diff options
Diffstat (limited to 'cpp/src/qpid/broker/ConnectionHandler.cpp')
| -rw-r--r-- | cpp/src/qpid/broker/ConnectionHandler.cpp | 364 |
1 files changed, 0 insertions, 364 deletions
diff --git a/cpp/src/qpid/broker/ConnectionHandler.cpp b/cpp/src/qpid/broker/ConnectionHandler.cpp deleted file mode 100644 index 3f97e5b9de..0000000000 --- a/cpp/src/qpid/broker/ConnectionHandler.cpp +++ /dev/null @@ -1,364 +0,0 @@ - -/* - * - * Licensed to the Apache Software Foundation (ASF) under one - * or more contributor license agreements. See the NOTICE file - * distributed with this work for additional information - * regarding copyright ownership. The ASF licenses this file - * to you under the Apache License, Version 2.0 (the - * "License"); you may not use this file except in compliance - * with the License. You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, - * software distributed under the License is distributed on an - * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY - * KIND, either express or implied. See the License for the - * specific language governing permissions and limitations - * under the License. - * - */ - -#include "qpid/SaslFactory.h" -#include "qpid/broker/ConnectionHandler.h" -#include "qpid/broker/Connection.h" -#include "qpid/broker/SecureConnection.h" -#include "qpid/Url.h" -#include "qpid/framing/AllInvoker.h" -#include "qpid/framing/enum.h" -#include "qpid/log/Statement.h" -#include "qpid/sys/SecurityLayer.h" -#include "qpid/broker/AclModule.h" -#include "qmf/org/apache/qpid/broker/EventClientConnectFail.h" - -using namespace qpid; -using namespace qpid::broker; -using namespace qpid::framing; -using qpid::sys::SecurityLayer; -namespace _qmf = qmf::org::apache::qpid::broker; - -namespace -{ -const std::string ANONYMOUS = "ANONYMOUS"; -const std::string PLAIN = "PLAIN"; -const std::string en_US = "en_US"; -const std::string QPID_FED_LINK = "qpid.fed_link"; -const std::string QPID_FED_TAG = "qpid.federation_tag"; -const std::string SESSION_FLOW_CONTROL("qpid.session_flow"); -const std::string CLIENT_PROCESS_NAME("qpid.client_process"); -const std::string CLIENT_PID("qpid.client_pid"); -const std::string CLIENT_PPID("qpid.client_ppid"); -const int SESSION_FLOW_CONTROL_VER = 1; -const std::string SPACE(" "); -} - -void ConnectionHandler::close(connection::CloseCode code, const string& text) -{ - handler->proxy.close(code, text); -} - -void ConnectionHandler::heartbeat() -{ - handler->proxy.heartbeat(); -} - -void ConnectionHandler::handle(framing::AMQFrame& frame) -{ - AMQMethodBody* method=frame.getBody()->getMethod(); - Connection::ErrorListener* errorListener = handler->connection.getErrorListener(); - try{ - if (!invoke(static_cast<AMQP_AllOperations::ConnectionHandler&>(*handler.get()), *method)) { - handler->connection.getChannel(frame.getChannel()).in(frame); - } - }catch(ConnectionException& e){ - if (errorListener) errorListener->connectionError(e.what()); - handler->proxy.close(e.code, e.what()); - }catch(std::exception& e){ - if (errorListener) errorListener->connectionError(e.what()); - handler->proxy.close(541/*internal error*/, e.what()); - } -} - -void ConnectionHandler::setSecureConnection(SecureConnection* secured) -{ - handler->secured = secured; -} - -ConnectionHandler::ConnectionHandler(Connection& connection, bool isClient, bool isShadow) : handler(new Handler(connection, isClient, isShadow)) {} - -ConnectionHandler::Handler::Handler(Connection& c, bool isClient, bool isShadow) : - proxy(c.getOutput()), - connection(c), serverMode(!isClient), acl(0), secured(0), - isOpen(false) -{ - if (serverMode) { - - acl = connection.getBroker().getAcl(); - - FieldTable properties; - Array mechanisms(0x95); - - properties.setString(QPID_FED_TAG, connection.getBroker().getFederationTag()); - - authenticator = SaslAuthenticator::createAuthenticator(c, isShadow); - authenticator->getMechanisms(mechanisms); - - Array locales(0x95); - boost::shared_ptr<FieldValue> l(new Str16Value(en_US)); - locales.add(l); - proxy.start(properties, mechanisms, locales); - - } - - maxFrameSize = (64 * 1024) - 1; -} - - -ConnectionHandler::Handler::~Handler() {} - - -void ConnectionHandler::Handler::startOk(const framing::FieldTable& clientProperties, - const string& mechanism, - const string& response, - const string& /*locale*/) -{ - try { - authenticator->start(mechanism, response); - } catch (std::exception& /*e*/) { - management::ManagementAgent* agent = connection.getAgent(); - if (agent) { - string error; - string uid; - authenticator->getError(error); - authenticator->getUid(uid); - agent->raiseEvent(_qmf::EventClientConnectFail(connection.getMgmtId(), uid, error)); - } - throw; - } - connection.setFederationLink(clientProperties.get(QPID_FED_LINK)); - connection.setFederationPeerTag(clientProperties.getAsString(QPID_FED_TAG)); - if (connection.isFederationLink()) { - if (acl && !acl->authorise(connection.getUserId(),acl::ACT_CREATE,acl::OBJ_LINK,"")){ - proxy.close(framing::connection::CLOSE_CODE_CONNECTION_FORCED,"ACL denied creating a federation link"); - return; - } - QPID_LOG(info, "Connection is a federation link"); - } - if (clientProperties.getAsInt(SESSION_FLOW_CONTROL) == SESSION_FLOW_CONTROL_VER) { - connection.setClientThrottling(); - } - - if (connection.getMgmtObject() != 0) { - string procName = clientProperties.getAsString(CLIENT_PROCESS_NAME); - uint32_t pid = clientProperties.getAsInt(CLIENT_PID); - uint32_t ppid = clientProperties.getAsInt(CLIENT_PPID); - - if (!procName.empty()) - connection.getMgmtObject()->set_remoteProcessName(procName); - if (pid != 0) - connection.getMgmtObject()->set_remotePid(pid); - if (ppid != 0) - connection.getMgmtObject()->set_remoteParentPid(ppid); - } -} - -void ConnectionHandler::Handler::secureOk(const string& response) -{ - try { - authenticator->step(response); - } catch (std::exception& /*e*/) { - management::ManagementAgent* agent = connection.getAgent(); - if (agent) { - string error; - string uid; - authenticator->getError(error); - authenticator->getUid(uid); - agent->raiseEvent(_qmf::EventClientConnectFail(connection.getMgmtId(), uid, error)); - } - throw; - } -} - -void ConnectionHandler::Handler::tuneOk(uint16_t /*channelmax*/, - uint16_t framemax, uint16_t heartbeat) -{ - connection.setFrameMax(framemax); - connection.setHeartbeatInterval(heartbeat); -} - -void ConnectionHandler::Handler::open(const string& /*virtualHost*/, - const framing::Array& /*capabilities*/, bool /*insist*/) -{ - std::vector<Url> urls = connection.broker.getKnownBrokers(); - framing::Array array(0x95); // str16 array - for (std::vector<Url>::iterator i = urls.begin(); i < urls.end(); ++i) - array.add(boost::shared_ptr<Str16Value>(new Str16Value(i->str()))); - - //install security layer if one has been negotiated: - if (secured) { - std::auto_ptr<SecurityLayer> sl = authenticator->getSecurityLayer(connection.getFrameMax()); - if (sl.get()) secured->activateSecurityLayer(sl); - } - - isOpen = true; - proxy.openOk(array); -} - - -void ConnectionHandler::Handler::close(uint16_t replyCode, const string& replyText) -{ - if (replyCode != 200) { - QPID_LOG(warning, "Client closed connection with " << replyCode << ": " << replyText); - } - - if (replyCode == framing::connection::CLOSE_CODE_CONNECTION_FORCED) - connection.notifyConnectionForced(replyText); - - proxy.closeOk(); - connection.getOutput().close(); -} - -void ConnectionHandler::Handler::closeOk(){ - connection.getOutput().close(); -} - -void ConnectionHandler::Handler::heartbeat(){ - // For general case, do nothing - the purpose of heartbeats is - // just to make sure that there is some traffic on the connection - // within the heart beat interval, we check for the traffic and - // don't need to do anything in response to heartbeats. The - // exception is when we are in fact the client to another broker - // (i.e. an inter-broker link), in which case we echo the - // heartbeat back to the peer - if (!serverMode) proxy.heartbeat(); -} - -void ConnectionHandler::Handler::start(const FieldTable& serverProperties, - const framing::Array& supportedMechanisms, - const framing::Array& /*locales*/) -{ - string requestedMechanism = connection.getAuthMechanism(); - - std::string username = connection.getUsername(); - - std::string password = connection.getPassword(); - std::string host = connection.getHost(); - std::string service("qpidd"); - - if ( connection.getBroker().isAuthenticating() ) { - sasl = SaslFactory::getInstance().create( username, - password, - service, - host, - 0, // TODO -- mgoulish Fri Sep 24 2010 - 256, - false ); // disallow interaction - } - std::string supportedMechanismsList; - bool requestedMechanismIsSupported = false; - Array::const_iterator i; - - /* - If no specific mechanism has been requested, just make - a list of all of them, and assert that the one the caller - requested is there. ( If *any* are supported! ) - */ - if ( requestedMechanism.empty() ) { - for ( i = supportedMechanisms.begin(); i != supportedMechanisms.end(); ++i) { - if (i != supportedMechanisms.begin()) - supportedMechanismsList += SPACE; - supportedMechanismsList += (*i)->get<std::string>(); - requestedMechanismIsSupported = true; - } - } - else { - requestedMechanismIsSupported = false; - /* - The caller has requested a mechanism. If it's available, - make sure it ends up at the head of the list. - */ - for ( i = supportedMechanisms.begin(); i != supportedMechanisms.end(); ++i) { - string currentMechanism = (*i)->get<std::string>(); - - if ( requestedMechanism == currentMechanism ) { - requestedMechanismIsSupported = true; - supportedMechanismsList = currentMechanism + SPACE + supportedMechanismsList; - } else { - if (i != supportedMechanisms.begin()) - supportedMechanismsList += SPACE; - supportedMechanismsList += currentMechanism; - } - } - } - - connection.setFederationPeerTag(serverProperties.getAsString(QPID_FED_TAG)); - - FieldTable ft; - ft.setInt(QPID_FED_LINK,1); - ft.setString(QPID_FED_TAG, connection.getBroker().getFederationTag()); - - string response; - if (sasl.get()) { - const qpid::sys::SecuritySettings& ss = connection.getExternalSecuritySettings(); - response = sasl->start ( requestedMechanism.empty() - ? supportedMechanismsList - : requestedMechanism, - & ss ); - proxy.startOk ( ft, sasl->getMechanism(), response, en_US ); - } - else { - response = ((char)0) + username + ((char)0) + password; - proxy.startOk ( ft, requestedMechanism, response, en_US ); - } - -} - -void ConnectionHandler::Handler::secure(const string& challenge ) -{ - if (sasl.get()) { - string response = sasl->step(challenge); - proxy.secureOk(response); - } - else { - proxy.secureOk(""); - } -} - -void ConnectionHandler::Handler::tune(uint16_t channelMax, - uint16_t maxFrameSizeProposed, - uint16_t /*heartbeatMin*/, - uint16_t heartbeatMax) -{ - maxFrameSize = std::min(maxFrameSize, maxFrameSizeProposed); - connection.setFrameMax(maxFrameSize); - - connection.setHeartbeat(heartbeatMax); - proxy.tuneOk(channelMax, maxFrameSize, heartbeatMax); - proxy.open("/", Array(), true); -} - -void ConnectionHandler::Handler::openOk(const framing::Array& knownHosts) -{ - for (Array::ValueVector::const_iterator i = knownHosts.begin(); i != knownHosts.end(); ++i) { - Url url((*i)->get<std::string>()); - connection.getKnownHosts().push_back(url); - } - - if (sasl.get()) { - std::auto_ptr<qpid::sys::SecurityLayer> securityLayer = sasl->getSecurityLayer(maxFrameSize); - - if ( securityLayer.get() ) { - secured->activateSecurityLayer(securityLayer, true); - } - - saslUserId = sasl->getUserId(); - } - - isOpen = true; -} - -void ConnectionHandler::Handler::redirect(const string& /*host*/, const framing::Array& /*knownHosts*/) -{ - -} |