관리-도구
편집 파일: auth.pyo
� ,w�gc @ s� d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z m Z m Z m Z d Z d Z d Z d � Z d � Z d � Z e j d � � Z d � Z d � Z e d � Z d � Z d � Z e d � Z e j d � � Z d � Z d � Z! d � Z" d � Z# d � Z$ d � Z% d d � Z& d! � Z' d S(" i����Ni ( t errors( t config( t constants( t http_utils( t log_utils( t platform_utils( t utils( t urlencodet json_loads_nstrt URLErrort HTTPErrors /etc/sysconfig/kcare/systemids& /etc/sysconfig/kcare/systemid.almacares /var/imunify360/license.jsonc C s� t j j t � s d St t d � �d } xZ | D]R } | j d � \ } } } | j � d k ri | j � St j d j t � � � q/ WWd QXd S( Nt rt =t server_ids Unable to parse {0}.( t ost patht existst SYSTEMIDt Nonet opent partitiont stripR t KcareErrort format( t fdt linet paramt _t value( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt _systemid s c C sB t j j t � s d St t d � � } | j � j � SWd QXd S( NR ( R R R t ALMA_SYSTEMIDR R t readlineR ( t f( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt _alma_systemid$ s c C sw t j j t � s d Si } t t � �@ } | j � } | rd y t | � } Wqd t k r` qd Xn Wd QX| j d � S( Nt id( R R R t IM360_LICENSE_FILER R t readR t Exceptiont get( t dataR t content( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt _im360_systemid+ s c C s t � p t � p t � S( sq Get server_id or None if not present. Lookup order: SYSTEMID then IM360_LICENSE_FILE then ALMA_SYSTEMID ( R R) R! ( ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt get_serverid: s c C s t j t � d S( N( R t unlinkR ( ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt _rm_serveridC s c C s t j t d j | � � d S( Ns server_id={0} ( R t atomic_writeR R ( R ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt _set_server_idG s c C s d } y� t � } | d k r8 | s4 t j d � n d St j d j | � } t j | � } t j | j � � } t j | � } | d d k r� t � | s� t j d � q� n+ | s� t j | � t j d | d � n Wn, t k r } | s t j | | � q n Xd S( Ns1 Error unregistering server: cannot find server ids& /unregister_server.plain?server_id={0}t successt trues Server was unregistereds Error unregistering server: t message( R R* R t logerrorR t REGISTRATION_URLR R t urlopenR t nstrR$ t data_as_dictR, t loginfoR t print_cln_http_error( t silentt urlR t responseR( t rest e( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt unregisterK s* c C sP d GHt j � } | d k r! d St j � t j � } d d l } | d k r_ | j d � n | j j � t d d � } t d d � } t j | j � | j j � � t j | j � | j j � � t j | j � | j j � � xb t rKt j d � t | � \ } } } | d k r� | r� t | � t | � | j d � q� q� Wd S( NsH Register auto-retry has been enabled, the system can be registered lateri i����s /dev/nullR s a+i< i i i ( R t forkt setsidt syst exitt stdoutt flushR t dup2t filenot stdint stderrt Truet timet sleept _try_registerR. t _set_auth_token( R: t pidRA t sit sot codeR t auth_token( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt _register_retryc s, c C s� yi t j | � } | j j t j d � } t j t j | j � � � } t | d � | j d � | f SWnO t t f k r� } t j | | � d St k r� t j j d | � d SXd S( NRQ R s) Exception while trying to register URL %s( NNN( NNN( R R4 t headersR& R t AUTH_TOKEN_HEADERR R R6 R5 R$ t intR R R R8 R% t kcarelogt exception( R: R; RR R< R= ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyRL } s $ c C s� y t t � Wn! t k r1 t j j d � n Xt j � } t d | f d | f g � } d j t j | � } t | � \ } } } | d k r� t | � t | � t j d � d S| d k r� t j d � n� | d k r� t j d � n� | d k r t j d � nj | d k r't j d � nN | d k rCt j d � n2 | d k r_t j d � n t j d j | � � | r�t | � d S| p�d S( Ns9 Exception while trying to unregister URL before register.t hostnamet keys {0}/register_server.plain?{1}i s Server Registeredi s Account Lockedi s Invalid Keyi s} You have reached maximum registered servers for this key. Please go to your CLN account, remove unused servers and try again.i s[ IP is not allowed. Please change allowed IP ranges for the key in KernelCare Key tab in CLNi sE This IP was already used for trial, you cannot use it for trial againi sf This IP was banned. Please contact support for more information at https://www.kernelcare.com/support/s Unknown Error {0}i����( R> RI R% R RW RX R t get_hostnameR R R R3 RL R. RM R7 R2 RS ( RZ t retryRY t queryR: RQ R RR ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt register� s> c C s t j t j � S( N( R t try_to_readR t AUTH_TOKEN_DUMP_PATH( ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt _get_auth_token� s c C s! | s d St j t j | � d S( N( R R- R R` ( RR ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyRM � s c O s� | j d d � } | j d t � r- t } n t j } t j | � rX t j | | | � St j | t � t � d | �} t j | d d �t j � | | | � S( Nt methodt check_licenset counti ( t popR RI t _check_auth_retryR t check_urlopen_retryt is_local_urlt urlopen_baset http_requestt get_http_auth_stringRa R R\ ( R: t argst kwargsRb t checkt request( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt urlopen_auth� s !c C s> t � } | r: t j t j t j d j | d � � � � Sd S( Ns {0}:{1}t kernelcare( R* R R5 t base64t b64encodet bstrR R ( R ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyRk � s +c C sL t | t � r5 | j d k r( t | � S| j d k St | t � rH t Sd S( Ni� i� i� ( i� i� ( t isinstanceR RQ t _handle_forbiddenR RI ( R= t state( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyRf � s c C s# d | k r t St j r t � } | rE t j d d j | � } n t j d } y7 t j t j | d t �j � � } t j | � } Wn* t k r� } t j | | d t �d SX| s� | j d � r� t j j d j | � � d S| d d k rt | d <t j d � t St � n d S( s In case of 403 error we should check what's happen. Case #1. We are trying to register unlicensed machine and should try to register trial. Case #2. We have a valid license but access restrictions on server are not consistent yet and we had to try later. t licenses /check.plains ?server_id={0}t retry_on_500RC NRQ s Unexpected CLN response: {0}t 0t 1s$ Unable to access server. Retrying...( Rz R{ ( RI R t CHECK_CLN_LICENSE_STATUSR* R3 R R R5 R R4 t FalseR$ R6 R R R8 R& RW t errorR2 t _register_trial( Rw R R: R( t infot ex( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyRv � s* $ c C s t � } | r� t j d j | � } y� t j | � } t j | j � � } t j | � } | sr | j d � r� d j | � GHd St | d � } | d k r� d GHd St d d � } | d k r� d GHn | SWqt k r� } t j | | � d SXn t � Sd S( Ns /check.plain?server_id={0}RQ s Unexpected CLN response: {0}i i s Key-based valid license foundt key_checkeds No valid key-based license found( R* R R3 R R R4 R R5 R$ R6 R& RV t _get_license_info_by_ipR R R8 ( R R: R; R( R< RQ t license_typeR= ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt license_info s, i c C s� t j d } y|t j | � } t j | j � � } t j | � } | d j � d k rht | d � } | d k r� d j | d � GHd S| d k r� | d } t j | d � j d � } d j | | � GHd S| d k r$| d k r$| d } t j | d � j d � } d j | | � GHn | d k r�| d k r�d | k r]d j | d � GHqed GHq�n | j d d � } d j | � GHWnL t k r�} t j | | � n* t k r�} d j | | j � � GHn Xd S( Ns /check.plainR/ R0 RQ i s Valid license found for IP {0}t ipi t expire_dates %Y-%m-%ds? You have a trial license for the IP {0} that will expire on {1}i s0 Your trial license for the IP {0} expired on {1}i s The IP {0} hasn't been licenseds This server hasn't been licensedR1 t s" Error retrieving license info: {0}s1 Unexpected CLN response, cannot find {0} key: {1}( R R3 R R4 R R5 R$ R6 t lowerRV R t parse_response_datet strftimeR& R R R8 t KeyErrorR ( R� R: R; R( R< RQ R� t expires_strR1 R= RZ ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyR� s< c C sy t j j t j d � } t j j | � r. d Sy t j t j d � } t j t j | j � � � } y� | d j � d k r� t j | d d t �| d d k r� t j | d | d � � n t j d j | d � � d S| d d k rt j | d d t �t j d � � n t j d � � Wn" t k rK} t j | � � n XWn% t k rt} t j | j � � n Xd S( Ns trial-requesteds /trial.plainR/ R0 R� t ensure_dirt expiredR� t createds3 Requesting trial license for IP {0}. Please wait...t nas Invalid Licensei����( R R t joinR t PATCH_CACHER R R4 R R3 R R6 R5 R$ R� R- RI R t AlreadyTrialedExceptionR R7 R R R t UnableToGetLicenseExceptionR� R RQ ( t trial_markR; R< t keR= ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyR C s* (( Rr R RJ R� R R R R R R R t py23R R R R R R R# R R! R) t cachedR* R, R. R} R> RS RL R^ Ra RM Rp Rk Rf Rv R� R� R ( ( ( s* /usr/libexec/kcare/python/kcarectl/auth.pyt <module> s@ " ( ) #