diff options
Diffstat (limited to 'snmptrap/mod/trapd_snmpv3.py')
-rw-r--r-- | snmptrap/mod/trapd_snmpv3.py | 112 |
1 files changed, 56 insertions, 56 deletions
diff --git a/snmptrap/mod/trapd_snmpv3.py b/snmptrap/mod/trapd_snmpv3.py index 5c0382b..b421ae1 100644 --- a/snmptrap/mod/trapd_snmpv3.py +++ b/snmptrap/mod/trapd_snmpv3.py @@ -1,7 +1,5 @@ # ============LICENSE_START======================================================= -# org.onap.dcae -# ================================================================================ -# Copyright (c) 2018 AT&T Intellectual Property. All rights reserved. +# Copyright (c) 2018-2020 AT&T Intellectual Property. All rights reserved. # ================================================================================ # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. @@ -15,9 +13,6 @@ # See the License for the specific language governing permissions and # limitations under the License. # ============LICENSE_END========================================================= -# -# ECOMP is a trademark and service mark of AT&T Intellectual Property. -# """ module for snmpv3 support @@ -52,9 +47,9 @@ prog_name = os.path.basename(__file__) # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # -def load_snmpv3_credentials (_py_config, _snmp_engine, _cbs_config): +def load_snmpv3_credentials(_py_config, _snmp_engine, _cbs_config): """ - Add V3 credentials from CBS config to receiver config + Add V3 credentials from CBS config to receiver config so traps will be recieved from specified engines/users :Parameters: _config: snmp entity config @@ -63,7 +58,7 @@ def load_snmpv3_credentials (_py_config, _snmp_engine, _cbs_config): # add V3 credentials from CBS json structure to running config try: - v3_users=_cbs_config["snmpv3_config"]["usm_users"] + v3_users = _cbs_config["snmpv3_config"]["usm_users"] except Exception as e: msg = ("No V3 users defined") ecomp_logger(tds.LOG_TYPE_DEBUG, tds.SEV_INFO, tds.CODE_GENERAL, msg) @@ -73,121 +68,126 @@ def load_snmpv3_credentials (_py_config, _snmp_engine, _cbs_config): # engineId try: - ctx_engine_id=v3_user['engineId'] + ctx_engine_id = v3_user['engineId'] except Exception as e: - ctx_engine_id=None + ctx_engine_id = None # user try: - userName=v3_user['user'] + userName = v3_user['user'] except Exception as e: - userName=None + userName = None # authorization # find options at -> site-packages/pysnmp/entity/config.py - # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # + # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # print("Checking auth for %s" % (userName)) # usmHMACMD5AuthProtocol try: - authKey=v3_user['usmHMACMD5AuthProtocol'] - authProtocol=config.usmHMACMD5AuthProtocol + authKey = v3_user['usmHMACMD5AuthProtocol'] + authProtocol = config.usmHMACMD5AuthProtocol except Exception as e: try: - authKey=v3_user['usmHMACSHAAuthProtocol'] - authProtocol=config.usmHMACSHAAuthProtocol + authKey = v3_user['usmHMACSHAAuthProtocol'] + authProtocol = config.usmHMACSHAAuthProtocol except Exception as e: try: - authKey=v3_user['usmHMAC128SHA224AuthProtocol'] - authProtocol=config.usmHMAC128SHA224AuthProtocol + authKey = v3_user['usmHMAC128SHA224AuthProtocol'] + authProtocol = config.usmHMAC128SHA224AuthProtocol except Exception as e: try: - authKey=v3_user['usmHMAC192SHA256AuthProtocol'] - authProtocol=config.usmHMAC192SHA256AuthProtocol + authKey = v3_user['usmHMAC192SHA256AuthProtocol'] + authProtocol = config.usmHMAC192SHA256AuthProtocol except Exception as e: try: - authKey=v3_user['usmHMAC256SHA384AuthProtocol'] - authProtocol=config.usmHMAC256SHA384AuthProtocol + authKey = v3_user['usmHMAC256SHA384AuthProtocol'] + authProtocol = config.usmHMAC256SHA384AuthProtocol except Exception as e: try: - authKey=v3_user['usmHMAC384SHA512AuthProtocol'] - authProtocol=config.usmHMAC384SHA512AuthProtocol + authKey = v3_user['usmHMAC384SHA512AuthProtocol'] + authProtocol = config.usmHMAC384SHA512AuthProtocol except Exception as e: try: - authKey=v3_user['usmNoAuthProtocol'] - authProtocol=config.usmNoAuthProtocol + authKey = v3_user['usmNoAuthProtocol'] + authProtocol = config.usmNoAuthProtocol except Exception as e: # FMDL: default to NoAuth, or error/skip entry? - msg = ("No auth specified for user %s ?" % (userName)) - authKey=None - authProtocol=config.usmNoAuthProtocol - ecomp_logger(tds.LOG_TYPE_DEBUG, tds.SEV_INFO, tds.CODE_GENERAL, msg) + msg = ( + "No auth specified for user %s ?" % (userName)) + authKey = None + authProtocol = config.usmNoAuthProtocol + ecomp_logger( + tds.LOG_TYPE_DEBUG, tds.SEV_INFO, tds.CODE_GENERAL, msg) # privacy # find options at -> site-packages/pysnmp/entity/config.py - # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # + # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # print("Checking priv for %s" % (userName)) # usm3DESEDEPriv try: - privKey=v3_user['usm3DESEDEPrivProtocol'] - privProtocol=config.usm3DESEDEPrivProtocol + privKey = v3_user['usm3DESEDEPrivProtocol'] + privProtocol = config.usm3DESEDEPrivProtocol except Exception as e: # usmAesCfb128Protocol try: - privKey=v3_user['usmAesCfb128Protocol'] - privProtocol=config.usmAesCfb128Protocol + privKey = v3_user['usmAesCfb128Protocol'] + privProtocol = config.usmAesCfb128Protocol except Exception as e: # usmAesCfb192Protocol try: - privKey=v3_user['usmAesCfb192Protocol'] - privProtocol=config.usmAesCfb192Protocol + privKey = v3_user['usmAesCfb192Protocol'] + privProtocol = config.usmAesCfb192Protocol except Exception as e: # usmAesBlumenthalCfb192Protocol try: - privKey=v3_user['usmAesBlumenthalCfb192Protocol'] - privProtocol=config.usmAesBlumenthalCfb192Protocol + privKey = v3_user['usmAesBlumenthalCfb192Protocol'] + privProtocol = config.usmAesBlumenthalCfb192Protocol except Exception as e: # usmAesCfb256Protocol try: - privKey=v3_user['usmAesCfb256Protocol'] - privProtocol=config.usmAesCfb256Protocol + privKey = v3_user['usmAesCfb256Protocol'] + privProtocol = config.usmAesCfb256Protocol except Exception as e: # usmAesBlumenthalCfb256Protocol try: - privKey=v3_user['usmAesBlumenthalCfb256Protocol'] - privProtocol=config.usmAesBlumenthalCfb256Protocol + privKey = v3_user['usmAesBlumenthalCfb256Protocol'] + privProtocol = config.usmAesBlumenthalCfb256Protocol except Exception as e: # usmDESPrivProtocol try: - privKey=v3_user['usmDESPrivProtocol'] - privProtocol=config.usmDESPrivProtocol + privKey = v3_user['usmDESPrivProtocol'] + privProtocol = config.usmDESPrivProtocol except Exception as e: # usmNoPrivProtocol try: - privKey=v3_user['usmNoPrivProtocol'] - privProtocol=config.usmNoPrivProtocol + privKey = v3_user['usmNoPrivProtocol'] + privProtocol = config.usmNoPrivProtocol except Exception as e: # FMDL: default to NoPriv, or error/skip entry? - msg = ("No priv specified for user %s" % (userName)) - ecomp_logger(tds.LOG_TYPE_DEBUG, tds.SEV_INFO, tds.CODE_GENERAL, msg) - privKey=None - privProtocol=config.usmNoPrivProtocol + msg = ( + "No priv specified for user %s" % (userName)) + ecomp_logger( + tds.LOG_TYPE_DEBUG, tds.SEV_INFO, tds.CODE_GENERAL, msg) + privKey = None + privProtocol = config.usmNoPrivProtocol # break # msg = ("userName: %s authKey: %s authProtocol: %s privKey: %s privProtocol: %s engineId: %s % (userName, authKey, authProtocol, privKey, privProtocol, ctx_engine_id)) - msg = ("userName: %s authKey: **** authProtocol: %s privKey: **** privProtocol: %s engineId: ****" % (userName, authProtocol, privProtocol)) + msg = ("userName: %s authKey: **** authProtocol: %s privKey: **** privProtocol: %s engineId: ****" % + (userName, authProtocol, privProtocol)) ecomp_logger(tds.LOG_TYPE_DEBUG, tds.SEV_INFO, tds.CODE_GENERAL, msg) # user: usr-md5-des, auth: MD5, priv DES, contextEngineId: 8000000001020304 # this USM entry is used for TRAP receiving purposes - # help(addV3User) returns -> + # help(addV3User) returns -> # addV3User(snmpEngine, userName, authProtocol=(1, 3, 6, 1, 6, 3, 10, 1, 1, 1), authKey=None, privProtocol=(1, 3, 6, 1, 6, 3, 10, 1, 2, 1), priv Key=None, securityEngineId=None, securityName=None, contextEngineId=None) - if ctx_engine_id is not None: + if ctx_engine_id is not None: config.addV3User( _snmp_engine, userName, authProtocol, authKey, |