IiIpddlZddlZddlZddlZddlmZddlmZddlm Z ddl m Z m Z ddl mZddlmZddlmZdd lmZdd lmZd d lmZmZd d lmZd dlmZej<eZ dZ!eee!dZ"eee!dZ#eee!dZ$dZ%dZ&dZ'dZ(dZ)y)Nwraps) timedelta)settings)renderredirect) JsonResponse)timezone) csrf_exempt) require_POST)User)ComputerGlobalSettings)sync_authorized_keys)JamfAPIc.tfd}|S)zW Decorator to ensure incoming API requests contain the correct Pre-Shared Key. cttdd}|s$tjdt ddidS|j j dd}|rh|jd |jk7rD|jj d d }tjd |d t ddidS|g|i|S)NAURA_API_SECRETzQSECURITY FAULT: AURA_API_SECRET is not configured in aura_ras_server/settings.py!errorzServer configuration errorstatus AuthorizationzBearer REMOTE_ADDRz Unknown IPz%Unauthorized API access attempt from z. Invalid Bearer token. Unauthorizedi) getattrrloggerrr headersgetstripMETAwarning)requestargskwargsexpected_secret auth_header client_ip view_funcs /var/www/aura-ras/api/views.py _wrapped_viewz)require_api_secret.._wrapped_views!(,=tD LLl m*F GPST Too))/2> {002@U@U@W?X6YY (( EI NNB9+Mde f. 9#F F242622r)r+r-s` r,require_api_secretr/s$ 933 r.cx tj|j}|jd}|jd}|jd}|jd}t ||||gs$t j dtddid Stjj||||d  \}}tt jd |d |dtdd|j|j|jdd S#tj $rCt j d|j"jdtddid cYSt$$rE}t j'dt)|dtdt)|id cYd}~Sd}~wwxYw)Njssidrole public_keyhostnamez>Agent registration failed: Missing required fields in payload.rz"Missing required fields in payloadr)r2r3r4)r1defaultszAgent successfully registered: z (JSSID: )successz$Registered successfully with AuraRAS)rmessageidssh_portvnc_portz4Invalid JSON format received at register_agent from rInvalid JSON formatz"Critical error in register_agent: Texc_infor)jsonloadsbodyr!allrr$r robjectsupdate_or_createrinfor:r;r<JSONDecodeErrorr# Exceptionrstr) r%datar1r2r3r4computercreatedes r,register_agentrO0s$;zz',,'!xxXXl+ 88J'E4X67 NN[ \*N OX[\ \$,,==($> '  5hZyqQR=++ )) ))       JMgllN^N^_lNmMnopW&;DAF9,F94:F4.F94F9c tj|j}|jd}|st ddidSt j j|j\}}|dkDr2ttjd|t d d d d Stjd |dt ddd dS#tj$rCtjd|jjdt ddidcYSt$rE}tj!dt#|dt dt#|idcYd}~Sd}~wwxYw)Nr1rMissing jssid in payloadr5rr1rzz$Critical error in unregister_agent: Tr?r)rArBrCr!r rrEfilterdeleterrrGr$rHr#rIrrJ)r%rKr1 deleted_count_rNs r,unregister_agentrZZsR;zz',,'!*D EcR R#++222?FFH q 1  " KKVW\V]^ _9A\ ]fij j NNGwkZ [;CW Xade e   JOPWP\P\P`P`anPoOpqrW&;z!Critical error in checkin_agent: Tr?r)rArBrCr!r rrErVfirstrr$r4r\r]r^r now last_checkinsaverloadagent_checkin_interval_minutesrHr#rIrrJ)r%rKr1rL settings_objrNs r, checkin_agentrgvs;zz',,'!*D EcR R##***7==? NNDUGKjk l*V W`cd d  4 3Cx0 d "T/=RH$: $ T+5F 2 T !4;O8#8 (  %**, (4(S(S     JLW\\M]M]^kMlLmnoW&; 24 hours)yellowz+Offline / Sleeping (Missed recent check-in)g?z 127.0.0.1T:ESTABribluezActive Session EstablishedgreenzOnline & Tunnel Readyz*Tunnel Disconnected (Network Interruption)zapi/dashboard.html) computers user_role user_theme laps_enabled)2rrduseris_authenticatedrr2themejamf_laps_enabledrrErDorder_byrV subprocess check_outputdecoderIrrrJr raintre ValueError TypeErrorrbr total_secondsabs status_color status_textsocketAF_INET SOCK_STREAM settimeoutconnectr;timeoutConnectionRefusedErrorOSErrorr< splitlines startswithsplitlenendswithrsplit IndexErrorr)r%rfrir2rrr~active_connectionsrNrainterval_minutesgrace_period_secondscomptime_since_checkin seconds_since is_listening is_actives ssh_suffix vnc_suffixlineparts local_addr peer_addr peer_port_str peer_ports r, dashboardrs!&&(L||$$',, 48&w||J!( f9=Ar9r|55x} D D ((,,.77HI ((//w||/LUUVefI !+!8!8$!H!O!OPW!X  lln ""<#N#NO !12 5;8 TD<@Mq #M 2 u$$)!#I !55$,!#P  % ! v~~v7I7IJ,a T* ; ">?'+ , #$T]]O!4J#$T]]O!4J 2 = = ?-??73$(JJLE"5zQ-21X ,1!H #-#6#6z#BjFYFYZdFe%-8A8H8Ha8PQS8T 47 4F +4+=8-"!,2)+G(,3)+B((0D%'SD$q8 Tv  '/$ 2 [  LLMcRSfXV W  I& "!  "2,,(>H*-7 +C%-(,%-sf#&L+M#52N'1M;N2'N-+ M 4!MM #M87M8;N NN*)N*-O?Oc b|jjs tdSt|jdd}|r |jnd}|dvr tdSt j jdjd}tj jjd}|jd k(r|jjd }|jjd }|rtj j| j}|rU|j j#|t$j'd |jj(d|j*dtdSt-|d||||r|j.dSddS)Noidc_authentication_initrirjrlr) profile__roleusernamer4POST computer_idro)r:zUser 'z$' updated assignments for computer 'z'.computer_assignmentszapi/assignments.htmlrk)r~ customersrr)rrrrr2r rErVrrrDmethodrr!getlistr`rosetrrGrr4rr)r%rir2customer_usersr~comp_idselected_user_idsrs r,rrs{ << ( (233gllIt4G"7<< D DD $$\\((z(BKKJWN  $$&// ;I~~,,""=1#LL001AB ##**g*6<<>D##''(9: fW\\%:%:$;;_`d`m`m_nnpqr.// '1#'.gmm 4 5; 4 r.c t|jjs tdSt|jdd}|r |jnd}|dvr tdSt j }d}|jdk(r|rZ|jjd}|d vr||_ |jjd }|r||_ |j|d k(r|jjd |_ |jjd |_|jjd}|r||_|jjddk(|_|jjdd|_|jjdd|_|jjd}|r |j'rt)||_|jjddk(|_|j,r>|jjd} | r(| j'rt)| |_nd|_|jt0j3d|jj4dd}t7|d||||r |jnd|dS)Nrrirj)rmrnrjrFrr)rklightdarkr rmjamf_urljamf_client_idjamf_client_secretronprestage_laps_typejamfmacoslaps_ea_idrrecustom_server_port_enabledcustom_server_porti&z"Global server settings updated by .Tzapi/settings.htmlrk)rrrirr8)rrrrr2rrdrrr!rr rcrrrrrrisdigitrrerrrrGrr) r%rir2rfr8rr new_secretintervalports r,server_settingsr#sR << ( (233gllIt4G"7<< D PP $$!&&(LG~~ LL$$W-E11 % ||'' 3H#+ LLN ) )$+LL$4$4Z$@L !*1,,*:*:;K*LL ' ))*>?J2< /-4\\-=-=>Q-RVZ-ZL *.5ll.>.>?SU[.\L ++2<<+;+;A(m ;6=ll6F6FGc6dhl6lL 366||''(<=DLLN69$iL326 /     KK|jd k(sN|jd }`|jdk(r,|j r |j#||j } | rd}td||dS#t$$rI} t&j)d|dt+| dtdt+| ddcYd} ~ Sd} ~ wwxYw)NrirrrSrrl Access Denied userSourceJMFrMDMr macoslapspaeadminr8)r jamf_user prestage_userz(Error fetching LAPS usernames for JSSID : Tr?r)rrhasattrr rir2rrdrrrrget_management_idget_laps_accountsr!rrget_extension_attributerIrrrJ) r%r1rfapimgmt_idaccountsrraccea_valrNs r,laps_usernamesras << ( ( i0Pw>JSVWW||  (YYw?KTWXXP%**, l++\-H-H,JiJij''.((1   8Cww|$-GGJ/ &%/22f<$'GGJ$7M  8  * *k 9++44ULG GGc |jjrt|jdstddddS|jjj dvr=t jd|jjd tdd ddStj}|jstdd dd S t|j|j|j}t j!d|jjd |d|d|dk(rg|j#|}|j%|}t'd|Dd}|stddddS|j)||}td|dS|dk(r|j*dk(rX|j,stdddd S|j/||j,}|stddddStd|dS|j#|}|j%|}t'd|Dd}|stddddS|j)||}td|dStdddd S#t0$rL} t j3d|dt5| d tdd!t5| dd"cYd} ~ Sd} ~ wwxYw)#NrirrrSrrrlzUser z? attempted to view LAPS password without sufficient privileges.rz$LAPS is currently disabled globally.r5z# requested LAPS password for JSSID z (Account Type: r7rc3hK|]*}|jddk(s|jd,yw)rrclientAccountIdNr!.0rs r, z laps_password..s,j377S_K`diKi!23j22z"Jamf Admin LAPS account not found.rUr8)rpasswordprestagerz"macOSLAPS EA ID is not configured.z*macOSLAPS password was empty or not found.c3hK|]*}|jddk(s|jd,yw)rrrNrrs r,rz laps_password..s,nCswwWcOdhmOmSWW%67nrz&PreStage Admin LAPS account not found.zInvalid account type specified.z'Error fetching LAPS password for JSSID rTr?zJamf API Error: r)rrrr rir2rr$rrrdrrrrrrGrrnextget_laps_passwordrrrrIrrJ) r%r1 account_typerfrrrguidrrNs r, laps_passwordrs << ( ( i0Pw>JSVWW||  (YYw||4455tuvw?KTWXX!&&(L  ) )w;abknoo"el++\-H-H,JiJij eGLL1122UV[U\\lmylzz{|} 6 !++E2G,,W5HjxjlpqD#wCg$hqtuu,,Wd;H9( KL L Z '..+=#33'7Gk(luxyy66ul>Z>Z['7Gs(t~ABB#yh$OPP//6009n8nptu'7Go(py|}}00$?#yh$OPP7?` ajmn n e >ugRAxP[_ `w=McRSfX;VW`cddesK B)I:7I:/I:-I:5 I:AI: I:*I:: KAK K K)*rArrlogging functoolsrdatetimer django.confrdjango.shortcutsrr django.httpr django.utilsr django.views.decorators.csrfr django.views.decorators.httpr django.contrib.auth.modelsr modelsrr ssh_utilsrjamf_apir getLogger__name__rr/rOrZrgrrrrrr.r,rs  -$!45+,+   8 $0  %; %;N  ; ;2   ;  ;HdL@:|$PL.er.