4 # Copyright (c) 2000-2001 Jason Gunthorpe <jgg@debian.org>
5 # Copyright (c) 2001 Ryan Murray <rmurray@debian.org>
6 # Copyright (c) 2003 James Troup <troup@debian.org>
7 # Copyright (c) 2004-2005 Joey Schulze <joey@infodrom.org>
9 # This program is free software; you can redistribute it and/or modify
10 # it under the terms of the GNU General Public License as published by
11 # the Free Software Foundation; either version 2 of the License, or
12 # (at your option) any later version.
14 # This program is distributed in the hope that it will be useful,
15 # but WITHOUT ANY WARRANTY; without even the implied warranty of
16 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 # GNU General Public License for more details.
19 # You should have received a copy of the GNU General Public License
20 # along with this program; if not, write to the Free Software
21 # Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
23 # This script is an interactive way to manipulate fields in the LDAP directory.
24 # When run it connects to the directory using the current users ID and fetches
25 # all the attributes for the first machine. It then formats them nicely and
26 # allows the user to change them.
28 # Usage: userinfo -a <user> -u <user> -c <user> -r
29 # -a Set the authentication user (the user whose password you are
31 # -h Set the host to display
32 # -l list all hosts and their status
33 # -f list all SSH fingerprints
35 import time, os, pwd, sys, getopt, ldap, crypt, readline, copy;
36 from tempfile import mktemp
37 from os import O_CREAT, O_EXCL, O_WRONLY
38 from userdir_ldap import *;
41 AttrInfo = {"description": ["Machine Descr.", 1],
42 "hostname": ["Host names", 2],
43 "status": ["Status", 3],
45 "sponsor": ["Sponsors", 5],
46 "distribution": ["Distribution", 6],
47 "access": ["Access", 7],
48 "admin": ["Admin", 8],
49 "architecture": ["Architecture", 9],
50 "machine": ["Machine Hardware", 10],
51 "memory": ["Memory", 11],
53 "physicalHost": ["Physical Host", 13],
54 "sshRSAHostKey": ["SSH Host Keys", 14],
55 "bandwidth": ["Bandwidth", 15],
56 "purpose": ["Purposes", 16],
57 "allowedGroups": ["Groups", 17],
58 "exportOptions": ["Export-Opts", 18],
59 "ipHostNumber": ["IP Address", 19],
60 "mXRecord": ["MXRecord", 20],
61 "dnsTTL": ["dnsTTL", 21],
62 "sshdistAuthKeysHost": ["extra authkeys ip", 22],
65 AttrPrompt = {"description": ["Purpose of the machine"],
66 "hostname": ["The hostnames for the box (ipv4/ipv6)"],
67 "status": ["Blank if Up, explaination if not"],
68 "l": ["Physical location"],
69 "sponsor": ["Sponsors and their URLs"],
70 "distribution": ["The distribution version"],
71 "access": ["all, developer only, restricted"],
72 "admin": ["Admin email address"],
73 "architecture": ["Debian Architecture string"],
74 "machine": ["Hardware description"],
75 "memory": ["Installed RAM"],
76 "disk": ["Disk Space, RAID levels, etc"],
77 "physicalHost": ["The box hosting this virtual server"],
78 "sshRSAHostKey": ["A copy of /etc/ssh/ssh_*host_key.pub"],
79 "bandwidth": ["Available outbound"],
80 "purpose": ["The purposes of this host"],
81 "allowedGroups": ["allowed Groups on this host"],
82 "exportOptions": ["additional export options"],
83 "ipHostNumber": ["IP Addresses(es) of the machine"],
84 "mXRecord": ["Mail Exchanger for this machine"],
85 "dnsTTL": ["dns TTL value"],
86 "sshdistAuthKeysHost": ["additional hosts for sshdist's authkeys file"],
89 # Create a map of IDs to desc,value,attr
91 for at in AttrInfo.keys():
92 if (AttrInfo[at][1] != 0):
93 OrderedIndex[AttrInfo[at][1]] = [AttrInfo[at][0], "", at];
94 OrigOrderedIndex = copy.deepcopy(OrderedIndex);
96 # Print out the automatic time stamp information
97 def PrintModTime(Attrs):
98 Stamp = GetAttr(Attrs,"modifyTimestamp","");
100 Time = (int(Stamp[0:4]),int(Stamp[4:6]),int(Stamp[6:8]),
101 int(Stamp[8:10]),int(Stamp[10:12]),int(Stamp[12:14]),0,0,-1);
102 print "%-24s:" % ("Record last modified on"), time.strftime("%a %d/%m/%Y %X UTC",Time),
103 print "by",ldap.explode_dn(GetAttr(Attrs,"modifiersName"),1)[0];
105 Stamp = GetAttr(Attrs,"createTimestamp","");
107 Time = (int(Stamp[0:4]),int(Stamp[4:6]),int(Stamp[6:8]),
108 int(Stamp[8:10]),int(Stamp[10:12]),int(Stamp[12:14]),0,0,-1);
109 print "%-24s:" % ("Record created on"), time.strftime("%a %d/%m/%Y %X UTC",Time);
111 # Display all of the attributes in a numbered list
112 def ShowAttrs(Attrs):
116 for at in Attrs[1].keys():
117 if AttrInfo.has_key(at):
118 if AttrInfo[at][1] == 0:
119 print " %-18s:" % (AttrInfo[at][0]),
120 for x in Attrs[1][at]:
124 OrderedIndex[AttrInfo[at][1]][1] = Attrs[1][at];
126 Keys = OrderedIndex.keys();
129 if at < 100 or RootMode != 0:
130 print " %3u) %-18s: " % (at,OrderedIndex[at][0]),
131 for x in OrderedIndex[at][1]:
132 print "'%s'" % (re.sub('[\n\r]','?',x)),
136 """Display a one-line overview for a given host"""
137 for i in ['host','architecture','distribution','access','status']:
138 if i not in Attrs[1].keys():
140 print "%-12s %-10s %-38s %-25s %s" % (\
141 Attrs[1]['host'][0], \
142 Attrs[1]['architecture'][0], \
143 Attrs[1]['distribution'][0], \
144 Attrs[1]['access'][0], \
145 Attrs[1]['status'][0])
147 # Change a single attribute
148 def ChangeAttr(Attrs,Attr):
149 if (Attr in ["sponsor", "sshRSAHostKey", "purpose", "allowedGroups", "exportOptions", "ipHostNumber", "mXRecord", "sshdistAuthKeysHost"]):
150 return MultiChangeAttr(Attrs,Attr);
152 print "Old value: '%s'" % (GetAttr(Attrs,Attr,""));
153 print "Press enter to leave unchanged and a single space to set to empty";
154 NewValue = raw_input("New? ");
158 print "Leaving unchanged.";
161 # Single space designates delete, trap the delete error
162 if (NewValue == " "):
165 l.modify_s(HostDn,[(ldap.MOD_DELETE,Attr,None)]);
166 except ldap.NO_SUCH_ATTRIBUTE:
170 Attrs[1][Attr] = [""];
175 l.modify_s(HostDn,[(ldap.MOD_REPLACE,Attr,NewValue)]);
176 Attrs[1][Attr] = [NewValue];
179 def MultiChangeAttr(Attrs,Attr):
180 # Make sure that we have an entry
181 if not Attrs[1].has_key(Attr):
184 Attrs[1][Attr].sort();
185 print "Old values: ",Attrs[1][Attr];
187 Mode = raw_input("[D]elete or [A]dd? ").upper()
188 if (Mode != 'D' and Mode != 'A'):
191 NewValue = raw_input("Value? ");
194 print "Leaving unchanged.";
201 l.modify_s(HostDn,[(ldap.MOD_DELETE,Attr,NewValue)]);
202 except ldap.NO_SUCH_ATTRIBUTE:
206 Attrs[1][Attr].remove(NewValue);
211 l.modify_s(HostDn,[(ldap.MOD_ADD,Attr,NewValue)]);
212 Attrs[1][Attr].append(NewValue);
220 fd = os.open(name, O_CREAT | O_EXCL | O_WRONLY, 0600)
228 # Main program starts here
229 User = pwd.getpwuid(os.getuid())[0];
236 (options, arguments) = getopt.getopt(sys.argv[1:], "nh:a:rlf")
237 except getopt.GetoptError, data:
241 for (switch, val) in options:
244 elif (switch == '-a'):
246 elif (switch == '-r'):
248 elif (switch == '-n'):
250 elif (switch == '-l'):
253 elif (switch == '-f'):
258 l = passwdAccessLDAP(BaseDn, BindUser)
261 l.simple_bind_s("","")
264 Attrs = l.search_s(HostBaseDn,ldap.SCOPE_ONELEVEL,"host=*")
267 hosts.append(hAttrs[1]['host'][0])
270 print "%-12s %-10s %-38s %-25s %s" % ("Host name","Arch","Distribution","Access","Status")
274 if host == hAttrs[1]['host'][0]:
277 elif FingerPrints == 1:
279 Attrs = l.search_s(HostBaseDn,ldap.SCOPE_ONELEVEL,"host=" + Host)
281 Attrs = l.search_s(HostBaseDn,ldap.SCOPE_ONELEVEL,"host=*")
284 hosts.append(hAttrs[1]['host'][0])
287 tmpfile = CalcTempFile()
290 if host == hAttrs[1]['host'][0]:
291 if 'sshRSAHostKey' in hAttrs[1].keys():
292 for key in hAttrs[1]['sshRSAHostKey']:
293 tmp = open(tmpfile, 'w')
294 tmp.write(key + '\n')
296 fp = os.popen('/usr/bin/ssh-keygen -l -f ' + tmpfile, "r")
297 input = fp.readline()
299 fingerprint = input.split(' ')
300 print "%s %s root@%s" % (fingerprint[0], fingerprint[1], host)
304 HostDn = "host=" + Host + "," + HostBaseDn;
306 # Query the server for all of the attributes
307 Attrs = l.search_s(HostBaseDn,ldap.SCOPE_ONELEVEL,"host=" + Host);
309 print "Host",Host,"was not found.";
312 # repeatedly show the account configuration
319 print " a) Arbitary Change";
320 print " n) New Host";
321 print " d) Delete Host";
322 print " u) Switch Hosts";
326 Response = raw_input("Change? ");
327 if (Response == "x" or Response == "X" or Response == "q" or
328 Response == "quit" or Response == "exit"):
331 # Change who we are looking at
332 if (Response == 'u' or Response == 'U'):
333 NewHost = raw_input("Host? ");
336 NAttrs = l.search_s(HostBaseDn,ldap.SCOPE_ONELEVEL,"host=" + NewHost);
338 print "Host",NewHost,"was not found.";
342 HostDn = "host=" + Host + "," + HostBaseDn;
343 OrderedIndex = copy.deepcopy(OrigOrderedIndex);
346 # Create a new entry and change to it Change who we are looking at
347 if (Response == 'n' or Response == 'N'):
348 NewHost = raw_input("Host? ");
351 NAttrs = l.search_s(HostBaseDn,ldap.SCOPE_ONELEVEL,"host=" + NewHost);
353 print "Host",NewHost,"already exists.";
355 NewHostName = raw_input("Hostname? ");
358 Dn = "host=" + NewHost + "," + HostBaseDn;
359 l.add_s(Dn,[("host", NewHost),
360 ("hostname", NewHostName),
361 ("objectClass", ("top", "debianServer"))]);
364 NAttrs = l.search_s(HostBaseDn,ldap.SCOPE_ONELEVEL,"host=" + NewHost);
366 print "Host",NewHost,"was not found.";
370 HostDn = "host=" + Host + "," + HostBaseDn;
371 OrderedIndex = copy.deepcopy(OrigOrderedIndex);
374 # Handle changing an arbitary value
375 if (Response == "a"):
376 Attr = raw_input("Attr? ");
377 ChangeAttr(Attrs[0],Attr);
380 if (Response == 'd'):
381 Really = raw_input("Really (type yes)? ");
384 print "Deleting",HostDn;
388 # Convert the integer response
391 if (not OrderedIndex.has_key(ID) or (ID > 100 and RootMode == 0)):
397 # Print the what to do prompt
398 print "Changing LDAP entry '%s' (%s)" % (OrderedIndex[ID][0],OrderedIndex[ID][2]);
399 print AttrPrompt[OrderedIndex[ID][2]][0];
400 ChangeAttr(Attrs[0],OrderedIndex[ID][2]);