mirror of https://github.com/jumpserver/jumpserver
modify some
ibuler
parent
e979c2753b
commit
fc22677f3f
131
connect.py
131
connect.py
|
|
@ -27,8 +27,8 @@ if django.get_version() != '1.6':
|
|||
django.setup()
|
||||
from juser.models import User
|
||||
from jlog.models import Log
|
||||
from jumpserver.api import CONF, BASE_DIR, ServerError, user_perm_group_api, user_perm_group_hosts_api, get_user_host
|
||||
from jumpserver.api import AssetAlias, get_connect_item
|
||||
from jumpserver.api import CONF, BASE_DIR, ServerError, Juser
|
||||
from jumpserver.api import AssetAlias, get_connect_item, logger
|
||||
|
||||
try:
|
||||
import termios
|
||||
|
|
@ -41,6 +41,7 @@ except ImportError:
|
|||
CONF.read(os.path.join(BASE_DIR, 'jumpserver.conf'))
|
||||
log_dir = os.path.join(BASE_DIR, 'logs')
|
||||
login_name = getpass.getuser()
|
||||
user = Juser(username=login_name)
|
||||
|
||||
|
||||
def color_print(msg, color='blue'):
|
||||
|
|
@ -177,52 +178,80 @@ def posix_shell(chan, username, host):
|
|||
log.log_finished = False
|
||||
log.end_time = datetime.datetime.now()
|
||||
log.save()
|
||||
# print_prompt()
|
||||
|
||||
|
||||
def get_user_host_group(username):
|
||||
"""
|
||||
Get the host groups of under the user control.
|
||||
获取用户有权限的主机组
|
||||
"""
|
||||
groups_attr = {}
|
||||
group_all = user_perm_group_api(username)
|
||||
for group in group_all:
|
||||
groups_attr[group.name] = [group.id, group.comment]
|
||||
return groups_attr
|
||||
# def get_user_host_group(username):
|
||||
# """
|
||||
# Get the host groups of under the user control.
|
||||
# 获取用户有权限的主机组
|
||||
# """
|
||||
# groups_attr = {}
|
||||
# group_all = get_host_groups(username)
|
||||
# for group in group_all:
|
||||
# groups_attr[group.name] = [group.id, group.comment]
|
||||
# return groups_attr
|
||||
|
||||
|
||||
def get_host_group_host(username, gid):
|
||||
"""
|
||||
Get the host group hosts of under the user control.
|
||||
获取用户有权限主机组下的主机
|
||||
"""
|
||||
groups_attr = get_user_host_group(username)
|
||||
groups_ids = [attr[0] for name, attr in groups_attr.items()]
|
||||
hosts_attr = {}
|
||||
if gid in groups_ids:
|
||||
user = User.objects.filter(username=username)
|
||||
if user:
|
||||
user = user[0]
|
||||
hosts = user_perm_group_hosts_api(gid)
|
||||
for host in hosts:
|
||||
alias = AssetAlias.objects.filter(user=user, host=host)
|
||||
if alias and alias[0].alias != '':
|
||||
hosts_attr[host.ip] = [host.id, host.ip, alias[0].alias]
|
||||
else:
|
||||
hosts_attr[host.ip] = [host.id, host.ip, host.comment]
|
||||
return hosts_attr
|
||||
# def get_user_host_group_member(username, gid):
|
||||
# """
|
||||
# Get the host group hosts of under the user control.
|
||||
# 获取用户有权限主机组下的主机
|
||||
# """
|
||||
# groups_attr = get_user_host_group(username)
|
||||
# groups_ids = [attr[0] for name, attr in groups_attr.items()]
|
||||
# hosts_attr = {}
|
||||
# if int(gid) in groups_ids:
|
||||
# user = User.objects.filter(username=username)
|
||||
# if user:
|
||||
# user = user[0]
|
||||
# hosts = get_host_groups(gid)
|
||||
# for host in hosts:
|
||||
# alias = AssetAlias.objects.filter(user=user, host=host)
|
||||
# if alias and alias[0].alias != '':
|
||||
# hosts_attr[host.ip] = [host.id, host.ip, alias[0].alias]
|
||||
# else:
|
||||
# hosts_attr[host.ip] = [host.id, host.ip, host.comment]
|
||||
# return hosts_attr
|
||||
|
||||
|
||||
# def user_asset_info(user, printable=False):
|
||||
# """
|
||||
# Get or Print asset info
|
||||
# 获取或打印用户资产信息
|
||||
# """
|
||||
# assets_info = {}
|
||||
# try:
|
||||
# assets = get_asset(user)
|
||||
# except ServerError, e:
|
||||
# color_print(e, 'red')
|
||||
# return
|
||||
#
|
||||
# for asset in assets:
|
||||
# asset_alias = AssetAlias.objects.filter(user=user, asset=asset)
|
||||
# if asset_alias and asset_alias[0].alias != '':
|
||||
# assets_info[asset.ip] = [asset.id, asset.ip, asset_alias[0].alias]
|
||||
# else:
|
||||
# assets_info[asset.ip] = [asset.id, asset.ip, asset.comment]
|
||||
#
|
||||
# if printable:
|
||||
# ips = assets_info.keys()
|
||||
# ips.sort()
|
||||
# for ip in ips:
|
||||
# print '%-15s -- %s' % (ip, assets_info[ip][2])
|
||||
# print ''
|
||||
# else:
|
||||
# return assets_info
|
||||
|
||||
|
||||
def verify_connect(username, part_ip):
|
||||
ip_matched = []
|
||||
try:
|
||||
hosts_attr = get_user_host(username)
|
||||
hosts = hosts_attr.values()
|
||||
assets = get_asset(username=username)
|
||||
except ServerError, e:
|
||||
color_print(e, 'red')
|
||||
return False
|
||||
|
||||
assets_info =
|
||||
for ip_info in hosts:
|
||||
if part_ip in ip_info[1:] and part_ip:
|
||||
ip_matched = [ip_info[1]]
|
||||
|
|
@ -254,29 +283,16 @@ def print_prompt():
|
|||
print textwrap.dedent(msg)
|
||||
|
||||
|
||||
def print_user_host(username):
|
||||
try:
|
||||
hosts_attr = get_user_host(username)
|
||||
except ServerError, e:
|
||||
color_print(e, 'red')
|
||||
return
|
||||
hosts = hosts_attr.keys()
|
||||
hosts.sort()
|
||||
for ip in hosts:
|
||||
print '%-15s -- %s' % (ip, hosts_attr[ip][2])
|
||||
print ''
|
||||
# def print_user_host_group(username):
|
||||
# host_groups = get_host_groups(username)
|
||||
# for host_group in host_groups:
|
||||
# print "[%3s] %s -- %s" % (host_group.id, host_group.ip, host_group.comment)
|
||||
|
||||
|
||||
def print_user_hostgroup(username):
|
||||
group_attr = get_user_host_group(username)
|
||||
groups = group_attr.keys()
|
||||
for g in groups:
|
||||
print "[%3s] %s -- %s" % (group_attr[g][0], g, group_attr[g][1])
|
||||
|
||||
|
||||
def print_user_hostgroup_host(username, gid):
|
||||
def asset_group_member(username, gid):
|
||||
pattern = re.compile(r'\d+')
|
||||
match = pattern.match(gid)
|
||||
|
||||
if match:
|
||||
hosts_attr = get_host_group_host(username, gid)
|
||||
hosts = hosts_attr.keys()
|
||||
|
|
@ -397,6 +413,9 @@ def exec_cmd_servers(username):
|
|||
|
||||
|
||||
if __name__ == '__main__':
|
||||
if not user.validate():
|
||||
color_print_exit(u'没有该用户 No that user.')
|
||||
|
||||
print_prompt()
|
||||
gid_pattern = re.compile(r'^g\d+$')
|
||||
try:
|
||||
|
|
@ -409,10 +428,10 @@ if __name__ == '__main__':
|
|||
except KeyboardInterrupt:
|
||||
sys.exit(0)
|
||||
if option in ['P', 'p']:
|
||||
print_user_host(login_name)
|
||||
user.get_asset_info(printable=True)
|
||||
continue
|
||||
elif option in ['G', 'g']:
|
||||
print_user_hostgroup(login_name)
|
||||
user.get_asset_group_info(printable=True)
|
||||
continue
|
||||
elif gid_pattern.match(option):
|
||||
gid = option[1:].strip()
|
||||
|
|
|
|||
|
|
@ -47,7 +47,7 @@ class Asset(models.Model):
|
|||
|
||||
class AssetAlias(models.Model):
|
||||
user = models.ForeignKey(User)
|
||||
host = models.ForeignKey(Asset)
|
||||
asset = models.ForeignKey(Asset)
|
||||
alias = models.CharField(max_length=100, blank=True, null=True)
|
||||
|
||||
def __unicode__(self):
|
||||
|
|
|
|||
|
|
@ -76,7 +76,10 @@ def log_kill(request):
|
|||
deptname = get_session_user_info(request)[4]
|
||||
if is_group_admin(request) and dept_name != deptname:
|
||||
return httperror(request, u'Kill失败, 您无权操作!')
|
||||
try:
|
||||
os.kill(int(pid), 9)
|
||||
except OSError:
|
||||
pass
|
||||
Log.objects.filter(pid=pid).update(is_finished=1, end_time=datetime.datetime.now())
|
||||
return render_to_response('jlog/log_offline.html', locals(), context_instance=RequestContext(request))
|
||||
else:
|
||||
|
|
|
|||
|
|
@ -4,6 +4,7 @@
|
|||
ip = 192.168.20.209
|
||||
port = 80
|
||||
key = 88aaaf7ffe3c6c04
|
||||
log = debug
|
||||
|
||||
|
||||
[db]
|
||||
|
|
|
|||
|
|
@ -23,20 +23,32 @@ from jasset.models import AssetAlias
|
|||
from django.core.exceptions import ObjectDoesNotExist
|
||||
from django.core.mail import send_mail
|
||||
import json
|
||||
import logging
|
||||
|
||||
|
||||
BASE_DIR = os.path.abspath(os.path.dirname(os.path.dirname(__file__)))
|
||||
CONF = ConfigParser()
|
||||
CONF.read(os.path.join(BASE_DIR, 'jumpserver.conf'))
|
||||
LOG_DIR = os.path.join(BASE_DIR, 'logs')
|
||||
JLOG_FILE = os.path.join(LOG_DIR, 'jumpserver.log')
|
||||
SSH_KEY_DIR = os.path.join(BASE_DIR, 'keys')
|
||||
SERVER_KEY_DIR = os.path.join(SSH_KEY_DIR, 'server')
|
||||
# SERVER_KEY_DIR = os.path.join(SSH_KEY_DIR, 'server')
|
||||
KEY = CONF.get('base', 'key')
|
||||
LOGIN_NAME = getpass.getuser()
|
||||
LDAP_ENABLE = CONF.getint('ldap', 'ldap_enable')
|
||||
SEND_IP = CONF.get('base', 'ip')
|
||||
SEND_PORT = CONF.get('base', 'port')
|
||||
MAIL_FROM = CONF.get('mail', 'email_host_user')
|
||||
log_level = CONF.get('base', 'log')
|
||||
log_level_total = {'debug': logging.DEBUG, 'info': logging.INFO, 'warning': logging.WARN, 'error': logging.ERROR,
|
||||
'critical': logging.CRITICAL}
|
||||
logger = logging.getLogger('jumpserver')
|
||||
logger.setLevel(logging.DEBUG)
|
||||
fh = logging.FileHandler(JLOG_FILE)
|
||||
fh.setLevel(log_level_total.get(log_level, logging.DEBUG))
|
||||
formatter = logging.Formatter('%(asctime)s - %(filename)s - %(levelname)s - %(message)s')
|
||||
fh.setFormatter(formatter)
|
||||
logger.addHandler(fh)
|
||||
|
||||
|
||||
class LDAPMgmt():
|
||||
|
|
@ -87,14 +99,6 @@ class LDAPMgmt():
|
|||
except ldap.LDAPError, e:
|
||||
print e
|
||||
|
||||
def decrypt(self, text):
|
||||
cryptor = AES.new(self.key, self.mode, b'0000000000000000')
|
||||
try:
|
||||
plain_text = cryptor.decrypt(a2b_hex(text))
|
||||
except TypeError:
|
||||
raise ServerError('Decrypt password error, TYpe error.')
|
||||
return plain_text.rstrip('\0')
|
||||
|
||||
|
||||
if LDAP_ENABLE:
|
||||
LDAP_HOST_URL = CONF.get('ldap', 'host_url')
|
||||
|
|
@ -292,40 +296,199 @@ def user_group_perm_asset_group_api(user_group):
|
|||
return asset_group_list
|
||||
|
||||
|
||||
def user_perm_group_api(username):
|
||||
class Juser(object):
|
||||
def __init__(self, username=None, uid=None):
|
||||
if username:
|
||||
user = User.objects.get(username=username)
|
||||
user = User.objects.filter(username=username)
|
||||
elif uid:
|
||||
user = User.objects.filter(id=uid)
|
||||
else:
|
||||
user = ''
|
||||
|
||||
if user:
|
||||
user = user[0]
|
||||
self.user = user
|
||||
self.id = user.id
|
||||
self.username = user.username
|
||||
self.name = user.name
|
||||
self.group = user.group.all()
|
||||
|
||||
def validate(self):
|
||||
"""
|
||||
Validate is or not a true user
|
||||
鉴定用户
|
||||
"""
|
||||
if self.user:
|
||||
return True
|
||||
else:
|
||||
return False
|
||||
|
||||
def get_asset_group(self):
|
||||
"""
|
||||
Get user host_groups.
|
||||
获取用户有权限的主机组
|
||||
"""
|
||||
host_group_list = []
|
||||
perm_list = []
|
||||
user_group_all = user.group.all()
|
||||
user_group_all = self.user.group.all()
|
||||
for user_group in user_group_all:
|
||||
perm_list.extend(user_group.perm_set.all())
|
||||
|
||||
asset_group_list = []
|
||||
for perm in perm_list:
|
||||
asset_group_list.append(perm.asset_group)
|
||||
return asset_group_list
|
||||
host_group_list.append(perm.asset_group)
|
||||
|
||||
return host_group_list
|
||||
|
||||
def user_perm_group_hosts_api(gid):
|
||||
hostgroup = BisGroup.objects.filter(id=gid)
|
||||
if hostgroup:
|
||||
return hostgroup[0].asset_set.all()
|
||||
def get_asset_group_info(self, printable=False):
|
||||
"""
|
||||
Get or print asset group info
|
||||
获取或打印用户授权资产组
|
||||
"""
|
||||
asset_groups_info = {}
|
||||
asset_groups = self.get_asset_group()
|
||||
|
||||
for asset_group in asset_groups:
|
||||
asset_groups_info[asset_group.id] = [asset_group.name, asset_group.comment]
|
||||
|
||||
if printable:
|
||||
for group_id in asset_groups_info:
|
||||
if asset_groups_info[group_id][1]:
|
||||
print "[%3s] %s -- %s" % (group_id,
|
||||
asset_groups_info[group_id][0],
|
||||
asset_groups_info[group_id][1])
|
||||
else:
|
||||
return []
|
||||
|
||||
|
||||
def user_perm_asset_api(username):
|
||||
user = User.objects.filter(username=username)
|
||||
if user:
|
||||
user = user[0]
|
||||
asset_list = []
|
||||
asset_group_list = user_perm_group_api(user)
|
||||
for asset_group in asset_group_list:
|
||||
asset_list.extend(asset_group.asset_set.all())
|
||||
asset_list = list(set(asset_list))
|
||||
return asset_list
|
||||
print "[%3s] %s" % (group_id, asset_groups_info[group_id][0])
|
||||
else:
|
||||
return []
|
||||
return asset_groups_info
|
||||
|
||||
def get_asset(self):
|
||||
"""
|
||||
Get the hosts of under the user control.
|
||||
获取主机列表
|
||||
"""
|
||||
hosts = []
|
||||
host_groups = self.get_asset_group()
|
||||
|
||||
for host_group in host_groups:
|
||||
hosts.extend(get_asset_group_member(host_group.id))
|
||||
|
||||
return hosts
|
||||
|
||||
def get_asset_info(self, printable=False):
|
||||
"""
|
||||
Get or print the user asset info
|
||||
获取或打印用户资产信息
|
||||
"""
|
||||
assets_info = {}
|
||||
assets = self.get_asset()
|
||||
|
||||
for asset in assets:
|
||||
asset_alias = AssetAlias.objects.filter(user=self.user, asset=asset)
|
||||
if asset_alias and asset_alias[0].alias != '':
|
||||
assets_info[asset.ip] = [asset.id, asset.ip, asset_alias[0].alias]
|
||||
else:
|
||||
assets_info[asset.ip] = [asset.id, asset.ip, asset.comment]
|
||||
|
||||
if printable:
|
||||
ips = assets_info.keys()
|
||||
ips.sort()
|
||||
for ip in ips:
|
||||
if assets_info[ip][2]:
|
||||
print '%-15s -- %s' % (ip, assets_info[ip][2])
|
||||
else:
|
||||
print '%-15s' % ip
|
||||
print ''
|
||||
else:
|
||||
return assets_info
|
||||
|
||||
|
||||
class Jasset(object):
|
||||
def __init__(self, ip=None, id=None):
|
||||
if ip:
|
||||
asset = Asset.objects.filter(ip=ip)
|
||||
elif id:
|
||||
asset = Asset.objects.filter(id=id)
|
||||
else:
|
||||
asset = ''
|
||||
|
||||
if asset:
|
||||
asset = asset[0]
|
||||
self.asset = asset
|
||||
self.ip = asset.ip
|
||||
self.id = asset.id
|
||||
self.port = asset.port
|
||||
self.comment = asset.comment
|
||||
|
||||
def validate(self):
|
||||
if self.asset:
|
||||
return True
|
||||
else:
|
||||
return False
|
||||
|
||||
|
||||
class JassetGroup(object):
|
||||
pass
|
||||
|
||||
|
||||
|
||||
# def get_asset_group(user=None):
|
||||
# """
|
||||
# Get user host_groups.
|
||||
# 获取用户有权限的主机组
|
||||
# """
|
||||
# host_group_list = []
|
||||
# if user:
|
||||
# user = user[0]
|
||||
# perm_list = []
|
||||
# user_group_all = user.group.all()
|
||||
# for user_group in user_group_all:
|
||||
# perm_list.extend(user_group.perm_set.all())
|
||||
#
|
||||
# host_group_list = []
|
||||
# for perm in perm_list:
|
||||
# host_group_list.append(perm.asset_group)
|
||||
# return host_group_list
|
||||
|
||||
|
||||
def get_asset_group_member(gid):
|
||||
"""
|
||||
Get host_group's member host
|
||||
获取主机组下的主机
|
||||
"""
|
||||
hosts = []
|
||||
if gid:
|
||||
host_group = BisGroup.objects.filter(id=gid)
|
||||
if host_group:
|
||||
host_group = host_group[0]
|
||||
hosts = host_group.asset_set.all()
|
||||
return hosts
|
||||
|
||||
|
||||
# def get_asset(user=None):
|
||||
# """
|
||||
# Get the hosts of under the user control.
|
||||
# 获取主机列表
|
||||
# """
|
||||
# hosts = []
|
||||
# if user:
|
||||
# host_groups = get_asset_group(user)
|
||||
# for host_group in host_groups:
|
||||
# hosts.extend(get_asset_group_member(host_group.id))
|
||||
# return hosts
|
||||
|
||||
|
||||
# def user_perm_asset_api(username):
|
||||
# user = User.objects.filter(username=username)
|
||||
# if user:
|
||||
# user = user[0]
|
||||
# asset_list = []
|
||||
# asset_group_list = user_perm_group_api(user)
|
||||
# for asset_group in asset_group_list:
|
||||
# asset_list.extend(asset_group.asset_set.all())
|
||||
# asset_list = list(set(asset_list))
|
||||
# return asset_list
|
||||
# else:
|
||||
# return []
|
||||
|
||||
|
||||
def asset_perm_api(asset):
|
||||
|
|
@ -346,24 +509,6 @@ def asset_perm_api(asset):
|
|||
return user_permed_list
|
||||
|
||||
|
||||
def get_user_host(username):
|
||||
"""Get the hosts of under the user control."""
|
||||
hosts_attr = {}
|
||||
asset_all = user_perm_asset_api(username)
|
||||
user = User.objects.filter(username=username)
|
||||
if user:
|
||||
user = user[0]
|
||||
for asset in asset_all:
|
||||
alias = AssetAlias.objects.filter(user=user, host=asset)
|
||||
if alias and alias[0].alias != '':
|
||||
hosts_attr[asset.ip] = [asset.id, asset.ip, alias[0].alias]
|
||||
else:
|
||||
hosts_attr[asset.ip] = [asset.id, asset.ip, asset.comment]
|
||||
return hosts_attr
|
||||
else:
|
||||
raise ServerError('User %s does not exit!' % username)
|
||||
|
||||
|
||||
def get_connect_item(username, ip):
|
||||
asset = get_object(Asset, ip=ip)
|
||||
port = int(asset.port)
|
||||
|
|
|
|||
Loading…
Reference in New Issue