com.vmware.bdd.usermgmt.job.CfgUserMgmtOnMgmtVMExecutor.java Source code

Introduction

Here is the source code for com.vmware.bdd.usermgmt.job.CfgUserMgmtOnMgmtVMExecutor.java

Source

/******************************************************************************
 *   Copyright (c) 2014-2015 VMware, Inc. All Rights Reserved.
 *   Licensed under the Apache License, Version 2.0 (the "License");
 *   you may not use this file except in compliance with the License.
 *   You may obtain a copy of the License at
 *
 *       http://www.apache.org/licenses/LICENSE-2.0
 *
 *   Unless required by applicable law or agreed to in writing, software
 *   distributed under the License is distributed on an "AS IS" BASIS,
 *   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *   See the License for the specific language governing permissions and
 *   limitations under the License.
 *****************************************************************************/
package com.vmware.bdd.usermgmt.job;

import java.io.BufferedWriter;
import java.io.File;
import java.io.FileOutputStream;
import java.io.IOException;
import java.io.OutputStreamWriter;
import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

import com.fasterxml.jackson.databind.ObjectMapper;
import com.vmware.bdd.usermgmt.UserMgmtConstants;
import com.vmware.bdd.utils.CommonUtil;
import org.apache.commons.exec.CommandLine;
import org.apache.commons.exec.DefaultExecutor;
import org.apache.commons.exec.ExecuteWatchdog;
import org.apache.commons.exec.PumpStreamHandler;
import org.apache.log4j.Logger;

import com.vmware.aurora.global.Configuration;
import com.vmware.bdd.apitypes.UserMgmtServer;
import com.vmware.bdd.usermgmt.SssdConfigurationGenerator;

/**
 * Created By xiaoliangl on 12/12/14.
 */
public class CfgUserMgmtOnMgmtVMExecutor {
    private final static Logger LOGGER = Logger.getLogger(CfgUserMgmtOnMgmtVMExecutor.class);

    private final static int TIMEOUT = Configuration.getInt("usermgmt.command.exec.timeout", 120);
    private final String sudoCmd = CommonUtil.getCustomizedSudoCmd();

    public void execute(UserMgmtServer userMgmtServer, SssdConfigurationGenerator sssdLdapConstantMappings) {

        String taskDir = System.getProperty("serengeti.home.dir") + File.separator + "logs" + File.separator
                + "task";

        File workDir = new File(taskDir + File.separator + System.currentTimeMillis());
        workDir.mkdirs();
        File specFile = new File(workDir, "enableUserMgmt.json");

        writeJsonFile(userMgmtServer, specFile, sssdLdapConstantMappings);

        String specFilePath = specFile.getAbsolutePath();

        try {
            execChefClient(specFilePath);
            enableSudo(userMgmtServer.findAdminGroupName());
            LOGGER.info("execute ChefClient for enable_LDAP is finished.");
        } finally {
            workDir.delete();
            LOGGER.info("enable_LDAP spec file is deleted successful.");
        }
    }

    private void execCommand(CommandLine cmdLine) {
        DefaultExecutor executor = new DefaultExecutor();

        executor.setStreamHandler(new PumpStreamHandler(new ExecOutputLogger(LOGGER, false), //output logger
                new ExecOutputLogger(LOGGER, true)) //error logger
        );

        executor.setWatchdog(new ExecuteWatchdog(1000l * TIMEOUT));

        try {
            int exitVal = executor.execute(cmdLine);
            if (exitVal != 0) {
                throw new UserMgmtExecException("CFG_LDAP_FAIL", null);
            }
        } catch (IOException e) {
            throw new UserMgmtExecException("CFG_LDAP_FAIL", e);
        }
    }

    private void enableSudo(String adminGroupName) {
        CommandLine cmdLine = new CommandLine(sudoCmd).addArgument(UserMgmtConstants.ENABLE_SUDO_SCRIPT)
                .addArgument(adminGroupName);
        execCommand(cmdLine);
    }

    private void execChefClient(String specFilePath) {
        CommandLine cmdLine = new CommandLine(sudoCmd).addArgument("chef-client").addArgument("-z")
                .addArgument("-j").addArgument("\"" + specFilePath + "\"").addArgument("-c")
                .addArgument("/opt/serengeti/.chef/knife.rb");

        execCommand(cmdLine);
    }

    class SssdLdapParam {
        private Map<Object, Object> sssd_ldap = new HashMap<>();
        private List<String> run_list = new ArrayList<>();

        public Map<Object, Object> getSssd_ldap() {
            return sssd_ldap;
        }

        public List<String> getRun_list() {
            return run_list;
        }
    }

    private void writeJsonFile(UserMgmtServer userMgmtServer, File file,
            SssdConfigurationGenerator sssdLdapConstantMappings) {
        SssdLdapParam sssdLdapParam = new SssdLdapParam();

        //initialize by template
        sssdLdapParam.sssd_ldap.putAll(sssdLdapConstantMappings.get(userMgmtServer.getType()));

        //override values.
        sssdLdapParam.sssd_ldap.put("ldap_group_search_base", userMgmtServer.getBaseGroupDn());
        sssdLdapParam.sssd_ldap.put("ldap_user_search_base", userMgmtServer.getBaseUserDn());
        sssdLdapParam.sssd_ldap.put("ldap_uri", userMgmtServer.getPrimaryUrl());
        sssdLdapParam.sssd_ldap.put("ldap_default_bind_dn", userMgmtServer.getUserName());
        sssdLdapParam.sssd_ldap.put("ldap_default_authtok", userMgmtServer.getPassword());
        sssdLdapParam.sssd_ldap.put("ldap_access_filter", "memberOf=" + userMgmtServer.getMgmtVMUserGroupDn());

        sssdLdapParam.run_list.add("recipe[sssd_ldap]");

        try {
            ObjectMapper objectMapper = new ObjectMapper();
            String json = objectMapper.writeValueAsString(sssdLdapParam);

            if (LOGGER.isDebugEnabled()) {
                LOGGER.debug("writing Configuration manifest in json " + json + " to file " + file);
            }

            try (BufferedWriter out = new BufferedWriter(
                    new OutputStreamWriter(new FileOutputStream(file), "UTF-8"));) {
                out.write(json);
            }
        } catch (IOException ex) {
            LOGGER.error(ex.getMessage() + "\n failed to write enable_LDAP spec file " + file);
            throw new UserMgmtExecException("WRITE_CFG_LDAP_JSON_FAIL", ex);
        }
    }
}