156 lines
5.2 KiB
Python
156 lines
5.2 KiB
Python
# vim: tabstop=4 shiftwidth=4 softtabstop=4
|
|
|
|
# Copyright 2012 Cloudbase Solutions Srl
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import pywintypes
|
|
import re
|
|
|
|
from win32com import client
|
|
from xml.etree import ElementTree
|
|
|
|
|
|
CBT_HARDENING_LEVEL_NONE = "none"
|
|
CBT_HARDENING_LEVEL_RELAXED = "relaxed"
|
|
CBT_HARDENING_LEVEL_STRICT = "strict"
|
|
|
|
LISTENER_PROTOCOL_HTTP = "HTTP"
|
|
LISTENER_PROTOCOL_HTTPS = "HTTPS"
|
|
|
|
|
|
class WinRMConfig(object):
|
|
_SERVICE_AUTH_URI = 'winrm/Config/Service/Auth'
|
|
_SERVICE_LISTENER_URI = 'winrm/Config/Listener?Address=*+Transport=%s'
|
|
|
|
def _get_wsman_session(self):
|
|
wsman = client.Dispatch('WSMan.Automation')
|
|
return wsman.CreateSession()
|
|
|
|
def _get_node_tag(self, tag):
|
|
return re.match("^{.*}(.*)$", tag).groups(1)[0]
|
|
|
|
def _parse_listener_xml(self, data_xml):
|
|
listening_on = []
|
|
data = {"ListeningOn": listening_on}
|
|
|
|
ns = {'cfg':
|
|
'http://schemas.microsoft.com/wbem/wsman/1/config/listener'}
|
|
tree = ElementTree.fromstring(data_xml)
|
|
for node in tree:
|
|
tag = self._get_node_tag(node.tag)
|
|
if tag == "ListeningOn":
|
|
listening_on.append(node.text)
|
|
elif tag == "Enabled":
|
|
if node.text == "true":
|
|
value = True
|
|
else:
|
|
value = False
|
|
data[tag] = value
|
|
elif tag == "Port":
|
|
data[tag] = int(node.text)
|
|
else:
|
|
data[tag] = node.text
|
|
|
|
return data
|
|
|
|
def get_listener(self, protocol=LISTENER_PROTOCOL_HTTPS):
|
|
session = self._get_wsman_session()
|
|
resourceUri = self._SERVICE_LISTENER_URI % protocol
|
|
try:
|
|
data_xml = session.Get(resourceUri)
|
|
except pywintypes.com_error, ex:
|
|
if len(ex.excepinfo) > 5 and ex.excepinfo[5] == -2144108544:
|
|
return None
|
|
else:
|
|
raise
|
|
|
|
return self._parse_listener_xml(data_xml)
|
|
|
|
def delete_listener(self, protocol=LISTENER_PROTOCOL_HTTPS):
|
|
session = self._get_wsman_session()
|
|
resourceUri = self._SERVICE_LISTENER_URI % protocol
|
|
session.Delete(resourceUri)
|
|
|
|
def create_listener(self, protocol=LISTENER_PROTOCOL_HTTPS, enabled=True,
|
|
cert_thumbprint=None):
|
|
session = self._get_wsman_session()
|
|
resource_uri = self._SERVICE_LISTENER_URI % protocol
|
|
|
|
if enabled:
|
|
enabled_str = "true"
|
|
else:
|
|
enabled_str = "false"
|
|
|
|
session.Create(
|
|
resource_uri,
|
|
'<p:Listener xmlns:p="http://schemas.microsoft.com/'
|
|
'wbem/wsman/1/config/listener.xsd">'
|
|
'<p:Enabled>%(enabled_str)s</p:Enabled>'
|
|
'<p:CertificateThumbPrint>%(cert_thumbprint)s'
|
|
'</p:CertificateThumbPrint>'
|
|
'<p:URLPrefix>wsman</p:URLPrefix>'
|
|
'</p:Listener>' % {"enabled_str": enabled_str,
|
|
"cert_thumbprint": cert_thumbprint})
|
|
|
|
def get_auth_config(self):
|
|
data = {}
|
|
|
|
session = self._get_wsman_session()
|
|
data_xml = session.Get(self._SERVICE_AUTH_URI)
|
|
tree = ElementTree.fromstring(data_xml)
|
|
for node in tree:
|
|
tag = self._get_node_tag(node.tag)
|
|
value_str = node.text.lower()
|
|
if value_str == "true":
|
|
value = True
|
|
elif value_str == "false":
|
|
value = False
|
|
else:
|
|
value = value_str
|
|
data[tag] = value
|
|
|
|
return data
|
|
|
|
def set_auth_config(self, basic=None, kerberos=None, negotiate=None,
|
|
certificate=None, credSSP=None,
|
|
cbt_hardening_level=None):
|
|
|
|
tag_map = {'Basic': basic,
|
|
'Kerberos': kerberos,
|
|
'Negotiate': negotiate,
|
|
'Certificate': certificate,
|
|
'CredSSP': credSSP,
|
|
'CbtHardeningLevel': cbt_hardening_level}
|
|
|
|
session = self._get_wsman_session()
|
|
data_xml = session.Get(self._SERVICE_AUTH_URI)
|
|
|
|
ns = {'cfg':
|
|
'http://schemas.microsoft.com/wbem/wsman/1/config/service/auth'}
|
|
tree = ElementTree.fromstring(data_xml)
|
|
|
|
for (tag, value) in tag_map.items():
|
|
if value is not None:
|
|
if value:
|
|
new_value = "true"
|
|
else:
|
|
new_value = "false"
|
|
|
|
node = tree.find('.//cfg:%s' % tag, namespaces=ns)
|
|
|
|
if node.text.lower() != new_value:
|
|
node.text = new_value
|
|
data_xml = ElementTree.tostring(tree)
|
|
session.Put(self._SERVICE_AUTH_URI, data_xml)
|