mirror of https://github.com/jumpserver/jumpserver
313 lines
10 KiB
Python
313 lines
10 KiB
Python
#!/usr/bin/env python
|
||
# -*- coding: utf-8 -*-
|
||
#
|
||
|
||
import uuid
|
||
import logging
|
||
from functools import reduce
|
||
from collections import OrderedDict
|
||
|
||
from django.db import models
|
||
from django.utils.translation import ugettext_lazy as _
|
||
from rest_framework.exceptions import ValidationError
|
||
|
||
from common.utils import lazyproperty
|
||
from orgs.mixins.models import OrgModelMixin, OrgManager
|
||
from ..platform import Platform
|
||
from ..base import AbsConnectivity
|
||
|
||
__all__ = ['Asset', 'ProtocolsMixin', 'AssetQuerySet', 'default_node', 'default_cluster']
|
||
logger = logging.getLogger(__name__)
|
||
|
||
|
||
def default_cluster():
|
||
from assets.models import Cluster
|
||
name = "Default"
|
||
defaults = {"name": name}
|
||
cluster, created = Cluster.objects.get_or_create(
|
||
defaults=defaults, name=name
|
||
)
|
||
return cluster.id
|
||
|
||
|
||
def default_node():
|
||
try:
|
||
from assets.models import Node
|
||
root = Node.org_root()
|
||
return Node.objects.filter(id=root.id)
|
||
except:
|
||
return None
|
||
|
||
|
||
class AssetManager(OrgManager):
|
||
pass
|
||
|
||
|
||
class AssetQuerySet(models.QuerySet):
|
||
def active(self):
|
||
return self.filter(is_active=True)
|
||
|
||
def valid(self):
|
||
return self.active()
|
||
|
||
def has_protocol(self, name):
|
||
return self.filter(protocols__contains=name)
|
||
|
||
|
||
class ProtocolsMixin:
|
||
protocols = ''
|
||
|
||
class Protocol(models.TextChoices):
|
||
ssh = 'ssh', 'SSH'
|
||
rdp = 'rdp', 'RDP'
|
||
telnet = 'telnet', 'Telnet'
|
||
vnc = 'vnc', 'VNC'
|
||
|
||
@property
|
||
def protocols_as_list(self):
|
||
if not self.protocols:
|
||
return []
|
||
return self.protocols.split(' ')
|
||
|
||
@property
|
||
def protocols_as_dict(self):
|
||
d = OrderedDict()
|
||
protocols = self.protocols_as_list
|
||
for i in protocols:
|
||
if '/' not in i:
|
||
continue
|
||
name, port = i.split('/')[:2]
|
||
if not all([name, port]):
|
||
continue
|
||
d[name] = int(port)
|
||
return d
|
||
|
||
@property
|
||
def protocols_as_json(self):
|
||
return [
|
||
{"name": name, "port": port}
|
||
for name, port in self.protocols_as_dict.items()
|
||
]
|
||
|
||
def has_protocol(self, name):
|
||
return name in self.protocols_as_dict
|
||
|
||
@property
|
||
def ssh_port(self):
|
||
return self.protocols_as_dict.get("ssh", 22)
|
||
|
||
|
||
class NodesRelationMixin:
|
||
NODES_CACHE_KEY = 'ASSET_NODES_{}'
|
||
ALL_ASSET_NODES_CACHE_KEY = 'ALL_ASSETS_NODES'
|
||
CACHE_TIME = 3600 * 24 * 7
|
||
id = ""
|
||
_all_nodes_keys = None
|
||
|
||
def get_nodes(self):
|
||
from assets.models import Node
|
||
nodes = self.nodes.all()
|
||
if not nodes:
|
||
nodes = Node.objects.filter(id=Node.org_root().id)
|
||
return nodes
|
||
|
||
def get_all_nodes(self, flat=False):
|
||
nodes = []
|
||
for node in self.get_nodes():
|
||
_nodes = node.get_ancestors(with_self=True)
|
||
nodes.append(_nodes)
|
||
if flat:
|
||
nodes = list(reduce(lambda x, y: set(x) | set(y), nodes))
|
||
return nodes
|
||
|
||
|
||
class Asset(AbsConnectivity, ProtocolsMixin, NodesRelationMixin, OrgModelMixin):
|
||
id = models.UUIDField(default=uuid.uuid4, primary_key=True)
|
||
hostname = models.CharField(max_length=128, verbose_name=_('Hostname'))
|
||
ip = models.CharField(max_length=128, verbose_name=_('IP'), db_index=True)
|
||
protocol = models.CharField(max_length=128, default=ProtocolsMixin.Protocol.ssh,
|
||
choices=ProtocolsMixin.Protocol.choices, verbose_name=_('Protocol'))
|
||
port = models.IntegerField(default=22, verbose_name=_('Port'))
|
||
protocols = models.CharField(max_length=128, default='ssh/22', blank=True, verbose_name=_("Protocols"))
|
||
platform = models.ForeignKey(Platform, default=Platform.default, on_delete=models.PROTECT,
|
||
verbose_name=_("Platform"), related_name='assets')
|
||
domain = models.ForeignKey("assets.Domain", null=True, blank=True, related_name='assets',
|
||
verbose_name=_("Domain"), on_delete=models.SET_NULL)
|
||
nodes = models.ManyToManyField('assets.Node', default=default_node, related_name='assets',
|
||
verbose_name=_("Nodes"))
|
||
is_active = models.BooleanField(default=True, verbose_name=_('Is active'))
|
||
|
||
# Auth
|
||
admin_user = models.ForeignKey('assets.SystemUser', on_delete=models.SET_NULL, null=True,
|
||
verbose_name=_("Admin user"), related_name='admin_assets')
|
||
|
||
# Some information
|
||
public_ip = models.CharField(max_length=128, blank=True, null=True, verbose_name=_('Public IP'))
|
||
number = models.CharField(max_length=32, null=True, blank=True, verbose_name=_('Asset number'))
|
||
|
||
labels = models.ManyToManyField('assets.Label', blank=True, related_name='assets', verbose_name=_("Labels"))
|
||
created_by = models.CharField(max_length=128, null=True, blank=True, verbose_name=_('Created by'))
|
||
date_created = models.DateTimeField(auto_now_add=True, null=True, blank=True, verbose_name=_('Date created'))
|
||
comment = models.TextField(default='', blank=True, verbose_name=_('Comment'))
|
||
|
||
objects = AssetManager.from_queryset(AssetQuerySet)()
|
||
|
||
def __str__(self):
|
||
return '{0.hostname}({0.ip})'.format(self)
|
||
|
||
def set_admin_user_relation(self):
|
||
from assets.models import AuthBook
|
||
if not self.admin_user:
|
||
return
|
||
if self.admin_user.type != 'admin':
|
||
raise ValidationError('System user should be type admin')
|
||
|
||
defaults = {'asset': self, 'systemuser': self.admin_user, 'org_id': self.org_id}
|
||
AuthBook.objects.get_or_create(defaults=defaults, asset=self, systemuser=self.admin_user)
|
||
|
||
@property
|
||
def admin_user_display(self):
|
||
if not self.admin_user:
|
||
return ''
|
||
return str(self.admin_user)
|
||
|
||
@property
|
||
def is_valid(self):
|
||
warning = ''
|
||
if not self.is_active:
|
||
warning += ' inactive'
|
||
if warning:
|
||
return False, warning
|
||
return True, warning
|
||
|
||
@lazyproperty
|
||
def platform_base(self):
|
||
return self.platform.base
|
||
|
||
@lazyproperty
|
||
def admin_user_username(self):
|
||
"""求可连接性时，直接用用户名去取，避免再查一次admin user
|
||
serializer 中直接通过annotate方式返回了这个
|
||
"""
|
||
return self.admin_user.username
|
||
|
||
def is_windows(self):
|
||
return self.platform.is_windows()
|
||
|
||
def is_unixlike(self):
|
||
return self.platform.is_unixlike()
|
||
|
||
def is_support_ansible(self):
|
||
return self.has_protocol('ssh') and self.platform_base not in ("Other",)
|
||
|
||
def get_auth_info(self, with_become=False):
|
||
if not self.admin_user:
|
||
return {}
|
||
|
||
if self.is_unixlike() and self.admin_user.su_enabled and self.admin_user.su_from:
|
||
auth_user = self.admin_user.su_from
|
||
become_user = self.admin_user
|
||
else:
|
||
auth_user = self.admin_user
|
||
become_user = None
|
||
|
||
auth_user.load_asset_special_auth(self)
|
||
info = {
|
||
'username': auth_user.username,
|
||
'password': auth_user.password,
|
||
'private_key': auth_user.private_key_file
|
||
}
|
||
|
||
if not with_become:
|
||
return info
|
||
|
||
if become_user:
|
||
become_user.load_asset_special_auth(self)
|
||
become_method = 'su'
|
||
become_username = become_user.username
|
||
become_pass = become_user.password
|
||
else:
|
||
become_method = 'sudo'
|
||
become_username = 'root'
|
||
become_pass = auth_user.password
|
||
become_info = {
|
||
'become': {
|
||
'method': become_method,
|
||
'username': become_username,
|
||
'pass': become_pass
|
||
}
|
||
}
|
||
info.update(become_info)
|
||
return info
|
||
|
||
def nodes_display(self):
|
||
names = []
|
||
for n in self.nodes.all():
|
||
names.append(n.full_value)
|
||
return names
|
||
|
||
def labels_display(self):
|
||
names = []
|
||
for n in self.labels.all():
|
||
names.append(n.name + ':' + n.value)
|
||
return names
|
||
|
||
def as_node(self):
|
||
from assets.models import Node
|
||
fake_node = Node()
|
||
fake_node.id = self.id
|
||
fake_node.key = self.id
|
||
fake_node.value = self.hostname
|
||
fake_node.asset = self
|
||
fake_node.is_node = False
|
||
return fake_node
|
||
|
||
def as_tree_node(self, parent_node):
|
||
from common.tree import TreeNode
|
||
icon_skin = 'file'
|
||
if self.platform_base.lower() == 'windows':
|
||
icon_skin = 'windows'
|
||
elif self.platform_base.lower() == 'linux':
|
||
icon_skin = 'linux'
|
||
data = {
|
||
'id': str(self.id),
|
||
'name': self.hostname,
|
||
'title': self.ip,
|
||
'pId': parent_node.key,
|
||
'isParent': False,
|
||
'open': False,
|
||
'iconSkin': icon_skin,
|
||
'meta': {
|
||
'type': 'asset',
|
||
'data': {
|
||
'id': self.id,
|
||
'hostname': self.hostname,
|
||
'ip': self.ip,
|
||
'protocols': self.protocols_as_list,
|
||
'platform': self.platform_base,
|
||
}
|
||
}
|
||
}
|
||
tree_node = TreeNode(**data)
|
||
return tree_node
|
||
|
||
def get_all_system_users(self):
|
||
from assets.models import SystemUser
|
||
system_user_ids = SystemUser.assets.through.objects.filter(asset=self)\
|
||
.values_list('systemuser_id', flat=True)
|
||
system_users = SystemUser.objects.filter(id__in=system_user_ids)
|
||
return system_users
|
||
|
||
class Meta:
|
||
unique_together = [('org_id', 'hostname')]
|
||
verbose_name = _("Asset")
|
||
ordering = ["hostname", ]
|
||
permissions = [
|
||
('refresh_assethardwareinfo', _('Can refresh asset hardware info')),
|
||
('test_assetconnectivity', _('Can test asset connectivity')),
|
||
('push_assetsystemuser', _('Can push system user to asset')),
|
||
('match_asset', _('Can match asset')),
|
||
('add_assettonode', _('Add asset to node')),
|
||
('move_assettonode', _('Move asset to node')),
|
||
]
|