log("childprocess finished: $key", 3) ;
- }
- }
-
- # ist die max_process anzahl von prozesskindern erreicht, dann warte und
- # prüfe erneut, ob in der zwischenzeit prozesse fertig geworden sind
- if( keys( %daemon_children ) >= $max_process ) {
- sleep($max_process_timeout) ;
- next ;
- }
-
- my $msg = <FIFO>;
- if( not defined( $msg )) { next ; }
-
- chomp( $msg );
- if( length( $msg ) == 0 ) { next ; }
-
- my $forked_pid = fork();
-#=== PARENT = parent ==========================================================
- if ( $forked_pid != 0 ) {
- daemon_log("childprocess forked: $forked_pid", 3) ;
- $daemon_children{$forked_pid} = 0 ;
- }
-#=== CHILD = child ============================================================
- else {
- # parse the incoming message from arp, split the message and return
- # the values in an array. not defined values are set to "none"
- #my ($mac, $ip, $interface, $arp_sig, $desc) = &parse_input( $msg ) ;
- daemon_log( "childprocess read from arp: $fifo_path\nline: $msg", 3);
- my ($mac, $ip, $interface, $arp_sig, $desc) = split('\s', $msg, 5);
-
- # create connection to LDAP
- $ldap = Net::LDAP->new( "localhost" ) or die "$@";
- $ldap->bind($bind_phrase,
- password => $password,
- ) ;
-
- switch($arp_sig) {
- case 0 {&change_ldap_entry($ldap, $ldap_base,
- $mac, "ip-changed",
- )}
- case 1 {&change_ldap_entry($ldap, $ldap_base,
- $mac, "mac-not-whitelisted",
- )}
- case 2 {&change_ldap_entry($ldap, $ldap_base,
- $mac, "mac-in-blacklist",
- )}
- case 3 {&add_ldap_entry($ldap, $ldap_base,
- $mac, "new-mac-address", $ip,
- $interface, $desc,
- )}
- case 4 {&change_ldap_entry($ldap, $ldap_base,
- $mac, "unauthorized-arp-request",
- )}
- case 5 {&change_ldap_entry($ldap, $ldap_base,
- $mac, "abusive-number-of-arp-requests",
- )}
- case 6 {&change_ldap_entry($ldap, $ldap_base,
- $mac, "ether-and-arp-mac-differs",
- )}
- case 7 {&change_ldap_entry($ldap, $ldap_base,
- $mac, "flood-detected",
- )}
- case 8 {&add_ldap_entry($ldap, $ldap_base,
- $mac, $ip, "new-system",
- )}
- case 9 {&change_ldap_entry($ldap, $ldap_base,
- $mac, "mac-changed",
- )}
- }
-
-
- # ldap search
-# my $base_phrase = "dc=gonicus,dc=de";
-# my $filter_phrase = "cn=keinesorge";
-# my $attrs_phrase = "cn macAdress";
-# my $msg_search = $ldap->search( base => $base_phrase,
-# filter => $filter_phrase,
-# attrs => $attrs_phrase,
-# );
-# $msg_search->code && die $msg_search->error;
-#
-# my @entries = $msg_search->entries;
-# my $max = $msg_search->count;
-# print "anzahl der entries: $max\n";
-# my $i;
-# for ( $i = 0 ; $i < $max ; $i++ ) {
-# my $entry = $msg_search->entry ( $i );
-# foreach my $attr ( $entry->attributes ) {
-# if( not $attr eq "cn") {
-# next;
-# }
-# print join( "\n ", $attr, $entry->get_value( $attr ) ), "\n\n";
-# }
-# }
-
- # ldap add
-
-
- $ldap->unbind;
- exit;
- }
-
-}
-
-
diff --git a/gosa-si/daemon/arp-handler-d.cfg b/gosa-si/daemon/arp-handler-d.cfg
+++ /dev/null
@@ -1,14 +0,0 @@
-[Allgemein]
-timeout = 1000
-mailto = root@localhost
-mailfrom = gosa-sd@localhost
-user = rettenbe
-group = usr
-fifo_path = /home/rettenbe/gonicus/projekte/gosa-trunk/contrib/daemon/fifo
-log_file = /home/rettenbe/gonicus/projekte/gosa-trunk/contrib/daemon/gosa-sd.log
-pid_file = /home/rettenbe/gonicus/projekte/gosa-trunk/contrib/daemon/gosa-sd.pid
-loglevel = 1
-
-[LDAP]
-bind = cn=ldapadmin,dc=gonicus,dc=de
-password = tester
diff --git a/gosa-si/daemon/debian/README.debian b/gosa-si/daemon/debian/README.debian
+++ /dev/null
@@ -1,11 +0,0 @@
-README.Debian for GOto 3.0
---------------------------
-
-* Configuring GOto 3.0
-
-You need a proper LDAP/FAI/GOsa setup to make this run. More
-text will follow later. Sorry.
-
-----
-Cajus Pollmeier <cajus@debian.org> Fri 02 Jun 2006 16:23:50 +0200
-
diff --git a/gosa-si/daemon/debian/changelog b/gosa-si/daemon/debian/changelog
+++ /dev/null
@@ -1,6 +0,0 @@
-gosa-sd (1.0-1) unstable; urgency=low
-
- * Initial release
-
- -- Cajus Pollmeier <cajus@debian.org> Fri, 7 Dec 2007 11:37:45 +0100
-
diff --git a/gosa-si/daemon/debian/compat b/gosa-si/daemon/debian/compat
+++ /dev/null
@@ -1 +0,0 @@
-5
diff --git a/gosa-si/daemon/debian/control b/gosa-si/daemon/debian/control
+++ /dev/null
@@ -1,40 +0,0 @@
-Source: gosa-si
-Section: utils
-Priority: optional
-Maintainer: Cajus Pollmeier <cajus@debian.org>
-Standards-Version: 3.7.2.2
-Build-Depends: debhelper(>= 4.2.32), dpatch
-
-Package: gosa-si-common
-Architecture: any
-Depends: libconfig-inifiles-perl, libcrypt-rijndael-perl, libxml-simple-perl, libipc-shareable-perl, libdata-dumper-simple-perl, libmime-perl
-Suggests: gosa-si-daemon, gosa-si-client
-Description: GOsa support infrastructure
- This package provides common library functionality used by the
- infrastructure server and client packages.
- .
- GOsa is a combination of system-administrator and end-user web
- interface, designed to handle LDAP based setups.
-
-Package: gosa-si-daemon
-Architecture: any
-Depends: gosa-si-common
-Suggests: gosa
-Description: GOsa support infrastructure daemon
- This package provides everything you need in order to deploy a simple
- or distributed GOsa support infrastructure. It can be used to trigger
- certain actions or retrieve information from clients.
- .
- GOsa is a combination of system-administrator and end-user web
- interface, designed to handle LDAP based setups.
-
-Package: gosa-si-client
-Architecture: any
-Depends: gosa-si-common
-Suggests: gosa
-Description: GOsa support infrastructure client
- This package lets you join to a GOsa support infrastructure as a
- client in order to provide information or to act on events.
- .
- GOsa is a combination of system-administrator and end-user web
- interface, designed to handle LDAP based setups.
diff --git a/gosa-si/daemon/debian/copyright b/gosa-si/daemon/debian/copyright
+++ /dev/null
@@ -1,8 +0,0 @@
-This package was debianized by Cajus Pollmeier
-<cajus@debian.org> on Mon, 25 Jun 2007 12:57:35 +0100.
-
-Copyright: GPL2
-
-This code is released under the terms of the GPLv2 license.
-
-See /usr/share/common-licenses/GPL-2 for the full license.
diff --git a/gosa-si/daemon/debian/default b/gosa-si/daemon/debian/default
+++ /dev/null
@@ -1,2 +0,0 @@
-# /etc/default/gosa-si - configure the init script
-START_BUS=0
diff --git a/gosa-si/daemon/debian/gosa-si-client.dirs b/gosa-si/daemon/debian/gosa-si-client.dirs
+++ /dev/null
@@ -1,4 +0,0 @@
-usr/share/ltsp/plugins/ltsp-build-client/common
-usr/share/ltsp/scripts
-usr/sbin
-etc/default
diff --git a/gosa-si/daemon/debian/gosa-si-client.install b/gosa-si/daemon/debian/gosa-si-client.install
+++ /dev/null
@@ -1,12 +0,0 @@
-debian/goto etc/default
-build-goto-client usr/sbin
-plugins/001-ltsp-addon-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/020-ssh-pubkey-login usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/001-goto-ldap-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/001-sane-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/020-nx-client usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/010-goto-ldap-files usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/999-goto-ldap-final usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/001-snmp-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/030-late-packages-goto usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/000-goto-ldap-vars usr/share/ltsp/plugins/ltsp-build-client/common
diff --git a/gosa-si/daemon/debian/gosa-si-common.dirs b/gosa-si/daemon/debian/gosa-si-common.dirs
+++ /dev/null
@@ -1,4 +0,0 @@
-usr/share/ltsp/plugins/ltsp-build-client/common
-usr/share/ltsp/scripts
-usr/sbin
-etc/default
diff --git a/gosa-si/daemon/debian/gosa-si-common.install b/gosa-si/daemon/debian/gosa-si-common.install
+++ /dev/null
@@ -1,12 +0,0 @@
-debian/goto etc/default
-build-goto-client usr/sbin
-plugins/001-ltsp-addon-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/020-ssh-pubkey-login usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/001-goto-ldap-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/001-sane-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/020-nx-client usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/010-goto-ldap-files usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/999-goto-ldap-final usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/001-snmp-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/030-late-packages-goto usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/000-goto-ldap-vars usr/share/ltsp/plugins/ltsp-build-client/common
diff --git a/gosa-si/daemon/debian/gosa-si-server.dirs b/gosa-si/daemon/debian/gosa-si-server.dirs
+++ /dev/null
@@ -1,4 +0,0 @@
-usr/share/ltsp/plugins/ltsp-build-client/common
-usr/share/ltsp/scripts
-usr/sbin
-etc/default
diff --git a/gosa-si/daemon/debian/gosa-si-server.init b/gosa-si/daemon/debian/gosa-si-server.init
+++ /dev/null
@@ -1,91 +0,0 @@
-#!/bin/sh
-# Start/stop the GOsa support daemon infrastructure.
-#
-### BEGIN INIT INFO
-# Provides: gosa-si
-# Required-Start: $syslog $time
-# Required-Stop: $syslog $time
-# Default-Start: 2 3 4 5
-# Default-Stop: 0 1 6
-# Short-Description: GOsa message bus and server component
-# Description: gosa-si establishes the communication between a couple of
-# GOsa hosting servers and optionally clients to do event
-# signaling for all communication partners.
-### END INIT INFO
-
-# Sanity checks
-test -f /usr/sbin/gosa-si-server || exit 0
-test -f /usr/sbin/gosa-si-bus || exit 0
-
-# Load defaults
-START_BUS=0
-[ -r /etc/default/gosa-si ] && . /etc/default/gosa-si
-
-# Load LSB support functions
-. /lib/lsb/init-functions
-
-
-start_bus() {
- start-stop-daemon --start --quiet --pidfile /var/run/gosa-si-bus.pid --name gosa-si-bus --startas /usr/sbin/gosa-si-bus
-}
-
-
-start_server() {
- start-stop-daemon --start --quiet --pidfile /var/run/gosa-si-server.pid --name gosa-si-server --startas /usr/sbin/gosa-si-server -- $1
-}
-
-
-stop_bus() {
- start-stop-daemon --stop --retry 5 --quiet --pidfile /var/run/gosa-si-bus.pid --name gosa-si-bus
-}
-
-
-stop_server() {
- start-stop-daemon --stop --retry 5 --quiet --pidfile /var/run/gosa-si-server.pid --name gosa-si-server
-}
-
-
-case "$1" in
-start) log_daemon_msg "Starting GOsa support infrastructure"
- if [ "$START_BUS" == "1" ]; then
- log_progress_msg "bus"
- start_bus
- log_progress_msg "daemon"
- start_server
- else
- log_progress_msg "daemon"
- start_server --no-bus
- fi
- log_end_msg $?
- ;;
-stop) log_daemon_msg "Stopping GOsa support infrastructure"
- if [ "$START_BUS" == "1" ]; then
- log_progress_msg "daemon"
- stop_server
- log_progress_msg "bus"
- stop_bus
- else
- log_progress_msg "daemon"
- stop_server
- fi
- log_end_msg $?
- ;;
-reload|force-reload|restart) log_daemon_msg "Restarting GOsa support infrastructure"
- if [ "$START_BUS" == "1" ]; then
- stop_server
- stop_bus
- start_bus
- start_server --no-bus
- log_progress_msg "done"
- else
- stop_server
- start_server --no-bus
- log_progress_msg "done"
- fi
- log_end_msg $?
- ;;
-*) log_action_msg "Usage: /etc/init.d/gosa-si {start|stop|restart|reload|force-reload}"
- exit 2
- ;;
-esac
-exit 0
diff --git a/gosa-si/daemon/debian/gosa-si-server.install b/gosa-si/daemon/debian/gosa-si-server.install
+++ /dev/null
@@ -1,12 +0,0 @@
-debian/goto etc/default
-build-goto-client usr/sbin
-plugins/001-ltsp-addon-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/020-ssh-pubkey-login usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/001-goto-ldap-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/001-sane-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/020-nx-client usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/010-goto-ldap-files usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/999-goto-ldap-final usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/001-snmp-packages usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/030-late-packages-goto usr/share/ltsp/plugins/ltsp-build-client/common
-plugins/000-goto-ldap-vars usr/share/ltsp/plugins/ltsp-build-client/common
diff --git a/gosa-si/daemon/debian/rules b/gosa-si/daemon/debian/rules
+++ /dev/null
@@ -1,77 +0,0 @@
-#!/usr/bin/make -f
-# Sample debian/rules that uses debhelper. GNU copyright 1997 by Joey Hess.
-
-# Uncomment this to turn on verbose mode.
-#export DH_VERBOSE=1
-
-build: patch
- #********************************************************
- #* Building ltsp-goto into a Debian/GNU Linux Package *
- #* please stand by *
- #********************************************************
-
-clean: clean-patched unpatch
-clean-patched:
- dh_testdir
- rm -f install-stamp
- -rm -f debian/files
- -rm -rf debian/tmp
- -rm -f debian/substvars
- dh_clean
-
-unpatch:
- dpatch deapply-all
- rm -rf patch-stamp debian/patched
-
-install: install-stamp
-install-stamp:
- dh_testdir
- dh_testroot
- dh_clean -k
- dh_installdirs
-
- # Create a copy, remove svn stuff
- -mkdir debian/tmp
- -for i in `ls | grep -v debian`; do \
- cp -R $$i debian/tmp ; \
- done
- -find debian/tmp -name '*.svn' -type d -exec rm -rf {} \; 2> /dev/null
-
- touch install-stamp
-
-patch: patch-stamp
-patch-stamp:
- dpatch apply-all
- dpatch cat-all >patch-stamp
-
-binary-indep: install
- dh_testdir
- dh_testroot
-
- dh_install
- dh_installdocs
- dh_installcron
- dh_installexamples
- dh_installchangelogs
- #dh_installdebconf
- #dh_installcron -p goto-agents-printmanager
- dh_link
- dh_strip
- dh_compress
- dh_fixperms
- dh_perl
- dh_installdeb
- dh_shlibdeps
-
- dh_gencontrol
- dh_md5sums
- dh_builddeb
-
-source diff:
- @echo >&2 'source and diff are obsolete - use dpkg-source -b'; false
-
-binary: binary-indep
-.PHONY: build install clean binary-indep binary
-
-binary-arch:
-
diff --git a/gosa-si/daemon/gosa-si-bus b/gosa-si/daemon/gosa-si-bus
+++ /dev/null
@@ -1,1183 +0,0 @@
-#!/usr/bin/perl
-#===============================================================================
-#
-# FILE: gosa-server
-#
-# USAGE: ./gosa-server
-#
-# DESCRIPTION:
-#
-# OPTIONS: ---
-# REQUIREMENTS: ---
-# BUGS: ---
-# NOTES:
-# AUTHOR: (Andreas Rettenberger), <rettenberger@gonicus.de>
-# COMPANY:
-# VERSION: 1.0
-# CREATED: 12.09.2007 08:54:41 CEST
-# REVISION: ---
-#===============================================================================
-
-use strict;
-use warnings;
-use Getopt::Long;
-use Config::IniFiles;
-use POSIX;
-use Time::HiRes qw( gettimeofday );
-
-use IO::Socket::INET;
-use Crypt::Rijndael;
-use MIME::Base64;
-use Digest::MD5 qw(md5 md5_hex md5_base64);
-use XML::Simple;
-use Data::Dumper;
-use Sys::Syslog qw( :DEFAULT setlogsock);
-use Cwd;
-use File::Spec;
-use IPC::Shareable qw( :lock);
-IPC::Shareable->clean_up_all;
-
-my ($cfg_file, $default_cfg_file, %cfg_defaults, $foreground, $verbose);
-my ($bus_activ, $bus_passwd, $bus_ip, $bus_port, $bus_address, $bus, $bus_mac_address);
-my ($pid_file, $procid, $pid, $log_file, $my_own_address);
-my (%free_child, %busy_child, $child_max, $child_min, %child_alive_time, $child_timeout);
-my ($xml, $bus_cipher, $known_daemons, $shmkh);
-
-$foreground = 0 ;
-$known_daemons = {};
-$shmkh = tie($known_daemons, 'IPC::Shareable', undef, {create => 1,
- exclusive => 1,
- mode => 0666,
- destroy => 1,
- });
-%cfg_defaults =
-("general" =>
- {"log_file" => [\$log_file, "/var/run/".$0.".log"],
- "pid_file" => [\$pid_file, "/var/run/".$0.".pid"],
- "child_max" => [\$child_max, 10],
- "child_min" => [\$child_min, 3],
- "child_timeout" => [\$child_timeout, 180],
-
- },
-"bus" =>
- {"bus_activ" => [\$bus_activ, "on"],
- "bus_passwd" => [\$bus_passwd, ""],
- "bus_port" => [\$bus_port, "20080"],
- }
- );
-
-#=== FUNCTION ================================================================
-# NAME: read_configfile
-# PARAMETERS: cfg_file - string -
-# RETURNS: nothing
-# DESCRIPTION: read cfg_file and set variables
-#===============================================================================
-sub read_configfile {
- my $cfg;
- if( defined( $cfg_file) && ( length($cfg_file) > 0 )) {
- if( -r $cfg_file ) {
- $cfg = Config::IniFiles->new( -file => $cfg_file );
- } else {
- print STDERR "Couldn't read config file!";
- }
- } else {
- $cfg = Config::IniFiles->new() ;
- }
- foreach my $section (keys %cfg_defaults) {
- foreach my $param (keys %{$cfg_defaults{ $section }}) {
- my $pinfo = $cfg_defaults{ $section }{ $param };
- ${@$pinfo[ 0 ]} = $cfg->val( $section, $param, @$pinfo[ 1 ] );
- }
- }
-}
-
-#=== FUNCTION ================================================================
-# NAME: logging
-# PARAMETERS: level - string - default 'info'
-# msg - string -
-# facility - string - default 'LOG_DAEMON'
-# RETURNS: nothing
-# DESCRIPTION: function for logging
-#===============================================================================
-sub daemon_log {
- my( $msg, $level ) = @_;
- if(not defined $msg) { return }
- if(not defined $level) { $level = 1 }
- if(defined $log_file){
- open(LOG_HANDLE, ">>$log_file");
- if(not defined open( LOG_HANDLE, ">>$log_file" )) {
- print STDERR "cannot open $log_file: $!";
- return }
- chomp($msg);
- if($level <= $verbose){
- print LOG_HANDLE $msg."\n";
- if(defined $foreground) { print $msg."\n" }
- }
- }
- close( LOG_HANDLE );
-# my ($msg, $level, $facility) = @_;
-# if(not defined $msg) {return}
-# if(not defined $level) {$level = "info"}
-# if(not defined $facility) {$facility = "LOG_DAEMON"}
-# openlog($0, "pid,cons,", $facility);
-# syslog($level, $msg);
-# closelog;
-# return;
-}
-
-#=== FUNCTION ================================================================
-# NAME: check_cmdline_param
-# PARAMETERS: nothing
-# RETURNS: nothing
-# DESCRIPTION: validates commandline parameter
-#===============================================================================
-sub check_cmdline_param () {
- my $err_config;
- my $err_counter = 0;
- if( not defined( $cfg_file)) {
- my $cwd = getcwd;
- my $name = "/etc/gosa/gosa-si-bus.conf";
- $cfg_file = File::Spec->catfile( $cwd, $name );
- print STDERR "no conf file specified\n try to use default: $cfg_file\n";
- }
- if( $err_counter > 0 ) {
- &usage( "", 1 );
- if( defined( $err_config)) { print STDERR "$err_config\n"}
- print STDERR "\n";
- exit( -1 );
- }
-}
-
-#=== FUNCTION ================================================================
-# NAME: check_pid
-# PARAMETERS: nothing
-# RETURNS: nothing
-# DESCRIPTION: handels pid processing
-#===============================================================================
-sub check_pid {
- $pid = -1;
- # Check, if we are already running
- if( open(LOCK_FILE, "<$pid_file") ) {
- $pid = <LOCK_FILE>;
- if( defined $pid ) {
- chomp( $pid );
- if( -f "/proc/$pid/stat" ) {
- my($stat) = `cat /proc/$pid/stat` =~ m/$pid \((.+)\).*/;
- if( $0 eq $stat ) {
- close( LOCK_FILE );
- exit -1;
- }
- }
- }
- close( LOCK_FILE );
- unlink( $pid_file );
- }
-
- # create a syslog msg if it is not to possible to open PID file
- if (not sysopen(LOCK_FILE, $pid_file, O_WRONLY|O_CREAT|O_EXCL, 0644)) {
- my($msg) = "Couldn't obtain lockfile '$pid_file' ";
- if (open(LOCK_FILE, '<', $pid_file)
- && ($pid = <LOCK_FILE>))
- {
- chomp($pid);
- $msg .= "(PID $pid)\n";
- } else {
- $msg .= "(unable to read PID)\n";
- }
- if( ! ($foreground) ) {
- openlog( $0, "cons,pid", "daemon" );
- syslog( "warning", $msg );
- closelog();
- }
- else {
- print( STDERR " $msg " );
- }
- exit( -1 );
- }
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: usage
-# PARAMETERS: nothing
-# RETURNS: nothing
-# DESCRIPTION: print out usage text to STDERR
-#===============================================================================
-sub usage {
- print STDERR << "EOF" ;
-usage: $0 [-hvf] [-c config]
-
- -h : this (help) message
- -c <file> : config file
- -f : foreground, process will not be forked to background
- -v : be verbose (multiple to increase verbosity)
-EOF
- print "\n" ;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: sig_int_handler
-# PARAMETERS: signal - string - signal arose from system
-# RETURNS: noting
-# DESCRIPTION: handels tasks to be done befor signal becomes active
-#===============================================================================
-sub sig_int_handler {
- my ($signal) = @_;
- if($bus){
- close($bus);
- print "$bus closed\n";
- }
- print "$signal\n";
- IPC::Shareable->clean_up;
- exit(1);
-}
-$SIG{INT} = \&sig_int_handler;
-
-
-#=== FUNCTION ================================================================
-# NAME: get_ip_and_mac
-# PARAMETERS: nothing
-# RETURNS: (ip, mac)
-# DESCRIPTION: executes /sbin/ifconfig and parses the output, the first occurence
-# of a inet address is returned as well as the mac address in the line
-# above the inet address
-#===============================================================================
-sub get_ip_and_mac {
- my $ip = "0.0.0.0.0"; # Defualt-IP
- my $mac_address = "00:00:00:00:00:00"; # Default-MAC
- my @ifconfig = qx(/sbin/ifconfig);
- foreach(@ifconfig) {
- if (/Hardware Adresse (\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2})/) {
- $mac_address = "$1:$2:$3:$4:$5:$6";
- next;
- }
- if (/inet Adresse:(\d+).(\d+).(\d+).(\d+)/) {
- $ip = "$1.$2.$3.$4";
- last;
- }
- }
- return ($ip, $mac_address);
-}
-
-
-
-#=== FUNCTION ================================================================
-# NAME: activating_child
-# PARAMETERS: msg - string - incoming message
-# host - string - host from which the incomming message comes
-# RETURNS: nothing
-# DESCRIPTION: handels the distribution of incoming messages to working childs
-#===============================================================================
-sub activating_child {
- my ($msg, $host) = @_;
- my $child = &get_processing_child();
- my $pipe_wr = $$child{'pipe_wr'};
- daemon_log("activating: childpid: $$child{'pid'}", 5);
- print $pipe_wr $msg.".".$host."\n";
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: get_processing_child
-# PARAMETERS: nothing
-# RETURNS: child - hash - holding the process id and the references to the pipe
-# handles pipe_wr and pipe_rd
-# DESCRIPTION: handels the forking, reactivating and keeping alive tasks
-#===============================================================================
-sub get_processing_child {
- my $child;
- # checking %busy_child{pipe_wr} if msg is 'done', then set child from busy to free
- while(my ($key, $val) = each(%busy_child)) {
- # check wether process still exists
- my $exitus_pid = waitpid($key, WNOHANG);
- if($exitus_pid != 0) {
- delete $busy_child{$key};
- daemon_log( "prozess:$key wurde aus busy_child entfernt\n", 5);
- next;
- }
-
- # check wether process sitll works
- my $fh = $$val{'pipe_rd'};
- $fh->blocking(0);
- my $child_answer;
- if(not $child_answer = <$fh>) { next }
- chomp($child_answer);
- if($child_answer eq "done") {
- delete $busy_child{$key};
- $free_child{$key} = $val;
- }
- }
-
- while(my ($key, $val) = each(%free_child)) {
- my $exitus_pid = waitpid($key, WNOHANG);
- if($exitus_pid != 0) {
- delete $free_child{$key};
- daemon_log( "prozess:$key wurde aus free_child entfernt\n", 5);
- }
- daemon_log("free child:$key\n", 5);
- }
- # check @free_child and @busy_child
- my $free_len = scalar(keys(%free_child));
- my $busy_len = scalar(keys(%busy_child));
- daemon_log("free children $free_len, busy children $busy_len\n",5);
-
- # if there is a free child, let the child work
- if($free_len > 0){
- my @keys = keys(%free_child);
- $child = $free_child{$keys[0]};
- if(defined $child) {
- $busy_child{$$child{'pid'}} = $child ;
- delete $free_child{$$child{'pid'}};
- }
- return $child;
- }
-
- # no free child, try to fork another one
- if($free_len + $busy_len < $child_max) {
-
- daemon_log("not enough children, create a new one\n",5);
-
- # New pipes for communication
- my( $PARENT_wr, $PARENT_rd );
- my( $CHILD_wr, $CHILD_rd );
- pipe( $CHILD_rd, $PARENT_wr );
- pipe( $PARENT_rd, $CHILD_wr );
- $PARENT_wr->autoflush(1);
- $CHILD_wr->autoflush(1);
-
- ############
- # fork child
- ############
- my $child_pid = fork();
-
- #CHILD
- if($child_pid == 0) {
- # Close unused pipes
- close( $CHILD_rd );
- close( $CHILD_wr );
- while( 1 ) {
- my $rbits = "";
- vec( $rbits, fileno $PARENT_rd , 1 ) = 1;
-
- # waiting child_timeout for jobs to do
- my $nf = select($rbits, undef, undef, $child_timeout);
- if($nf < 0 ) {
- # if $nf < 1, error handling
- die "select(): $!\n";
- } elsif (! $nf) {
- # if already child_min childs are alive, then leave loop
- $free_len = scalar(keys(%free_child));
- $busy_len = scalar(keys(%busy_child));
- if($free_len + $busy_len >= $child_min) {
- last;
- } else {
- redo;
- }
- }
-
- # a job for a child arise
- if ( vec $rbits, fileno $PARENT_rd, 1 ) {
- # read everything from pipe
- my $msg = "";
- $PARENT_rd->blocking(0);
- while(1) {
- my $read = <$PARENT_rd>;
- if(not defined $read) { last}
- $msg .= $read;
- }
-
- # forward the job msg to another function
- &process_incoming_msg($msg);
- daemon_log("processing of msg finished", 5);
-
- # important!!! wait until child says 'done', until then child is set from busy to free
- print $PARENT_wr "done";
- redo;
- }
- }
- # childs leaving the loop are allowed to die
- exit(0);
-
- #PARENT
- } else {
- # Close unused pipes
- close( $PARENT_rd );
- close( $PARENT_wr );
- # add child to child alive hash
- my %child_hash = (
- 'pid' => $child_pid,
- 'pipe_wr' => $CHILD_wr,
- 'pipe_rd' => $CHILD_rd,
- );
-
- $child = \%child_hash;
- $busy_child{$$child{'pid'}} = $child;
- return $child;
- }
- }
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: process_incoming_msg
-# PARAMETERS: crypted_msg - string - incoming crypted message
-# RETURNS: nothing
-# DESCRIPTION: handels the proceeded distribution to the appropriated functions
-#===============================================================================
-sub process_incoming_msg {
- my ($crypted_msg) = @_;
- if(not defined $crypted_msg) {
- daemon_log("function 'process_incoming_msg': got no msg", 7);
- return;
- }
- $crypted_msg =~ /^([\s\S]*?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)$/;
- $crypted_msg = $1;
- my $host = sprintf("%s.%s.%s.%s", $2, $3, $4, $5);
-
- daemon_log("msg from host:\n\t$host", 1);
- daemon_log("crypted_msg:\n\t$crypted_msg", 7);
-
- my @valid_keys;
- my @daemon_keys = keys %$known_daemons;
- foreach my $daemon_key (@daemon_keys) {
- if($daemon_key =~ "^$daemon_key") {
- push(@valid_keys, $daemon_key);
- }
- }
-
- my $l = @valid_keys;
- daemon_log("number of valid daemons: $l\n", 7);
-
- my ($msg, $msg_hash);
- my $msg_flag = 0;
-
- # collect addresses from possible incoming clients
- foreach my $host_key (@valid_keys) {
- eval{
- daemon_log( "daemon: $host_key\n", 7);
- my $key_passwd = $known_daemons->{$host_key}->{passwd};
- daemon_log("daemon_passwd: $key_passwd\n", 7);
- my $key_cipher = &create_ciphering($key_passwd);
- $msg = &decrypt_msg($crypted_msg, $key_cipher);
- daemon_log("daemon decrypted msg:$msg", 7);
- $msg_hash = $xml->XMLin($msg, ForceArray=>1);
- };
- if($@) {
- daemon_log("msg processing raise error", 7);
- daemon_log("error string: $@", 7);
- $msg_flag += 1;
- } else {
- last;
- }
- }
-
- if($msg_flag >= $l) {
- daemon_log("\nERROR: do not understand the message:\n$msg" , 1);
- return;
- }
-
- my $header = &get_content_from_xml_hash($msg_hash, "header");
- my $target = &get_content_from_xml_hash($msg_hash, "target");
-
- daemon_log("header from msg:\n\t$header", 1);
- daemon_log("msg to process:\n\t$msg", 5);
- daemon_log("msg is for: \n\t$target", 7);
-
- if($target eq $bus_address) {
- # msg is for bus
- if($header eq 'here_i_am'){ &here_i_am($msg_hash)}
- elsif($header eq 'confirm_new_passwd'){ &confirm_new_passwd($msg_hash)}
- elsif($header eq 'got_ping') { &got_ping($msg_hash)}
- elsif($header eq 'ping') { &ping($msg_hash)}
- elsif($header eq 'who_has') { &who_has($msg_hash)}
- elsif($header eq 'new_client') { &new_client($msg_hash)}
- elsif($header eq 'delete_client') { &delete_client($msg_hash)}
- } else {
- # msg is for any other server
- my @targets = @{$msg_hash->{target}};
- my $len_targets = @targets;
-
- if ($len_targets == 0){
- # no targets specified
-
- daemon_log("ERROR: no target specified for msg $header", 1);
-
- } elsif ($targets[0] eq "*"){
- # all deamons in known_daemons are targets
-
- my $target = $targets[0];
- my $source = @{$msg_hash->{source}}[0];
- my @target_addresses = keys(%$known_daemons);
- foreach my $target_address (@target_addresses) {
- if ($target_address eq $source) { next; }
- if ($target_address eq $bus_address) { next ; }
- $msg_hash->{target} = [$target_address];
- &send_msg_hash2address($msg_hash, $target_address);
- }
-
- } else {
- # a list of targets is specified
-
- my $target_address;
- foreach $target_address (@targets) {
- if (exists $known_daemons->{$target_address}) {
- &send_msg_hash2address($msg_hash, $target_address);
- } else {
- my @daemon_addresses = keys %$known_daemons;
- my $daemon_address;
- foreach $daemon_address (@daemon_addresses) {
- if (exists $known_daemons->{$daemon_address}->{clients}->{$target_address}) {
- my $header = &get_content_from_xml_hash($msg_hash, "header");
- &send_msg_hash2address($msg_hash, $daemon_address);
- daemon_log("bus forwards msg $header for client $target_address to server $daemon_address", 3);
- last;
- }
- }
-
- }
- }
- }
- }
-
- &print_known_daemons_hash();
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: get_content_of_known_daemons
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-#sub get_content_of_known_daemons {
-# my ($host, $content) = @_;
-# return;
-#}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_passwd
-# PARAMETERS: nothing
-# RETURNS: new_passwd - string
-# DESCRIPTION: creates a 32 bit long random passwd out of "a".."z","A".."Z",0..9
-#===============================================================================
-sub create_passwd {
- my $new_passwd = "";
- for(my $i=0; $i<31; $i++) {
- $new_passwd .= ("a".."z","A".."Z",0..9)[int(rand(62))]
- }
- return $new_passwd;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_ciphering
-# PARAMETERS: passwd - string - used to create ciphering
-# RETURNS: cipher - object
-# DESCRIPTION: creates a Crypt::Rijndael::MODE_CBC object with passwd as key
-#===============================================================================
-sub create_ciphering {
- my ($passwd) = @_;
- $passwd = substr(md5_hex("$passwd") x 32, 0, 32);
- my $iv = substr(md5_hex('GONICUS GmbH'),0, 16);
-
- #daemon_log("iv: $iv", 7);
- #daemon_log("key: $passwd", 7);
- my $my_cipher = Crypt::Rijndael->new($passwd , Crypt::Rijndael::MODE_CBC());
- $my_cipher->set_iv($iv);
- return $my_cipher;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: encrypt_msg
-# PARAMETERS: msg - string - message to encrypt
-# my_cipher - ref - reference to a Crypt::Rijndael object
-# RETURNS: crypted_msg - string - crypted message
-# DESCRIPTION: crypts the incoming message with the Crypt::Rijndael module
-#===============================================================================
-sub encrypt_msg {
- my ($msg, $my_cipher) = @_;
- if(not defined $my_cipher) { print "no cipher object\n"; }
- $msg = "\0"x(16-length($msg)%16).$msg;
- my $crypted_msg = $my_cipher->encrypt($msg);
- chomp($crypted_msg = &encode_base64($crypted_msg));
- return $crypted_msg;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: decrypt_msg
-# PARAMETERS: crypted_msg - string - message to decrypt
-# my_cipher - ref - reference to a Crypt::Rijndael object
-# RETURNS: msg - string - decrypted message
-# DESCRIPTION: decrypts the incoming message with the Crypt::Rijndael module
-#===============================================================================
-sub decrypt_msg {
- my ($crypted_msg, $my_cipher) = @_ ;
- $crypted_msg = &decode_base64($crypted_msg);
- my $msg = $my_cipher->decrypt($crypted_msg);
- $msg =~ s/^\0*//g;
- return $msg;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_xml_hash
-# PARAMETERS: header - string - message header (required)
-# source - string - where the message come from (required)
-# target - string - where the message should go to (required)
-# [header_value] - string - something usefull (optional)
-# RETURNS: hash - hash - nomen est omen
-# DESCRIPTION: creates a key-value hash, all values are stored in a array
-#===============================================================================
-sub create_xml_hash {
- my ($header, $source, $target, $header_value) = @_ ;
-
- if (not defined $header || not defined $source || not defined $target) {
- daemon_log("ERROR: create_xml_hash function is invoked with uncompleted parameters", 7);
- }
-
- my $hash = {
- header => [$header],
- source => [$source],
- target => [$target],
- $header => [$header_value],
- };
- #daemon_log("create_xml_hash:", 7),
- #chomp(my $tmp = Dumper $hash);
- #daemon_log("\t$tmp\n", 7);
- return $hash
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_xml_string
-# PARAMETERS: xml_hash - hash - hash from function create_xml_hash
-# RETURNS: xml_string - string - xml string representation of the hash
-# DESCRIPTION: transform the hash to a string using XML::Simple module
-#===============================================================================
-sub create_xml_string {
- my ($xml_hash) = @_ ;
- my $xml_string = $xml->XMLout($xml_hash, RootName => 'xml');
- $xml_string =~ s/[\n]+//g;
- return $xml_string;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: add_content2xml_hash
-# PARAMETERS: xml_ref - ref - reference to a hash from function create_xml_hash
-# element - string - key for the hash
-# content - string - value for the hash
-# RETURNS: nothing
-# DESCRIPTION: add key-value pair to xml_ref, if key alread exists, then append value to list
-#===============================================================================
-sub add_content2xml_hash {
- my ($xml_ref, $element, $content) = @_;
- if(not exists $$xml_ref{$element} ) {
- $$xml_ref{$element} = [];
- }
- my $tmp = $$xml_ref{$element};
- push(@$tmp, $content);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: get_content_from_xml_hash
-# PARAMETERS: xml_ref - ref - reference of the xml hash
-# element - string - key of the value you want
-# RETURNS: value - string - if key is either header, target or source
-# value - list - for all other keys in xml hash
-# DESCRIPTION:
-#===============================================================================
-sub get_content_from_xml_hash {
- my ($xml_ref, $element) = @_;
- my $result = $xml_ref->{$element};
- if( $element eq "header" || $element eq "target" || $element eq "source") {
- return @$result[0];
- }
- return @$result;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: open_socket
-# PARAMETERS: PeerAddr - string - something like 192.168.1.1 or 192.168.1.1:10000
-# [PeerPort] - string - necessary if port not appended by PeerAddr
-# RETURNS: socket - IO::Socket::INET
-# DESCRIPTION: open a socket to PeerAddr
-#===============================================================================
-sub open_socket {
- my ($PeerAddr, $PeerPort) = @_ ;
- if(defined($PeerPort)){
- $PeerAddr = $PeerAddr.":".$PeerPort;
- }
- my $socket;
- $socket = new IO::Socket::INET(PeerAddr => $PeerAddr ,
- Porto => "tcp" ,
- Type => SOCK_STREAM,
- Reuse => 1,
- Timeout => 5,
- );
- if(not defined $socket) {
- return;
- }
- return $socket;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: read_from_socket
-# PARAMETERS: socket - fh - filehandel to read from
-# RETURNS: result - string - readed characters from socket
-# DESCRIPTION: reads data from socket in 16 byte steps
-#===============================================================================
-sub read_from_socket {
- my ($socket) = @_;
-
- $socket->blocking(1);
- my $result = <$socket>;
- $socket->blocking(0);
- my $part_msg;
- while ($part_msg = <$socket>) {
- if (not defined $part_msg) { last; }
- $result .= $part_msg;
- }
-
- #my $result = "";
- #my $len = 16;
- #while($len == 16){
- # my $char;
- # $len = sysread($socket, $char, 16);
- # if($len != 16) { last }
- # if($len != 16) { last }
- # $result .= $char;
- #}
- return $result;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: send_msg_hash2address
-# PARAMETERS: msg_hash - hash - xml_hash created with function create_xml_hash
-# PeerAddr string - socket address to send msg
-# PeerPort string - socket port, if not included in socket address
-# RETURNS: nothing
-# DESCRIPTION: ????
-#===============================================================================
-sub send_msg_hash2address {
- my ($msg_hash, $address) = @_ ;
-
- # fetch header for logging
- my $header = &get_content_from_xml_hash($msg_hash, "header");
-
- # generate xml string
- my $msg_xml = &create_xml_string($msg_hash);
-
- # fetch the appropriated passwd from hash
- my $passwd = $known_daemons->{$address}->{passwd};
-
- # create a ciphering object
- my $act_cipher = &create_ciphering($passwd);
-
- # encrypt xml msg
- my $crypted_msg = &encrypt_msg($msg_xml, $act_cipher);
-
- # open socket
- my $socket = &open_socket($address);
- if(not defined $socket){
- daemon_log("ERROR: cannot send '$header'-msg to $address , server not reachable", 1);
- return;
- }
-
- # send xml msg
- print $socket $crypted_msg."\n";
-
- close $socket;
- daemon_log("send '$header'-msg to $address", 5);
- daemon_log("crypted_msg:\n\t$crypted_msg", 7);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: send_msg_hash2all
-# PARAMETERS: msg_hash - hash - xml_hash created with function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: send msg_hash to all registered daemons
-#===============================================================================
-sub send_msg_hash2all {
- my ($msg_hash) = @_;
-
- # fetch header for logging
- my $header = &get_content_from_xml_hash($msg_hash, "header");
-
- # generate xml string
- my $msg_xml = &create_xml_string($msg_hash);
-
- # fetch a list of all target addresses
- my @targets = keys(%$known_daemons);
-
- # itterates through the list an send each the msg
- foreach my $target (@targets) {
- if($target eq $bus_address) {next}; # do not send msg to bus
-
- # fetch the appropriated passwd
- my $passwd = $known_daemons->{$target}->{passwd};
-
- # create ciphering object
- my $act_cipher = &create_ciphering($passwd);
-
- # encrypt xml msg
- my $crypted_msg = &encrypt_msg($msg_xml, $act_cipher);
-
- # open socket
- my $socket = &open_socket($target);
- if(not defined $socket){
- daemon_log("ERROR: cannot open socket to $target , server not reachable", 1);
- &update_known_daemons_entry(hostname=>$target, status=>"down");
- next;
- }
-
- # send xml msg
- print $socket $crypted_msg."\n";
-
- close $socket;
- daemon_log("send '$header'-msg to $target", 5);
- daemon_log("crypted_msg:\n\t$crypted_msg", 7);
- }
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: here_i_am
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process the incoming msg 'here_i_am'
-#===============================================================================
-sub here_i_am {
- my ($msg_hash) = @_ ;
- my $source = &get_content_from_xml_hash($msg_hash, "source");
-
- my $new_passwd = &create_passwd();
-
- # create known_daemons entry
- &create_known_daemons_entry($source);
- &update_known_daemons_entry(hostname=>$source, status=>"registered", passwd=>$bus_passwd);
-
- # create outgoing msg
- my $out_hash = &create_xml_hash("new_passwd", "$bus_ip:$bus_port", $source, $new_passwd);
- &send_msg_hash2address($out_hash, $source);
-
- # change passwd, reason
- # &send_msg_hash2address takes $known_daemons->{"$source"}->{passwd} to cipher msg
- &update_known_daemons_entry(hostname=>$source, status=>"new_passwd", passwd=>$new_passwd);
-
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: confirm_new_passwd
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-sub confirm_new_passwd {
- my ($msg_hash) = @_ ;
- my $source = &get_content_from_xml_hash($msg_hash, "source");
- &update_known_daemons_entry(hostname=>$source, status=>"confirmed_new_passwd");
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: ping
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-sub ping {
- my ($msg_hash) = @_ ;
- my $source = &get_content_from_xml_hash($msg_hash, "source");
- &update_known_daemons_entry(hostname=>$source, status=>"ping");
- my $out_hash = &create_xml_hash("got_ping", $bus_address, $source);
- &send_msg_hash2address($out_hash, $source);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: make ping
-# PARAMETERS: address - string - address which should be pinged
-# RETURNS: nothing
-# DESCRIPTION: send ping message to address
-#===============================================================================
-sub make_ping {
- my ($address) = @_;
- daemon_log("ping:$address\n", 1);
- my $out_hash = &create_xml_hash("ping", "$bus_ip:$bus_port", $address);
- &send_msg_hash2address($out_hash, $address);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: got_ping
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-sub got_ping {
- my ($msg_hash) = @_;
- my $source = &get_content_from_xml_hash($msg_hash, "source");
- &update_known_daemons_entry(hostname=>$source, status=>"got_ping");
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: new_client
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-sub new_client {
- my ($msg_hash) = @_ ;
- my $source = &get_content_from_xml_hash($msg_hash, "source");
- my $header = &get_content_from_xml_hash($msg_hash, "header");
- my $new_client = (&get_content_from_xml_hash($msg_hash, $header))[0];
-
- &update_known_daemons_entry(hostname=>$source, client=>$new_client);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: delete_client
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-sub delete_client {
- my ($msg_hash) = @_ ;
- my $source = &get_content_from_xml_hash($msg_hash, "source");
- my $header = &get_content_from_xml_hash($msg_hash, "header");
- my $del_client = (&get_content_from_xml_hash($msg_hash, $header))[0];
-
- if (not exists $known_daemons->{$source}->{$del_client}) {
- daemon_log
- }
- delete $known_daemons->{$source}->{$del_client};
-
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: print_known_daemons_hash
-# PARAMETERS: nothing
-# RETURNS: nothing
-# DESCRIPTION: nome est omen
-#===============================================================================
-sub print_known_daemons_hash {
- my ($tmp) = @_;
- print "####################################\n";
- print "# status of known_daemons\n";
- my $hosts;
- my $host_hash;
- $shmkh->shlock(LOCK_EX);
- my @hosts = keys %$known_daemons;
- foreach my $host (@hosts) {
- my $status = $known_daemons->{$host}->{status} ;
- my $passwd = $known_daemons->{$host}->{passwd};
- my $timestamp = $known_daemons->{$host}->{timestamp};
- my @clients = keys %{$known_daemons->{$host}->{clients}};
- my $client_string = join(", ", @clients);
- print "$host\n";
- print "\tstatus: $status\n";
- print "\tpasswd: $passwd\n";
- print "\ttimestamp: $timestamp\n";
- print "\tclients: $client_string\n";
-
- }
- $shmkh->shunlock(LOCK_EX);
- print "####################################\n\n";
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_known_daemons_entry
-# PARAMETERS: hostname - string - ip address and port of host
-# RETURNS: nothing
-# DESCRIPTION: nome est omen
-#===============================================================================
-sub create_known_daemons_entry {
- my ($hostname) = @_;
- $shmkh->shlock(LOCK_EX);
- $known_daemons->{$hostname} = {};
- $known_daemons->{$hostname}->{status} = "none";
- $known_daemons->{$hostname}->{passwd} = "none";
- $known_daemons->{$hostname}->{timestamp} = "none";
- $known_daemons->{$hostname}->{clients} = {};
- $shmkh->shunlock(LOCK_EX);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: update_known_daemons_entry
-# PARAMETERS: hostname - string - ip address and port of host (required)
-# status - string - (optional)
-# passwd - string - (optional)
-# client - string - ip address and port of client (optional)
-# RETURNS: nothing
-# DESCRIPTION: nome est omen and updates each time the timestamp of hostname
-#===============================================================================
-sub update_known_daemons_entry {
- my $arg = {
- hostname => undef, status => undef, passwd => undef,
- client => undef,
- @_ };
- my $hostname = $arg->{hostname};
- my $status = $arg->{status};
- my $passwd = $arg->{passwd};
- my $client = $arg->{client};
-
- if (not defined $hostname) {
- daemon_log("ERROR: function add_content2known_daemons is not invoked with requiered parameter 'hostname'", 1);
- return;
- }
-
- my ($seconds, $minutes, $hours, $monthday, $month,
- $year, $weekday, $yearday, $sommertime) = localtime(time);
- $hours = $hours < 10 ? $hours = "0".$hours : $hours;
- $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
- $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
- $month+=1;
- $month = $month < 10 ? $month = "0".$month : $month;
- $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
- $year+=1900;
- my $t = "$year$month$monthday$hours$minutes$seconds";
-
- $shmkh->shlock(LOCK_EX);
- if (defined $status) {
- $known_daemons->{$hostname}->{status} = $status;
- }
- if (defined $passwd) {
- $known_daemons->{$hostname}->{passwd} = $passwd;
- }
- if (defined $client) {
- $known_daemons->{$hostname}->{clients}->{$client} = "";
- }
- $known_daemons->{$hostname}->{timestamp} = $t;
- $shmkh->shunlock(LOCK_EX);
- return;
-}
-
-
-#==== MAIN = main ==============================================================
-
-# parse commandline options
-Getopt::Long::Configure( "bundling" );
-GetOptions("h|help" => \&usage,
- "c|config=s" => \$cfg_file,
- "f|foreground" => \$foreground,
- "v|verbose+" => \$verbose,
- );
-
-# read and set config parameters
-&check_cmdline_param ;
-&read_configfile;
-&check_pid;
-
-$SIG{CHLD} = 'IGNORE';
-
-# restart daemon log file
-if(-e $log_file ) { unlink $log_file }
-daemon_log("$0 started!");
-
-# Just fork, if we"re not in foreground mode
-if( ! $foreground ) { $pid = fork(); }
-else { $pid = $$; }
-
-# Do something useful - put our PID into the pid_file
-if( 0 != $pid ) {
- open( LOCK_FILE, ">$pid_file" );
- print LOCK_FILE "$pid\n";
- close( LOCK_FILE );
- if( !$foreground ) { exit( 0 ) };
-}
-
-# detect own ip and mac address
-($bus_ip, $bus_mac_address) = &get_ip_and_mac();
-if (not defined $bus_ip) {
- die "EXIT: ip address of $0 could not be detected";
-}
-daemon_log("bus ip address detected: $bus_ip", 1);
-daemon_log("bus mac address detected: $bus_mac_address", 1);
-
-
-# setup xml parser
-$xml = new XML::Simple();
-
-# create cipher object
-$bus_cipher = &create_ciphering($bus_passwd);
-$bus_address = "$bus_ip:$bus_port";
-
-# create reading and writing vectors
-my $rbits = my $wbits = my $ebits = "";
-
-# open the bus socket
-if($bus_activ eq "on") {
- $bus = IO::Socket::INET->new(LocalPort => $bus_port,
- Type => SOCK_STREAM,
- Reuse => 1,
- Listen => 20,
- ) or die "kann kein TCP-Server an Port $bus_port sein: $@\n";
- vec($rbits, fileno $bus, 1) = 1;
- vec($wbits, fileno $bus, 1) = 1;
- print "start bus at $bus_ip:$bus_port\n";
-}
-
-# add bus to known_daemons
-&create_known_daemons_entry($bus_address);
-&update_known_daemons_entry(hostname=>$bus_address, status=>"bus", passwd=>$bus_passwd);
-
-
-while(1) {
- my $nf = select($rbits, $wbits, undef, undef);
- # error handling
- if($nf < 0 ) {
- }
-
- # something is coming in
- if(vec $rbits, fileno $bus, 1 ) {
- my $client = $bus->accept();
- my $other_end = getpeername($client);
- if(not defined $other_end) {
- daemon_log("Gegenstelle konnte nicht identifiziert werden: $!\n");
- } else {
- my ($port, $iaddr) = unpack_sockaddr_in($other_end);
- my $actual_ip = inet_ntoa($iaddr);
- daemon_log("\naccept client from $actual_ip\n", 5);
- my $in_msg = &read_from_socket($client);
- if(defined $in_msg){
- &activating_child($in_msg, $actual_ip);
- } else {
- daemon_log("cannot read from $actual_ip\n",1);
- }
- }
- close($client);
- }
-
-}
-
-
diff --git a/gosa-si/daemon/gosa-si-bus.conf-template b/gosa-si/daemon/gosa-si-bus.conf-template
+++ /dev/null
@@ -1,13 +0,0 @@
-[general]
-log_file = /var/log/gosa-si-bus.log
-pid_file = /var/run/gosa-si-bus.pid
-child_max = 10
-child_min = 2
-child_timeout = 10
-
-[bus]
-bus_activ = on
-bus_passwd = secret-bus-password
-bus_ip = 127.0.0.1
-bus_port = 20080
-
diff --git a/gosa-si/daemon/gosa-si-client b/gosa-si/daemon/gosa-si-client
+++ /dev/null
@@ -1,1109 +0,0 @@
-#!/usr/bin/perl
-#===============================================================================
-#
-# FILE: gosa-server
-#
-# USAGE: ./gosasc
-#
-# DESCRIPTION:
-#
-# OPTIONS: ---
-# REQUIREMENTS: ---
-# BUGS: ---
-# NOTES:
-# AUTHOR: (Andreas Rettenberger), <rettenberger@gonicus.de>
-# COMPANY:
-# VERSION: 1.0
-# CREATED: 12.09.2007 08:54:41 CEST
-# REVISION: ---
-#===============================================================================
-
-use strict;
-use warnings;
-use Getopt::Long;
-use Config::IniFiles;
-use POSIX;
-use Time::HiRes qw( gettimeofday );
-
-use Fcntl;
-use IO::Socket::INET;
-use Crypt::Rijndael;
-use MIME::Base64;
-use Digest::MD5 qw(md5 md5_hex md5_base64);
-use XML::Simple;
-use Data::Dumper;
-use Sys::Syslog qw( :DEFAULT setlogsock);
-use File::Spec;
-use Cwd;
-use GosaSupportDaemon;
-
-
-my ($cfg_file, %cfg_defaults, $foreground, $verbose, $pid_file, $procid, $pid, $log_file);
-my ($server_address, $server_ip, $server_port, $server_domain, $server_passwd, $server_cipher, $server_timeout);
-my ($client_address, $client_ip, $client_port, $client_mac_address);
-my ($input_socket, $rbits, $wbits, $ebits, $xml, $known_hosts);
-my (@events);
-
-# default variables
-my $event_dir = "/etc/gosac/events";
-$known_hosts = {};
-$foreground = 0 ;
-%cfg_defaults =
-("general" =>
- {"log_file" => [\$log_file, "/var/run/".$0.".log"],
- "pid_file" => [\$pid_file, "/var/run/".$0.".pid"],
- },
-"client" =>
- {"client_port" => [\$client_port, "20083"],
- },
-"server" =>
- {"server_ip" => [\$server_ip, ""],
- "server_port" => [\$server_port, "20081"],
- "server_passwd" => [\$server_passwd, ""],
- "server_timeout" => [\$server_timeout, 10],
- "server_domain" => [\$server_domain, ""],
- },
- );
-
-
-#=== FUNCTION ================================================================
-# NAME: read_configfile
-# PARAMETERS: cfg_file - string -
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub read_configfile {
- my $cfg;
- if( defined( $cfg_file) && ( length($cfg_file) > 0 )) {
- if( -r $cfg_file ) {
- $cfg = Config::IniFiles->new( -file => $cfg_file );
- } else {
- print STDERR "Couldn't read config file!";
- }
- } else {
- $cfg = Config::IniFiles->new() ;
- }
- foreach my $section (keys %cfg_defaults) {
- foreach my $param (keys %{$cfg_defaults{ $section }}) {
- my $pinfo = $cfg_defaults{ $section }{ $param };
- ${@$pinfo[ 0 ]} = $cfg->val( $section, $param, @$pinfo[ 1 ] );
- }
- }
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: logging
-# PARAMETERS: level - string - default 'info'
-# msg - string -
-# facility - string - default 'LOG_DAEMON'
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub daemon_log {
- my( $msg, $level ) = @_;
- if(not defined $msg) { return }
- if(not defined $level) { $level = 1 }
- if(defined $log_file){
- open(LOG_HANDLE, ">>$log_file");
- if(not defined open( LOG_HANDLE, ">>$log_file" )) {
- print STDERR "cannot open $log_file: $!";
- return }
- chomp($msg);
- if($level <= $verbose){
- print LOG_HANDLE $msg."\n";
- if(defined $foreground) { print $msg."\n" }
- }
- }
- close( LOG_HANDLE );
-# my ($msg, $level, $facility) = @_;
-# if(not defined $msg) {return}
-# if(not defined $level) {$level = "info"}
-# if(not defined $facility) {$facility = "LOG_DAEMON"}
-# openlog($0, "pid,cons,", $facility);
-# syslog($level, $msg);
-# closelog;
-# return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: check_cmdline_param
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub check_cmdline_param () {
- my $err_config;
- my $err_counter = 0;
- if( not defined( $cfg_file)) {
- #$err_config = "please specify a config file";
- #$err_counter += 1;
- my $cwd = getcwd;
- my $name = "/etc/gosa/gosa-si-client.conf";
- $cfg_file = File::Spec->catfile( $cwd, $name );
- print STDERR "no conf file specified\n try to use default: $cfg_file\n";
- }
- if( $err_counter > 0 ) {
- &usage( "", 1 );
- if( defined( $err_config)) { print STDERR "$err_config\n"}
- print STDERR "\n";
- exit( -1 );
- }
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: check_pid
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub check_pid {
- $pid = -1;
- # Check, if we are already running
- if( open(LOCK_FILE, "<$pid_file") ) {
- $pid = <LOCK_FILE>;
- if( defined $pid ) {
- chomp( $pid );
- if( -f "/proc/$pid/stat" ) {
- my($stat) = `cat /proc/$pid/stat` =~ m/$pid \((.+)\).*/;
- if( $0 eq $stat ) {
- close( LOCK_FILE );
- exit -1;
- }
- }
- }
- close( LOCK_FILE );
- unlink( $pid_file );
- }
-
- # create a syslog msg if it is not to possible to open PID file
- if (not sysopen(LOCK_FILE, $pid_file, O_WRONLY|O_CREAT|O_EXCL, 0644)) {
- my($msg) = "Couldn't obtain lockfile '$pid_file' ";
- if (open(LOCK_FILE, '<', $pid_file)
- && ($pid = <LOCK_FILE>))
- {
- chomp($pid);
- $msg .= "(PID $pid)\n";
- } else {
- $msg .= "(unable to read PID)\n";
- }
- if( ! ($foreground) ) {
- openlog( $0, "cons,pid", "daemon" );
- syslog( "warning", $msg );
- closelog();
- }
- else {
- print( STDERR " $msg " );
- }
- exit( -1 );
- }
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: get_ip_and_mac
-# PARAMETERS: nothing
-# RETURNS: (ip, mac)
-# DESCRIPTION: executes /sbin/ifconfig and parses the output, the first occurence
-# of a inet address is returned as well as the mac address in the line
-# above the inet address
-#===============================================================================
-sub get_ip_and_mac {
- my $ip = "0.0.0.0.0"; # Defualt-IP
- my $mac = "00:00:00:00:00:00"; # Default-MAC
- my @ifconfig = qx(/sbin/ifconfig);
- foreach(@ifconfig) {
- if (/Hardware Adresse (\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2})/) {
- $mac = "$1:$2:$3:$4:$5:$6";
- next;
- }
- if (/inet Adresse:(\d+).(\d+).(\d+).(\d+)/) {
- $ip = "$1.$2.$3.$4";
- last;
- }
- }
- return ($ip, $mac);
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: usage
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub usage {
- my( $text, $help ) = @_;
- $text = undef if( "h" eq $text );
- (defined $text) && print STDERR "\n$text\n";
- if( (defined $help && $help) || (!defined $help && !defined $text) ) {
- print STDERR << "EOF" ;
-usage: $0 [-hvf] [-c config]
-
- -h : this (help) message
- -c <file> : config file
- -f : foreground, process will not be forked to background
- -v : be verbose (multiple to increase verbosity)
-EOF
- }
- print "\n" ;
-}
-
-#=== FUNCTION ================================================================
-# NAME: get_server_addresses
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub get_server_addresses {
- my $domain= shift;
- my @result;
- my $dig_cmd= 'dig +nocomments srv _gosad._tcp.'.$domain;
-
- my $output= `$dig_cmd 2>&1`;
- open (PIPE, "$dig_cmd 2>&1 |");
- while(<PIPE>) {
- chomp $_;
- # If it's not a comment
- if($_ =~ m/^[^;]/) {
- my @matches= split /\s+/;
-
- # Push hostname with port
- if($matches[3] eq 'SRV') {
- push @result, $matches[7].':'.$matches[6];
- } elsif ($matches[3] eq 'A') {
- my $i=0;
-
- # Substitute the hostname with the ip address of the matching A record
- foreach my $host (@result) {
- if ((split /\:/, $host)[0] eq $matches[0]) {
- $result[$i]= $matches[4].':'.(split /\:/, $host)[1];
- }
- $i++;
- }
- }
- }
- }
- close(PIPE);
- return @result;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: register_at_server
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub register_at_server {
- my ($tmp) = @_;
-
- # create new passwd and ciphering object for client-server communication
- my $new_server_passwd = &create_passwd();
- my $new_server_cipher;
-
- # detect all client accepted events
- opendir(DIR, $event_dir)
- or daemon_log("cannot find directory $event_dir!\ngosac starts without any accepting events!", 1);
- my $file_name;
- @events = ();
- while(defined($file_name = readdir(DIR))){
- if ($file_name eq "." || $file_name eq "..") {
- next;
- }
- push(@events, $file_name);
- }
- my $events = join(",", @events);
- daemon_log("found events: $events", 1);
-
- # fill in all possible servers
- my @servers;
- if (defined $server_domain) {
- my @tmp_servers = &get_server_addresses($server_domain);
- foreach my $server (@tmp_servers) { unshift(@servers, $server); }
- }
- # add server address from config file at first position of server list
- if (defined $server_address) {
- unshift(@servers, $server_address);
- }
- daemon_log("found servers in configuration file and via DNS:", 5);
- foreach my $server (@servers) {
- daemon_log("\t$server", 5);
- }
-
- my ($rout, $wout, $reg_server);
- foreach my $server (@servers) {
- # create msg hash
- my $register_hash = &create_xml_hash("here_i_am", $client_address, $server);
- &add_content2xml_hash($register_hash, "new_passwd", $new_server_passwd);
- &add_content2xml_hash($register_hash, "client_mac_address", $client_mac_address);
- &add_content2xml_hash($register_hash, "events", $events);
-
- # send xml hash to server with general server passwd
- my $answer = &send_msg_hash2address($register_hash, $server, $server_passwd);
-
- # sending fails, no sens to wait for response
- if ($answer ne "done") { next; }
-
- # waiting for response
- daemon_log("waiting for response...\n", 5);
- my $nf = select($rout=$rbits, $wout=$wbits, undef, $server_timeout);
-
- # something is coming in
- if(vec $rout, fileno $input_socket, 1) {
- my $crypted_msg;
- my $client = $input_socket->accept();
- my $other_end = getpeername($client);
- if(not defined $other_end) {
- daemon_log("client cannot be identified: $!\n");
- } else {
- my ($port, $iaddr) = unpack_sockaddr_in($other_end);
- my $actual_ip = inet_ntoa($iaddr);
- daemon_log("\naccept client from $actual_ip\n", 5);
- my $in_msg = &read_from_socket($client);
- if(defined $in_msg){
- chomp($in_msg);
- $crypted_msg = $in_msg;
- } else {
- daemon_log("cannot read from $actual_ip\n", 5);
- }
- }
- close($client);
-
- # validate acknowledge msg from server
- $new_server_cipher = &create_ciphering($new_server_passwd);
- my $msg_hash;
- eval {
- my $decrypted_msg = &decrypt_msg($crypted_msg, $new_server_cipher);
- daemon_log("decrypted register msg: $decrypted_msg", 5);
- $msg_hash = $xml->XMLin($decrypted_msg, ForceArray=>1);
- };
- if($@) {
- daemon_log("ERROR: do not understand the incoming message:" , 5);
- daemon_log("$@", 7);
- } else {
- my $header = &get_content_from_xml_hash($msg_hash, "header");
- if($header eq "registered") {
- $reg_server = $server;
- last;
- } elsif($header eq "denied") {
- my $reason = (&get_content_from_xml_hash($msg_hash, "denied"))[0];
- daemon_log("registration at $server denied: $reason", 1);
- } else {
- daemon_log("cannot register at $server", 1);
- }
- }
- }
- # kommt antwort nicht, dann probiere es mit dem nächsten in der liste
-
- }
-
- if(defined $reg_server) {
- daemon_log("registered at $reg_server", 1);
- } else {
- daemon_log("cannot register at any server", 1);
- daemon_log("exiting!!!", 1);
- exit(1);
- }
-
- # update the global available variables
- $server_address = $reg_server;
- $server_passwd = $new_server_passwd;
- $server_cipher = $new_server_cipher;
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_xml_hash
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub create_xml_hash {
- my ($header, $source, $target, $header_value) = @_;
- my $hash = {
- header => [$header],
- source => [$source],
- target => [$target],
- $header => [$header_value],
- };
- daemon_log("create_xml_hash:", 7),
- chomp(my $tmp = Dumper $hash);
- daemon_log("\t$tmp\n", 7);
- return $hash
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_xml_string
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub create_xml_string {
- my ($xml_hash) = @_ ;
- my $xml_string = $xml->XMLout($xml_hash, RootName => 'xml');
- $xml_string =~ s/[\n]+//g;
- daemon_log("create_xml_string:\n\t$xml_string\n", 7);
- return $xml_string;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: add_content2xml_hash
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub add_content2xml_hash {
- my ($xml_ref, $element, $content) = @_;
- if(not exists $$xml_ref{$element} ) {
- $$xml_ref{$element} = [];
- }
- my $tmp = $$xml_ref{$element};
- push(@$tmp, $content);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: get_content_from_xml_hash
-# PARAMETERS: ref : reference to the xml hash
-# string: key of the value you want
-# RETURNS: STRING AND ARRAY
-# DESCRIPTION: if key of the hash is either 'header', 'target' or 'source' the
-# function returns a string cause it is expected that these keys
-# do just have one value, all other keys returns an array!!!
-#===============================================================================
-sub get_content_from_xml_hash {
- my ($xml_ref, $element) = @_;
- my $result = $xml_ref->{$element};
- if( $element eq "header" || $element eq "target" || $element eq "source") {
- return @$result[0];
- }
- return @$result;
-}
-
-# my ($xml_ref, $element) = @_;
-# if (exists $xml_ref->{$element}) {
-# my $result = $xml_ref->{$element};
-# if( $element eq "header" || $element eq "target" || $element eq "source") {
-# return @$result[0];
-# } else {
-# return @$result;
-# }
-#
-# } else {
-# my $result = ();
-# return @$result;
-# }
-#}
-
-
-#=== FUNCTION ================================================================
-# NAME: encrypt_msg
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub encrypt_msg {
- my ($msg, $my_cipher) = @_;
- if(not defined $my_cipher) { print "no cipher object\n"; }
- $msg = "\0"x(16-length($msg)%16).$msg;
- my $crypted_msg = $my_cipher->encrypt($msg);
- chomp($crypted_msg = &encode_base64($crypted_msg));
- return $crypted_msg;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: decrypt_msg
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub decrypt_msg {
- my ($crypted_msg, $my_cipher) = @_ ;
- $crypted_msg = &decode_base64($crypted_msg);
- my $msg = $my_cipher->decrypt($crypted_msg);
- $msg =~ s/\0*//g;
- return $msg;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_ciphering
-# PARAMETERS:
-# RETURNS: cipher object
-# DESCRIPTION:
-#===============================================================================
-sub create_ciphering {
- my ($passwd) = @_;
- $passwd = substr(md5_hex("$passwd") x 32, 0, 32);
- my $iv = substr(md5_hex('GONICUS GmbH'),0, 16);
-
- #daemon_log("iv: $iv", 7);
- #daemon_log("key: $passwd", 7);
- my $my_cipher = Crypt::Rijndael->new($passwd , Crypt::Rijndael::MODE_CBC());
- $my_cipher->set_iv($iv);
- return $my_cipher;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_passwd
-# PARAMETERS:
-# RETURNS: cipher object
-# DESCRIPTION:
-#===============================================================================
-sub create_passwd {
- my $new_passwd = "";
- for(my $i=0; $i<31; $i++) {
- $new_passwd .= ("a".."z","A".."Z",0..9)[int(rand(62))]
- }
-
- return $new_passwd;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: send_msg_hash2address
-# PARAMETERS: msg string - xml message
-# PeerAddr string - socket address to send msg
-# PeerPort string - socket port, if not included in socket address
-# RETURNS: nothing
-# DESCRIPTION: ????
-#===============================================================================
-sub send_msg_hash2address {
- my ($msg_hash, $address, $passwd) = @_ ;
-
- # fetch header for logging
- my $header = @{$msg_hash->{header}}[0];
-
- # generiere xml string
- my $msg_xml = &create_xml_string($msg_hash);
-
- # hole das entsprechende passwd aus dem hash
- if(not defined $passwd) {
- if(exists $known_hosts->{$address}) {
- $passwd = $known_hosts->{$address}->{passwd};
- } elsif ($address eq $server_address) {
- $passwd = $server_passwd;
- } else {
- daemon_log("$address not known, neither as server nor as client", 1);
- return "failed";
- }
- }
-
- # erzeuge ein ciphering object
- my $act_cipher = &create_ciphering($passwd);
-
- # encrypt xml msg
- my $crypted_msg = &encrypt_msg($msg_xml, $act_cipher);
-
- # öffne socket
- my $socket = &open_socket($address);
- if(not defined $socket){
- daemon_log("cannot open socket to $address, server not reachable", 1);
- daemon_log("cannot send '$header'-msg", 1);
- return "failed";
- }
-
- # versende xml msg
- print $socket $crypted_msg."\n";
-
- # schließe socket
- close $socket;
-
- daemon_log("send '$header'-msg to $address", 5);
- daemon_log("crypted_msg:\n\t$crypted_msg", 7);
-
- return "done";
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: open_socket
-# PARAMETERS: PeerAddr string something like 192.168.1.1 or 192.168.1.1:10000
-# [PeerPort] string necessary if port not appended by PeerAddr
-# RETURNS: socket IO::Socket::INET
-# DESCRIPTION:
-#===============================================================================
-sub open_socket {
- my ($PeerAddr, $PeerPort) = @_ ;
- if(defined($PeerPort)){
- $PeerAddr = $PeerAddr.":".$PeerPort;
- }
- my $socket;
- $socket = new IO::Socket::INET(PeerAddr => $PeerAddr ,
- Porto => "tcp" ,
- Type => SOCK_STREAM,
- Timeout => 5,
- );
- if(not defined $socket) {
- #daemon_log("cannot connect to socket at $PeerAddr, $@\n");
- return;
- }
- daemon_log("open_socket:\n\t$PeerAddr", 7);
- return $socket;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: read_from_socket
-# PARAMETERS: socket fh -
-# RETURNS: result string - readed characters from socket
-# DESCRIPTION: reads data from socket in 16 byte steps
-#===============================================================================
-sub read_from_socket {
- my ($socket) = @_;
- my $result = "";
-
- $socket->blocking(1);
- $result = <$socket>;
-
- $socket->blocking(0);
- while ( my $char = <$socket> ) {
- if (not defined $char) { last }
- $result .= $char;
- }
- return $result;
-
-
-
-# my ($socket) = @_;
-# my $result = "";
-# my $len = 16;
-# while($len == 16){
-# my $char;
-# $len = sysread($socket, $char, 16);
-# if($len != 16) { last }
-# if($len != 16) { last }
-# $result .= $char;
-# }
-# return $result;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: print_known_hosts_hash
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub print_known_hosts_hash {
- my ($tmp) = @_;
- print "####################################\n";
- print "# status of known_hosts\n";
- my $hosts;
- my $host_hash;
- my @hosts = keys %$known_hosts;
- foreach my $host (@hosts) {
- #my @elements = keys %$known_hosts->{$host};
- my $status = $known_hosts->{$host}->{status} ;
- my $passwd = $known_hosts->{$host}->{passwd};
- my $timestamp = $known_hosts->{$host}->{timestamp};
- print "$host\n";
- print "\t$status\n";
- print "\t$passwd\n";
- print "\t$timestamp\n";
- }
- print "####################################\n";
- return;
-}
-
-#=== FUNCTION ================================================================
-# NAME:
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub create_known_hosts_entry {
- my ($hostname) = @_;
- $known_hosts->{$hostname} = {};
- $known_hosts->{$hostname}->{status} = "none";
- $known_hosts->{$hostname}->{passwd} = "none";
- $known_hosts->{$hostname}->{timestamp} = "none";
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME:
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub update_known_hosts_entry {
- my ($hostname, $status, $passwd, $timestamp) = @_;
- my ($seconds, $minutes, $hours, $monthday, $month,
- $year, $weekday, $yearday, $sommertime) = localtime(time);
- $hours = $hours < 10 ? $hours = "0".$hours : $hours;
- $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
- $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
- $month+=1;
- $month = $month < 10 ? $month = "0".$month : $month;
- $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
- $year+=1900;
- my $t = "$year$month$monthday$hours$minutes$seconds";
-
- if($status) {
- $known_hosts->{$hostname}->{status} = $status;
- }
- if($passwd) {
- $known_hosts->{$hostname}->{passwd} = $passwd;
- }
- if($timestamp) {
- $t = $timestamp;
- }
- $known_hosts->{$hostname}->{timestamp} = $t;
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME:
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub add_content2known_hosts {
- my ($hostname, $element, $content) = @_;
- my ($seconds, $minutes, $hours, $monthday, $month,
- $year, $weekday, $yearday, $sommertime) = localtime(time);
- $hours = $hours < 10 ? $hours = "0".$hours : $hours;
- $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
- $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
- $month+=1;
- $month = $month < 10 ? $month = "0".$month : $month;
- $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
- $year+=1900;
- my $t = "$year$month$monthday$hours$minutes$seconds";
-
- $known_hosts->{$hostname}->{$element} = $content;
- $known_hosts->{$hostname}->{timestamp} = $t;
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME:
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub process_incoming_msg {
- my ($crypted_msg) = @_;
- if(not defined $crypted_msg) {
- daemon_log("function 'process_incoming_msg': got no msg", 7);
- }
- $crypted_msg =~ /^([\s\S]*?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)$/;
- $crypted_msg = $1;
- my $host = sprintf("%s.%s.%s.%s", $2, $3, $4, $5);
- daemon_log("msg from host:", 1);
- daemon_log("\t$host", 1);
- daemon_log("crypted msg:", 7);
- daemon_log("\t$crypted_msg", 7);
-
- my $act_cipher = &create_ciphering($server_passwd);
-
- # try to decrypt incoming msg
- my ($msg, $msg_hash);
- eval{
- $msg = &decrypt_msg($crypted_msg, $act_cipher);
- $msg_hash = $xml->XMLin($msg, ForceArray=>1);
- };
- if($@) {
- daemon_log("ERROR: incoming msg cannot be decrypted with server passwd", 1);
- return;
- }
-
- my $header = &get_content_from_xml_hash($msg_hash, "header");
-
- daemon_log("header from msg:", 1);
- daemon_log("\t$header", 1);
- daemon_log("msg to process:", 7);
- daemon_log("\t$msg", 7);
-
- #check whether msg to process is a event
- opendir(DIR, $event_dir)
- or daemon_log("cannot find directory $event_dir, no events specified", 5);
- my $file_name;
- while(defined($file_name = readdir(DIR))){
- if ($file_name eq "." || $file_name eq "..") {
- next;
- }
- if ($file_name eq $header) {
- my $cmd = "$event_dir/$file_name '$msg'";
- my $result_xml = "";
- open(PIPE, "$cmd 2>&1 |");
- while(<PIPE>) {
- $result_xml.=$_;
- last;
- }
- close(PIPE);
- my $res_hash = &transform_msg2hash($result_xml);
- my $res_target = @{$res_hash->{target}}[0];
- &send_msg_hash2address($res_hash, $server_address);
-
- return;
- }
- }
- close(DIR);
- daemon_log("could not assign the msg $header to an event", 5);
-
-
-
- if ($header eq 'new_ldap_config') { &new_ldap_config($msg_hash)}
- elsif ($header eq 'ping') { &got_ping($msg_hash) }
- elsif ($header eq 'wake_up') { &execute_event($msg_hash)}
- elsif ($header eq 'new_passwd') { &new_passwd()}
- else { daemon_log("ERROR: no function assigned to msg $header", 5) }
-
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME:
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub update_status {
- my ($new_status) = @_ ;
- my $out_hash = &create_xml_hash("update_status", $client_address, $server_address);
- &add_content2xml_hash($out_hash, "update_status", $new_status);
- &send_msg_hash2address($out_hash, $server_address);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME:
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub server_leaving {
- my ($msg_hash) = @_ ;
- my $source = &get_content_from_xml_hash("source");
- my $header = &get_content_from_xml_hash("header");
-
- daemon_log("gosa daemon $source is going down, cause registration procedure", 1);
- my $server_address = "none";
- my $server_passwd = "none";
- my $server_cipher = "none";
-
- # reinitialization of default values in config file
- &read_configfile;
-
- # registrated at new daemon
- ®ister_at_server();
-
- return;
-}
-
-
-sub got_ping {
- my ($msg_hash) = @_ ;
-
- my $source = &get_content_from_xml_hash($msg_hash, 'source');
- my $target = &get_content_from_xml_hash($msg_hash, 'target');
- my $header = &get_content_from_xml_hash($msg_hash, 'header');
-
- &add_content2known_hosts(hostname=>$target, status=>$header);
-
- my $out_hash = &create_xml_hash("got_ping", $target, $source);
- &send_msg_hash2address($out_hash, $source, $server_passwd);
-
- return;
-}
-
-
-sub new_ldap_config {
- my ($msg_hash) = @_ ;
-
- my @gotoLdapServer = &get_content_from_xml_hash($msg_hash, "new_ldap_config");
- print Dumper @gotoLdapServer;
-
-
- return;
-
-}
-
-
-sub execute_event {
- my ($msg_hash)= @_;
- my $configdir= '/etc/gosac/events/';
- my $result;
-
- my $header = &get_content_from_xml_hash($msg_hash, 'header');
- my $source = &get_content_from_xml_hash($msg_hash, 'source');
- my $target = &get_content_from_xml_hash($msg_hash, 'target');
-
-
- if((not defined $source)
- && (not defined $target)
- && (not defined $header)) {
- daemon_log("ERROR: Entries missing in XML msg for gosa events under /etc/gosac/events");
- } else {
- my $parameters="";
- my @params = &get_content_from_xml_hash($msg_hash, $header);
- my $params = join(", ", @params);
- daemon_log("execute_event: got parameters: $params", 5);
-
- if (@params) {
- foreach my $param (@params) {
- my $param_value = (&get_content_from_xml_hash($msg_hash, $param))[0];
- daemon_log("execute_event: parameter -> value: $param -> $param_value", 7);
- $parameters.= " ".$param_value;
- }
- }
-
- my $cmd= $configdir.$header."$parameters";
- daemon_log("execute_event: executing cmd: $cmd", 7);
- $result= "";
- open(PIPE, "$cmd 2>&1 |");
- while(<PIPE>) {
- $result.=$_;
- }
- close(PIPE);
- }
-
- # process the event result
-
-
- return;
-}
-
-
-sub new_passwd {
- # my ($msg_hash) = @_ ;
- my $new_server_passwd = &create_passwd();
- my $new_server_cipher = &create_ciphering($new_server_passwd);
-
- my $out_hash = &create_xml_hash("new_passwd", $client_address, $server_address, $new_server_passwd);
-
- &send_msg_hash2address($out_hash, $server_address, $server_passwd);
-
- $server_passwd = $new_server_passwd;
- $server_cipher = $new_server_cipher;
- return;
-}
-
-
-
-
-#==== MAIN = main ==============================================================
-
-# parse commandline options
-Getopt::Long::Configure( "bundling" );
-GetOptions("h|help" => \&usage,
- "c|config=s" => \$cfg_file,
- "f|foreground" => \$foreground,
- "v|verbose+" => \$verbose,
- );
-
-# read and set config parameters
-&check_cmdline_param ;
-&read_configfile;
-&check_pid;
-
-# restart daemon log file
-if(-e $log_file ) { unlink $log_file }
-daemon_log("started!");
-
-# Just fork, if we"re not in foreground mode
-if( ! $foreground ) { $pid = fork(); }
-else { $pid = $$; }
-
-# Do something useful - put our PID into the pid_file
-if( 0 != $pid ) {
- open( LOCK_FILE, ">$pid_file" );
- print LOCK_FILE "$pid\n";
- close( LOCK_FILE );
- if( !$foreground ) { exit( 0 ) };
-}
-
-# detect own ip and mac address
-($client_ip, $client_mac_address) = &get_ip_and_mac();
-if (not defined $client_ip) {
- die "EXIT: ip address of $0 could not be detected";
-}
-daemon_log("client ip address detected: $client_ip", 1);
-daemon_log("client mac address detected: $client_mac_address", 1);
-
-# prepare variables
-if (defined $server_ip && defined $server_port) {
- $server_address = $server_ip.":".$server_port;
-}
-$client_address = $client_ip.":".$client_port;
-
-# setup xml parser
-$xml = new XML::Simple();
-
-# create input socket
-$rbits = $wbits = $ebits = "";
-$input_socket = IO::Socket::INET->new(LocalPort => $client_port,
- Type => SOCK_STREAM,
- Reuse => 1,
- Listen => 20,
- );
-if(not defined $input_socket){
- daemon_log("cannot be a tcp server at $client_port : $@\n");
-} else {
- daemon_log("start server:\n\t$server_ip:$client_port",1) ;
- vec($rbits, fileno $input_socket, 1) = 1;
- vec($wbits, fileno $input_socket, 1) = 1;
-}
-
-# register at server
-®ister_at_server();
-
-
-##############
-# Debugging
-#############
-#sleep(2);
-#&update_status("ich_bin_ein_neuer_status");
-
-###################################
-#everything ready, okay, lets start
-###################################
-while(1) {
- my ($rout, $wout);
- my $nf = select($rout=$rbits, $wout=$wbits, undef, undef);
-
- # error handling
- if($nf < 0 ) {
- }
-
- # something is coming in
- if(vec $rout, fileno $input_socket, 1) {
- my $client = $input_socket->accept();
- my $other_end = getpeername($client);
-
- if(not defined $other_end) {
- daemon_log("client cannot be identified: $!");
- } else {
- my ($port, $iaddr) = unpack_sockaddr_in($other_end);
- my $actual_ip = inet_ntoa($iaddr);
- daemon_log("accept client from $actual_ip", 5);
- my $in_msg = &read_from_socket($client);
- if(defined $in_msg){
- chomp($in_msg);
- $in_msg = $in_msg.".".$actual_ip;
- &process_incoming_msg($in_msg);
-
- }
- }
- }
-}
-
-
-
-
diff --git a/gosa-si/daemon/gosa-si-client.conf-template b/gosa-si/daemon/gosa-si-client.conf-template
+++ /dev/null
@@ -1,13 +0,0 @@
-[general]
-log_file = /var/log/gosa-si-client.log
-pid_file = /var/run/gosa-si-client.pid
-
-[client]
-client_port = 20083
-
-[server]
-server_ip = 127.0.0.1
-server_port = 20081
-server_passwd = secret-server-password
-server_timeout = 5
-server_domain = intranet.gonicus.de
diff --git a/gosa-si/daemon/gosa-si-server b/gosa-si/daemon/gosa-si-server
+++ /dev/null
@@ -1,2025 +0,0 @@
-#!/usr/bin/perl
-#===============================================================================
-#
-# FILE: gosa-sd
-#
-# USAGE: ./gosa-sd
-#
-# DESCRIPTION:
-#
-# OPTIONS: ---
-# REQUIREMENTS: libconfig-inifiles-perl libcrypt-rijndael-perl libxml-simple-perl libipc-shareable-perl libdata-dumper-simple-perl
-# BUGS: ---
-# NOTES:
-# AUTHOR: (Andreas Rettenberger), <rettenberger@gonicus.de>
-# COMPANY:
-# VERSION: 1.0
-# CREATED: 12.09.2007 08:54:41 CEST
-# REVISION: ---
-#===============================================================================
-
-
-use strict;
-use warnings;
-use Getopt::Long;
-use Config::IniFiles;
-use POSIX;
-use Time::HiRes qw( gettimeofday );
-
-use Fcntl;
-use IO::Socket::INET;
-use Crypt::Rijndael;
-use MIME::Base64;
-use Digest::MD5 qw(md5 md5_hex md5_base64);
-use XML::Simple;
-use Data::Dumper;
-use Sys::Syslog qw( :DEFAULT setlogsock);
-use Cwd;
-use File::Spec;
-use IPC::Shareable qw( :lock);
-IPC::Shareable->clean_up_all;
-
-use lib "/etc/gosad/modules";
-my $modules_path = "/etc/gosad/modules";
-
-my ($cfg_file, %cfg_defaults, $foreground, $verbose, $ping_timeout, $no_bus);
-my ($bus, $msg_to_bus, $bus_cipher);
-my ($server, $server_mac_address, $server_events);
-my ($gosa_server);
-my ($known_daemons, $shmda, $known_clients, $shmcl, $known_modules);
-my ($max_clients);
-my ($pid_file, $procid, $pid, $log_file);
-my (%free_child, %busy_child, $child_max, $child_min, %child_alive_time, $child_timeout);
-my ($arp_activ, $arp_fifo, $arp_fifo_path, $no_arp);
-
-# variables declared in config file are always set to 'our'
-our (%cfg_defaults, $log_file, $pid_file,
- $bus_activ, $bus_passwd, $bus_ip, $bus_port,
- $server_activ, $server_ip, $server_port, $server_passwd, $max_clients,
- $arp_activ, $arp_fifo_path,
- $gosa_activ, $gosa_passwd, $gosa_ip, $gosa_port, $gosa_timeout,
-);
-
-# additional variable which should be globaly accessable
-our $xml;
-our $server_address;
-our $bus_address;
-our $gosa_address;
-
-# specifies the verbosity of the daemon_log
-$verbose = 0 ;
-
-# if foreground is not null, script will be not forked to background
-$foreground = 0 ;
-
-# specifies the timeout seconds while checking the online status of a registrating client
-$ping_timeout = 5;
-
-$no_bus = 0;
-
-$no_arp = 0;
-
-# holds all other gosa-sd as well as the gosa-sd-bus
-our $known_daemons = {};
-our $shmda = tie($known_daemons, 'IPC::Shareable', undef, {create => 1,
- exclusive => 1,
- mode => 0666,
- destroy => 1,
- });
-# holds all registrated clients
-our $known_clients = {};
-our $shmcl = tie($known_clients, 'IPC::Shareable', undef, {create => 1,
- exclusive => 1,
- mode => 0666,
- destroy => 1,
- });
-
-
-%cfg_defaults =
-("general" =>
- {"log_file" => [\$log_file, "/var/run/".$0.".log"],
- "pid_file" => [\$pid_file, "/var/run/".$0.".pid"],
- "child_max" => [\$child_max, 10],
- "child_min" => [\$child_min, 3],
- "child_timeout" => [\$child_timeout, 180],
- },
-"bus" =>
- {"bus_activ" => [\$bus_activ, "on"],
- "bus_passwd" => [\$bus_passwd, ""],
- "bus_ip" => [\$bus_ip, ""],
- "bus_port" => [\$bus_port, "20080"],
- },
-"server" =>
- {"server_activ" => [\$server_activ, "on"],
- "server_ip" => [\$server_ip, ""],
- "server_port" => [\$server_port, "20081"],
- "server_passwd" => [\$server_passwd, ""],
- "max_clients" => [\$max_clients, 100],
- },
-"arp" =>
- {"arp_activ" => [\$arp_activ, "on"],
- "arp_fifo_path" => [\$arp_fifo_path, "/var/run/gosa-si/arp-notify"],
- },
-"gosa" =>
- {"gosa_activ" => [\$gosa_activ, "on"],
- "gosa_ip" => [\$gosa_ip, ""],
- "gosa_port" => [\$gosa_port, "20082"],
- "gosa_passwd" => [\$gosa_passwd, "none"],
- },
- );
-
-
-#=== FUNCTION ================================================================
-# NAME: usage
-# PARAMETERS: nothing
-# RETURNS: nothing
-# DESCRIPTION: print out usage text to STDERR
-#===============================================================================
-sub usage {
- print STDERR << "EOF" ;
-usage: $0 [-hvf] [-c config]
-
- -h : this (help) message
- -c <file> : config file
- -f : foreground, process will not be forked to background
- -v : be verbose (multiple to increase verbosity)
-EOF
- print "\n" ;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: read_configfile
-# PARAMETERS: cfg_file - string -
-# RETURNS: nothing
-# DESCRIPTION: read cfg_file and set variables
-#===============================================================================
-sub read_configfile {
- my $cfg;
- if( defined( $cfg_file) && ( length($cfg_file) > 0 )) {
- if( -r $cfg_file ) {
- $cfg = Config::IniFiles->new( -file => $cfg_file );
- } else {
- print STDERR "Couldn't read config file!";
- }
- } else {
- $cfg = Config::IniFiles->new() ;
- }
- foreach my $section (keys %cfg_defaults) {
- foreach my $param (keys %{$cfg_defaults{ $section }}) {
- my $pinfo = $cfg_defaults{ $section }{ $param };
- ${@$pinfo[ 0 ]} = $cfg->val( $section, $param, @$pinfo[ 1 ] );
- }
- }
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: logging
-# PARAMETERS: level - string - default 'info'
-# msg - string -
-# facility - string - default 'LOG_DAEMON'
-# RETURNS: nothing
-# DESCRIPTION: function for logging
-#===============================================================================
-sub daemon_log {
-# log into log_file
- my( $msg, $level ) = @_;
- if(not defined $msg) { return }
- if(not defined $level) { $level = 1 }
- if(defined $log_file){
- open(LOG_HANDLE, ">>$log_file");
- if(not defined open( LOG_HANDLE, ">>$log_file" )) {
- print STDERR "cannot open $log_file: $!";
- return }
- chomp($msg);
- if($level <= $verbose){
- print LOG_HANDLE "$level $msg\n";
- if(defined $foreground) { print $msg."\n" }
- }
- }
- close( LOG_HANDLE );
-#log into syslog
-# my ($msg, $level, $facility) = @_;
-# if(not defined $msg) {return}
-# if(not defined $level) {$level = "info"}
-# if(not defined $facility) {$facility = "LOG_DAEMON"}
-# openlog($0, "pid,cons,", $facility);
-# syslog($level, $msg);
-# closelog;
-# return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: check_cmdline_param
-# PARAMETERS: nothing
-# RETURNS: nothing
-# DESCRIPTION: validates commandline parameter
-#===============================================================================
-sub check_cmdline_param () {
- my $err_config;
- my $err_counter = 0;
- if( not defined( $cfg_file)) {
- #$err_config = "please specify a config file";
- #$err_counter += 1;
- my $cwd = getcwd;
- my $name = "/etc/gosa/gosa-si-server.conf";
- $cfg_file = File::Spec->catfile( $cwd, $name );
- print STDERR "no conf file specified\n try to use default: $cfg_file\n";
- }
- if( $err_counter > 0 ) {
- &usage( "", 1 );
- if( defined( $err_config)) { print STDERR "$err_config\n"}
- print STDERR "\n";
- exit( -1 );
- }
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: check_pid
-# PARAMETERS: nothing
-# RETURNS: nothing
-# DESCRIPTION: handels pid processing
-#===============================================================================
-sub check_pid {
- $pid = -1;
- # Check, if we are already running
- if( open(LOCK_FILE, "<$pid_file") ) {
- $pid = <LOCK_FILE>;
- if( defined $pid ) {
- chomp( $pid );
- if( -f "/proc/$pid/stat" ) {
- my($stat) = `cat /proc/$pid/stat` =~ m/$pid \((.+)\).*/;
- if( $0 eq $stat ) {
- close( LOCK_FILE );
- exit -1;
- }
- }
- }
- close( LOCK_FILE );
- unlink( $pid_file );
- }
-
- # create a syslog msg if it is not to possible to open PID file
- if (not sysopen(LOCK_FILE, $pid_file, O_WRONLY|O_CREAT|O_EXCL, 0644)) {
- my($msg) = "Couldn't obtain lockfile '$pid_file' ";
- if (open(LOCK_FILE, '<', $pid_file)
- && ($pid = <LOCK_FILE>))
- {
- chomp($pid);
- $msg .= "(PID $pid)\n";
- } else {
- $msg .= "(unable to read PID)\n";
- }
- if( ! ($foreground) ) {
- openlog( $0, "cons,pid", "daemon" );
- syslog( "warning", $msg );
- closelog();
- }
- else {
- print( STDERR " $msg " );
- }
- exit( -1 );
- }
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: get_ip_and_mac
-# PARAMETERS: nothing
-# RETURNS: (ip, mac)
-# DESCRIPTION: executes /sbin/ifconfig and parses the output, the first occurence
-# of a inet address is returned as well as the mac address in the line
-# above the inet address
-#===============================================================================
-sub get_ip_and_mac {
- my $ip = "0.0.0.0.0"; # Defualt-IP
- my $mac = "00:00:00:00:00:00"; # Default-MAC
- my @ifconfig = qx(/sbin/ifconfig);
- foreach(@ifconfig) {
- if (/Hardware Adresse (\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2})/) {
- $mac = "$1:$2:$3:$4:$5:$6";
- next;
- }
- if (/inet Adresse:(\d+).(\d+).(\d+).(\d+)/) {
- $ip = "$1.$2.$3.$4";
- last;
- }
- }
- return ($ip, $mac);
-}
-
-
-
-#=== FUNCTION ================================================================
-# NAME: import_modules
-# PARAMETERS: module_path - string - abs. path to the directory the modules are stored
-# RETURNS: nothing
-# DESCRIPTION: each file in module_path which ends with '.pm' is imported by "require 'file';"
-#===============================================================================
-sub import_modules {
- daemon_log(" ", 1);
-
- if (not -e $modules_path) {
- daemon_log("ERROR: cannot find directory or directory is not readable: $modules_path", 1);
- }
-
- opendir (DIR, $modules_path) or die "ERROR while loading modules from directory $modules_path : $!\n";
- while (defined (my $file = readdir (DIR))) {
- if (not $file =~ /(\S*?).pm$/) {
- next;
- }
- eval { require $file; };
- if ($@) {
- daemon_log("ERROR: gosa-sd could not load module $file", 1);
- daemon_log("$@", 5);
- next;
- }
- my $mod_name = $1;
- my $module_tag_hash = eval( $mod_name.'::get_module_tags()' );
- $known_modules->{$mod_name} = $module_tag_hash;
-
- daemon_log("load module $mod_name", 1);
- }
-
- # for debugging
- #while ( my ($module, $tag_hash) = each(%$known_modules)) {
- # print "\tmodule: $module"."\n";
- # print "\ttags: ".join(", ", keys(%$tag_hash))."\n";
- #}
- close (DIR);
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: register_at_bus
-# PARAMETERS: nothing
-# RETURNS: nothing
-# DESCRIPTION: creates an entry in known_daemons and send a 'here_i_am' msg to bus
-#===============================================================================
-sub register_at_bus {
-
- # create known_daemons entry
- &create_known_daemon($bus_address);
- &add_content2known_daemons(hostname=>$bus_address, status=>"register_at_bus", passwd=>$bus_passwd);
- daemon_log("register at bus: $bus_address", 1);
-
- my $msg_hash = &create_xml_hash("here_i_am", "$server_ip:$server_port", $bus_address);
- &send_msg_hash2address($msg_hash, $bus_address);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: sig_int_handler
-# PARAMETERS: signal - string - signal arose from system
-# RETURNS: noting
-# DESCRIPTION: handels tasks to be done befor signal becomes active
-#===============================================================================
-sub sig_int_handler {
- my ($signal) = @_;
- if($server){
- close($server);
- daemon_log("daemon server closed", 1);
- }
- if( -p $arp_fifo_path ) {
- close $arp_fifo ;
- unlink($arp_fifo_path) ;
- daemon_log("ARP_FIFO closed", 1) ;
- }
-
- if($gosa_server){
- close($gosa_server);
- daemon_log("gosa server closed", 1);
- }
-
- print STDERR "$signal\n";
-
- exit(1);
-}
-$SIG{INT} = \&sig_int_handler;
-
-
-#=== FUNCTION ================================================================
-# NAME: activating_child
-# PARAMETERS: msg - string - incoming message
-# host - string - host from which the incomming message comes
-# RETURNS: nothing
-# DESCRIPTION: handels the distribution of incoming messages to working childs
-#===============================================================================
-sub activating_child {
- my ($msg, $host, $client) = @_;
- my $child = &get_processing_child();
- my $pipe_wr = $$child{'pipe_wr'};
- my $pipe_rd = $$child{'pipe_rd'};
- $$child{client_ref} = $client;
- daemon_log("activating: childpid:$$child{'pid'}", 5);
-
- print $pipe_wr $msg.".".$host."\n";
-
-# if (defined $client) {
-# my $rbits = "";
-# vec($rbits, fileno $client, 1) = 1;
-#
-# my ($rout);
-# my $nf = select($rout=$rbits, undef, undef, $gosa_timeout);
-# if($gosa_activ eq "on" && vec($rout, fileno $gosa_server, 1)) {
-#
-# }
-# }
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: get_processing_child
-# PARAMETERS: nothing
-# RETURNS: child - hash - holding the process id and the references to the pipe
-# handles pipe_wr and pipe_rd
-# DESCRIPTION: handels the forking, reactivating and keeping alive tasks
-#===============================================================================
-sub get_processing_child {
- my $child;
- # checking %busy_child{pipe_wr} if msg is 'done', then set child from busy to free
-# while(my ($key, $val) = each(%busy_child)) {
-# # test ob prozess noch existiert
-# my $exitus_pid = waitpid($key, WNOHANG);
-# if($exitus_pid != 0) {
-# delete $busy_child{$key};
-# print "prozess:$key wurde aus busy_child entfernt\n";
-# next;
-# }
-#
-# # check wether process sitll works
-# my $fh = $$val{'pipe_rd'};
-# $fh->blocking(0);
-# my $child_answer;
-# if(not $child_answer = <$fh>) { next }
-# chomp($child_answer);
-# if($child_answer eq "done") {
-# delete $busy_child{$key};
-# $free_child{$key} = $val;
-# }
-# }
-
- while(my ($key, $val) = each(%free_child)) {
- my $exitus_pid = waitpid($key, WNOHANG);
- if($exitus_pid != 0) {
- delete $free_child{$key};
- }
- daemon_log("free child:$key", 5);
- }
- # check @free_child and @busy_child
- my $free_len = scalar(keys(%free_child));
- my $busy_len = scalar(keys(%busy_child));
- daemon_log("free children $free_len, busy children $busy_len", 5);
-
- # if there is a free child, let the child work
- if($free_len > 0){
- my @keys = keys(%free_child);
- $child = $free_child{$keys[0]};
- if(defined $child) {
- $busy_child{$$child{'pid'}} = $child ;
- delete $free_child{$$child{'pid'}};
- }
- return $child;
- }
-
- # no free child, try to fork another one
- if($free_len + $busy_len < $child_max) {
-
- daemon_log("not enough children, create a new one", 5);
-
- # New pipes for communication
- my( $PARENT_wr, $PARENT_rd );
- my( $CHILD_wr, $CHILD_rd );
- pipe( $CHILD_rd, $PARENT_wr );
- pipe( $PARENT_rd, $CHILD_wr );
- $PARENT_wr->autoflush(1);
- $CHILD_wr->autoflush(1);
-
- ############
- # fork child
- ############
- my $child_pid = fork();
-
- #CHILD
- if($child_pid == 0) {
- # Close unused pipes
- close( $CHILD_rd );
- close( $CHILD_wr );
- while( 1 ) {
- my $rbits = "";
- vec( $rbits, fileno $PARENT_rd , 1 ) = 1;
- my $nf = select($rbits, undef, undef, $child_timeout);
- if($nf < 0 ) {
- die "select(): $!\n";
- } elsif (! $nf) {
- # if already child_min childs are alive, then leave loop
- $free_len = scalar(keys(%free_child));
- $busy_len = scalar(keys(%busy_child));
- if($free_len + $busy_len >= $child_min) {
- last;
- } else {
- redo;
- }
- }
-
- # a job for a child arise
- if ( vec $rbits, fileno $PARENT_rd, 1 ) {
- # read everything from pipe
- my $msg = "";
- $PARENT_rd->blocking(0);
- while(1) {
- my $read = <$PARENT_rd>;
- if(not defined $read) { last}
- $msg .= $read;
- }
-
- ######################################
- # forward msg to all imported modules
- no strict "refs";
- my $answer;
- while( my ($module, $tag_hash) = each(%$known_modules)) {
- #if(exists $known_modules->{$module}->{server_packages}) {
- my $tmp = &{ $module."::process_incoming_msg" }($msg);
- if (defined $tmp) {
- $answer = $tmp;
- }
- #}
- }
-
- &print_known_daemons();
- &print_known_clients();
-
- daemon_log("processing of msg finished", 5);
-
- if (defined $answer) {
- print $PARENT_wr $answer."\n";
- daemon_log("\t$answer", 5);
- daemon_log(" ", 5);
- } else {
- print $PARENT_wr "done"."\n";
- daemon_log(" ", 5);
- }
- redo;
- }
- }
- # childs leaving the loop are allowed to die
- exit(0);
-
-
- #PARENT
- } else {
- # Close unused pipes
- close( $PARENT_rd );
- close( $PARENT_wr );
-
- # add child to child alive hash
- my %child_hash = (
- 'pid' => $child_pid,
- 'pipe_wr' => $CHILD_wr,
- 'pipe_rd' => $CHILD_rd,
- 'client_ref' => "",
- );
-
- $child = \%child_hash;
- $busy_child{$$child{'pid'}} = $child;
- return $child;
- }
- }
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: process_incoming_msg
-# PARAMETERS: crypted_msg - string - incoming crypted message
-# RETURNS: nothing
-# DESCRIPTION: handels the proceeded distribution to the appropriated functions
-#===============================================================================
-sub process_incoming_msg {
- my ($crypted_msg) = @_;
- if(not defined $crypted_msg) {
- daemon_log("function 'process_incoming_msg': got no msg", 7);
- }
- $crypted_msg =~ /^([\s\S]*?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)$/;
- $crypted_msg = $1;
- my $host = sprintf("%s.%s.%s.%s", $2, $3, $4, $5);
- daemon_log("msg from host:", 1);
- daemon_log("\t$host", 1);
- #daemon_log("crypted msg:", 7);
- #daemon_log("\t$crypted_msg", 7);
-
- # collect addresses from possible incoming clients
- my @valid_keys;
- my @host_keys = keys %$known_daemons;
- foreach my $host_key (@host_keys) {
- if($host_key =~ "^$host") {
- push(@valid_keys, $host_key);
- }
- }
- my @client_keys = keys %$known_clients;
- foreach my $client_key (@client_keys) {
- if($client_key =~ "^$host"){
- push(@valid_keys, $client_key);
- }
- }
- push(@valid_keys, $server_address);
-
- my $l = @valid_keys;
- my ($msg, $msg_hash);
- my $msg_flag = 0;
-
- # determine the correct passwd for deciphering of the incoming msgs
- foreach my $host_key (@valid_keys) {
- eval{
- daemon_log( "key: $host_key", 7);
- my $key_passwd;
- if (exists $known_daemons->{$host_key}) {
- $key_passwd = $known_daemons->{$host_key}->{passwd};
- } elsif (exists $known_clients->{$host_key}) {
- $key_passwd = $known_clients->{$host_key}->{passwd};
- } elsif ($host_key eq $server_address) {
- $key_passwd = $server_passwd;
- }
- daemon_log("key_passwd: $key_passwd", 7);
- my $key_cipher = &create_ciphering($key_passwd);
- $msg = &decrypt_msg($crypted_msg, $key_cipher);
- $msg_hash = $xml->XMLin($msg, ForceArray=>1);
- };
- if($@) {
- daemon_log("key raise error", 7);
- $msg_flag += 1;
- } else {
- last;
- }
- }
-
- if($msg_flag >= $l) {
- daemon_log("ERROR: do not understand the message:", 1);
- daemon_log("\t$msg", 1);
- return;
- }
-
- # process incoming msg
- my $header = &get_content_from_xml_hash($msg_hash, "header");
- my $source = @{$msg_hash->{source}}[0];
-
- daemon_log("header from msg:", 1);
- daemon_log("\t$header", 1);
- daemon_log("msg to process:", 5);
- daemon_log("\t$msg", 5);
-
- my @targets = @{$msg_hash->{target}};
- my $len_targets = @targets;
- if ($len_targets == 0){
- daemon_log("ERROR: no target specified for msg $header", 1);
-
- } elsif ($len_targets == 1){
- # we have only one target symbol
-
- my $target = $targets[0];
- daemon_log("msg is for:", 7);
- daemon_log("\t$target", 7);
-
- if ($target eq $server_address) {
- # msg is for server
- if ($header eq 'new_passwd'){ &new_passwd($msg_hash)}
- elsif ($header eq 'here_i_am') { &here_i_am($msg_hash)}
- elsif ($header eq 'who_has') { &who_has($msg_hash) }
- elsif ($header eq 'who_has_i_do') { &who_has_i_do($msg_hash)}
- elsif ($header eq 'update_status') { &update_status($msg_hash) }
- #elsif ($header eq 'got_ping') { &got_ping($msg_hash)}
- elsif ($header eq 'get_load') { &execute_actions($msg_hash)}
- else { daemon_log("ERROR: no function assigned to this msg", 5) }
-
-
- } elsif ($target eq "*") {
- # msg is for all clients
-
- my @target_addresses = keys(%$known_clients);
- foreach my $target_address (@target_addresses) {
- if ($target_address eq $source) { next; }
- $msg_hash->{target} = [$target_address];
- &send_msg_hash2address($msg_hash, $target_address);
- }
- } else {
- # msg is for one client
-
- if (exists $known_clients->{$target}) {
- # target is known
-
- &send_msg_hash2address($msg_hash, $target);
- } else {
- # target is not known
-
- daemon_log("ERROR: target $target is not known in known_clients", 1);
- }
- }
- } else {
- # we have multiple target symbols
-
- my $target_string = join(", ", @targets);
- daemon_log("msg is for:", 7);
- daemon_log("\t$target_string", 7);
-
- my $target_address;
- foreach $target_address (@targets) {
- if (exists $known_clients->{$target_address}) {
- # target_address is known
-
- &send_msg_hash2address($msg_hash, $target_address);
- daemon_log("server forwards msg $header to client $target_address", 3);
- } else {
- # target is not known
-
- daemon_log("ERROR: target $target_address is not known in known_clients", 1);
- }
- }
-
-
- }
-
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: open_socket
-# PARAMETERS: PeerAddr string something like 192.168.1.1 or 192.168.1.1:10000
-# [PeerPort] string necessary if port not appended by PeerAddr
-# RETURNS: socket IO::Socket::INET
-# DESCRIPTION: open a socket to PeerAddr
-#===============================================================================
-sub open_socket {
- my ($PeerAddr, $PeerPort) = @_ ;
- if(defined($PeerPort)){
- $PeerAddr = $PeerAddr.":".$PeerPort;
- }
- my $socket;
- $socket = new IO::Socket::INET(PeerAddr => $PeerAddr ,
- Porto => "tcp" ,
- Type => SOCK_STREAM,
- Timeout => 5,
- );
- if(not defined $socket) {
- return;
- }
- daemon_log("open_socket:", 7);
- daemon_log("\t$PeerAddr", 7);
- return $socket;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: open_fifo
-# PARAMETERS: $fifo_path
-# RETURNS: 0: FIFO couldn"t be setup, 1: FIFO setup correctly
-# DESCRIPTION: creates a FIFO at $fifo_path
-#===============================================================================
-sub open_fifo {
- my ($fifo_path) = @_ ;
- if( -p $fifo_path ) {
- daemon_log("FIFO at $fifo_path already exists! Is being deleted!", 1);
- unlink($fifo_path);
- }
- POSIX::mkfifo($fifo_path, 0666) or die "can't mkfifo $fifo_path: $!";
- daemon_log( "FIFO started at $fifo_path", 1) ;
- return 1;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: read_from_socket
-# PARAMETERS: socket fh -
-# RETURNS: result string - readed characters from socket
-# DESCRIPTION: reads data from socket in 16 byte steps
-#===============================================================================
-sub read_from_socket {
- my ($socket) = @_;
- my $result = "";
-
- $socket->blocking(1);
- $result = <$socket>;
-
- $socket->blocking(0);
- while ( my $char = <$socket> ) {
- if (not defined $char) { last }
- $result .= $char;
- }
-
-# my $len = 16;
-# while($len == 16){
-# my $char;
-# $len = sysread($socket, $char, 16);
-# if($len != 16) { last }
-# $result .= $char;
-# }
- return $result;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_xml_hash
-# PARAMETERS: header - string - message header (required)
-# source - string - where the message come from (required)
-# target - string - where the message should go to (required)
-# [header_value] - string - something usefull (optional)
-# RETURNS: hash - hash - nomen est omen
-# DESCRIPTION: creates a key-value hash, all values are stored in a array
-#===============================================================================
-sub create_xml_hash {
- my ($header, $source, $target, $header_value) = @_;
- my $hash = {
- header => [$header],
- source => [$source],
- target => [$target],
- $header => [$header_value],
- };
- #daemon_log("create_xml_hash:", 7),
- #chomp(my $tmp = Dumper $hash);
- #daemon_log("\t$tmp", 7);
- return $hash
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_xml_string
-# PARAMETERS: xml_hash - hash - hash from function create_xml_hash
-# RETURNS: xml_string - string - xml string representation of the hash
-# DESCRIPTION: transform the hash to a string using XML::Simple module
-#===============================================================================
-sub create_xml_string {
- my ($xml_hash) = @_ ;
- my $xml_string = $xml->XMLout($xml_hash, RootName => 'xml');
- $xml_string =~ s/[\n]+//g;
- #daemon_log("create_xml_string:",7);
- #daemon_log("$xml_string\n", 7);
- return $xml_string;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: add_content2xml_hash
-# PARAMETERS: xml_ref - ref - reference to a hash from function create_xml_hash
-# element - string - key for the hash
-# content - string - value for the hash
-# RETURNS: nothing
-# DESCRIPTION: add key-value pair to xml_ref, if key alread exists, then append value to list
-#===============================================================================
-sub add_content2xml_hash {
- my ($xml_ref, $element, $content) = @_;
- if(not exists $$xml_ref{$element} ) {
- $$xml_ref{$element} = [];
- }
- my $tmp = $$xml_ref{$element};
- push(@$tmp, $content);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: get_content_from_xml_hash
-# PARAMETERS: xml_ref - ref - reference of the xml hash
-# element - string - key of the value you want
-# RETURNS: value - string - if key is either header, target or source
-# value - list - for all other keys in xml hash
-# DESCRIPTION:
-#===============================================================================
-sub get_content_from_xml_hash {
- my ($xml_ref, $element) = @_ ;
- my $result = $xml_ref->{$element};
- if( $element eq "header" || $element eq "target" || $element eq "source") {
- return @$result[0];
- }
- return @$result;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: encrypt_msg
-# PARAMETERS: msg - string - message to encrypt
-# my_cipher - ref - reference to a Crypt::Rijndael object
-# RETURNS: crypted_msg - string - crypted message
-# DESCRIPTION: crypts the incoming message with the Crypt::Rijndael module
-#===============================================================================
-sub encrypt_msg {
- my ($msg, $my_cipher) = @_;
- if(not defined $my_cipher) { print "no cipher object\n"; }
- $msg = "\0"x(16-length($msg)%16).$msg;
- my $crypted_msg = $my_cipher->encrypt($msg);
- chomp($crypted_msg = &encode_base64($crypted_msg));
- return $crypted_msg;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: decrypt_msg
-# PARAMETERS: crypted_msg - string - message to decrypt
-# my_cipher - ref - reference to a Crypt::Rijndael object
-# RETURNS: msg - string - decrypted message
-# DESCRIPTION: decrypts the incoming message with the Crypt::Rijndael module
-#===============================================================================
-sub decrypt_msg {
- my ($crypted_msg, $my_cipher) = @_ ;
- $crypted_msg = &decode_base64($crypted_msg);
- my $msg = $my_cipher->decrypt($crypted_msg);
- $msg =~ s/\0*//g;
- return $msg;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_ciphering
-# PARAMETERS: passwd - string - used to create ciphering
-# RETURNS: cipher - object
-# DESCRIPTION: creates a Crypt::Rijndael::MODE_CBC object with passwd as key
-#===============================================================================
-sub create_ciphering {
- my ($passwd) = @_;
- $passwd = substr(md5_hex("$passwd") x 32, 0, 32);
- my $iv = substr(md5_hex('GONICUS GmbH'),0, 16);
-
- #daemon_log("iv: $iv", 7);
- #daemon_log("key: $passwd", 7);
- my $my_cipher = Crypt::Rijndael->new($passwd , Crypt::Rijndael::MODE_CBC());
- $my_cipher->set_iv($iv);
- return $my_cipher;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: send_msg_hash2address
-# PARAMETERS: msg_hash - hash - xml_hash created with function create_xml_hash
-# PeerAddr string - socket address to send msg
-# PeerPort string - socket port, if not included in socket address
-# RETURNS: nothing
-# DESCRIPTION: ????
-#===============================================================================
-sub send_msg_hash2address {
- my ($msg_hash, $address, $passwd) = @_ ;
-
- # fetch header for logging
- my $header = &get_content_from_xml_hash($msg_hash, "header");
-
- # generate xml string
- my $msg_xml = &create_xml_string($msg_hash);
-
- # fetch the appropriated passwd from hash
- if(not defined $passwd) {
- if(exists $known_daemons->{$address}) {
- $passwd = $known_daemons->{$address}->{passwd};
- } elsif(exists $known_clients->{$address}) {
- $passwd = $known_clients->{$address}->{passwd};
-
- } else {
- daemon_log("$address not known, neither as server nor as client", 1);
- return;
- }
- }
-
- # create ciphering object
- my $act_cipher = &create_ciphering($passwd);
-
- # encrypt xml msg
- my $crypted_msg = &encrypt_msg($msg_xml, $act_cipher);
-
- # opensocket
- my $socket = &open_socket($address);
- if(not defined $socket){
- daemon_log( "cannot send '$header'-msg to $address , server not reachable", 5);
-
- if (exists $known_clients->{$address}) {
- if ($known_clients->{$address}->{status} eq "down") {
- # if status of not reachable client is already 'down', then delete client from known_clients
- &clean_up_known_clients($address);
-
- } else {
- # update status to 'down'
- &update_known_clients(hostname=>$address, status=>"down");
-
- }
- }
- return;
- }
-
- # send xml msg
- print $socket $crypted_msg."\n";
-
- close $socket;
-
- daemon_log("send '$header'-msg to $address", 1);
-
- daemon_log("$msg_xml", 5);
-
- #daemon_log("crypted message:",7);
- #daemon_log("\t$crypted_msg", 7);
-
- # update status of client in known_clients with last send msg
- if(exists $known_daemons->{$address}) {
- #&update_known_daemons();
- } elsif(exists $known_clients->{$address}) {
- &update_known_clients(hostname=>$address, status=>$header);
- }
-
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: send_msg_hash2bus
-# PARAMETERS: msg_hash - hash - xml_hash created with function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: ????
-#===============================================================================
-sub send_msg_hash2bus {
- my($msg_hash) = @_;
-
- # fetch header for logging
- my $header = &get_content_from_xml_hash($msg_hash, "header");
-
- # generate xml string
- my $msg_xml = &create_xml_string($msg_hash);
-
- # encrypt xml msg
- my $crypted_msg = &encrypt_msg($msg_xml, $bus_cipher);
-
- # open socket
- my $socket = &open_socket($bus_address);
- if(not defined $socket){
- daemon_log( "cannot send '$header'-msg to $bus_address , bus not reachable", 5);
- return;
- }
-
- # send xml msg
- print $socket $crypted_msg."\n";
-
- close $socket;
-
-
- daemon_log("send '$header'-msg to bus", 1);
- daemon_log("$msg_xml", 5);
- #daemon_log("crypted msg:",7);
- #daemon_log("\t$crypted_msg", 7);
-
- return;
-}
-
-
-
-
-
-
-
-##=== FUNCTION ================================================================
-## NAME: new_passwd
-## PARAMETERS: msg_hash - ref - hash from function create_xml_hash
-## RETURNS: nothing
-## DESCRIPTION: process this incoming message
-##===============================================================================
-#sub new_passwd {
-# my ($msg_hash) = @_;
-#
-# my $source = &get_content_from_xml_hash($msg_hash, "source");
-# my $passwd = (&get_content_from_xml_hash($msg_hash, "new_passwd"))[0];
-#
-# if (exists $known_daemons->{$source}) {
-# &add_content2known_daemons(hostname=>$source, status=>"new_passwd", passwd=>$passwd);
-# $bus_cipher = &create_ciphering($passwd);
-# my $hash = &create_xml_hash("confirm_new_passwd", "$server_ip:$server_port", "$source");
-# &send_msg_hash2address($hash, $source);
-#
-# } elsif (exists $known_clients->{$source}) {
-# &add_content2known_clients(hostname=>$source, status=>"new_passwd", passwd=>$passwd);
-#
-# } else {
-# daemon_log("ERROR: $source not known, neither in known_daemons nor in known_clients", 1)
-# }
-#
-# return;
-#}
-
-
-##=== FUNCTION ================================================================
-## NAME: make ping
-## PARAMETERS: address - string - address which should be pinged
-## RETURNS: nothing
-## DESCRIPTION: send ping message to address
-##===============================================================================
-#sub make_ping {
-# my ($msg_hash) = @_;
-#
-# my $source = &get_content_from_xml_hash($msg_hash, "source");
-# my $target = &get_content_from_xml_hash($msg_hash, "target");
-#
-# print "make_ping:$source\n";
-# my $out_hash = &create_xml_hash("ping", $target, $source);
-# &send_msg_hash2address($out_hash, $source);
-# return;
-#}
-
-
-##=== FUNCTION ================================================================
-## NAME: got_ping
-## PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-## RETURNS: nothing
-## DESCRIPTION: process this incoming message
-##===============================================================================
-#sub got_ping {
-# my ($msg_hash) = @_;
-#
-# my $source = &get_content_from_xml_hash($msg_hash, 'source');
-# my $target = &get_content_from_xml_hash($msg_hash, 'target');
-# my $header = &get_content_from_xml_hash($msg_hash, 'header');
-#
-# if(exists $known_daemons->{$source}) {
-# &add_content2known_daemons(hostname=>$source, status=>$header);
-# } else {
-# &add_content2known_clients(hostname=>$source, status=>$header);
-# }
-#
-# return;
-#}
-
-
-##=== FUNCTION ================================================================
-## NAME: here_i_am
-## PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-## RETURNS: nothing
-## DESCRIPTION: process this incoming message
-##===============================================================================
-#sub here_i_am {
-# my ($msg_hash) = @_;
-#
-# my $source = &get_content_from_xml_hash($msg_hash, "source");
-# my $mac_address = (&get_content_from_xml_hash($msg_hash, "mac_address"))[0];
-# my $out_hash;
-#
-# # number of known clients
-# my $nu_clients = keys %$known_clients;
-#
-# # check wether client address or mac address is already known
-# if (exists $known_clients->{$source}) {
-# daemon_log("WARNING: $source is already known as a client", 1);
-# daemon_log("WARNING: values for $source are being overwritten", 1);
-# $nu_clients --;
-# }
-#
-# # number of actual activ clients
-# my $act_nu_clients = $nu_clients;
-#
-# daemon_log("number of actual activ clients: $act_nu_clients", 5);
-# daemon_log("number of maximal allowed clients: $max_clients", 5);
-#
-# if($max_clients <= $act_nu_clients) {
-# my $out_hash = &create_xml_hash("denied", $server_address, $source);
-# &add_content2xml_hash($out_hash, "denied", "I_cannot_take_any_more_clients!");
-# my $passwd = (&get_content_from_xml_hash($msg_hash, "new_passwd"))[0];
-# &send_msg_hash2address($out_hash, $source, $passwd);
-# return;
-# }
-#
-# # new client accepted
-# my $new_passwd = (&get_content_from_xml_hash($msg_hash, "new_passwd"))[0];
-#
-# # create known_daemons entry
-# my $events = (&get_content_from_xml_hash($msg_hash, "events"))[0];
-# &create_known_client($source);
-# &add_content2known_clients(hostname=>$source, events=>$events, mac_address=>$mac_address,
-# status=>"registered", passwd=>$new_passwd);
-#
-# # return acknowledgement to client
-# $out_hash = &create_xml_hash("registered", $server_address, $source);
-# &send_msg_hash2address($out_hash, $source);
-#
-# # notify registered client to bus
-# $out_hash = &create_xml_hash("new_client", $server_address, $bus_address, $source);
-# &send_msg_hash2bus($out_hash);
-#
-# # give the new client his ldap config
-# &new_ldap_config($source);
-#
-# return;
-#}
-
-
-#=== FUNCTION ================================================================
-# NAME: who_has
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-#sub who_has {
-# my ($msg_hash) = @_ ;
-#
-# # what is your search pattern
-# my $search_pattern = (&get_content_from_xml_hash($msg_hash, "who_has"))[0];
-# my $search_element = (&get_content_from_xml_hash($msg_hash, $search_pattern))[0];
-# daemon_log("who_has-msg looking for $search_pattern $search_element", 7);
-#
-# # scanning known_clients for search_pattern
-# my @host_addresses = keys %$known_clients;
-# my $known_clients_entries = length @host_addresses;
-# my $host_address;
-# foreach my $host (@host_addresses) {
-# my $client_element = $known_clients->{$host}->{$search_pattern};
-# if ($search_element eq $client_element) {
-# $host_address = $host;
-# last;
-# }
-# }
-#
-# # search was successful
-# if (defined $host_address) {
-# my $source = @{$msg_hash->{source}}[0];
-# my $out_msg = &create_xml_hash("who_has_i_do", $server_address, $source, "mac_address");
-# &add_content2xml_hash($out_msg, "mac_address", $search_element);
-# &send_msg_hash2address($out_msg, $bus_address);
-# }
-# return;
-#}
-
-
-#sub who_has_i_do {
-# my ($msg_hash) = @_ ;
-# my $header = &get_content_from_xml_hash($msg_hash, "header");
-# my $source = &get_content_from_xml_hash($msg_hash, "source");
-# my $search_param = (&get_content_from_xml_hash($msg_hash, $header))[0];
-# my $search_value = (&get_content_from_xml_hash($msg_hash, $search_param))[0];
-# print "\ngot msg $header:\nserver $source has client with $search_param $search_value\n";
-#}
-
-
-#=== FUNCTION ================================================================
-# NAME: update_status
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-#sub update_status {
-# my ($msg_hash) = @_;
-# my $header = &get_content_from_xml_hash($msg_hash, "header");
-# my $source = &get_content_from_xml_hash($msg_hash, "source");
-# my $new_status = (&get_content_from_xml_hash($msg_hash, "update_status"))[0];
-#
-# # find the source
-# my $act_known_hash;
-# if (exists $known_daemons->{$source}) {
-#
-# &add_content2known_daemons(hostname=>$source, status=>$new_status);
-# } elsif (exists $known_clients->{$source}) {
-# &update_known_clients(hostname=>$source, status=>$new_status);
-# #&add_content2known_clients(hostname=>$source, status=>$new_status);
-# } else {
-# daemon_log("ERROR: got $header-msg, but cannot find $source in my hashes, unable to update status", 1);
-# return;
-# }
-#
-# return;
-#}
-
-
-##=== FUNCTION ================================================================
-## NAME: new_ldap_config
-## PARAMETERS: address - string - ip address and port of a host
-## RETURNS: nothing
-## DESCRIPTION: send to address the ldap configuration found for dn gotoLdapServer
-##===============================================================================
-#sub new_ldap_config {
-# my ($address) = @_ ;
-#
-# if (not exists $known_clients->{$address}) {
-# daemon_log("ERROR: $address does not exist in known_clients, cannot send him his ldap config", 1);
-# return;
-# }
-#
-# my $mac_address = $known_clients->{$address}->{"mac_address"};
-# if (not defined $mac_address) {
-# daemon_log("ERROR: no mac address found for client $address", 1);
-# return;
-# }
-#
-# # fetch dn
-# my $goHard_cmd = "ldapsearch -x '(&(objectClass=goHard)(macAddress=00:11:22:33:44:57))' dn gotoLdapServer";
-# my $dn;
-# my @gotoLdapServer;
-# open (PIPE, "$goHard_cmd 2>&1 |");
-# while(<PIPE>) {
-# chomp $_;
-# # If it's a comment, goto next
-# if ($_ =~ m/^[#]/) { next;}
-# if ($_ =~ m/^dn: ([\S]+?)$/) {
-# $dn = $1;
-# } elsif ($_ =~ m/^gotoLdapServer: ([\S]+?)$/) {
-# push(@gotoLdapServer, $1);
-# }
-# }
-# close(PIPE);
-#
-# # no dn found
-# if (not defined $dn) {
-# daemon_log("ERROR: no dn arose from command: $goHard_cmd", 1);
-# return;
-# }
-#
-# # no gotoLdapServer found
-# my $gosaGroupOfNames_cmd = "ldapsearch -x '(&(objectClass=gosaGroupOfNames)(member=$dn))' gotoLdapServer";
-# if (@gotoLdapServer == 0) {
-# open (PIPE, "$gosaGroupOfNames_cmd 2>&1 |");
-# while(<PIPE>) {
-# chomp $_;
-# if ($_ =~ m/^[#]/) { next; }
-# if ($_ =~ m/^gotoLdapServer: ([\S]+?)$/) {
-# push(@gotoLdapServer, $1);
-# }
-# }
-# close(PIPE);
-# }
-#
-# # still no gotoLdapServer found
-# if (@gotoLdapServer == 0) {
-# daemon_log("ERROR: cannot find gotoLdapServer entry in command: $gosaGroupOfNames_cmd", 1);
-# return;
-# }
-#
-# # sort @gotoLdapServer and then split of ranking
-# my @sorted_gotoLdapServer = sort(@gotoLdapServer);
-# @gotoLdapServer = reverse(@sorted_gotoLdapServer);
-# foreach (@gotoLdapServer) {
-# $_ =~ s/^\d://;
-# }
-#
-# my $t = join(" ", @gotoLdapServer);
-#
-# my $out_hash = &create_xml_hash("new_ldap_config", $server_address, $address);
-# map(&add_content2xml_hash($out_hash, "new_ldap_config", $_), @gotoLdapServer);
-# &send_msg_hash2address($out_hash, $address);
-#
-# return;
-#}
-
-
-##=== FUNCTION ================================================================
-## NAME: execute_actions
-## PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-## RETURNS: nothing
-## DESCRIPTION: invokes the script specified in msg_hash which is located under
-## /etc/gosad/actions
-##===============================================================================
-#sub execute_actions {
-# my ($msg_hash) = @_ ;
-# my $configdir= '/etc/gosad/actions/';
-# my $result;
-#
-# my $header = &get_content_from_xml_hash($msg_hash, 'header');
-# my $source = &get_content_from_xml_hash($msg_hash, 'source');
-# my $target = &get_content_from_xml_hash($msg_hash, 'target');
-#
-#
-# if((not defined $source)
-# && (not defined $target)
-# && (not defined $header)) {
-# daemon_log("ERROR: Entries missing in XML msg for gosad actions under /etc/gosad/actions");
-# } else {
-# my $parameters="";
-# my @params = &get_content_from_xml_hash($msg_hash, $header);
-# my $params = join(", ", @params);
-# daemon_log("execute_actions: got parameters: $params", 5);
-#
-# if (@params) {
-# foreach my $param (@params) {
-# my $param_value = (&get_content_from_xml_hash($msg_hash, $param))[0];
-# daemon_log("execute_actions: parameter -> value: $param -> $param_value", 7);
-# $parameters.= " ".$param_value;
-# }
-# }
-#
-# my $cmd= $configdir.$header."$parameters";
-# daemon_log("execute_actions: executing cmd: $cmd", 7);
-# $result= "";
-# open(PIPE, "$cmd 2>&1 |");
-# while(<PIPE>) {
-# $result.=$_;
-# }
-# close(PIPE);
-# }
-#
-# # process the event result
-#
-#
-# return;
-#}
-
-
-#=== FUNCTION ================================================================
-# NAME: print_known_daemons
-# PARAMETERS: nothing
-# RETURNS: nothing
-# DESCRIPTION: nomen est omen
-#===============================================================================
-sub print_known_daemons {
- my ($tmp) = @_ ;
- print "####################################\n";
- print "# status of known_daemons\n";
- $shmda->shlock(LOCK_EX);
- my @hosts = keys %$known_daemons;
- foreach my $host (@hosts) {
- my $status = $known_daemons->{$host}->{status} ;
- my $passwd = $known_daemons->{$host}->{passwd};
- my $timestamp = $known_daemons->{$host}->{timestamp};
- print "$host\n";
- print "\tstatus: $status\n";
- print "\tpasswd: $passwd\n";
- print "\ttimestamp: $timestamp\n";
- }
- $shmda->shunlock(LOCK_EX);
- print "####################################\n";
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: create_known_daemon
-# PARAMETERS: hostname - string - key for the hash known_daemons
-# RETURNS: nothing
-# DESCRIPTION: creates a dummy entry for hostname in known_daemons
-#===============================================================================
-sub create_known_daemon {
- my ($hostname) = @_;
- $shmda->shlock(LOCK_EX);
- $known_daemons->{$hostname} = {};
- $known_daemons->{$hostname}->{status} = "none";
- $known_daemons->{$hostname}->{passwd} = "none";
- $known_daemons->{$hostname}->{timestamp} = "none";
- $shmda->shunlock(LOCK_EX);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: add_content2known_daemons
-# PARAMETERS: hostname - string - ip address and port of host (required)
-# status - string - (optional)
-# passwd - string - (optional)
-# mac_address - string - mac address of host (optional)
-# RETURNS: nothing
-# DESCRIPTION: nome est omen and updates each time the timestamp of hostname
-#===============================================================================
-sub add_content2known_daemons {
- my $arg = {
- hostname => undef, status => undef, passwd => undef,
- mac_address => undef, events => undef,
- @_ };
- my $hostname = $arg->{hostname};
- my $status = $arg->{status};
- my $passwd = $arg->{passwd};
- my $mac_address = $arg->{mac_address};
- my $events = $arg->{events};
-
- if (not defined $hostname) {
- daemon_log("ERROR: function add_content2known_daemons is not invoked with requiered parameter 'hostname'", 1);
- return;
- }
-
- my ($seconds, $minutes, $hours, $monthday, $month,
- $year, $weekday, $yearday, $sommertime) = localtime(time);
- $hours = $hours < 10 ? $hours = "0".$hours : $hours;
- $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
- $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
- $month+=1;
- $month = $month < 10 ? $month = "0".$month : $month;
- $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
- $year+=1900;
- my $t = "$year$month$monthday$hours$minutes$seconds";
-
- $shmda->shlock(LOCK_EX);
- if (defined $status) {
- $known_daemons->{$hostname}->{status} = $status;
- }
- if (defined $passwd) {
- $known_daemons->{$hostname}->{passwd} = $passwd;
- }
- if (defined $mac_address) {
- $known_daemons->{$hostname}->{mac_address} = $mac_address;
- }
- if (defined $events) {
- $known_daemons->{$hostname}->{events} = $events;
- }
- $known_daemons->{$hostname}->{timestamp} = $t;
- $shmda->shlock(LOCK_EX);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: update_known_daemons
-# PARAMETERS: hostname - string - ip address and port of host (required)
-# status - string - (optional)
-# passwd - string - (optional)
-# client - string - ip address and port of client (optional)
-# RETURNS: nothing
-# DESCRIPTION: nome est omen and updates each time the timestamp of hostname
-#===============================================================================
-sub update_known_daemons {
- my $arg = {
- hostname => undef, status => undef, passwd => undef,
- @_ };
- my $hostname = $arg->{hostname};
- my $status = $arg->{status};
- my $passwd = $arg->{passwd};
-
- if (not defined $hostname) {
- daemon_log("ERROR: function add_content2known_daemons is not invoked with requiered parameter 'hostname'", 1);
- return;
- }
-
- my ($seconds, $minutes, $hours, $monthday, $month,
- $year, $weekday, $yearday, $sommertime) = localtime(time);
- $hours = $hours < 10 ? $hours = "0".$hours : $hours;
- $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
- $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
- $month+=1;
- $month = $month < 10 ? $month = "0".$month : $month;
- $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
- $year+=1900;
- my $t = "$year$month$monthday$hours$minutes$seconds";
-
- $shmda->shlock(LOCK_EX);
- if (defined $status) {
- $known_daemons->{$hostname}->{status} = $status;
- }
- if (defined $passwd) {
- $known_daemons->{$hostname}->{passwd} = $passwd;
- }
- $known_daemons->{$hostname}->{timestamp} = $t;
- $shmda->shunlock(LOCK_EX);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: print_known_clients
-# PARAMETERS: nothing
-# RETURNS: nothing
-# DESCRIPTION: nomen est omen
-#===============================================================================
-sub print_known_clients {
-
- print "####################################\n";
- print "# status of known_clients\n";
- $shmcl->shlock(LOCK_EX);
- my @hosts = keys %$known_clients;
- if (@hosts) {
- foreach my $host (@hosts) {
- my $status = $known_clients->{$host}->{status} ;
- my $passwd = $known_clients->{$host}->{passwd};
- my $timestamp = $known_clients->{$host}->{timestamp};
- my $mac_address = $known_clients->{$host}->{mac_address};
- my $events = $known_clients->{$host}->{events};
- print "$host\n";
- print "\tstatus: $status\n";
- print "\tpasswd: $passwd\n";
- print "\ttimestamp: $timestamp\n";
- print "\tmac_address: $mac_address\n";
- print "\tevents: $events\n";
- }
- }
- $shmcl->shunlock(LOCK_EX);
- print "####################################\n";
- return;
-}
-
-
-
-
-
-#=== FUNCTION ================================================================
-# NAME: create_known_client
-# PARAMETERS: hostname - string - key for the hash known_clients
-# RETURNS: nothing
-# DESCRIPTION: creates a dummy entry for hostname in known_clients
-#===============================================================================
-sub create_known_client {
- my ($hostname) = @_;
- $shmcl->shlock(LOCK_EX);
- $known_clients->{$hostname} = {};
- $known_clients->{$hostname}->{status} = "none";
- $known_clients->{$hostname}->{passwd} = "none";
- $known_clients->{$hostname}->{timestamp} = "none";
- $known_clients->{$hostname}->{mac_address} = "none";
- $known_clients->{$hostname}->{events} = "none";
- $shmcl->shunlock(LOCK_EX);
- return;
-}
-
-
-
-
-#=== FUNCTION ================================================================
-# NAME: add_content2known_clients
-# PARAMETERS: hostname - string - ip address and port of host (required)
-# status - string - (optional)
-# passwd - string - (optional)
-# mac_address - string - (optional)
-# events - string - event of client, executable skripts under /etc/gosac/events
-# RETURNS: nothing
-# DESCRIPTION: nome est omen and updates each time the timestamp of hostname
-#===============================================================================
-sub add_content2known_clients {
- my $arg = {
- hostname => undef, status => undef, passwd => undef,
- mac_address => undef, events => undef,
- @_ };
- my $hostname = $arg->{hostname};
- my $status = $arg->{status};
- my $passwd = $arg->{passwd};
- my $mac_address = $arg->{mac_address};
- my $events = $arg->{events};
-
- if (not defined $hostname) {
- daemon_log("ERROR: function add_content2known_clients is not invoked with requiered parameter 'hostname'", 1);
- return;
- }
-
- my ($seconds, $minutes, $hours, $monthday, $month,
- $year, $weekday, $yearday, $sommertime) = localtime(time);
- $hours = $hours < 10 ? $hours = "0".$hours : $hours;
- $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
- $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
- $month+=1;
- $month = $month < 10 ? $month = "0".$month : $month;
- $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
- $year+=1900;
- my $t = "$year$month$monthday$hours$minutes$seconds";
-
- $shmcl->shlock(LOCK_EX);
- if (defined $status) {
- $known_clients->{$hostname}->{status} = $status;
- }
- if (defined $passwd) {
- $known_clients->{$hostname}->{passwd} = $passwd;
- }
- if (defined $mac_address) {
- $known_clients->{$hostname}->{mac_address} = $mac_address;
- }
- if (defined $events) {
- $known_clients->{$hostname}->{events} = $events;
- }
- $known_clients->{$hostname}->{timestamp} = $t;
- $shmcl->shlock(LOCK_EX);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME:
-# PARAMETERS:
-# RETURNS:
-# DESCRIPTION:
-#===============================================================================
-sub clean_up_known_clients {
- my ($address) = @_ ;
-
- if (not exists $known_clients->{$address}) {
- daemon_log("cannot prune known_clients from $address, client not known", 5);
- return;
- }
-
- delete $known_clients->{$address};
-
- # send bus a msg that address was deleted from known_clients
- my $out_hash = &create_xml_hash('delete_client', $server_address, $bus_address, $address);
- &send_msg_hash2bus($out_hash);
-
- daemon_log("client $address deleted from known_clients because of multiple down time", 3);
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: update_known_clients
-# PARAMETERS: hostname - string - ip address and port of host (required)
-# status - string - (optional)
-# passwd - string - (optional)
-# client - string - ip address and port of client (optional)
-# RETURNS: nothing
-# DESCRIPTION: nome est omen and updates each time the timestamp of hostname
-#===============================================================================
-sub update_known_clients {
- my $arg = {
- hostname => undef, status => undef, passwd => undef,
- mac_address => undef, events => undef,
- @_ };
- my $hostname = $arg->{hostname};
- my $status = $arg->{status};
- my $passwd = $arg->{passwd};
- my $mac_address = $arg->{mac_address};
- my $events = $arg->{events};
-
- if (not defined $hostname) {
- daemon_log("ERROR: function add_content2known_daemons is not invoked with requiered parameter 'hostname'", 1);
- return;
- }
-
- my ($seconds, $minutes, $hours, $monthday, $month,
- $year, $weekday, $yearday, $sommertime) = localtime(time);
- $hours = $hours < 10 ? $hours = "0".$hours : $hours;
- $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
- $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
- $month+=1;
- $month = $month < 10 ? $month = "0".$month : $month;
- $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
- $year+=1900;
- my $t = "$year$month$monthday$hours$minutes$seconds";
-
- $shmcl->shlock(LOCK_EX);
- if (defined $status) {
- $known_clients->{$hostname}->{status} = $status;
- }
- if (defined $passwd) {
- $known_clients->{$hostname}->{passwd} = $passwd;
- }
- if (defined $mac_address) {
- $known_clients->{$hostname}->{mac_address} = $mac_address;
- }
- if (defined $events) {
- $known_clients->{$hostname}->{events} = $events;
- }
- $known_clients->{$hostname}->{timestamp} = $t;
- $shmcl->shunlock(LOCK_EX);
- return;
-}
-
-
-
-
-
-
-
-#==== MAIN = main ==============================================================
-
-# parse commandline options
-Getopt::Long::Configure( "bundling" );
-GetOptions("h|help" => \&usage,
- "c|config=s" => \$cfg_file,
- "f|foreground" => \$foreground,
- "v|verbose+" => \$verbose,
- "no-bus+" => \$no_bus,
- "no-arp+" => \$no_arp,
- );
-
-# read and set config parameters
-&check_cmdline_param ;
-&read_configfile;
-&check_pid;
-&import_modules;
-
-$SIG{CHLD} = 'IGNORE';
-
-# restart daemon log file
-if(-e $log_file ) { unlink $log_file }
-daemon_log(" ", 1);
-daemon_log("gosad started!", 1);
-
-# Just fork, if we"re not in foreground mode
-if( ! $foreground ) { $pid = fork(); }
-else { $pid = $$; }
-
-# Do something useful - put our PID into the pid_file
-if( 0 != $pid ) {
- open( LOCK_FILE, ">$pid_file" );
- print LOCK_FILE "$pid\n";
-close( LOCK_FILE );
- if( !$foreground ) { exit( 0 ) };
-}
-
-# detect own ip and mac address
-($server_ip, $server_mac_address) = &get_ip_and_mac();
-if (not defined $server_ip) {
- die "EXIT: ip address of $0 could not be detected";
-}
-daemon_log("server ip address detected: $server_ip", 1);
-daemon_log("server mac address detected: $server_mac_address", 1);
-
-# setup xml parser
-$xml = new XML::Simple();
-
-# create cipher object
-$bus_cipher = &create_ciphering($bus_passwd);
-$bus_address = "$bus_ip:$bus_port";
-
-# create reading and writing vectors
-my $rbits = my $wbits = my $ebits = "";
-
-# open server socket
-$server_address = "$server_ip:$server_port";
-if($server_activ eq "on"){
- daemon_log(" ", 1);
- $server = IO::Socket::INET->new(LocalPort => $server_port,
- Type => SOCK_STREAM,
- Reuse => 1,
- Listen => 20,
- );
- if(not defined $server){
- daemon_log("cannot be a tcp server at $server_port : $@");
- } else {
- daemon_log("start server:", 1);
- daemon_log("\t$server_ip:$server_port",1) ;
- vec($rbits, fileno $server, 1) = 1;
- vec($wbits, fileno $server, 1) = 1;
- }
-}
-
-# register at bus
-if ($no_bus > 0) {
- $bus_activ = "off"
-}
-if($bus_activ eq "on") {
- daemon_log(" ", 1);
- ®ister_at_bus();
-}
-
-
-daemon_log(" ", 1);
-
-# start arp fifo
-if ($no_arp > 0) {
- $arp_activ = "off";
-}
-my $my_fifo;
-if($arp_activ eq "on") {
- $my_fifo = &open_fifo($arp_fifo_path);
- if($my_fifo == 0) { die "fifo file disappeared\n" }
- sysopen($arp_fifo, $arp_fifo_path, O_RDWR) or die "can't read from $arp_fifo: $!" ;
-
- vec($rbits, fileno $arp_fifo, 1) = 1;
-}
-
-$gosa_address = "$gosa_ip:$gosa_port";
-# start gosa inferface fifos
-if ($gosa_activ eq "on") {
- daemon_log(" ",1);
- $gosa_server = IO::Socket::INET->new(LocalPort => $gosa_port,
- Type => SOCK_STREAM,
- Reuse => 1,
- Listen => 1,
- );
- if (not defined $gosa_server) {
- daemon_log("cannot start tcp server at $gosa_port for communication to gosa: $@", 1);
- } else {
- daemon_log("start server at for communication to gosa", 1);
- daemon_log("\t$server_ip:$gosa_port");
- vec($rbits, fileno $gosa_server, 1) = 1;
-
- }
-
-
- #&open_fifo($gosa_fifo_in);
- #sysopen(GOSA_FIFO_IN, $gosa_fifo_in, O_RDWR) or die "can't read from GOSA_FIFO_IN: $!" ;
- #vec($rbits, fileno GOSA_FIFO_IN, 1) = 1;
-
- #&open_fifo($gosa_fifo_out);
- #sysopen(GOSA_FIFO_OUT, $gosa_fifo_out, O_RDWR) or die "can't read from GOSA_FIFO_IN: $!" ;
-
-}
-
-
-###################################
-#everything ready, okay, lets start
-###################################
-while(1) {
-
- # add all handles from the childs
- while ( my ($pid, $child_hash) = each %busy_child ) {
-
- # check whether process still exists
- my $exitus_pid = waitpid($pid, WNOHANG);
- if($exitus_pid != 0) {
- delete $busy_child{$pid};
- next;
- }
-
- # add child fhd to the listener
- my $fhd = $$child_hash{'pipe_rd'};
- vec($rbits, fileno $fhd, 1) = 1;
- }
-
- my ($rout, $wout);
- my $nf = select($rout=$rbits, $wout=$wbits, undef, undef);
-
- # error handling
- if($nf < 0 ) {
- }
-
- # something is coming in
- if($server_activ eq "on" && vec($rout, fileno $server, 1)) {
- daemon_log(" ", 1);
- my $client = $server->accept();
- my $other_end = getpeername($client);
- if(not defined $other_end) {
- daemon_log("client cannot be identified: $!");
- } else {
- my ($port, $iaddr) = unpack_sockaddr_in($other_end);
- my $actual_ip = inet_ntoa($iaddr);
- daemon_log("accept client at daemon socket from $actual_ip", 5);
- my $in_msg = &read_from_socket($client);
- if(defined $in_msg){
- chomp($in_msg);
- &activating_child($in_msg, $actual_ip);
- } else {
- daemon_log("cannot read from $actual_ip", 5);
- }
- }
- close($client);
- }
-
- if($arp_activ eq "on" && vec($rout, fileno $arp_fifo, 1)) {
- my $in_msg = <$arp_fifo>;
- chomp($in_msg);
- print "arp_activ: msg: $in_msg\n";
- my $act_passwd = $known_daemons->{$bus_address}->{passwd};
- print "arp_activ: arp_passwd: $act_passwd\n";
-
- my $in_msg_hash = $xml->XMLin($in_msg, ForceArray=>1);
-
- my $target = &get_content_from_xml_hash($in_msg_hash, 'target');
-
- if ($target eq $server_address) {
- print "arp_activ: forward to server\n";
- my $arp_cipher = &create_ciphering($act_passwd);
- my $crypted_msg = &encrypt_msg($in_msg, $arp_cipher);
- &activating_child($crypted_msg, $server_ip);
- } else {
- print "arp_activ: send to bus\n";
- &send_msg_hash2address($in_msg_hash, $bus_address);
- }
- print "\n";
- }
-
- if($gosa_activ eq "on" && vec($rout, fileno $gosa_server, 1)) {
- daemon_log(" ", 1);
- my $client = $gosa_server->accept();
- my $other_end = getpeername($client);
- if(not defined $other_end) {
- daemon_log("client cannot be identified: $!");
- } else {
- my ($port, $iaddr) = unpack_sockaddr_in($other_end);
- my $actual_ip = inet_ntoa($iaddr);
- daemon_log("accept client at gosa socket from $actual_ip", 5);
- my $in_msg = <$client>;
- #my $in_msg = &read_from_socket($client);
-
- daemon_log(">>>>>>>>>>> frisch vom socket gelesen\n!$in_msg!\n",1);
- if(defined $in_msg){
- chomp($in_msg);
- &activating_child($in_msg, $actual_ip, $client);
- } else {
- daemon_log("cannot read from $actual_ip", 5);
- }
- }
- #close($client);
- }
-
- # check all processing childs whether they are finished ('done') or
- while ( my ($pid, $child_hash) = each %busy_child ) {
- my $fhd = $$child_hash{'pipe_rd'};
-
- if (vec($rout, fileno $fhd, 1) ) {
- daemon_log("process child $pid is ready to read", 5);
-
- $fhd->blocking(1);
- my $in_msg = <$fhd>;
- $fhd->blocking(0);
- my $part_in_msg;
- while ($part_in_msg = <$fhd>) {
- if (not defined $part_in_msg) {
- last;
- }
- $in_msg .= $part_in_msg;
- }
- chomp($in_msg);
-
- daemon_log("process child read: $in_msg", 5);
- if (not defined $in_msg) {
- next;
- } elsif ($in_msg =~ "done") {
- delete $busy_child{$pid};
- $free_child{$pid} = $child_hash;
-
- } else {
- my $act_client = $busy_child{$pid}{client_ref};
- print $act_client $in_msg."\n";
- my $act_pipe = $busy_child{$pid}{pipe_rd};
- sleep(10);
- close ($act_client);
- delete $busy_child{$pid};
- $free_child{$pid} = $child_hash;
-
- }
- }
- }
-
-
-}
diff --git a/gosa-si/daemon/gosa-si-server.conf-template b/gosa-si/daemon/gosa-si-server.conf-template
+++ /dev/null
@@ -1,30 +0,0 @@
-[general]
-log_file = /var/log/gosa-si-daemon.log
-pid_file = /var/run/gosa-si-daemon.pid
-child_max = 10
-child_min = 2
-child_timeout = 10
-
-[bus]
-bus_activ = on
-bus_passwd = secret-bus-password
-bus_ip = 127.0.0.1
-bus_port = 20080
-
-[server]
-server_activ = on
-server_port = 20081
-server_passwd = secret-server-password
-max_clients = 5
-
-[arp]
-arp_activ = off
-arp_fifo_path = /var/run/gosa-si/arp-notify
-
-[gosa]
-gosa_activ = on
-gosa_ip = 127.0.0.1
-gosa_port = 20082
-gosa_passwd = secret-gosa-password
-gosa_timeout = 5
-
diff --git a/gosa-si/daemon/modules/GosaPackages.pm b/gosa-si/daemon/modules/GosaPackages.pm
+++ /dev/null
@@ -1,108 +0,0 @@
-package GosaPackages;
-
-use Exporter;
-@ISA = ("Exporter");
-
-# Each module has to have a function 'process_incoming_msg'. This function works as a interface to gosa-sd and recieves the msg hash from gosa-sd. 'process_incoming_function checks, wether it has a function to process the incoming msg and forward the msg to it.
-
-
-use strict;
-use warnings;
-use GosaSupportDaemon;
-
-BEGIN{}
-
-END{}
-
-
-### START ##########################
-
-# create general settings for this module
-my $gosa_cipher = &create_ciphering($main::gosa_passwd);
-
-sub get_module_tags {
-
- # dort stehen drei packettypen, für die sich das modul anmelden kann, gosa-admin-packages,
- # server-packages, client-packages
- my %tag_hash = (gosa_admin_packages => "yes",
- server_packages => "no",
- client_packages => "no");
- return \%tag_hash;
-}
-
-
-sub process_incoming_msg {
- my ($crypted_msg) = @_ ;
- if(not defined $crypted_msg) {
- &main::daemon_log("function 'process_incoming_msg': got no msg", 7);
- }
- &main::daemon_log("GosaPackages: crypted_msg:$crypted_msg", 7);
- &main::daemon_log("GosaPackages: crypted_msg len:".length($crypted_msg), 7);
-
- $crypted_msg =~ /^([\s\S]*?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)$/;
- $crypted_msg = $1;
- my $host = sprintf("%s.%s.%s.%s", $2, $3, $4, $5);
-
- &main::daemon_log("GosaPackages: crypted_msg:$crypted_msg", 7);
- &main::daemon_log("GosaPackages: crypted_msg len:".length($crypted_msg), 7);
-
-
- # collect addresses from possible incoming clients
- # only gosa is allowd as incoming client
- &main::daemon_log("GosaPackages: host_key: $host", 7);
- &main::daemon_log("GosaPackages: key_passwd: $main::gosa_passwd", 7);
-
- $gosa_cipher = &main::create_ciphering($main::gosa_passwd);
- # determine the correct passwd for deciphering of the incoming msgs
- my $msg = "";
- my $msg_hash;
- eval{
- $msg = &main::decrypt_msg($crypted_msg, $gosa_cipher);
- &main::daemon_log("GosaPackages: decrypted_msg: $msg", 7);
-
- $msg_hash = $main::xml->XMLin($msg, ForceArray=>1);
- };
- if($@) {
- &main::daemon_log("WARNING: GosaPackages do not understand the message:", 5);
- &main::daemon_log("$@", 7);
- return;
- }
-
- &main::daemon_log("GosaPackages: msg for daemon from host:", 1);
- &main::daemon_log("\t$host", 1);
- &main::daemon_log("GosaPackages: msg to process:", 5);
- &main::daemon_log("\t$msg", 5);
-
- $msg = "gosaPackages hat was bekommen";
-
- my $out_cipher = &main::create_ciphering($main::gosa_passwd);
- my $out_msg = &main::encrypt_msg($msg, $out_cipher);
- return $out_msg;
-
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: got_ping
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-sub got_ping {
- my ($msg_hash) = @_;
-
- my $source = @{$msg_hash->{source}}[0];
- my $target = @{$msg_hash->{target}}[0];
- my $header = @{$msg_hash->{header}}[0];
-
- if(exists $main::known_daemons->{$source}) {
- &main::add_content2known_daemons(hostname=>$source, status=>$header);
- } else {
- &main::add_content2known_clients(hostname=>$source, status=>$header);
- }
-
- return;
-}
-
-
-1;
diff --git a/gosa-si/daemon/modules/ServerPackages.pm b/gosa-si/daemon/modules/ServerPackages.pm
+++ /dev/null
@@ -1,455 +0,0 @@
-package ServerPackages;
-
-use Exporter;
-@ISA = ("Exporter");
-
-# Each module has to have a function 'process_incoming_msg'. This function works as a interface to gosa-sd and recieves the msg hash from gosa-sd. 'process_incoming_function checks, wether it has a function to process the incoming msg and forward the msg to it.
-
-
-use strict;
-use warnings;
-use GosaSupportDaemon;
-
-BEGIN{}
-
-END {}
-
-
-### START ##########
-
-
-
-sub get_module_tags {
-
- # lese config file aus dort gibt es eine section Basic
- # dort stehen drei packettypen, für die sich das modul anmelden kann, gosa-admin-packages,
- # server-packages, client-packages
- my %tag_hash = (gosa_admin_packages => "yes",
- server_packages => "yes",
- client_packages => "yes",
- );
- return \%tag_hash;
-}
-
-
-sub process_incoming_msg {
- my ($crypted_msg) = @_ ;
- if(not defined $crypted_msg) {
- &main::daemon_log("function 'process_incoming_msg': got no msg", 7);
- }
- $crypted_msg =~ /^([\s\S]*?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)$/;
- $crypted_msg = $1;
- my $host = sprintf("%s.%s.%s.%s", $2, $3, $4, $5);
-
- # collect addresses from possible incoming clients
- my @valid_keys;
- my @host_keys = keys %$main::known_daemons;
- foreach my $host_key (@host_keys) {
- if($host_key =~ "^$host") {
- push(@valid_keys, $host_key);
- }
- }
- my @client_keys = keys %$main::known_clients;
- foreach my $client_key (@client_keys) {
- if($client_key =~ "^$host"){
- push(@valid_keys, $client_key);
- }
- }
- push(@valid_keys, $main::server_address);
-
- my $l = @valid_keys;
- my $msg_hash;
- my $msg_flag = 0;
- my $msg = "";
-
- # determine the correct passwd for deciphering of the incoming msgs
- foreach my $host_key (@valid_keys) {
- eval{
- &main::daemon_log("ServerPackage: host_key: $host_key", 7);
- my $key_passwd;
- if (exists $main::known_daemons->{$host_key}) {
- $key_passwd = $main::known_daemons->{$host_key}->{passwd};
- } elsif (exists $main::known_clients->{$host_key}) {
- $key_passwd = $main::known_clients->{$host_key}->{passwd};
- } elsif ($host_key eq $main::server_address) {
- $key_passwd = $main::server_passwd;
- }
- &main::daemon_log("ServerPackage: key_passwd: $key_passwd", 7);
- my $key_cipher = &create_ciphering($key_passwd);
- $msg = &decrypt_msg($crypted_msg, $key_cipher);
- &main::daemon_log("ServerPackages: decrypted msg: $msg", 7);
- $msg_hash = $main::xml->XMLin($msg, ForceArray=>1);
- #my $tmp = printf Dumper $msg_hash;
- #&main::daemon_log("DEBUG: ServerPackages: xml hash: $tmp", 7);
- };
- if($@) {
- &main::daemon_log("ServerPackage: key raise error: $@", 7);
- $msg_flag += 1;
- } else {
- last;
- }
- }
-
- if($msg_flag >= $l) {
- &main::daemon_log("WARNING: ServerPackage do not understand the message:", 5);
- &main::daemon_log("$@", 7);
- return;
- }
-
- # process incoming msg
- my $header = @{$msg_hash->{header}}[0];
- my $source = @{$msg_hash->{source}}[0];
-
- &main::daemon_log("ServerPackages: msg from host:", 5);
- &main::daemon_log("\t$host", 5);
- &main::daemon_log("ServerPackages: header from msg:", 5);
- &main::daemon_log("\t$header", 5);
- &main::daemon_log("ServerPackages: msg to process:", 5);
- &main::daemon_log("\t$msg", 5);
-
- my @targets = @{$msg_hash->{target}};
- my $len_targets = @targets;
- if ($len_targets == 0){
- &main::daemon_log("ERROR: ServerPackages: no target specified for msg $header", 1);
-
- } elsif ($len_targets == 1){
- # we have only one target symbol
-
- my $target = $targets[0];
- &main::daemon_log("SeverPackages: msg is for:", 7);
- &main::daemon_log("\t$target", 7);
-
- if ($target eq $main::server_address) {
- # msg is for server
- if ($header eq 'new_passwd'){ &new_passwd($msg_hash)}
- elsif ($header eq 'here_i_am') { &here_i_am($msg_hash)}
- elsif ($header eq 'who_has') { &who_has($msg_hash) }
- elsif ($header eq 'who_has_i_do') { &who_has_i_do($msg_hash)}
- elsif ($header eq 'update_status') { &update_status($msg_hash) }
- elsif ($header eq 'got_ping') { &got_ping($msg_hash)}
- elsif ($header eq 'get_load') { &execute_actions($msg_hash)}
- else { &main::daemon_log("ERROR: ServerPackages: no function assigned to this msg", 5) }
-
-
- } elsif ($target eq "*") {
- # msg is for all clients
-
- my @target_addresses = keys(%$main::known_clients);
- foreach my $target_address (@target_addresses) {
- if ($target_address eq $source) { next; }
- $msg_hash->{target} = [$target_address];
- &send_msg_hash2address($msg_hash, $target_address);
- }
- } else {
- # msg is for one host
-
- if (exists $main::known_clients->{$target}) {
- &send_msg_hash2address($msg_hash, $target);
- } elsif (exists $main::known_daemons->{$target}) {
- # target is known
- &send_msg_hash2address($msg_hash, $target);
- } else {
- # target is not known
- &main::daemon_log("ERROR: ServerPackages: target $target is not known neither in known_clients nor in known_daemons", 1);
- }
- }
- }
-
- return ;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: got_ping
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-sub got_ping {
- my ($msg_hash) = @_;
-
- my $source = @{$msg_hash->{source}}[0];
- my $target = @{$msg_hash->{target}}[0];
- my $header = @{$msg_hash->{header}}[0];
-
- if(exists $main::known_daemons->{$source}) {
- &main::add_content2known_daemons(hostname=>$source, status=>$header);
- } else {
- &main::add_content2known_clients(hostname=>$source, status=>$header);
- }
-
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: new_passwd
-# PARAMETERS: msg_hash - ref - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-sub new_passwd {
- my ($msg_hash) = @_;
-
- my $source = @{$msg_hash->{source}}[0];
- my $passwd = @{$msg_hash->{new_passwd}}[0];
-
- if (exists $main::known_daemons->{$source}) {
- &main::add_content2known_daemons(hostname=>$source, status=>"new_passwd", passwd=>$passwd);
- my $hash = &create_xml_hash("confirm_new_passwd", $main::server_address, $source);
- &send_msg_hash2address($hash, $source);
-
- } elsif (exists $main::known_clients->{$source}) {
- &main::add_content2known_clients(hostname=>$source, status=>"new_passwd", passwd=>$passwd);
-
- } else {
- &main::daemon_log("ERROR: $source not known, neither in known_daemons nor in known_clients", 1)
- }
-
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: here_i_am
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-sub here_i_am {
- my ($msg_hash) = @_;
-
- my $source = @{$msg_hash->{source}}[0];
- my $mac_address = @{$msg_hash->{mac_address}}[0];
- my $out_hash;
-
- # number of known clients
- my $nu_clients = keys %$main::known_clients;
-
- # check wether client address or mac address is already known
- if (exists $main::known_clients->{$source}) {
- &main::daemon_log("WARNING: $source is already known as a client", 1);
- &main::daemon_log("WARNING: values for $source are being overwritten", 1);
- $nu_clients --;
- }
-
- # number of actual activ clients
- my $act_nu_clients = $nu_clients;
-
- &main::daemon_log("number of actual activ clients: $act_nu_clients", 5);
- &main::daemon_log("number of maximal allowed clients: $main::max_clients", 5);
-
- if($main::max_clients <= $act_nu_clients) {
- my $out_hash = &create_xml_hash("denied", $main::server_address, $source);
- &add_content2xml_hash($out_hash, "denied", "I_cannot_take_any_more_clients!");
- my $passwd = @{$msg_hash->{new_passwd}}[0];
- &send_msg_hash2address($out_hash, $source, $passwd);
- return;
- }
-
- # new client accepted
- my $new_passwd = @{$msg_hash->{new_passwd}}[0];
-
- # create known_daemons entry
- my $events = @{$msg_hash->{events}}[0];
- &main::create_known_client($source);
- &main::add_content2known_clients(hostname=>$source, events=>$events, mac_address=>$mac_address,
- status=>"registered", passwd=>$new_passwd);
-
- # return acknowledgement to client
- $out_hash = &create_xml_hash("registered", $main::server_address, $source);
- &send_msg_hash2address($out_hash, $source);
-
- # notify registered client to bus
- $out_hash = &main::create_xml_hash("new_client", $main::server_address, $main::bus_address, $source);
- &main::send_msg_hash2bus($out_hash);
-
- # give the new client his ldap config
- &new_ldap_config($source);
-
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: who_has
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: process this incoming message
-#===============================================================================
-sub who_has {
- my ($msg_hash) = @_ ;
-
- # what is your search pattern
- my $search_pattern = @{$msg_hash->{who_has}}[0];
- my $search_element = @{$msg_hash->{$search_pattern}}[0];
- &main::daemon_log("who_has-msg looking for $search_pattern $search_element", 7);
-
- # scanning known_clients for search_pattern
- my @host_addresses = keys %$main::known_clients;
- my $known_clients_entries = length @host_addresses;
- my $host_address;
- foreach my $host (@host_addresses) {
- my $client_element = $main::known_clients->{$host}->{$search_pattern};
- if ($search_element eq $client_element) {
- $host_address = $host;
- last;
- }
- }
-
- # search was successful
- if (defined $host_address) {
- my $source = @{$msg_hash->{source}}[0];
- my $out_msg = &main::create_xml_hash("who_has_i_do", $main::server_address, $source, "mac_address");
- &main::add_content2xml_hash($out_msg, "mac_address", $search_element);
- &main::send_msg_hash2address($out_msg, $main::bus_address);
- }
- return;
-}
-
-
-sub who_has_i_do {
- my ($msg_hash) = @_ ;
- my $header = @{$msg_hash->{header}}[0];
- my $source = @{$msg_hash->{source}}[0];
- my $search_param = @{$msg_hash->{$header}}[0];
- my $search_value = @{$msg_hash->{$search_param}}[0];
- print "\ngot msg $header:\nserver $source has client with $search_param $search_value\n";
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: new_ldap_config
-# PARAMETERS: address - string - ip address and port of a host
-# RETURNS: nothing
-# DESCRIPTION: send to address the ldap configuration found for dn gotoLdapServer
-#===============================================================================
-sub new_ldap_config {
- my ($address) = @_ ;
-
- if (not exists $main::known_clients->{$address}) {
- &main::daemon_log("ERROR: $address does not exist in known_clients, cannot send him his ldap config", 1);
- return;
- }
-
- my $mac_address = $main::known_clients->{$address}->{"mac_address"};
- if (not defined $mac_address) {
- &main::daemon_log("ERROR: no mac address found for client $address", 1);
- return;
- }
-
- # fetch dn
- my $goHard_cmd = "ldapsearch -x '(&(objectClass=goHard)(macAddress=00:11:22:33:44:57))' dn gotoLdapServer";
- my $dn;
- my @gotoLdapServer;
- open (PIPE, "$goHard_cmd 2>&1 |");
-# my $rbits = "";
-# vec($rbits, fileno PIPE, 1) = 1;
-# my $rout;
-# my $nf = select($rout=$rbits, undef, undef, $ldap_timeout);
- while(<PIPE>) {
- chomp $_;
- # If it's a comment, goto next
- if ($_ =~ m/^[#]/) { next;}
- if ($_ =~ m/^dn: ([\S]+?)$/) {
- $dn = $1;
- } elsif ($_ =~ m/^gotoLdapServer: ([\S]+?)$/) {
- push(@gotoLdapServer, $1);
- }
- }
- close(PIPE);
-
- # no dn found
- if (not defined $dn) {
- &main::daemon_log("ERROR: no dn arose from command: $goHard_cmd", 1);
- return;
- }
-
- # no gotoLdapServer found
- my $gosaGroupOfNames_cmd = "ldapsearch -x '(&(objectClass=gosaGroupOfNames)(member=$dn))' gotoLdapServer";
- if (@gotoLdapServer == 0) {
- open (PIPE, "$gosaGroupOfNames_cmd 2>&1 |");
- while(<PIPE>) {
- chomp $_;
- if ($_ =~ m/^[#]/) { next; }
- if ($_ =~ m/^gotoLdapServer: ([\S]+?)$/) {
- push(@gotoLdapServer, $1);
- }
- }
- close(PIPE);
- }
-
- # still no gotoLdapServer found
- if (@gotoLdapServer == 0) {
- &main::daemon_log("ERROR: cannot find gotoLdapServer entry in command: $gosaGroupOfNames_cmd", 1);
- return;
- }
-
- # sort @gotoLdapServer and then split of ranking
- my @sorted_gotoLdapServer = sort(@gotoLdapServer);
- @gotoLdapServer = reverse(@sorted_gotoLdapServer);
- foreach (@gotoLdapServer) {
- $_ =~ s/^\d://;
- }
-
- my $t = join(" ", @gotoLdapServer);
-
- my $out_hash = &main::create_xml_hash("new_ldap_config", $main::server_address, $address);
- map(&main::add_content2xml_hash($out_hash, "new_ldap_config", $_), @gotoLdapServer);
- &main::send_msg_hash2address($out_hash, $address);
-
- return;
-}
-
-
-#=== FUNCTION ================================================================
-# NAME: execute_actions
-# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
-# RETURNS: nothing
-# DESCRIPTION: invokes the script specified in msg_hash which is located under
-# /etc/gosad/actions
-#===============================================================================
-sub execute_actions {
- my ($msg_hash) = @_ ;
- my $configdir= '/etc/gosad/actions/';
- my $result;
-
- my $header = @{$msg_hash->{header}}[0];
- my $source = @{$msg_hash->{source}}[0];
- my $target = @{$msg_hash->{target}}[0];
-
- if((not defined $source)
- && (not defined $target)
- && (not defined $header)) {
- &main::daemon_log("ERROR: Entries missing in XML msg for gosad actions under /etc/gosad/actions");
- } else {
- my $parameters="";
- my @params = @{$msg_hash->{$header}};
- my $params = join(", ", @params);
- &main::daemon_log("execute_actions: got parameters: $params", 5);
-
- if (@params) {
- foreach my $param (@params) {
- my $param_value = (&get_content_from_xml_hash($msg_hash, $param))[0];
- &main::daemon_log("execute_actions: parameter -> value: $param -> $param_value", 7);
- $parameters.= " ".$param_value;
- }
- }
-
- my $cmd= $configdir.$header."$parameters";
- &main::daemon_log("execute_actions: executing cmd: $cmd", 7);
- $result= "";
- open(PIPE, "$cmd 2>&1 |");
- while(<PIPE>) {
- $result.=$_;
- }
- close(PIPE);
- }
-
- # process the event result
-
-
- return;
-}
-
-1;
diff --git a/gosa-si/daemon/tests/testGOsa.pl b/gosa-si/daemon/tests/testGOsa.pl
+++ /dev/null
@@ -1,107 +0,0 @@
-#!/usr/bin/perl
-#===============================================================================
-#
-# FILE: testGosa.pl
-#
-# USAGE: ./testGosa.pl
-#
-# DESCRIPTION:
-#
-# OPTIONS: ---
-# REQUIREMENTS: ---
-# BUGS: ---
-# NOTES: ---
-# AUTHOR: (), <>
-# COMPANY:
-# VERSION: 1.0
-# CREATED: 06.12.2007 14:31:37 CET
-# REVISION: ---
-#===============================================================================
-
-use strict;
-use warnings;
-use IO::Socket::INET;
-use Digest::MD5 qw(md5 md5_hex md5_base64);
-use Crypt::Rijndael;
-use MIME::Base64;
-
-sub create_ciphering {
- my ($passwd) = @_;
-
- $passwd = substr(md5_hex("$passwd") x 32, 0, 32);
- my $iv = substr(md5_hex('GONICUS GmbH'),0, 16);
- print "iv: $iv\n";
- print "key: $passwd\n";
-
- my $my_cipher = Crypt::Rijndael->new($passwd ,Crypt::Rijndael::MODE_CBC() );
- $my_cipher->set_iv($iv);
- return $my_cipher;
-}
-
-sub decrypt_msg {
- my ($crypted_msg, $my_cipher) = @_ ;
- $crypted_msg = &decode_base64($crypted_msg);
- my $msg = $my_cipher->decrypt($crypted_msg);
- return $msg;
-}
-
-sub encrypt_msg {
- my ($msg, $my_cipher) = @_;
- if(not defined $my_cipher) { print "no cipher object\n"; }
- $msg = "\0"x(16-length($msg)%16).$msg;
- my $crypted_msg = $my_cipher->encrypt($msg);
- chomp($crypted_msg = &encode_base64($crypted_msg));
- return $crypted_msg;
-}
-
-
-
-my $gosa_server = IO::Socket::INET->new(LocalPort => "9999",
- Type => SOCK_STREAM,
- Reuse => 1,
- Listen => 1,
- );
-
-
-
-
-
-my $client = $gosa_server->accept();
-my $other_end = getpeername($client);
-if(not defined $other_end) {
- print "client cannot be identified:";
-} else {
- my ($port, $iaddr) = unpack_sockaddr_in($other_end);
- my $actual_ip = inet_ntoa($iaddr);
- print "accept client at gosa socket from $actual_ip\n";
- chomp(my $crypted_msg = <$client>);
- print "crypted msg: <<<$crypted_msg<<<\n";
-
- my $cipher = &create_ciphering("ferdinand_frost");
-
- my $msg = &decrypt_msg($crypted_msg, $cipher);
- print "msg: <<<$msg<<<\n";
-
- print "\n#################################\n\n";
-
- my $answer = "gosa answer: $msg";
-
- print "answer: $answer\n";
-
- my $out_cipher = &create_ciphering("ferdinand_frost");
- my $crypted_answer = &encrypt_msg($answer, $out_cipher);
-
- print $client $crypted_answer."\n";
-
-}
-
-sleep(3);
-close($client);
-
-
-
-
-
-
-
-
diff --git a/gosa-si/debian/README.debian b/gosa-si/debian/README.debian
--- /dev/null
@@ -0,0 +1,11 @@
+README.Debian for GOto 3.0
+--------------------------
+
+* Configuring GOto 3.0
+
+You need a proper LDAP/FAI/GOsa setup to make this run. More
+text will follow later. Sorry.
+
+----
+Cajus Pollmeier <cajus@debian.org> Fri 02 Jun 2006 16:23:50 +0200
+
diff --git a/gosa-si/debian/changelog b/gosa-si/debian/changelog
--- /dev/null
+++ b/gosa-si/debian/changelog
@@ -0,0 +1,6 @@
+gosa-sd (1.0-1) unstable; urgency=low
+
+ * Initial release
+
+ -- Cajus Pollmeier <cajus@debian.org> Fri, 7 Dec 2007 11:37:45 +0100
+
diff --git a/gosa-si/debian/compat b/gosa-si/debian/compat
--- /dev/null
+++ b/gosa-si/debian/compat
@@ -0,0 +1 @@
+5
diff --git a/gosa-si/debian/control b/gosa-si/debian/control
--- /dev/null
+++ b/gosa-si/debian/control
@@ -0,0 +1,40 @@
+Source: gosa-si
+Section: utils
+Priority: optional
+Maintainer: Cajus Pollmeier <cajus@debian.org>
+Standards-Version: 3.7.2.2
+Build-Depends: debhelper(>= 4.2.32), dpatch
+
+Package: gosa-si-common
+Architecture: any
+Depends: libconfig-inifiles-perl, libcrypt-rijndael-perl, libxml-simple-perl, libipc-shareable-perl, libdata-dumper-simple-perl, libmime-perl
+Suggests: gosa-si-daemon, gosa-si-client
+Description: GOsa support infrastructure
+ This package provides common library functionality used by the
+ infrastructure server and client packages.
+ .
+ GOsa is a combination of system-administrator and end-user web
+ interface, designed to handle LDAP based setups.
+
+Package: gosa-si-daemon
+Architecture: any
+Depends: gosa-si-common
+Suggests: gosa
+Description: GOsa support infrastructure daemon
+ This package provides everything you need in order to deploy a simple
+ or distributed GOsa support infrastructure. It can be used to trigger
+ certain actions or retrieve information from clients.
+ .
+ GOsa is a combination of system-administrator and end-user web
+ interface, designed to handle LDAP based setups.
+
+Package: gosa-si-client
+Architecture: any
+Depends: gosa-si-common
+Suggests: gosa
+Description: GOsa support infrastructure client
+ This package lets you join to a GOsa support infrastructure as a
+ client in order to provide information or to act on events.
+ .
+ GOsa is a combination of system-administrator and end-user web
+ interface, designed to handle LDAP based setups.
diff --git a/gosa-si/debian/copyright b/gosa-si/debian/copyright
--- /dev/null
+++ b/gosa-si/debian/copyright
@@ -0,0 +1,8 @@
+This package was debianized by Cajus Pollmeier
+<cajus@debian.org> on Mon, 25 Jun 2007 12:57:35 +0100.
+
+Copyright: GPL2
+
+This code is released under the terms of the GPLv2 license.
+
+See /usr/share/common-licenses/GPL-2 for the full license.
diff --git a/gosa-si/debian/default b/gosa-si/debian/default
--- /dev/null
+++ b/gosa-si/debian/default
@@ -0,0 +1,2 @@
+# /etc/default/gosa-si - configure the init script
+START_BUS=0
diff --git a/gosa-si/debian/gosa-si-client.dirs b/gosa-si/debian/gosa-si-client.dirs
--- /dev/null
@@ -0,0 +1,4 @@
+usr/share/ltsp/plugins/ltsp-build-client/common
+usr/share/ltsp/scripts
+usr/sbin
+etc/default
diff --git a/gosa-si/debian/gosa-si-client.install b/gosa-si/debian/gosa-si-client.install
--- /dev/null
@@ -0,0 +1,12 @@
+debian/goto etc/default
+build-goto-client usr/sbin
+plugins/001-ltsp-addon-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/020-ssh-pubkey-login usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/001-goto-ldap-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/001-sane-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/020-nx-client usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/010-goto-ldap-files usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/999-goto-ldap-final usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/001-snmp-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/030-late-packages-goto usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/000-goto-ldap-vars usr/share/ltsp/plugins/ltsp-build-client/common
diff --git a/gosa-si/debian/gosa-si-common.dirs b/gosa-si/debian/gosa-si-common.dirs
--- /dev/null
@@ -0,0 +1,4 @@
+usr/share/ltsp/plugins/ltsp-build-client/common
+usr/share/ltsp/scripts
+usr/sbin
+etc/default
diff --git a/gosa-si/debian/gosa-si-common.install b/gosa-si/debian/gosa-si-common.install
--- /dev/null
@@ -0,0 +1,12 @@
+debian/goto etc/default
+build-goto-client usr/sbin
+plugins/001-ltsp-addon-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/020-ssh-pubkey-login usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/001-goto-ldap-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/001-sane-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/020-nx-client usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/010-goto-ldap-files usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/999-goto-ldap-final usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/001-snmp-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/030-late-packages-goto usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/000-goto-ldap-vars usr/share/ltsp/plugins/ltsp-build-client/common
diff --git a/gosa-si/debian/gosa-si-server.dirs b/gosa-si/debian/gosa-si-server.dirs
--- /dev/null
@@ -0,0 +1,4 @@
+usr/share/ltsp/plugins/ltsp-build-client/common
+usr/share/ltsp/scripts
+usr/sbin
+etc/default
diff --git a/gosa-si/debian/gosa-si-server.init b/gosa-si/debian/gosa-si-server.init
--- /dev/null
@@ -0,0 +1,91 @@
+#!/bin/sh
+# Start/stop the GOsa support daemon infrastructure.
+#
+### BEGIN INIT INFO
+# Provides: gosa-si
+# Required-Start: $syslog $time
+# Required-Stop: $syslog $time
+# Default-Start: 2 3 4 5
+# Default-Stop: 0 1 6
+# Short-Description: GOsa message bus and server component
+# Description: gosa-si establishes the communication between a couple of
+# GOsa hosting servers and optionally clients to do event
+# signaling for all communication partners.
+### END INIT INFO
+
+# Sanity checks
+test -f /usr/sbin/gosa-si-server || exit 0
+test -f /usr/sbin/gosa-si-bus || exit 0
+
+# Load defaults
+START_BUS=0
+[ -r /etc/default/gosa-si ] && . /etc/default/gosa-si
+
+# Load LSB support functions
+. /lib/lsb/init-functions
+
+
+start_bus() {
+ start-stop-daemon --start --quiet --pidfile /var/run/gosa-si-bus.pid --name gosa-si-bus --startas /usr/sbin/gosa-si-bus
+}
+
+
+start_server() {
+ start-stop-daemon --start --quiet --pidfile /var/run/gosa-si-server.pid --name gosa-si-server --startas /usr/sbin/gosa-si-server -- $1
+}
+
+
+stop_bus() {
+ start-stop-daemon --stop --retry 5 --quiet --pidfile /var/run/gosa-si-bus.pid --name gosa-si-bus
+}
+
+
+stop_server() {
+ start-stop-daemon --stop --retry 5 --quiet --pidfile /var/run/gosa-si-server.pid --name gosa-si-server
+}
+
+
+case "$1" in
+start) log_daemon_msg "Starting GOsa support infrastructure"
+ if [ "$START_BUS" == "1" ]; then
+ log_progress_msg "bus"
+ start_bus
+ log_progress_msg "daemon"
+ start_server
+ else
+ log_progress_msg "daemon"
+ start_server --no-bus
+ fi
+ log_end_msg $?
+ ;;
+stop) log_daemon_msg "Stopping GOsa support infrastructure"
+ if [ "$START_BUS" == "1" ]; then
+ log_progress_msg "daemon"
+ stop_server
+ log_progress_msg "bus"
+ stop_bus
+ else
+ log_progress_msg "daemon"
+ stop_server
+ fi
+ log_end_msg $?
+ ;;
+reload|force-reload|restart) log_daemon_msg "Restarting GOsa support infrastructure"
+ if [ "$START_BUS" == "1" ]; then
+ stop_server
+ stop_bus
+ start_bus
+ start_server --no-bus
+ log_progress_msg "done"
+ else
+ stop_server
+ start_server --no-bus
+ log_progress_msg "done"
+ fi
+ log_end_msg $?
+ ;;
+*) log_action_msg "Usage: /etc/init.d/gosa-si {start|stop|restart|reload|force-reload}"
+ exit 2
+ ;;
+esac
+exit 0
diff --git a/gosa-si/debian/gosa-si-server.install b/gosa-si/debian/gosa-si-server.install
--- /dev/null
@@ -0,0 +1,12 @@
+debian/goto etc/default
+build-goto-client usr/sbin
+plugins/001-ltsp-addon-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/020-ssh-pubkey-login usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/001-goto-ldap-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/001-sane-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/020-nx-client usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/010-goto-ldap-files usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/999-goto-ldap-final usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/001-snmp-packages usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/030-late-packages-goto usr/share/ltsp/plugins/ltsp-build-client/common
+plugins/000-goto-ldap-vars usr/share/ltsp/plugins/ltsp-build-client/common
diff --git a/gosa-si/debian/rules b/gosa-si/debian/rules
--- /dev/null
+++ b/gosa-si/debian/rules
@@ -0,0 +1,77 @@
+#!/usr/bin/make -f
+# Sample debian/rules that uses debhelper. GNU copyright 1997 by Joey Hess.
+
+# Uncomment this to turn on verbose mode.
+#export DH_VERBOSE=1
+
+build: patch
+ #********************************************************
+ #* Building ltsp-goto into a Debian/GNU Linux Package *
+ #* please stand by *
+ #********************************************************
+
+clean: clean-patched unpatch
+clean-patched:
+ dh_testdir
+ rm -f install-stamp
+ -rm -f debian/files
+ -rm -rf debian/tmp
+ -rm -f debian/substvars
+ dh_clean
+
+unpatch:
+ dpatch deapply-all
+ rm -rf patch-stamp debian/patched
+
+install: install-stamp
+install-stamp:
+ dh_testdir
+ dh_testroot
+ dh_clean -k
+ dh_installdirs
+
+ # Create a copy, remove svn stuff
+ -mkdir debian/tmp
+ -for i in `ls | grep -v debian`; do \
+ cp -R $$i debian/tmp ; \
+ done
+ -find debian/tmp -name '*.svn' -type d -exec rm -rf {} \; 2> /dev/null
+
+ touch install-stamp
+
+patch: patch-stamp
+patch-stamp:
+ dpatch apply-all
+ dpatch cat-all >patch-stamp
+
+binary-indep: install
+ dh_testdir
+ dh_testroot
+
+ dh_install
+ dh_installdocs
+ dh_installcron
+ dh_installexamples
+ dh_installchangelogs
+ #dh_installdebconf
+ #dh_installcron -p goto-agents-printmanager
+ dh_link
+ dh_strip
+ dh_compress
+ dh_fixperms
+ dh_perl
+ dh_installdeb
+ dh_shlibdeps
+
+ dh_gencontrol
+ dh_md5sums
+ dh_builddeb
+
+source diff:
+ @echo >&2 'source and diff are obsolete - use dpkg-source -b'; false
+
+binary: binary-indep
+.PHONY: build install clean binary-indep binary
+
+binary-arch:
+
diff --git a/gosa-si/gosa-si-bus b/gosa-si/gosa-si-bus
--- /dev/null
+++ b/gosa-si/gosa-si-bus
@@ -0,0 +1,1183 @@
+#!/usr/bin/perl
+#===============================================================================
+#
+# FILE: gosa-server
+#
+# USAGE: ./gosa-server
+#
+# DESCRIPTION:
+#
+# OPTIONS: ---
+# REQUIREMENTS: ---
+# BUGS: ---
+# NOTES:
+# AUTHOR: (Andreas Rettenberger), <rettenberger@gonicus.de>
+# COMPANY:
+# VERSION: 1.0
+# CREATED: 12.09.2007 08:54:41 CEST
+# REVISION: ---
+#===============================================================================
+
+use strict;
+use warnings;
+use Getopt::Long;
+use Config::IniFiles;
+use POSIX;
+use Time::HiRes qw( gettimeofday );
+
+use IO::Socket::INET;
+use Crypt::Rijndael;
+use MIME::Base64;
+use Digest::MD5 qw(md5 md5_hex md5_base64);
+use XML::Simple;
+use Data::Dumper;
+use Sys::Syslog qw( :DEFAULT setlogsock);
+use Cwd;
+use File::Spec;
+use IPC::Shareable qw( :lock);
+IPC::Shareable->clean_up_all;
+
+my ($cfg_file, $default_cfg_file, %cfg_defaults, $foreground, $verbose);
+my ($bus_activ, $bus_passwd, $bus_ip, $bus_port, $bus_address, $bus, $bus_mac_address);
+my ($pid_file, $procid, $pid, $log_file, $my_own_address);
+my (%free_child, %busy_child, $child_max, $child_min, %child_alive_time, $child_timeout);
+my ($xml, $bus_cipher, $known_daemons, $shmkh);
+
+$foreground = 0 ;
+$known_daemons = {};
+$shmkh = tie($known_daemons, 'IPC::Shareable', undef, {create => 1,
+ exclusive => 1,
+ mode => 0666,
+ destroy => 1,
+ });
+%cfg_defaults =
+("general" =>
+ {"log_file" => [\$log_file, "/var/run/".$0.".log"],
+ "pid_file" => [\$pid_file, "/var/run/".$0.".pid"],
+ "child_max" => [\$child_max, 10],
+ "child_min" => [\$child_min, 3],
+ "child_timeout" => [\$child_timeout, 180],
+
+ },
+"bus" =>
+ {"bus_activ" => [\$bus_activ, "on"],
+ "bus_passwd" => [\$bus_passwd, ""],
+ "bus_port" => [\$bus_port, "20080"],
+ }
+ );
+
+#=== FUNCTION ================================================================
+# NAME: read_configfile
+# PARAMETERS: cfg_file - string -
+# RETURNS: nothing
+# DESCRIPTION: read cfg_file and set variables
+#===============================================================================
+sub read_configfile {
+ my $cfg;
+ if( defined( $cfg_file) && ( length($cfg_file) > 0 )) {
+ if( -r $cfg_file ) {
+ $cfg = Config::IniFiles->new( -file => $cfg_file );
+ } else {
+ print STDERR "Couldn't read config file!";
+ }
+ } else {
+ $cfg = Config::IniFiles->new() ;
+ }
+ foreach my $section (keys %cfg_defaults) {
+ foreach my $param (keys %{$cfg_defaults{ $section }}) {
+ my $pinfo = $cfg_defaults{ $section }{ $param };
+ ${@$pinfo[ 0 ]} = $cfg->val( $section, $param, @$pinfo[ 1 ] );
+ }
+ }
+}
+
+#=== FUNCTION ================================================================
+# NAME: logging
+# PARAMETERS: level - string - default 'info'
+# msg - string -
+# facility - string - default 'LOG_DAEMON'
+# RETURNS: nothing
+# DESCRIPTION: function for logging
+#===============================================================================
+sub daemon_log {
+ my( $msg, $level ) = @_;
+ if(not defined $msg) { return }
+ if(not defined $level) { $level = 1 }
+ if(defined $log_file){
+ open(LOG_HANDLE, ">>$log_file");
+ if(not defined open( LOG_HANDLE, ">>$log_file" )) {
+ print STDERR "cannot open $log_file: $!";
+ return }
+ chomp($msg);
+ if($level <= $verbose){
+ print LOG_HANDLE $msg."\n";
+ if(defined $foreground) { print $msg."\n" }
+ }
+ }
+ close( LOG_HANDLE );
+# my ($msg, $level, $facility) = @_;
+# if(not defined $msg) {return}
+# if(not defined $level) {$level = "info"}
+# if(not defined $facility) {$facility = "LOG_DAEMON"}
+# openlog($0, "pid,cons,", $facility);
+# syslog($level, $msg);
+# closelog;
+# return;
+}
+
+#=== FUNCTION ================================================================
+# NAME: check_cmdline_param
+# PARAMETERS: nothing
+# RETURNS: nothing
+# DESCRIPTION: validates commandline parameter
+#===============================================================================
+sub check_cmdline_param () {
+ my $err_config;
+ my $err_counter = 0;
+ if( not defined( $cfg_file)) {
+ my $cwd = getcwd;
+ my $name = "/etc/gosa/gosa-si-bus.conf";
+ $cfg_file = File::Spec->catfile( $cwd, $name );
+ print STDERR "no conf file specified\n try to use default: $cfg_file\n";
+ }
+ if( $err_counter > 0 ) {
+ &usage( "", 1 );
+ if( defined( $err_config)) { print STDERR "$err_config\n"}
+ print STDERR "\n";
+ exit( -1 );
+ }
+}
+
+#=== FUNCTION ================================================================
+# NAME: check_pid
+# PARAMETERS: nothing
+# RETURNS: nothing
+# DESCRIPTION: handels pid processing
+#===============================================================================
+sub check_pid {
+ $pid = -1;
+ # Check, if we are already running
+ if( open(LOCK_FILE, "<$pid_file") ) {
+ $pid = <LOCK_FILE>;
+ if( defined $pid ) {
+ chomp( $pid );
+ if( -f "/proc/$pid/stat" ) {
+ my($stat) = `cat /proc/$pid/stat` =~ m/$pid \((.+)\).*/;
+ if( $0 eq $stat ) {
+ close( LOCK_FILE );
+ exit -1;
+ }
+ }
+ }
+ close( LOCK_FILE );
+ unlink( $pid_file );
+ }
+
+ # create a syslog msg if it is not to possible to open PID file
+ if (not sysopen(LOCK_FILE, $pid_file, O_WRONLY|O_CREAT|O_EXCL, 0644)) {
+ my($msg) = "Couldn't obtain lockfile '$pid_file' ";
+ if (open(LOCK_FILE, '<', $pid_file)
+ && ($pid = <LOCK_FILE>))
+ {
+ chomp($pid);
+ $msg .= "(PID $pid)\n";
+ } else {
+ $msg .= "(unable to read PID)\n";
+ }
+ if( ! ($foreground) ) {
+ openlog( $0, "cons,pid", "daemon" );
+ syslog( "warning", $msg );
+ closelog();
+ }
+ else {
+ print( STDERR " $msg " );
+ }
+ exit( -1 );
+ }
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: usage
+# PARAMETERS: nothing
+# RETURNS: nothing
+# DESCRIPTION: print out usage text to STDERR
+#===============================================================================
+sub usage {
+ print STDERR << "EOF" ;
+usage: $0 [-hvf] [-c config]
+
+ -h : this (help) message
+ -c <file> : config file
+ -f : foreground, process will not be forked to background
+ -v : be verbose (multiple to increase verbosity)
+EOF
+ print "\n" ;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: sig_int_handler
+# PARAMETERS: signal - string - signal arose from system
+# RETURNS: noting
+# DESCRIPTION: handels tasks to be done befor signal becomes active
+#===============================================================================
+sub sig_int_handler {
+ my ($signal) = @_;
+ if($bus){
+ close($bus);
+ print "$bus closed\n";
+ }
+ print "$signal\n";
+ IPC::Shareable->clean_up;
+ exit(1);
+}
+$SIG{INT} = \&sig_int_handler;
+
+
+#=== FUNCTION ================================================================
+# NAME: get_ip_and_mac
+# PARAMETERS: nothing
+# RETURNS: (ip, mac)
+# DESCRIPTION: executes /sbin/ifconfig and parses the output, the first occurence
+# of a inet address is returned as well as the mac address in the line
+# above the inet address
+#===============================================================================
+sub get_ip_and_mac {
+ my $ip = "0.0.0.0.0"; # Defualt-IP
+ my $mac_address = "00:00:00:00:00:00"; # Default-MAC
+ my @ifconfig = qx(/sbin/ifconfig);
+ foreach(@ifconfig) {
+ if (/Hardware Adresse (\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2})/) {
+ $mac_address = "$1:$2:$3:$4:$5:$6";
+ next;
+ }
+ if (/inet Adresse:(\d+).(\d+).(\d+).(\d+)/) {
+ $ip = "$1.$2.$3.$4";
+ last;
+ }
+ }
+ return ($ip, $mac_address);
+}
+
+
+
+#=== FUNCTION ================================================================
+# NAME: activating_child
+# PARAMETERS: msg - string - incoming message
+# host - string - host from which the incomming message comes
+# RETURNS: nothing
+# DESCRIPTION: handels the distribution of incoming messages to working childs
+#===============================================================================
+sub activating_child {
+ my ($msg, $host) = @_;
+ my $child = &get_processing_child();
+ my $pipe_wr = $$child{'pipe_wr'};
+ daemon_log("activating: childpid: $$child{'pid'}", 5);
+ print $pipe_wr $msg.".".$host."\n";
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: get_processing_child
+# PARAMETERS: nothing
+# RETURNS: child - hash - holding the process id and the references to the pipe
+# handles pipe_wr and pipe_rd
+# DESCRIPTION: handels the forking, reactivating and keeping alive tasks
+#===============================================================================
+sub get_processing_child {
+ my $child;
+ # checking %busy_child{pipe_wr} if msg is 'done', then set child from busy to free
+ while(my ($key, $val) = each(%busy_child)) {
+ # check wether process still exists
+ my $exitus_pid = waitpid($key, WNOHANG);
+ if($exitus_pid != 0) {
+ delete $busy_child{$key};
+ daemon_log( "prozess:$key wurde aus busy_child entfernt\n", 5);
+ next;
+ }
+
+ # check wether process sitll works
+ my $fh = $$val{'pipe_rd'};
+ $fh->blocking(0);
+ my $child_answer;
+ if(not $child_answer = <$fh>) { next }
+ chomp($child_answer);
+ if($child_answer eq "done") {
+ delete $busy_child{$key};
+ $free_child{$key} = $val;
+ }
+ }
+
+ while(my ($key, $val) = each(%free_child)) {
+ my $exitus_pid = waitpid($key, WNOHANG);
+ if($exitus_pid != 0) {
+ delete $free_child{$key};
+ daemon_log( "prozess:$key wurde aus free_child entfernt\n", 5);
+ }
+ daemon_log("free child:$key\n", 5);
+ }
+ # check @free_child and @busy_child
+ my $free_len = scalar(keys(%free_child));
+ my $busy_len = scalar(keys(%busy_child));
+ daemon_log("free children $free_len, busy children $busy_len\n",5);
+
+ # if there is a free child, let the child work
+ if($free_len > 0){
+ my @keys = keys(%free_child);
+ $child = $free_child{$keys[0]};
+ if(defined $child) {
+ $busy_child{$$child{'pid'}} = $child ;
+ delete $free_child{$$child{'pid'}};
+ }
+ return $child;
+ }
+
+ # no free child, try to fork another one
+ if($free_len + $busy_len < $child_max) {
+
+ daemon_log("not enough children, create a new one\n",5);
+
+ # New pipes for communication
+ my( $PARENT_wr, $PARENT_rd );
+ my( $CHILD_wr, $CHILD_rd );
+ pipe( $CHILD_rd, $PARENT_wr );
+ pipe( $PARENT_rd, $CHILD_wr );
+ $PARENT_wr->autoflush(1);
+ $CHILD_wr->autoflush(1);
+
+ ############
+ # fork child
+ ############
+ my $child_pid = fork();
+
+ #CHILD
+ if($child_pid == 0) {
+ # Close unused pipes
+ close( $CHILD_rd );
+ close( $CHILD_wr );
+ while( 1 ) {
+ my $rbits = "";
+ vec( $rbits, fileno $PARENT_rd , 1 ) = 1;
+
+ # waiting child_timeout for jobs to do
+ my $nf = select($rbits, undef, undef, $child_timeout);
+ if($nf < 0 ) {
+ # if $nf < 1, error handling
+ die "select(): $!\n";
+ } elsif (! $nf) {
+ # if already child_min childs are alive, then leave loop
+ $free_len = scalar(keys(%free_child));
+ $busy_len = scalar(keys(%busy_child));
+ if($free_len + $busy_len >= $child_min) {
+ last;
+ } else {
+ redo;
+ }
+ }
+
+ # a job for a child arise
+ if ( vec $rbits, fileno $PARENT_rd, 1 ) {
+ # read everything from pipe
+ my $msg = "";
+ $PARENT_rd->blocking(0);
+ while(1) {
+ my $read = <$PARENT_rd>;
+ if(not defined $read) { last}
+ $msg .= $read;
+ }
+
+ # forward the job msg to another function
+ &process_incoming_msg($msg);
+ daemon_log("processing of msg finished", 5);
+
+ # important!!! wait until child says 'done', until then child is set from busy to free
+ print $PARENT_wr "done";
+ redo;
+ }
+ }
+ # childs leaving the loop are allowed to die
+ exit(0);
+
+ #PARENT
+ } else {
+ # Close unused pipes
+ close( $PARENT_rd );
+ close( $PARENT_wr );
+ # add child to child alive hash
+ my %child_hash = (
+ 'pid' => $child_pid,
+ 'pipe_wr' => $CHILD_wr,
+ 'pipe_rd' => $CHILD_rd,
+ );
+
+ $child = \%child_hash;
+ $busy_child{$$child{'pid'}} = $child;
+ return $child;
+ }
+ }
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: process_incoming_msg
+# PARAMETERS: crypted_msg - string - incoming crypted message
+# RETURNS: nothing
+# DESCRIPTION: handels the proceeded distribution to the appropriated functions
+#===============================================================================
+sub process_incoming_msg {
+ my ($crypted_msg) = @_;
+ if(not defined $crypted_msg) {
+ daemon_log("function 'process_incoming_msg': got no msg", 7);
+ return;
+ }
+ $crypted_msg =~ /^([\s\S]*?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)$/;
+ $crypted_msg = $1;
+ my $host = sprintf("%s.%s.%s.%s", $2, $3, $4, $5);
+
+ daemon_log("msg from host:\n\t$host", 1);
+ daemon_log("crypted_msg:\n\t$crypted_msg", 7);
+
+ my @valid_keys;
+ my @daemon_keys = keys %$known_daemons;
+ foreach my $daemon_key (@daemon_keys) {
+ if($daemon_key =~ "^$daemon_key") {
+ push(@valid_keys, $daemon_key);
+ }
+ }
+
+ my $l = @valid_keys;
+ daemon_log("number of valid daemons: $l\n", 7);
+
+ my ($msg, $msg_hash);
+ my $msg_flag = 0;
+
+ # collect addresses from possible incoming clients
+ foreach my $host_key (@valid_keys) {
+ eval{
+ daemon_log( "daemon: $host_key\n", 7);
+ my $key_passwd = $known_daemons->{$host_key}->{passwd};
+ daemon_log("daemon_passwd: $key_passwd\n", 7);
+ my $key_cipher = &create_ciphering($key_passwd);
+ $msg = &decrypt_msg($crypted_msg, $key_cipher);
+ daemon_log("daemon decrypted msg:$msg", 7);
+ $msg_hash = $xml->XMLin($msg, ForceArray=>1);
+ };
+ if($@) {
+ daemon_log("msg processing raise error", 7);
+ daemon_log("error string: $@", 7);
+ $msg_flag += 1;
+ } else {
+ last;
+ }
+ }
+
+ if($msg_flag >= $l) {
+ daemon_log("\nERROR: do not understand the message:\n$msg" , 1);
+ return;
+ }
+
+ my $header = &get_content_from_xml_hash($msg_hash, "header");
+ my $target = &get_content_from_xml_hash($msg_hash, "target");
+
+ daemon_log("header from msg:\n\t$header", 1);
+ daemon_log("msg to process:\n\t$msg", 5);
+ daemon_log("msg is for: \n\t$target", 7);
+
+ if($target eq $bus_address) {
+ # msg is for bus
+ if($header eq 'here_i_am'){ &here_i_am($msg_hash)}
+ elsif($header eq 'confirm_new_passwd'){ &confirm_new_passwd($msg_hash)}
+ elsif($header eq 'got_ping') { &got_ping($msg_hash)}
+ elsif($header eq 'ping') { &ping($msg_hash)}
+ elsif($header eq 'who_has') { &who_has($msg_hash)}
+ elsif($header eq 'new_client') { &new_client($msg_hash)}
+ elsif($header eq 'delete_client') { &delete_client($msg_hash)}
+ } else {
+ # msg is for any other server
+ my @targets = @{$msg_hash->{target}};
+ my $len_targets = @targets;
+
+ if ($len_targets == 0){
+ # no targets specified
+
+ daemon_log("ERROR: no target specified for msg $header", 1);
+
+ } elsif ($targets[0] eq "*"){
+ # all deamons in known_daemons are targets
+
+ my $target = $targets[0];
+ my $source = @{$msg_hash->{source}}[0];
+ my @target_addresses = keys(%$known_daemons);
+ foreach my $target_address (@target_addresses) {
+ if ($target_address eq $source) { next; }
+ if ($target_address eq $bus_address) { next ; }
+ $msg_hash->{target} = [$target_address];
+ &send_msg_hash2address($msg_hash, $target_address);
+ }
+
+ } else {
+ # a list of targets is specified
+
+ my $target_address;
+ foreach $target_address (@targets) {
+ if (exists $known_daemons->{$target_address}) {
+ &send_msg_hash2address($msg_hash, $target_address);
+ } else {
+ my @daemon_addresses = keys %$known_daemons;
+ my $daemon_address;
+ foreach $daemon_address (@daemon_addresses) {
+ if (exists $known_daemons->{$daemon_address}->{clients}->{$target_address}) {
+ my $header = &get_content_from_xml_hash($msg_hash, "header");
+ &send_msg_hash2address($msg_hash, $daemon_address);
+ daemon_log("bus forwards msg $header for client $target_address to server $daemon_address", 3);
+ last;
+ }
+ }
+
+ }
+ }
+ }
+ }
+
+ &print_known_daemons_hash();
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: get_content_of_known_daemons
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+#sub get_content_of_known_daemons {
+# my ($host, $content) = @_;
+# return;
+#}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_passwd
+# PARAMETERS: nothing
+# RETURNS: new_passwd - string
+# DESCRIPTION: creates a 32 bit long random passwd out of "a".."z","A".."Z",0..9
+#===============================================================================
+sub create_passwd {
+ my $new_passwd = "";
+ for(my $i=0; $i<31; $i++) {
+ $new_passwd .= ("a".."z","A".."Z",0..9)[int(rand(62))]
+ }
+ return $new_passwd;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_ciphering
+# PARAMETERS: passwd - string - used to create ciphering
+# RETURNS: cipher - object
+# DESCRIPTION: creates a Crypt::Rijndael::MODE_CBC object with passwd as key
+#===============================================================================
+sub create_ciphering {
+ my ($passwd) = @_;
+ $passwd = substr(md5_hex("$passwd") x 32, 0, 32);
+ my $iv = substr(md5_hex('GONICUS GmbH'),0, 16);
+
+ #daemon_log("iv: $iv", 7);
+ #daemon_log("key: $passwd", 7);
+ my $my_cipher = Crypt::Rijndael->new($passwd , Crypt::Rijndael::MODE_CBC());
+ $my_cipher->set_iv($iv);
+ return $my_cipher;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: encrypt_msg
+# PARAMETERS: msg - string - message to encrypt
+# my_cipher - ref - reference to a Crypt::Rijndael object
+# RETURNS: crypted_msg - string - crypted message
+# DESCRIPTION: crypts the incoming message with the Crypt::Rijndael module
+#===============================================================================
+sub encrypt_msg {
+ my ($msg, $my_cipher) = @_;
+ if(not defined $my_cipher) { print "no cipher object\n"; }
+ $msg = "\0"x(16-length($msg)%16).$msg;
+ my $crypted_msg = $my_cipher->encrypt($msg);
+ chomp($crypted_msg = &encode_base64($crypted_msg));
+ return $crypted_msg;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: decrypt_msg
+# PARAMETERS: crypted_msg - string - message to decrypt
+# my_cipher - ref - reference to a Crypt::Rijndael object
+# RETURNS: msg - string - decrypted message
+# DESCRIPTION: decrypts the incoming message with the Crypt::Rijndael module
+#===============================================================================
+sub decrypt_msg {
+ my ($crypted_msg, $my_cipher) = @_ ;
+ $crypted_msg = &decode_base64($crypted_msg);
+ my $msg = $my_cipher->decrypt($crypted_msg);
+ $msg =~ s/^\0*//g;
+ return $msg;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_xml_hash
+# PARAMETERS: header - string - message header (required)
+# source - string - where the message come from (required)
+# target - string - where the message should go to (required)
+# [header_value] - string - something usefull (optional)
+# RETURNS: hash - hash - nomen est omen
+# DESCRIPTION: creates a key-value hash, all values are stored in a array
+#===============================================================================
+sub create_xml_hash {
+ my ($header, $source, $target, $header_value) = @_ ;
+
+ if (not defined $header || not defined $source || not defined $target) {
+ daemon_log("ERROR: create_xml_hash function is invoked with uncompleted parameters", 7);
+ }
+
+ my $hash = {
+ header => [$header],
+ source => [$source],
+ target => [$target],
+ $header => [$header_value],
+ };
+ #daemon_log("create_xml_hash:", 7),
+ #chomp(my $tmp = Dumper $hash);
+ #daemon_log("\t$tmp\n", 7);
+ return $hash
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_xml_string
+# PARAMETERS: xml_hash - hash - hash from function create_xml_hash
+# RETURNS: xml_string - string - xml string representation of the hash
+# DESCRIPTION: transform the hash to a string using XML::Simple module
+#===============================================================================
+sub create_xml_string {
+ my ($xml_hash) = @_ ;
+ my $xml_string = $xml->XMLout($xml_hash, RootName => 'xml');
+ $xml_string =~ s/[\n]+//g;
+ return $xml_string;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: add_content2xml_hash
+# PARAMETERS: xml_ref - ref - reference to a hash from function create_xml_hash
+# element - string - key for the hash
+# content - string - value for the hash
+# RETURNS: nothing
+# DESCRIPTION: add key-value pair to xml_ref, if key alread exists, then append value to list
+#===============================================================================
+sub add_content2xml_hash {
+ my ($xml_ref, $element, $content) = @_;
+ if(not exists $$xml_ref{$element} ) {
+ $$xml_ref{$element} = [];
+ }
+ my $tmp = $$xml_ref{$element};
+ push(@$tmp, $content);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: get_content_from_xml_hash
+# PARAMETERS: xml_ref - ref - reference of the xml hash
+# element - string - key of the value you want
+# RETURNS: value - string - if key is either header, target or source
+# value - list - for all other keys in xml hash
+# DESCRIPTION:
+#===============================================================================
+sub get_content_from_xml_hash {
+ my ($xml_ref, $element) = @_;
+ my $result = $xml_ref->{$element};
+ if( $element eq "header" || $element eq "target" || $element eq "source") {
+ return @$result[0];
+ }
+ return @$result;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: open_socket
+# PARAMETERS: PeerAddr - string - something like 192.168.1.1 or 192.168.1.1:10000
+# [PeerPort] - string - necessary if port not appended by PeerAddr
+# RETURNS: socket - IO::Socket::INET
+# DESCRIPTION: open a socket to PeerAddr
+#===============================================================================
+sub open_socket {
+ my ($PeerAddr, $PeerPort) = @_ ;
+ if(defined($PeerPort)){
+ $PeerAddr = $PeerAddr.":".$PeerPort;
+ }
+ my $socket;
+ $socket = new IO::Socket::INET(PeerAddr => $PeerAddr ,
+ Porto => "tcp" ,
+ Type => SOCK_STREAM,
+ Reuse => 1,
+ Timeout => 5,
+ );
+ if(not defined $socket) {
+ return;
+ }
+ return $socket;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: read_from_socket
+# PARAMETERS: socket - fh - filehandel to read from
+# RETURNS: result - string - readed characters from socket
+# DESCRIPTION: reads data from socket in 16 byte steps
+#===============================================================================
+sub read_from_socket {
+ my ($socket) = @_;
+
+ $socket->blocking(1);
+ my $result = <$socket>;
+ $socket->blocking(0);
+ my $part_msg;
+ while ($part_msg = <$socket>) {
+ if (not defined $part_msg) { last; }
+ $result .= $part_msg;
+ }
+
+ #my $result = "";
+ #my $len = 16;
+ #while($len == 16){
+ # my $char;
+ # $len = sysread($socket, $char, 16);
+ # if($len != 16) { last }
+ # if($len != 16) { last }
+ # $result .= $char;
+ #}
+ return $result;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: send_msg_hash2address
+# PARAMETERS: msg_hash - hash - xml_hash created with function create_xml_hash
+# PeerAddr string - socket address to send msg
+# PeerPort string - socket port, if not included in socket address
+# RETURNS: nothing
+# DESCRIPTION: ????
+#===============================================================================
+sub send_msg_hash2address {
+ my ($msg_hash, $address) = @_ ;
+
+ # fetch header for logging
+ my $header = &get_content_from_xml_hash($msg_hash, "header");
+
+ # generate xml string
+ my $msg_xml = &create_xml_string($msg_hash);
+
+ # fetch the appropriated passwd from hash
+ my $passwd = $known_daemons->{$address}->{passwd};
+
+ # create a ciphering object
+ my $act_cipher = &create_ciphering($passwd);
+
+ # encrypt xml msg
+ my $crypted_msg = &encrypt_msg($msg_xml, $act_cipher);
+
+ # open socket
+ my $socket = &open_socket($address);
+ if(not defined $socket){
+ daemon_log("ERROR: cannot send '$header'-msg to $address , server not reachable", 1);
+ return;
+ }
+
+ # send xml msg
+ print $socket $crypted_msg."\n";
+
+ close $socket;
+ daemon_log("send '$header'-msg to $address", 5);
+ daemon_log("crypted_msg:\n\t$crypted_msg", 7);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: send_msg_hash2all
+# PARAMETERS: msg_hash - hash - xml_hash created with function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: send msg_hash to all registered daemons
+#===============================================================================
+sub send_msg_hash2all {
+ my ($msg_hash) = @_;
+
+ # fetch header for logging
+ my $header = &get_content_from_xml_hash($msg_hash, "header");
+
+ # generate xml string
+ my $msg_xml = &create_xml_string($msg_hash);
+
+ # fetch a list of all target addresses
+ my @targets = keys(%$known_daemons);
+
+ # itterates through the list an send each the msg
+ foreach my $target (@targets) {
+ if($target eq $bus_address) {next}; # do not send msg to bus
+
+ # fetch the appropriated passwd
+ my $passwd = $known_daemons->{$target}->{passwd};
+
+ # create ciphering object
+ my $act_cipher = &create_ciphering($passwd);
+
+ # encrypt xml msg
+ my $crypted_msg = &encrypt_msg($msg_xml, $act_cipher);
+
+ # open socket
+ my $socket = &open_socket($target);
+ if(not defined $socket){
+ daemon_log("ERROR: cannot open socket to $target , server not reachable", 1);
+ &update_known_daemons_entry(hostname=>$target, status=>"down");
+ next;
+ }
+
+ # send xml msg
+ print $socket $crypted_msg."\n";
+
+ close $socket;
+ daemon_log("send '$header'-msg to $target", 5);
+ daemon_log("crypted_msg:\n\t$crypted_msg", 7);
+ }
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: here_i_am
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process the incoming msg 'here_i_am'
+#===============================================================================
+sub here_i_am {
+ my ($msg_hash) = @_ ;
+ my $source = &get_content_from_xml_hash($msg_hash, "source");
+
+ my $new_passwd = &create_passwd();
+
+ # create known_daemons entry
+ &create_known_daemons_entry($source);
+ &update_known_daemons_entry(hostname=>$source, status=>"registered", passwd=>$bus_passwd);
+
+ # create outgoing msg
+ my $out_hash = &create_xml_hash("new_passwd", "$bus_ip:$bus_port", $source, $new_passwd);
+ &send_msg_hash2address($out_hash, $source);
+
+ # change passwd, reason
+ # &send_msg_hash2address takes $known_daemons->{"$source"}->{passwd} to cipher msg
+ &update_known_daemons_entry(hostname=>$source, status=>"new_passwd", passwd=>$new_passwd);
+
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: confirm_new_passwd
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+sub confirm_new_passwd {
+ my ($msg_hash) = @_ ;
+ my $source = &get_content_from_xml_hash($msg_hash, "source");
+ &update_known_daemons_entry(hostname=>$source, status=>"confirmed_new_passwd");
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: ping
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+sub ping {
+ my ($msg_hash) = @_ ;
+ my $source = &get_content_from_xml_hash($msg_hash, "source");
+ &update_known_daemons_entry(hostname=>$source, status=>"ping");
+ my $out_hash = &create_xml_hash("got_ping", $bus_address, $source);
+ &send_msg_hash2address($out_hash, $source);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: make ping
+# PARAMETERS: address - string - address which should be pinged
+# RETURNS: nothing
+# DESCRIPTION: send ping message to address
+#===============================================================================
+sub make_ping {
+ my ($address) = @_;
+ daemon_log("ping:$address\n", 1);
+ my $out_hash = &create_xml_hash("ping", "$bus_ip:$bus_port", $address);
+ &send_msg_hash2address($out_hash, $address);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: got_ping
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+sub got_ping {
+ my ($msg_hash) = @_;
+ my $source = &get_content_from_xml_hash($msg_hash, "source");
+ &update_known_daemons_entry(hostname=>$source, status=>"got_ping");
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: new_client
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+sub new_client {
+ my ($msg_hash) = @_ ;
+ my $source = &get_content_from_xml_hash($msg_hash, "source");
+ my $header = &get_content_from_xml_hash($msg_hash, "header");
+ my $new_client = (&get_content_from_xml_hash($msg_hash, $header))[0];
+
+ &update_known_daemons_entry(hostname=>$source, client=>$new_client);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: delete_client
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+sub delete_client {
+ my ($msg_hash) = @_ ;
+ my $source = &get_content_from_xml_hash($msg_hash, "source");
+ my $header = &get_content_from_xml_hash($msg_hash, "header");
+ my $del_client = (&get_content_from_xml_hash($msg_hash, $header))[0];
+
+ if (not exists $known_daemons->{$source}->{$del_client}) {
+ daemon_log
+ }
+ delete $known_daemons->{$source}->{$del_client};
+
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: print_known_daemons_hash
+# PARAMETERS: nothing
+# RETURNS: nothing
+# DESCRIPTION: nome est omen
+#===============================================================================
+sub print_known_daemons_hash {
+ my ($tmp) = @_;
+ print "####################################\n";
+ print "# status of known_daemons\n";
+ my $hosts;
+ my $host_hash;
+ $shmkh->shlock(LOCK_EX);
+ my @hosts = keys %$known_daemons;
+ foreach my $host (@hosts) {
+ my $status = $known_daemons->{$host}->{status} ;
+ my $passwd = $known_daemons->{$host}->{passwd};
+ my $timestamp = $known_daemons->{$host}->{timestamp};
+ my @clients = keys %{$known_daemons->{$host}->{clients}};
+ my $client_string = join(", ", @clients);
+ print "$host\n";
+ print "\tstatus: $status\n";
+ print "\tpasswd: $passwd\n";
+ print "\ttimestamp: $timestamp\n";
+ print "\tclients: $client_string\n";
+
+ }
+ $shmkh->shunlock(LOCK_EX);
+ print "####################################\n\n";
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_known_daemons_entry
+# PARAMETERS: hostname - string - ip address and port of host
+# RETURNS: nothing
+# DESCRIPTION: nome est omen
+#===============================================================================
+sub create_known_daemons_entry {
+ my ($hostname) = @_;
+ $shmkh->shlock(LOCK_EX);
+ $known_daemons->{$hostname} = {};
+ $known_daemons->{$hostname}->{status} = "none";
+ $known_daemons->{$hostname}->{passwd} = "none";
+ $known_daemons->{$hostname}->{timestamp} = "none";
+ $known_daemons->{$hostname}->{clients} = {};
+ $shmkh->shunlock(LOCK_EX);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: update_known_daemons_entry
+# PARAMETERS: hostname - string - ip address and port of host (required)
+# status - string - (optional)
+# passwd - string - (optional)
+# client - string - ip address and port of client (optional)
+# RETURNS: nothing
+# DESCRIPTION: nome est omen and updates each time the timestamp of hostname
+#===============================================================================
+sub update_known_daemons_entry {
+ my $arg = {
+ hostname => undef, status => undef, passwd => undef,
+ client => undef,
+ @_ };
+ my $hostname = $arg->{hostname};
+ my $status = $arg->{status};
+ my $passwd = $arg->{passwd};
+ my $client = $arg->{client};
+
+ if (not defined $hostname) {
+ daemon_log("ERROR: function add_content2known_daemons is not invoked with requiered parameter 'hostname'", 1);
+ return;
+ }
+
+ my ($seconds, $minutes, $hours, $monthday, $month,
+ $year, $weekday, $yearday, $sommertime) = localtime(time);
+ $hours = $hours < 10 ? $hours = "0".$hours : $hours;
+ $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
+ $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
+ $month+=1;
+ $month = $month < 10 ? $month = "0".$month : $month;
+ $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
+ $year+=1900;
+ my $t = "$year$month$monthday$hours$minutes$seconds";
+
+ $shmkh->shlock(LOCK_EX);
+ if (defined $status) {
+ $known_daemons->{$hostname}->{status} = $status;
+ }
+ if (defined $passwd) {
+ $known_daemons->{$hostname}->{passwd} = $passwd;
+ }
+ if (defined $client) {
+ $known_daemons->{$hostname}->{clients}->{$client} = "";
+ }
+ $known_daemons->{$hostname}->{timestamp} = $t;
+ $shmkh->shunlock(LOCK_EX);
+ return;
+}
+
+
+#==== MAIN = main ==============================================================
+
+# parse commandline options
+Getopt::Long::Configure( "bundling" );
+GetOptions("h|help" => \&usage,
+ "c|config=s" => \$cfg_file,
+ "f|foreground" => \$foreground,
+ "v|verbose+" => \$verbose,
+ );
+
+# read and set config parameters
+&check_cmdline_param ;
+&read_configfile;
+&check_pid;
+
+$SIG{CHLD} = 'IGNORE';
+
+# restart daemon log file
+if(-e $log_file ) { unlink $log_file }
+daemon_log("$0 started!");
+
+# Just fork, if we"re not in foreground mode
+if( ! $foreground ) { $pid = fork(); }
+else { $pid = $$; }
+
+# Do something useful - put our PID into the pid_file
+if( 0 != $pid ) {
+ open( LOCK_FILE, ">$pid_file" );
+ print LOCK_FILE "$pid\n";
+ close( LOCK_FILE );
+ if( !$foreground ) { exit( 0 ) };
+}
+
+# detect own ip and mac address
+($bus_ip, $bus_mac_address) = &get_ip_and_mac();
+if (not defined $bus_ip) {
+ die "EXIT: ip address of $0 could not be detected";
+}
+daemon_log("bus ip address detected: $bus_ip", 1);
+daemon_log("bus mac address detected: $bus_mac_address", 1);
+
+
+# setup xml parser
+$xml = new XML::Simple();
+
+# create cipher object
+$bus_cipher = &create_ciphering($bus_passwd);
+$bus_address = "$bus_ip:$bus_port";
+
+# create reading and writing vectors
+my $rbits = my $wbits = my $ebits = "";
+
+# open the bus socket
+if($bus_activ eq "on") {
+ $bus = IO::Socket::INET->new(LocalPort => $bus_port,
+ Type => SOCK_STREAM,
+ Reuse => 1,
+ Listen => 20,
+ ) or die "kann kein TCP-Server an Port $bus_port sein: $@\n";
+ vec($rbits, fileno $bus, 1) = 1;
+ vec($wbits, fileno $bus, 1) = 1;
+ print "start bus at $bus_ip:$bus_port\n";
+}
+
+# add bus to known_daemons
+&create_known_daemons_entry($bus_address);
+&update_known_daemons_entry(hostname=>$bus_address, status=>"bus", passwd=>$bus_passwd);
+
+
+while(1) {
+ my $nf = select($rbits, $wbits, undef, undef);
+ # error handling
+ if($nf < 0 ) {
+ }
+
+ # something is coming in
+ if(vec $rbits, fileno $bus, 1 ) {
+ my $client = $bus->accept();
+ my $other_end = getpeername($client);
+ if(not defined $other_end) {
+ daemon_log("Gegenstelle konnte nicht identifiziert werden: $!\n");
+ } else {
+ my ($port, $iaddr) = unpack_sockaddr_in($other_end);
+ my $actual_ip = inet_ntoa($iaddr);
+ daemon_log("\naccept client from $actual_ip\n", 5);
+ my $in_msg = &read_from_socket($client);
+ if(defined $in_msg){
+ &activating_child($in_msg, $actual_ip);
+ } else {
+ daemon_log("cannot read from $actual_ip\n",1);
+ }
+ }
+ close($client);
+ }
+
+}
+
+
diff --git a/gosa-si/gosa-si-bus.conf-template b/gosa-si/gosa-si-bus.conf-template
--- /dev/null
@@ -0,0 +1,13 @@
+[general]
+log_file = /var/log/gosa-si-bus.log
+pid_file = /var/run/gosa-si-bus.pid
+child_max = 10
+child_min = 2
+child_timeout = 10
+
+[bus]
+bus_activ = on
+bus_passwd = secret-bus-password
+bus_ip = 127.0.0.1
+bus_port = 20080
+
diff --git a/gosa-si/gosa-si-client b/gosa-si/gosa-si-client
--- /dev/null
+++ b/gosa-si/gosa-si-client
@@ -0,0 +1,1109 @@
+#!/usr/bin/perl
+#===============================================================================
+#
+# FILE: gosa-server
+#
+# USAGE: ./gosasc
+#
+# DESCRIPTION:
+#
+# OPTIONS: ---
+# REQUIREMENTS: ---
+# BUGS: ---
+# NOTES:
+# AUTHOR: (Andreas Rettenberger), <rettenberger@gonicus.de>
+# COMPANY:
+# VERSION: 1.0
+# CREATED: 12.09.2007 08:54:41 CEST
+# REVISION: ---
+#===============================================================================
+
+use strict;
+use warnings;
+use Getopt::Long;
+use Config::IniFiles;
+use POSIX;
+use Time::HiRes qw( gettimeofday );
+
+use Fcntl;
+use IO::Socket::INET;
+use Crypt::Rijndael;
+use MIME::Base64;
+use Digest::MD5 qw(md5 md5_hex md5_base64);
+use XML::Simple;
+use Data::Dumper;
+use Sys::Syslog qw( :DEFAULT setlogsock);
+use File::Spec;
+use Cwd;
+use GosaSupportDaemon;
+
+
+my ($cfg_file, %cfg_defaults, $foreground, $verbose, $pid_file, $procid, $pid, $log_file);
+my ($server_address, $server_ip, $server_port, $server_domain, $server_passwd, $server_cipher, $server_timeout);
+my ($client_address, $client_ip, $client_port, $client_mac_address);
+my ($input_socket, $rbits, $wbits, $ebits, $xml, $known_hosts);
+my (@events);
+
+# default variables
+my $event_dir = "/etc/gosac/events";
+$known_hosts = {};
+$foreground = 0 ;
+%cfg_defaults =
+("general" =>
+ {"log_file" => [\$log_file, "/var/run/".$0.".log"],
+ "pid_file" => [\$pid_file, "/var/run/".$0.".pid"],
+ },
+"client" =>
+ {"client_port" => [\$client_port, "20083"],
+ },
+"server" =>
+ {"server_ip" => [\$server_ip, ""],
+ "server_port" => [\$server_port, "20081"],
+ "server_passwd" => [\$server_passwd, ""],
+ "server_timeout" => [\$server_timeout, 10],
+ "server_domain" => [\$server_domain, ""],
+ },
+ );
+
+
+#=== FUNCTION ================================================================
+# NAME: read_configfile
+# PARAMETERS: cfg_file - string -
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub read_configfile {
+ my $cfg;
+ if( defined( $cfg_file) && ( length($cfg_file) > 0 )) {
+ if( -r $cfg_file ) {
+ $cfg = Config::IniFiles->new( -file => $cfg_file );
+ } else {
+ print STDERR "Couldn't read config file!";
+ }
+ } else {
+ $cfg = Config::IniFiles->new() ;
+ }
+ foreach my $section (keys %cfg_defaults) {
+ foreach my $param (keys %{$cfg_defaults{ $section }}) {
+ my $pinfo = $cfg_defaults{ $section }{ $param };
+ ${@$pinfo[ 0 ]} = $cfg->val( $section, $param, @$pinfo[ 1 ] );
+ }
+ }
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: logging
+# PARAMETERS: level - string - default 'info'
+# msg - string -
+# facility - string - default 'LOG_DAEMON'
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub daemon_log {
+ my( $msg, $level ) = @_;
+ if(not defined $msg) { return }
+ if(not defined $level) { $level = 1 }
+ if(defined $log_file){
+ open(LOG_HANDLE, ">>$log_file");
+ if(not defined open( LOG_HANDLE, ">>$log_file" )) {
+ print STDERR "cannot open $log_file: $!";
+ return }
+ chomp($msg);
+ if($level <= $verbose){
+ print LOG_HANDLE $msg."\n";
+ if(defined $foreground) { print $msg."\n" }
+ }
+ }
+ close( LOG_HANDLE );
+# my ($msg, $level, $facility) = @_;
+# if(not defined $msg) {return}
+# if(not defined $level) {$level = "info"}
+# if(not defined $facility) {$facility = "LOG_DAEMON"}
+# openlog($0, "pid,cons,", $facility);
+# syslog($level, $msg);
+# closelog;
+# return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: check_cmdline_param
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub check_cmdline_param () {
+ my $err_config;
+ my $err_counter = 0;
+ if( not defined( $cfg_file)) {
+ #$err_config = "please specify a config file";
+ #$err_counter += 1;
+ my $cwd = getcwd;
+ my $name = "/etc/gosa/gosa-si-client.conf";
+ $cfg_file = File::Spec->catfile( $cwd, $name );
+ print STDERR "no conf file specified\n try to use default: $cfg_file\n";
+ }
+ if( $err_counter > 0 ) {
+ &usage( "", 1 );
+ if( defined( $err_config)) { print STDERR "$err_config\n"}
+ print STDERR "\n";
+ exit( -1 );
+ }
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: check_pid
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub check_pid {
+ $pid = -1;
+ # Check, if we are already running
+ if( open(LOCK_FILE, "<$pid_file") ) {
+ $pid = <LOCK_FILE>;
+ if( defined $pid ) {
+ chomp( $pid );
+ if( -f "/proc/$pid/stat" ) {
+ my($stat) = `cat /proc/$pid/stat` =~ m/$pid \((.+)\).*/;
+ if( $0 eq $stat ) {
+ close( LOCK_FILE );
+ exit -1;
+ }
+ }
+ }
+ close( LOCK_FILE );
+ unlink( $pid_file );
+ }
+
+ # create a syslog msg if it is not to possible to open PID file
+ if (not sysopen(LOCK_FILE, $pid_file, O_WRONLY|O_CREAT|O_EXCL, 0644)) {
+ my($msg) = "Couldn't obtain lockfile '$pid_file' ";
+ if (open(LOCK_FILE, '<', $pid_file)
+ && ($pid = <LOCK_FILE>))
+ {
+ chomp($pid);
+ $msg .= "(PID $pid)\n";
+ } else {
+ $msg .= "(unable to read PID)\n";
+ }
+ if( ! ($foreground) ) {
+ openlog( $0, "cons,pid", "daemon" );
+ syslog( "warning", $msg );
+ closelog();
+ }
+ else {
+ print( STDERR " $msg " );
+ }
+ exit( -1 );
+ }
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: get_ip_and_mac
+# PARAMETERS: nothing
+# RETURNS: (ip, mac)
+# DESCRIPTION: executes /sbin/ifconfig and parses the output, the first occurence
+# of a inet address is returned as well as the mac address in the line
+# above the inet address
+#===============================================================================
+sub get_ip_and_mac {
+ my $ip = "0.0.0.0.0"; # Defualt-IP
+ my $mac = "00:00:00:00:00:00"; # Default-MAC
+ my @ifconfig = qx(/sbin/ifconfig);
+ foreach(@ifconfig) {
+ if (/Hardware Adresse (\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2})/) {
+ $mac = "$1:$2:$3:$4:$5:$6";
+ next;
+ }
+ if (/inet Adresse:(\d+).(\d+).(\d+).(\d+)/) {
+ $ip = "$1.$2.$3.$4";
+ last;
+ }
+ }
+ return ($ip, $mac);
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: usage
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub usage {
+ my( $text, $help ) = @_;
+ $text = undef if( "h" eq $text );
+ (defined $text) && print STDERR "\n$text\n";
+ if( (defined $help && $help) || (!defined $help && !defined $text) ) {
+ print STDERR << "EOF" ;
+usage: $0 [-hvf] [-c config]
+
+ -h : this (help) message
+ -c <file> : config file
+ -f : foreground, process will not be forked to background
+ -v : be verbose (multiple to increase verbosity)
+EOF
+ }
+ print "\n" ;
+}
+
+#=== FUNCTION ================================================================
+# NAME: get_server_addresses
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub get_server_addresses {
+ my $domain= shift;
+ my @result;
+ my $dig_cmd= 'dig +nocomments srv _gosad._tcp.'.$domain;
+
+ my $output= `$dig_cmd 2>&1`;
+ open (PIPE, "$dig_cmd 2>&1 |");
+ while(<PIPE>) {
+ chomp $_;
+ # If it's not a comment
+ if($_ =~ m/^[^;]/) {
+ my @matches= split /\s+/;
+
+ # Push hostname with port
+ if($matches[3] eq 'SRV') {
+ push @result, $matches[7].':'.$matches[6];
+ } elsif ($matches[3] eq 'A') {
+ my $i=0;
+
+ # Substitute the hostname with the ip address of the matching A record
+ foreach my $host (@result) {
+ if ((split /\:/, $host)[0] eq $matches[0]) {
+ $result[$i]= $matches[4].':'.(split /\:/, $host)[1];
+ }
+ $i++;
+ }
+ }
+ }
+ }
+ close(PIPE);
+ return @result;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: register_at_server
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub register_at_server {
+ my ($tmp) = @_;
+
+ # create new passwd and ciphering object for client-server communication
+ my $new_server_passwd = &create_passwd();
+ my $new_server_cipher;
+
+ # detect all client accepted events
+ opendir(DIR, $event_dir)
+ or daemon_log("cannot find directory $event_dir!\ngosac starts without any accepting events!", 1);
+ my $file_name;
+ @events = ();
+ while(defined($file_name = readdir(DIR))){
+ if ($file_name eq "." || $file_name eq "..") {
+ next;
+ }
+ push(@events, $file_name);
+ }
+ my $events = join(",", @events);
+ daemon_log("found events: $events", 1);
+
+ # fill in all possible servers
+ my @servers;
+ if (defined $server_domain) {
+ my @tmp_servers = &get_server_addresses($server_domain);
+ foreach my $server (@tmp_servers) { unshift(@servers, $server); }
+ }
+ # add server address from config file at first position of server list
+ if (defined $server_address) {
+ unshift(@servers, $server_address);
+ }
+ daemon_log("found servers in configuration file and via DNS:", 5);
+ foreach my $server (@servers) {
+ daemon_log("\t$server", 5);
+ }
+
+ my ($rout, $wout, $reg_server);
+ foreach my $server (@servers) {
+ # create msg hash
+ my $register_hash = &create_xml_hash("here_i_am", $client_address, $server);
+ &add_content2xml_hash($register_hash, "new_passwd", $new_server_passwd);
+ &add_content2xml_hash($register_hash, "client_mac_address", $client_mac_address);
+ &add_content2xml_hash($register_hash, "events", $events);
+
+ # send xml hash to server with general server passwd
+ my $answer = &send_msg_hash2address($register_hash, $server, $server_passwd);
+
+ # sending fails, no sens to wait for response
+ if ($answer ne "done") { next; }
+
+ # waiting for response
+ daemon_log("waiting for response...\n", 5);
+ my $nf = select($rout=$rbits, $wout=$wbits, undef, $server_timeout);
+
+ # something is coming in
+ if(vec $rout, fileno $input_socket, 1) {
+ my $crypted_msg;
+ my $client = $input_socket->accept();
+ my $other_end = getpeername($client);
+ if(not defined $other_end) {
+ daemon_log("client cannot be identified: $!\n");
+ } else {
+ my ($port, $iaddr) = unpack_sockaddr_in($other_end);
+ my $actual_ip = inet_ntoa($iaddr);
+ daemon_log("\naccept client from $actual_ip\n", 5);
+ my $in_msg = &read_from_socket($client);
+ if(defined $in_msg){
+ chomp($in_msg);
+ $crypted_msg = $in_msg;
+ } else {
+ daemon_log("cannot read from $actual_ip\n", 5);
+ }
+ }
+ close($client);
+
+ # validate acknowledge msg from server
+ $new_server_cipher = &create_ciphering($new_server_passwd);
+ my $msg_hash;
+ eval {
+ my $decrypted_msg = &decrypt_msg($crypted_msg, $new_server_cipher);
+ daemon_log("decrypted register msg: $decrypted_msg", 5);
+ $msg_hash = $xml->XMLin($decrypted_msg, ForceArray=>1);
+ };
+ if($@) {
+ daemon_log("ERROR: do not understand the incoming message:" , 5);
+ daemon_log("$@", 7);
+ } else {
+ my $header = &get_content_from_xml_hash($msg_hash, "header");
+ if($header eq "registered") {
+ $reg_server = $server;
+ last;
+ } elsif($header eq "denied") {
+ my $reason = (&get_content_from_xml_hash($msg_hash, "denied"))[0];
+ daemon_log("registration at $server denied: $reason", 1);
+ } else {
+ daemon_log("cannot register at $server", 1);
+ }
+ }
+ }
+ # kommt antwort nicht, dann probiere es mit dem nächsten in der liste
+
+ }
+
+ if(defined $reg_server) {
+ daemon_log("registered at $reg_server", 1);
+ } else {
+ daemon_log("cannot register at any server", 1);
+ daemon_log("exiting!!!", 1);
+ exit(1);
+ }
+
+ # update the global available variables
+ $server_address = $reg_server;
+ $server_passwd = $new_server_passwd;
+ $server_cipher = $new_server_cipher;
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_xml_hash
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub create_xml_hash {
+ my ($header, $source, $target, $header_value) = @_;
+ my $hash = {
+ header => [$header],
+ source => [$source],
+ target => [$target],
+ $header => [$header_value],
+ };
+ daemon_log("create_xml_hash:", 7),
+ chomp(my $tmp = Dumper $hash);
+ daemon_log("\t$tmp\n", 7);
+ return $hash
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_xml_string
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub create_xml_string {
+ my ($xml_hash) = @_ ;
+ my $xml_string = $xml->XMLout($xml_hash, RootName => 'xml');
+ $xml_string =~ s/[\n]+//g;
+ daemon_log("create_xml_string:\n\t$xml_string\n", 7);
+ return $xml_string;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: add_content2xml_hash
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub add_content2xml_hash {
+ my ($xml_ref, $element, $content) = @_;
+ if(not exists $$xml_ref{$element} ) {
+ $$xml_ref{$element} = [];
+ }
+ my $tmp = $$xml_ref{$element};
+ push(@$tmp, $content);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: get_content_from_xml_hash
+# PARAMETERS: ref : reference to the xml hash
+# string: key of the value you want
+# RETURNS: STRING AND ARRAY
+# DESCRIPTION: if key of the hash is either 'header', 'target' or 'source' the
+# function returns a string cause it is expected that these keys
+# do just have one value, all other keys returns an array!!!
+#===============================================================================
+sub get_content_from_xml_hash {
+ my ($xml_ref, $element) = @_;
+ my $result = $xml_ref->{$element};
+ if( $element eq "header" || $element eq "target" || $element eq "source") {
+ return @$result[0];
+ }
+ return @$result;
+}
+
+# my ($xml_ref, $element) = @_;
+# if (exists $xml_ref->{$element}) {
+# my $result = $xml_ref->{$element};
+# if( $element eq "header" || $element eq "target" || $element eq "source") {
+# return @$result[0];
+# } else {
+# return @$result;
+# }
+#
+# } else {
+# my $result = ();
+# return @$result;
+# }
+#}
+
+
+#=== FUNCTION ================================================================
+# NAME: encrypt_msg
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub encrypt_msg {
+ my ($msg, $my_cipher) = @_;
+ if(not defined $my_cipher) { print "no cipher object\n"; }
+ $msg = "\0"x(16-length($msg)%16).$msg;
+ my $crypted_msg = $my_cipher->encrypt($msg);
+ chomp($crypted_msg = &encode_base64($crypted_msg));
+ return $crypted_msg;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: decrypt_msg
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub decrypt_msg {
+ my ($crypted_msg, $my_cipher) = @_ ;
+ $crypted_msg = &decode_base64($crypted_msg);
+ my $msg = $my_cipher->decrypt($crypted_msg);
+ $msg =~ s/\0*//g;
+ return $msg;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_ciphering
+# PARAMETERS:
+# RETURNS: cipher object
+# DESCRIPTION:
+#===============================================================================
+sub create_ciphering {
+ my ($passwd) = @_;
+ $passwd = substr(md5_hex("$passwd") x 32, 0, 32);
+ my $iv = substr(md5_hex('GONICUS GmbH'),0, 16);
+
+ #daemon_log("iv: $iv", 7);
+ #daemon_log("key: $passwd", 7);
+ my $my_cipher = Crypt::Rijndael->new($passwd , Crypt::Rijndael::MODE_CBC());
+ $my_cipher->set_iv($iv);
+ return $my_cipher;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_passwd
+# PARAMETERS:
+# RETURNS: cipher object
+# DESCRIPTION:
+#===============================================================================
+sub create_passwd {
+ my $new_passwd = "";
+ for(my $i=0; $i<31; $i++) {
+ $new_passwd .= ("a".."z","A".."Z",0..9)[int(rand(62))]
+ }
+
+ return $new_passwd;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: send_msg_hash2address
+# PARAMETERS: msg string - xml message
+# PeerAddr string - socket address to send msg
+# PeerPort string - socket port, if not included in socket address
+# RETURNS: nothing
+# DESCRIPTION: ????
+#===============================================================================
+sub send_msg_hash2address {
+ my ($msg_hash, $address, $passwd) = @_ ;
+
+ # fetch header for logging
+ my $header = @{$msg_hash->{header}}[0];
+
+ # generiere xml string
+ my $msg_xml = &create_xml_string($msg_hash);
+
+ # hole das entsprechende passwd aus dem hash
+ if(not defined $passwd) {
+ if(exists $known_hosts->{$address}) {
+ $passwd = $known_hosts->{$address}->{passwd};
+ } elsif ($address eq $server_address) {
+ $passwd = $server_passwd;
+ } else {
+ daemon_log("$address not known, neither as server nor as client", 1);
+ return "failed";
+ }
+ }
+
+ # erzeuge ein ciphering object
+ my $act_cipher = &create_ciphering($passwd);
+
+ # encrypt xml msg
+ my $crypted_msg = &encrypt_msg($msg_xml, $act_cipher);
+
+ # öffne socket
+ my $socket = &open_socket($address);
+ if(not defined $socket){
+ daemon_log("cannot open socket to $address, server not reachable", 1);
+ daemon_log("cannot send '$header'-msg", 1);
+ return "failed";
+ }
+
+ # versende xml msg
+ print $socket $crypted_msg."\n";
+
+ # schließe socket
+ close $socket;
+
+ daemon_log("send '$header'-msg to $address", 5);
+ daemon_log("crypted_msg:\n\t$crypted_msg", 7);
+
+ return "done";
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: open_socket
+# PARAMETERS: PeerAddr string something like 192.168.1.1 or 192.168.1.1:10000
+# [PeerPort] string necessary if port not appended by PeerAddr
+# RETURNS: socket IO::Socket::INET
+# DESCRIPTION:
+#===============================================================================
+sub open_socket {
+ my ($PeerAddr, $PeerPort) = @_ ;
+ if(defined($PeerPort)){
+ $PeerAddr = $PeerAddr.":".$PeerPort;
+ }
+ my $socket;
+ $socket = new IO::Socket::INET(PeerAddr => $PeerAddr ,
+ Porto => "tcp" ,
+ Type => SOCK_STREAM,
+ Timeout => 5,
+ );
+ if(not defined $socket) {
+ #daemon_log("cannot connect to socket at $PeerAddr, $@\n");
+ return;
+ }
+ daemon_log("open_socket:\n\t$PeerAddr", 7);
+ return $socket;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: read_from_socket
+# PARAMETERS: socket fh -
+# RETURNS: result string - readed characters from socket
+# DESCRIPTION: reads data from socket in 16 byte steps
+#===============================================================================
+sub read_from_socket {
+ my ($socket) = @_;
+ my $result = "";
+
+ $socket->blocking(1);
+ $result = <$socket>;
+
+ $socket->blocking(0);
+ while ( my $char = <$socket> ) {
+ if (not defined $char) { last }
+ $result .= $char;
+ }
+ return $result;
+
+
+
+# my ($socket) = @_;
+# my $result = "";
+# my $len = 16;
+# while($len == 16){
+# my $char;
+# $len = sysread($socket, $char, 16);
+# if($len != 16) { last }
+# if($len != 16) { last }
+# $result .= $char;
+# }
+# return $result;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: print_known_hosts_hash
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub print_known_hosts_hash {
+ my ($tmp) = @_;
+ print "####################################\n";
+ print "# status of known_hosts\n";
+ my $hosts;
+ my $host_hash;
+ my @hosts = keys %$known_hosts;
+ foreach my $host (@hosts) {
+ #my @elements = keys %$known_hosts->{$host};
+ my $status = $known_hosts->{$host}->{status} ;
+ my $passwd = $known_hosts->{$host}->{passwd};
+ my $timestamp = $known_hosts->{$host}->{timestamp};
+ print "$host\n";
+ print "\t$status\n";
+ print "\t$passwd\n";
+ print "\t$timestamp\n";
+ }
+ print "####################################\n";
+ return;
+}
+
+#=== FUNCTION ================================================================
+# NAME:
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub create_known_hosts_entry {
+ my ($hostname) = @_;
+ $known_hosts->{$hostname} = {};
+ $known_hosts->{$hostname}->{status} = "none";
+ $known_hosts->{$hostname}->{passwd} = "none";
+ $known_hosts->{$hostname}->{timestamp} = "none";
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME:
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub update_known_hosts_entry {
+ my ($hostname, $status, $passwd, $timestamp) = @_;
+ my ($seconds, $minutes, $hours, $monthday, $month,
+ $year, $weekday, $yearday, $sommertime) = localtime(time);
+ $hours = $hours < 10 ? $hours = "0".$hours : $hours;
+ $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
+ $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
+ $month+=1;
+ $month = $month < 10 ? $month = "0".$month : $month;
+ $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
+ $year+=1900;
+ my $t = "$year$month$monthday$hours$minutes$seconds";
+
+ if($status) {
+ $known_hosts->{$hostname}->{status} = $status;
+ }
+ if($passwd) {
+ $known_hosts->{$hostname}->{passwd} = $passwd;
+ }
+ if($timestamp) {
+ $t = $timestamp;
+ }
+ $known_hosts->{$hostname}->{timestamp} = $t;
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME:
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub add_content2known_hosts {
+ my ($hostname, $element, $content) = @_;
+ my ($seconds, $minutes, $hours, $monthday, $month,
+ $year, $weekday, $yearday, $sommertime) = localtime(time);
+ $hours = $hours < 10 ? $hours = "0".$hours : $hours;
+ $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
+ $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
+ $month+=1;
+ $month = $month < 10 ? $month = "0".$month : $month;
+ $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
+ $year+=1900;
+ my $t = "$year$month$monthday$hours$minutes$seconds";
+
+ $known_hosts->{$hostname}->{$element} = $content;
+ $known_hosts->{$hostname}->{timestamp} = $t;
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME:
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub process_incoming_msg {
+ my ($crypted_msg) = @_;
+ if(not defined $crypted_msg) {
+ daemon_log("function 'process_incoming_msg': got no msg", 7);
+ }
+ $crypted_msg =~ /^([\s\S]*?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)$/;
+ $crypted_msg = $1;
+ my $host = sprintf("%s.%s.%s.%s", $2, $3, $4, $5);
+ daemon_log("msg from host:", 1);
+ daemon_log("\t$host", 1);
+ daemon_log("crypted msg:", 7);
+ daemon_log("\t$crypted_msg", 7);
+
+ my $act_cipher = &create_ciphering($server_passwd);
+
+ # try to decrypt incoming msg
+ my ($msg, $msg_hash);
+ eval{
+ $msg = &decrypt_msg($crypted_msg, $act_cipher);
+ $msg_hash = $xml->XMLin($msg, ForceArray=>1);
+ };
+ if($@) {
+ daemon_log("ERROR: incoming msg cannot be decrypted with server passwd", 1);
+ return;
+ }
+
+ my $header = &get_content_from_xml_hash($msg_hash, "header");
+
+ daemon_log("header from msg:", 1);
+ daemon_log("\t$header", 1);
+ daemon_log("msg to process:", 7);
+ daemon_log("\t$msg", 7);
+
+ #check whether msg to process is a event
+ opendir(DIR, $event_dir)
+ or daemon_log("cannot find directory $event_dir, no events specified", 5);
+ my $file_name;
+ while(defined($file_name = readdir(DIR))){
+ if ($file_name eq "." || $file_name eq "..") {
+ next;
+ }
+ if ($file_name eq $header) {
+ my $cmd = "$event_dir/$file_name '$msg'";
+ my $result_xml = "";
+ open(PIPE, "$cmd 2>&1 |");
+ while(<PIPE>) {
+ $result_xml.=$_;
+ last;
+ }
+ close(PIPE);
+ my $res_hash = &transform_msg2hash($result_xml);
+ my $res_target = @{$res_hash->{target}}[0];
+ &send_msg_hash2address($res_hash, $server_address);
+
+ return;
+ }
+ }
+ close(DIR);
+ daemon_log("could not assign the msg $header to an event", 5);
+
+
+
+ if ($header eq 'new_ldap_config') { &new_ldap_config($msg_hash)}
+ elsif ($header eq 'ping') { &got_ping($msg_hash) }
+ elsif ($header eq 'wake_up') { &execute_event($msg_hash)}
+ elsif ($header eq 'new_passwd') { &new_passwd()}
+ else { daemon_log("ERROR: no function assigned to msg $header", 5) }
+
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME:
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub update_status {
+ my ($new_status) = @_ ;
+ my $out_hash = &create_xml_hash("update_status", $client_address, $server_address);
+ &add_content2xml_hash($out_hash, "update_status", $new_status);
+ &send_msg_hash2address($out_hash, $server_address);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME:
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub server_leaving {
+ my ($msg_hash) = @_ ;
+ my $source = &get_content_from_xml_hash("source");
+ my $header = &get_content_from_xml_hash("header");
+
+ daemon_log("gosa daemon $source is going down, cause registration procedure", 1);
+ my $server_address = "none";
+ my $server_passwd = "none";
+ my $server_cipher = "none";
+
+ # reinitialization of default values in config file
+ &read_configfile;
+
+ # registrated at new daemon
+ ®ister_at_server();
+
+ return;
+}
+
+
+sub got_ping {
+ my ($msg_hash) = @_ ;
+
+ my $source = &get_content_from_xml_hash($msg_hash, 'source');
+ my $target = &get_content_from_xml_hash($msg_hash, 'target');
+ my $header = &get_content_from_xml_hash($msg_hash, 'header');
+
+ &add_content2known_hosts(hostname=>$target, status=>$header);
+
+ my $out_hash = &create_xml_hash("got_ping", $target, $source);
+ &send_msg_hash2address($out_hash, $source, $server_passwd);
+
+ return;
+}
+
+
+sub new_ldap_config {
+ my ($msg_hash) = @_ ;
+
+ my @gotoLdapServer = &get_content_from_xml_hash($msg_hash, "new_ldap_config");
+ print Dumper @gotoLdapServer;
+
+
+ return;
+
+}
+
+
+sub execute_event {
+ my ($msg_hash)= @_;
+ my $configdir= '/etc/gosac/events/';
+ my $result;
+
+ my $header = &get_content_from_xml_hash($msg_hash, 'header');
+ my $source = &get_content_from_xml_hash($msg_hash, 'source');
+ my $target = &get_content_from_xml_hash($msg_hash, 'target');
+
+
+ if((not defined $source)
+ && (not defined $target)
+ && (not defined $header)) {
+ daemon_log("ERROR: Entries missing in XML msg for gosa events under /etc/gosac/events");
+ } else {
+ my $parameters="";
+ my @params = &get_content_from_xml_hash($msg_hash, $header);
+ my $params = join(", ", @params);
+ daemon_log("execute_event: got parameters: $params", 5);
+
+ if (@params) {
+ foreach my $param (@params) {
+ my $param_value = (&get_content_from_xml_hash($msg_hash, $param))[0];
+ daemon_log("execute_event: parameter -> value: $param -> $param_value", 7);
+ $parameters.= " ".$param_value;
+ }
+ }
+
+ my $cmd= $configdir.$header."$parameters";
+ daemon_log("execute_event: executing cmd: $cmd", 7);
+ $result= "";
+ open(PIPE, "$cmd 2>&1 |");
+ while(<PIPE>) {
+ $result.=$_;
+ }
+ close(PIPE);
+ }
+
+ # process the event result
+
+
+ return;
+}
+
+
+sub new_passwd {
+ # my ($msg_hash) = @_ ;
+ my $new_server_passwd = &create_passwd();
+ my $new_server_cipher = &create_ciphering($new_server_passwd);
+
+ my $out_hash = &create_xml_hash("new_passwd", $client_address, $server_address, $new_server_passwd);
+
+ &send_msg_hash2address($out_hash, $server_address, $server_passwd);
+
+ $server_passwd = $new_server_passwd;
+ $server_cipher = $new_server_cipher;
+ return;
+}
+
+
+
+
+#==== MAIN = main ==============================================================
+
+# parse commandline options
+Getopt::Long::Configure( "bundling" );
+GetOptions("h|help" => \&usage,
+ "c|config=s" => \$cfg_file,
+ "f|foreground" => \$foreground,
+ "v|verbose+" => \$verbose,
+ );
+
+# read and set config parameters
+&check_cmdline_param ;
+&read_configfile;
+&check_pid;
+
+# restart daemon log file
+if(-e $log_file ) { unlink $log_file }
+daemon_log("started!");
+
+# Just fork, if we"re not in foreground mode
+if( ! $foreground ) { $pid = fork(); }
+else { $pid = $$; }
+
+# Do something useful - put our PID into the pid_file
+if( 0 != $pid ) {
+ open( LOCK_FILE, ">$pid_file" );
+ print LOCK_FILE "$pid\n";
+ close( LOCK_FILE );
+ if( !$foreground ) { exit( 0 ) };
+}
+
+# detect own ip and mac address
+($client_ip, $client_mac_address) = &get_ip_and_mac();
+if (not defined $client_ip) {
+ die "EXIT: ip address of $0 could not be detected";
+}
+daemon_log("client ip address detected: $client_ip", 1);
+daemon_log("client mac address detected: $client_mac_address", 1);
+
+# prepare variables
+if (defined $server_ip && defined $server_port) {
+ $server_address = $server_ip.":".$server_port;
+}
+$client_address = $client_ip.":".$client_port;
+
+# setup xml parser
+$xml = new XML::Simple();
+
+# create input socket
+$rbits = $wbits = $ebits = "";
+$input_socket = IO::Socket::INET->new(LocalPort => $client_port,
+ Type => SOCK_STREAM,
+ Reuse => 1,
+ Listen => 20,
+ );
+if(not defined $input_socket){
+ daemon_log("cannot be a tcp server at $client_port : $@\n");
+} else {
+ daemon_log("start server:\n\t$server_ip:$client_port",1) ;
+ vec($rbits, fileno $input_socket, 1) = 1;
+ vec($wbits, fileno $input_socket, 1) = 1;
+}
+
+# register at server
+®ister_at_server();
+
+
+##############
+# Debugging
+#############
+#sleep(2);
+#&update_status("ich_bin_ein_neuer_status");
+
+###################################
+#everything ready, okay, lets start
+###################################
+while(1) {
+ my ($rout, $wout);
+ my $nf = select($rout=$rbits, $wout=$wbits, undef, undef);
+
+ # error handling
+ if($nf < 0 ) {
+ }
+
+ # something is coming in
+ if(vec $rout, fileno $input_socket, 1) {
+ my $client = $input_socket->accept();
+ my $other_end = getpeername($client);
+
+ if(not defined $other_end) {
+ daemon_log("client cannot be identified: $!");
+ } else {
+ my ($port, $iaddr) = unpack_sockaddr_in($other_end);
+ my $actual_ip = inet_ntoa($iaddr);
+ daemon_log("accept client from $actual_ip", 5);
+ my $in_msg = &read_from_socket($client);
+ if(defined $in_msg){
+ chomp($in_msg);
+ $in_msg = $in_msg.".".$actual_ip;
+ &process_incoming_msg($in_msg);
+
+ }
+ }
+ }
+}
+
+
+
+
diff --git a/gosa-si/gosa-si-client.conf-template b/gosa-si/gosa-si-client.conf-template
--- /dev/null
@@ -0,0 +1,13 @@
+[general]
+log_file = /var/log/gosa-si-client.log
+pid_file = /var/run/gosa-si-client.pid
+
+[client]
+client_port = 20083
+
+[server]
+server_ip = 127.0.0.1
+server_port = 20081
+server_passwd = secret-server-password
+server_timeout = 5
+server_domain = intranet.gonicus.de
diff --git a/gosa-si/gosa-si-server b/gosa-si/gosa-si-server
--- /dev/null
+++ b/gosa-si/gosa-si-server
@@ -0,0 +1,2025 @@
+#!/usr/bin/perl
+#===============================================================================
+#
+# FILE: gosa-sd
+#
+# USAGE: ./gosa-sd
+#
+# DESCRIPTION:
+#
+# OPTIONS: ---
+# REQUIREMENTS: libconfig-inifiles-perl libcrypt-rijndael-perl libxml-simple-perl libipc-shareable-perl libdata-dumper-simple-perl
+# BUGS: ---
+# NOTES:
+# AUTHOR: (Andreas Rettenberger), <rettenberger@gonicus.de>
+# COMPANY:
+# VERSION: 1.0
+# CREATED: 12.09.2007 08:54:41 CEST
+# REVISION: ---
+#===============================================================================
+
+
+use strict;
+use warnings;
+use Getopt::Long;
+use Config::IniFiles;
+use POSIX;
+use Time::HiRes qw( gettimeofday );
+
+use Fcntl;
+use IO::Socket::INET;
+use Crypt::Rijndael;
+use MIME::Base64;
+use Digest::MD5 qw(md5 md5_hex md5_base64);
+use XML::Simple;
+use Data::Dumper;
+use Sys::Syslog qw( :DEFAULT setlogsock);
+use Cwd;
+use File::Spec;
+use IPC::Shareable qw( :lock);
+IPC::Shareable->clean_up_all;
+
+use lib "/etc/gosad/modules";
+my $modules_path = "/etc/gosad/modules";
+
+my ($cfg_file, %cfg_defaults, $foreground, $verbose, $ping_timeout, $no_bus);
+my ($bus, $msg_to_bus, $bus_cipher);
+my ($server, $server_mac_address, $server_events);
+my ($gosa_server);
+my ($known_daemons, $shmda, $known_clients, $shmcl, $known_modules);
+my ($max_clients);
+my ($pid_file, $procid, $pid, $log_file);
+my (%free_child, %busy_child, $child_max, $child_min, %child_alive_time, $child_timeout);
+my ($arp_activ, $arp_fifo, $arp_fifo_path, $no_arp);
+
+# variables declared in config file are always set to 'our'
+our (%cfg_defaults, $log_file, $pid_file,
+ $bus_activ, $bus_passwd, $bus_ip, $bus_port,
+ $server_activ, $server_ip, $server_port, $server_passwd, $max_clients,
+ $arp_activ, $arp_fifo_path,
+ $gosa_activ, $gosa_passwd, $gosa_ip, $gosa_port, $gosa_timeout,
+);
+
+# additional variable which should be globaly accessable
+our $xml;
+our $server_address;
+our $bus_address;
+our $gosa_address;
+
+# specifies the verbosity of the daemon_log
+$verbose = 0 ;
+
+# if foreground is not null, script will be not forked to background
+$foreground = 0 ;
+
+# specifies the timeout seconds while checking the online status of a registrating client
+$ping_timeout = 5;
+
+$no_bus = 0;
+
+$no_arp = 0;
+
+# holds all other gosa-sd as well as the gosa-sd-bus
+our $known_daemons = {};
+our $shmda = tie($known_daemons, 'IPC::Shareable', undef, {create => 1,
+ exclusive => 1,
+ mode => 0666,
+ destroy => 1,
+ });
+# holds all registrated clients
+our $known_clients = {};
+our $shmcl = tie($known_clients, 'IPC::Shareable', undef, {create => 1,
+ exclusive => 1,
+ mode => 0666,
+ destroy => 1,
+ });
+
+
+%cfg_defaults =
+("general" =>
+ {"log_file" => [\$log_file, "/var/run/".$0.".log"],
+ "pid_file" => [\$pid_file, "/var/run/".$0.".pid"],
+ "child_max" => [\$child_max, 10],
+ "child_min" => [\$child_min, 3],
+ "child_timeout" => [\$child_timeout, 180],
+ },
+"bus" =>
+ {"bus_activ" => [\$bus_activ, "on"],
+ "bus_passwd" => [\$bus_passwd, ""],
+ "bus_ip" => [\$bus_ip, ""],
+ "bus_port" => [\$bus_port, "20080"],
+ },
+"server" =>
+ {"server_activ" => [\$server_activ, "on"],
+ "server_ip" => [\$server_ip, ""],
+ "server_port" => [\$server_port, "20081"],
+ "server_passwd" => [\$server_passwd, ""],
+ "max_clients" => [\$max_clients, 100],
+ },
+"arp" =>
+ {"arp_activ" => [\$arp_activ, "on"],
+ "arp_fifo_path" => [\$arp_fifo_path, "/var/run/gosa-si/arp-notify"],
+ },
+"gosa" =>
+ {"gosa_activ" => [\$gosa_activ, "on"],
+ "gosa_ip" => [\$gosa_ip, ""],
+ "gosa_port" => [\$gosa_port, "20082"],
+ "gosa_passwd" => [\$gosa_passwd, "none"],
+ },
+ );
+
+
+#=== FUNCTION ================================================================
+# NAME: usage
+# PARAMETERS: nothing
+# RETURNS: nothing
+# DESCRIPTION: print out usage text to STDERR
+#===============================================================================
+sub usage {
+ print STDERR << "EOF" ;
+usage: $0 [-hvf] [-c config]
+
+ -h : this (help) message
+ -c <file> : config file
+ -f : foreground, process will not be forked to background
+ -v : be verbose (multiple to increase verbosity)
+EOF
+ print "\n" ;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: read_configfile
+# PARAMETERS: cfg_file - string -
+# RETURNS: nothing
+# DESCRIPTION: read cfg_file and set variables
+#===============================================================================
+sub read_configfile {
+ my $cfg;
+ if( defined( $cfg_file) && ( length($cfg_file) > 0 )) {
+ if( -r $cfg_file ) {
+ $cfg = Config::IniFiles->new( -file => $cfg_file );
+ } else {
+ print STDERR "Couldn't read config file!";
+ }
+ } else {
+ $cfg = Config::IniFiles->new() ;
+ }
+ foreach my $section (keys %cfg_defaults) {
+ foreach my $param (keys %{$cfg_defaults{ $section }}) {
+ my $pinfo = $cfg_defaults{ $section }{ $param };
+ ${@$pinfo[ 0 ]} = $cfg->val( $section, $param, @$pinfo[ 1 ] );
+ }
+ }
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: logging
+# PARAMETERS: level - string - default 'info'
+# msg - string -
+# facility - string - default 'LOG_DAEMON'
+# RETURNS: nothing
+# DESCRIPTION: function for logging
+#===============================================================================
+sub daemon_log {
+# log into log_file
+ my( $msg, $level ) = @_;
+ if(not defined $msg) { return }
+ if(not defined $level) { $level = 1 }
+ if(defined $log_file){
+ open(LOG_HANDLE, ">>$log_file");
+ if(not defined open( LOG_HANDLE, ">>$log_file" )) {
+ print STDERR "cannot open $log_file: $!";
+ return }
+ chomp($msg);
+ if($level <= $verbose){
+ print LOG_HANDLE "$level $msg\n";
+ if(defined $foreground) { print $msg."\n" }
+ }
+ }
+ close( LOG_HANDLE );
+#log into syslog
+# my ($msg, $level, $facility) = @_;
+# if(not defined $msg) {return}
+# if(not defined $level) {$level = "info"}
+# if(not defined $facility) {$facility = "LOG_DAEMON"}
+# openlog($0, "pid,cons,", $facility);
+# syslog($level, $msg);
+# closelog;
+# return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: check_cmdline_param
+# PARAMETERS: nothing
+# RETURNS: nothing
+# DESCRIPTION: validates commandline parameter
+#===============================================================================
+sub check_cmdline_param () {
+ my $err_config;
+ my $err_counter = 0;
+ if( not defined( $cfg_file)) {
+ #$err_config = "please specify a config file";
+ #$err_counter += 1;
+ my $cwd = getcwd;
+ my $name = "/etc/gosa/gosa-si-server.conf";
+ $cfg_file = File::Spec->catfile( $cwd, $name );
+ print STDERR "no conf file specified\n try to use default: $cfg_file\n";
+ }
+ if( $err_counter > 0 ) {
+ &usage( "", 1 );
+ if( defined( $err_config)) { print STDERR "$err_config\n"}
+ print STDERR "\n";
+ exit( -1 );
+ }
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: check_pid
+# PARAMETERS: nothing
+# RETURNS: nothing
+# DESCRIPTION: handels pid processing
+#===============================================================================
+sub check_pid {
+ $pid = -1;
+ # Check, if we are already running
+ if( open(LOCK_FILE, "<$pid_file") ) {
+ $pid = <LOCK_FILE>;
+ if( defined $pid ) {
+ chomp( $pid );
+ if( -f "/proc/$pid/stat" ) {
+ my($stat) = `cat /proc/$pid/stat` =~ m/$pid \((.+)\).*/;
+ if( $0 eq $stat ) {
+ close( LOCK_FILE );
+ exit -1;
+ }
+ }
+ }
+ close( LOCK_FILE );
+ unlink( $pid_file );
+ }
+
+ # create a syslog msg if it is not to possible to open PID file
+ if (not sysopen(LOCK_FILE, $pid_file, O_WRONLY|O_CREAT|O_EXCL, 0644)) {
+ my($msg) = "Couldn't obtain lockfile '$pid_file' ";
+ if (open(LOCK_FILE, '<', $pid_file)
+ && ($pid = <LOCK_FILE>))
+ {
+ chomp($pid);
+ $msg .= "(PID $pid)\n";
+ } else {
+ $msg .= "(unable to read PID)\n";
+ }
+ if( ! ($foreground) ) {
+ openlog( $0, "cons,pid", "daemon" );
+ syslog( "warning", $msg );
+ closelog();
+ }
+ else {
+ print( STDERR " $msg " );
+ }
+ exit( -1 );
+ }
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: get_ip_and_mac
+# PARAMETERS: nothing
+# RETURNS: (ip, mac)
+# DESCRIPTION: executes /sbin/ifconfig and parses the output, the first occurence
+# of a inet address is returned as well as the mac address in the line
+# above the inet address
+#===============================================================================
+sub get_ip_and_mac {
+ my $ip = "0.0.0.0.0"; # Defualt-IP
+ my $mac = "00:00:00:00:00:00"; # Default-MAC
+ my @ifconfig = qx(/sbin/ifconfig);
+ foreach(@ifconfig) {
+ if (/Hardware Adresse (\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2}):(\S{2})/) {
+ $mac = "$1:$2:$3:$4:$5:$6";
+ next;
+ }
+ if (/inet Adresse:(\d+).(\d+).(\d+).(\d+)/) {
+ $ip = "$1.$2.$3.$4";
+ last;
+ }
+ }
+ return ($ip, $mac);
+}
+
+
+
+#=== FUNCTION ================================================================
+# NAME: import_modules
+# PARAMETERS: module_path - string - abs. path to the directory the modules are stored
+# RETURNS: nothing
+# DESCRIPTION: each file in module_path which ends with '.pm' is imported by "require 'file';"
+#===============================================================================
+sub import_modules {
+ daemon_log(" ", 1);
+
+ if (not -e $modules_path) {
+ daemon_log("ERROR: cannot find directory or directory is not readable: $modules_path", 1);
+ }
+
+ opendir (DIR, $modules_path) or die "ERROR while loading modules from directory $modules_path : $!\n";
+ while (defined (my $file = readdir (DIR))) {
+ if (not $file =~ /(\S*?).pm$/) {
+ next;
+ }
+ eval { require $file; };
+ if ($@) {
+ daemon_log("ERROR: gosa-sd could not load module $file", 1);
+ daemon_log("$@", 5);
+ next;
+ }
+ my $mod_name = $1;
+ my $module_tag_hash = eval( $mod_name.'::get_module_tags()' );
+ $known_modules->{$mod_name} = $module_tag_hash;
+
+ daemon_log("load module $mod_name", 1);
+ }
+
+ # for debugging
+ #while ( my ($module, $tag_hash) = each(%$known_modules)) {
+ # print "\tmodule: $module"."\n";
+ # print "\ttags: ".join(", ", keys(%$tag_hash))."\n";
+ #}
+ close (DIR);
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: register_at_bus
+# PARAMETERS: nothing
+# RETURNS: nothing
+# DESCRIPTION: creates an entry in known_daemons and send a 'here_i_am' msg to bus
+#===============================================================================
+sub register_at_bus {
+
+ # create known_daemons entry
+ &create_known_daemon($bus_address);
+ &add_content2known_daemons(hostname=>$bus_address, status=>"register_at_bus", passwd=>$bus_passwd);
+ daemon_log("register at bus: $bus_address", 1);
+
+ my $msg_hash = &create_xml_hash("here_i_am", "$server_ip:$server_port", $bus_address);
+ &send_msg_hash2address($msg_hash, $bus_address);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: sig_int_handler
+# PARAMETERS: signal - string - signal arose from system
+# RETURNS: noting
+# DESCRIPTION: handels tasks to be done befor signal becomes active
+#===============================================================================
+sub sig_int_handler {
+ my ($signal) = @_;
+ if($server){
+ close($server);
+ daemon_log("daemon server closed", 1);
+ }
+ if( -p $arp_fifo_path ) {
+ close $arp_fifo ;
+ unlink($arp_fifo_path) ;
+ daemon_log("ARP_FIFO closed", 1) ;
+ }
+
+ if($gosa_server){
+ close($gosa_server);
+ daemon_log("gosa server closed", 1);
+ }
+
+ print STDERR "$signal\n";
+
+ exit(1);
+}
+$SIG{INT} = \&sig_int_handler;
+
+
+#=== FUNCTION ================================================================
+# NAME: activating_child
+# PARAMETERS: msg - string - incoming message
+# host - string - host from which the incomming message comes
+# RETURNS: nothing
+# DESCRIPTION: handels the distribution of incoming messages to working childs
+#===============================================================================
+sub activating_child {
+ my ($msg, $host, $client) = @_;
+ my $child = &get_processing_child();
+ my $pipe_wr = $$child{'pipe_wr'};
+ my $pipe_rd = $$child{'pipe_rd'};
+ $$child{client_ref} = $client;
+ daemon_log("activating: childpid:$$child{'pid'}", 5);
+
+ print $pipe_wr $msg.".".$host."\n";
+
+# if (defined $client) {
+# my $rbits = "";
+# vec($rbits, fileno $client, 1) = 1;
+#
+# my ($rout);
+# my $nf = select($rout=$rbits, undef, undef, $gosa_timeout);
+# if($gosa_activ eq "on" && vec($rout, fileno $gosa_server, 1)) {
+#
+# }
+# }
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: get_processing_child
+# PARAMETERS: nothing
+# RETURNS: child - hash - holding the process id and the references to the pipe
+# handles pipe_wr and pipe_rd
+# DESCRIPTION: handels the forking, reactivating and keeping alive tasks
+#===============================================================================
+sub get_processing_child {
+ my $child;
+ # checking %busy_child{pipe_wr} if msg is 'done', then set child from busy to free
+# while(my ($key, $val) = each(%busy_child)) {
+# # test ob prozess noch existiert
+# my $exitus_pid = waitpid($key, WNOHANG);
+# if($exitus_pid != 0) {
+# delete $busy_child{$key};
+# print "prozess:$key wurde aus busy_child entfernt\n";
+# next;
+# }
+#
+# # check wether process sitll works
+# my $fh = $$val{'pipe_rd'};
+# $fh->blocking(0);
+# my $child_answer;
+# if(not $child_answer = <$fh>) { next }
+# chomp($child_answer);
+# if($child_answer eq "done") {
+# delete $busy_child{$key};
+# $free_child{$key} = $val;
+# }
+# }
+
+ while(my ($key, $val) = each(%free_child)) {
+ my $exitus_pid = waitpid($key, WNOHANG);
+ if($exitus_pid != 0) {
+ delete $free_child{$key};
+ }
+ daemon_log("free child:$key", 5);
+ }
+ # check @free_child and @busy_child
+ my $free_len = scalar(keys(%free_child));
+ my $busy_len = scalar(keys(%busy_child));
+ daemon_log("free children $free_len, busy children $busy_len", 5);
+
+ # if there is a free child, let the child work
+ if($free_len > 0){
+ my @keys = keys(%free_child);
+ $child = $free_child{$keys[0]};
+ if(defined $child) {
+ $busy_child{$$child{'pid'}} = $child ;
+ delete $free_child{$$child{'pid'}};
+ }
+ return $child;
+ }
+
+ # no free child, try to fork another one
+ if($free_len + $busy_len < $child_max) {
+
+ daemon_log("not enough children, create a new one", 5);
+
+ # New pipes for communication
+ my( $PARENT_wr, $PARENT_rd );
+ my( $CHILD_wr, $CHILD_rd );
+ pipe( $CHILD_rd, $PARENT_wr );
+ pipe( $PARENT_rd, $CHILD_wr );
+ $PARENT_wr->autoflush(1);
+ $CHILD_wr->autoflush(1);
+
+ ############
+ # fork child
+ ############
+ my $child_pid = fork();
+
+ #CHILD
+ if($child_pid == 0) {
+ # Close unused pipes
+ close( $CHILD_rd );
+ close( $CHILD_wr );
+ while( 1 ) {
+ my $rbits = "";
+ vec( $rbits, fileno $PARENT_rd , 1 ) = 1;
+ my $nf = select($rbits, undef, undef, $child_timeout);
+ if($nf < 0 ) {
+ die "select(): $!\n";
+ } elsif (! $nf) {
+ # if already child_min childs are alive, then leave loop
+ $free_len = scalar(keys(%free_child));
+ $busy_len = scalar(keys(%busy_child));
+ if($free_len + $busy_len >= $child_min) {
+ last;
+ } else {
+ redo;
+ }
+ }
+
+ # a job for a child arise
+ if ( vec $rbits, fileno $PARENT_rd, 1 ) {
+ # read everything from pipe
+ my $msg = "";
+ $PARENT_rd->blocking(0);
+ while(1) {
+ my $read = <$PARENT_rd>;
+ if(not defined $read) { last}
+ $msg .= $read;
+ }
+
+ ######################################
+ # forward msg to all imported modules
+ no strict "refs";
+ my $answer;
+ while( my ($module, $tag_hash) = each(%$known_modules)) {
+ #if(exists $known_modules->{$module}->{server_packages}) {
+ my $tmp = &{ $module."::process_incoming_msg" }($msg);
+ if (defined $tmp) {
+ $answer = $tmp;
+ }
+ #}
+ }
+
+ &print_known_daemons();
+ &print_known_clients();
+
+ daemon_log("processing of msg finished", 5);
+
+ if (defined $answer) {
+ print $PARENT_wr $answer."\n";
+ daemon_log("\t$answer", 5);
+ daemon_log(" ", 5);
+ } else {
+ print $PARENT_wr "done"."\n";
+ daemon_log(" ", 5);
+ }
+ redo;
+ }
+ }
+ # childs leaving the loop are allowed to die
+ exit(0);
+
+
+ #PARENT
+ } else {
+ # Close unused pipes
+ close( $PARENT_rd );
+ close( $PARENT_wr );
+
+ # add child to child alive hash
+ my %child_hash = (
+ 'pid' => $child_pid,
+ 'pipe_wr' => $CHILD_wr,
+ 'pipe_rd' => $CHILD_rd,
+ 'client_ref' => "",
+ );
+
+ $child = \%child_hash;
+ $busy_child{$$child{'pid'}} = $child;
+ return $child;
+ }
+ }
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: process_incoming_msg
+# PARAMETERS: crypted_msg - string - incoming crypted message
+# RETURNS: nothing
+# DESCRIPTION: handels the proceeded distribution to the appropriated functions
+#===============================================================================
+sub process_incoming_msg {
+ my ($crypted_msg) = @_;
+ if(not defined $crypted_msg) {
+ daemon_log("function 'process_incoming_msg': got no msg", 7);
+ }
+ $crypted_msg =~ /^([\s\S]*?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)$/;
+ $crypted_msg = $1;
+ my $host = sprintf("%s.%s.%s.%s", $2, $3, $4, $5);
+ daemon_log("msg from host:", 1);
+ daemon_log("\t$host", 1);
+ #daemon_log("crypted msg:", 7);
+ #daemon_log("\t$crypted_msg", 7);
+
+ # collect addresses from possible incoming clients
+ my @valid_keys;
+ my @host_keys = keys %$known_daemons;
+ foreach my $host_key (@host_keys) {
+ if($host_key =~ "^$host") {
+ push(@valid_keys, $host_key);
+ }
+ }
+ my @client_keys = keys %$known_clients;
+ foreach my $client_key (@client_keys) {
+ if($client_key =~ "^$host"){
+ push(@valid_keys, $client_key);
+ }
+ }
+ push(@valid_keys, $server_address);
+
+ my $l = @valid_keys;
+ my ($msg, $msg_hash);
+ my $msg_flag = 0;
+
+ # determine the correct passwd for deciphering of the incoming msgs
+ foreach my $host_key (@valid_keys) {
+ eval{
+ daemon_log( "key: $host_key", 7);
+ my $key_passwd;
+ if (exists $known_daemons->{$host_key}) {
+ $key_passwd = $known_daemons->{$host_key}->{passwd};
+ } elsif (exists $known_clients->{$host_key}) {
+ $key_passwd = $known_clients->{$host_key}->{passwd};
+ } elsif ($host_key eq $server_address) {
+ $key_passwd = $server_passwd;
+ }
+ daemon_log("key_passwd: $key_passwd", 7);
+ my $key_cipher = &create_ciphering($key_passwd);
+ $msg = &decrypt_msg($crypted_msg, $key_cipher);
+ $msg_hash = $xml->XMLin($msg, ForceArray=>1);
+ };
+ if($@) {
+ daemon_log("key raise error", 7);
+ $msg_flag += 1;
+ } else {
+ last;
+ }
+ }
+
+ if($msg_flag >= $l) {
+ daemon_log("ERROR: do not understand the message:", 1);
+ daemon_log("\t$msg", 1);
+ return;
+ }
+
+ # process incoming msg
+ my $header = &get_content_from_xml_hash($msg_hash, "header");
+ my $source = @{$msg_hash->{source}}[0];
+
+ daemon_log("header from msg:", 1);
+ daemon_log("\t$header", 1);
+ daemon_log("msg to process:", 5);
+ daemon_log("\t$msg", 5);
+
+ my @targets = @{$msg_hash->{target}};
+ my $len_targets = @targets;
+ if ($len_targets == 0){
+ daemon_log("ERROR: no target specified for msg $header", 1);
+
+ } elsif ($len_targets == 1){
+ # we have only one target symbol
+
+ my $target = $targets[0];
+ daemon_log("msg is for:", 7);
+ daemon_log("\t$target", 7);
+
+ if ($target eq $server_address) {
+ # msg is for server
+ if ($header eq 'new_passwd'){ &new_passwd($msg_hash)}
+ elsif ($header eq 'here_i_am') { &here_i_am($msg_hash)}
+ elsif ($header eq 'who_has') { &who_has($msg_hash) }
+ elsif ($header eq 'who_has_i_do') { &who_has_i_do($msg_hash)}
+ elsif ($header eq 'update_status') { &update_status($msg_hash) }
+ #elsif ($header eq 'got_ping') { &got_ping($msg_hash)}
+ elsif ($header eq 'get_load') { &execute_actions($msg_hash)}
+ else { daemon_log("ERROR: no function assigned to this msg", 5) }
+
+
+ } elsif ($target eq "*") {
+ # msg is for all clients
+
+ my @target_addresses = keys(%$known_clients);
+ foreach my $target_address (@target_addresses) {
+ if ($target_address eq $source) { next; }
+ $msg_hash->{target} = [$target_address];
+ &send_msg_hash2address($msg_hash, $target_address);
+ }
+ } else {
+ # msg is for one client
+
+ if (exists $known_clients->{$target}) {
+ # target is known
+
+ &send_msg_hash2address($msg_hash, $target);
+ } else {
+ # target is not known
+
+ daemon_log("ERROR: target $target is not known in known_clients", 1);
+ }
+ }
+ } else {
+ # we have multiple target symbols
+
+ my $target_string = join(", ", @targets);
+ daemon_log("msg is for:", 7);
+ daemon_log("\t$target_string", 7);
+
+ my $target_address;
+ foreach $target_address (@targets) {
+ if (exists $known_clients->{$target_address}) {
+ # target_address is known
+
+ &send_msg_hash2address($msg_hash, $target_address);
+ daemon_log("server forwards msg $header to client $target_address", 3);
+ } else {
+ # target is not known
+
+ daemon_log("ERROR: target $target_address is not known in known_clients", 1);
+ }
+ }
+
+
+ }
+
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: open_socket
+# PARAMETERS: PeerAddr string something like 192.168.1.1 or 192.168.1.1:10000
+# [PeerPort] string necessary if port not appended by PeerAddr
+# RETURNS: socket IO::Socket::INET
+# DESCRIPTION: open a socket to PeerAddr
+#===============================================================================
+sub open_socket {
+ my ($PeerAddr, $PeerPort) = @_ ;
+ if(defined($PeerPort)){
+ $PeerAddr = $PeerAddr.":".$PeerPort;
+ }
+ my $socket;
+ $socket = new IO::Socket::INET(PeerAddr => $PeerAddr ,
+ Porto => "tcp" ,
+ Type => SOCK_STREAM,
+ Timeout => 5,
+ );
+ if(not defined $socket) {
+ return;
+ }
+ daemon_log("open_socket:", 7);
+ daemon_log("\t$PeerAddr", 7);
+ return $socket;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: open_fifo
+# PARAMETERS: $fifo_path
+# RETURNS: 0: FIFO couldn"t be setup, 1: FIFO setup correctly
+# DESCRIPTION: creates a FIFO at $fifo_path
+#===============================================================================
+sub open_fifo {
+ my ($fifo_path) = @_ ;
+ if( -p $fifo_path ) {
+ daemon_log("FIFO at $fifo_path already exists! Is being deleted!", 1);
+ unlink($fifo_path);
+ }
+ POSIX::mkfifo($fifo_path, 0666) or die "can't mkfifo $fifo_path: $!";
+ daemon_log( "FIFO started at $fifo_path", 1) ;
+ return 1;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: read_from_socket
+# PARAMETERS: socket fh -
+# RETURNS: result string - readed characters from socket
+# DESCRIPTION: reads data from socket in 16 byte steps
+#===============================================================================
+sub read_from_socket {
+ my ($socket) = @_;
+ my $result = "";
+
+ $socket->blocking(1);
+ $result = <$socket>;
+
+ $socket->blocking(0);
+ while ( my $char = <$socket> ) {
+ if (not defined $char) { last }
+ $result .= $char;
+ }
+
+# my $len = 16;
+# while($len == 16){
+# my $char;
+# $len = sysread($socket, $char, 16);
+# if($len != 16) { last }
+# $result .= $char;
+# }
+ return $result;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_xml_hash
+# PARAMETERS: header - string - message header (required)
+# source - string - where the message come from (required)
+# target - string - where the message should go to (required)
+# [header_value] - string - something usefull (optional)
+# RETURNS: hash - hash - nomen est omen
+# DESCRIPTION: creates a key-value hash, all values are stored in a array
+#===============================================================================
+sub create_xml_hash {
+ my ($header, $source, $target, $header_value) = @_;
+ my $hash = {
+ header => [$header],
+ source => [$source],
+ target => [$target],
+ $header => [$header_value],
+ };
+ #daemon_log("create_xml_hash:", 7),
+ #chomp(my $tmp = Dumper $hash);
+ #daemon_log("\t$tmp", 7);
+ return $hash
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_xml_string
+# PARAMETERS: xml_hash - hash - hash from function create_xml_hash
+# RETURNS: xml_string - string - xml string representation of the hash
+# DESCRIPTION: transform the hash to a string using XML::Simple module
+#===============================================================================
+sub create_xml_string {
+ my ($xml_hash) = @_ ;
+ my $xml_string = $xml->XMLout($xml_hash, RootName => 'xml');
+ $xml_string =~ s/[\n]+//g;
+ #daemon_log("create_xml_string:",7);
+ #daemon_log("$xml_string\n", 7);
+ return $xml_string;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: add_content2xml_hash
+# PARAMETERS: xml_ref - ref - reference to a hash from function create_xml_hash
+# element - string - key for the hash
+# content - string - value for the hash
+# RETURNS: nothing
+# DESCRIPTION: add key-value pair to xml_ref, if key alread exists, then append value to list
+#===============================================================================
+sub add_content2xml_hash {
+ my ($xml_ref, $element, $content) = @_;
+ if(not exists $$xml_ref{$element} ) {
+ $$xml_ref{$element} = [];
+ }
+ my $tmp = $$xml_ref{$element};
+ push(@$tmp, $content);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: get_content_from_xml_hash
+# PARAMETERS: xml_ref - ref - reference of the xml hash
+# element - string - key of the value you want
+# RETURNS: value - string - if key is either header, target or source
+# value - list - for all other keys in xml hash
+# DESCRIPTION:
+#===============================================================================
+sub get_content_from_xml_hash {
+ my ($xml_ref, $element) = @_ ;
+ my $result = $xml_ref->{$element};
+ if( $element eq "header" || $element eq "target" || $element eq "source") {
+ return @$result[0];
+ }
+ return @$result;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: encrypt_msg
+# PARAMETERS: msg - string - message to encrypt
+# my_cipher - ref - reference to a Crypt::Rijndael object
+# RETURNS: crypted_msg - string - crypted message
+# DESCRIPTION: crypts the incoming message with the Crypt::Rijndael module
+#===============================================================================
+sub encrypt_msg {
+ my ($msg, $my_cipher) = @_;
+ if(not defined $my_cipher) { print "no cipher object\n"; }
+ $msg = "\0"x(16-length($msg)%16).$msg;
+ my $crypted_msg = $my_cipher->encrypt($msg);
+ chomp($crypted_msg = &encode_base64($crypted_msg));
+ return $crypted_msg;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: decrypt_msg
+# PARAMETERS: crypted_msg - string - message to decrypt
+# my_cipher - ref - reference to a Crypt::Rijndael object
+# RETURNS: msg - string - decrypted message
+# DESCRIPTION: decrypts the incoming message with the Crypt::Rijndael module
+#===============================================================================
+sub decrypt_msg {
+ my ($crypted_msg, $my_cipher) = @_ ;
+ $crypted_msg = &decode_base64($crypted_msg);
+ my $msg = $my_cipher->decrypt($crypted_msg);
+ $msg =~ s/\0*//g;
+ return $msg;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_ciphering
+# PARAMETERS: passwd - string - used to create ciphering
+# RETURNS: cipher - object
+# DESCRIPTION: creates a Crypt::Rijndael::MODE_CBC object with passwd as key
+#===============================================================================
+sub create_ciphering {
+ my ($passwd) = @_;
+ $passwd = substr(md5_hex("$passwd") x 32, 0, 32);
+ my $iv = substr(md5_hex('GONICUS GmbH'),0, 16);
+
+ #daemon_log("iv: $iv", 7);
+ #daemon_log("key: $passwd", 7);
+ my $my_cipher = Crypt::Rijndael->new($passwd , Crypt::Rijndael::MODE_CBC());
+ $my_cipher->set_iv($iv);
+ return $my_cipher;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: send_msg_hash2address
+# PARAMETERS: msg_hash - hash - xml_hash created with function create_xml_hash
+# PeerAddr string - socket address to send msg
+# PeerPort string - socket port, if not included in socket address
+# RETURNS: nothing
+# DESCRIPTION: ????
+#===============================================================================
+sub send_msg_hash2address {
+ my ($msg_hash, $address, $passwd) = @_ ;
+
+ # fetch header for logging
+ my $header = &get_content_from_xml_hash($msg_hash, "header");
+
+ # generate xml string
+ my $msg_xml = &create_xml_string($msg_hash);
+
+ # fetch the appropriated passwd from hash
+ if(not defined $passwd) {
+ if(exists $known_daemons->{$address}) {
+ $passwd = $known_daemons->{$address}->{passwd};
+ } elsif(exists $known_clients->{$address}) {
+ $passwd = $known_clients->{$address}->{passwd};
+
+ } else {
+ daemon_log("$address not known, neither as server nor as client", 1);
+ return;
+ }
+ }
+
+ # create ciphering object
+ my $act_cipher = &create_ciphering($passwd);
+
+ # encrypt xml msg
+ my $crypted_msg = &encrypt_msg($msg_xml, $act_cipher);
+
+ # opensocket
+ my $socket = &open_socket($address);
+ if(not defined $socket){
+ daemon_log( "cannot send '$header'-msg to $address , server not reachable", 5);
+
+ if (exists $known_clients->{$address}) {
+ if ($known_clients->{$address}->{status} eq "down") {
+ # if status of not reachable client is already 'down', then delete client from known_clients
+ &clean_up_known_clients($address);
+
+ } else {
+ # update status to 'down'
+ &update_known_clients(hostname=>$address, status=>"down");
+
+ }
+ }
+ return;
+ }
+
+ # send xml msg
+ print $socket $crypted_msg."\n";
+
+ close $socket;
+
+ daemon_log("send '$header'-msg to $address", 1);
+
+ daemon_log("$msg_xml", 5);
+
+ #daemon_log("crypted message:",7);
+ #daemon_log("\t$crypted_msg", 7);
+
+ # update status of client in known_clients with last send msg
+ if(exists $known_daemons->{$address}) {
+ #&update_known_daemons();
+ } elsif(exists $known_clients->{$address}) {
+ &update_known_clients(hostname=>$address, status=>$header);
+ }
+
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: send_msg_hash2bus
+# PARAMETERS: msg_hash - hash - xml_hash created with function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: ????
+#===============================================================================
+sub send_msg_hash2bus {
+ my($msg_hash) = @_;
+
+ # fetch header for logging
+ my $header = &get_content_from_xml_hash($msg_hash, "header");
+
+ # generate xml string
+ my $msg_xml = &create_xml_string($msg_hash);
+
+ # encrypt xml msg
+ my $crypted_msg = &encrypt_msg($msg_xml, $bus_cipher);
+
+ # open socket
+ my $socket = &open_socket($bus_address);
+ if(not defined $socket){
+ daemon_log( "cannot send '$header'-msg to $bus_address , bus not reachable", 5);
+ return;
+ }
+
+ # send xml msg
+ print $socket $crypted_msg."\n";
+
+ close $socket;
+
+
+ daemon_log("send '$header'-msg to bus", 1);
+ daemon_log("$msg_xml", 5);
+ #daemon_log("crypted msg:",7);
+ #daemon_log("\t$crypted_msg", 7);
+
+ return;
+}
+
+
+
+
+
+
+
+##=== FUNCTION ================================================================
+## NAME: new_passwd
+## PARAMETERS: msg_hash - ref - hash from function create_xml_hash
+## RETURNS: nothing
+## DESCRIPTION: process this incoming message
+##===============================================================================
+#sub new_passwd {
+# my ($msg_hash) = @_;
+#
+# my $source = &get_content_from_xml_hash($msg_hash, "source");
+# my $passwd = (&get_content_from_xml_hash($msg_hash, "new_passwd"))[0];
+#
+# if (exists $known_daemons->{$source}) {
+# &add_content2known_daemons(hostname=>$source, status=>"new_passwd", passwd=>$passwd);
+# $bus_cipher = &create_ciphering($passwd);
+# my $hash = &create_xml_hash("confirm_new_passwd", "$server_ip:$server_port", "$source");
+# &send_msg_hash2address($hash, $source);
+#
+# } elsif (exists $known_clients->{$source}) {
+# &add_content2known_clients(hostname=>$source, status=>"new_passwd", passwd=>$passwd);
+#
+# } else {
+# daemon_log("ERROR: $source not known, neither in known_daemons nor in known_clients", 1)
+# }
+#
+# return;
+#}
+
+
+##=== FUNCTION ================================================================
+## NAME: make ping
+## PARAMETERS: address - string - address which should be pinged
+## RETURNS: nothing
+## DESCRIPTION: send ping message to address
+##===============================================================================
+#sub make_ping {
+# my ($msg_hash) = @_;
+#
+# my $source = &get_content_from_xml_hash($msg_hash, "source");
+# my $target = &get_content_from_xml_hash($msg_hash, "target");
+#
+# print "make_ping:$source\n";
+# my $out_hash = &create_xml_hash("ping", $target, $source);
+# &send_msg_hash2address($out_hash, $source);
+# return;
+#}
+
+
+##=== FUNCTION ================================================================
+## NAME: got_ping
+## PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+## RETURNS: nothing
+## DESCRIPTION: process this incoming message
+##===============================================================================
+#sub got_ping {
+# my ($msg_hash) = @_;
+#
+# my $source = &get_content_from_xml_hash($msg_hash, 'source');
+# my $target = &get_content_from_xml_hash($msg_hash, 'target');
+# my $header = &get_content_from_xml_hash($msg_hash, 'header');
+#
+# if(exists $known_daemons->{$source}) {
+# &add_content2known_daemons(hostname=>$source, status=>$header);
+# } else {
+# &add_content2known_clients(hostname=>$source, status=>$header);
+# }
+#
+# return;
+#}
+
+
+##=== FUNCTION ================================================================
+## NAME: here_i_am
+## PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+## RETURNS: nothing
+## DESCRIPTION: process this incoming message
+##===============================================================================
+#sub here_i_am {
+# my ($msg_hash) = @_;
+#
+# my $source = &get_content_from_xml_hash($msg_hash, "source");
+# my $mac_address = (&get_content_from_xml_hash($msg_hash, "mac_address"))[0];
+# my $out_hash;
+#
+# # number of known clients
+# my $nu_clients = keys %$known_clients;
+#
+# # check wether client address or mac address is already known
+# if (exists $known_clients->{$source}) {
+# daemon_log("WARNING: $source is already known as a client", 1);
+# daemon_log("WARNING: values for $source are being overwritten", 1);
+# $nu_clients --;
+# }
+#
+# # number of actual activ clients
+# my $act_nu_clients = $nu_clients;
+#
+# daemon_log("number of actual activ clients: $act_nu_clients", 5);
+# daemon_log("number of maximal allowed clients: $max_clients", 5);
+#
+# if($max_clients <= $act_nu_clients) {
+# my $out_hash = &create_xml_hash("denied", $server_address, $source);
+# &add_content2xml_hash($out_hash, "denied", "I_cannot_take_any_more_clients!");
+# my $passwd = (&get_content_from_xml_hash($msg_hash, "new_passwd"))[0];
+# &send_msg_hash2address($out_hash, $source, $passwd);
+# return;
+# }
+#
+# # new client accepted
+# my $new_passwd = (&get_content_from_xml_hash($msg_hash, "new_passwd"))[0];
+#
+# # create known_daemons entry
+# my $events = (&get_content_from_xml_hash($msg_hash, "events"))[0];
+# &create_known_client($source);
+# &add_content2known_clients(hostname=>$source, events=>$events, mac_address=>$mac_address,
+# status=>"registered", passwd=>$new_passwd);
+#
+# # return acknowledgement to client
+# $out_hash = &create_xml_hash("registered", $server_address, $source);
+# &send_msg_hash2address($out_hash, $source);
+#
+# # notify registered client to bus
+# $out_hash = &create_xml_hash("new_client", $server_address, $bus_address, $source);
+# &send_msg_hash2bus($out_hash);
+#
+# # give the new client his ldap config
+# &new_ldap_config($source);
+#
+# return;
+#}
+
+
+#=== FUNCTION ================================================================
+# NAME: who_has
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+#sub who_has {
+# my ($msg_hash) = @_ ;
+#
+# # what is your search pattern
+# my $search_pattern = (&get_content_from_xml_hash($msg_hash, "who_has"))[0];
+# my $search_element = (&get_content_from_xml_hash($msg_hash, $search_pattern))[0];
+# daemon_log("who_has-msg looking for $search_pattern $search_element", 7);
+#
+# # scanning known_clients for search_pattern
+# my @host_addresses = keys %$known_clients;
+# my $known_clients_entries = length @host_addresses;
+# my $host_address;
+# foreach my $host (@host_addresses) {
+# my $client_element = $known_clients->{$host}->{$search_pattern};
+# if ($search_element eq $client_element) {
+# $host_address = $host;
+# last;
+# }
+# }
+#
+# # search was successful
+# if (defined $host_address) {
+# my $source = @{$msg_hash->{source}}[0];
+# my $out_msg = &create_xml_hash("who_has_i_do", $server_address, $source, "mac_address");
+# &add_content2xml_hash($out_msg, "mac_address", $search_element);
+# &send_msg_hash2address($out_msg, $bus_address);
+# }
+# return;
+#}
+
+
+#sub who_has_i_do {
+# my ($msg_hash) = @_ ;
+# my $header = &get_content_from_xml_hash($msg_hash, "header");
+# my $source = &get_content_from_xml_hash($msg_hash, "source");
+# my $search_param = (&get_content_from_xml_hash($msg_hash, $header))[0];
+# my $search_value = (&get_content_from_xml_hash($msg_hash, $search_param))[0];
+# print "\ngot msg $header:\nserver $source has client with $search_param $search_value\n";
+#}
+
+
+#=== FUNCTION ================================================================
+# NAME: update_status
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+#sub update_status {
+# my ($msg_hash) = @_;
+# my $header = &get_content_from_xml_hash($msg_hash, "header");
+# my $source = &get_content_from_xml_hash($msg_hash, "source");
+# my $new_status = (&get_content_from_xml_hash($msg_hash, "update_status"))[0];
+#
+# # find the source
+# my $act_known_hash;
+# if (exists $known_daemons->{$source}) {
+#
+# &add_content2known_daemons(hostname=>$source, status=>$new_status);
+# } elsif (exists $known_clients->{$source}) {
+# &update_known_clients(hostname=>$source, status=>$new_status);
+# #&add_content2known_clients(hostname=>$source, status=>$new_status);
+# } else {
+# daemon_log("ERROR: got $header-msg, but cannot find $source in my hashes, unable to update status", 1);
+# return;
+# }
+#
+# return;
+#}
+
+
+##=== FUNCTION ================================================================
+## NAME: new_ldap_config
+## PARAMETERS: address - string - ip address and port of a host
+## RETURNS: nothing
+## DESCRIPTION: send to address the ldap configuration found for dn gotoLdapServer
+##===============================================================================
+#sub new_ldap_config {
+# my ($address) = @_ ;
+#
+# if (not exists $known_clients->{$address}) {
+# daemon_log("ERROR: $address does not exist in known_clients, cannot send him his ldap config", 1);
+# return;
+# }
+#
+# my $mac_address = $known_clients->{$address}->{"mac_address"};
+# if (not defined $mac_address) {
+# daemon_log("ERROR: no mac address found for client $address", 1);
+# return;
+# }
+#
+# # fetch dn
+# my $goHard_cmd = "ldapsearch -x '(&(objectClass=goHard)(macAddress=00:11:22:33:44:57))' dn gotoLdapServer";
+# my $dn;
+# my @gotoLdapServer;
+# open (PIPE, "$goHard_cmd 2>&1 |");
+# while(<PIPE>) {
+# chomp $_;
+# # If it's a comment, goto next
+# if ($_ =~ m/^[#]/) { next;}
+# if ($_ =~ m/^dn: ([\S]+?)$/) {
+# $dn = $1;
+# } elsif ($_ =~ m/^gotoLdapServer: ([\S]+?)$/) {
+# push(@gotoLdapServer, $1);
+# }
+# }
+# close(PIPE);
+#
+# # no dn found
+# if (not defined $dn) {
+# daemon_log("ERROR: no dn arose from command: $goHard_cmd", 1);
+# return;
+# }
+#
+# # no gotoLdapServer found
+# my $gosaGroupOfNames_cmd = "ldapsearch -x '(&(objectClass=gosaGroupOfNames)(member=$dn))' gotoLdapServer";
+# if (@gotoLdapServer == 0) {
+# open (PIPE, "$gosaGroupOfNames_cmd 2>&1 |");
+# while(<PIPE>) {
+# chomp $_;
+# if ($_ =~ m/^[#]/) { next; }
+# if ($_ =~ m/^gotoLdapServer: ([\S]+?)$/) {
+# push(@gotoLdapServer, $1);
+# }
+# }
+# close(PIPE);
+# }
+#
+# # still no gotoLdapServer found
+# if (@gotoLdapServer == 0) {
+# daemon_log("ERROR: cannot find gotoLdapServer entry in command: $gosaGroupOfNames_cmd", 1);
+# return;
+# }
+#
+# # sort @gotoLdapServer and then split of ranking
+# my @sorted_gotoLdapServer = sort(@gotoLdapServer);
+# @gotoLdapServer = reverse(@sorted_gotoLdapServer);
+# foreach (@gotoLdapServer) {
+# $_ =~ s/^\d://;
+# }
+#
+# my $t = join(" ", @gotoLdapServer);
+#
+# my $out_hash = &create_xml_hash("new_ldap_config", $server_address, $address);
+# map(&add_content2xml_hash($out_hash, "new_ldap_config", $_), @gotoLdapServer);
+# &send_msg_hash2address($out_hash, $address);
+#
+# return;
+#}
+
+
+##=== FUNCTION ================================================================
+## NAME: execute_actions
+## PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+## RETURNS: nothing
+## DESCRIPTION: invokes the script specified in msg_hash which is located under
+## /etc/gosad/actions
+##===============================================================================
+#sub execute_actions {
+# my ($msg_hash) = @_ ;
+# my $configdir= '/etc/gosad/actions/';
+# my $result;
+#
+# my $header = &get_content_from_xml_hash($msg_hash, 'header');
+# my $source = &get_content_from_xml_hash($msg_hash, 'source');
+# my $target = &get_content_from_xml_hash($msg_hash, 'target');
+#
+#
+# if((not defined $source)
+# && (not defined $target)
+# && (not defined $header)) {
+# daemon_log("ERROR: Entries missing in XML msg for gosad actions under /etc/gosad/actions");
+# } else {
+# my $parameters="";
+# my @params = &get_content_from_xml_hash($msg_hash, $header);
+# my $params = join(", ", @params);
+# daemon_log("execute_actions: got parameters: $params", 5);
+#
+# if (@params) {
+# foreach my $param (@params) {
+# my $param_value = (&get_content_from_xml_hash($msg_hash, $param))[0];
+# daemon_log("execute_actions: parameter -> value: $param -> $param_value", 7);
+# $parameters.= " ".$param_value;
+# }
+# }
+#
+# my $cmd= $configdir.$header."$parameters";
+# daemon_log("execute_actions: executing cmd: $cmd", 7);
+# $result= "";
+# open(PIPE, "$cmd 2>&1 |");
+# while(<PIPE>) {
+# $result.=$_;
+# }
+# close(PIPE);
+# }
+#
+# # process the event result
+#
+#
+# return;
+#}
+
+
+#=== FUNCTION ================================================================
+# NAME: print_known_daemons
+# PARAMETERS: nothing
+# RETURNS: nothing
+# DESCRIPTION: nomen est omen
+#===============================================================================
+sub print_known_daemons {
+ my ($tmp) = @_ ;
+ print "####################################\n";
+ print "# status of known_daemons\n";
+ $shmda->shlock(LOCK_EX);
+ my @hosts = keys %$known_daemons;
+ foreach my $host (@hosts) {
+ my $status = $known_daemons->{$host}->{status} ;
+ my $passwd = $known_daemons->{$host}->{passwd};
+ my $timestamp = $known_daemons->{$host}->{timestamp};
+ print "$host\n";
+ print "\tstatus: $status\n";
+ print "\tpasswd: $passwd\n";
+ print "\ttimestamp: $timestamp\n";
+ }
+ $shmda->shunlock(LOCK_EX);
+ print "####################################\n";
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: create_known_daemon
+# PARAMETERS: hostname - string - key for the hash known_daemons
+# RETURNS: nothing
+# DESCRIPTION: creates a dummy entry for hostname in known_daemons
+#===============================================================================
+sub create_known_daemon {
+ my ($hostname) = @_;
+ $shmda->shlock(LOCK_EX);
+ $known_daemons->{$hostname} = {};
+ $known_daemons->{$hostname}->{status} = "none";
+ $known_daemons->{$hostname}->{passwd} = "none";
+ $known_daemons->{$hostname}->{timestamp} = "none";
+ $shmda->shunlock(LOCK_EX);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: add_content2known_daemons
+# PARAMETERS: hostname - string - ip address and port of host (required)
+# status - string - (optional)
+# passwd - string - (optional)
+# mac_address - string - mac address of host (optional)
+# RETURNS: nothing
+# DESCRIPTION: nome est omen and updates each time the timestamp of hostname
+#===============================================================================
+sub add_content2known_daemons {
+ my $arg = {
+ hostname => undef, status => undef, passwd => undef,
+ mac_address => undef, events => undef,
+ @_ };
+ my $hostname = $arg->{hostname};
+ my $status = $arg->{status};
+ my $passwd = $arg->{passwd};
+ my $mac_address = $arg->{mac_address};
+ my $events = $arg->{events};
+
+ if (not defined $hostname) {
+ daemon_log("ERROR: function add_content2known_daemons is not invoked with requiered parameter 'hostname'", 1);
+ return;
+ }
+
+ my ($seconds, $minutes, $hours, $monthday, $month,
+ $year, $weekday, $yearday, $sommertime) = localtime(time);
+ $hours = $hours < 10 ? $hours = "0".$hours : $hours;
+ $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
+ $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
+ $month+=1;
+ $month = $month < 10 ? $month = "0".$month : $month;
+ $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
+ $year+=1900;
+ my $t = "$year$month$monthday$hours$minutes$seconds";
+
+ $shmda->shlock(LOCK_EX);
+ if (defined $status) {
+ $known_daemons->{$hostname}->{status} = $status;
+ }
+ if (defined $passwd) {
+ $known_daemons->{$hostname}->{passwd} = $passwd;
+ }
+ if (defined $mac_address) {
+ $known_daemons->{$hostname}->{mac_address} = $mac_address;
+ }
+ if (defined $events) {
+ $known_daemons->{$hostname}->{events} = $events;
+ }
+ $known_daemons->{$hostname}->{timestamp} = $t;
+ $shmda->shlock(LOCK_EX);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: update_known_daemons
+# PARAMETERS: hostname - string - ip address and port of host (required)
+# status - string - (optional)
+# passwd - string - (optional)
+# client - string - ip address and port of client (optional)
+# RETURNS: nothing
+# DESCRIPTION: nome est omen and updates each time the timestamp of hostname
+#===============================================================================
+sub update_known_daemons {
+ my $arg = {
+ hostname => undef, status => undef, passwd => undef,
+ @_ };
+ my $hostname = $arg->{hostname};
+ my $status = $arg->{status};
+ my $passwd = $arg->{passwd};
+
+ if (not defined $hostname) {
+ daemon_log("ERROR: function add_content2known_daemons is not invoked with requiered parameter 'hostname'", 1);
+ return;
+ }
+
+ my ($seconds, $minutes, $hours, $monthday, $month,
+ $year, $weekday, $yearday, $sommertime) = localtime(time);
+ $hours = $hours < 10 ? $hours = "0".$hours : $hours;
+ $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
+ $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
+ $month+=1;
+ $month = $month < 10 ? $month = "0".$month : $month;
+ $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
+ $year+=1900;
+ my $t = "$year$month$monthday$hours$minutes$seconds";
+
+ $shmda->shlock(LOCK_EX);
+ if (defined $status) {
+ $known_daemons->{$hostname}->{status} = $status;
+ }
+ if (defined $passwd) {
+ $known_daemons->{$hostname}->{passwd} = $passwd;
+ }
+ $known_daemons->{$hostname}->{timestamp} = $t;
+ $shmda->shunlock(LOCK_EX);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: print_known_clients
+# PARAMETERS: nothing
+# RETURNS: nothing
+# DESCRIPTION: nomen est omen
+#===============================================================================
+sub print_known_clients {
+
+ print "####################################\n";
+ print "# status of known_clients\n";
+ $shmcl->shlock(LOCK_EX);
+ my @hosts = keys %$known_clients;
+ if (@hosts) {
+ foreach my $host (@hosts) {
+ my $status = $known_clients->{$host}->{status} ;
+ my $passwd = $known_clients->{$host}->{passwd};
+ my $timestamp = $known_clients->{$host}->{timestamp};
+ my $mac_address = $known_clients->{$host}->{mac_address};
+ my $events = $known_clients->{$host}->{events};
+ print "$host\n";
+ print "\tstatus: $status\n";
+ print "\tpasswd: $passwd\n";
+ print "\ttimestamp: $timestamp\n";
+ print "\tmac_address: $mac_address\n";
+ print "\tevents: $events\n";
+ }
+ }
+ $shmcl->shunlock(LOCK_EX);
+ print "####################################\n";
+ return;
+}
+
+
+
+
+
+#=== FUNCTION ================================================================
+# NAME: create_known_client
+# PARAMETERS: hostname - string - key for the hash known_clients
+# RETURNS: nothing
+# DESCRIPTION: creates a dummy entry for hostname in known_clients
+#===============================================================================
+sub create_known_client {
+ my ($hostname) = @_;
+ $shmcl->shlock(LOCK_EX);
+ $known_clients->{$hostname} = {};
+ $known_clients->{$hostname}->{status} = "none";
+ $known_clients->{$hostname}->{passwd} = "none";
+ $known_clients->{$hostname}->{timestamp} = "none";
+ $known_clients->{$hostname}->{mac_address} = "none";
+ $known_clients->{$hostname}->{events} = "none";
+ $shmcl->shunlock(LOCK_EX);
+ return;
+}
+
+
+
+
+#=== FUNCTION ================================================================
+# NAME: add_content2known_clients
+# PARAMETERS: hostname - string - ip address and port of host (required)
+# status - string - (optional)
+# passwd - string - (optional)
+# mac_address - string - (optional)
+# events - string - event of client, executable skripts under /etc/gosac/events
+# RETURNS: nothing
+# DESCRIPTION: nome est omen and updates each time the timestamp of hostname
+#===============================================================================
+sub add_content2known_clients {
+ my $arg = {
+ hostname => undef, status => undef, passwd => undef,
+ mac_address => undef, events => undef,
+ @_ };
+ my $hostname = $arg->{hostname};
+ my $status = $arg->{status};
+ my $passwd = $arg->{passwd};
+ my $mac_address = $arg->{mac_address};
+ my $events = $arg->{events};
+
+ if (not defined $hostname) {
+ daemon_log("ERROR: function add_content2known_clients is not invoked with requiered parameter 'hostname'", 1);
+ return;
+ }
+
+ my ($seconds, $minutes, $hours, $monthday, $month,
+ $year, $weekday, $yearday, $sommertime) = localtime(time);
+ $hours = $hours < 10 ? $hours = "0".$hours : $hours;
+ $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
+ $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
+ $month+=1;
+ $month = $month < 10 ? $month = "0".$month : $month;
+ $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
+ $year+=1900;
+ my $t = "$year$month$monthday$hours$minutes$seconds";
+
+ $shmcl->shlock(LOCK_EX);
+ if (defined $status) {
+ $known_clients->{$hostname}->{status} = $status;
+ }
+ if (defined $passwd) {
+ $known_clients->{$hostname}->{passwd} = $passwd;
+ }
+ if (defined $mac_address) {
+ $known_clients->{$hostname}->{mac_address} = $mac_address;
+ }
+ if (defined $events) {
+ $known_clients->{$hostname}->{events} = $events;
+ }
+ $known_clients->{$hostname}->{timestamp} = $t;
+ $shmcl->shlock(LOCK_EX);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME:
+# PARAMETERS:
+# RETURNS:
+# DESCRIPTION:
+#===============================================================================
+sub clean_up_known_clients {
+ my ($address) = @_ ;
+
+ if (not exists $known_clients->{$address}) {
+ daemon_log("cannot prune known_clients from $address, client not known", 5);
+ return;
+ }
+
+ delete $known_clients->{$address};
+
+ # send bus a msg that address was deleted from known_clients
+ my $out_hash = &create_xml_hash('delete_client', $server_address, $bus_address, $address);
+ &send_msg_hash2bus($out_hash);
+
+ daemon_log("client $address deleted from known_clients because of multiple down time", 3);
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: update_known_clients
+# PARAMETERS: hostname - string - ip address and port of host (required)
+# status - string - (optional)
+# passwd - string - (optional)
+# client - string - ip address and port of client (optional)
+# RETURNS: nothing
+# DESCRIPTION: nome est omen and updates each time the timestamp of hostname
+#===============================================================================
+sub update_known_clients {
+ my $arg = {
+ hostname => undef, status => undef, passwd => undef,
+ mac_address => undef, events => undef,
+ @_ };
+ my $hostname = $arg->{hostname};
+ my $status = $arg->{status};
+ my $passwd = $arg->{passwd};
+ my $mac_address = $arg->{mac_address};
+ my $events = $arg->{events};
+
+ if (not defined $hostname) {
+ daemon_log("ERROR: function add_content2known_daemons is not invoked with requiered parameter 'hostname'", 1);
+ return;
+ }
+
+ my ($seconds, $minutes, $hours, $monthday, $month,
+ $year, $weekday, $yearday, $sommertime) = localtime(time);
+ $hours = $hours < 10 ? $hours = "0".$hours : $hours;
+ $minutes = $minutes < 10 ? $minutes = "0".$minutes : $minutes;
+ $seconds = $seconds < 10 ? $seconds = "0".$seconds : $seconds;
+ $month+=1;
+ $month = $month < 10 ? $month = "0".$month : $month;
+ $monthday = $monthday < 10 ? $monthday = "0".$monthday : $monthday;
+ $year+=1900;
+ my $t = "$year$month$monthday$hours$minutes$seconds";
+
+ $shmcl->shlock(LOCK_EX);
+ if (defined $status) {
+ $known_clients->{$hostname}->{status} = $status;
+ }
+ if (defined $passwd) {
+ $known_clients->{$hostname}->{passwd} = $passwd;
+ }
+ if (defined $mac_address) {
+ $known_clients->{$hostname}->{mac_address} = $mac_address;
+ }
+ if (defined $events) {
+ $known_clients->{$hostname}->{events} = $events;
+ }
+ $known_clients->{$hostname}->{timestamp} = $t;
+ $shmcl->shunlock(LOCK_EX);
+ return;
+}
+
+
+
+
+
+
+
+#==== MAIN = main ==============================================================
+
+# parse commandline options
+Getopt::Long::Configure( "bundling" );
+GetOptions("h|help" => \&usage,
+ "c|config=s" => \$cfg_file,
+ "f|foreground" => \$foreground,
+ "v|verbose+" => \$verbose,
+ "no-bus+" => \$no_bus,
+ "no-arp+" => \$no_arp,
+ );
+
+# read and set config parameters
+&check_cmdline_param ;
+&read_configfile;
+&check_pid;
+&import_modules;
+
+$SIG{CHLD} = 'IGNORE';
+
+# restart daemon log file
+if(-e $log_file ) { unlink $log_file }
+daemon_log(" ", 1);
+daemon_log("gosad started!", 1);
+
+# Just fork, if we"re not in foreground mode
+if( ! $foreground ) { $pid = fork(); }
+else { $pid = $$; }
+
+# Do something useful - put our PID into the pid_file
+if( 0 != $pid ) {
+ open( LOCK_FILE, ">$pid_file" );
+ print LOCK_FILE "$pid\n";
+close( LOCK_FILE );
+ if( !$foreground ) { exit( 0 ) };
+}
+
+# detect own ip and mac address
+($server_ip, $server_mac_address) = &get_ip_and_mac();
+if (not defined $server_ip) {
+ die "EXIT: ip address of $0 could not be detected";
+}
+daemon_log("server ip address detected: $server_ip", 1);
+daemon_log("server mac address detected: $server_mac_address", 1);
+
+# setup xml parser
+$xml = new XML::Simple();
+
+# create cipher object
+$bus_cipher = &create_ciphering($bus_passwd);
+$bus_address = "$bus_ip:$bus_port";
+
+# create reading and writing vectors
+my $rbits = my $wbits = my $ebits = "";
+
+# open server socket
+$server_address = "$server_ip:$server_port";
+if($server_activ eq "on"){
+ daemon_log(" ", 1);
+ $server = IO::Socket::INET->new(LocalPort => $server_port,
+ Type => SOCK_STREAM,
+ Reuse => 1,
+ Listen => 20,
+ );
+ if(not defined $server){
+ daemon_log("cannot be a tcp server at $server_port : $@");
+ } else {
+ daemon_log("start server:", 1);
+ daemon_log("\t$server_ip:$server_port",1) ;
+ vec($rbits, fileno $server, 1) = 1;
+ vec($wbits, fileno $server, 1) = 1;
+ }
+}
+
+# register at bus
+if ($no_bus > 0) {
+ $bus_activ = "off"
+}
+if($bus_activ eq "on") {
+ daemon_log(" ", 1);
+ ®ister_at_bus();
+}
+
+
+daemon_log(" ", 1);
+
+# start arp fifo
+if ($no_arp > 0) {
+ $arp_activ = "off";
+}
+my $my_fifo;
+if($arp_activ eq "on") {
+ $my_fifo = &open_fifo($arp_fifo_path);
+ if($my_fifo == 0) { die "fifo file disappeared\n" }
+ sysopen($arp_fifo, $arp_fifo_path, O_RDWR) or die "can't read from $arp_fifo: $!" ;
+
+ vec($rbits, fileno $arp_fifo, 1) = 1;
+}
+
+$gosa_address = "$gosa_ip:$gosa_port";
+# start gosa inferface fifos
+if ($gosa_activ eq "on") {
+ daemon_log(" ",1);
+ $gosa_server = IO::Socket::INET->new(LocalPort => $gosa_port,
+ Type => SOCK_STREAM,
+ Reuse => 1,
+ Listen => 1,
+ );
+ if (not defined $gosa_server) {
+ daemon_log("cannot start tcp server at $gosa_port for communication to gosa: $@", 1);
+ } else {
+ daemon_log("start server at for communication to gosa", 1);
+ daemon_log("\t$server_ip:$gosa_port");
+ vec($rbits, fileno $gosa_server, 1) = 1;
+
+ }
+
+
+ #&open_fifo($gosa_fifo_in);
+ #sysopen(GOSA_FIFO_IN, $gosa_fifo_in, O_RDWR) or die "can't read from GOSA_FIFO_IN: $!" ;
+ #vec($rbits, fileno GOSA_FIFO_IN, 1) = 1;
+
+ #&open_fifo($gosa_fifo_out);
+ #sysopen(GOSA_FIFO_OUT, $gosa_fifo_out, O_RDWR) or die "can't read from GOSA_FIFO_IN: $!" ;
+
+}
+
+
+###################################
+#everything ready, okay, lets start
+###################################
+while(1) {
+
+ # add all handles from the childs
+ while ( my ($pid, $child_hash) = each %busy_child ) {
+
+ # check whether process still exists
+ my $exitus_pid = waitpid($pid, WNOHANG);
+ if($exitus_pid != 0) {
+ delete $busy_child{$pid};
+ next;
+ }
+
+ # add child fhd to the listener
+ my $fhd = $$child_hash{'pipe_rd'};
+ vec($rbits, fileno $fhd, 1) = 1;
+ }
+
+ my ($rout, $wout);
+ my $nf = select($rout=$rbits, $wout=$wbits, undef, undef);
+
+ # error handling
+ if($nf < 0 ) {
+ }
+
+ # something is coming in
+ if($server_activ eq "on" && vec($rout, fileno $server, 1)) {
+ daemon_log(" ", 1);
+ my $client = $server->accept();
+ my $other_end = getpeername($client);
+ if(not defined $other_end) {
+ daemon_log("client cannot be identified: $!");
+ } else {
+ my ($port, $iaddr) = unpack_sockaddr_in($other_end);
+ my $actual_ip = inet_ntoa($iaddr);
+ daemon_log("accept client at daemon socket from $actual_ip", 5);
+ my $in_msg = &read_from_socket($client);
+ if(defined $in_msg){
+ chomp($in_msg);
+ &activating_child($in_msg, $actual_ip);
+ } else {
+ daemon_log("cannot read from $actual_ip", 5);
+ }
+ }
+ close($client);
+ }
+
+ if($arp_activ eq "on" && vec($rout, fileno $arp_fifo, 1)) {
+ my $in_msg = <$arp_fifo>;
+ chomp($in_msg);
+ print "arp_activ: msg: $in_msg\n";
+ my $act_passwd = $known_daemons->{$bus_address}->{passwd};
+ print "arp_activ: arp_passwd: $act_passwd\n";
+
+ my $in_msg_hash = $xml->XMLin($in_msg, ForceArray=>1);
+
+ my $target = &get_content_from_xml_hash($in_msg_hash, 'target');
+
+ if ($target eq $server_address) {
+ print "arp_activ: forward to server\n";
+ my $arp_cipher = &create_ciphering($act_passwd);
+ my $crypted_msg = &encrypt_msg($in_msg, $arp_cipher);
+ &activating_child($crypted_msg, $server_ip);
+ } else {
+ print "arp_activ: send to bus\n";
+ &send_msg_hash2address($in_msg_hash, $bus_address);
+ }
+ print "\n";
+ }
+
+ if($gosa_activ eq "on" && vec($rout, fileno $gosa_server, 1)) {
+ daemon_log(" ", 1);
+ my $client = $gosa_server->accept();
+ my $other_end = getpeername($client);
+ if(not defined $other_end) {
+ daemon_log("client cannot be identified: $!");
+ } else {
+ my ($port, $iaddr) = unpack_sockaddr_in($other_end);
+ my $actual_ip = inet_ntoa($iaddr);
+ daemon_log("accept client at gosa socket from $actual_ip", 5);
+ my $in_msg = <$client>;
+ #my $in_msg = &read_from_socket($client);
+
+ daemon_log(">>>>>>>>>>> frisch vom socket gelesen\n!$in_msg!\n",1);
+ if(defined $in_msg){
+ chomp($in_msg);
+ &activating_child($in_msg, $actual_ip, $client);
+ } else {
+ daemon_log("cannot read from $actual_ip", 5);
+ }
+ }
+ #close($client);
+ }
+
+ # check all processing childs whether they are finished ('done') or
+ while ( my ($pid, $child_hash) = each %busy_child ) {
+ my $fhd = $$child_hash{'pipe_rd'};
+
+ if (vec($rout, fileno $fhd, 1) ) {
+ daemon_log("process child $pid is ready to read", 5);
+
+ $fhd->blocking(1);
+ my $in_msg = <$fhd>;
+ $fhd->blocking(0);
+ my $part_in_msg;
+ while ($part_in_msg = <$fhd>) {
+ if (not defined $part_in_msg) {
+ last;
+ }
+ $in_msg .= $part_in_msg;
+ }
+ chomp($in_msg);
+
+ daemon_log("process child read: $in_msg", 5);
+ if (not defined $in_msg) {
+ next;
+ } elsif ($in_msg =~ "done") {
+ delete $busy_child{$pid};
+ $free_child{$pid} = $child_hash;
+
+ } else {
+ my $act_client = $busy_child{$pid}{client_ref};
+ print $act_client $in_msg."\n";
+ my $act_pipe = $busy_child{$pid}{pipe_rd};
+ sleep(10);
+ close ($act_client);
+ delete $busy_child{$pid};
+ $free_child{$pid} = $child_hash;
+
+ }
+ }
+ }
+
+
+}
diff --git a/gosa-si/gosa-si-server.conf-template b/gosa-si/gosa-si-server.conf-template
--- /dev/null
@@ -0,0 +1,30 @@
+[general]
+log_file = /var/log/gosa-si-daemon.log
+pid_file = /var/run/gosa-si-daemon.pid
+child_max = 10
+child_min = 2
+child_timeout = 10
+
+[bus]
+bus_activ = on
+bus_passwd = secret-bus-password
+bus_ip = 127.0.0.1
+bus_port = 20080
+
+[server]
+server_activ = on
+server_port = 20081
+server_passwd = secret-server-password
+max_clients = 5
+
+[arp]
+arp_activ = off
+arp_fifo_path = /var/run/gosa-si/arp-notify
+
+[gosa]
+gosa_activ = on
+gosa_ip = 127.0.0.1
+gosa_port = 20082
+gosa_passwd = secret-gosa-password
+gosa_timeout = 5
+
diff --git a/gosa-si/modules/GosaPackages.pm b/gosa-si/modules/GosaPackages.pm
--- /dev/null
@@ -0,0 +1,108 @@
+package GosaPackages;
+
+use Exporter;
+@ISA = ("Exporter");
+
+# Each module has to have a function 'process_incoming_msg'. This function works as a interface to gosa-sd and recieves the msg hash from gosa-sd. 'process_incoming_function checks, wether it has a function to process the incoming msg and forward the msg to it.
+
+
+use strict;
+use warnings;
+use GosaSupportDaemon;
+
+BEGIN{}
+
+END{}
+
+
+### START ##########################
+
+# create general settings for this module
+my $gosa_cipher = &create_ciphering($main::gosa_passwd);
+
+sub get_module_tags {
+
+ # dort stehen drei packettypen, für die sich das modul anmelden kann, gosa-admin-packages,
+ # server-packages, client-packages
+ my %tag_hash = (gosa_admin_packages => "yes",
+ server_packages => "no",
+ client_packages => "no");
+ return \%tag_hash;
+}
+
+
+sub process_incoming_msg {
+ my ($crypted_msg) = @_ ;
+ if(not defined $crypted_msg) {
+ &main::daemon_log("function 'process_incoming_msg': got no msg", 7);
+ }
+ &main::daemon_log("GosaPackages: crypted_msg:$crypted_msg", 7);
+ &main::daemon_log("GosaPackages: crypted_msg len:".length($crypted_msg), 7);
+
+ $crypted_msg =~ /^([\s\S]*?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)$/;
+ $crypted_msg = $1;
+ my $host = sprintf("%s.%s.%s.%s", $2, $3, $4, $5);
+
+ &main::daemon_log("GosaPackages: crypted_msg:$crypted_msg", 7);
+ &main::daemon_log("GosaPackages: crypted_msg len:".length($crypted_msg), 7);
+
+
+ # collect addresses from possible incoming clients
+ # only gosa is allowd as incoming client
+ &main::daemon_log("GosaPackages: host_key: $host", 7);
+ &main::daemon_log("GosaPackages: key_passwd: $main::gosa_passwd", 7);
+
+ $gosa_cipher = &main::create_ciphering($main::gosa_passwd);
+ # determine the correct passwd for deciphering of the incoming msgs
+ my $msg = "";
+ my $msg_hash;
+ eval{
+ $msg = &main::decrypt_msg($crypted_msg, $gosa_cipher);
+ &main::daemon_log("GosaPackages: decrypted_msg: $msg", 7);
+
+ $msg_hash = $main::xml->XMLin($msg, ForceArray=>1);
+ };
+ if($@) {
+ &main::daemon_log("WARNING: GosaPackages do not understand the message:", 5);
+ &main::daemon_log("$@", 7);
+ return;
+ }
+
+ &main::daemon_log("GosaPackages: msg for daemon from host:", 1);
+ &main::daemon_log("\t$host", 1);
+ &main::daemon_log("GosaPackages: msg to process:", 5);
+ &main::daemon_log("\t$msg", 5);
+
+ $msg = "gosaPackages hat was bekommen";
+
+ my $out_cipher = &main::create_ciphering($main::gosa_passwd);
+ my $out_msg = &main::encrypt_msg($msg, $out_cipher);
+ return $out_msg;
+
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: got_ping
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+sub got_ping {
+ my ($msg_hash) = @_;
+
+ my $source = @{$msg_hash->{source}}[0];
+ my $target = @{$msg_hash->{target}}[0];
+ my $header = @{$msg_hash->{header}}[0];
+
+ if(exists $main::known_daemons->{$source}) {
+ &main::add_content2known_daemons(hostname=>$source, status=>$header);
+ } else {
+ &main::add_content2known_clients(hostname=>$source, status=>$header);
+ }
+
+ return;
+}
+
+
+1;
diff --git a/gosa-si/modules/ServerPackages.pm b/gosa-si/modules/ServerPackages.pm
--- /dev/null
@@ -0,0 +1,455 @@
+package ServerPackages;
+
+use Exporter;
+@ISA = ("Exporter");
+
+# Each module has to have a function 'process_incoming_msg'. This function works as a interface to gosa-sd and recieves the msg hash from gosa-sd. 'process_incoming_function checks, wether it has a function to process the incoming msg and forward the msg to it.
+
+
+use strict;
+use warnings;
+use GosaSupportDaemon;
+
+BEGIN{}
+
+END {}
+
+
+### START ##########
+
+
+
+sub get_module_tags {
+
+ # lese config file aus dort gibt es eine section Basic
+ # dort stehen drei packettypen, für die sich das modul anmelden kann, gosa-admin-packages,
+ # server-packages, client-packages
+ my %tag_hash = (gosa_admin_packages => "yes",
+ server_packages => "yes",
+ client_packages => "yes",
+ );
+ return \%tag_hash;
+}
+
+
+sub process_incoming_msg {
+ my ($crypted_msg) = @_ ;
+ if(not defined $crypted_msg) {
+ &main::daemon_log("function 'process_incoming_msg': got no msg", 7);
+ }
+ $crypted_msg =~ /^([\s\S]*?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)\.(\d{1,3}?)$/;
+ $crypted_msg = $1;
+ my $host = sprintf("%s.%s.%s.%s", $2, $3, $4, $5);
+
+ # collect addresses from possible incoming clients
+ my @valid_keys;
+ my @host_keys = keys %$main::known_daemons;
+ foreach my $host_key (@host_keys) {
+ if($host_key =~ "^$host") {
+ push(@valid_keys, $host_key);
+ }
+ }
+ my @client_keys = keys %$main::known_clients;
+ foreach my $client_key (@client_keys) {
+ if($client_key =~ "^$host"){
+ push(@valid_keys, $client_key);
+ }
+ }
+ push(@valid_keys, $main::server_address);
+
+ my $l = @valid_keys;
+ my $msg_hash;
+ my $msg_flag = 0;
+ my $msg = "";
+
+ # determine the correct passwd for deciphering of the incoming msgs
+ foreach my $host_key (@valid_keys) {
+ eval{
+ &main::daemon_log("ServerPackage: host_key: $host_key", 7);
+ my $key_passwd;
+ if (exists $main::known_daemons->{$host_key}) {
+ $key_passwd = $main::known_daemons->{$host_key}->{passwd};
+ } elsif (exists $main::known_clients->{$host_key}) {
+ $key_passwd = $main::known_clients->{$host_key}->{passwd};
+ } elsif ($host_key eq $main::server_address) {
+ $key_passwd = $main::server_passwd;
+ }
+ &main::daemon_log("ServerPackage: key_passwd: $key_passwd", 7);
+ my $key_cipher = &create_ciphering($key_passwd);
+ $msg = &decrypt_msg($crypted_msg, $key_cipher);
+ &main::daemon_log("ServerPackages: decrypted msg: $msg", 7);
+ $msg_hash = $main::xml->XMLin($msg, ForceArray=>1);
+ #my $tmp = printf Dumper $msg_hash;
+ #&main::daemon_log("DEBUG: ServerPackages: xml hash: $tmp", 7);
+ };
+ if($@) {
+ &main::daemon_log("ServerPackage: key raise error: $@", 7);
+ $msg_flag += 1;
+ } else {
+ last;
+ }
+ }
+
+ if($msg_flag >= $l) {
+ &main::daemon_log("WARNING: ServerPackage do not understand the message:", 5);
+ &main::daemon_log("$@", 7);
+ return;
+ }
+
+ # process incoming msg
+ my $header = @{$msg_hash->{header}}[0];
+ my $source = @{$msg_hash->{source}}[0];
+
+ &main::daemon_log("ServerPackages: msg from host:", 5);
+ &main::daemon_log("\t$host", 5);
+ &main::daemon_log("ServerPackages: header from msg:", 5);
+ &main::daemon_log("\t$header", 5);
+ &main::daemon_log("ServerPackages: msg to process:", 5);
+ &main::daemon_log("\t$msg", 5);
+
+ my @targets = @{$msg_hash->{target}};
+ my $len_targets = @targets;
+ if ($len_targets == 0){
+ &main::daemon_log("ERROR: ServerPackages: no target specified for msg $header", 1);
+
+ } elsif ($len_targets == 1){
+ # we have only one target symbol
+
+ my $target = $targets[0];
+ &main::daemon_log("SeverPackages: msg is for:", 7);
+ &main::daemon_log("\t$target", 7);
+
+ if ($target eq $main::server_address) {
+ # msg is for server
+ if ($header eq 'new_passwd'){ &new_passwd($msg_hash)}
+ elsif ($header eq 'here_i_am') { &here_i_am($msg_hash)}
+ elsif ($header eq 'who_has') { &who_has($msg_hash) }
+ elsif ($header eq 'who_has_i_do') { &who_has_i_do($msg_hash)}
+ elsif ($header eq 'update_status') { &update_status($msg_hash) }
+ elsif ($header eq 'got_ping') { &got_ping($msg_hash)}
+ elsif ($header eq 'get_load') { &execute_actions($msg_hash)}
+ else { &main::daemon_log("ERROR: ServerPackages: no function assigned to this msg", 5) }
+
+
+ } elsif ($target eq "*") {
+ # msg is for all clients
+
+ my @target_addresses = keys(%$main::known_clients);
+ foreach my $target_address (@target_addresses) {
+ if ($target_address eq $source) { next; }
+ $msg_hash->{target} = [$target_address];
+ &send_msg_hash2address($msg_hash, $target_address);
+ }
+ } else {
+ # msg is for one host
+
+ if (exists $main::known_clients->{$target}) {
+ &send_msg_hash2address($msg_hash, $target);
+ } elsif (exists $main::known_daemons->{$target}) {
+ # target is known
+ &send_msg_hash2address($msg_hash, $target);
+ } else {
+ # target is not known
+ &main::daemon_log("ERROR: ServerPackages: target $target is not known neither in known_clients nor in known_daemons", 1);
+ }
+ }
+ }
+
+ return ;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: got_ping
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+sub got_ping {
+ my ($msg_hash) = @_;
+
+ my $source = @{$msg_hash->{source}}[0];
+ my $target = @{$msg_hash->{target}}[0];
+ my $header = @{$msg_hash->{header}}[0];
+
+ if(exists $main::known_daemons->{$source}) {
+ &main::add_content2known_daemons(hostname=>$source, status=>$header);
+ } else {
+ &main::add_content2known_clients(hostname=>$source, status=>$header);
+ }
+
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: new_passwd
+# PARAMETERS: msg_hash - ref - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+sub new_passwd {
+ my ($msg_hash) = @_;
+
+ my $source = @{$msg_hash->{source}}[0];
+ my $passwd = @{$msg_hash->{new_passwd}}[0];
+
+ if (exists $main::known_daemons->{$source}) {
+ &main::add_content2known_daemons(hostname=>$source, status=>"new_passwd", passwd=>$passwd);
+ my $hash = &create_xml_hash("confirm_new_passwd", $main::server_address, $source);
+ &send_msg_hash2address($hash, $source);
+
+ } elsif (exists $main::known_clients->{$source}) {
+ &main::add_content2known_clients(hostname=>$source, status=>"new_passwd", passwd=>$passwd);
+
+ } else {
+ &main::daemon_log("ERROR: $source not known, neither in known_daemons nor in known_clients", 1)
+ }
+
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: here_i_am
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+sub here_i_am {
+ my ($msg_hash) = @_;
+
+ my $source = @{$msg_hash->{source}}[0];
+ my $mac_address = @{$msg_hash->{mac_address}}[0];
+ my $out_hash;
+
+ # number of known clients
+ my $nu_clients = keys %$main::known_clients;
+
+ # check wether client address or mac address is already known
+ if (exists $main::known_clients->{$source}) {
+ &main::daemon_log("WARNING: $source is already known as a client", 1);
+ &main::daemon_log("WARNING: values for $source are being overwritten", 1);
+ $nu_clients --;
+ }
+
+ # number of actual activ clients
+ my $act_nu_clients = $nu_clients;
+
+ &main::daemon_log("number of actual activ clients: $act_nu_clients", 5);
+ &main::daemon_log("number of maximal allowed clients: $main::max_clients", 5);
+
+ if($main::max_clients <= $act_nu_clients) {
+ my $out_hash = &create_xml_hash("denied", $main::server_address, $source);
+ &add_content2xml_hash($out_hash, "denied", "I_cannot_take_any_more_clients!");
+ my $passwd = @{$msg_hash->{new_passwd}}[0];
+ &send_msg_hash2address($out_hash, $source, $passwd);
+ return;
+ }
+
+ # new client accepted
+ my $new_passwd = @{$msg_hash->{new_passwd}}[0];
+
+ # create known_daemons entry
+ my $events = @{$msg_hash->{events}}[0];
+ &main::create_known_client($source);
+ &main::add_content2known_clients(hostname=>$source, events=>$events, mac_address=>$mac_address,
+ status=>"registered", passwd=>$new_passwd);
+
+ # return acknowledgement to client
+ $out_hash = &create_xml_hash("registered", $main::server_address, $source);
+ &send_msg_hash2address($out_hash, $source);
+
+ # notify registered client to bus
+ $out_hash = &main::create_xml_hash("new_client", $main::server_address, $main::bus_address, $source);
+ &main::send_msg_hash2bus($out_hash);
+
+ # give the new client his ldap config
+ &new_ldap_config($source);
+
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: who_has
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: process this incoming message
+#===============================================================================
+sub who_has {
+ my ($msg_hash) = @_ ;
+
+ # what is your search pattern
+ my $search_pattern = @{$msg_hash->{who_has}}[0];
+ my $search_element = @{$msg_hash->{$search_pattern}}[0];
+ &main::daemon_log("who_has-msg looking for $search_pattern $search_element", 7);
+
+ # scanning known_clients for search_pattern
+ my @host_addresses = keys %$main::known_clients;
+ my $known_clients_entries = length @host_addresses;
+ my $host_address;
+ foreach my $host (@host_addresses) {
+ my $client_element = $main::known_clients->{$host}->{$search_pattern};
+ if ($search_element eq $client_element) {
+ $host_address = $host;
+ last;
+ }
+ }
+
+ # search was successful
+ if (defined $host_address) {
+ my $source = @{$msg_hash->{source}}[0];
+ my $out_msg = &main::create_xml_hash("who_has_i_do", $main::server_address, $source, "mac_address");
+ &main::add_content2xml_hash($out_msg, "mac_address", $search_element);
+ &main::send_msg_hash2address($out_msg, $main::bus_address);
+ }
+ return;
+}
+
+
+sub who_has_i_do {
+ my ($msg_hash) = @_ ;
+ my $header = @{$msg_hash->{header}}[0];
+ my $source = @{$msg_hash->{source}}[0];
+ my $search_param = @{$msg_hash->{$header}}[0];
+ my $search_value = @{$msg_hash->{$search_param}}[0];
+ print "\ngot msg $header:\nserver $source has client with $search_param $search_value\n";
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: new_ldap_config
+# PARAMETERS: address - string - ip address and port of a host
+# RETURNS: nothing
+# DESCRIPTION: send to address the ldap configuration found for dn gotoLdapServer
+#===============================================================================
+sub new_ldap_config {
+ my ($address) = @_ ;
+
+ if (not exists $main::known_clients->{$address}) {
+ &main::daemon_log("ERROR: $address does not exist in known_clients, cannot send him his ldap config", 1);
+ return;
+ }
+
+ my $mac_address = $main::known_clients->{$address}->{"mac_address"};
+ if (not defined $mac_address) {
+ &main::daemon_log("ERROR: no mac address found for client $address", 1);
+ return;
+ }
+
+ # fetch dn
+ my $goHard_cmd = "ldapsearch -x '(&(objectClass=goHard)(macAddress=00:11:22:33:44:57))' dn gotoLdapServer";
+ my $dn;
+ my @gotoLdapServer;
+ open (PIPE, "$goHard_cmd 2>&1 |");
+# my $rbits = "";
+# vec($rbits, fileno PIPE, 1) = 1;
+# my $rout;
+# my $nf = select($rout=$rbits, undef, undef, $ldap_timeout);
+ while(<PIPE>) {
+ chomp $_;
+ # If it's a comment, goto next
+ if ($_ =~ m/^[#]/) { next;}
+ if ($_ =~ m/^dn: ([\S]+?)$/) {
+ $dn = $1;
+ } elsif ($_ =~ m/^gotoLdapServer: ([\S]+?)$/) {
+ push(@gotoLdapServer, $1);
+ }
+ }
+ close(PIPE);
+
+ # no dn found
+ if (not defined $dn) {
+ &main::daemon_log("ERROR: no dn arose from command: $goHard_cmd", 1);
+ return;
+ }
+
+ # no gotoLdapServer found
+ my $gosaGroupOfNames_cmd = "ldapsearch -x '(&(objectClass=gosaGroupOfNames)(member=$dn))' gotoLdapServer";
+ if (@gotoLdapServer == 0) {
+ open (PIPE, "$gosaGroupOfNames_cmd 2>&1 |");
+ while(<PIPE>) {
+ chomp $_;
+ if ($_ =~ m/^[#]/) { next; }
+ if ($_ =~ m/^gotoLdapServer: ([\S]+?)$/) {
+ push(@gotoLdapServer, $1);
+ }
+ }
+ close(PIPE);
+ }
+
+ # still no gotoLdapServer found
+ if (@gotoLdapServer == 0) {
+ &main::daemon_log("ERROR: cannot find gotoLdapServer entry in command: $gosaGroupOfNames_cmd", 1);
+ return;
+ }
+
+ # sort @gotoLdapServer and then split of ranking
+ my @sorted_gotoLdapServer = sort(@gotoLdapServer);
+ @gotoLdapServer = reverse(@sorted_gotoLdapServer);
+ foreach (@gotoLdapServer) {
+ $_ =~ s/^\d://;
+ }
+
+ my $t = join(" ", @gotoLdapServer);
+
+ my $out_hash = &main::create_xml_hash("new_ldap_config", $main::server_address, $address);
+ map(&main::add_content2xml_hash($out_hash, "new_ldap_config", $_), @gotoLdapServer);
+ &main::send_msg_hash2address($out_hash, $address);
+
+ return;
+}
+
+
+#=== FUNCTION ================================================================
+# NAME: execute_actions
+# PARAMETERS: msg_hash - hash - hash from function create_xml_hash
+# RETURNS: nothing
+# DESCRIPTION: invokes the script specified in msg_hash which is located under
+# /etc/gosad/actions
+#===============================================================================
+sub execute_actions {
+ my ($msg_hash) = @_ ;
+ my $configdir= '/etc/gosad/actions/';
+ my $result;
+
+ my $header = @{$msg_hash->{header}}[0];
+ my $source = @{$msg_hash->{source}}[0];
+ my $target = @{$msg_hash->{target}}[0];
+
+ if((not defined $source)
+ && (not defined $target)
+ && (not defined $header)) {
+ &main::daemon_log("ERROR: Entries missing in XML msg for gosad actions under /etc/gosad/actions");
+ } else {
+ my $parameters="";
+ my @params = @{$msg_hash->{$header}};
+ my $params = join(", ", @params);
+ &main::daemon_log("execute_actions: got parameters: $params", 5);
+
+ if (@params) {
+ foreach my $param (@params) {
+ my $param_value = (&get_content_from_xml_hash($msg_hash, $param))[0];
+ &main::daemon_log("execute_actions: parameter -> value: $param -> $param_value", 7);
+ $parameters.= " ".$param_value;
+ }
+ }
+
+ my $cmd= $configdir.$header."$parameters";
+ &main::daemon_log("execute_actions: executing cmd: $cmd", 7);
+ $result= "";
+ open(PIPE, "$cmd 2>&1 |");
+ while(<PIPE>) {
+ $result.=$_;
+ }
+ close(PIPE);
+ }
+
+ # process the event result
+
+
+ return;
+}
+
+1;
diff --git a/gosa-si/tests/testGOsa.pl b/gosa-si/tests/testGOsa.pl
--- /dev/null
@@ -0,0 +1,107 @@
+#!/usr/bin/perl
+#===============================================================================
+#
+# FILE: testGosa.pl
+#
+# USAGE: ./testGosa.pl
+#
+# DESCRIPTION:
+#
+# OPTIONS: ---
+# REQUIREMENTS: ---
+# BUGS: ---
+# NOTES: ---
+# AUTHOR: (), <>
+# COMPANY:
+# VERSION: 1.0
+# CREATED: 06.12.2007 14:31:37 CET
+# REVISION: ---
+#===============================================================================
+
+use strict;
+use warnings;
+use IO::Socket::INET;
+use Digest::MD5 qw(md5 md5_hex md5_base64);
+use Crypt::Rijndael;
+use MIME::Base64;
+
+sub create_ciphering {
+ my ($passwd) = @_;
+
+ $passwd = substr(md5_hex("$passwd") x 32, 0, 32);
+ my $iv = substr(md5_hex('GONICUS GmbH'),0, 16);
+ print "iv: $iv\n";
+ print "key: $passwd\n";
+
+ my $my_cipher = Crypt::Rijndael->new($passwd ,Crypt::Rijndael::MODE_CBC() );
+ $my_cipher->set_iv($iv);
+ return $my_cipher;
+}
+
+sub decrypt_msg {
+ my ($crypted_msg, $my_cipher) = @_ ;
+ $crypted_msg = &decode_base64($crypted_msg);
+ my $msg = $my_cipher->decrypt($crypted_msg);
+ return $msg;
+}
+
+sub encrypt_msg {
+ my ($msg, $my_cipher) = @_;
+ if(not defined $my_cipher) { print "no cipher object\n"; }
+ $msg = "\0"x(16-length($msg)%16).$msg;
+ my $crypted_msg = $my_cipher->encrypt($msg);
+ chomp($crypted_msg = &encode_base64($crypted_msg));
+ return $crypted_msg;
+}
+
+
+
+my $gosa_server = IO::Socket::INET->new(LocalPort => "9999",
+ Type => SOCK_STREAM,
+ Reuse => 1,
+ Listen => 1,
+ );
+
+
+
+
+
+my $client = $gosa_server->accept();
+my $other_end = getpeername($client);
+if(not defined $other_end) {
+ print "client cannot be identified:";
+} else {
+ my ($port, $iaddr) = unpack_sockaddr_in($other_end);
+ my $actual_ip = inet_ntoa($iaddr);
+ print "accept client at gosa socket from $actual_ip\n";
+ chomp(my $crypted_msg = <$client>);
+ print "crypted msg: <<<$crypted_msg<<<\n";
+
+ my $cipher = &create_ciphering("ferdinand_frost");
+
+ my $msg = &decrypt_msg($crypted_msg, $cipher);
+ print "msg: <<<$msg<<<\n";
+
+ print "\n#################################\n\n";
+
+ my $answer = "gosa answer: $msg";
+
+ print "answer: $answer\n";
+
+ my $out_cipher = &create_ciphering("ferdinand_frost");
+ my $crypted_answer = &encrypt_msg($answer, $out_cipher);
+
+ print $client $crypted_answer."\n";
+
+}
+
+sleep(3);
+close($client);
+
+
+
+
+
+
+
+