|
#!/usr/bin/ruby -Ku
|
|
|
|
#--
|
|
# CyborgHood, a distributed system management software.
|
|
# Copyright (c) 2009 Marc Dequènes (Duck) <Duck@DuckCorp.org>
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#++
|
|
|
|
# to allow in-place run for test
|
|
$: << File.join(File.dirname(__FILE__), "..", "lib")
|
|
|
|
#require 'socket'
|
|
require 'tempfile'
|
|
require 'shellwords'
|
|
require 'cyborghood'
|
|
require 'cyborghood/imap'
|
|
require 'cyborghood/mail'
|
|
require 'cyborghood/mail_order'
|
|
require 'cyborghood/objects'
|
|
require 'cyborghood/services/dns'
|
|
|
|
#Socket.gethostname
|
|
|
|
|
|
module CyborgHood
|
|
module PostmanHome
|
|
include I18nTranslation
|
|
bindtextdomain("cyborghood_postman", {:path => Config::L10N_DIR, :charset => "UTF-8"})
|
|
|
|
# not yet ready to be a real Cyborg
|
|
class Postman #< Cyborg
|
|
include I18nTranslation
|
|
|
|
def initialize
|
|
# load config
|
|
Config.load(self.human_name.downcase)
|
|
@config = Config.instance
|
|
|
|
ldap_config = @config.ldap
|
|
ldap_config.logger = logger
|
|
ActiveLdap::Base.setup_connection(ldap_config.marshal_dump)
|
|
|
|
# setup logs
|
|
unless @config.log.nil?
|
|
logger.output_level(@config.log.console_level) unless @config.log.console_level.nil?
|
|
logger.log_to_file(@config.log.file) unless @config.log.file.nil?
|
|
end
|
|
|
|
@current_thread = Thread.current
|
|
@stop_asap = false
|
|
@waiting = false
|
|
|
|
logger.info "Bot '#{self.human_name}' loaded"
|
|
end
|
|
|
|
def run
|
|
imap = IMAP.new(@config.imap)
|
|
until @stop_asap
|
|
t = Time.now.to_i
|
|
logger.debug "Starting mail check"
|
|
check_mails(imap)
|
|
logger.debug "Mail check finished"
|
|
t2 = Time.now.to_i
|
|
sleep_time = @config.imap.min_check_interval - (t2 - t)
|
|
if sleep_time > 0
|
|
logger.debug "Having a break before new check..."
|
|
@waiting = true
|
|
begin
|
|
sleep(sleep_time)
|
|
rescue
|
|
end
|
|
@waiting = false
|
|
end
|
|
end
|
|
logger.info "Bot was asked to stop..." if @stop_asap
|
|
logger.info "Bot terminating"
|
|
end
|
|
|
|
def ask_to_stop
|
|
@stop_asap = true
|
|
Thread.critical = true
|
|
@current_thread.raise if @waiting
|
|
Thread.critical = false
|
|
end
|
|
|
|
private
|
|
|
|
def check_mails(imap)
|
|
imap.check_mail do |msg|
|
|
if @stop_asap
|
|
logger.info "Bot was asked to stop..."
|
|
break
|
|
end
|
|
|
|
mail = Mail.new(msg.content)
|
|
logger.info "Received mail with ID '#{mail.message_id}': #{mail.from_addrs} -> #{mail.to_addrs} (#{mail.subject})"
|
|
|
|
# ignore mails not signed or encrypted
|
|
unless mail.is_pgp_signed? or mail.is_pgp_encrypted?
|
|
logger.info "Mail not signed/encrypted or not RFC3156 compliant, ignoring..."
|
|
msg.delete
|
|
next
|
|
end
|
|
|
|
logger.debug "RFC3156 content detected"
|
|
begin
|
|
report = mail.process
|
|
rescue CyberError => e
|
|
case e.severity
|
|
when :grave
|
|
logger.fatal "Fatal processing error, exiting (#{e.message})"
|
|
exit 2
|
|
when :unrecoverable
|
|
logger.error "Internal processing error, skipping mail (#{e.message})"
|
|
next
|
|
when :processable
|
|
logger.error "Untreated processing problem, skipping mail (#{e.message})"
|
|
next
|
|
when :ignorable
|
|
logger.warn "Internal processing warning, continuing (#{e.message})"
|
|
end
|
|
end
|
|
result_tag = report.ok? ? "SUCCESS" : "FAILURE"
|
|
result_msg = "Processing result: #{result_tag}"
|
|
result_msg += " (#{report.error.untranslated})" unless report.ok?
|
|
logger.info result_msg
|
|
|
|
i18n = I18nController.instance
|
|
i18n.set_language_for_user(report.user)
|
|
|
|
unless report.ok?
|
|
if report.warn_sender
|
|
logger.info "Sending reply for rejected message"
|
|
reply_intro = report.user ? _("Hello %{cn},", :cn =>report.user.cn) : _("Hello,")
|
|
mail_reply = mail.create_simple_reject_reply(reply_intro.to_s + "\n\n" +
|
|
_("A message (ID: %{id}), apparently from you, was rejected for the following reason:",
|
|
:id => mail.message_id).to_s + "\n " + report.error.to_s + "\n" + mail_signature())
|
|
mail_reply.deliver
|
|
end
|
|
msg.delete
|
|
next
|
|
end
|
|
|
|
order = MailOrder.parse(report.user, report.message)
|
|
result_tag = order.valid? ? "SUCCESS" : "FAILURE"
|
|
result_msg = "Processing result: #{result_tag}"
|
|
result_msg += " (#{order.error.untranslated})" unless order.valid?
|
|
logger.info result_msg
|
|
|
|
reply_intro = _("Hello %{cn},", :cn => order.user.cn)
|
|
|
|
unless order.valid?
|
|
logger.info "Sending reply for rejected order"
|
|
mail_reply = mail.create_simple_reject_reply(reply_intro.to_s + "\n\n" +
|
|
_("An order, in a message (ID: %{id}) from you, was rejected for the following reason:",
|
|
:id => mail.message_id).to_s + "\n " + order.error.to_s + "\n" + mail_signature())
|
|
mail_reply.sign_and_crypt(order.user.keyFingerPrint)
|
|
mail_reply.deliver
|
|
msg.delete
|
|
next
|
|
end
|
|
|
|
logger.debug "Message accepted, processing orders..."
|
|
result_list = CommandRunner.run(order)
|
|
|
|
# create transcript
|
|
logger.debug "Preparing reply"
|
|
reply_txt = reply_intro.to_s + "\n\n"
|
|
reply_txt += _("Follows the transcript of your commands:").to_s + "\n"
|
|
reply_attachments = []
|
|
result_list.each do |result|
|
|
reply_txt += "> #{result.cmd}\n"
|
|
reply_txt += "#{result.message}\n"
|
|
reply_attachments += result.refs unless result.refs.nil?
|
|
end
|
|
reply_txt += "\n" + mail_signature()
|
|
|
|
# create mail
|
|
logger.debug "Preparing mail"
|
|
mail_reply = mail.create_reply
|
|
if reply_attachments.empty?
|
|
transcript_part = mail_reply
|
|
else
|
|
mail_reply.set_content_type("multipart", "mixed", {'boundary' => TMail.new_boundary})
|
|
parts = []
|
|
|
|
p = CyborgHood::Mail.new
|
|
transcript_part = p
|
|
mail_reply.parts << p
|
|
|
|
reply_attachments.each do |attachment|
|
|
p = CyborgHood::Mail.new
|
|
p.set_content_type("text", "plain", {'charset' => "utf-8"})
|
|
p.set_disposition("attachment", {'filename' => attachment.filename})
|
|
p.quoted_printable_body = attachment.content
|
|
mail_reply.parts << p
|
|
end
|
|
end
|
|
# insert transcript
|
|
transcript_part.set_content_type("text", "plain", {'charset' => 'utf-8', 'format' => 'flowed'})
|
|
transcript_part.set_disposition("inline")
|
|
transcript_part.quoted_printable_body = reply_txt
|
|
|
|
# send reply
|
|
logger.debug "Sending mail"
|
|
mail_reply.sign_and_crypt(order.user.keyFingerPrint)
|
|
mail_reply.deliver
|
|
|
|
logger.info "Message processed completely, deleting"
|
|
msg.delete
|
|
end
|
|
end
|
|
|
|
def mail_signature
|
|
s = "\n" +
|
|
"-- \n" +
|
|
"#{CyborgHood::PRODUCT} v#{CyborgHood::VERSION}\n"
|
|
s += _("Contact eMail:").to_s + " \"#{@config.contact.name}\" <#{@config.contact.email}>\n" if @config.contact.email
|
|
s += _("Contact URL:").to_s + " #{@config.contact.url}\n" if @config.contact.url
|
|
s
|
|
end
|
|
end
|
|
|
|
class CommandRunner
|
|
include I18nTranslation
|
|
|
|
def self.run(order)
|
|
result_list = []
|
|
order.commands.each do |cmd|
|
|
result = OpenStruct.new
|
|
result.cmd = cmd.cmdline
|
|
result.ok = false
|
|
|
|
if cmd.valid?
|
|
logger.info "Executing command: #{cmd.cmdline}"
|
|
begin
|
|
execute_cmd(order.user, cmd.cmdsplit, order.shared_parameters, result)
|
|
rescue CyberError => e
|
|
result.message = e.message.capitalize + "."
|
|
rescue
|
|
logger.error "Command crashed: " + $!
|
|
logger.error "Crash trace: " + $!.backtrace.join("\n")
|
|
result.message = _("Internal error. Administrator is warned.")
|
|
end
|
|
|
|
tag = result.ok ? "SUCCESS" : "FAILURE"
|
|
logger.debug "Command result: [#{tag}] #{result.message.untranslated}"
|
|
else
|
|
logger.info "Invalid command detected: #{cmd.cmdline}"
|
|
cmd.parsing_errors.collect{|err| logger.debug "Invalid command detected - reason: " + err.untranslated }
|
|
result.message = cmd.parsing_errors.collect{|err| err.to_s }.join("\n")
|
|
end
|
|
result_list << result
|
|
end
|
|
result_list
|
|
end
|
|
|
|
private
|
|
|
|
def self.execute_cmd(user, cmdline, shared_parameters, result)
|
|
subsys = cmdline.shift
|
|
case subsys.upcase
|
|
when "DNS"
|
|
return if cmdline.empty?
|
|
case cmdline.shift.upcase
|
|
when "INFO"
|
|
return unless cmdline.empty?
|
|
list = CyborgHood::DnsDomain.find_by_manager(user)
|
|
txt_list = list.collect{|z| z.cn }.sort.join(", ")
|
|
result.ok = true
|
|
result.message = _("You are manager of the following zones: %{zone_list}.", :zone_list => txt_list)
|
|
when "GET"
|
|
return if cmdline.empty?
|
|
case cmdline.shift.upcase
|
|
when "ZONE"
|
|
return if cmdline.empty?
|
|
zone = cmdline.shift.downcase
|
|
|
|
dom = CyborgHood::DnsDomain.new(zone)
|
|
unless dom.hosted?
|
|
result.message = _("This zone is not hosted here.")
|
|
return result
|
|
end
|
|
unless dom.managed_by? user
|
|
result.message = _("You are not allowed to manage this zone.")
|
|
return result
|
|
end
|
|
|
|
srv_dns = CyborgHood::Services::DNS.new(zone)
|
|
result.ok = true
|
|
result.message = _("Requested zone content attached.")
|
|
zone_ref = {:content => srv_dns.read_zone, :filename => "dnszone_#{zone}.txt"}.to_ostruct
|
|
result.refs = [zone_ref]
|
|
end
|
|
when "SET"
|
|
return if cmdline.empty?
|
|
case cmdline.shift.upcase
|
|
when "ZONE"
|
|
return if cmdline.empty?
|
|
zone = cmdline.shift.downcase
|
|
dom = CyborgHood::DnsDomain.new(zone)
|
|
unless dom.hosted?
|
|
result.message = _("This zone is not hosted here.")
|
|
return result
|
|
end
|
|
unless dom.managed_by? user
|
|
result.message = _("You are not allowed to manage this zone.")
|
|
return result
|
|
end
|
|
srv_dns = CyborgHood::Services::DNS.new(zone)
|
|
|
|
return if cmdline.empty?
|
|
content_ref = cmdline.shift
|
|
part = shared_parameters[content_ref]
|
|
unless part.type == "text/plain"
|
|
result.message = _("Attachment has wrong content-type.")
|
|
return result
|
|
end
|
|
|
|
f = Tempfile.new(zone)
|
|
f.write(part.content)
|
|
f.close
|
|
logger.debug "Created temporary zone file '#{f.path}'"
|
|
|
|
srv_dns = CyborgHood::Services::DNS.new(zone)
|
|
current_serial = srv_dns.serial
|
|
logger.debug "Current serial: #{current_serial}"
|
|
|
|
dns_result = srv_dns.check_zone_file(f.path)
|
|
unless dns_result.ok
|
|
result.message = _("Invalid zone data.")
|
|
f.close!
|
|
return result
|
|
end
|
|
logger.debug "New serial: #{dns_result.serial}"
|
|
# allow new serial or missing serial (to allow creating a new zone or replacing a broken zone)
|
|
unless current_serial.nil? or dns_result.serial > current_serial
|
|
result.message = _("Zone serial is not superior to current serial.")
|
|
f.close!
|
|
return result
|
|
end
|
|
|
|
begin
|
|
srv_dns.write_zone_from_file(f.path)
|
|
logger.debug "zone changed"
|
|
if srv_dns.reload_zone
|
|
logger.debug "zone reloaded"
|
|
result.ok = true
|
|
result.message = _("Zone updated.")
|
|
else
|
|
logger.warn "zone reload failed, replacing old content"
|
|
srv_dns.replace_zone_with_backup
|
|
result.message = _("Internal error. Administrator is warned.")
|
|
end
|
|
rescue
|
|
logger.warn "Writing zone file failed"
|
|
raise
|
|
ensure
|
|
f.close!
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
if result.message.nil?
|
|
# here fall lost souls
|
|
result.message = _("Command not recognized.")
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
bot = CyborgHood::PostmanHome::Postman.new
|
|
|
|
trap('INT') do
|
|
bot.ask_to_stop
|
|
end
|
|
trap('TERM') do
|
|
bot.ask_to_stop
|
|
end
|
|
|
|
bot.run
|