1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
|
#!/bin/env python
import argparse
import os
import pickle
import re
import sys
# access to crypt_util & rz_server
sys.path.append(os.path.join(os.path.dirname(__file__), '..', 'server'))
#import pdb; pdb.set_trace()
from crypt_util import hash_pw
from rz_server import init_config
from rz_user_db import User_Account, User_DB
def init_pw_db(cfg, user_pw_list_file, user_db_path):
def add_user_login(first_name, last_name,
rz_username, email_address, pw_plaintext):
pw_hash = hash_pw(str(pw_plaintext), salt)
u_account = User_Account(first_name=first_name,
last_name=last_name,
rz_username=rz_username,
email_address=email_address,
pw_hash=pw_hash,
role_set=['user'])
print('user_db: added entry: user: %s, pw: %s...' % (u, pw_db[u][:5]))
if os.path.exists(user_db_path):
print('user_db_path already exists, aborting: ' + user_db_path)
return
user_db = User_DB(db_path=db_path)
user_db.init(mode='c')
salt = cfg.secret_key
assert len(salt) > 8, 'server-key not found or too short'
print('using config secret_key for salt generation: ' + salt[:3] + '...')
u_count = 0
with open(user_pw_list_file, 'r') as f:
for line in f:
if re.match('(^#)|(\s+$)', line):
continue
kv_arr = line.split(',')
if 5 != len(kv_arr):
raise Exception('failed to parse first-name,last-name,email,user,pw line: ' + line)
first_name, last_name, rz_username, email_address, pw_plaintext = map(
str.strip, kv_arr)
add_user_login(first_name=first_name,
last_name=last_name,
rz_username=rz_username,
email_address=email_address,
pw_plaintext=pw_plaintext)
print('added user: u: ' + rz_username)
u_count = u_count + 1
print('user_db generated: path: %s, user-count: %d' % (user_db_path, u_count))
def open_existing_user_db(user_db_path):
user_db = User_DB(db_path=user_db_path)
user_db.init(mode='w')
return user_db
def role_add(user_db_path, user_email, role):
user_db = open_existing_user_db(user_db_path)
uid, u = user_db.lookup_user__by_email_address(user_email)
user_db.user_add_role(uid, role)
def role_rm(user_db_path, user_email, role):
user_db = open_existing_user_db(user_db_path)
uid, u = user_db.lookup_user__by_email_address(user_email)
user_db.user_rm_role(uid, role)
def main():
p = argparse.ArgumentParser(description='rz-cli tool')
p.add_argument('--config-dir', help='path to Rhizi config dir', default='res/etc')
p.add_argument('--user-db-path', help='path to user_db (ignore config)')
p.add_argument('--init-user-db', help='init user db', action='store_const', const=True)
p.add_argument('--user-db-init-file', help='user_db db initialization file in \'user,pw\' format')
p.add_argument('--email', help='email of user to operate on')
p.add_argument('--role-add', help='role to add to user, i.e. admin or user')
p.add_argument('--role-rm', help='role to remove from user')
args = p.parse_args()
if None == args.user_db_path:
cfg = init_config(args.config_dir)
user_db_path = cfg.user_db_path
else:
user_db_path = args.user_db_path
if args.init_user_db:
init_pw_db(cfg, args.user_db_init_file, user_db_path)
exit(0)
if args.email:
if args.role_add:
role_add(user_db_path, args.email, args.role_add)
if args.role_rm:
role_rm(user_db_path, args.email, args.role_rm)
if __name__ == '__main__':
main()
|
