#!/usr/bin/python """ HTTP Server that serves roundup. Stolen from CGIHTTPServer $Id: roundup-server,v 1.6 2001-07-29 07:01:39 richard Exp $ """ import sys if int(sys.version[0]) < 2: print "Content-Type: text/plain\n" print "Roundup requires Python 2.0 or newer." sys.exit(0) __version__ = "0.1" __all__ = ["RoundupRequestHandler"] import os, urllib, StringIO, traceback, cgi, binascii, string, getopt import BaseHTTPServer import SimpleHTTPServer # Roundup modules of use here from roundup import cgitb, cgi_client # ## Configuration # # This indicates where the Roundup instance lives ROUNDUP_INSTANCE_HOMES = { 'bar': '/tmp/bar', } # Where to log debugging information to. Use an instance of DevNull if you # don't want to log anywhere. # TODO: actually use this stuff #class DevNull: # def write(self, info): # pass #LOG = open('/var/log/roundup.cgi.log', 'a') #LOG = DevNull() # ## end configuration # class RoundupRequestHandler(SimpleHTTPServer.SimpleHTTPRequestHandler): ROUNDUP_INSTANCE_HOMES = ROUNDUP_INSTANCE_HOMES def send_head(self): """Version of send_head that support CGI scripts""" # TODO: actually do the HEAD ... return self.run_cgi() def run_cgi(self): """ Execute the CGI command. Wrap an innner call in an error handler so all errors can be caught. """ save_stdin = sys.stdin sys.stdin = self.rfile try: self.inner_run_cgi() except cgi_client.Unauthorised: self.wfile.write('Content-Type: text/html\n') self.wfile.write('Status: 403\n') self.wfile.write('Unauthorised') except: try: reload(cgitb) self.wfile.write("Content-Type: text/html\n\n") self.wfile.write(cgitb.breaker()) self.wfile.write(cgitb.html()) except: self.wfile.write("Content-Type: text/html\n\n") self.wfile.write("
")
s = StringIO.StringIO()
traceback.print_exc(None, s)
self.wfile.write(cgi.escape(s.getvalue()))
self.wfile.write("\n")
sys.stdin = save_stdin
def inner_run_cgi(self):
''' This is the inner part of the CGI handling
'''
rest = self.path
i = rest.rfind('?')
if i >= 0:
rest, query = rest[:i], rest[i+1:]
else:
query = ''
# figure the instance
if rest == '/':
raise ValueError, 'No instance specified'
l_path = string.split(rest, '/')
instance = urllib.unquote(l_path[1])
if self.ROUNDUP_INSTANCE_HOMES.has_key(instance):
instance_home = self.ROUNDUP_INSTANCE_HOMES[instance]
module_path, instance = os.path.split(instance_home)
sys.path.insert(0, module_path)
try:
instance = __import__(instance)
finally:
del sys.path[0]
else:
raise ValueError, 'No such instance "%s"'%instance
# figure out what the rest of the path is
if len(l_path) > 2:
rest = '/'.join(l_path[2:])
else:
rest = '/'
# Set up the CGI environment
env = {}
env['REQUEST_METHOD'] = self.command
env['PATH_INFO'] = urllib.unquote(rest)
if query:
env['QUERY_STRING'] = query
host = self.address_string()
if self.headers.typeheader is None:
env['CONTENT_TYPE'] = self.headers.type
else:
env['CONTENT_TYPE'] = self.headers.typeheader
length = self.headers.getheader('content-length')
if length:
env['CONTENT_LENGTH'] = length
co = filter(None, self.headers.getheaders('cookie'))
if co:
env['HTTP_COOKIE'] = ', '.join(co)
env['SCRIPT_NAME'] = ''
env['SERVER_NAME'] = self.server.server_name
env['SERVER_PORT'] = str(self.server.server_port)
decoded_query = query.replace('+', ' ')
# if root, setuid to nobody
# TODO why isn't this done much earlier? - say, in main()?
if not os.getuid():
nobody = nobody_uid()
os.setuid(nobody)
# reload all modules
# TODO check for file timestamp changes and dependencies
#reload(date)
#reload(hyperdb)
#reload(roundupdb)
#reload(htmltemplate)
#reload(cgi_client)
#sys.path.insert(0, module_path)
#try:
# reload(instance)
#finally:
# del sys.path[0]
# initialise the roundupdb, check for auth
db = instance.open('admin')
message = 'Unauthorised'
auth = self.headers.getheader('authorization')
if auth:
l = binascii.a2b_base64(auth.split(' ')[1]).split(':')
user = l[0]
password = None
if len(l) > 1:
password = l[1]
try:
uid = db.user.lookup(user)
except KeyError:
auth = None
message = 'Username not recognised'
else:
if password != db.user.get(uid, 'password'):
message = 'Incorrect password'
auth = None
db.close()
del db
if not auth:
self.send_response(401)
self.send_header('Content-Type', 'text/html')
self.send_header('WWW-Authenticate', 'basic realm="Roundup"')
self.end_headers()
self.wfile.write(message)
return
self.send_response(200, "Script output follows")
# do the roundup thang
db = instance.open(user)
client = instance.Client(self.wfile, db, env, user)
client.main()
do_POST = run_cgi
nobody = None
def nobody_uid():
"""Internal routine to get nobody's uid"""
global nobody
if nobody:
return nobody
try:
import pwd
except ImportError:
return -1
try:
nobody = pwd.getpwnam('nobody')[2]
except KeyError:
nobody = 1 + max(map(lambda x: x[2], pwd.getpwall()))
return nobody
def usage(message=''):
if message: message = 'Error: %s\n'%message
print '''%sUsage:
roundup-server [-n hostname] [-p port] [name=instance home]*
-n: sets the host name
-p: sets the port to listen on
name=instance home
Sets the instance home(s) to use. The name is how the instance is
identified in the URL (it's the first part of the URL path). The
instance home is the directory that was identified when you did
"roundup-admin init". You may specify any number of these name=home
pairs on the command-line. For convenience, you may edit the
ROUNDUP_INSTANCE_HOMES variable in the roundup-server file instead.
'''%message
sys.exit(0)
def main():
hostname = ''
port = 8080
try:
# handle the command-line args
optlist, args = getopt.getopt(sys.argv[1:], 'n:p:')
for (opt, arg) in optlist:
if opt == '-n': hostname = arg
elif opt == '-p': port = int(arg)
elif opt == '-h': usage()
# handle instance specs
if args:
d = {}
for arg in args:
name, home = string.split(arg, '=')
d[name] = home
RoundupRequestHandler.ROUNDUP_INSTANCE_HOMES = d
except:
type, value = sys.exc_info()[:2]
usage('%s: %s'%(type, value))
# we don't want the cgi module interpreting the command-line args ;)
sys.argv = sys.argv[:1]
address = (hostname, port)
httpd = BaseHTTPServer.HTTPServer(address, RoundupRequestHandler)
print 'Roundup server started on', address
httpd.serve_forever()
if __name__ == '__main__':
main()
#
# $Log: not supported by cvs2svn $
# Revision 1.5 2001/07/24 01:07:59 richard
# Added command-line arg handling to roundup-server so it's more useful
# out-of-the-box.
#
# Revision 1.4 2001/07/23 10:31:45 richard
# disabled the reloading until it can be done properly
#
# Revision 1.3 2001/07/23 08:53:44 richard
# Fixed the ROUNDUPS decl in roundup-server
# Move the installation notes to INSTALL
#
# Revision 1.2 2001/07/23 04:05:05 anthonybaxter
# actually quit if python version wrong
#
# Revision 1.1 2001/07/23 03:46:48 richard
# moving the bin files to facilitate out-of-the-boxness
#
# Revision 1.1 2001/07/22 11:15:45 richard
# More Grande Splite stuff
#
#
# vim: set filetype=python ts=4 sw=4 et si