X-Git-Url: https://code.grnet.gr/git/ganeti-local/blobdiff_plain/8790ac54fc686eebd8cd06cbf8dd9dffd4c02e94..7260cfbe90e7bf0a30b296a8196618c8558d08b9:/daemons/ganeti-rapi

diff --git a/daemons/ganeti-rapi b/daemons/ganeti-rapi
index f11e66d..96d5c7a 100755
--- a/daemons/ganeti-rapi
+++ b/daemons/ganeti-rapi
@@ -18,9 +18,14 @@
 # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
 # 02110-1301, USA.
 
-""" Ganeti Remote API master script.
+"""Ganeti Remote API master script.
+
 """
 
+# pylint: disable-msg=C0103,W0142
+
+# C0103: Invalid name ganeti-watcher
+
 import glob
 import logging
 import optparse
@@ -139,7 +144,8 @@ class RemoteApiHttpServer(http.auth.HttpServerRequestAuthentication,
     valid_user = False
     if self._users:
       user = self._users.get(username, None)
-      if user and user.password == password:
+      if user and self.VerifyBasicAuthPassword(req, username, password,
+                                               user.password):
         valid_user = True
 
     if not valid_user:
@@ -177,96 +183,52 @@ class RemoteApiHttpServer(http.auth.HttpServerRequestAuthentication,
     return result
 
 
-def ParseOptions():
-  """Parse the command line options.
-
-  @return: (options, args) as from OptionParser.parse_args()
+def CheckRapi(options, args):
+  """Initial checks whether to run or exit with a failure.
 
   """
-  parser = optparse.OptionParser(description="Ganeti Remote API",
-                    usage="%prog [-d] [-p port]",
-                    version="%%prog (ganeti) %s" %
-                                 constants.RAPI_VERSION)
-  parser.add_option("-d", "--debug", dest="debug",
-                    help="Enable some debug messages",
-                    default=False, action="store_true")
-  parser.add_option("-p", "--port", dest="port",
-                    help="Port to run API (%s default)." %
-                                 constants.RAPI_PORT,
-                    default=constants.RAPI_PORT, type="int")
-  parser.add_option("--no-ssl", dest="ssl",
-                    help="Do not secure HTTP protocol with SSL",
-                    default=True, action="store_false")
-  parser.add_option("-K", "--ssl-key", dest="ssl_key",
-                    help="SSL key",
-                    default=constants.RAPI_CERT_FILE, type="string")
-  parser.add_option("-C", "--ssl-cert", dest="ssl_cert",
-                    help="SSL certificate",
-                    default=constants.RAPI_CERT_FILE, type="string")
-  parser.add_option("-f", "--foreground", dest="fork",
-                    help="Don't detach from the current terminal",
-                    default=True, action="store_false")
-  parser.add_option("-b", "--bind", dest="bind_address",
-                     help="Bind address",
-                     default="", metavar="ADDRESS")
-
-  options, args = parser.parse_args()
-
   if len(args) != 0:
-    print >> sys.stderr, "Usage: %s [-d] [-p port]" % sys.argv[0]
-    sys.exit(1)
+    print >> sys.stderr, "Usage: %s [-f] [-d] [-p port] [-b ADDRESS]" % \
+        sys.argv[0]
+    sys.exit(constants.EXIT_FAILURE)
 
-  if options.ssl and not (options.ssl_cert and options.ssl_key):
-    print >> sys.stderr, ("For secure mode please provide "
-                         "--ssl-key and --ssl-cert arguments")
-    sys.exit(1)
-
-  return options, args
+  ssconf.CheckMaster(options.debug)
 
 
-def main():
-  """Main function.
+def ExecRapi(options, args):
+  """Main remote API function, executed with the PID file held.
 
   """
-  options, args = ParseOptions()
-
-  if options.fork:
-    utils.CloseFDs()
-
+  # Read SSL certificate
   if options.ssl:
-    # Read SSL certificate
-    try:
-      ssl_params = http.HttpSslParams(ssl_key_path=options.ssl_key,
-                                      ssl_cert_path=options.ssl_cert)
-    except Exception, err:
-      sys.stderr.write("Can't load the SSL certificate/key: %s\n" % (err,))
-      sys.exit(1)
+    ssl_params = http.HttpSslParams(ssl_key_path=options.ssl_key,
+                                    ssl_cert_path=options.ssl_cert)
   else:
     ssl_params = None
 
-  ssconf.CheckMaster(options.debug)
+  mainloop = daemon.Mainloop()
+  server = RemoteApiHttpServer(mainloop, options.bind_address, options.port,
+                               ssl_params=ssl_params, ssl_verify_peer=False,
+                               request_executor_class=JsonErrorRequestExecutor)
+  server.Start()
+  try:
+    mainloop.Run()
+  finally:
+    server.Stop()
+
 
-  if options.fork:
-    utils.Daemonize(logfile=constants.LOG_RAPISERVER)
+def main():
+  """Main function.
 
-  utils.SetupLogging(constants.LOG_RAPISERVER, debug=options.debug,
-                     stderr_logging=not options.fork)
+  """
+  parser = optparse.OptionParser(description="Ganeti Remote API",
+                    usage="%prog [-f] [-d] [-p port] [-b ADDRESS]",
+                    version="%%prog (ganeti) %s" % constants.RAPI_VERSION)
 
-  utils.WritePidFile(constants.RAPI_PID)
-  try:
-    mainloop = daemon.Mainloop()
-    server = RemoteApiHttpServer(mainloop, options.bind_address, options.port,
-                                 ssl_params=ssl_params, ssl_verify_peer=False,
-                                 request_executor_class=
-                                 JsonErrorRequestExecutor)
-    server.Start()
-    try:
-      mainloop.Run()
-    finally:
-      server.Stop()
-  finally:
-    utils.RemovePidFile(constants.RAPI_PID)
+  dirs = [(val, constants.RUN_DIRS_MODE) for val in constants.SUB_RUN_DIRS]
+  dirs.append((constants.LOG_OS_DIR, 0750))
+  daemon.GenericMain(constants.RAPI, parser, dirs, CheckRapi, ExecRapi)
 
 
-if __name__ == '__main__':
+if __name__ == "__main__":
   main()