init the project

jumpserver.py

+#!/usr/bin/python
+# coding: utf-8
+
+"""
+This script is used to let server to be a jump server.
+业务逻辑： 用户通过自己这套账号密码连接到跳板机，
+然后从跳板机链接到各个业务Server, 该脚本可以实现
+登录到其他业务机的功能，并且针对不同的用户实现不
+同的授权的， 可以讲用户的负责的主机print出来，用
+户的权限密码存放在数据库中。现在要考虑是否得用ex-
+pect模块，还是os.command.用户选择别的，或者Ctrl+D,
+Ctrl+C直接退出。改脚本二进制方式存放。
+
+使用方法：
+1. 把该文件放到合适的问题如/tmp，保证所有用户都能访问的到。
+2. vim /etc/profile.d/jump.sh
+   #/bin/bash
+   python /tmp/jump.py
+   if [ $USER == 'root' ]:
+       echo ""
+   else
+       exit
+   fi
+   
+数据库表结构：
+user
+id  username  password 
+
+server
+id  ip  port
+
+user_server
+id user_id server_id
+
+CREATE TABLE user(id INT NOT NULL,
+                  username VARCHAR(30),
+                  password VARCHAR(30),
+                  PRIMARY KEY(id)
+                  ) ENGINE=INNODB;
+           
+CREATE TABLE server(id INT NOT NULL,
+                    ip VARCHAR(20),
+                    port SMALLINT,
+                    PRIMARY KEY(id)
+                    ) ENGINE=INNODB;
+                    
+CREATE TABLE user_server(id INT NOT NULL,
+                        user_id INT,
+                        server_id INT,
+                        PRIMARY KEY(id),
+                        FOREIGN KEY(user_id) REFERENCES user(id) ON DELETE CASCADE ON UPDATE CASCADE,
+                        FOREIGN KEY(user_id) REFERENCES user(id) ON DELETE CASCADE ON UPDATE CASCADE
+                        ) ENGINE=INNODB;
+                        
+select * from user t1, server t2, user_server t3 where t1.username='ldapuser' and t1.id=t3.user_id and t2.id = t3.server_id;
+                        
+"""
+
+import os
+import sys
+import subprocess
+import pexpect
+import struct
+import fcntl
+import termios
+import signal
+import MySQLdb
+import re
+
+"""
+#Test user
+host = '192.168.2.143'
+port = 22
+user = 'ldapuser'
+password = 'redhat'
+"""
+
+db_host = '127.0.0.1'
+db_user = 'root'
+db_password = 'redhat'
+db_db = 'jump'
+db_port = 3306
+
+
+def sigwinch_passthrough (sig, data):
+    winsize = getwinsize()
+    global bar
+    bar.setwinsize(winsize[0],winsize[1])
+
+def getwinsize():
+    if 'TIOCGWINSZ' in dir(termios):
+        TIOCGWINSZ = termios.TIOCGWINSZ
+    else:
+        TIOCGWINSZ = 1074295912L # Assume
+    s = struct.pack('HHHH', 0, 0, 0, 0)
+    x = fcntl.ioctl(sys.stdout.fileno(), TIOCGWINSZ, s)
+    return struct.unpack('HHHH', x)[0:2]
+    
+def progress(second, nums, sym='.'):
+    for i in range(nums):
+        os.write(1, sym)
+        time.sleep(second)
+    sys.stdout.flush()
+
+def connect_db(user, passwd, db, host='127.0.0.1', port=3306):
+    db = MySQLdb.connect(host=host,
+                        port=port,
+                        user=user,
+                        passwd=passwd,
+                        db=db)
+    cursor = db.cursor()
+    return (db, cursor)
+
+def run_cmd(cmd):
+    pipe = subprocess.Popen(cmd, 
+                            shell=True, 
+                            stdout=subprocess.PIPE, 
+                            stderr=subprocess.PIPE)
+    if pipe.stdout:
+        return pipe.stdout.read().strip()
+    if pipe.stderr:
+        return pipe.stdout.read()
+
+def is_ip(ip):
+    ip_re = re.compile(r'^(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[0-9]{1,2})(\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[0-9]{1,2})){3}$')
+    match = ip_re.match(ip)
+    if match:
+        return True
+    else:
+        return False
+        
+def connect(host, port, user, password ):
+    foo = pexpect.spawn('ssh -p %s %s@%s' % (port, user, host))
+    while True:
+        index = foo.expect(['continue', 
+                            'assword', 
+                            pexpect.EOF, 
+                            pexpect.TIMEOUT], timeout=3)
+        if index == 0:
+            foo.sendline('yes')
+            continue
+        elif index == 1:
+            foo.sendline(password)
+        
+        index = foo.expect([']', 
+                            'assword', 
+                            pexpect.EOF, 
+                            pexpect.TIMEOUT], timeout=3)
+        if index == 0:
+            signal.signal(signal.SIGWINCH, sigwinch_passthrough)
+            size = getwinsize()
+            foo.setwinsize(size[0], size[1])
+            foo.interact()
+            print "Login success!"
+            break
+        else:
+            print "Login failed, please contact system administrator!"
+            break
+
+def ip_all_select(username):
+    ip_all = []
+    db, cursor = connect_db(db_user, db_password, db_db, db_host, db_port)
+    cursor.execute('select t2.ip from user t1, server t2, user_server t3 where t1.username="%s" and t1.id=t3.user_id and t2.id = t3.server_id;' % username)
+    ip_all_record = cursor.fetchall()
+    if ip_all_record:
+        for record in ip_all_record:
+            ip_all.append(record[0])
+    db.close()
+    return ip_all
+
+def sth_select(username='', ip=''):
+    db, cursor = connect_db(db_user, db_password, db_db, db_host, db_port)
+    if username:
+        cursor.execute('select password from user where username="%s"' % username)
+        try:
+            password = cursor.fetchone()[0]
+        except IndexError:
+            password = ''
+        return password
+    if  ip:
+        cursor.execute('select port from server where ip="%s"' % ip)
+        try:
+            port = cursor.fetchone()[0]
+        except IndexError:
+            port = 22
+        return port
+    
+    return Null
+            
+if __name__ == '__main__':
+    username = run_cmd('whoami')
+    print username
+    while True:
+        option = raw_input("""
+        Welcome Use JumpServer To Login.
+        1) Type L/l To Login.
+        2) Type P/p To Print The Servers You Available.
+        3) Other To Quit.
+        Your Choince: """)
+        if option in ['P', 'p']:
+            ip_all = ip_all_select(username)
+            for ip in ip_all:
+                print '\n' * 2
+                print ip
+                print '\n' * 2
+            continue
+        elif option not in ['L', 'l']:
+            sys.exit()
+            
+        try:
+            while True:
+                ip = raw_input('Please input the Host IP: ')
+                if is_ip(ip) and ip in ip_all_select(username):
+                    password = sth_select(username=username)
+                    port = sth_select(ip=ip)
+                    print "Connecting %s ." % ip
+                    connect(ip, port, username, password)
+                elif ip == 'admin':
+                    break
+                elif ip in ['Q', 'q']:
+                    break
+                else:
+                    print 'No permision.'
+                    continue            
+        except (BaseException,Exception):
+            print "Error!"
+            sys.exit()
\ No newline at end of file