Fixed typo on f5 and got basic openvpn working

This commit is contained in:
Daniel Dayley 2019-12-13 16:21:01 -07:00
parent 706dbb5da0
commit b46660e55a
2 changed files with 53 additions and 8 deletions

View File

@ -18,7 +18,7 @@ class ServiceDelegate(ServiceBase) :
def startup(self) :
for requirement in ['hosts','username','key'] :
if requirement not in self.config or (requirement in self.config and self.config[requirement] is ''):
self.error.appendupdate('Missing required config option ' + requirement)
self.error.append('Missing required config option ' + requirement)
return
self.hosts = self.config['hosts']
self.debug("Logging into F5's and searching for hosts, this make take some time.",1)

View File

@ -1,15 +1,60 @@
from servicebase import ServiceBase
import paramiko
import re
class ServiceDelegate(ServiceBase) :
connections = None
def get_arguments(cls) :
"""Returns an array of information used to construct an argumentparser argument."""
# [ <short flag>,<unix flag>,<arg type>,<description> ]
# Example return: [ '-n', '--net', 'store_true', "Return network information about the subject" ]
return ['-r', '--vpn','store_true',"Return VPN information about the subject"]
def get_user_from_ip(ip) :
"""Given an IP address, return the user who was last assigned the address."""
pass
def get_user_login_time_from_ip(ip) :
"""Given an IP address, return the time of the last assignment of the address"""
def startup(self) :
for requirement in ['hosts','username','key'] :
if requirement not in self.config or (requirement in self.config and self.config[requirement] is ''):
self.error.append('Missing required config option ' + requirement)
return
self.hosts = self.config['hosts']
self.debug("Logging into OpenVPN servers...",1)
connections = []
for host in self.config['hosts'] :
try :
sshclient = paramiko.SSHClient()
sshclient.set_missing_host_key_policy(paramiko.AutoAddPolicy())
sshclient.connect(host,22,username=self.config['username'],password=self.config['key'])
connections.append(sshclient)
except Exception as exception :
self.error.append("Unable to ssh into " + host + ': ' + str(exception))
self.connections = connections
def shutdown(self) :
for connection in self.connections :
connection.close()
def perform_lookup(self,host_tuple) :
search_command = "sudo -S cat /etc/openvpn/openvpn-*p.log | grep 'primary virtual IP for' | grep '" + host_tuple[0] + "' | tail -n 1"
for connection in self.connections :
try:
stdin,stdout,stderr=connection.exec_command(search_command)
stdin.write(self.config['key'] + '\n')
stdin.flush()
result = stdout.readlines()
if len(result) > 0 :
self.debug('Retrieved line from ssh session: \n' + result[0],2)
result = result[0]
else :
result = ""
items = {'nat_address': r'.*\ ([0-9a-fA-F\.\:]*)$', 'source_address': r'.*/([0-9a-fA-F\.\:]*)\ .*', 'user_name': r'.*us=[0-9]*\ ([a-zA-Z0-9\.]*)/.*', 'timestamp': r'(.*)\ us=.*'}
return_dictionary = {}
for item in items.keys() :
matches = re.match(items[item],result)
if matches and len(matches.groups()) and matches[1] :
return_dictionary.update({item: matches[1]})
if return_dictionary is not {} :
return return_dictionary
except Exception as exception :
self.error.append("Unable to get results from ssh: " + str(exception))
pass