317 lines
8.5 KiB
PHP
317 lines
8.5 KiB
PHP
|
<?php
|
||
|
|
# cat client-key.pem client-cert.pem ca.pem >>certchain.pem
|
||
|
|
$version = "0.1";
|
||
|
|
#$cert = ".xcat/client-cred.pem";
|
||
|
|
$msg;
|
||
|
|
$xcathost = "localhost";
|
||
|
|
$port = "3001";
|
||
|
|
|
||
|
|
#if(! file_exists($cert)){
|
||
|
|
# echo "$cert does not exist. Please run xcatwebsetup first";
|
||
|
|
#}
|
||
|
|
|
||
|
|
|
||
|
|
$xcatcmds = array(
|
||
|
|
"rpower" => array("on","off","reset","stat","state","boot","off","cycle"),
|
||
|
|
"rvitals" => array("all","temp","wattage","voltage","fanspeed","power","leds","state"),
|
||
|
|
"reventlog" => array("all", "clear"),
|
||
|
|
"rinv" => array("all", "model", "serial", "vpd", "mprom", "deviceid", "uuid", "guid", "firm", "bios", "diag", "mprom", "sprom", "mparom", "mac", "mtm"),
|
||
|
|
"resetboot" => array("net", "hd", "cd", "def", "stat")
|
||
|
|
);
|
||
|
|
|
||
|
|
#function to enable password storage to split between cookie and session variable
|
||
|
|
function xorcrypt($data,$key) {
|
||
|
|
$datalen=strlen($data);
|
||
|
|
$keylen=strlen($key);
|
||
|
|
for ($i=0;$i<$datalen;$i++) {
|
||
|
|
$data[$i]=chr(ord($data[$i])^ord($key[$i]));
|
||
|
|
}
|
||
|
|
return $data;
|
||
|
|
}
|
||
|
|
|
||
|
|
function getpassword() {
|
||
|
|
if (isset($GLOBALS['xcatauthsecret'])) {
|
||
|
|
$cryptext=$GLOBALS['xcatauthsecret'];
|
||
|
|
} else if (isset($_COOKIE["xcatauthsecret"])) {
|
||
|
|
$cryptext = $_COOKIE["xcatauthsecret"];
|
||
|
|
} else {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
return xorcrypt($_SESSION["secretkey"],base64_decode($cryptext));
|
||
|
|
}
|
||
|
|
|
||
|
|
#remembers the password, splitting knowledge between server and client side
|
||
|
|
#persistant storage
|
||
|
|
#Caller should regenerate session id when contemplating a new user/password,
|
||
|
|
#to preclude session fixation, though fixation is limited without the secret.
|
||
|
|
function setpassword($password) {
|
||
|
|
$randlen=strlen($password);
|
||
|
|
$key=getrandchars($randlen);
|
||
|
|
$cryptext=xorcrypt($password,$key);
|
||
|
|
$cryptext=base64_encode($cryptext); #non-ascii chars, base64 it
|
||
|
|
#Not bothering with explicit expiration, as time sync would be too hairy
|
||
|
|
#should go away when browser closes. Any timeout will be handled server
|
||
|
|
#side. If the session id invalidates and the one-time key discarded,
|
||
|
|
#the cookie contents are worthless anyway
|
||
|
|
#nevertheless, when logout happens, cookie should be reaped
|
||
|
|
setcookie("xcatauthsecret",$cryptext);
|
||
|
|
$GLOBALS["xcatauthsecret"]=$cryptext; #May need it sooner, prefer globals
|
||
|
|
$_SESSION["secretkey"]=$key;
|
||
|
|
}
|
||
|
|
|
||
|
|
function getrandchars($length) {
|
||
|
|
$charset='0123456789abcdefghijklmnopqrstuvwxyz!@#$%^&*';
|
||
|
|
$charsize=strlen($charset);
|
||
|
|
srand();
|
||
|
|
$chars='';
|
||
|
|
for ($i=0;$i<$length;$i++) {
|
||
|
|
$num=rand()%$charsize;
|
||
|
|
$chars=$chars.substr($charset,$num,1);
|
||
|
|
}
|
||
|
|
return $chars;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
#functions for editing tables
|
||
|
|
function savexCATchanges($file, $tab){
|
||
|
|
$request = simplexml_load_string('<xcatrequest></xcatrequest>');
|
||
|
|
$request->addChild('command','tabrestore');
|
||
|
|
$fh = fopen($file, 'r') or die("can't open $file");
|
||
|
|
while(!feof($fh)){
|
||
|
|
$line = fgets($fh,4096);
|
||
|
|
if(empty($line)){
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
$line = str_replace("\"\"", "",$line);
|
||
|
|
$line = str_replace("\"", """,$line);
|
||
|
|
$request->addChild('data', $line);
|
||
|
|
}
|
||
|
|
fclose($fh);
|
||
|
|
$request->addChild('table',$tab);
|
||
|
|
$resp = submit_request($request, 1);
|
||
|
|
# 0 means it didn't work
|
||
|
|
return($resp);
|
||
|
|
}
|
||
|
|
|
||
|
|
function splitTableFields($arr){
|
||
|
|
$fields = array();
|
||
|
|
$fields = explode(',', $arr);
|
||
|
|
$rf = array();
|
||
|
|
|
||
|
|
# now we have to do damage control for fields that look like this:
|
||
|
|
# "idplx15","idplx,ipmi,compute,all",,,
|
||
|
|
$inc = '';
|
||
|
|
foreach($fields as $f){
|
||
|
|
#if(ereg("\"[a-zA-Z0-9\-\.\:\!\| ]+\"", $f)){
|
||
|
|
if(ereg("\"[^\"]+\"", $f)){
|
||
|
|
$rf[] = $f;
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
#if(ereg("^[a-zA-Z0-9\-\. ]+\"", $f)){
|
||
|
|
if(ereg("[^\"]+\"", $f)){
|
||
|
|
$inc .= ",$f";
|
||
|
|
$rf[] = $inc;
|
||
|
|
$inc = '';
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
#if(ereg("\"[a-zA-Z0-9\-\. ]+", $f)){
|
||
|
|
if(ereg("\"[^\"]+", $f)){
|
||
|
|
$inc .= $f;
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
#if(ereg("[a-zA-Z0-9\-\. ]+", $f)){
|
||
|
|
if(ereg("[a-zA-Z0-9\-\. ]+", $f)){
|
||
|
|
$inc .= ",$f";
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
$rf[] = "";
|
||
|
|
}
|
||
|
|
return $rf;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
function getTabNames() {
|
||
|
|
$xml = docmd('tabdump','','');
|
||
|
|
$tabs = $xml->xcatresponse->children();
|
||
|
|
return $tabs;
|
||
|
|
}
|
||
|
|
|
||
|
|
function getTabHeaders($tab){
|
||
|
|
$arr = $tab->xcatresponse->children();
|
||
|
|
$line = $arr[0];
|
||
|
|
$headers = array();
|
||
|
|
$headers = explode(',', $line);
|
||
|
|
return $headers;
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
# get the keys of the hash table.
|
||
|
|
function keysByNodeName($ht) {
|
||
|
|
$nh = array();
|
||
|
|
foreach($ht->xcatresponse as $v){
|
||
|
|
$node = (string) $v->node->name;
|
||
|
|
if(!array_key_exists($node, $nh)){
|
||
|
|
$nh[$node] = array();
|
||
|
|
}
|
||
|
|
$desc = (string) $v->node->data->desc;
|
||
|
|
$cont = (string) $v->node->data->contents;
|
||
|
|
$nh[$node][$desc] = $cont;
|
||
|
|
}
|
||
|
|
return($nh);
|
||
|
|
}
|
||
|
|
|
||
|
|
function attributesOfNodes($ht) {
|
||
|
|
$arr = array();
|
||
|
|
foreach($ht->xcatresponse as $v){
|
||
|
|
foreach($v->node as $va){
|
||
|
|
$val = (string) $va->data->desc;
|
||
|
|
if($val == ""){
|
||
|
|
$val = (string) $va->data->contents;
|
||
|
|
}
|
||
|
|
$arr[] = $val;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
$arr = array_unique($arr);
|
||
|
|
return($arr);
|
||
|
|
}
|
||
|
|
|
||
|
|
function parseNodeGroups ($groups){
|
||
|
|
# groups is an array that may have duplicate commas in them.
|
||
|
|
$arr = array();
|
||
|
|
foreach($groups as $gline){
|
||
|
|
$newg = explode(',', $gline);
|
||
|
|
foreach($newg as $g){
|
||
|
|
if(empty($g)){ continue; }
|
||
|
|
if(!array_key_exists($g, $arr)){
|
||
|
|
$arr[] = $g;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return array_unique($arr);
|
||
|
|
}
|
||
|
|
|
||
|
|
# this is a kluge... should make better data structures.
|
||
|
|
# but too lazy right now...
|
||
|
|
function addNodesToGroups($groups, $node){
|
||
|
|
$arr = array();
|
||
|
|
foreach($groups as $g){
|
||
|
|
$arr[$g] = array();
|
||
|
|
foreach($node->xcatresponse as $v){
|
||
|
|
foreach($v->node as $n){
|
||
|
|
$na = (string) $n->data->contents;
|
||
|
|
$nag = explode(',', $na);
|
||
|
|
foreach($nag as $foo){
|
||
|
|
if(strcmp($foo,$g) == 0){
|
||
|
|
$name = (string) $n->name;
|
||
|
|
$arr[$g][] = $name;
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return $arr;
|
||
|
|
}
|
||
|
|
|
||
|
|
function is_logged() {
|
||
|
|
if (isset($_SESSION["username"]) and !is_bool(getpassword())) {
|
||
|
|
return true;
|
||
|
|
} else {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
function logout() {
|
||
|
|
#clear the secret cookie from browser.
|
||
|
|
#expire cookie a week ago, server time, may not work if client clock way off, but the value will be cleared at least.
|
||
|
|
if (isset($_COOKIE["xcatauthsecret"])) {
|
||
|
|
setcookie("xcatauthsecret",'',time()-86400*7); #NOTE: though firefox doesn't seem to zap it dynamically from cookie store in
|
||
|
|
#the client side dialog, firefox does stop submitting the value. The sensitivity of the 'stale' cookie even if compromised
|
||
|
|
#is negligible, as the session id will be invalidated and the one-time-key needed to decrypt the password is destroyed on the server
|
||
|
|
}
|
||
|
|
#expire the sesion cookie
|
||
|
|
if (isset($_COOKIE[session_name()])) {
|
||
|
|
setcookie(session_name(),"",time()-86400*7,"/");
|
||
|
|
}
|
||
|
|
#clear server store of data
|
||
|
|
$_SESSION=array();
|
||
|
|
session_destroy();
|
||
|
|
}
|
||
|
|
function docmd($cmd, $nr, $arg){
|
||
|
|
$request = simplexml_load_string('<xcatrequest></xcatrequest>');
|
||
|
|
$usernode=$request->addChild('becomeuser');
|
||
|
|
$usernode->addChild('username',$_SESSION["username"]);
|
||
|
|
$usernode->addChild('password',getpassword());
|
||
|
|
$request->addChild('command',$cmd);
|
||
|
|
if(!empty($arg)){
|
||
|
|
$request->addChild('arg',$arg);
|
||
|
|
}
|
||
|
|
#$request->addChild('noderange', 'all');
|
||
|
|
if(!empty($nr)){
|
||
|
|
$request->addChild('noderange',$nr);
|
||
|
|
}
|
||
|
|
#echo $request->asXML();
|
||
|
|
$nodes = submit_request($request,0);
|
||
|
|
return($nodes);
|
||
|
|
}
|
||
|
|
|
||
|
|
function submit_request($req, $skipVerify){
|
||
|
|
global $cert,$port,$xcathost;
|
||
|
|
$fp;
|
||
|
|
$rsp = '';
|
||
|
|
$pos;
|
||
|
|
$response = '';
|
||
|
|
$cleanexit=0;
|
||
|
|
$moreresponses=1;
|
||
|
|
$context = stream_context_create(); #array('ssl'=>array('local_cert' => $cert)));
|
||
|
|
if($fp = stream_socket_client('ssl://'.$xcathost.':'.$port,$errno,$errstr,30,
|
||
|
|
STREAM_CLIENT_CONNECT,$context)){
|
||
|
|
fwrite($fp,$req->asXML());
|
||
|
|
while($moreresponses and $fp and !feof($fp)){
|
||
|
|
$currline=fgets($fp);
|
||
|
|
$response .= $currline;
|
||
|
|
$response = preg_replace('/\n/','', $response);
|
||
|
|
#$pattern = "<xcatresponse><serverdone></serverdone></xcatresponse>";
|
||
|
|
$pattern = "<serverdone>";
|
||
|
|
$pos = strpos($response,$pattern);
|
||
|
|
if($pos){
|
||
|
|
$cleanexit = 1;
|
||
|
|
}
|
||
|
|
if ($cleanexit) {
|
||
|
|
$pattern = "</xcatresponse>";
|
||
|
|
$pos = strpos($currline,$pattern);
|
||
|
|
}
|
||
|
|
if (is_numeric($pos)) {
|
||
|
|
#$response = substr($response, 0, $pos);
|
||
|
|
#var_dump($response);
|
||
|
|
$response = "<xcat>$response</xcat>";
|
||
|
|
#$response = preg_replace('/<xcatresponse>\s+<\/xcat>/','', $response);
|
||
|
|
#$response .= "</xcat>";
|
||
|
|
#echo htmlentities($response);
|
||
|
|
$rsp = simplexml_load_string($response,'SimpleXMLElement', LIBXML_NOCDATA);
|
||
|
|
$moreresponses=0;
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
fclose($fp);
|
||
|
|
}else{
|
||
|
|
echo "xCAT Submit request ERROR: $errno - $errstr<br/>\n";
|
||
|
|
}
|
||
|
|
if(! $cleanexit){
|
||
|
|
if(!$skipVerify){
|
||
|
|
echo "Error in xCAT response<br>";
|
||
|
|
$rsp = 0;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return $rsp;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
?>
|