mirror of
https://github.com/Cacti/cacti.git
synced 2026-11-03 02:27:13 +09:00
* Port #8166 SNMP credential cache + procedural SNMPv3 to develop Ports the shared SNMPv3 credential cache and procedural SNMPv3 routing from the 1.2.x feature (merged as #8166) onto develop, adapted to develop's refactored SNMP layer. Parts of the 1.2.x change that do not apply to develop are omitted: the cacti_exec() idle-timeout rewrite (develop has no cacti_exec()), the PHP floor bump and composer/doc changes (develop is already 8.3+), and the cmd.php max_oids batching (develop's cmd.php already collects SNMP in-process through persistent sessions, so the per-item spawn the batching removed does not occur). - lib/cache.php: new cross-process \Cacti\Cache\SharedCache (file + POSIX shared-memory + process-local tiers, optional AES-256-GCM sealing). Loaded via lib/snmp.php (the Cacti\Cache\ namespace is not PSR-4 autoloaded). The crypto helpers it seals with already live in develop's lib/auth.php, loaded by global.php, so no duplicate was added. - lib/snmp.php: snmp_get_method() now routes SNMPv3 get/getnext to the procedural snmp3_*() calls when the running PHP supports the configured auth/privacy tokens and no context/engine id is set (SHA-224/384 and AES-192/256[C] stay on the binary before PHP 8.6); the three single-get functions gain the procedural v3 path with \Throwable handling; adds the credential-cache subsystem, protocol-option/MD5-DES helpers, snmp_native_protocol(), snmp_format_agent() and cacti_snmp_get_multi(); the binary v3 auth builder consults the cache when enabled. - poller.php / script_server.php: prime / load the shared cache. - poller_maintenance.php: daily out-of-band cache rebuild on every collector (per-poller lastrun marker). - lib/api_device.php / lib/utility.php: bump snmp_cred_version only on v3 credential add/change (and propagate the token to the affected remote poller). - include/global.php: resolve and create the private cache/ directory. - include/global_settings.php: add 'Enable Credential Cache' and 'Enable MD5 and DES for SNMPv3' settings (both off by default); default new-device v3 auth/privacy to SHA/AES instead of legacy MD5/DES. - host.php / automation_snmp.php: drop MD5/DES from the pickers when disabled and default new records to SHA/AES on upgraded installs. - include/config.php.dist: document $config['cache_dir']. - tests/Unit/Core/Cache/SharedCacheTest.php: SharedCache behaviour coverage. - tests/security/baselines: baseline the two new lib/cache.php sinks. * Incorporate #8171: binary fallback for unsupported SNMPv3 protocols Layers PR #8171 onto the develop port so an SNMPv3 device whose auth/privacy protocols the running PHP's ext-snmp cannot service natively (e.g. AES-256 before PHP 8.6) no longer fatals the poller or device-edit screen. - lib/snmp.php: add CactiSnmpBinarySession, a session stand-in exposing the get/getnext/walk/close interface the cacti_snmp_session_*() helpers use and delegating each call to cacti_snmp_*() -> the Net-SNMP binary. cacti_snmp_session() returns it when php-snmp is absent or the v3 protocol is not natively serviceable, so cmd.php/host.php collect these devices via the binary on pre-8.6 and switch to the in-process path on 8.6 with no caller change. v1/v2 snmpget/snmp2_get now go through snmp_format_agent(). The ERRNO_TIMEOUT check tolerates php-snmp being absent. Drop the vendored classSNMP.php compatibility shim and its include (and the Yandex attribution). - cmd.php: open_snmp_session() returns the down sentinel when a host is already marked down this run, instead of returning an unset (null) [] that cacti_snmp_session_get() then dereferenced (TypeError). - lib/ping.php: ping_snmp() runs the availability check through the procedural cacti_snmp_get()/getnext() path so an unsupported protocol falls back to the binary instead of raising a ValueError in SNMP::setSecurity(). * Incorporate #8172: retire include/vendor/phpsnmp, relocate into lib Follow-up to #8171 on the develop port. After classSNMP.php was removed, the include/vendor/phpsnmp/ directory held only Cacti-owned files; this retires it. - lib/snmp.php: the ext-snmp subclass that carried Cacti's bulk_walk_size / value_output_format (previously vendor/phpsnmp/extension.php) is now declared directly as CactiSnmpNativeSession, guarded by CACTI_PHP_SNMP; the include and the 'use phpsnmp\SNMP' alias are gone, and new SNMP(...) / SNMP::VERSION_* now reference the native \SNMP and the new subclass. - lib/mib_parser.php: moved from include/vendor/phpsnmp/mib_parser.php; lib/mib_cache.php includes it via __DIR__. - Remove include/vendor/phpsnmp/extension.php and index.php (directory retired). - tests: SnmpCoverageTest uses \SNMP::ERRNO_TIMEOUT now that phpsnmp\SNMP is gone; drop the stale include/vendor/phpsnmp/ entry from the vendor-policy allowlist. develop's sink baseline tracks constant-based includes differently than 1.2.x, so no baseline refresh was needed here. * Address PR #8174 review: snmp_get_method params, v3 walk, getnext agent, cache bump, CHANGELOG - lib/snmp.php: restore $php_snmp as the 6th snmp_get_method() parameter and move the new $auth_proto/$priv_proto after it (callers pass them by name), so the positional $php_snmp used by SnmpCoverageTest and others keeps working. - lib/snmp.php: keep every SNMPv3 operation except get/getnext on the Net-SNMP binary - the native walk branch implements only v1/v2, so a v3 walk reaching the procedural gate would have silently returned empty when path_snmpbulkwalk is missing. - lib/snmp.php: cacti_snmp_getnext() v1/v2 branches now use snmp_format_agent() like get/get_raw, so an IPv6 literal / non-default port is bracketed. - lib/api_device.php: bump snmp_cred_version only when the host's v3 membership or one of the cached credential fields actually changed, instead of on every save of a v3 device. - CHANGELOG: move the #8171 entry into the issue block and the #8166 entries into the feature block, matching the established section ordering. * Fix CI: unbracket IPv4/DNS SNMP targets, inline auth-cache SQL columns, apply phpcsfixer standard * Refresh sink inventory baseline after short-array normalization * Restore lib/snmp.php 100% coverage after aligning v3 routing to 1.2.x - update the three SnmpCoverageTest assertions that still encoded develop's pre-port behavior: v3 snmp_get_method now returns PHP, an unsupported- protocol v3 session returns the binary-delegating session object, and the v3 cacti_snmp_get path runs natively - add a v3 noAuthNoPriv user to the snmp-coverage snmpd fixture so native snmp3_get is exercised deterministically - add tests covering the ported subsystems to 100%: shared auth cache, binary-delegating session, protocol pickers, v3 credential args, cacti_snmp_get_multi, and the cacti_get_snmpv3_auth cache path - snmp_auth_cache_load uses a resettable process guard so its enabled and disabled branches are both coverable in a single process * Resolve phpstan errors in the relocated SNMP MIB parser and ported snmp.php - lib/mib_parser.php: type the MibParser properties, add parameter/return types, guard file_get_contents()/preg_split() against false, correct the parse_bracket_token delimiter params (string, not integer), and drop the unreachable return after trigger_error(E_USER_ERROR) - now phpstan clean - lib/mib_cache.php: drop the redundant isset($mp->oids) guard (the typed property is always initialized; $mp->mib is the real check) - lib/snmp.php: type the CactiSnmpBinarySession and CactiSnmpNativeSession properties/methods and pass bool to snmp_set_quick_print() - .phpstan.neon: ignore greaterOrEqual.alwaysFalse alongside the existing greater.alwaysFalse (the PHP_VERSION_ID >= 80600 forward-compat gate) - regenerate phpstan-baseline.neon for the irreducible ext-snmp stub strictness (snmp3_get literal-union protocols, int<-1,max> timeouts) in the ported procedural v3 path, the new lib/cache.php shmop stubs, and the $config array-shape offsets in include/global.php * Make the v3 getter catch coverage net-snmp-build-independent The DES-rejection trick that drove the procedural snmp3_get()/snmp3_getnext() try/catch blocks only works on net-snmp builds compiled without DES; CI's Debian net-snmp accepts DES, so those catches went uncovered (98.3%). - extend the existing native_get injection seam (already on cacti_snmp_get) to cacti_snmp_get_raw, cacti_snmp_getnext, and cacti_snmp_get_multi, and drive the catch blocks with a throwing native getter in the test - mark the seam-less cacti_snmp_session() setSecurity catch with @codeCoverageIgnore (it only throws for a protocol the running net-snmp rejects, which is not portably reproducible in the fixture) * Exclude ext-snmp/PHP-8.6-gated defensive branches from snmp coverage Two branches in lib/snmp.php are unreachable on the PHP 8.3 + ext-snmp coverage runner and were only "covered" locally via opcache dead-code elimination: - snmp_get_method()'s !function_exists('snmp3_get') fallback (ext-snmp always provides snmp3_get) - snmp_php_v3_protocols_supported()'s PHP_VERSION_ID >= 80600 block (SHA-224/384 and AES-192/256 tokens are only accepted on PHP 8.6+) Mark both with @codeCoverageIgnore so the 100% gate is deterministic across runners regardless of opcache settings. * Account for the #8166 SNMPv3 credential-cache gate query in the batching test poller_update_poller_cache_from_buffer() now runs one SELECT per flush to decide whether the flush touched SNMPv3 poller items before bumping the shared credential-cache version (matching 1.2.x). UpdateDataQueryCacheBatchingIntegrationTest counted 4 statements per flush; update it to 5 (and 3 per-row flushes to 15, 1 batched flush to 5). The guard's intent - batching issues fewer statements than per-row flushes - still holds. * Port #8175: group SNMP options under an SNMP Behavior section Mirror the 1.2.x settings reorganization (#8175) on develop. develop already keeps the SNMP options in a dedicated SNMP tab, so add an "SNMP Behavior" spacer there, order the behavior options as md5/des, credential cache, max get size, bulkwalk fetch size, and move "Disable increasing OID Check" out of the Poller tab to sit last in that group. Display-only; no settings added or removed and no behavior change. Adds the "SNMP Behavior" heading to cacti.pot. * fix: complete dependabot htmx 2.0.10 to 2.0.11 bump Dependabot bumped package.json and package-lock.json to htmx.org 2.0.11 (PR 8179) but left the vendored include/js/htmx.js, its version marker, and the pinned SRI constant at 2.0.10. The htmx-filters CI workflow runs npm ci, which regenerates include/js/htmx.js from the 2.0.11 package, so HtmxTest's runtime sha384 no longer matches the HTMX_2_0_10_SRI constant and the integrity assertion fails. Complete the bump: regenerate the vendored include/js/htmx.js to the 2.0.11 build, bump include/js/htmx.js.version to 2.0.11, rename HTMX_2_0_10_SRI to HTMX_2_0_11_SRI with the recomputed sha384 hash, and update the version/integrity assertions in tests/Unit/Ui/Html/HtmxTest.php and tests/HandOff/HtmxLoaderHandOffTest.php. package.json and package-lock.json match the values dependabot already landed on develop. * settings: move SNMP Agent Support under the SNMP Behavior spacer Relocate the enable_snmp_agent setting (SNMP Agent Support Enabled) so it is the first item under the SNMP Behavior spacer instead of sitting in the Poller General group, grouping it with the other SNMP behavior options. * Address PR #8174 review: keep SHA-224/384 on the binary, honor port on transport targets Resolves the two still-valid Copilot review findings on lib/snmp.php that were left unresolved (only marked outdated after later commits shifted their lines). - snmp_php_v3_protocols_supported(): drop SHA224/SHA384 from the native auth allowlist. ext-snmp's SNMP::setSecurity()/snmp3_*() only map MD5/SHA/SHA256/ SHA512 - there is no SHA-224/SHA-384 mapping on any build, including PHP 8.6 (verified against php-src ext/snmp/snmp.c), so routing those tokens to the procedural path raised a ValueError instead of using the binary. They now always fall back to the Net-SNMP binary. The AES-192/256 privacy tokens that ext-snmp does add on 8.6 stay gated behind PHP_VERSION_ID >= 80600. - snmp_format_agent(): a udp/tcp transport-qualified target that omits a port now has the configured non-default port appended (udp6:[2001:db8::1] + 1161 -> udp6:[2001:db8::1]:1161), matching the Net-SNMP binary path. Targets that already carry a port, and unix: sockets (no port), are left untouched. - SnmpCoverageTest: cover the new transport-target branches; lib/snmp.php stays at 100%.
526 lines
15 KiB
PHP
526 lines
15 KiB
PHP
#!/usr/bin/env php
|
|
<?php
|
|
/*
|
|
+-------------------------------------------------------------------------+
|
|
| Copyright (C) 2004-2026 The Cacti Group |
|
|
| |
|
|
| This program is free software; you can redistribute it and/or |
|
|
| modify it under the terms of the GNU General Public License |
|
|
| as published by the Free Software Foundation; either version 2 |
|
|
| of the License, or (at your option) any later version. |
|
|
| |
|
|
| This program is distributed in the hope that it will be useful, |
|
|
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
|
| GNU General Public License for more details. |
|
|
+-------------------------------------------------------------------------+
|
|
| Cacti: The Complete RRDtool-based Graphing Solution |
|
|
+-------------------------------------------------------------------------+
|
|
| This code is designed, written, and maintained by the Cacti Group. See |
|
|
| about.php and/or the AUTHORS file for specific developer information. |
|
|
+-------------------------------------------------------------------------+
|
|
| http://www.cacti.net/ |
|
|
+-------------------------------------------------------------------------+
|
|
*/
|
|
|
|
if (function_exists('pcntl_async_signals')) {
|
|
pcntl_async_signals(true);
|
|
} else {
|
|
declare(ticks = 100);
|
|
}
|
|
|
|
$parent_pid = '';
|
|
|
|
if (function_exists('posix_getppid')) {
|
|
$parent_pid = posix_getppid();
|
|
}
|
|
|
|
if (function_exists('pcntl_signal')) {
|
|
pcntl_signal(SIGTERM, 'sig_handler');
|
|
pcntl_signal(SIGINT, 'sig_handler');
|
|
pcntl_signal(SIGABRT, 'sig_handler');
|
|
pcntl_signal(SIGQUIT, 'sig_handler');
|
|
pcntl_signal(SIGSEGV, 'sig_handler');
|
|
}
|
|
|
|
error_reporting(0);
|
|
|
|
// define STDOUT/STDIN file descriptors if not running under CLI
|
|
if (php_sapi_name() != 'cli') {
|
|
define('STDIN', fopen('php://stdin', 'r'));
|
|
define('STDOUT', fopen('php://stdout', 'w'));
|
|
}
|
|
|
|
// make sure data is flushed immediately
|
|
ob_implicit_flush();
|
|
ini_set('output_buffering', 'Off');
|
|
|
|
global $environ, $poller_id, $connection;
|
|
|
|
// some debugging
|
|
$pid = getmypid();
|
|
$ctr = 0;
|
|
$poller_id = 1;
|
|
$environ = 'cmd';
|
|
$conn_mode = 'online';
|
|
$legacy = true;
|
|
$options = [];
|
|
$help = false;
|
|
$version = false;
|
|
|
|
$called_by_script_server = false;
|
|
|
|
$shortopts = 'VvHh';
|
|
|
|
$longopts = [
|
|
'environ::',
|
|
'poller::',
|
|
'mode::',
|
|
'version',
|
|
'help'
|
|
];
|
|
|
|
$options = getopt($shortopts, $longopts);
|
|
|
|
if (sizeof($options)) {
|
|
foreach ($options as $arg => $value) {
|
|
$allow_multi = false;
|
|
|
|
switch($arg) {
|
|
case 'enviorn':
|
|
$environ = $value;
|
|
|
|
break;
|
|
case 'poller':
|
|
$poller_id = $value;
|
|
|
|
break;
|
|
case 'mode':
|
|
$conn_mode = $value;
|
|
|
|
break;
|
|
case 'help':
|
|
$help = true;
|
|
|
|
break;
|
|
case 'version':
|
|
$version = true;
|
|
|
|
break;
|
|
}
|
|
}
|
|
} elseif ($_SERVER['argc'] >= 2) {
|
|
if (in_array('spine', $_SERVER['argv'], true)) {
|
|
$environ = 'spine';
|
|
} elseif (in_array('realtime', $_SERVER['argv'], true)) {
|
|
$environ = 'realtime';
|
|
} elseif (in_array('cmd', $_SERVER['argv'], true) || in_array('cmd.php', $_SERVER['argv'], true)) {
|
|
$environ = 'cmd';
|
|
} else {
|
|
$environ = 'other';
|
|
}
|
|
|
|
if ($_SERVER['argc'] == 3) {
|
|
$poller_id = $_SERVER['argv'][2];
|
|
} else {
|
|
$poller_id = 1;
|
|
}
|
|
}
|
|
|
|
require(__DIR__ . '/include/cli_check.php');
|
|
|
|
if ($help) {
|
|
display_help();
|
|
|
|
exit(0);
|
|
}
|
|
|
|
if ($version) {
|
|
display_version();
|
|
|
|
exit(0);
|
|
}
|
|
|
|
// record the script start time
|
|
$start = microtime(true);
|
|
|
|
$include_file = '';
|
|
|
|
if (CACTI_SERVER_OS == 'win32') {
|
|
cacti_log('DEBUG: GETCWD: ' . cacti_strtolower(strtr((string) getcwd(),'\\','/')), false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
cacti_log('DEBUG: DIRNAM: ' . cacti_strtolower(strtr(__DIR__,'\\','/')), false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
} else {
|
|
cacti_log('DEBUG: GETCWD: ' . strtr((string) getcwd(),'\\','/'), false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
cacti_log('DEBUG: DIRNAM: ' . strtr(__DIR__,'\\','/'), false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
}
|
|
|
|
cacti_log('DEBUG: SERVER: ' . $environ . ' PARENT: ' . $parent_pid, false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
cacti_log('DEBUG: FILENM: ' . __FILE__, false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
|
|
// if multiple polling intervals are defined, compensate for them
|
|
$polling_interval = read_config_option('poller_interval');
|
|
|
|
if (!empty($polling_interval)) {
|
|
define('MAX_POLLER_RUNTIME', $polling_interval);
|
|
} else {
|
|
define('MAX_POLLER_RUNTIME', 300);
|
|
}
|
|
|
|
// Let PHP only run 1 second longer than the max runtime
|
|
ini_set('max_execution_time', MAX_POLLER_RUNTIME + 1);
|
|
|
|
// send status back to the server
|
|
cacti_log('PHP Script Server has Started - Parent is ' . $environ, false, 'PHPSVR', POLLER_VERBOSITY_HIGH);
|
|
|
|
fputs(STDOUT, 'PHP Script Server has Started - Parent is ' . $environ . "\n");
|
|
fflush(STDOUT);
|
|
|
|
require_once(__DIR__ . '/lib/snmp.php');
|
|
snmp_auth_cache_load();
|
|
|
|
// process waits for input and then calls functions as required
|
|
while (1) {
|
|
$result = '';
|
|
|
|
$input_string = fgets(STDIN, 1024);
|
|
$function = '';
|
|
$parameters = '';
|
|
$parameter_array = [];
|
|
|
|
$isParentRunning = true;
|
|
|
|
if (empty($input_string)) {
|
|
if (!empty($parent_pid)) {
|
|
if (cacti_strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
|
|
$out = [];
|
|
$ppid = intval($parent_pid);
|
|
exec("TASKLIST /FO LIST /FI \"PID eq $ppid\"", $out);
|
|
|
|
$isParentRunning = (cacti_count($out) > 1);
|
|
} elseif (function_exists('posix_kill')) {
|
|
$isParentRunning = posix_kill(intval($parent_pid), 0);
|
|
}
|
|
}
|
|
|
|
if ($isParentRunning) {
|
|
if (!empty($parent_pid)) {
|
|
cacti_log('WARNING: Input Expected, parent process ' . $parent_pid . ' should have sent non-blank line', false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
} else {
|
|
cacti_log('WARNING: Input Expected, unable to check parent process', false, 'PHPSVR', POLLER_VERBOSITY_MEDIUM);
|
|
}
|
|
} else {
|
|
cacti_log('WARNING: Parent (' . $parent_pid . ') of Script Server (' . getmypid() . ') has been lost, forcing exit', false, 'PHPSVR', POLLER_VERBOSITY_HIGH);
|
|
$input_string = 'quit';
|
|
}
|
|
}
|
|
|
|
if (!empty($input_string)) {
|
|
$input_string = trim($input_string);
|
|
|
|
if (substr($input_string,0,4) == 'quit') {
|
|
if (!$called_by_script_server) {
|
|
fputs(STDOUT, 'PHP Script Server Shutdown request received, exiting' . PHP_EOL);
|
|
fflush(STDOUT);
|
|
cacti_log('DEBUG: PHP Script Server Shutdown request received, exiting', false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
}
|
|
db_close();
|
|
|
|
exit(0);
|
|
}
|
|
|
|
if ($input_string != '') {
|
|
// pull off the parameters
|
|
$i = 0;
|
|
|
|
while (true) {
|
|
$pos = strpos($input_string, ' ');
|
|
|
|
if ($pos > 0) {
|
|
switch ($i) {
|
|
case 0:
|
|
// cut off include file as first part of input string and keep rest for further parsing
|
|
$include_file = trim(substr($input_string,0,$pos));
|
|
$input_string = trim((string) strchr($input_string, ' ')) . ' ';
|
|
|
|
break;
|
|
case 1:
|
|
// cut off function as second part of input string and keep rest for further parsing
|
|
$function = trim(substr($input_string,0,$pos), "' ");
|
|
$input_string = trim((string) strchr($input_string, ' ')) . ' ';
|
|
|
|
break;
|
|
case 2:
|
|
// take the rest as parameter(s) to the function stripped off previously
|
|
$parameters = trim($input_string);
|
|
|
|
break 2;
|
|
}
|
|
} else {
|
|
break;
|
|
}
|
|
|
|
$i++;
|
|
}
|
|
|
|
if (!parseArgs($parameters, $parameter_array)) {
|
|
cacti_log("WARNING: Script Server count not parse '$parameters' for $function", false, 'PHPSVR');
|
|
fputs(STDOUT, "U\n");
|
|
fflush(STDOUT);
|
|
|
|
continue;
|
|
}
|
|
|
|
cacti_log("DEBUG: PID[$pid] CTR[$ctr] INC: '" . basename($include_file) .
|
|
"' FUNC: '$function' PARMS: '" . implode('\', \'',$parameter_array) .
|
|
"'", false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
|
|
// validate the existence of the function, and include if applicable
|
|
if (!function_exists($function)) {
|
|
if (file_exists($include_file)) {
|
|
/**
|
|
* quirk in php on Windows, believe it or not....
|
|
* path must be lower case
|
|
*/
|
|
if (CACTI_SERVER_OS == 'win32') {
|
|
$include_file = cacti_strtolower($include_file);
|
|
}
|
|
|
|
/**
|
|
* set this variable so the calling script can determine if it was called
|
|
* by the script server or stand-alone
|
|
*/
|
|
$called_by_script_server = true;
|
|
|
|
// turn on output buffering to avoid problems with nasty scripts
|
|
ob_start();
|
|
require_once($include_file);
|
|
ob_end_clean();
|
|
|
|
error_reporting(0);
|
|
} else {
|
|
cacti_log('WARNING: PHP Script File to be included, does not exist', false, 'PHPSVR');
|
|
}
|
|
}
|
|
|
|
if (function_exists($function)) {
|
|
error_reporting(0);
|
|
|
|
if ($parameters == '') {
|
|
$result = call_user_func($function);
|
|
} else {
|
|
$result = call_user_func_array($function, $parameter_array);
|
|
}
|
|
|
|
fputs(STDOUT, trim($result) . "\n");
|
|
fflush(STDOUT);
|
|
|
|
cacti_log("DEBUG: PID[$pid] CTR[$ctr] RESPONSE:'$result'", false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
|
|
$ctr++;
|
|
} else {
|
|
cacti_log("WARNING: Function does not exist INC: '" . basename($include_file) . "' FUNC: '" . $function . "' PARMS: '" . $parameters . "'", false, 'PHPSVR');
|
|
fputs(STDOUT, "U\n");
|
|
fflush(STDOUT);
|
|
}
|
|
}
|
|
}
|
|
|
|
// end the process if the runtime exceeds MAX_POLLER_RUNTIME
|
|
if (($start + MAX_POLLER_RUNTIME) < time()) {
|
|
cacti_log('Maximum runtime of ' . MAX_POLLER_RUNTIME . ' seconds exceeded for the Script Server. Exiting.', true, 'PHPSVR');
|
|
|
|
exit(-1);
|
|
}
|
|
}
|
|
|
|
function parseArgs(string $string, array &$str_list, bool $debug = false) : bool {
|
|
$delimiters = ["'", '"'];
|
|
$delimited = false;
|
|
$str_list = [];
|
|
|
|
if ($debug) {
|
|
print "String: '" . $string . "'\n";
|
|
}
|
|
|
|
foreach ($delimiters as $delimiter) {
|
|
if (str_contains($string, $delimiter)) {
|
|
$delimited = true;
|
|
|
|
break;
|
|
}
|
|
}
|
|
|
|
// process the simple case
|
|
if (!$delimited) {
|
|
$str_list = explode(' ', $string);
|
|
|
|
if ($debug) {
|
|
print "Output: '" . implode(',', $str_list) . "'\n";
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
// Break str down into an array of characters and process
|
|
$char_array = str_split($string);
|
|
$escaping = false;
|
|
$indelim = false;
|
|
$parse_ok = true;
|
|
$curstr = '';
|
|
|
|
foreach ($char_array as $char) {
|
|
switch ($char) {
|
|
case '\'':
|
|
case '"':
|
|
if (!$indelim) {
|
|
if (!$escaping) {
|
|
$indelim = true;
|
|
} else {
|
|
$curstr .= $char;
|
|
$escaping = false;
|
|
}
|
|
} elseif (!$escaping) {
|
|
$str_list[] = $curstr;
|
|
$curstr = '';
|
|
$indelim = false;
|
|
} elseif ($escaping) {
|
|
$curstr .= $char;
|
|
$escaping = false;
|
|
}
|
|
|
|
break;
|
|
case '\\':
|
|
if ($indelim) {
|
|
$curstr .= $char;
|
|
} elseif ($escaping) {
|
|
$curstr .= $char;
|
|
$escaping = false;
|
|
} else {
|
|
$escaping = true;
|
|
}
|
|
|
|
break;
|
|
case ' ':
|
|
if ($escaping) {
|
|
$parse_ok = false;
|
|
$msg = 'Parse error attempting to parse string';
|
|
} elseif ($indelim) {
|
|
$curstr .= $char;
|
|
} elseif ($curstr != '') {
|
|
$str_list[] = $curstr;
|
|
$curstr = '';
|
|
}
|
|
|
|
break;
|
|
case '`':
|
|
$parse_ok = false;
|
|
$msg = 'Backtic (`) characters not allowed';
|
|
|
|
break;
|
|
default:
|
|
if ($escaping) {
|
|
$parse_ok = false;
|
|
$msg = 'Parse error attempting to parse string';
|
|
} else {
|
|
$curstr .= $char;
|
|
}
|
|
|
|
break;
|
|
}
|
|
|
|
if (!$parse_ok) {
|
|
break;
|
|
}
|
|
}
|
|
|
|
// Add the last str to the string array
|
|
$msg = 'Unknown error message';
|
|
|
|
if ($indelim || $escaping) {
|
|
$parse_ok = false;
|
|
$msg = 'Parse error attempting to parse string';
|
|
}
|
|
|
|
if (!$parse_ok) {
|
|
print 'ERROR: ' . $msg . " '" . $string . "'\n";
|
|
} elseif ($curstr != '') {
|
|
$str_list[] = $curstr;
|
|
}
|
|
|
|
if ($debug) {
|
|
print "Output: '" . implode(',', $str_list) . "'\n";
|
|
}
|
|
|
|
return $parse_ok;
|
|
}
|
|
|
|
/**
|
|
* sig_handler - properly handle signals and shutdown
|
|
*
|
|
* @param int $signo
|
|
*
|
|
* @return void
|
|
*/
|
|
function sig_handler(int $signo) : void {
|
|
global $include_file, $function, $parameters;
|
|
|
|
switch ($signo) {
|
|
case SIGTERM:
|
|
case SIGINT:
|
|
case SIGABRT:
|
|
case SIGQUIT:
|
|
case SIGSEGV:
|
|
cacti_log("WARNING: Script Server terminated with signal '$signo' in file:'" . basename($include_file) . "', function:'$function', params:'$parameters'", false, 'PHPSVR', POLLER_VERBOSITY_MEDIUM);
|
|
db_close();
|
|
|
|
exit;
|
|
default:
|
|
cacti_log("WARNING: Script Server received signal '$signo' in file:'$include_file', function:'$function', params:'$parameters'", false, 'PHPSVR', POLLER_VERBOSITY_HIGH);
|
|
|
|
break;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* display_version - displays version information
|
|
*
|
|
* @return void
|
|
*/
|
|
function display_version() : void {
|
|
$version = get_cacti_version();
|
|
print "Cacti Script Server, Version $version " . COPYRIGHT_YEARS . PHP_EOL;
|
|
}
|
|
|
|
/**
|
|
* display_help - displays help information
|
|
*
|
|
* @return void
|
|
*/
|
|
function display_help() : void {
|
|
display_version();
|
|
|
|
print PHP_EOL;
|
|
print 'usage: script_server.php [environ poller_id] | [ --environ=S --poller=N --mode [--force-level=N] ]' . PHP_EOL . PHP_EOL;
|
|
print 'Cacti\'s Script Server. The Script Server provides a memory resident server for executing php' . PHP_EOL;
|
|
print 'scripts saving reducing the time to process the scripts through pre-compiling them for all consumers.' . PHP_EOL;
|
|
print 'The Script Server can be called using two methods. The first method is the legacy method. When using' . PHP_EOL;
|
|
print 'the legacy method, the first argument will be the environment, and the second will be the poller id.' . PHP_EOL . PHP_EOL;
|
|
|
|
print 'The modern calling method has multiple options processed by getopt. Those options include:' . PHP_EOL . PHP_EOL;
|
|
|
|
print ' --environ=S The default being \'cmd\', and options being \'spine\', \'cmd\', and \'realtime\'' . PHP_EOL;
|
|
print ' --poller=N The poller id for the Data Collector in use' . PHP_EOL;
|
|
print ' --force-level=N Force the logging at the level specified.' . PHP_EOL;
|
|
print ' --mode=S Force a Database mode \'online\' or \'offline\'. This is only relevant for' . PHP_EOL;
|
|
print ' Remote Data Collectors.' . PHP_EOL . PHP_EOL;
|
|
|
|
print 'If no options are passed to the Script Server, it assumes that the environ is \'cmd\' and the poller id' . PHP_EOL;
|
|
print 'is 1 or the Main Data Collector.' . PHP_EOL . PHP_EOL;
|
|
|
|
print 'It is common that when developing Cacti Data Input methods one will use the Script Server to test' . PHP_EOL;
|
|
print 'scripts prior to creating thousands of Graphs using them. To to that simply create at least' . PHP_EOL;
|
|
print 'one Data Source, start the Script Server, and then copy the Poller Cache entry into a running' . PHP_EOL;
|
|
print 'Script Server. When doing so you should see the output you expect printed to standard output. When' . PHP_EOL;
|
|
print 'running the Script Server, simply enter \'quit\' to exit.' . PHP_EOL . PHP_EOL;
|
|
}
|