/ - Diff - Metacat - Ecoinformatics Redmine

« Previous | Next »

Revision 837

Added by bojilova about 23 years ago

changes in replication to use https

         PrintWriter out = response.getWriter();
         Hashtable params = new Hashtable();
         Enumeration paramlist = request.getParameterNames();
         String servletAction = null;
         String requestingServerIP = request.getRemoteAddr();
         InetAddress iaddr = InetAddress.getByName(requestingServerIP);
         String requestingServer = iaddr.getHostName();
     // NOT NEEDED - doesn't provide enough security because of possible IP spoofing
     // REPLACED with running replication comminications over HTTPS
     //    String requestingServerIP = request.getRemoteAddr();
     //    InetAddress iaddr = InetAddress.getByName(requestingServerIP);
     //    String requestingServer = iaddr.getHostName();
         while (paramlist.hasMoreElements())
+        {
         while (paramlist.hasMoreElements()) {
           String name = (String)paramlist.nextElement();
           String[] value = request.getParameterValues(name);
           params.put(name, value);
+        }
         servletAction = ((String[])params.get("action"))[0];
         String servletAction = ((String[])params.get("action"))[0];
         String server = ((String[])params.get("server"))[0];
         //if the requesting Server is not in the server list
         //reject this request
         //this does not protect against IP spoofing but it does
         //protect against simple URL parameter spoofing.
         //We need to add an authenticated  "replication" user who can perform the
         //actions listed below in the !servletAction.equals calls.
         try
+        {
           if(getServerCode(requestingServer + "%") == 0 &&
              !servletAction.equals("servercontrol") &&
              !servletAction.equals("stop") &&
              !servletAction.equals("start") &&
              !servletAction.equals("getall"))
+          {
             System.out.println("action rejected for server: " + requestingServer);
         try {
           // check if the server is included in the list of replicated servers
           if ( getServerCode(server) == 0 &&
                !servletAction.equals("servercontrol") &&
                !servletAction.equals("stop") &&
                !servletAction.equals("start") &&
                !servletAction.equals("getall") ) {
             System.out.println("action rejected for server: " + server);
             return;
+          }
           System.out.println("action accepted for server: " + requestingServer);
+        }
         catch(Exception e)
+        {
           System.out.println("error in MetacatReplication.handleGetOrPost" +
           ": error authenticating server");
           System.out.println("action accepted for server: " + server);
         } catch (Exception e) {
           System.out.println("Error in MetacatReplication.handleGetOrPost: " +
                              e.getMessage() );
           return;
+        }
         if(params.containsKey("action"))
+        {
           if(servletAction.equals("stop"))
           { //stop the replication server
             replicationDaemon.cancel();
             replicationDaemon = new Timer(true);
             out.println("Replication Handler Stopped");
             System.out.println("Replication Handler Stopped");
             MetacatReplication.replLog("deltaT handler stopped");
+          }
           else if(servletAction.equals("start"))
           { //start the replication server
             int rate;
             if(params.containsKey("rate"))
+            {
               rate = new Integer(
                      new String(((String[])params.get("rate"))[0])).intValue();
               if(rate < 30)
+              {
         if ( servletAction.equals("stop") ) {
           //stop the replication server
           replicationDaemon.cancel();
           replicationDaemon = new Timer(true);
           out.println("Replication Handler Stopped");
           MetacatReplication.replLog("deltaT handler stopped");
         } else if ( servletAction.equals("start") ) {
           //start the replication server
           int rate;
           if ( params.containsKey("rate") ) {
             rate = new Integer(
                    new String(((String[])params.get("rate"))[0])).intValue();
             if(rate < 30) {
                 out.println("Replication deltaT rate cannot be less than 30!");
                 //deltaT<30 is a timing mess!
                 rate = 1000;
+              }
+            }
             else
+            {
               rate = 1000;
+            }
             out.println("New rate is: " + rate + " seconds.");
             replicationDaemon.cancel();
             replicationDaemon = new Timer(true);
             replicationDaemon.scheduleAtFixedRate(new ReplicationHandler(out), 0,
                                                   rate * 1000);
             MetacatReplication.replLog("deltaT handler started with rate=" +
           } else {
             rate = 1000;
+          }
           out.println("New rate is: " + rate + " seconds.");
           replicationDaemon.cancel();
           replicationDaemon = new Timer(true);
           replicationDaemon.scheduleAtFixedRate(new ReplicationHandler(out), 0,
                                                 rate * 1000);
           out.println("Replication Handler Started");
           MetacatReplication.replLog("deltaT handler started with rate=" +
                                         rate + " seconds");
             out.println("Replication Handler Started");
             System.out.println("Replication Handler Started");
+          }
           else if(servletAction.equals("getall"))
           { //updates this server exactly once
             replicationDaemon.schedule(new ReplicationHandler(out), 0);
             response.setContentType("text/html");
             out.println("<html><body>\"Get All\" Done</body></html>");
+          }
           else if(servletAction.equals("forcereplicate"))
+          {
             handleForceReplicateRequest(out, params, response);
+          }
           else if(servletAction.equals("update"))
           { //request an update list from the server
             handleUpdateRequest(out, params, response);
+          }
           else if(servletAction.equals("read"))
           { //request a specific document from the server
             //note that this could be replaced by a call to metacatServlet
             //handleGetDocumentAction().
             handleGetDocumentRequest(out, params, response);
+          }
           else if(servletAction.equals("getlock"))
+          {
             handleGetLockRequest(out, params, response);
+          }
           else if(servletAction.equals("getdocumentinfo"))
+          {
             handleGetDocumentInfoRequest(out, params, response);
+          }
           else if(servletAction.equals("gettime"))
+          {
             handleGetTimeRequest(out, params, response);
+          }
           else if(servletAction.equals("getcatalog"))
+          {
             handleGetCatalogRequest(out, params, response, true);
+          }
           else if(servletAction.equals("servercontrol"))
+          {
             handleServerControlRequest(out, params, response);
+          }
         } else if ( servletAction.equals("getall") ) {
           //updates this server exactly once
           replicationDaemon.schedule(new ReplicationHandler(out), 0);
           response.setContentType("text/html");
           out.println("<html><body>\"Get All\" Done</body></html>");
         } else if ( servletAction.equals("forcereplicate") ) {
           handleForceReplicateRequest(out, params, response);
         } else if ( servletAction.equals("update") ) {
           //request an update list from the server
           handleUpdateRequest(out, params, response);
         } else if ( servletAction.equals("read") ) {
           //request a specific document from the server
           //note that this could be replaced by a call to metacatServlet
           //handleGetDocumentAction().
           handleGetDocumentRequest(out, params, response);
         } else if ( servletAction.equals("getlock") ) {
           handleGetLockRequest(out, params, response);
         } else if ( servletAction.equals("getdocumentinfo") ) {
           handleGetDocumentInfoRequest(out, params, response);
         } else if ( servletAction.equals("gettime") ) {
           handleGetTimeRequest(out, params, response);
         } else if ( servletAction.equals("getcatalog") ) {
           handleGetCatalogRequest(out, params, response, true);
         } else if ( servletAction.equals("servercontrol") ) {
           handleServerControlRequest(out, params, response);
+        }
+        }
+      }
       /**
-...
+      {
         String subaction = ((String[])params.get("subaction"))[0];
         Connection conn = null;
         try
+        {
           conn = MetacatReplication.getDBConnection("MetacatReplication." +
                                                     "handleServerControlRequest");
         try {
           conn = util.openDBConnection();
           PreparedStatement pstmt = null;
           if(subaction.equals("add"))
+          {
           // add server to server list
           if ( subaction.equals("add") ) {
             String replicate = ((String[])params.get("replicate"))[0];
             String server = ((String[])params.get("server"))[0];
             pstmt = conn.prepareStatement("insert into xml_replication (server, " +
                     "last_checked, replicate) values ('" + server + "', to_date(" +
                     "'01/01/00', 'MM/DD/YY'), '" + replicate + "')");
             pstmt = conn.prepareStatement("INSERT INTO xml_replication " +
                                           "(server, last_checked, replicate) " +
                                           "VALUES ('" + server + "', to_date(" +
                                           "'01/01/00', 'MM/DD/YY'), '" +
                                           replicate + "')");
             pstmt.execute();
             out.println("Server says: server " + server + " added");
             pstmt.close();
             conn.commit();
             out.println("Server " + server + " added");
             response.setContentType("text/html");
             out.println("<html><body><table border=\"1\">");
             out.println("<tr><td><b>server</b></td><td><b>last_checked</b></td><td>");
             out.println("<b>replicate</b></td></tr>");
             pstmt = conn.prepareStatement("select * from xml_replication");
             pstmt = conn.prepareStatement("SELECT * FROM xml_replication");
             pstmt.execute();
             ResultSet rs = pstmt.getResultSet();
             boolean tablehasrows = rs.next();
             while(tablehasrows)
+            {
             while(tablehasrows) {
               out.println("<tr><td>" + rs.getString(2) + "</td><td>");
               out.println(rs.getString(3) + "</td><td>");
               out.println(rs.getString(4) + "</td></tr>");
               tablehasrows = rs.next();
+            }
             out.println("</table></body></html>");
+          }
           else if(subaction.equals("delete"))
+          {
           // delete server from server list
           } else if ( subaction.equals("delete") ) {
             String server = ((String[])params.get("server"))[0];
             pstmt = conn.prepareStatement("delete from xml_replication where " +
                     "server like '" + server + "'");
             pstmt = conn.prepareStatement("DELETE FROM xml_replication " +
                                           "WHERE server LIKE '" + server + "'");
             pstmt.execute();
             out.println("Server says: server " + server + " deleted");
             pstmt.close();
             conn.commit();
             out.println("Server " + server + " deleted");
             response.setContentType("text/html");
             out.println("<html><body><table border=\"1\">");
             out.println("<tr><td><b>server</b></td><td><b>last_checked</b></td><td>");
             out.println("<b>replicate</b></td></tr>");
             pstmt = conn.prepareStatement("select * from xml_replication");
             pstmt = conn.prepareStatement("SELECT * FROM xml_replication");
             pstmt.execute();
             ResultSet rs = pstmt.getResultSet();
             boolean tablehasrows = rs.next();
-...
               tablehasrows = rs.next();
+            }
             out.println("</table></body></html>");
+          }
           else if(subaction.equals("list"))
+          {
           // list servers in server list
           } else if ( subaction.equals("list") ) {
             response.setContentType("text/html");
             out.println("<html><body><table border=\"1\">");
             out.println("<tr><td><b>server</b></td><td><b>last_checked</b></td><td>");
             out.println("<b>replicate</b></td></tr>");
             pstmt = conn.prepareStatement("select * from xml_replication");
             pstmt = conn.prepareStatement("SELECT * FROM xml_replication");
             pstmt.execute();
             ResultSet rs = pstmt.getResultSet();
             boolean tablehasrows = rs.next();
             while(tablehasrows)
+            {
             while(tablehasrows) {
               out.println("<tr><td>" + rs.getString(2) + "</td><td>");
               out.println(rs.getString(3) + "</td><td>");
               out.println(rs.getString(4) + "</td></tr>");
-...
+          }
           pstmt.close();
           conn.close();
+        }
         catch(Exception e)
+        {
           System.out.println("error in " +
         } catch(Exception e) {
           System.out.println("Error in " +
                              "MetacatReplication.handleServerControlRequest " +
                              e.getMessage());
           e.printStackTrace(System.out);
-...
       private void handleForceReplicateRequest(PrintWriter out, Hashtable params,
                                                HttpServletResponse response)
+      {
         //System.out.println("in handleforcereplicaterequest");
         String server = ((String[])params.get("server"))[0];
     // BUG: it only receives the document from "server" and no need for this check here
     //    if(!(replToServer(server)))
     //    { //do not get the server's new document if we are not replicating from there
     //      return;
     //    }
         //the server that the request came from
         String docid = ((String[])params.get("docid"))[0];
         //the docid of the document to get
         String dbaction = "UPDATE";
         //default action is update
         String server = ((String[])params.get("server"))[0]; // the server that
         String docid = ((String[])params.get("docid"))[0]; // sent the document
         String dbaction = "UPDATE"; // the default action is UPDATE
         boolean override = false;
         int serverCode = 1;
         try
+        {
           if(params.containsKey("dbaction"))
           { //if the url contains a dbaction then the default action is overridden
         try {
           //if the url contains a dbaction then the default action is overridden
           if(params.containsKey("dbaction")) {
             dbaction = ((String[])params.get("dbaction"))[0];
             serverCode = MetacatReplication.getServerCode(server);
             override = true; //we are now overriding the default action
+          }
           MetaCatUtil.debugMessage("action in forcereplicate is: " + dbaction);
           MetaCatUtil.debugMessage("serverCode in forcereplicate is: " + serverCode);
           MetacatReplication.replLog("force replication request from " + server);
           int serverCheckCode = MetacatReplication.getServerCode(server);
           URL u = new URL("http://" + server + "?action=read&docid=" + docid);
           MetaCatUtil.debugMessage("sending message: " + u.toString());
           // sending back read request to server
           URL u = new URL("https://" + server + "?action=read&docid=" + docid);
           String xmldoc = MetacatReplication.getURLContent(u);
           MetaCatUtil.debugMessage("document: " + xmldoc);
           //get the document to write
           URL docinfourl = new URL("http://" + server +
                                    "?action=getdocumentinfo&docid=" +
                                    docid);
           //we need to get the document's info so we can set the correct user
           //and groups once we get the document and write it to our DB
           MetaCatUtil.debugMessage("sending message: " + docinfourl.toString());
           // get the document info from server
           URL docinfourl = new URL("https://" + server +
                                    "?action=getdocumentinfo&docid=" + docid);
           String docInfoStr = MetacatReplication.getURLContent(docinfourl);
           MetaCatUtil.debugMessage("docInfo: " + docInfoStr);
           //dih is the parser for the docinfo xml format
           DocInfoHandler dih = new DocInfoHandler();
           //dih is the parser for the docinfo xml format
           XMLReader docinfoParser = ReplicationHandler.initParser(dih);
           docinfoParser.parse(new InputSource(new StringReader(docInfoStr)));
           Hashtable docinfoHash = dih.getDocInfo();
           String user = (String)docinfoHash.get("user_owner");
           //String[] groups = null;
           //right now the user and group are the same.
           Connection conn = null;
           conn = MetacatReplication.getDBConnection("MetacatReplication." +
                                                     "handleForceReplicateRequest");
           // write the document here
     System.out.println("Open db connection");
           Connection conn = util.openDBConnection();
     System.out.println("DB connection opened");
           DocumentImpl.write(conn, new StringReader(xmldoc), null, dbaction, docid,
                              user, null, serverCode, override);
           conn.close();
           MetacatReplication.replLog("document " + docid + " added to DB with " +
                                      "action " + dbaction);
           conn.close();
         } catch(Exception e) {
           System.out.println("ERROR in MetacatReplication.handleForceReplicate" +
                              "Request(): " + e.getMessage());
+        }
         catch(Exception e)
+        {
           System.out.println("error in metacatReplication.handleForceReplicate" +
                              "Request: " + e.getMessage());
+        }
+      }
       /**
-...
+      {
         Connection conn = null;
         PreparedStatement pstmt = null;
         try
+        {
           conn = MetacatReplication.getDBConnection("MetacatReplication.getServerCode");
           pstmt = conn.prepareStatement("select serverid from " +
                                              "xml_replication where server " +
                                              "like '" + server + "'");
         int serverCode = 0;
         try {
           conn = util.openDBConnection();
           pstmt = conn.prepareStatement("SELECT serverid FROM xml_replication " +
                                         "WHERE server LIKE '" + server + "'");
           pstmt.execute();
           ResultSet rs = pstmt.getResultSet();
           boolean tablehasrows = rs.next();
           int serverCode = 0;
           if(tablehasrows)
+          {
             int ret = rs.getInt(1);
           if ( tablehasrows ) {
             serverCode = rs.getInt(1);
             pstmt.close();
             conn.close();
             return ret;
             return serverCode;
+          }
           else
+          {
         } catch(Exception e) {
           throw e;
         } finally {
           try {
             pstmt.close();
             conn.close();
             return 0;
+          }
           } catch(Exception ee) {}
+        }
         catch(Exception e)
+        {
           throw e;
+        }
         finally
+        {
            try
+           {
              pstmt.close();
              conn.close();
+           }
            catch(Exception ee) {}
+        }
         return serverCode;
+      }
       /**

                                   boolean validate)
                     throws Exception
+      {
     //    int rev = 1;
     //    String docid = null;
     //    MetaCatUtil util = new MetaCatUtil();
     //    String sep = util.getOption("accNumSeparator");
     /*
         if ( accnum != null ) {
           // check the correctness of accnum;
           // split accnum in docid and rev in order to
           // preserve the current implementation of processing and storing,
           // but show the whole accnum to the client.
           DocumentIdentifier id = new DocumentIdentifier(accnum);
           docid = id.getIdentifier();
           rev = (new Integer(id.getRev())).intValue();
           sep = id.getSeparator();
+        }
     */
         // OLD
         // Determine if the docid,rev are OK for INSERT or UPDATE
         // Generate new docid on INSERT, if one is not provided.
         //AccessionNumber ac = new AccessionNumber(conn);
         //docid = ac.generate(docid, java.lang.String.valueOf(rev), action);
         // NEW - WHEN CLIENT ALWAYS PROVIDE ACCESSION NUMBER INCLUDING REV IN IT
         AccessionNumber ac = new AccessionNumber(conn, accnum, action);
         String docid = ac.getDocid();
-...
           String updaterev = id.getRev();
           String server = MetacatReplication.getServer(serverCode);
           MetacatReplication.replLog("attempting to lock " + accnum);
           URL u = new URL("http://" + server + "?action=getlock&updaterev=" +
           URL u = new URL("https://" + server + "?action=getlock&updaterev=" +
                           updaterev + "&docid=" + docid);
           System.out.println("sending message: " + u.toString());
           String serverResStr = MetacatReplication.getURLContent(u);
-...
             //to come get a copy from here.
             ForceReplicationHandler frh = new ForceReplicationHandler(accnum);
             // OLD
             //rev++;
             //return (docid + sep + rev);
             return (accnum);
+          }
-...
             throw new Exception("User " + user +
                   " does not have permission to update XML Document #" + accnum);
+          }
           //rev++;
+        }
         try
-...
           ForceReplicationHandler frh = new ForceReplicationHandler(accnum, action);
+        }
         //return (docid + sep + rev);
         return(accnum);
+      }

+          {
             server = (String)(keys.nextElement());
             MetacatReplication.replLog("full update started to: " + server);
             u = new URL("http://" + server + "?action=update");
             u = new URL("https://" + server + "?action=update");
             System.out.println("Sending Message: " + u.toString());
             String result = MetacatReplication.getURLContent(u);
             responses.add(result);
-...
               if(flag)
               { //if the document needs to be updated or inserted, this is executed
                 u = new URL("http://" + docServer + "?action=read&docid=" +
                 u = new URL("https://" + docServer + "?action=read&docid=" +
                               docid);
                 System.out.println("Sending message: " + u.toString());
                 String newxmldoc = MetacatReplication.getURLContent(u);
                 DocInfoHandler dih = new DocInfoHandler();
                 XMLReader docinfoParser = initParser(dih);
                 URL docinfoUrl = new URL("http://" + docServer +
                 URL docinfoUrl = new URL("https://" + docServer +
                                        "?action=getdocumentinfo&docid=" +
                                        docid);
                 System.out.println("Sending message: " + docinfoUrl.toString());
-...
             while(keys.hasMoreElements())
+            {
               server = (String)(keys.nextElement());
               URL dateurl = new URL("http://" + server + "?action=gettime");
               URL dateurl = new URL("https://" + server + "?action=gettime");
               String datexml = MetacatReplication.getURLContent(dateurl);
               String datestr = datexml.substring(11, datexml.indexOf('<', 11));
               StringBuffer sql = new StringBuffer();
-...
           while(keys.hasMoreElements())
           { //go through each server
             server = (String)(keys.nextElement());
             URL u = new URL("http://" + server + "?action=getcatalog");
             URL u = new URL("https://" + server + "?action=getcatalog");
             System.out.println("sending message " + u.toString());
             String catxml = MetacatReplication.getURLContent(u);
             //System.out.println("catxml: " + catxml);

             if(dbactionFlag)
+            {
               MetacatReplication.replLog("force replicating to " + server);
               comeAndGetIt = new URL("http://" + server +
               comeAndGetIt = new URL("https://" + server +
                                      "?action=forcereplicate&server=" +
                                      util.getOption("server") +
                                      util.getOption("replicationpath") +
-...
+            {
               MetacatReplication.replLog("force replicating (default action) to )" +
                                           server);
               comeAndGetIt = new URL("http://" + server +
               comeAndGetIt = new URL("https://" + server +
                                      "?action=forcereplicate&server=" +
                                      util.getOption("server") +
                                      util.getOption("replicationpath") +

Also available in: Unified diff

Project

General

Profile

Metacat

Revision 837

Added by bojilova about 23 years ago