nexpose_pxgrid 0.1.2-java

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: ecba8523665d3a8a4c2f56417082f8a44c6a9ff8
+  data.tar.gz: 38d4c4353f6a41bd9dbd6ee0cabe6567a0e37ced
+SHA512:
+  metadata.gz: 72ea383d0d355b2504ff804c4d9cef347c817109b4e2f7a508b3e803f5c938a2485af36593a0f0e0c2da0f8baca90d98a46a1d8faf24e1285131b7516eb0bc70
+  data.tar.gz: 37a8bba9738599e3cfc91d6fc1a7047e182b19251088a6e3bbd7ea9cd0062eb3bf92e671f0f4183c6ba34e662fb7ec774f152910715126b5e8ac14cdb3e537e5

data/.gitignore

@@ -0,0 +1,12 @@
+/.bundle/
+/.yardoc
+/Gemfile.lock
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/
+.idea/*
+*DS_Store*
+*.log

data/.travis.yml

@@ -0,0 +1,4 @@
+language: ruby
+rvm:
+  - 1.9.3
+before_install: gem install bundler -v 1.10.2

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in pxnx.gemspec
+gemspec

data/LICENCE.APACHE

@@ -0,0 +1,144 @@
+Apache License
+
+Version 2.0, January 2004
+
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction, and distribution as
+defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by the copyright owner that
+is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all other entities that
+control, are controlled by, or are under common control with that entity. For the purposes
+of this definition, "control" means (i) the power, direct or indirect, to cause the
+direction or management of such entity, whether by contract or otherwise, or (ii) ownership
+of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of
+such entity.
+
+"You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by
+this License.
+
+"Source" form shall mean the preferred form for making modifications, including but not
+limited to software source code, documentation source, and configuration files.
+
+"Object" form shall mean any form resulting from mechanical transformation or translation of
+a Source form, including but not limited to compiled object code, generated documentation,
+and conversions to other media types.
+
+"Work" shall mean the work of authorship, whether in Source or Object form, made available
+under the License, as indicated by a copyright notice that is included in or attached to the
+work (an example is provided in the Appendix below).
+
+"Derivative Works" shall mean any work, whether in Source or Object form, that is based on
+(or derived from) the Work and for which the editorial revisions, annotations, elaborations,
+or other modifications represent, as a whole, an original work of authorship. For the
+purposes of this License, Derivative Works shall not include works that remain separable
+from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works
+thereof.
+
+"Contribution" shall mean any work of authorship, including the original version of the Work
+and any modifications or additions to that Work or Derivative Works thereof, that is
+intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by
+an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the
+purposes of this definition, "submitted" means any form of electronic, verbal, or written
+communication sent to the Licensor or its representatives, including but not limited to
+communication on electronic mailing lists, source code control systems, and issue tracking
+systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and
+improving the Work, but excluding communication that is conspicuously marked or otherwise
+designated in writing by the copyright owner as "Not a Contribution."
+
+"Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a
+Contribution has been received by Licensor and subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of this License, each
+Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge,
+royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of,
+publicly display, publicly perform, sublicense, and distribute the Work and such Derivative
+Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of this License, each
+Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge,
+royalty-free, irrevocable (except as stated in this section) patent license to make, have
+made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license
+applies only to those patent claims licensable by such Contributor that are necessarily
+infringed by their Contribution(s) alone or by combination of their Contribution(s) with the
+Work to which such Contribution(s) was submitted. If You institute patent litigation against
+any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or
+a Contribution incorporated within the Work constitutes direct or contributory patent
+infringement, then any patent licenses granted to You under this License for that Work shall
+terminate as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works
+thereof in any medium, with or without modifications, and in Source or Object form, provided
+that You meet the following conditions:
+
+You must give any other recipients of the Work or Derivative Works a copy of this License;
+and
+
+You must cause any modified files to carry prominent notices stating that You changed the
+files; and
+
+You must retain, in the Source form of any Derivative Works that You distribute, all
+copyright, patent, trademark, and attribution notices from the Source form of the Work,
+excluding those notices that do not pertain to any part of the Derivative Works; and
+
+If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative
+Works that You distribute must include a readable copy of the attribution notices contained
+within such NOTICE file, excluding those notices that do not pertain to any part of the
+Derivative Works, in at least one of the following places: within a NOTICE text file
+distributed as part of the Derivative Works; within the Source form or documentation, if
+provided along with the Derivative Works; or, within a display generated by the Derivative
+Works, if and wherever such third-party notices normally appear. The contents of the NOTICE
+file are for informational purposes only and do not modify the License. You may add Your own
+attribution notices within Derivative Works that You distribute, alongside or as an addendum
+to the NOTICE text from the Work, provided that such additional attribution notices cannot
+be construed as modifying the License. You may add Your own copyright statement to Your
+modifications and may provide additional or different license terms and conditions for use,
+reproduction, or distribution of Your modifications, or for any such Derivative Works as a
+whole, provided Your use, reproduction, and distribution of the Work otherwise complies with
+the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution
+intentionally submitted for inclusion in the Work by You to the Licensor shall be under the
+terms and conditions of this License, without any additional terms or conditions.
+Notwithstanding the above, nothing herein shall supersede or modify the terms of any
+separate license agreement you may have executed with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade names, trademarks,
+service marks, or product names of the Licensor, except as required for reasonable and
+customary use in describing the origin of the Work and reproducing the content of the NOTICE
+file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing,
+Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS"
+BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including,
+without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT,
+MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for
+determining the appropriateness of using or redistributing the Work and assume any risks
+associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory, whether in tort
+(including negligence), contract, or otherwise, unless required by applicable law (such as
+deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be
+liable to You for damages, including any direct, indirect, special, incidental, or
+consequential damages of any character arising as a result of this License or out of the use
+or inability to use the Work (including but not limited to damages for loss of goodwill,
+work stoppage, computer failure or malfunction, or any and all other commercial damages or
+losses), even if such Contributor has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative
+Works thereof, You may choose to offer, and charge a fee for, acceptance of support,
+warranty, indemnity, or other liability obligations and/or rights consistent with this
+License. However, in accepting such obligations, You may act only on Your own behalf and on
+Your sole responsibility, not on behalf of any other Contributor, and only if You agree to
+indemnify, defend, and hold each Contributor harmless for any liability incurred by, or
+claims asserted against, such Contributor by reason of your accepting any such warranty or
+additional liability.
+
+END OF TERMS AND CONDITIONS

data/LICENSE.MIT

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2015 Damian Finol
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,49 @@
+# PxnxJruby
+
+Welcome to your new gem! In this directory, you'll find the files you need to be able to package up your Ruby library into a gem. Put your Ruby code in the file `lib/pxnx_jruby`. To experiment with that code, run `bin/console` for an interactive prompt.
+
+TODO: Delete this and the text above, and describe your gem
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'pxnx_jruby'
+```
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install pxnx_jruby
+
+## From Cisco Docs
+If the client is connecting to the pxGrid Controller for the first time, an account is established on the pxGrid Controller.
+In pxGrid’s auto-registration mode (set by administrator through the ISE web-based user interface),
+the client is allowed to communicate once the account is created.
+Whereas if auto registration mode is turned off, the node and authorization group assignment of the
+node remains in Pending Approval mode and not allowed to communicate over pxGrid until it is approved by the administrator.
+Also, the user must be part of the EPS group.
+
+## Usage
+
+TODO: Write usage instructions here
+
+## Development
+
+After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake false` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
+
+To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
+
+## Contributing
+
+Bug reports and pull requests are welcome on GitHub at https://github.com/[USERNAME]/pxnx_jruby.
+
+
+## License
+
+The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).
+

data/Rakefile

@@ -0,0 +1,31 @@
+#require "bundler/gem_tasks"
+require 'rake'
+require 'ipaddr'
+require 'bundler'
+require 'pxnx_jruby'
+
+namespace :pxnx do
+  task :default => :simulate
+  # TODO. (!) Read the parameters from arg/config/env/etc.
+  desc 'Authenticate and connect through Radius'
+  task :simulate, [:ip] => [:authenticate, :connect] do |t, args|
+    puts 'Sent Radius packets. Check log file.'
+  end
+
+  desc 'Authenticate to Radius'
+  task :authenticate, :ip do |t, args|
+    args.with_defaults(ip: PxnxJruby.random_ip)
+    @ip = args[:ip]
+    sh "java -cp #{File.expand_path File.dirname(__FILE__)}/RadiusSimulator.jar -DUSERNAME=dfinol -DPASSWORD=Nexpose4lyfe -DCALLING_STATION_ID=11:22:33:44:55:66 -DAUDIT_SESSION_ID=1001 -DFRAMED_IP_ADDRESS=#{@ip} -DRADIUS_SECRET=nxadmin -DFRAMED_IP_MASK=255.255.255.255 RadiusAuthentication 10.4.91.100"
+  end
+
+  desc 'Start accounting'
+  task :connect, :ip  do |t, args|
+    sh "java -cp #{File.expand_path File.dirname(__FILE__)}/RadiusSimulator.jar -DUSERNAME=dfinol -DPASSWORD=Nexpose4lyfe -DCALLING_STATION_ID=11:22:33:44:55:66 -DAUDIT_SESSION_ID=1001 -DFRAMED_IP_ADDRESS=#{@ip} -DRADIUS_SECRET=nxadmin -DFRAMED_IP_MASK=255.255.255.255 RadiusAccountingStart 10.4.91.100"
+  end
+
+  desc 'Stop accounting'
+  task :stop, :ip  do |t, args|
+    sh "java -cp #{File.expand_path File.dirname(__FILE__)}/RadiusSimulator.jar -DUSERNAME=dfinol -DPASSWORD=Nexpose4lyfe -DCALLING_STATION_ID=11:22:33:44:55:66 -DAUDIT_SESSION_ID=1001 -DFRAMED_IP_ADDRESS=#{@ip} -DRADIUS_SECRET=nxadmin -DFRAMED_IP_MASK=255.255.255.255 RadiusAccountingStop 10.4.91.100"
+  end
+end

data/bin/logback.xml

@@ -0,0 +1,17 @@
+<configuration debug="false" scan="false">
+    <appender name="TIME_BASED_FILE" class="ch.qos.logback.core.rolling.RollingFileAppender">
+        <File>../lib/logs/rapid7_cisco.log</File>
+        <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
+            <!-- Rotates every week -->
+            <fileNamePattern>../lib/logs/rapid7_cisco.%d{yyyy/ww}.log</fileNamePattern>
+            <maxHistory>4</maxHistory>
+        </rollingPolicy>
+        <encoder>
+            <pattern>%date{ISO8601} [%thread] %-5level %logger{34} - %msg%n</pattern>
+        </encoder>
+    </appender>
+
+    <root level="DEBUG">
+        <appender-ref ref="TIME_BASED_FILE" />
+    </root>
+</configuration>

data/bin/pxnx.rb

@@ -0,0 +1,34 @@
+#!/usr/bin/env ruby
+require 'pxnx_jruby'
+require 'yaml'
+require 'pxnx_jruby/nx_logger'
+require 'pxnx_jruby/version'
+
+begin
+# Path to the pxnx Configuration file.
+  PXNX_CONFIG_PATH = File.join(File.dirname(__FILE__),
+                               '../lib/pxnx_jruby/config/pxnx.config')
+  # Read in pxnx options from pxnx.config.
+  pxnx_options = begin
+    YAML.load_file(PXNX_CONFIG_PATH)
+  rescue ArgumentError => e
+    raise "Could not parse YAML #{PXNX_CONFIG_PATH} : #{e.message}"
+  end
+
+  log = PxnxJruby::NxLogger.instance
+  log.setup_statistics_collection(PxnxJruby::VENDOR, PxnxJruby::PRODUCT, PxnxJruby::VERSION)
+  log.setup_logging(pxnx_options[:logging_enabled], 
+                    pxnx_options[:log_level] || 'info')
+
+  connection = PxnxJruby.create_connection(pxnx_options)
+  handler = PxnxJruby::SessionDirectoryNotification.new
+  connection.connect
+  sleep(5)
+  pxnx_options[:grid_connection] = connection
+  PxnxJruby::ConnectionManager.instance.setup(pxnx_options)
+  # Subscribes to SessionDirectoryNotification!
+  Java::com.cisco.pxgrid.stub.identity.SessionDirectoryFactory.registerNotification(connection.grid, handler)
+  # TODO: Exception handling.
+rescue java.lang.IllegalStateException => e
+  puts("Error when executing pxnx! The error was <#{e.message}> and backtrace was <#{e.backtrace.join("\n")}>.")
+end

data/bin/pxnx_daemon.rb

@@ -0,0 +1,105 @@
+#!/usr/bin/env ruby
+require '../lib/pxnx_jruby/spoon/pxnx_runner'
+require 'timeout'
+
+def setup()
+    @pid_dir = File.join(File.dirname(__FILE__), '.')
+    @name = "pxnx_daemon_process"
+    @pid_path = File.join(@pid_dir, "#{@name}.pid")
+    @pid = get_pid_from_file()
+    @timeout = 120
+end
+
+def create_pid_file(pid)
+    begin
+        open(@pid_path, 'w') do |f|
+        f.puts pid
+    end
+    rescue => e
+        STDERR.puts "Error: Unable to open #{@pid_path} for writing:\n\t <#{e.message}>"
+        exit
+    end
+end
+
+def get_pid_from_file
+    @pid = nil
+    open(@pid_path, 'r') do |f|
+        @pid = f.readline.to_s.gsub(/[^0-9]/,'')
+    end
+    rescue Errno::ENOENT => e
+        #File does not exist. Leave PID at nil.
+    @pid.to_i unless @pid.nil?
+end
+
+def remove_pid_file
+    File.unlink(@pid_path)
+    rescue => e
+        STDERR.puts "ERROR: Unable to unlink #{@pid_path}:\n\t <#{e.message}>"
+        exit
+end
+
+def running?
+    setup()
+    return false if @pid.nil?
+    begin
+        Process.kill(0, @pid.to_i)
+        return true
+    rescue Errno::ESRCH, TypeError  => e
+        #STDERR.puts "Error querying PID <#{@pid}>! Error was <#{e.message}>";
+        return false
+    rescue Errno::EPERM
+      STDERR.puts "No permission to query #{@pid}!";
+      return false
+    rescue => e
+        STDERR.puts "ERROR: Unable to check PXNX status:\n\t <#{e.message}>"
+        return false
+    end
+end
+
+def stop
+    setup()
+    abort "PXNX is not running!" unless running?
+    begin
+        STDOUT.puts "Stopping process #{@pid}..."
+        Timeout.timeout(@timeout) do
+          Process.kill("TERM", @pid.to_i)
+          sleep 5 while running?
+        end
+    rescue Timeout::Error
+        STDERR.puts "Shutdown timeout... forcing shutdown!"
+        Process.kill("KILL", @pid.to_i)
+        sleep 5 while process_exists?
+      end
+
+	remove_pid_file
+	STDOUT.puts "Process stopped."
+end
+
+def start()
+    abort "Process already running!" if running?
+      if pid = Spoon.spawnp('jruby', *ARGV)
+        create_pid_file(pid)
+        STDOUT.puts "Process started with pid #{pid}"
+      else
+        Process.setsid
+      end
+end
+
+case ARGV.shift
+    when 'start'
+        start()
+    when 'stop'
+        stop()
+    when 'restart'
+        stop()
+        start()
+    when 'status'
+        if running?
+            STDOUT.puts "PXNX is running with pid #{@pid}"
+        else
+            STDOUT.puts "PXNX is not running."
+        end
+    else
+        STDERR.puts "Usage: jruby pxnx_daemon.rb <start|stop|restart>"
+        exit!
+end