write2log("err","Unauthorized access to $function_name from: $ip; CN(AN): $alt_names; used service: '$service_type' - client is not registered");
write2log("err","Unauthorized access to '$function_name' from: '$ip'; CN(AN): $alt_names; used service: '$service_type' - client is not registered");
die("Access denied - client is not registered at warden server!");
die("Access denied - client is not registered at warden server!");
returnundef;
returnundef;
}
}
# check if client has IP from registered CIDR
# check if client has IP from registered CIDR
if(!$correct_ip_source){
if(!$correct_ip_source){
write2log("err","Unauthorized access to $function_name from: $ip; CN(AN): $alt_names; used service: '$service_type' - access from bad subnet: Registered subnet '".$ret{'cidr'}."'");
write2log("err","Unauthorized access to '$function_name' from: '$ip'; CN(AN): $alt_names; used service: '$service_type' - access from bad subnet: Registered subnet '".$ret{'cidr'}."'");
die("Access denied - access from unauthorized subnet!");
die("Access denied - access from unauthorized subnet!");
write2log("info","Sent 1 event [#$ids[0]] to $ip (CN(AN): $alt_names) with client limit $max_rcv_events_limit events");
write2log("info","Sent 1 event [#$ids[0]] to '$ip' (CN(AN): $alt_names) with client limit '$max_rcv_events_limit' events");
}else{
}else{
write2log("info","Sent ".scalar@ids." events [#$ids[0] - #$ids[-1]] to $ip (CN(AN): $alt_names) with client limit $max_rcv_events_limit events");
write2log("info","Sent ".scalar@ids." events [#$ids[0] - #$ids[-1]] to '$ip' (CN(AN): $alt_names) with client limit '$max_rcv_events_limit' events");
}
}
}
}
return@events;
return@events;
...
@@ -338,7 +338,7 @@ sub getLastId
...
@@ -338,7 +338,7 @@ sub getLastId
my$function_name='getLastId';
my$function_name='getLastId';
my$sth=$DBH->prepare("SELECT max(id) FROM events;");
my$sth=$DBH->prepare("SELECT max(id) FROM events;");
if(!defined$sth){die("Cannot prepare statement in $function_name: $DBI::errstr\n")}
if(!defined$sth){die("Cannot prepare statement in '$function_name': $DBI::errstr\n")}
$sth->execute;
$sth->execute;
my$result=$sth->fetchrow();
my$result=$sth->fetchrow();
...
@@ -362,7 +362,7 @@ sub registerSender
...
@@ -362,7 +362,7 @@ sub registerSender
my$function_name='registerSender';
my$function_name='registerSender';
if($local_ipne$ip){
if($local_ipne$ip){
write2log("err","Unauthorized access to $function_name from: $ip ($cn) - access allowed only from localhost");
write2log("err","Unauthorized access to '$function_name' from: '$ip' ('$cn') - access allowed only from localhost");
die("Access denied - access allowed only from localhost!");
die("Access denied - access allowed only from localhost!");
}else{
}else{
# defined variables by method
# defined variables by method
...
@@ -380,19 +380,19 @@ sub registerSender
...
@@ -380,19 +380,19 @@ sub registerSender
# check if sender has been already registered
# check if sender has been already registered
$sth=$DBH->prepare("SELECT registered FROM clients WHERE hostname = ? AND requestor = ? AND service = ? AND client_type = ? AND type = ? AND receive_own_events = ? AND description_tags = ? AND ip_net_client = ? LIMIT 1;");
$sth=$DBH->prepare("SELECT registered FROM clients WHERE hostname = ? AND requestor = ? AND service = ? AND client_type = ? AND type = ? AND receive_own_events = ? AND description_tags = ? AND ip_net_client = ? LIMIT 1;");
if(!defined$sth){die("Cannot prepare check statement in $function_name: $DBI::errstr\n")}
if(!defined$sth){die("Cannot prepare check statement in '$function_name': $DBI::errstr\n")}
write2log("info","New sender $hostname (service: $service, cidr: $ip_net_client) was registered");
write2log("info","New sender '$hostname' (service: '$service', cidr: '$ip_net_client') was registered");
return1;
return1;
}
}
}
}
...
@@ -415,7 +415,7 @@ sub registerReceiver
...
@@ -415,7 +415,7 @@ sub registerReceiver
my$function_name='registerReceiver';
my$function_name='registerReceiver';
if($local_ipne$ip){
if($local_ipne$ip){
write2log("err","Unauthorized access to $function_name from: $ip ($cn) - access allowed only from localhost");
write2log("err","Unauthorized access to '$function_name' from: '$ip' ('$cn') - access allowed only from localhost");
die("Access denied - access allowed only from localhost!");
die("Access denied - access allowed only from localhost!");
}else{
}else{
# variables defined by method
# variables defined by method
...
@@ -433,19 +433,19 @@ sub registerReceiver
...
@@ -433,19 +433,19 @@ sub registerReceiver
# check if receiver has been already registered
# check if receiver has been already registered
$sth=$DBH->prepare("SELECT registered FROM clients WHERE hostname = ? AND requestor = ? AND service = ? AND client_type = ? AND type = ? AND receive_own_events = ? AND description_tags = ? AND ip_net_client = ? LIMIT 1;");
$sth=$DBH->prepare("SELECT registered FROM clients WHERE hostname = ? AND requestor = ? AND service = ? AND client_type = ? AND type = ? AND receive_own_events = ? AND description_tags = ? AND ip_net_client = ? LIMIT 1;");
if(!defined$sth){die("Cannot prepare check statement in $function_name: $DBI::errstr\n")}
if(!defined$sth){die("Cannot prepare check statement in '$function_name': $DBI::errstr\n")}