관리-도구
편집 파일: auth.cpython-39.pyc
a d4hz/ � @ s> d dl Z d dlZd dlZddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z dd lm Z dd l m Z m Z mZmZ d Zd Zd Zdd� Zdd� Zdd� Ze jdd� �Zdd� Zdd� Zd5dd �Zd d � Zd d � Z d6d!d"�Z e jd#d$� �Z d%d&� Z d'd(� Z d)d*� Z!d+d,� Z"d-d.� Z#d/d0� Z$d7d1d2�Z%d3d4� Z&dS )8� N� )�errors)�config)� constants)� http_utils)� log_utils)�platform_utils)�utils)� urlencode�json_loads_nstr�URLError� HTTPErrorz /etc/sysconfig/kcare/systemidz&/etc/sysconfig/kcare/systemid.almacarez /var/imunify360/license.jsonc C s� t j�t�sd S ttd��`} | D ]J}|�d�\}}}|�� dkrZ|�� W d � S t�d� t���q W d � n1 s�0 Y d S )N�r�=� server_idzUnable to parse {0}.) �os�path�exists�SYSTEMID�open� partition�stripr � KcareError�format)�fd�line�param�_�value� r �*/usr/libexec/kcare/python/kcarectl/auth.py� _systemid s r! c C sJ t j�t�sd S ttd�� } | �� �� W d � S 1 s<0 Y d S )Nr )r r r � ALMA_SYSTEMIDr �readliner )�fr r r �_alma_systemid$ s r% c C sr t j�t�sd S i } tt��<}|�� }|rJz t|�} W n tyH Y n0 W d � n1 s^0 Y | �d�S )N�id) r r r �IM360_LICENSE_FILEr �readr � Exception�get)�datar$ �contentr r r �_im360_systemid+ s $r- c C s t � pt� pt� S )zqGet server_id or None if not present. Lookup order: SYSTEMID then IM360_LICENSE_FILE then ALMA_SYSTEMID )r! r- r% r r r r � get_serverid: s r. c C s t �t� d S �N)r �unlinkr r r r r � _rm_serveridC s r1 c C s t �td�| �� d S )Nzserver_id={0} )r � atomic_writer r �r r r r �_set_server_idG s r4 Fc C s� d }z�t � }|d u r(| s"t�d� W d S tjd�|� }t�|�}t� |� � �}t� |�}|d dkr|t � | s�t� d� n | s�t�|� t�d|d � W n4 ty� } z | s�t�||� W Y d }~n d }~0 0 d S )Nz1Error unregistering server: cannot find server idz&/unregister_server.plain?server_id={0}�success�truezServer was unregisteredz Error unregistering server: �message)r. r �logerrorr �REGISTRATION_URLr r �urlopenr �nstrr( � data_as_dictr1 �loginfor �print_cln_http_error)Zsilent�urlr �responser, �res�er r r � unregisterK s* rC c C s� t d� t�� }|dkr d S t�� t�� }dd l}|dkrF|�d� |j�� tdd�}tdd�}t� |� � |j � � � t� |� � |j� � � t� |� � |j � � � t �d� t| �\}}}|dkr�|r�t|� t|� |�d� q�d S )NzHRegister auto-retry has been enabled, the system can be registered laterr z /dev/nullr za+i )�printr �fork�setsid�sys�exit�stdout�flushr �dup2�fileno�stdin�stderr�time�sleep� _try_registerr4 �_set_auth_token)r? �pidrG �si�so�coder � auth_tokenr r r �_register_retryc s* rX c C s� zHt �| �}|j�tjd �}t�t�|� � ��}t |d �|�d�|fW S t t fy~ } zt �|| � W Y d }~dS d }~0 ty� t j�d| � Y dS 0 d S )NrV r )NNNz)Exception while trying to register URL %s)r r: �headersr* r �AUTH_TOKEN_HEADERr r< r; r( �intr r r r> r) �kcarelog� exception)r? r@ rW rA rB r r r rQ } s rQ c C s0 z t d� W n ty* tj�d� Y n0 t�� }td|fd| fg�}d�t j |�}t |�\}}}|dkr�t |� t |� t�d� dS |dkr�t�d � nv|d kr�t�d � nb|d kr�t�d � nN|dkr�t�d� n:|dkr�t�d� n&|dk�rt�d� nt�d�|�� |�r&t|� dS |�p.dS )NTz9Exception while trying to unregister URL before register.�hostname�keyz {0}/register_server.plain?{1}r zServer Registeredr zAccount Locked� z Invalid Key� z}You have reached maximum registered servers for this key. Please go to your CLN account, remove unused servers and try again.� z[IP is not allowed. Please change allowed IP ranges for the key in KernelCare Key tab in CLN� zEThis IP was already used for trial, you cannot use it for trial again� zfThis IP was banned. Please contact support for more information at https://www.kernelcare.com/support/zUnknown Error {0}���)rC r) r r\ r] r � get_hostnamer r r r9 rQ r4 rR r= r8 rX )r_ �retryr^ �queryr? rV r rW r r r �register� s@ � ri c C s t �tj�S r/ )r � try_to_readr �AUTH_TOKEN_DUMP_PATHr r r r �_get_auth_token� s rl c C s | sd S t �tj| � d S r/ )r r2 r rk )rW r r r rR � s rR c O s� |� dd �}|� dd�r t}ntj}t�| �rFtj| g|�R i |��S tj| t� t� |d�}t j |dd�tj�|g|�R i |��S )N�method� check_licenseT)rm � )�count) �pop�_check_auth_retryr �check_urlopen_retry� is_local_url� urlopen_base� http_request�get_http_auth_stringrl r rg )r? �args�kwargsrm �check�requestr r r � urlopen_auth� s r| c C s, t � } | r(t�t�t�d�| d����S d S )Nz{0}:{1}Z kernelcare)r. r r; �base64� b64encode�bstrr r3 r r r rw � s rw c C s8 t | t�r&| jdv r t|�S | jdkS t | t�r4dS d S )N)i� i� i� T)� isinstancer rV �_handle_forbiddenr )rB �stater r r rr � s rr c C s� d| v r dS t jr�t� }|r2t jd d�|� }n t jd }z&t�tj|dd�� � �}t� |�}W n6 t y� } z t j ||dd� W Y d}~dS d}~0 0 |r�|�d �s�t j�d �|�� dS |d d v r�d| d< t �d � dS t� dS ) a In case of 403 error we should check what's happen. Case #1. We are trying to register unlicensed machine and should try to register trial. Case #2. We have a valid license but access restrictions on server are not consistent yet and we had to try later. �licenseT� /check.plainz?server_id={0}F)� retry_on_500)rI NrV � Unexpected CLN response: {0})�0�1z$Unable to access server. Retrying...)r �CHECK_CLN_LICENSE_STATUSr. r9 r r r; r r: r( r< r r r> r* r\ �errorr8 �_register_trial)r� r r? r, �info�exr r r r� � s* r� c C s� t � } | r�tjd�| � }z�t�|�}t�|�� �}t� |�}|rL|� d�s`t d�|�� W dS t |d �}|dkr�t d� W dS t dd�}|dkr�t d� |W S W q� ty� } zt�||� W Y d }~dS d }~0 0 nt � S d S ) Nz/check.plain?server_id={0}rV r� r r z Key-based valid license found)� key_checkedz No valid key-based license found)r. r r9 r r r: r r; r( r< r* rD r[ �_get_license_info_by_ipr r r> )r r? r@ r, rA rV Z license_typerB r r r � license_info s, r� c C s� t jd }�z0t�|�}t�|�� �}t�|�}|d �� dk�r t |d �}|dkrnt d� |d �� W dS |dkr�|d }t� |d �� d �}t d � ||�� W d S |d kr�| dkr�|d }t� |d �� d �}t d � ||�� |dk�r:| dk�r:d|v �rt d� |d �� nt d� n|�dd�}t d� |�� W nj t�yn } zt�| |� W Y d } ~ nBd } ~ 0 t�y� } z t d� | |�� �� W Y d } ~ n d } ~ 0 0 dS )Nr� r5 r6 rV r z Valid license found for IP {0}�ipr Z expire_datez%Y-%m-%dz?You have a trial license for the IP {0} that will expire on {1}r` z0Your trial license for the IP {0} expired on {1}ra z The IP {0} hasn't been licensedz This server hasn't been licensedr7 � z"Error retrieving license info: {0}z1Unexpected CLN response, cannot find {0} key: {1})r r9 r r: r r; r( r< �lowerr[ rD r �parse_response_date�strftimer* r r r> �KeyErrorr ) r� r? r@ r, rA rV r� Z expires_strr7 rB r_ r r r r� s< *r� c C sD t j�tjd�} t j�| �r d S z�t�tj d �}t � t � |� � ��}z�|d �� dkr�t j| ddd� |d dkr�t�|d |d ��t�d �|d �� W W d S |d d kr�t j| ddd� t�d ��n t�d��W n0 t�y } zt�|��W Y d }~n d }~0 0 W n2 t�y> } zt�|j��W Y d }~n d }~0 0 d S )Nztrial-requestedz /trial.plainr5 r6 r� T)� ensure_dirZexpiredr� �createdz3Requesting trial license for IP {0}. Please wait...ZnazInvalid Licensere )r r �joinr � PATCH_CACHEr r r: r r9 r r< r; r( r� r2 r �AlreadyTrialedExceptionr r= r r �UnableToGetLicenseExceptionr� r rV )Z trial_markr@ rA ZkerB r r r r� C s* $r� )F)F)r )'r} r rO r� r r r r r r r �py23r r r r r r" r' r! r% r- �cachedr. r1 r4 rC rX rQ ri rl rR r| rw rr r� r� r� r� r r r r �<module> sD ( ) #