diff --git a/connect.py b/connect.py index 196699778..8bd93daac 100644 --- a/connect.py +++ b/connect.py @@ -18,33 +18,36 @@ import textwrap import getpass import fnmatch import readline +import django import datetime from multiprocessing import Pool os.environ['DJANGO_SETTINGS_MODULE'] = 'jumpserver.settings' +if django.get_version() != '1.6': + django.setup() from juser.models import User from jlog.models import Log from jumpserver.api import CONF, BASE_DIR, ServerError, user_perm_group_api, user_perm_group_hosts_api, get_user_host from jumpserver.api import AssetAlias, get_connect_item - try: import termios import tty except ImportError: - print '\033[1;31mOnly UnixLike supported.\033[0m' + print '\033[1;31mOnly unix like supported.\033[0m' time.sleep(3) sys.exit() CONF.read(os.path.join(BASE_DIR, 'jumpserver.conf')) -LOG_DIR = os.path.join(BASE_DIR, 'logs') -SSH_KEY_DIR = os.path.join(BASE_DIR, 'keys') -SERVER_KEY_DIR = os.path.join(SSH_KEY_DIR, 'server') -LOGIN_NAME = getpass.getuser() +log_dir = os.path.join(BASE_DIR, 'logs') +login_name = getpass.getuser() def color_print(msg, color='blue'): - """Print colorful string.""" + """ + Print colorful string. + 颜色打印 + """ color_msg = {'blue': '\033[1;36m%s\033[0m', 'green': '\033[1;32m%s\033[0m', 'red': '\033[1;31m%s\033[0m'} @@ -53,48 +56,63 @@ def color_print(msg, color='blue'): def color_print_exit(msg, color='red'): - """Print colorful string and exit.""" + """ + Print colorful string and exit. + 颜色打印并推出 + """ color_print(msg, color=color) time.sleep(2) sys.exit() def get_win_size(): - """This function use to get the size of the windows!""" + """ + This function use to get the size of the windows! + 获得terminal窗口大小 + """ if 'TIOCGWINSZ' in dir(termios): TIOCGWINSZ = termios.TIOCGWINSZ else: - TIOCGWINSZ = 1074295912L # Assume + TIOCGWINSZ = 1074295912L s = struct.pack('HHHH', 0, 0, 0, 0) x = fcntl.ioctl(sys.stdout.fileno(), TIOCGWINSZ, s) return struct.unpack('HHHH', x)[0:2] def set_win_size(sig, data): - """This function use to set the window size of the terminal!""" + """ + This function use to set the window size of the terminal! + 设置terminal窗口大小 + """ try: win_size = get_win_size() channel.resize_pty(height=win_size[0], width=win_size[1]) - except: + except Exception: pass def log_record(username, host): - """Logging user command and output.""" - connect_log_dir = os.path.join(LOG_DIR, 'connect') + """ + Logging user command and output. + 记录用户的日志 + """ + connect_log_dir = os.path.join(log_dir, 'connect') timestamp_start = int(time.time()) today = time.strftime('%Y%m%d', time.localtime(timestamp_start)) time_now = time.strftime('%H%M%S', time.localtime(timestamp_start)) today_connect_log_dir = os.path.join(connect_log_dir, today) log_filename = '%s_%s_%s.log' % (username, host, time_now) log_file_path = os.path.join(today_connect_log_dir, log_filename) - dept_name = User.objects.get(username=username).dept.name + dept = User.objects.filter(username=username) + if dept: + dept = dept[0] + dept_name = dept.name + else: + dept_name = 'None' + pid = os.getpid() - ip_list = [] - remote_ip = os.popen("who |grep `ps aux |gawk '{if ($2==%s) print $1}'` |gawk '{print $5}'|tr -d '()'" % pid).readlines() - for ip in remote_ip: - ip_list.append(ip.strip('\n')) - ip_list = ','.join(list(set(ip_list))) + pts = os.popen("ps axu | grep %s | grep -v grep | awk '{ print $7 }'" % pid).read().strip() + remote_ip = os.popen("who | grep %s | awk '{ print $5 }'" % pts).read().strip('()\n') if not os.path.isdir(today_connect_log_dir): try: @@ -108,9 +126,9 @@ def log_record(username, host): except IOError: raise ServerError('Create logfile failed, Please modify %s permission.' % today_connect_log_dir) - log = Log(user=username, host=host, remote_ip=ip_list, dept_name=dept_name, + log = Log(user=username, host=host, remote_ip=remote_ip, dept_name=dept_name, log_path=log_file_path, start_time=datetime.datetime.now(), pid=pid) - log_file.write('Starttime is %s\n' % datetime.datetime.now()) + log_file.write('Start time is %s\n' % datetime.datetime.now()) log.save() return log_file, log @@ -118,6 +136,7 @@ def log_record(username, host): def posix_shell(chan, username, host): """ Use paramiko channel connect server interactive. + 使用paramiko模块的channel，连接后端，进入交互式 """ log_file, log = log_record(username, host) old_tty = termios.tcgetattr(sys.stdin) @@ -129,7 +148,7 @@ def posix_shell(chan, username, host): while True: try: r, w, e = select.select([chan, sys.stdin], [], []) - except: + except Exception: pass if chan in r: @@ -152,17 +171,20 @@ def posix_shell(chan, username, host): finally: termios.tcsetattr(sys.stdin, termios.TCSADRAIN, old_tty) - log_file.write('Endtime is %s' % datetime.datetime.now()) + log_file.write('End time is %s' % datetime.datetime.now()) log_file.close() log.is_finished = True log.log_finished = False log.end_time = datetime.datetime.now() log.save() - print_prompt() + # print_prompt() -def get_user_hostgroup(username): - """Get the hostgroups of under the user control.""" +def get_user_host_group(username): + """ + Get the host groups of under the user control. + 获取用户有权限的主机组 + """ groups_attr = {} group_all = user_perm_group_api(username) for group in group_all: @@ -170,17 +192,25 @@ def get_user_hostgroup(username): return groups_attr -def get_user_hostgroup_host(username, gid): - """Get the hostgroup hosts of under the user control.""" +def get_host_group_host(username, gid): + """ + Get the host group hosts of under the user control. + 获取用户有权限主机组下的主机 + """ + groups_attr = get_user_host_group(username) + groups_ids = [attr[0] for name, attr in groups_attr.items()] hosts_attr = {} - user = User.objects.get(username=username) - hosts = user_perm_group_hosts_api(gid) - for host in hosts: - alias = AssetAlias.objects.filter(user=user, host=host) - if alias and alias[0].alias != '': - hosts_attr[host.ip] = [host.id, host.ip, alias[0].alias] - else: - hosts_attr[host.ip] = [host.id, host.ip, host.comment] + if gid in groups_ids: + user = User.objects.filter(username=username) + if user: + user = user[0] + hosts = user_perm_group_hosts_api(gid) + for host in hosts: + alias = AssetAlias.objects.filter(user=user, host=host) + if alias and alias[0].alias != '': + hosts_attr[host.ip] = [host.id, host.ip, alias[0].alias] + else: + hosts_attr[host.ip] = [host.id, host.ip, host.comment] return hosts_attr @@ -209,7 +239,7 @@ def verify_connect(username, part_ip): color_print('No Permission or No host.', 'red') else: username, password, host, port = get_connect_item(username, ip_matched[0]) - connect(username, password, host, port, LOGIN_NAME) + connect(username, password, host, port, login_name) def print_prompt(): @@ -238,7 +268,7 @@ def print_user_host(username): def print_user_hostgroup(username): - group_attr = get_user_hostgroup(username) + group_attr = get_user_host_group(username) groups = group_attr.keys() for g in groups: print "[%3s] %s -- %s" % (group_attr[g][0], g, group_attr[g][1]) @@ -248,7 +278,7 @@ def print_user_hostgroup_host(username, gid): pattern = re.compile(r'\d+') match = pattern.match(gid) if match: - hosts_attr = get_user_hostgroup_host(username, gid) + hosts_attr = get_host_group_host(username, gid) hosts = hosts_attr.keys() hosts.sort() for ip in hosts: @@ -327,7 +357,7 @@ def multi_remote_exec_cmd(hosts, username, cmd): def exec_cmd_servers(username): color_print("You can choose in the following IP(s), Use glob or ips split by comma. q/Q to PreLayer.", 'green') - print_user_host(LOGIN_NAME) + print_user_host(login_name) while True: hosts = [] inputs = raw_input('\033[1;32mip(s)>: \033[0m') @@ -355,7 +385,7 @@ def exec_cmd_servers(username): cmd = raw_input('\033[1;32mCmd(s): \033[0m') if cmd in ['q', 'Q']: break - exec_log_dir = os.path.join(LOG_DIR, 'exec_cmds') + exec_log_dir = os.path.join(log_dir, 'exec_cmds') if not os.path.isdir(exec_log_dir): os.mkdir(exec_log_dir) os.chmod(exec_log_dir, 0777) @@ -379,22 +409,22 @@ if __name__ == '__main__': except KeyboardInterrupt: sys.exit(0) if option in ['P', 'p']: - print_user_host(LOGIN_NAME) + print_user_host(login_name) continue elif option in ['G', 'g']: - print_user_hostgroup(LOGIN_NAME) + print_user_hostgroup(login_name) continue elif gid_pattern.match(option): gid = option[1:].strip() - print_user_hostgroup_host(LOGIN_NAME, gid) + print_user_hostgroup_host(login_name, gid) continue elif option in ['E', 'e']: - exec_cmd_servers(LOGIN_NAME) + exec_cmd_servers(login_name) elif option in ['Q', 'q', 'exit']: sys.exit() else: try: - verify_connect(LOGIN_NAME, option) + verify_connect(login_name, option) except ServerError, e: color_print(e, 'red') except IndexError: diff --git a/juser/tests.py b/juser/tests.py deleted file mode 100644 index 7ce503c2d..000000000 --- a/juser/tests.py +++ /dev/null @@ -1,3 +0,0 @@ -from django.test import TestCase - -# Create your tests here.