root/trunk/spidentd.py

#!/usr/bin/python

""" Simple Programmable Ident (RFC1413) Daemon """

import sys
sys.path=sys.path[1:]

import signal
import socket
import select
import threading
import os
import errno
import pwd
import grp
import getopt
import re

class Driver:
        def __init__(self):
                pass
        def lookup(self,localport,localip,remoteport,remoteip):
                return None

class NoUserDriver(Driver):
        def lookup(self,localport,localip,remoteport,remoteip):
                return "ERROR:NO-USER"

class HiddenUserDriver(Driver):
        def lookup(self,localport,localip,remoteport,remoteip):
                return "ERROR:HIDDEN-USER"

class FailDriver(Driver):
        def lookup(self,localport,localip,remoteport,remoteip):
                return "ERROR:UNKNOWN-ERROR"

class StaticDriver(Driver):
        def __init__(self,reply):
                self.reply=reply
        def lookup(self,localport,localip,remoteport,remoteip):
                return self.reply

class Mapping:
        def __init__(self):
                pass
        def lookup(self,user):
                return user

class FileMapping(Mapping):
        def __init__(self,path):
                self.mapping={}
                for l in file(path).xreadlines():
                        l=l.strip()
                        if not l:
                                continue
                        key,val=l.split(":")
                        self.mapping[key]=val
        def lookup(self,user):
                return self.mapping.get(user,user)

class RealDriver(Driver):
        def lookup(self,localport,localip,remoteport,remoteip):
                try:
                        f=file("/proc/net/tcp","r")
                except IOError:
                        print >>sys.stderr,"Couldn't open /proc/net/tcp"
                        return None
                f.readline()
                li=[long(i) for i in localip.split(".")]
                localip=(li[0]<<24)+(li[1]<<16)+(li[2]<<8)+li[3]
                ri=[long(i) for i in remoteip.split(".")]
                remoteip=(ri[0]<<24)+(ri[1]<<16)+(ri[2]<<8)+ri[3]
                for l in f.xreadlines():
                        sp=l.split()
                        if len(sp)<8:
                                continue
                        locip,locport=sp[1].split(":")
                        locip=socket.htonl(long(locip,16))&0xffffffffL
                        locport=int(locport,16)
                        remip,remport=sp[2].split(":")
                        remip=socket.htonl(long(remip,16))&0xffffffffL
                        remport=int(remport,16)
                        if (localip,localport,remoteip,remoteport)!=(locip,locport,remip,remport):
                                continue
                        uid=int(sp[7])
                        try:
                                pw=pwd.getpwuid(uid)
                                return pw[0]
                        except:
                                return "ERROR:NO-USER"
                return None

class SocketDriverClient:
        add_re=re.compile(r"add (\d+\.\d+\.\d+\.\d+):(\d+) (\d+\.\d+\.\d+\.\d+):(\d+) (.*)")
        remove_re=re.compile(r"remove (\d+\.\d+\.\d+\.\d+):(\d+) (\d+\.\d+\.\d+\.\d+):(\d+)")
        def __init__(self,driver,sock):
                self.socket=sock
                self.driver=driver
                self.thread=threading.Thread(target=self.run_thread)
                self.thread.setDaemon(1)
                self.conn_users={}
                self.buf=""
                self.thread.start()

        def run_thread(self):
                try:
                        self._run_thread()
                finally:
                        self.conn_users={}
                        try:
                                self.driver.clients.remove(self)
                        except ValueError:
                                pass
                        try:
                                self.sock.close()
                        except:
                                pass

        def _run_thread(self):
                global exit
                while not exit:
                        l=self.read_line()
                        if not l:
                                break
                        print >>sys.stderr,"Got %r on programming socket" % (l,)
                        m=self.add_re.match(l)
                        if m:
                                localip,localport,remoteip,remoteport,user=m.groups()
                                self.conn_users[(int(localport),localip,
                                                int(remoteport),remoteip)]=user
                                continue
                        m=self.remove_re.match(l)
                        if m:
                                localip,localport,remoteip,remoteport=m.groups()
                                try:
                                        del self.conn_users[(int(localport),localip,
                                                        int(remoteport),remoteip)]
                                except KeyError:
                                        pass
                                continue
                        print >>sys.stderr,"Bad protocol on programming socket"

        def read_line(self):
                while 1:
                        if "\n" in self.buf:
                                line,self.buf=self.buf.split("\n",1)
                                return line
                        if len(self.buf)>1024:
                                print >>sys.stderr,"Input line too long: %r" % (self.buf,)
                                return None
                        r=self.socket.recv(1024)
                        if not r:
                                return None
                        self.buf+=r


class SocketDriver(Driver):
        def __init__(self,path):
                global socketmode,socketgroup,user,group
                self.socket=socket.socket(socket.AF_UNIX)
                try:
                        os.unlink(path)
                except:
                        pass
                self.socket.bind(path)
                if socketmode is not None:
                        os.chmod(path,socketmode)
                if os.getuid()==0:
                        gid=None
                        if socketgroup is not None:
                                gid=grp.getgrnam(socketgroup)[2]
                        elif group is not None:
                                gid=grp.getgrnam(group)[2]
                        elif user is not None:
                                gid=pwd.getpwnam(user)[3]
                        if gid:
                                os.chown(path,0,gid)
                self.socket.listen(1)
                self.clients=[]
                register_listening_socket(self.socket,self.accept_connection)
        def lookup(self,localport,localip,remoteport,remoteip):
                for c in self.clients:
                        connuser=c.conn_users.get((localport,localip,remoteport,remoteip))
                        if connuser:
                                return connuser
                return None
        def accept_connection(self,sock):
                sock,addr=self.socket.accept()
                print >>sys.stderr,"Client connection from: %r" % (addr,)
                self.clients.append(SocketDriverClient(self,sock))

listening_socket_handlers={}
def register_listening_socket(sock,handler):
        global listening_sockets
        listening_socket_handlers[sock]=handler

def input_thread(sock,addr):
        print >>sys.stderr,"Connection from: %r" % (addr,)
        localip=sock.getsockname()[0]
        remoteip=addr[0]
        buf=""
        while 1:
                try:
                        r=sock.recv(1024)
                except socket.error,e:
                        if e.args[0]==errno.EINTR:
                                continue
                        r=None
                if not r:
                        print >>sys.stderr,"No query"
                        sock.close()
                        return
                buf+=r
                if len(buf)>1024:
                        print >>sys.stderr,"Query too long"
                        sock.close()
                        return
                if buf.find("\r\n")>=0:
                        break
        query=buf.split("\r",1)[0]
        print >>sys.stderr,"Query: %r" % (query,)
        sp=query.split(",")
        if len(sp)!=2:
                print >>sys.stderr,"Invalid query"
                sock.close()
                return
        local,remote=sp
        try:
                local=int(local.strip())
                remote=int(remote.strip())
        except ValueError:
                sock.send("%s,%s:ERROR:INVALID-PORT\r\n" % (local,remote))
                sock.close()
                print >>sys.stderr,"Invalid query"
                return
        if local<1 or local>65535 or remote<1 or remote>65535:
                sock.send("%i,%i:ERROR:INVALID-PORT\r\n" % (local,remote))
                sock.close()
                print >>sys.stderr,"Invalid query"
                return
        reply=None
        mapping=None
        for d in drivers:
                if isinstance(d,Mapping):
                        mapping=d
                        continue
                if not isinstance(d,Driver):
                        continue
                r=d.lookup(local,localip,remote,remoteip)
                if r is None:
                        continue
                if mapping and not r.startswith("ERROR:"):
                        oldr=r
                        r=mapping.lookup(r)
                        print "%r -> %r" % (oldr,r)
                if r.startswith("ERROR:"):
                        reply="%i,%i:%s" % (local,remote,r)
                        break
                else:
                        reply="%i,%i:USERID:UNIX:%s" % (local,remote,r)
                        break
        if not reply:
                reply="%i,%i:ERROR:NO-USER" % (local,remote)
        print >>sys.stderr,"Reply: %s" % (reply,)
        sock.send(reply+"\r\n")
        sock.close()
        return

def signal_handler(signum,frame):
        global exit
        exit=1
        print >>sys.stderr,"Signal %i received, exiting." % (signum,)

def accept_connection(sock):
        th=threading.Thread(target=input_thread,args=sock.accept())
        th.setDaemon(1)
        th.start()

def usage():
        print "Simple Programmable Ident (RFC1413) Daemon"
        print "(c) 2004 Jacek Konieczny"
        print
        print "Usage:"
        print "    %s [options] [driver...]"
        print
        print "Options:"
        print "    -h --help              display this help and exit."
        print "    -i ADDR --ip=ADDR      bind to IP address ADDR."
        print "    -p PORT --port=PORT    bind to port PORT (default: 113)."
        print "    -u USER --user=USER    when started with uid=0, switch "
        print "                           to user USER (default: 'nobody')"
        print "    -p GROUP --group=GROUP when started with uid=0, switch "
        print "                           to group GROUP (default: nobody's group)"
        print "    --socketmode=MODE      access mode for listening socket (--socket driver)"
        print "    --socketgroup=MODE     owner group for listening socket (--socket driver)"
        print "Drivers:"
        print "    --nouser               always reply with NO-USER error."
        print "    --hidden               always reply with HIDDN-USER error."
        print "    --fail                 always reply with UNKNOWN-ERROR error."
        print "    --real                 reply with real connection user name (currently Linux"
        print "                           only)."
        print "    --map=FILE             user mapping file FILE for results of the following "
        print "                           drivers"
        print "    --static=USER          always reply with the same USER reply."
        print "    --socket=PATH          listen on UNIX socket PATH for other servers"
        print "                           registering their connections."


user="nobody"
group=None
ip="0.0.0.0"
port=113
drivers=[]
socketmode=0775
socketgroup=None

try:
        opts,args=getopt.getopt(sys.argv[1:], "hi:p:u:g:", ["help","ip=","port=","user=","group=","map=","socketmode=","socketgroup=",
                "nouser","hidden","real","fail","static=","socket="])
except Exception,e:
        print e
        usage()
        sys.exit(2)
for o,a in opts:
        if o in ("-h","--help"):
                usage()
                sys.exit()
        if o in ("-i","--ip"):
                ip=a
        if o in ("-p","--port"):
                port=int(a)
        if o in ("-u","--user"):
                user=a
        if o in ("-g","--group"):
                group=a
        if o in ("--socketmode",):
                socketmode=int(a,8)
        if o in ("--socketgroup",):
                socketgroup=a
        if o in ("--nouser",):
                drivers.append(NoUserDriver())
        if o in ("--hidden",):
                drivers.append(HiddenUserDriver())
        if o in ("--fail",):
                drivers.append(FailDriver())
        if o in ("--real",):
                drivers.append(RealDriver())
        if o in ("--map",):
                drivers.append(FileMapping(a))
        if o in ("--static",):
                drivers.append(StaticDriver(a))
        if o in ("--socket",):
                drivers.append(SocketDriver(a))
drivers.append(FailDriver())

if args:
        usage()
        sys.exit(2)

sock=socket.socket()
try:
        sock.setsockopt(socket.SOL_SOCKET,socket.SO_REUSEADDR,1)
except:
        pass
sock.bind((ip,port))

if os.getuid()==0:
        pw=pwd.getpwnam(user)
        uid=pw[2]
        gid=pw[3]
        if group:
                gr=grp.getgrnam(group)
                gid=gr[2]
        os.setgroups([gid])
        os.setgid(gid)
        os.setuid(uid)

sock.listen(1)
buf=""
exit=0

register_listening_socket(sock,accept_connection)

signal.signal(signal.SIGINT,signal_handler)
signal.signal(signal.SIGPIPE,signal_handler)
signal.signal(signal.SIGTERM,signal_handler)

while not exit and listening_socket_handlers:
        try:
                sockets=listening_socket_handlers.keys()
                id,od,ed=select.select(sockets,[],sockets,1)
        except select.error,e:
                if e.args[0]==errno.EINTR:
                        continue
        for s in id:
                listening_socket_handlers[s](s)
        for s in ed:
                print >>sys.stderr,"Error on socket: %r" % (s,)
                del listening_socket_handlers[s]
# vi: sts=4 et sw=4