arif/xcat-core
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

add auditlog table updates

Browse Source 
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@5405 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
This commit is contained in:
lissav 2010-03-08 19:32:33 +00:00
parent 4833cebef5
commit 15455e1276
1 changed files with 39 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

62
xCAT-server/sbin/xcatd
View File

@ -1635,32 +1635,48 @@ sub validate {
}
# If we are still in, that means this rule is the first match and dictates behavior.
if ($rule->{rule}) {
my $logst;
my $rc;
my $status;
if ($rule->{rule} =~ /allow/i or $rule->{rule} =~ /accept/i) {
my $logst = "xCAT: Allowing ".$request->{command}->[0];
if ($request->{noderange} && defined($request->{noderange}->[0])) { $logst .= " to ".$request->{noderange}->[0]; }
# add each argument
my $args = $request->{arg};
foreach my $argument (@$args){
$logst .= " " . $argument;
}
if ($peername) { $logst .= " for " . $peername };
if ($peerhost) { $logst .= " from " . $peerhost };
xCAT::MsgUtils->message("S",$logst);
return 1;
$logst = "xCAT: Allowing ".$request->{command}->[0];
$status = "Allowed";
$rc=1;
} else {
my $logst = "xCAT: Denying ".$request->{command}->[0];
# add each argument
my $args = $request->{arg};
foreach my $argument (@$args){
$logst .= " " . $argument;
}
if ($peername) { $logst .= " for " . $peername };
if ($peerhost) { $logst .= " from " . $peerhost };
xCAT::MsgUtils->message("S",$logst);
return 0;
$logst = "xCAT: Denying ".$request->{command}->[0];
$status = "Denied";
$rc=0;
}
if ($request->{noderange} && defined($request->{noderange}->[0])) { $logst .= " to ".$request->{noderange}->[0]; }
# add each argument
my $args = $request->{arg};
my $arglist;
foreach my $argument (@$args){
$arglist .= " " . $argument;
}
$logst .= $arglist;
if ($peername) { $logst .= " for " . $peername };
if ($peerhost) { $logst .= " from " . $peerhost };
# xCAT::MsgUtils->message("S",$logst);
# put in audit Table
my $rsp = {};
$rsp->{syslogdata}->[0] = $logst;
if ($peername) {
$rsp->{userid} ->[0] = $peername;
}
if ($peerhost) {
$rsp->{clientname} -> [0] = $peerhost;
}
$rsp->{clienttype} -> [0] = "cli";
$rsp->{command} -> [0] = $request->{command}->[0];
if ($request->{noderange} && defined($request->{noderange}->[0])) {
$rsp->{noderange} -> [0] = $request->{noderange}->[0];
}
$rsp->{args} -> [0] =$arglist;
$rsp->{status} -> [0] = $status;
xCAT::MsgUtils->message("SA",$rsp);
return $rc;
} else { #Shouldn't be possible....
xCAT::MsgUtils->message("S","Impossible line in xcatd reached");
return 0;