Class: Puppet::Network::AuthStore

Inherits:
Object
  • Object
show all
Includes:
Util::Logging
Defined in:
lib/puppet/network/authstore.rb

Direct Known Subclasses

FileServing::Mount, Rights::Right

Defined Under Namespace

Classes: Declaration

Instance Method Summary collapse

Methods included from Util::Logging

#clear_deprecation_warnings, #deprecation_warning, #format_exception, #get_deprecation_offender, #log_and_raise, #log_deprecations_to_file, #log_exception, #puppet_deprecation_warning, #send_log

Constructor Details

#initialize ⇒ AuthStore

Returns a new instance of AuthStore.



75
76
77
78
 
# File 'lib/puppet/network/authstore.rb', line 75

def initialize
  @globalallow = nil
  @declarations = []
end

Instance Method Details

#allow(pattern) ⇒ Object

Mark a given pattern as allowed.



41
42
43
44
45
46
47
48
49
50
 
# File 'lib/puppet/network/authstore.rb', line 41

def allow(pattern)
  # a simple way to allow anyone at all to connect
  if pattern == "*"
    @globalallow = true
  else
    store(:allow, pattern)
  end

  nil
end

#allow_ip(pattern) ⇒ Object 



52
53
54
 
# File 'lib/puppet/network/authstore.rb', line 52

def allow_ip(pattern)
  store(:allow_ip, pattern)
end

#allowed?(name, ip) ⇒ Boolean

Is a given combination of name and ip address allowed? If either input is non-nil, then both inputs must be provided. If neither input is provided, then the authstore is considered local and defaults to “true”.



17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
 
# File 'lib/puppet/network/authstore.rb', line 17

def allowed?(name, ip)
  if name or ip
    # This is probably unnecessary, and can cause some weirdnesses in
    # cases where we're operating over localhost but don't have a real
    # IP defined.
    raise Puppet::DevError, "Name and IP must be passed to 'allowed?'" unless name and ip
    # else, we're networked and such
  else
    # we're local
    return true
  end

  # yay insecure overrides
  return true if globalallow?

  if decl = declarations.find { |d| d.match?(name, ip) }
    return decl.result
  end

  info "defaulting to no access for #{name}"
  false
end

#deny(pattern) ⇒ Object

Deny a given pattern.



57
58
59
 
# File 'lib/puppet/network/authstore.rb', line 57

def deny(pattern)
  store(:deny, pattern)
end

#deny_ip(pattern) ⇒ Object 



61
62
63
 
# File 'lib/puppet/network/authstore.rb', line 61

def deny_ip(pattern)
  store(:deny_ip, pattern)
end

#empty? ⇒ Boolean

does this auth store has any rules?



71
72
73
 
# File 'lib/puppet/network/authstore.rb', line 71

def empty?
  @globalallow.nil? && @declarations.size == 0
end

#globalallow? ⇒ Boolean

Is global allow enabled?



66
67
68
 
# File 'lib/puppet/network/authstore.rb', line 66

def globalallow?
  @globalallow
end

#interpolate(match) ⇒ Object 



84
85
86
 
# File 'lib/puppet/network/authstore.rb', line 84

def interpolate(match)
  @modified_declarations = @declarations.collect { |ace| ace.interpolate(match) }.sort
end

#reset_interpolation ⇒ Object 



88
89
90
 
# File 'lib/puppet/network/authstore.rb', line 88

def reset_interpolation
  @modified_declarations = nil
end

#to_s ⇒ Object 



80
81
82
 
# File 'lib/puppet/network/authstore.rb', line 80

def to_s
  "authstore"
end