2 * Copyright (c) 2016 Brocade Communication Systems and others. All rights reserved.
4 * This program and the accompanying materials are made available under the
5 * terms of the Eclipse Public License v1.0 which accompanies this distribution,
6 * and is available at http://www.eclipse.org/legal/epl-v10.html
9 package org.opendaylight.netconf.callhome.mount;
11 import com.google.common.base.Optional;
12 import com.google.common.util.concurrent.CheckedFuture;
14 import java.io.IOException;
15 import java.security.NoSuchAlgorithmException;
16 import java.security.NoSuchProviderException;
17 import java.security.PublicKey;
18 import java.security.spec.InvalidKeySpecException;
19 import java.util.ArrayList;
20 import java.util.List;
23 import org.opendaylight.controller.md.sal.binding.api.DataBroker;
24 import org.opendaylight.controller.md.sal.binding.api.DataChangeListener;
25 import org.opendaylight.controller.md.sal.binding.api.ReadOnlyTransaction;
26 import org.opendaylight.controller.md.sal.binding.api.ReadWriteTransaction;
27 import org.opendaylight.controller.md.sal.binding.api.WriteTransaction;
28 import org.opendaylight.controller.md.sal.common.api.data.AsyncDataBroker;
29 import org.opendaylight.controller.md.sal.common.api.data.AsyncDataChangeEvent;
30 import org.opendaylight.controller.md.sal.common.api.data.LogicalDatastoreType;
31 import org.opendaylight.controller.md.sal.common.api.data.ReadFailedException;
32 import org.opendaylight.netconf.callhome.protocol.AuthorizedKeysDecoder;
33 import org.opendaylight.netconf.callhome.protocol.StatusRecorder;
34 import org.opendaylight.yang.gen.v1.urn.opendaylight.callhome.device.status.rev170112.Device1;
35 import org.opendaylight.yang.gen.v1.urn.opendaylight.callhome.device.status.rev170112.Device1Builder;
36 import org.opendaylight.yang.gen.v1.urn.opendaylight.netconf.node.topology.rev150114.NetconfNode;
37 import org.opendaylight.yang.gen.v1.urn.opendaylight.netconf.node.topology.rev150114.NetconfNodeConnectionStatus;
38 import org.opendaylight.yang.gen.v1.urn.opendaylight.netconf.node.topology.rev150114.network.topology.topology.topology.types.TopologyNetconf;
39 import org.opendaylight.yang.gen.v1.urn.opendaylight.params.xml.ns.yang.netconf.callhome.server.rev161109.NetconfCallhomeServer;
40 import org.opendaylight.yang.gen.v1.urn.opendaylight.params.xml.ns.yang.netconf.callhome.server.rev161109.netconf.callhome.server.AllowedDevices;
41 import org.opendaylight.yang.gen.v1.urn.opendaylight.params.xml.ns.yang.netconf.callhome.server.rev161109.netconf.callhome.server.allowed.devices.Device;
42 import org.opendaylight.yang.gen.v1.urn.opendaylight.params.xml.ns.yang.netconf.callhome.server.rev161109.netconf.callhome.server.allowed.devices.DeviceBuilder;
43 import org.opendaylight.yang.gen.v1.urn.opendaylight.params.xml.ns.yang.netconf.callhome.server.rev161109.netconf.callhome.server.allowed.devices.DeviceKey;
44 import org.opendaylight.yang.gen.v1.urn.tbd.params.xml.ns.yang.network.topology.rev131021.NetworkTopology;
45 import org.opendaylight.yang.gen.v1.urn.tbd.params.xml.ns.yang.network.topology.rev131021.NodeId;
46 import org.opendaylight.yang.gen.v1.urn.tbd.params.xml.ns.yang.network.topology.rev131021.TopologyId;
47 import org.opendaylight.yang.gen.v1.urn.tbd.params.xml.ns.yang.network.topology.rev131021.network.topology.Topology;
48 import org.opendaylight.yang.gen.v1.urn.tbd.params.xml.ns.yang.network.topology.rev131021.network.topology.TopologyKey;
49 import org.opendaylight.yang.gen.v1.urn.tbd.params.xml.ns.yang.network.topology.rev131021.network.topology.topology.Node;
50 import org.opendaylight.yang.gen.v1.urn.tbd.params.xml.ns.yang.network.topology.rev131021.network.topology.topology.NodeKey;
51 import org.opendaylight.yangtools.concepts.ListenerRegistration;
52 import org.opendaylight.yangtools.yang.binding.DataObject;
53 import org.opendaylight.yangtools.yang.binding.InstanceIdentifier;
54 import org.slf4j.Logger;
55 import org.slf4j.LoggerFactory;
58 class CallhomeStatusReporter implements DataChangeListener, StatusRecorder, AutoCloseable {
59 private static final InstanceIdentifier<Topology> NETCONF_TOPO_IID =
60 InstanceIdentifier.create(NetworkTopology.class).child(Topology.class,
61 new TopologyKey(new TopologyId(TopologyNetconf.QNAME.getLocalName())));
63 private static final Logger LOG = LoggerFactory.getLogger(CallhomeStatusReporter.class);
65 private final DataBroker dataBroker;
66 private final ListenerRegistration<DataChangeListener> reg;
68 CallhomeStatusReporter(DataBroker broker) {
69 this.dataBroker = broker;
70 this.reg = dataBroker.registerDataChangeListener(LogicalDatastoreType.OPERATIONAL, NETCONF_TOPO_IID.child(Node.class),
71 this, AsyncDataBroker.DataChangeScope.SUBTREE);
75 public void onDataChanged(AsyncDataChangeEvent<InstanceIdentifier<?>, DataObject> change) {
76 for (InstanceIdentifier<?> removedPath : change.getRemovedPaths()) {
77 if(removedPath.getTargetType() != NetconfNode.class)
80 final NodeId nodeId = getNodeId(removedPath);
82 handleDisconnectedNetconfNode(nodeId);
87 for (Map.Entry<InstanceIdentifier<?>, DataObject> entry : change.getUpdatedData().entrySet()) {
88 if (entry.getKey().getTargetType() == NetconfNode.class) {
89 NodeId nodeId = getNodeId(entry.getKey());
91 NetconfNode nnode = (NetconfNode) entry.getValue();
92 handledNetconfNode(nodeId, nnode);
99 private NodeId getNodeId(final InstanceIdentifier<?> path) {
100 NodeKey key = path.firstKeyOf(Node.class);
101 return key != null ? key.getNodeId() : null;
104 private void handledNetconfNode(NodeId nodeId, NetconfNode nnode) {
105 NetconfNodeConnectionStatus.ConnectionStatus csts = nnode.getConnectionStatus();
109 handleConnectedNetconfNode(nodeId);
113 case UnableToConnect: {
114 handleUnableToConnectNetconfNode(nodeId);
120 private void handleConnectedNetconfNode(NodeId nodeId) {
121 // Fully connected, all services for remote device are
122 // available from the MountPointService.
123 LOG.debug("NETCONF Node: {} is fully connected", nodeId.getValue());
125 Device opDev = readAndGetDevice(nodeId);
127 LOG.warn("No corresponding callhome device found - exiting.");
129 Device modifiedDevice = withConnectedStatus(opDev);
130 if(modifiedDevice == null)
132 LOG.info("Setting successful status for callhome device id:{}.", nodeId);
133 writeDevice(nodeId, modifiedDevice);
137 private void handleDisconnectedNetconfNode(NodeId nodeId) {
138 LOG.debug("NETCONF Node: {} disconnected", nodeId.getValue());
140 Device opDev = readAndGetDevice(nodeId);
142 LOG.warn("No corresponding callhome device found - exiting.");
144 Device modifiedDevice = withDisconnectedStatus(opDev);
145 if(modifiedDevice == null)
147 LOG.info("Setting disconnected status for callhome device id:{}.", nodeId);
148 writeDevice(nodeId, modifiedDevice);
152 private void handleUnableToConnectNetconfNode(NodeId nodeId) {
153 // The maximum configured number of reconnect attempts
154 // have been reached. No more reconnects will be
155 // attempted by the Netconf Connector.
156 LOG.debug("NETCONF Node: {} connection failed", nodeId.getValue());
158 Device opDev = readAndGetDevice(nodeId);
160 LOG.warn("No corresponding callhome device found - exiting.");
162 Device modifiedDevice = withFailedStatus(opDev);
163 if(modifiedDevice == null)
165 LOG.info("Setting failed status for callhome device id:{}.", nodeId);
166 writeDevice(nodeId, modifiedDevice);
170 void asForceListedDevice(String id, PublicKey serverKey) {
171 NodeId nid = new NodeId(id);
172 Device device = newDevice(id, serverKey, Device1.DeviceStatus.DISCONNECTED);
173 writeDevice(nid, device);
176 void asUnlistedDevice(String id, PublicKey serverKey) {
177 NodeId nid = new NodeId(id);
178 Device device = newDevice(id, serverKey, Device1.DeviceStatus.FAILEDNOTALLOWED);
179 writeDevice(nid, device);
182 private Device newDevice(String id, PublicKey serverKey, Device1.DeviceStatus status) {
183 String sshEncodedKey = serverKey.toString();
185 sshEncodedKey = AuthorizedKeysDecoder.encodePublicKey(serverKey);
186 } catch (IOException e) {
188 LOG.warn("Unable to encode public key to ssh format.");
190 Device1 d1 = new Device1Builder().setDeviceStatus(Device1.DeviceStatus.FAILEDNOTALLOWED).build();
191 DeviceBuilder builder = new DeviceBuilder()
193 .setKey(new DeviceKey(id))
194 .setSshHostKey(sshEncodedKey)
195 .addAugmentation(Device1.class, d1);
197 return builder.build();
200 private Device readAndGetDevice(NodeId nodeId) {
201 Optional<Device> opDevGet = readDevice(nodeId);
202 if (opDevGet != null) {
203 if (opDevGet.isPresent()) {
204 return opDevGet.get();
211 private Optional<Device> readDevice(NodeId nodeId) {
212 ReadOnlyTransaction opTx = dataBroker.newReadOnlyTransaction();
214 InstanceIdentifier<Device> deviceIID = buildDeviceInstanceIdentifier(nodeId);
215 CheckedFuture<Optional<Device>, ReadFailedException> devFuture =
216 opTx.read(LogicalDatastoreType.OPERATIONAL, deviceIID);
219 return devFuture.checkedGet();
220 } catch (ReadFailedException e) {
225 private void writeDevice(NodeId nodeId, Device modifiedDevice) {
226 ReadWriteTransaction opTx = dataBroker.newReadWriteTransaction();
227 opTx.merge(LogicalDatastoreType.OPERATIONAL, buildDeviceInstanceIdentifier(nodeId), modifiedDevice);
231 private InstanceIdentifier<Device> buildDeviceInstanceIdentifier(NodeId nodeId) {
232 return InstanceIdentifier.create(NetconfCallhomeServer.class)
233 .child(AllowedDevices.class)
234 .child(Device.class, new DeviceKey(nodeId.getValue()));
237 private Device withConnectedStatus(Device opDev) {
238 Device1 status = new Device1Builder().setDeviceStatus(Device1.DeviceStatus.CONNECTED).build();
239 return new DeviceBuilder().addAugmentation(Device1.class, status).setUniqueId(opDev.getUniqueId())
240 .setSshHostKey(opDev.getSshHostKey()).build();
243 private Device withFailedStatus(Device opDev) {
244 Device1 status = new Device1Builder().setDeviceStatus(Device1.DeviceStatus.FAILED).build();
245 return new DeviceBuilder().addAugmentation(Device1.class, status).setUniqueId(opDev.getUniqueId())
246 .setSshHostKey(opDev.getSshHostKey()).build();
249 private Device withDisconnectedStatus(Device opDev) {
250 Device1 status = new Device1Builder().setDeviceStatus(Device1.DeviceStatus.DISCONNECTED).build();
251 return new DeviceBuilder().addAugmentation(Device1.class, status).setUniqueId(opDev.getUniqueId())
252 .setSshHostKey(opDev.getSshHostKey()).build();
255 private Device withFailedAuthStatus(Device opDev) {
256 Device1 status = new Device1Builder().setDeviceStatus(Device1.DeviceStatus.FAILEDAUTHFAILURE).build();
257 return new DeviceBuilder().addAugmentation(Device1.class, status).setUniqueId(opDev.getUniqueId())
258 .setSshHostKey(opDev.getSshHostKey()).build();
261 private void setDeviceStatus(Device device) {
262 WriteTransaction tx = dataBroker.newWriteOnlyTransaction();
263 InstanceIdentifier<Device> Device_IID =
264 InstanceIdentifier.create(NetconfCallhomeServer.class)
265 .child(AllowedDevices.class)
266 .child(Device.class, device.getKey());
268 tx.merge(LogicalDatastoreType.OPERATIONAL, Device_IID, device);
273 private AllowedDevices getDevices() {
274 ReadOnlyTransaction rxTransaction = dataBroker.newReadOnlyTransaction();
275 CheckedFuture<Optional<AllowedDevices>, ReadFailedException> devicesFuture =
276 rxTransaction.read(LogicalDatastoreType.OPERATIONAL, IetfZeroTouchCallHomeServerProvider.ALL_DEVICES);
279 Optional<AllowedDevices> opt = devicesFuture.checkedGet();
280 if (opt.isPresent()) {
281 AllowedDevices devices = opt.get();
284 } catch (ReadFailedException e) {
285 LOG.error("Error trying to read the whitelist devices: {}", e);
291 private List<Device> getDevicesAsList() {
292 AllowedDevices devices = getDevices();
293 return (devices == null) ? new ArrayList<Device>() : devices.getDevice();
297 public void reportFailedAuth(PublicKey sshKey) {
298 AuthorizedKeysDecoder decoder = new AuthorizedKeysDecoder();
300 for (Device device : getDevicesAsList()) {
301 String keyString = device.getSshHostKey();
304 PublicKey pubKey = decoder.decodePublicKey(keyString);
305 if (sshKey.getAlgorithm().equals(pubKey.getAlgorithm()) && sshKey.equals(pubKey)) {
306 Device failedDevice = withFailedAuthStatus(device);
307 if(failedDevice==null)
309 LOG.info("Setting auth failed status for callhome device id:{}.", failedDevice.getUniqueId());
310 setDeviceStatus(failedDevice);
313 } catch (InvalidKeySpecException | NoSuchAlgorithmException | NoSuchProviderException e) {
314 LOG.error("Failed decoding a device key with host key: {} {}", keyString, e);
319 LOG.error("No match found for the failed auth device (should have been filtered by whitelist). Key: {}",
324 public void close() throws Exception {