~azzar1/unity/add-show-desktop-key

#!/usr/bin/python

import os

import pysvn

import subprocess

import sys

import urllib

from functools import partial

import traceback

import logging

import errno

import conf

import common.db

import common.chat

import common.makeuser

import common.studpath

# usage:

#   usrmgt-server <port> <magic>

# User management operations:

#   - Create local user

#   - [Re]Create jail for a user

#       - Create a svn repository for a user

#           - create repository

#           - svn config

#           - svn auth

#       - Checkout repository as home directory

#       - /etc/passwd entry

#   - Disable a user's account

#   - Enable a user's account

#   - Remove a user

#   - Rebuild svn config

#   - Rebuild svn auth file

#   - Rebuild passwd + push to nodes.

def create_user(props):

    """Create the database record for the given user.

       Expected properties:

        login       - used as a unix login name and svn repository name.

                      STRING REQUIRED 

        unixid      - the unix uid under which execution will take place

                      on the behalf of the user. Don't use 0! If not specified

                      or None, one will be allocated from the configured

                      numeric range.

                      INT OPTIONAL

        password    - the clear-text password for the user. If this property is

                      absent or None, this is an indication that external

                      authentication should be used (i.e. LDAP).

                      STRING OPTIONAL

        email       - the user's email address.

                      STRING OPTIONAL

        nick        - the display name to use.

                      STRING REQUIRED

        fullname    - The name of the user for results and/or other official

                      purposes.

                      STRING REQUIRED

        rolenm      - The user's role. Must be one of "anyone", "student",

                      "tutor", "lecturer", "admin".

                      STRING/ENUM REQUIRED

        studentid   - If supplied and not None, the student id of the user for

                      results and/or other official purposes.

                      STRING OPTIONAL

       Return Value: the uid associated with the user. INT

    """

    if 'unixid' not in props or props['unixid'] is None:

        # For the time being, just choose a random unixid.

        # This may result in duplicates, but the unixid is essentially

        # a monitoring/logging convenience only. Oh, and dups could kill

        # each other. <sigh>

        props['unixid'] = random.randrange(5000,10000)

        # raise NotImplementedError, "No algorithm for creating uids yet!"

        # unixid = invent-uid

        # props['unixid'] = unixid

    common.makeuser.make_user_db(**props)

    return int(props['unixid'])

def update_user(props):

    """Create the database record for the given user.

       Expected properties:

        login       - user who is making the change (not necessarily the one

                      being updated).

        update      - dict of fields to be updated. The fields are all those

                      in the login table of the db.

                      'login' required.

                      Omitted fields will not be set.

    """

    update = props['update']

    # Note: "login" is special - it is not part of the kwargs to

    # db.update_user, but the first arg - used to find the user to update.

    # However it doesn't need any special treatment here.

    db = common.db.DB()

    db.update_user(**update)

    db.close()

def get_login(login, passwd, _realm, _login, _may_save):

    """Callback function used by pysvn for authentication.

    """

    logging.debug("Getting password for %s (realm %s)" % (login, _realm))

    return (True, login, passwd, False)

def activate_user(props):

    """Create the on-disk stuff for the given user.

       Sets the state of the user in the db from pending to enabled.

       Expected properties:

        login       - the user name for the jail

                      STRING REQUIRED

       Return Value: None

    """

    login = props['login']

    db = common.db.DB()

    try:

        # FIXME: check we're pending

        details = db.get_user(login)

        # make svn config/auth

        logging.debug("Creating repo")

        common.makeuser.make_svn_repo(login, throw_on_error=False)

        logging.debug("Creating svn config")

        common.makeuser.make_svn_config(login, throw_on_error=False)

        logging.debug("Creating svn auth")

        passwd = common.makeuser.make_svn_auth(login, throw_on_error=False)

        logging.debug("passwd: %s" % passwd)

        svn = pysvn.Client()

        svn.callback_get_login = partial(get_login, login, passwd)

        if conf.svn_addr[-1] != '/':

            conf.svn_addr = conf.svn_addr + "/"

        # FIXME: This should be a loop over enrolements.

        #        We're not going to fix this now because it requires

        #        a large amount of admin console work to manage subject

        #        offerings.

        #        Instead, we're just going to use a single offering with

        #        a "short" name of "info1".

        logging.debug("Creating /info1")

        try:

            svn.mkdir(conf.svn_addr + login + "/info1",

                      "Initial creation of work directory for Informatics 1")

        except Exception, exc:

            logging.warning("While mkdiring info1: %s" % str(exc))

            pass

        logging.debug("Creating /stuff")

        try:

            svn.mkdir(conf.svn_addr + login + "/stuff",

                      "Initial creation of directory for miscellania")

        except Exception, exc:

            logging.warning("While mkdiring stuff: %s" % str(exc))

            pass

        logging.debug("Creating jail")

        common.makeuser.make_jail(login, details.unixid)

        # FIXME: <hack>

        tcf_path = os.path.join(conf.jail_base, 'template/opt/ivle/lib/conf/conf.py')

        cf_path = os.path.join(conf.jail_base, login, 'opt/ivle/lib/conf/conf.py')

        os.remove(cf_path)

        cf = open(cf_path, "w")

        cf.write(open(tcf_path, "r").read())

        cf.write("# The login name for the owner of the jail\n")

        cf.write("login = %s\n" % repr(login))

        cf.write("\n")

        cf.write("# The subversion-only password for the owner of the jail\n")

        cf.write("svn_pass = %s\n" % repr(passwd))

        cf.close()

        # Check out the repositories into the student's home dir

        # FIXME: Call do_checkout instead of replicating this code.

        # (do_checkout currently doesn't work)

        #do_checkout(props)

        # FIXME: </hack>

        logging.debug("Checking out directories in the jail")

        try:

            svn.checkout(conf.svn_addr + login + "/stuff",

                         common.studpath.url_to_local(login + "/stuff")[1])

            os.system("chown -R %d:%d %s" \

                    % (details.unixid, details.unixid,

                       common.studpath.url_to_local(login + "/stuff")[1]))

        except Exception, exc:

            logging.warning("While mkdiring stuff: %s" % str(exc))

            pass

        try:

            svn.checkout(conf.svn_addr + login + "/info1",

                         common.studpath.url_to_local(login + "/info1")[1])

            os.system("chown -R %d:%d %s" \

                    % (details.unixid, details.unixid,

                       common.studpath.url_to_local(login + "/info1")[1]))

        except Exception, exc:

            logging.warning("While mkdiring info1: %s" % str(exc))

            pass

        # FIXME: should this be nicer?

        os.system("chown -R %d:%d %s" \

                % (details.unixid, details.unixid,

                   common.studpath.url_to_local(login)[1]))

        logging.info("Enabling user")

        db.update_user(login, state='enabled')

        return {"response": "okay"}

    finally:

        db.close()

def do_checkout(props):

    """Create the default contents of a user's jail by checking out from the

    repositories.

    If any directory already exists, just fail silently (so this is not a

    "wipe-and-checkout", merely a checkout if it failed or something).

       Expected properties:

        login       - the user name for the jail

                      STRING REQUIRED

       Return Value: None

    """

    # XXX / FIXME: This doesn't work - cannot get passwd

    # (activate_me creates passwd, other svn stuff gets it from jailconf - we

    # can't access either at this point).

    login = props['login']

    svn = pysvn.Client()

    svn.callback_get_login = partial(get_login, login, passwd)

    if conf.svn_addr[-1] != '/':

        conf.svn_addr = conf.svn_addr + "/"

    # FIXME: </hack>

    logging.debug("Checking out directories in the jail")

    try:

        svn.checkout(conf.svn_addr + login + "/stuff",

                     common.studpath.url_to_local(login + "/stuff")[1])

        os.system("chown -R %d:%d %s" \

                % (details.unixid, details.unixid,

                   common.studpath.url_to_local(login + "/stuff")[1]))

    except Exception, exc:

        logging.warning("While mkdiring stuff: %s" % str(exc))

        pass

    try:

        svn.checkout(conf.svn_addr + login + "/info1",

                     common.studpath.url_to_local(login + "/info1")[1])

        os.system("chown -R %d:%d %s" \

                % (details.unixid, details.unixid,

                   common.studpath.url_to_local(login + "/info1")[1]))

    except Exception, exc:

        logging.warning("While mkdiring info1: %s" % str(exc))

        pass

    return {"response": "okay"}

actions = {

        'create_user':create_user,

        'update_user':update_user,

        'activate_user':activate_user,

        'do_checkout':do_checkout,

    }

def initializer():

    try:

        pidfile = open('/var/run/usrmgt-server.pid', 'w')

        pidfile.write('%d\n' % os.getpid())

        pidfile.close()

    except IOError, (errno, strerror):

        print "Couldn't write PID file. IO error(%s): %s" % (errno, strerror)

        sys.exit(1)

def dispatch(props):

    logging.debug(repr(props))

    action = props.keys()[0]

    return actions[action](props[action])

if __name__ == "__main__":

    if len(sys.argv) <3:

        print >>sys.stderr, "Usage: usrmgt-server <port> <magic>"

        sys.exit(1)

    port = int(sys.argv[1])

    magic = sys.argv[2]

    pid = os.getpid()

    logging.basicConfig(filename="/var/log/usrmgt.log", level=logging.INFO)

    logging.info("Starting usrmgt server on port %d (pid = %d)" % (port, pid))

    common.chat.start_server(port, magic, True, dispatch, initializer)