feat(ldap): add ldap protocol support (#50)

Co-authored-by: tardc <[email protected]>
Co-authored-by: E99p1ant <[email protected]>
This commit is contained in:
Li4n0
2022-01-07 22:47:02 +08:00
committed by GitHub
co-authored by tardc E99p1ant
parent 06ae3d0555
commit fc505b0733
46 changed files with 1356 additions and 135 deletions
+1
View File
@@ -241,6 +241,7 @@ This project draws on the code of the following outstanding projects:
* [https://github.com/rmb122/rogue_mysql_server](https://github.com/rmb122/rogue_mysql_server) * [https://github.com/rmb122/rogue_mysql_server](https://github.com/rmb122/rogue_mysql_server)
* [https://github.com/256dpi/newdns](https://github.com/256dpi/newdns) * [https://github.com/256dpi/newdns](https://github.com/256dpi/newdns)
* [https://github.com/EmYiQing/JNDIScan](https://github.com/EmYiQing/JNDIScan)
### Specifically ### Specifically
+1
View File
@@ -211,6 +211,7 @@ payload,最后被扫描器发出的请求是:`['https://www.testvuln.com?url
* [https://github.com/rmb122/rogue_mysql_server](https://github.com/rmb122/rogue_mysql_server) * [https://github.com/rmb122/rogue_mysql_server](https://github.com/rmb122/rogue_mysql_server)
* [https://github.com/256dpi/newdns](https://github.com/256dpi/newdns) * [https://github.com/256dpi/newdns](https://github.com/256dpi/newdns)
* [https://github.com/EmYiQing/JNDIScan](https://github.com/EmYiQing/JNDIScan)
### 特别感谢 ### 特别感谢
+1 -1
View File
@@ -1 +1 @@
.custom-icons-list[data-v-05a908c2] .anticon{margin-right:6px}body[data-v-3b44ba10],html[data-v-3b44ba10]{height:100%;margin:0}.fade-transform-enter-active[data-v-3b44ba10],.fade-transform-leave-active[data-v-3b44ba10]{transition:all .3s;opacity:0}.fade-transform-enter[data-v-3b44ba10],.fade-transform-leave[data-v-3b44ba10]{opacity:0}.fade-transform-enter-to[data-v-3b44ba10]{opacity:0}.ant-menu-item>span>a[data-v-3b44ba10]{color:hsla(0,0%,100%,.65)}.ant-menu-item-selected>span>a[data-v-3b44ba10]{color:#fff}#app[data-v-3b44ba10]{min-height:100%}#app .trigger[data-v-3b44ba10]{font-size:18px;line-height:64px;padding:0 24px;cursor:pointer;transition:color .3s}#app .trigger[data-v-3b44ba10]:hover{color:#1890ff}#app .logo[data-v-3b44ba10]{height:32px;background:#0a1d2d;margin:16px;text-align:center;font-size:1.2rem;color:#fff;padding-bottom:5px;border-bottom:2px solid #b6befa}.copyright[data-v-3b44ba10]{color:#888;text-align:right;margin-right:1rem} .custom-icons-list[data-v-05a908c2] .anticon{margin-right:6px}body[data-v-bc5a7470],html[data-v-bc5a7470]{height:100%;margin:0}.fade-transform-enter-active[data-v-bc5a7470],.fade-transform-leave-active[data-v-bc5a7470]{transition:all .3s;opacity:0}.fade-transform-enter[data-v-bc5a7470],.fade-transform-leave[data-v-bc5a7470]{opacity:0}.fade-transform-enter-to[data-v-bc5a7470]{opacity:0}.ant-menu-item>span>a[data-v-bc5a7470]{color:hsla(0,0%,100%,.65)}.ant-menu-item-selected>span>a[data-v-bc5a7470]{color:#fff}#app[data-v-bc5a7470]{min-height:100%}#app .trigger[data-v-bc5a7470]{font-size:18px;line-height:64px;padding:0 24px;cursor:pointer;transition:color .3s}#app .trigger[data-v-bc5a7470]:hover{color:#1890ff}#app .logo[data-v-bc5a7470]{height:32px;background:#0a1d2d;margin:16px;text-align:center;font-size:1.2rem;color:#fff;padding-bottom:5px;border-bottom:2px solid #b6befa}.copyright[data-v-bc5a7470]{color:#888;text-align:right;margin-right:1rem}
+1
View File
@@ -0,0 +1 @@
.gray-table-row{background-color:#f5f5f5}
+1
View File
@@ -0,0 +1 @@
#add-rule[data-v-0fa98c43]{margin-bottom:10px}
+1 -1
View File
@@ -1 +1 @@
<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><title>RevSuit Control Panel</title><link href="/revsuit/admin/css/chunk-016c45cf.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-0cb5e9e6.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-193ec343.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-46a53d26.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-4ffb84ba.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-5fb70d83.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-72839f90.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-740736c7.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-ae691e78.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-f1802c3c.css" rel="prefetch"><link href="/revsuit/admin/js/chunk-016c45cf.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-0cb5e9e6.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-193ec343.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-27186dd0.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-46a53d26.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-4ffb84ba.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-5fb70d83.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-72839f90.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-740736c7.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-ae691e78.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-b241c712.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-f1802c3c.js" rel="prefetch"><link href="/revsuit/admin/css/app.css" rel="preload" as="style"><link href="/revsuit/admin/css/chunk-vendors.css" rel="preload" as="style"><link href="/revsuit/admin/js/app.js" rel="preload" as="script"><link href="/revsuit/admin/js/chunk-vendors.js" rel="preload" as="script"><link href="/revsuit/admin/css/chunk-vendors.css" rel="stylesheet"><link href="/revsuit/admin/css/app.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but revsuit-frontend doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div><script src="/revsuit/admin/js/chunk-vendors.js"></script><script src="/revsuit/admin/js/app.js"></script></body></html> <!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><title>RevSuit Control Panel</title><link href="/revsuit/admin/css/chunk-016c45cf.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-0cb5e9e6.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-193ec343.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-33aba89a.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-46a53d26.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-4ffb84ba.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-5fb70d83.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-6101772c.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-72839f90.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-740736c7.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-ae691e78.css" rel="prefetch"><link href="/revsuit/admin/css/chunk-f1802c3c.css" rel="prefetch"><link href="/revsuit/admin/js/chunk-016c45cf.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-0cb5e9e6.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-193ec343.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-27186dd0.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-33aba89a.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-46a53d26.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-4ffb84ba.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-5fb70d83.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-6101772c.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-72839f90.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-740736c7.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-ae691e78.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-b241c712.js" rel="prefetch"><link href="/revsuit/admin/js/chunk-f1802c3c.js" rel="prefetch"><link href="/revsuit/admin/css/app.css" rel="preload" as="style"><link href="/revsuit/admin/css/chunk-vendors.css" rel="preload" as="style"><link href="/revsuit/admin/js/app.js" rel="preload" as="script"><link href="/revsuit/admin/js/chunk-vendors.js" rel="preload" as="script"><link href="/revsuit/admin/css/chunk-vendors.css" rel="stylesheet"><link href="/revsuit/admin/css/app.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but revsuit-frontend doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div><script src="/revsuit/admin/js/chunk-vendors.js"></script><script src="/revsuit/admin/js/app.js"></script></body></html>
+1 -1
View File
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
+1 -1
View File
File diff suppressed because one or more lines are too long
+6
View File
@@ -21,6 +21,9 @@
<a-menu-item key="/logs/rmi"> <a-menu-item key="/logs/rmi">
<router-link to="/logs/rmi">RMI Logs</router-link> <router-link to="/logs/rmi">RMI Logs</router-link>
</a-menu-item> </a-menu-item>
<a-menu-item key="/logs/ldap">
<router-link to="/logs/ldap">Ldap Logs</router-link>
</a-menu-item>
<a-menu-item key="/logs/mysql"> <a-menu-item key="/logs/mysql">
<router-link to="/logs/mysql">MySQL Logs</router-link> <router-link to="/logs/mysql">MySQL Logs</router-link>
</a-menu-item> </a-menu-item>
@@ -39,6 +42,9 @@
<a-menu-item key="/rules/rmi"> <a-menu-item key="/rules/rmi">
<router-link to="/rules/rmi">RMI Rules</router-link> <router-link to="/rules/rmi">RMI Rules</router-link>
</a-menu-item> </a-menu-item>
<a-menu-item key="/rules/ldap">
<router-link to="/rules/ldap">Ldap Rules</router-link>
</a-menu-item>
<a-menu-item key="/rules/mysql"> <a-menu-item key="/rules/mysql">
<router-link to="/rules/mysql">MySQL Rules</router-link> <router-link to="/rules/mysql">MySQL Rules</router-link>
</a-menu-item> </a-menu-item>
+16
View File
@@ -66,6 +66,22 @@ export function deleteRmiRecord(params) {
}) })
} }
export function getLdapRecord(params) {
return request({
url: '/record/ldap',
params: params,
method: 'get'
})
}
export function deleteLdapRecord(params) {
return request({
url: '/record/ldap',
params: params,
method: 'delete'
})
}
export function getFtpRecord(params) { export function getFtpRecord(params) {
return request({ return request({
url: '/record/ftp', url: '/record/ftp',
+24
View File
@@ -97,6 +97,30 @@ export function deleteRmiRule(data) {
}) })
} }
export function getLdapRule(params) {
return request({
url: '/rule/ldap',
params: params,
method: 'get'
})
}
export function upsertLdapRule(data) {
return request({
url: '/rule/ldap',
data: data,
method: 'post'
})
}
export function deleteLdapRule(data) {
return request({
url: '/rule/ldap',
data: data,
method: 'delete'
})
}
export function getFtpRule(params) { export function getFtpRule(params) {
return request({ return request({
url: '/rule/ftp', url: '/rule/ftp',
+14
View File
@@ -42,6 +42,20 @@ export function updateRmiConfig(data) {
}) })
} }
export function getLdapConfig() {
return request({
url: '/setting/getLdapConfig',
})
}
export function updateLdapConfig(data) {
return request({
url: '/setting/updateLdapConfig',
method: "post",
data: data,
})
}
export function getMySQLConfig() { export function getMySQLConfig() {
return request({ return request({
url: '/setting/getMySQLConfig', url: '/setting/getMySQLConfig',
+10
View File
@@ -30,6 +30,11 @@ const routes = [
name: 'RmiLogs', name: 'RmiLogs',
component: () => import( '../views/logs/Rmi') component: () => import( '../views/logs/Rmi')
}, },
{
path: '/logs/ldap',
name: 'LdapLogs',
component: () => import( '../views/logs/Ldap')
},
{ {
path: '/logs/ftp', path: '/logs/ftp',
name: 'FtpLogs', name: 'FtpLogs',
@@ -56,6 +61,11 @@ const routes = [
name: 'RmiRules', name: 'RmiRules',
component: () => import( '../views/rules/Rmi') component: () => import( '../views/rules/Rmi')
}, },
{
path: '/rules/ldap',
name: 'LdapRules',
component: () => import( '../views/rules/Ldap')
},
{ {
path: '/rules/ftp', path: '/rules/ftp',
name: 'FtpRules', name: 'FtpRules',
+173
View File
@@ -0,0 +1,173 @@
<template>
<a-table
style="overflow-x: auto;"
:columns="columns"
:data-source="data"
:loading="loading"
:pagination="pagination"
@change="handleTableChange"
:rowClassName="(record, index) => index % 2 === 0 ? '' : 'gray-table-row'"
>
<filter-dropdown
slot="filterDropdown"
slot-scope="{ setSelectedKeys, selectedKeys, clearFilters, column }"
:set-selected-keys="setSelectedKeys"
:selected-keys="selectedKeys"
:clear-filters="clearFilters"
:column="column"
:filters="filters"
:fetch="fetch"
/>
<a-icon
slot="filterIcon"
slot-scope="filtered"
type="search"
:style="{ color: filtered ? '#108ee9' : undefined }"
/>
<span slot="time" slot-scope="time">
{{ new Date(time).format("yyyy-MM-dd hh:mm:ss") }}
</span>
</a-table>
</template>
<style>
.gray-table-row {
background-color: #f5f5f5;
}
</style>
<script>
import {deleteLdapRecord, getLdapRecord} from '@/api/record'
import {store} from '@/main'
import FilterDropdown from '@/components/FilterDropdown'
const columns = [
{
title: 'ID',
dataIndex: 'id',
key: 'id',
sorter: true,
sortDirections: ['descend', 'ascend'],
},
{
title: 'REQUEST TIME',
dataIndex: 'request_time',
key: 'request_time',
scopedSlots: {customRender: 'time'},
},
{
title: 'RULE',
dataIndex: 'rule_name',
key: 'rule_name',
scopedSlots: {
filterDropdown: 'filterDropdown',
filterIcon: 'filterIcon',
},
},
{
title: 'FLAG',
dataIndex: 'flag',
key: 'flag',
scopedSlots: {
filterDropdown: 'filterDropdown',
filterIcon: 'filterIcon',
},
},
{
title: 'PATH',
dataIndex: 'path',
key: 'path',
ellipsis: true,
scopedSlots: {
filterDropdown: 'filterDropdown',
filterIcon: 'filterIcon',
},
},
{
title: 'REMOTE IP',
key: 'remote_ip',
dataIndex: 'remote_ip',
scopedSlots: {
filterDropdown: 'filterDropdown',
filterIcon: 'filterIcon',
},
},
{
title: 'IP AREA',
key: 'ip_area',
dataIndex: 'ip_area'
}
];
export default {
name: 'LdapLogs',
data() {
return {
store,
data: [],
pagination: {
current: 1, showSizeChanger: true, pageSize: store.pageSize,
onShowSizeChange: (current, size) => {
store.pageSize = size
}
},
filters: {},
order: "desc",
loading: false,
columns,
};
},
methods: {
handleTableChange(pagination, filters, sorter) {
const pager = {...this.pagination};
pager.current = pagination.current;
this.pagination = pager;
this.order = sorter.order === "ascend" ? "asc" : "desc"
this.fetch();
},
fetch: function () {
let params = {
...this.filters,
page: this.pagination.current,
pageSize: this.pagination.pageSize,
order: this.order
}
this.loading = true;
getLdapRecord(params).then(res => {
let result = res.data.result
this.data = result.data
const pagination = {...this.pagination};
pagination.total = result.count;
this.pagination = pagination;
this.loading = false
}).catch(e => {
if (e.response.status !== 403) {
this.$message.error('Unknown error with status code: ' + e.response.status)
}
})
},
delete: function () {
let params = {
...this.filters,
}
this.loading = true;
deleteLdapRecord(params).then(() => {
this.$message.success('Deleted successfully')
this.filters = {}
this.fetch()
}).catch(e => {
if (e.response.status !== 403) {
this.$message.error('Failed to delete: ' + e.response.data.error)
}
})
},
},
mounted() {
this.fetch();
},
components: {
FilterDropdown
}
}
</script>
+327
View File
@@ -0,0 +1,327 @@
<template xmlns:a-col="http://www.w3.org/1999/html">
<div>
<a-button id="add-rule" type="primary" @click="addRule">
<a-icon type="plus"/>
New Rule
</a-button>
<!-- rule form-->
<a-drawer
:title="formAction+ ' RMI rule'"
:width="490"
:visible="formVisible"
:body-style="{ paddingBottom: '80px' }"
@close="closeDrawer"
>
<a-form-model :model="form" ref="form" layout="vertical" @submit="handleSubmit">
<BasicRule :form="form" :readOnly="formReadOnly" flagFormat="path"/>
</a-form-model>
<div
:style="{
position: 'absolute',
right: 0,
bottom: 0,
width: '100%',
borderTop: '1px solid #e9e9e9',
padding: '10px 16px',
background: '#fff',
textAlign: 'right',
zIndex: 1,
}"
>
<a-button :style="{ marginRight: '8px' }" @click="handleCancel">
Cancel
</a-button>
<a-button type="primary" :disabled="formReadOnly" @click="handleSubmit">
Submit
</a-button>
</div>
</a-drawer>
<!-- rule table -->
<a-table
style="overflow-x: auto;"
:columns="columns"
:data-source="data"
:loading="loading"
:pagination="pagination"
@change="handleTableChange"
>
<div
slot="filterDropdown"
slot-scope="{ setSelectedKeys, selectedKeys, clearFilters, column }"
style="padding: 8px"
>
<a-input
:placeholder="`Search ${column.dataIndex}`"
:value="selectedKeys[0]"
style="width: 188px; margin-bottom: 8px; display: block;"
@change="e => setSelectedKeys(e.target.value ? [e.target.value] : [])"
@pressEnter="() => {filters[column.dataIndex] = selectedKeys[0];fetch()}"
/>
<a-button
type="primary"
icon="search"
size="small"
style="width: 90px; margin-right: 8px"
@click="() => {filters[column.dataIndex] = selectedKeys[0];fetch()}"
>
Search
</a-button>
</div>
<a-icon
slot="filterIcon"
slot-scope="filtered"
type="search"
:style="{ color: filtered ? '#108ee9' : undefined }"
/>
<span slot="rank" slot-scope="rank">
<a-tag
:color="'#'+(0x2db7f5+rank*80).toString(16)"
>
{{ rank }}
</a-tag>
</span>
<span slot="switchRender" slot-scope="checked,record,index,dataIndex">
<a-switch :checked="checked" @click="clickSwitch(record,dataIndex.dataIndex)"></a-switch>
</span>
<span slot="valueRender" slot-scope="values">
<span v-for="value in values.split(',')" :key="value">{{ value }}<br/></span>
</span>
<span slot="action" slot-scope="text,record,index">
<a-button @click="viewRule(record)" style="
color: #67C23A;
background-color: transparent;
border-color: #67C23A;
text-shadow: none;
margin:0 10px 3px 0;
" size="small" ghost>View</a-button>
<a-button @click="editRule(record,index)" style="
color: #909399;
background-color: transparent;
border-color: #909399;
text-shadow: none;
margin:0 10px 3px 0;
" size="small" ghost>Edit</a-button>
<a-popconfirm
title="Are you sure delete this task?"
ok-text="Yes"
cancel-text="No"
@confirm="deleteRule(record,index)"
>
<a-button type="danger" size="small" ghost>Delete</a-button>
</a-popconfirm>
</span>
</a-table>
</div>
</template>
<style scoped>
#add-rule {
margin-bottom: 10px;
}
</style>
<script>
import {getLdapRule, upsertLdapRule, deleteLdapRule} from '@/api/rule'
import {store} from '@/main'
import BasicRule from "@/components/BasicRule";
const VIEW = "View"
const EDIT = "Edit"
const CREATE = "Create"
const columns = [
{
title: 'ID',
dataIndex: 'id',
key: 'id',
sorter: true,
sortDirections: ['descend', 'ascend'],
},
{
title: 'NAME',
dataIndex: 'name',
key: 'name',
scopedSlots: {
filterDropdown: 'filterDropdown',
filterIcon: 'filterIcon',
},
},
{
title: 'FLAG FORMAT',
dataIndex: 'flag_format',
key: 'flag_format',
ellipsis: true,
},
{
title: 'RANK',
dataIndex: 'rank',
key: 'rank',
scopedSlots: {
customRender: 'rank',
},
},
{
title: 'PUSH TO CLIENT',
dataIndex: 'push_to_client',
key: 'push_to_client',
scopedSlots: {
customRender: 'switchRender',
}
},
{
title: 'NOTICE',
dataIndex: 'notice',
key: 'notice',
scopedSlots: {
customRender: 'switchRender',
}
},
{
title: 'Action',
key: 'action',
scopedSlots: {customRender: 'action'},
},
];
export default {
name: 'LdapRules',
data() {
return {
store,
data: [],
formVisible: false,
pagination: {
current: 1, showSizeChanger: true, pageSize: store.pageSize,
onShowSizeChange: (current, size) => {
store.pageSize = size
}
},
filters: {},
loading: false,
columns,
form: {},
formReadOnly: false,
formAction: "", // View ,Create or Edit
}
},
methods: {
handleTableChange(pagination, filters, sorter) {
const pager = {...this.pagination};
pager.current = pagination.current;
this.pagination = pager;
this.order = sorter.order === "ascend" ? "asc" : "desc"
this.fetch();
},
fetch: function () {
let params = {
...this.filters,
page: this.pagination.current,
pageSize: this.pagination.pageSize,
order: this.order
}
this.loading = true;
getLdapRule(params).then(res => {
let result = res.data.result
this.data = result.data
const pagination = {...this.pagination};
pagination.total = result.count;
this.pagination = pagination;
this.loading = false
}).catch(e => {
if (e.response.status !== 403) {
this.$message.error('Unknown error with status code: ' + e.response.status)
}
})
},
clickSwitch(record, prop) {
record[prop] = !record[prop]
upsertLdapRule(record).then().catch(e => {
this.$notification.error({
message: 'Edit failed',
description:
e.response.data.error,
style: {
width: '600px',
marginLeft: `${335 - 600}px`,
},
duration: 4
});
})
},
addRule() {
this.form = {}
this.showForm(CREATE)
},
viewRule(record) {
this.form = record
this.showForm(VIEW)
},
editRule(record) {
this.form = JSON.parse(JSON.stringify(record))
this.showForm(EDIT)
},
deleteRule(record, index) {
deleteLdapRule(record).then(() => {
this.data.splice(index, 1)
}).catch(e => {
this.$notification.error({
message: 'Error',
description:
e.response.data.error,
style: {
width: '600px',
marginLeft: `${335 - 600}px`,
},
duration: 4
});
})
},
showForm(action) {
this.formAction = action
this.formReadOnly = action === VIEW;
this.formVisible = true;
},
closeDrawer() {
this.formVisible = false;
},
handleSubmit() {
this.$refs.form.validate(valid => {
if (valid) {
upsertLdapRule(this.form).then(() => {
this.closeDrawer()
this.fetch({page: this.pagination.current});
this.$notification.info({
message: 'Success',
style: {
width: '600px',
marginLeft: `${335 - 600}px`,
},
duration: 2.5
});
}).catch(e => {
this.$notification.error({
message: this.formAction + ' failed',
description:
e.response.data.error,
style: {
width: '600px',
marginLeft: `${335 - 600}px`,
},
duration: 4
});
})
}
})
},
handleCancel() {
this.form = {}
this.closeDrawer()
},
},
mounted() {
this.fetch({page: "1"});
},
components: {
BasicRule,
}
}
</script>
+102
View File
@@ -0,0 +1,102 @@
<template>
<div>
<SettingForm :form="form" :spinning="spinning"></SettingForm>
<a-result v-if="status"
:status="status"
:title="title"
:sub-title="subTitle"
>
<template #extra>
<a-row>
<a-col :span="12" :offset="7">
<div style="text-align: left">
<li v-for="err in errors" :key="err">{{ err }}</li>
</div>
</a-col>
</a-row>
</template>
</a-result>
</div>
</template>
<script>
import {getLdapConfig, updateLdapConfig} from "@/api/settings"
import SettingForm from "@/components/SettingForm";
export default {
name: "Ldap",
data() {
return {
form: {},
spinning: false,
status: "",
title: "",
subTitle: "",
errors: []
}
},
methods: {
getConfig() {
getLdapConfig().then(res => {
this.form = res.data
}).catch(e => {
this.$notification.error({
message: 'Error',
description:
e.response.data.error,
style: {
width: '600px',
marginLeft: `${335 - 600}px`,
},
duration: 4
});
})
},
updateConfig() {
this.spinning = true
let targetConfig = JSON.stringify(this.form)
updateLdapConfig(this.form).then(
() => {
setTimeout(() => {
getLdapConfig().then((res) => {
this.spinning = false
let nowConfig = JSON.stringify(res.data)
if (nowConfig !== targetConfig) {
this.status = "warning"
this.title = "Updating the configuration seems to have failed"
this.subTitle = "Please check your config options carefully."
}
this.form = res.data
this.status = ""
this.title = ""
this.subTitle = ""
}
)
}, 3000)
}
).catch(e => {
this.$notification.error({
message: 'Error',
description:
e.response.data.error,
style: {
width: '600px',
marginLeft: `${335 - 600}px`,
},
duration: 4
});
})
}
},
mounted() {
this.getConfig()
},
components: {
SettingForm
}
}
</script>
<style scoped>
</style>
+4
View File
@@ -8,6 +8,7 @@
<http ref="settings" v-if="tabKey==='HTTP'"></http> <http ref="settings" v-if="tabKey==='HTTP'"></http>
<dns ref="settings" v-else-if="tabKey==='DNS'"></dns> <dns ref="settings" v-else-if="tabKey==='DNS'"></dns>
<rmi ref="settings" v-else-if="tabKey==='RMI'"></rmi> <rmi ref="settings" v-else-if="tabKey==='RMI'"></rmi>
<ldap ref="settings" v-else-if="tabKey==='LDAP'"></ldap>
<mysql ref="settings" v-else-if="tabKey==='MYSQL'"></mysql> <mysql ref="settings" v-else-if="tabKey==='MYSQL'"></mysql>
<ftp ref="settings" v-else-if="tabKey==='FTP'"></ftp> <ftp ref="settings" v-else-if="tabKey==='FTP'"></ftp>
<notice ref="settings" v-else-if="tabKey==='NOTICE'"></notice> <notice ref="settings" v-else-if="tabKey==='NOTICE'"></notice>
@@ -20,6 +21,7 @@
import Http from "./Http" import Http from "./Http"
import Dns from "./Dns" import Dns from "./Dns"
import Rmi from "./Rmi" import Rmi from "./Rmi"
import Ldap from "./Ldap"
import Mysql from "./Mysql" import Mysql from "./Mysql"
import Ftp from "./Ftp" import Ftp from "./Ftp"
import Notice from "./Notice" import Notice from "./Notice"
@@ -33,6 +35,7 @@ export default {
{key: "HTTP", tab: "PLATFORM|HTTP"}, {key: "HTTP", tab: "PLATFORM|HTTP"},
{key: "DNS", tab: "DNS"}, {key: "DNS", tab: "DNS"},
{key: "RMI", tab: "RMI"}, {key: "RMI", tab: "RMI"},
{key: "LDAP", tab: "LDAP"},
{key: "MYSQL", tab: "MYSQL"}, {key: "MYSQL", tab: "MYSQL"},
{key: "FTP", tab: "FTP"}, {key: "FTP", tab: "FTP"},
{key: "NOTICE", tab: "NOTICE"}, {key: "NOTICE", tab: "NOTICE"},
@@ -51,6 +54,7 @@ export default {
Http, Http,
Dns, Dns,
Rmi, Rmi,
Ldap,
Mysql, Mysql,
Ftp, Ftp,
Notice, Notice,
+4 -1
View File
@@ -1,4 +1,4 @@
version: 1.3 version: 1.4
addr: :10000 addr: :10000
token: token:
domain: domain:
@@ -19,6 +19,9 @@ dns:
rmi: rmi:
enable: true enable: true
addr: :1099 addr: :1099
ldap:
enable: true
addr: :1389
mysql: mysql:
enable: true enable: true
addr: :3306 addr: :3306
+3 -13
View File
@@ -101,10 +101,7 @@ func ListRules(c *gin.Context) {
} }
db := database.DB.Model(&dnsRule) db := database.DB.Model(&dnsRule)
if dnsRule.Name != "" { db.Where(&dnsRule).Count(&count)
db.Where("name = ?", dnsRule.Name)
}
db.Count(&count)
page, err := strconv.Atoi(c.Query("page")) page, err := strconv.Atoi(c.Query("page"))
if err != nil { if err != nil {
@@ -138,10 +135,7 @@ func ListRules(c *gin.Context) {
// UpsertRules creates or updates dns rule from user submit // UpsertRules creates or updates dns rule from user submit
func UpsertRules(c *gin.Context) { func UpsertRules(c *gin.Context) {
var ( var dnsRule Rule
dnsRule Rule
update bool
)
if err := c.ShouldBind(&dnsRule); err != nil { if err := c.ShouldBind(&dnsRule); err != nil {
c.JSON(400, gin.H{ c.JSON(400, gin.H{
@@ -152,10 +146,6 @@ func UpsertRules(c *gin.Context) {
return return
} }
if dnsRule.ID != 0 {
update = true
}
if err := dnsRule.CreateOrUpdate(); err != nil { if err := dnsRule.CreateOrUpdate(); err != nil {
c.JSON(400, gin.H{ c.JSON(400, gin.H{
"status": "failed", "status": "failed",
@@ -165,7 +155,7 @@ func UpsertRules(c *gin.Context) {
return return
} }
if update { if dnsRule.ID != 0 {
log.Trace("DNS rule[id:%d] has been updated", dnsRule.ID) log.Trace("DNS rule[id:%d] has been updated", dnsRule.ID)
} else { } else {
log.Trace("DNS rule[id:%d] has been created", dnsRule.ID) log.Trace("DNS rule[id:%d] has been created", dnsRule.ID)
+2 -2
View File
@@ -395,10 +395,10 @@ func (s *Server) Run() {
} }
}() }()
for s.Enable { for {
tcpConn, err := listener.Accept() tcpConn, err := listener.Accept()
if err != nil { if err != nil {
if !strings.Contains(err.Error(), net.ErrClosed.Error()) { if !errors.Is(err, net.ErrClosed) {
log.Warn("FTP accept connection error: %v", err) log.Warn("FTP accept connection error: %v", err)
} else { } else {
break break
+3 -13
View File
@@ -96,10 +96,7 @@ func ListRules(c *gin.Context) {
} }
db := database.DB.Model(&ftpRule) db := database.DB.Model(&ftpRule)
if ftpRule.Name != "" { db.Where(&ftpRule).Count(&count)
db.Where("name = ?", ftpRule.Name)
}
db.Count(&count)
page, err := strconv.Atoi(c.Query("page")) page, err := strconv.Atoi(c.Query("page"))
if err != nil { if err != nil {
@@ -133,10 +130,7 @@ func ListRules(c *gin.Context) {
// UpsertRules creates or updates ftp rule from user submit // UpsertRules creates or updates ftp rule from user submit
func UpsertRules(c *gin.Context) { func UpsertRules(c *gin.Context) {
var ( var ftpRule Rule
ftpRule Rule
update bool
)
if err := c.ShouldBind(&ftpRule); err != nil { if err := c.ShouldBind(&ftpRule); err != nil {
c.JSON(400, gin.H{ c.JSON(400, gin.H{
@@ -147,10 +141,6 @@ func UpsertRules(c *gin.Context) {
return return
} }
if ftpRule.ID != 0 {
update = true
}
if err := ftpRule.CreateOrUpdate(); err != nil { if err := ftpRule.CreateOrUpdate(); err != nil {
c.JSON(400, gin.H{ c.JSON(400, gin.H{
"status": "failed", "status": "failed",
@@ -160,7 +150,7 @@ func UpsertRules(c *gin.Context) {
return return
} }
if update { if ftpRule.ID != 0 {
log.Trace("FTP rule[id:%d] has been updated", ftpRule.ID) log.Trace("FTP rule[id:%d] has been updated", ftpRule.ID)
} else { } else {
log.Trace("FTP rule[id:%d] has been created", ftpRule.ID) log.Trace("FTP rule[id:%d] has been created", ftpRule.ID)
+6
View File
@@ -0,0 +1,6 @@
package ldap
type Config struct {
Enable bool
Addr string
}
+197
View File
@@ -0,0 +1,197 @@
package ldap
import (
"bytes"
"net"
"sync"
"time"
"github.com/li4n0/revsuit/internal/database"
"github.com/li4n0/revsuit/internal/ipinfo"
"github.com/li4n0/revsuit/internal/recycler"
"github.com/pkg/errors"
log "unknwon.dev/clog/v2"
)
type Server struct {
Config
rules []*Rule
rulesLock sync.RWMutex
livingLock sync.Mutex
}
var (
server *Server
once sync.Once
)
func GetServer() *Server {
once.Do(func() {
server = &Server{rulesLock: sync.RWMutex{}, livingLock: sync.Mutex{}}
})
return server
}
func (s *Server) getRules() []*Rule {
defer s.rulesLock.RUnlock()
s.rulesLock.RLock()
return s.rules
}
func (s *Server) UpdateRules() error {
db := database.DB.Model(new(Rule))
defer s.rulesLock.Unlock()
s.rulesLock.Lock()
return errors.Wrap(db.Order("base_rank desc").Find(&s.rules).Error, "LDAP update rules error")
}
func (s *Server) handleConnection(conn net.Conn) {
defer func() {
_ = conn.Close()
if err := recover(); err != nil {
recycler.Recycle(err)
}
}()
if err := conn.SetDeadline(time.Now().Add(time.Second * 30)); err != nil {
log.Warn("LDAP set connection deadline error:%v", err)
return
}
ip, _, _ := net.SplitHostPort(conn.RemoteAddr().String())
buf := make([]byte, 1024)
_, err := conn.Read(buf)
if err != nil {
log.Warn("LDAP read connection error:%v", err)
return
}
if !bytes.Contains(buf, []byte{
0x30, 0x0c, 0x02, 0x01, 0x01, 0x60, 0x07,
0x02, 0x01, 0x03, 0x04, 0x00, 0x80, 0x00}) {
return
}
send := []byte{
0x30, 0x0c, 0x02, 0x01, 0x01, 0x61, 0x07,
0x0a, 0x01, 0x00, 0x04, 0x00, 0x04, 0x00,
}
_, err = conn.Write(send)
if err != nil {
log.Warn("LDAP write connection error: %v", err)
return
}
_, err = conn.Read(buf)
if err != nil {
log.Warn("LDAP read connection error:%v", err)
return
}
length := buf[8]
pathBytes := bytes.Buffer{}
for i := 1; i <= int(length); i++ {
temp := []byte{buf[8+i]}
pathBytes.Write(temp)
}
path := pathBytes.String()
for _, _rule := range s.getRules() {
flag, flagGroup, _ := _rule.Match(path)
if flag == "" {
continue
}
area := ipinfo.Area(ip)
// create new record
r, err := NewRecord(_rule, flag, path, ip, area)
if err != nil {
log.Warn("LDAP record[rule_id:%d] created failed :%s", _rule.ID, err)
return
}
log.Info("LDAP record[id:%d rule:%s remote_ip:%s] has been created", r.ID, _rule.Name, ip)
//only send to client when this connection recorded first time.
if _rule.PushToClient {
if flagGroup != "" {
var count int64
database.DB.Where("rule_name=? and path like ?", _rule.Name, "%"+flagGroup+"%").Model(&Record{}).Count(&count)
if count <= 1 {
r.PushToClient()
log.Trace("LDAP record[id:%d, flagGroup:%s] has been put to client message queue", r.ID, flagGroup)
}
} else {
r.PushToClient()
log.Trace("LDAP record[id:%d, flag:%s] has been put to client message queue", r.ID, flag)
}
}
//send notice
if _rule.Notice {
go func() {
r.Notice()
log.Trace("LDAP record[id:%d] notice has been sent", r.ID)
}()
}
return
}
}
func (s *Server) Stop() {
log.Info("LDAP Server is stopping...")
s.Enable = false
s.livingLock.Unlock()
}
func (s *Server) Restart() {
s.Stop()
time.Sleep(time.Second * 2)
go s.Run()
}
func (s *Server) Run() {
s.Enable = true
s.livingLock.Lock()
defer func() {
if s.Enable {
log.Error("LDAP Server exited unexpectedly")
}
s.Enable = false
s.livingLock.Unlock()
}()
if err := s.UpdateRules(); err != nil {
log.Error(err.Error())
return
}
// run server
log.Info("Starting LDAP Server at %v", s.Addr)
listener, err := net.Listen("tcp", s.Addr)
if err != nil {
log.Error(err.Error())
return
}
go func() {
s.livingLock.Lock()
if !s.Enable {
_ = listener.Close()
}
}()
for {
tcpConn, err := listener.Accept()
if err != nil {
if !errors.Is(err, net.ErrClosed) {
log.Warn("LDAP accept connection error: %v", err)
} else {
break
}
continue
}
go s.handleConnection(tcpConn)
}
}
+139
View File
@@ -0,0 +1,139 @@
package ldap
import (
"net/http"
"strconv"
"time"
"github.com/gin-gonic/gin"
"github.com/li4n0/revsuit/internal/database"
"github.com/li4n0/revsuit/internal/notice"
"github.com/li4n0/revsuit/internal/record"
"gorm.io/gorm"
log "unknwon.dev/clog/v2"
)
var _ record.Record = (*Record)(nil)
type Record struct {
Path string `form:"path" json:"path"`
record.BaseRecord
Rule Rule `gorm:"foreignKey:RuleName;references:Name;constraint:OnUpdate:CASCADE,OnDelete:SET NULL;" form:"-" json:"-" notice:"-"`
}
func (Record) TableName() string {
return "ldap_records"
}
func (r Record) Notice() {
notice.Notice(r)
}
func NewRecord(rule *Rule, flag, path, ip, area string) (r *Record, err error) {
r = &Record{
BaseRecord: record.BaseRecord{
Flag: flag,
RemoteIP: ip,
IpArea: area,
RequestTime: time.Now(),
},
Path: path,
Rule: *rule,
}
return r, database.DB.Create(r).Error
}
func Records(c *gin.Context) {
var (
ldapRecord Record
res []Record
count int64
order = c.Query("order")
pageSize = 10
)
if c.Query("pageSize") != "" {
if n, err := strconv.Atoi(c.Query("pageSize")); err == nil {
if n > 0 && n < 100 {
pageSize = n
}
}
}
if err := c.ShouldBind(&ldapRecord); err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"result": nil,
})
return
}
db := database.DB.Model(&ldapRecord)
if ldapRecord.Flag != "" {
db.Where("flag = ?", ldapRecord.Flag)
}
if ldapRecord.Path != "" {
db.Where("path like ?", "%"+ldapRecord.Path+"%")
}
if ldapRecord.RemoteIP != "" {
db.Where("remote_ip = ?", ldapRecord.RemoteIP)
}
if ldapRecord.RuleName != "" {
db.Where("rule_name = ?", ldapRecord.RuleName)
}
//Delete records
if c.Request.Method == http.MethodDelete {
if err := db.Session(&gorm.Session{AllowGlobalUpdate: true}).Delete(&res).Error; err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"data": nil,
})
return
}
if database.Driver == database.Sqlite {
db.Exec("VACUUM")
}
c.JSON(200, gin.H{
"status": "succeed",
"error": nil,
})
log.Info("%d ldap records deleted by %s", db.RowsAffected, c.Request.RemoteAddr)
return
}
//List records
page, err := strconv.Atoi(c.Query("page"))
if err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"result": nil,
})
return
}
if order != "asc" {
order = "desc"
}
if err := db.Order("id" + " " + order).Count(&count).Offset((page - 1) * pageSize).Limit(pageSize).Find(&res).Error; err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"data": nil,
})
return
}
c.JSON(200, gin.H{
"status": "succeed",
"error": nil,
"result": gin.H{"count": count, "data": res},
})
}
+192
View File
@@ -0,0 +1,192 @@
package ldap
import (
"strconv"
"github.com/gin-gonic/gin"
"github.com/li4n0/revsuit/internal/database"
"github.com/li4n0/revsuit/internal/rule"
"gorm.io/gorm/clause"
log "unknwon.dev/clog/v2"
)
// Rule LDAP rule struct
type Rule struct {
rule.BaseRule `yaml:",inline"`
}
func (Rule) TableName() string {
return "ldap_rules"
}
// NewRule new ldap rule struct
func NewRule(name, flagFormat string, pushToClient, notice bool) *Rule {
return &Rule{
BaseRule: rule.BaseRule{
Name: name,
FlagFormat: flagFormat,
PushToClient: pushToClient,
Notice: notice,
},
}
}
// CreateOrUpdate creates or updates the ldap rule in database and ruleSet
func (r *Rule) CreateOrUpdate() (err error) {
db := database.DB.Model(r)
err = db.Clauses(clause.OnConflict{
Columns: []clause.Column{{Name: "id"}},
DoUpdates: clause.AssignmentColumns(
[]string{
"name",
"flag_format",
"base_rank",
"push_to_client",
"notice",
}),
}).Create(r).Error
if err != nil {
return
}
err = GetServer().UpdateRules()
return err
}
// Delete deletes the ldap rule in database and ruleSet
func (r *Rule) Delete() (err error) {
db := database.DB.Model(r)
err = db.Delete(r).Error
if err != nil {
return
}
err = GetServer().UpdateRules()
return err
}
// ListRules lists all ldap rules those satisfy the filter
func ListRules(c *gin.Context) {
var (
ldapRule Rule
res []Rule
count int64
order = c.Query("order")
pageSize = 10
)
if c.Query("pageSize") != "" {
if n, err := strconv.Atoi(c.Query("pageSize")); err == nil {
if n > 0 && n < 100 {
pageSize = n
}
}
}
if err := c.ShouldBind(&ldapRule); err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"result": nil,
})
return
}
db := database.DB.Model(&ldapRule)
db.Where(&ldapRule).Count(&count)
page, err := strconv.Atoi(c.Query("page"))
if err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"result": nil,
})
return
}
if order != "asc" {
order = "desc"
}
if err := db.Order("base_rank desc").Order("id" + " " + order).Count(&count).Offset((page - 1) * pageSize).Limit(pageSize).Find(&res).Error; err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"data": nil,
})
return
}
c.JSON(200, gin.H{
"status": "succeed",
"error": nil,
"result": gin.H{"count": count, "data": res},
})
}
// UpsertRules creates or updates ldap rule from user submit
func UpsertRules(c *gin.Context) {
var ldapRule Rule
if err := c.ShouldBind(&ldapRule); err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"data": nil,
})
return
}
if err := ldapRule.CreateOrUpdate(); err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"result": nil,
})
return
}
if ldapRule.ID != 0 {
log.Trace("LDAP rule[id:%d] has been updated", ldapRule.ID)
} else {
log.Trace("LDAP rule[id:%d] has been created", ldapRule.ID)
}
c.JSON(200, gin.H{
"status": "succeed",
"error": nil,
"result": nil,
})
}
// DeleteRules deletes ldap rule from user submit
func DeleteRules(c *gin.Context) {
var ldapRule Rule
if err := c.ShouldBind(&ldapRule); err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"data": nil,
})
return
}
if err := ldapRule.Delete(); err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"data": nil,
})
return
}
log.Trace("LDAP rule[id:%d] has been deleted", ldapRule.ID)
c.JSON(200, gin.H{
"status": "succeed",
"error": nil,
"data": nil,
})
}
+3 -13
View File
@@ -84,10 +84,7 @@ func ListRules(c *gin.Context) {
} }
db := database.DB.Model(&mysqlRule) db := database.DB.Model(&mysqlRule)
if mysqlRule.Name != "" { db.Where(&mysqlRule).Count(&count)
db.Where("name = ?", mysqlRule.Name)
}
db.Count(&count)
page, err := strconv.Atoi(c.Query("page")) page, err := strconv.Atoi(c.Query("page"))
if err != nil { if err != nil {
@@ -121,10 +118,7 @@ func ListRules(c *gin.Context) {
// UpsertRules create or update mysql rule from user submit // UpsertRules create or update mysql rule from user submit
func UpsertRules(c *gin.Context) { func UpsertRules(c *gin.Context) {
var ( var mysqlRule Rule
mysqlRule Rule
update bool
)
if err := c.ShouldBind(&mysqlRule); err != nil { if err := c.ShouldBind(&mysqlRule); err != nil {
c.JSON(400, gin.H{ c.JSON(400, gin.H{
@@ -135,10 +129,6 @@ func UpsertRules(c *gin.Context) {
return return
} }
if mysqlRule.ID != 0 {
update = true
}
if err := mysqlRule.CreateOrUpdate(); err != nil { if err := mysqlRule.CreateOrUpdate(); err != nil {
c.JSON(400, gin.H{ c.JSON(400, gin.H{
"status": "failed", "status": "failed",
@@ -148,7 +138,7 @@ func UpsertRules(c *gin.Context) {
return return
} }
if update { if mysqlRule.ID != 0 {
log.Trace("MySQL rule[id:%d] has been updated", mysqlRule.ID) log.Trace("MySQL rule[id:%d] has been updated", mysqlRule.ID)
} else { } else {
log.Trace("MySQL rule[id:%d] has been created", mysqlRule.ID) log.Trace("MySQL rule[id:%d] has been created", mysqlRule.ID)
+3 -13
View File
@@ -102,10 +102,7 @@ func ListRules(c *gin.Context) {
} }
db := database.DB.Model(&httpRule) db := database.DB.Model(&httpRule)
if httpRule.Name != "" { db.Where(&httpRule).Count(&count)
db.Where("name = ?", httpRule.Name)
}
db.Count(&count)
page, err := strconv.Atoi(c.Query("page")) page, err := strconv.Atoi(c.Query("page"))
if err != nil { if err != nil {
@@ -139,10 +136,7 @@ func ListRules(c *gin.Context) {
// UpsertRules create or update http rule from user submit // UpsertRules create or update http rule from user submit
func UpsertRules(c *gin.Context) { func UpsertRules(c *gin.Context) {
var ( var httpRule Rule
httpRule Rule
update bool
)
if err := c.ShouldBind(&httpRule); err != nil { if err := c.ShouldBind(&httpRule); err != nil {
c.JSON(400, gin.H{ c.JSON(400, gin.H{
@@ -153,10 +147,6 @@ func UpsertRules(c *gin.Context) {
return return
} }
if httpRule.ID != 0 {
update = true
}
if err := httpRule.CreateOrUpdate(); err != nil { if err := httpRule.CreateOrUpdate(); err != nil {
c.JSON(400, gin.H{ c.JSON(400, gin.H{
"status": "failed", "status": "failed",
@@ -166,7 +156,7 @@ func UpsertRules(c *gin.Context) {
return return
} }
if update { if httpRule.ID != 0 {
log.Trace("HTTP rule[id:%d] has been updated", httpRule.ID) log.Trace("HTTP rule[id:%d] has been updated", httpRule.ID)
} else { } else {
log.Trace("HTTP rule[id:%d] has been created", httpRule.ID) log.Trace("HTTP rule[id:%d] has been created", httpRule.ID)
+2 -2
View File
@@ -191,10 +191,10 @@ func (s *Server) Run() {
} }
}() }()
for s.Enable { for {
tcpConn, err := listener.Accept() tcpConn, err := listener.Accept()
if err != nil { if err != nil {
if !strings.Contains(err.Error(), net.ErrClosed.Error()) { if !errors.Is(err, net.ErrClosed) {
log.Warn("RMI accept connection error: %v", err) log.Warn("RMI accept connection error: %v", err)
} else { } else {
break break
+3 -13
View File
@@ -93,10 +93,7 @@ func ListRules(c *gin.Context) {
} }
db := database.DB.Model(&rmiRule) db := database.DB.Model(&rmiRule)
if rmiRule.Name != "" { db.Where(&rmiRule).Count(&count)
db.Where("name = ?", rmiRule.Name)
}
db.Count(&count)
page, err := strconv.Atoi(c.Query("page")) page, err := strconv.Atoi(c.Query("page"))
if err != nil { if err != nil {
@@ -130,10 +127,7 @@ func ListRules(c *gin.Context) {
// UpsertRules creates or updates rmi rule from user submit // UpsertRules creates or updates rmi rule from user submit
func UpsertRules(c *gin.Context) { func UpsertRules(c *gin.Context) {
var ( var rmiRule Rule
rmiRule Rule
update bool
)
if err := c.ShouldBind(&rmiRule); err != nil { if err := c.ShouldBind(&rmiRule); err != nil {
c.JSON(400, gin.H{ c.JSON(400, gin.H{
@@ -144,10 +138,6 @@ func UpsertRules(c *gin.Context) {
return return
} }
if rmiRule.ID != 0 {
update = true
}
if err := rmiRule.CreateOrUpdate(); err != nil { if err := rmiRule.CreateOrUpdate(); err != nil {
c.JSON(400, gin.H{ c.JSON(400, gin.H{
"status": "failed", "status": "failed",
@@ -157,7 +147,7 @@ func UpsertRules(c *gin.Context) {
return return
} }
if update { if rmiRule.ID != 0 {
log.Trace("RMI rule[id:%d] has been updated", rmiRule.ID) log.Trace("RMI rule[id:%d] has been updated", rmiRule.ID)
} else { } else {
log.Trace("RMI rule[id:%d] has been created", rmiRule.ID) log.Trace("RMI rule[id:%d] has been created", rmiRule.ID)
+2
View File
@@ -4,6 +4,7 @@ import (
"github.com/li4n0/revsuit/internal/ipinfo" "github.com/li4n0/revsuit/internal/ipinfo"
"github.com/li4n0/revsuit/pkg/dns" "github.com/li4n0/revsuit/pkg/dns"
"github.com/li4n0/revsuit/pkg/ftp" "github.com/li4n0/revsuit/pkg/ftp"
"github.com/li4n0/revsuit/pkg/ldap"
"github.com/li4n0/revsuit/pkg/mysql" "github.com/li4n0/revsuit/pkg/mysql"
"github.com/li4n0/revsuit/pkg/rhttp" "github.com/li4n0/revsuit/pkg/rhttp"
"github.com/li4n0/revsuit/pkg/rmi" "github.com/li4n0/revsuit/pkg/rmi"
@@ -31,5 +32,6 @@ type Config struct {
DNS dns.Config DNS dns.Config
MySQL mysql.Config MySQL mysql.Config
RMI rmi.Config RMI rmi.Config
LDAP ldap.Config
FTP ftp.Config FTP ftp.Config
} }
+12
View File
@@ -10,6 +10,7 @@ import (
"github.com/li4n0/revsuit/internal/file" "github.com/li4n0/revsuit/internal/file"
"github.com/li4n0/revsuit/pkg/dns" "github.com/li4n0/revsuit/pkg/dns"
"github.com/li4n0/revsuit/pkg/ftp" "github.com/li4n0/revsuit/pkg/ftp"
"github.com/li4n0/revsuit/pkg/ldap"
"github.com/li4n0/revsuit/pkg/mysql" "github.com/li4n0/revsuit/pkg/mysql"
"github.com/li4n0/revsuit/pkg/rhttp" "github.com/li4n0/revsuit/pkg/rhttp"
"github.com/li4n0/revsuit/pkg/rmi" "github.com/li4n0/revsuit/pkg/rmi"
@@ -69,6 +70,8 @@ func (revsuit *Revsuit) registerHttpRouter() {
settingsGroup.POST("/updateDnsConfig", revsuit.updateDnsConfig) settingsGroup.POST("/updateDnsConfig", revsuit.updateDnsConfig)
settingsGroup.GET("/getRmiConfig", revsuit.getRmiConfig) settingsGroup.GET("/getRmiConfig", revsuit.getRmiConfig)
settingsGroup.POST("/updateRmiConfig", revsuit.updateRmiConfig) settingsGroup.POST("/updateRmiConfig", revsuit.updateRmiConfig)
settingsGroup.GET("/getLdapConfig", revsuit.getLdapConfig)
settingsGroup.POST("/updateLdapConfig", revsuit.updateLdapConfig)
settingsGroup.GET("/getMySQLConfig", revsuit.getMySQLConfig) settingsGroup.GET("/getMySQLConfig", revsuit.getMySQLConfig)
settingsGroup.POST("/updateMySQLConfig", revsuit.updateMySQLConfig) settingsGroup.POST("/updateMySQLConfig", revsuit.updateMySQLConfig)
settingsGroup.GET("/getFtpConfig", revsuit.getFtpConfig) settingsGroup.GET("/getFtpConfig", revsuit.getFtpConfig)
@@ -95,6 +98,10 @@ func (revsuit *Revsuit) registerHttpRouter() {
rmiGroup.GET("", rmi.Records) rmiGroup.GET("", rmi.Records)
rmiGroup.DELETE("", rmi.Records) rmiGroup.DELETE("", rmi.Records)
ldapGroup := recordGroup.Group("/ldap")
ldapGroup.GET("", ldap.Records)
ldapGroup.DELETE("", ldap.Records)
ftpGroup := recordGroup.Group("/ftp") ftpGroup := recordGroup.Group("/ftp")
ftpGroup.GET("", ftp.Records) ftpGroup.GET("", ftp.Records)
ftpGroup.DELETE("", ftp.Records) ftpGroup.DELETE("", ftp.Records)
@@ -122,6 +129,11 @@ func (revsuit *Revsuit) registerHttpRouter() {
rmiGroup.POST("", rmi.UpsertRules) rmiGroup.POST("", rmi.UpsertRules)
rmiGroup.DELETE("", rmi.DeleteRules) rmiGroup.DELETE("", rmi.DeleteRules)
ldapGroup = ruleGroup.Group("/ldap")
ldapGroup.GET("", ldap.ListRules)
ldapGroup.POST("", ldap.UpsertRules)
ldapGroup.DELETE("", ldap.DeleteRules)
ftpGroup = ruleGroup.Group("/ftp") ftpGroup = ruleGroup.Group("/ftp")
ftpGroup.GET("", ftp.ListRules) ftpGroup.GET("", ftp.ListRules)
ftpGroup.POST("", ftp.UpsertRules) ftpGroup.POST("", ftp.UpsertRules)
+33 -45
View File
@@ -11,6 +11,7 @@ import (
"github.com/li4n0/revsuit/internal/record" "github.com/li4n0/revsuit/internal/record"
"github.com/li4n0/revsuit/pkg/dns" "github.com/li4n0/revsuit/pkg/dns"
"github.com/li4n0/revsuit/pkg/ftp" "github.com/li4n0/revsuit/pkg/ftp"
"github.com/li4n0/revsuit/pkg/ldap"
"github.com/li4n0/revsuit/pkg/mysql" "github.com/li4n0/revsuit/pkg/mysql"
http "github.com/li4n0/revsuit/pkg/rhttp" http "github.com/li4n0/revsuit/pkg/rhttp"
"github.com/li4n0/revsuit/pkg/rmi" "github.com/li4n0/revsuit/pkg/rmi"
@@ -28,6 +29,7 @@ type Revsuit struct {
dns *dns.Server dns *dns.Server
mysql *mysql.Server mysql *mysql.Server
rmi *rmi.Server rmi *rmi.Server
ldap *ldap.Server
ftp *ftp.Server ftp *ftp.Server
clients map[int]*gin.Context clients map[int]*gin.Context
@@ -66,55 +68,35 @@ func initDatabase(dsn string) {
log.Fatal(err.Error()) log.Fatal(err.Error())
} }
err = database.DB.AutoMigrate(&http.Record{}) err = database.DB.AutoMigrate(&http.Record{}, &http.Rule{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&dns.Record{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&mysql.Record{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&http.Rule{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&dns.Rule{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&mysql.Rule{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&file.MySQLFile{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&rmi.Record{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&rmi.Rule{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&ftp.Record{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&ftp.Rule{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&file.FTPFile{})
if err != nil { if err != nil {
log.Fatal(err.Error()) log.Fatal(err.Error())
} }
err = database.DB.AutoMigrate(&dns.Record{}, &dns.Rule{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&mysql.Record{}, &mysql.Rule{}, &file.MySQLFile{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&rmi.Record{}, &rmi.Rule{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&ldap.Record{}, &ldap.Rule{})
if err != nil {
log.Fatal(err.Error())
}
err = database.DB.AutoMigrate(&ftp.Record{}, &ftp.Rule{}, &file.FTPFile{})
if err != nil {
log.Fatal(err.Error())
}
} }
func initLog(level string) (logLevel log.Level) { func initLog(level string) (logLevel log.Level) {
@@ -198,6 +180,9 @@ func New(c *Config) *Revsuit {
s.rmi = rmi.GetServer() s.rmi = rmi.GetServer()
s.rmi.Config = c.RMI s.rmi.Config = c.RMI
s.ldap = ldap.GetServer()
s.ldap.Config = c.LDAP
s.ftp = ftp.GetServer() s.ftp = ftp.GetServer()
s.ftp.Config = c.FTP s.ftp.Config = c.FTP
@@ -232,6 +217,9 @@ func (revsuit *Revsuit) Run() {
if revsuit.rmi != nil && revsuit.rmi.Enable { if revsuit.rmi != nil && revsuit.rmi.Enable {
go revsuit.rmi.Run() go revsuit.rmi.Run()
} }
if revsuit.ldap != nil && revsuit.ldap.Enable {
go revsuit.ldap.Run()
}
if revsuit.mysql != nil && revsuit.mysql.Enable { if revsuit.mysql != nil && revsuit.mysql.Enable {
go revsuit.mysql.Run() go revsuit.mysql.Run()
} }
+55 -5
View File
@@ -9,6 +9,7 @@ import (
"github.com/li4n0/revsuit/internal/database" "github.com/li4n0/revsuit/internal/database"
"github.com/li4n0/revsuit/pkg/dns" "github.com/li4n0/revsuit/pkg/dns"
"github.com/li4n0/revsuit/pkg/ftp" "github.com/li4n0/revsuit/pkg/ftp"
"github.com/li4n0/revsuit/pkg/ldap"
"github.com/li4n0/revsuit/pkg/mysql" "github.com/li4n0/revsuit/pkg/mysql"
"github.com/li4n0/revsuit/pkg/rhttp" "github.com/li4n0/revsuit/pkg/rhttp"
"github.com/li4n0/revsuit/pkg/rmi" "github.com/li4n0/revsuit/pkg/rmi"
@@ -22,6 +23,7 @@ type Rules struct {
Dns []dns.Rule Dns []dns.Rule
Mysql []mysql.Rule Mysql []mysql.Rule
Rmi []rmi.Rule Rmi []rmi.Rule
Ldap []ldap.Rule
Ftp []ftp.Rule Ftp []ftp.Rule
} }
@@ -35,6 +37,7 @@ func exportRules(c *gin.Context) {
db.Model(&dns.Rule{}).Find(&rules.Dns) db.Model(&dns.Rule{}).Find(&rules.Dns)
db.Model(&mysql.Rule{}).Find(&rules.Mysql) db.Model(&mysql.Rule{}).Find(&rules.Mysql)
db.Model(&rmi.Rule{}).Find(&rules.Rmi) db.Model(&rmi.Rule{}).Find(&rules.Rmi)
db.Model(&rmi.Rule{}).Find(&rules.Ldap)
db.Model(&ftp.Rule{}).Find(&rules.Ftp) db.Model(&ftp.Rule{}).Find(&rules.Ftp)
out, err := yaml.Marshal(rules) out, err := yaml.Marshal(rules)
@@ -88,7 +91,7 @@ func (revsuit *Revsuit) importRules(c *gin.Context) {
for _, rule := range rules.Http { for _, rule := range rules.Http {
if err := db.Model(&rhttp.Rule{}).Create(&rule).Error; err != nil { if err := db.Model(&rhttp.Rule{}).Create(&rule).Error; err != nil {
errs = append(errs, errors.Wrap(err, fmt.Sprintf("http rule[%s]", rule.Name)).Error()) errs = append(errs, errors.Wrapf(err, "http rule[%s]", rule.Name).Error())
continue continue
} }
count++ count++
@@ -99,7 +102,7 @@ func (revsuit *Revsuit) importRules(c *gin.Context) {
for _, rule := range rules.Dns { for _, rule := range rules.Dns {
if err := db.Model(&dns.Rule{}).Create(&rule).Error; err != nil { if err := db.Model(&dns.Rule{}).Create(&rule).Error; err != nil {
errs = append(errs, errors.Wrap(err, fmt.Sprintf("dns rule[%s]", rule.Name)).Error()) errs = append(errs, errors.Wrapf(err, "dns rule[%s]", rule.Name).Error())
continue continue
} }
count++ count++
@@ -110,7 +113,7 @@ func (revsuit *Revsuit) importRules(c *gin.Context) {
for _, rule := range rules.Mysql { for _, rule := range rules.Mysql {
if err := db.Model(&mysql.Rule{}).Create(&rule).Error; err != nil { if err := db.Model(&mysql.Rule{}).Create(&rule).Error; err != nil {
errs = append(errs, errors.Wrap(err, fmt.Sprintf("mysql rule[%s]", rule.Name)).Error()) errs = append(errs, errors.Wrapf(err, "mysql rule[%s]", rule.Name).Error())
continue continue
} }
count++ count++
@@ -121,7 +124,7 @@ func (revsuit *Revsuit) importRules(c *gin.Context) {
for _, rule := range rules.Rmi { for _, rule := range rules.Rmi {
if err := db.Model(&rmi.Rule{}).Create(&rule).Error; err != nil { if err := db.Model(&rmi.Rule{}).Create(&rule).Error; err != nil {
errs = append(errs, errors.Wrap(err, fmt.Sprintf("rmi rule[%s]", rule.Name)).Error()) errs = append(errs, errors.Wrapf(err, "rmi rule[%s]", rule.Name).Error())
continue continue
} }
count++ count++
@@ -130,9 +133,20 @@ func (revsuit *Revsuit) importRules(c *gin.Context) {
errs = append(errs, err.Error()) errs = append(errs, err.Error())
} }
for _, rule := range rules.Ldap {
if err := db.Model(&ldap.Rule{}).Create(&rule).Error; err != nil {
errs = append(errs, errors.Wrapf(err, "ldap rule[%s]", rule.Name).Error())
continue
}
count++
}
if err := revsuit.ldap.UpdateRules(); err != nil {
errs = append(errs, err.Error())
}
for _, rule := range rules.Ftp { for _, rule := range rules.Ftp {
if err := db.Model(&ftp.Rule{}).Create(&rule).Error; err != nil { if err := db.Model(&ftp.Rule{}).Create(&rule).Error; err != nil {
errs = append(errs, errors.Wrap(err, fmt.Sprintf("ftp rule[%s]", rule.Name)).Error()) errs = append(errs, errors.Wrapf(err, "ftp rule[%s]", rule.Name).Error())
continue continue
} }
count++ count++
@@ -381,6 +395,42 @@ func (revsuit *Revsuit) updateRmiConfig(c *gin.Context) {
} }
} }
func (revsuit *Revsuit) getLdapConfig(c *gin.Context) {
c.JSON(200, revsuit.ldap.Config)
}
func (revsuit *Revsuit) updateLdapConfig(c *gin.Context) {
var form = ldap.Config{}
if err := c.ShouldBindJSON(&form); err != nil {
c.JSON(400, gin.H{
"status": "failed",
"error": err.Error(),
"data": nil,
})
return
}
if form.Addr != revsuit.ldap.Addr {
revsuit.ldap.Addr = form.Addr
log.Info("Update ldap config [addr] to %s", form.Addr)
}
if form.Enable != revsuit.ldap.Enable {
log.Info("Update ldap config [enable] to %v", form.Enable)
if form.Enable {
go revsuit.ldap.Run()
} else {
revsuit.ldap.Stop()
}
return
}
if revsuit.ldap.Enable {
revsuit.ldap.Restart()
}
}
func (revsuit *Revsuit) getNoticeConfig(c *gin.Context) { func (revsuit *Revsuit) getNoticeConfig(c *gin.Context) {
c.JSON(200, revsuit.config.Notice) c.JSON(200, revsuit.config.Notice)
} }