1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
|
# ============LICENSE_START=======================================================
# org.onap.dcae
# ================================================================================
# Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
# ================================================================================
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# ============LICENSE_END=========================================================
#
# ECOMP is a trademark and service mark of AT&T Intellectual Property.
#
"""
module for snmpv3 support
- loads various USM values for engineID/users
"""
__docformat__ = 'restructuredtext'
import json
import os
import sys
import string
import time
import traceback
import collections
import pprint
from pysnmp.entity import engine, config
from pysnmp.carrier.asyncore.dgram import udp
from pysnmp.entity.rfc3413 import ntfrcv
from pysnmp.proto.api import v2c
import trapd_settings as tds
from trapd_exit import cleanup_and_exit
from trapd_io import stdout_logger, ecomp_logger
prog_name = os.path.basename(__file__)
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# module: load_snmpv3_credentials
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
def load_snmpv3_credentials (_py_config, _snmp_engine, _cbs_config):
"""
Add V3 credentials from CBS config to receiver config
so traps will be recieved from specified engines/users
:Parameters:
_config: snmp entity config
:Exceptions:
"""
# add V3 credentials from CBS json structure to running config
try:
v3_users=_cbs_config["snmpv3_config"]["usm_users"]
except Exception as e:
msg = ("No V3 users defined")
ecomp_logger(tds.LOG_TYPE_DEBUG, tds.SEV_INFO, tds.CODE_GENERAL, msg)
return _py_config, _snmp_engine
for v3_user in v3_users:
# engineId
try:
ctx_engine_id=v3_user['engineId']
except Exception as e:
ctx_engine_id=None
# user
try:
userName=v3_user['user']
except Exception as e:
userName=None
# authorization
# find options at -> site-packages/pysnmp/entity/config.py
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# print("Checking auth for %s" % (userName))
# usmHMACMD5Auth
try:
authKey=v3_user['usmHMACMD5Auth']
authProtocol=config.usmHMACMD5AuthProtocol
except Exception as e:
# usmHMACSHAAuth
try:
authKey=v3_user['usmHMACSHAAuth']
authProtocol=config.usmHMAC192SHA256AuthProtocol
except Exception as e:
# usmNoAuth
try:
authKey=v3_user['usmNoAuth']
authProtocol=config.usmNoAuthProtocol
except Exception as e:
# FMDL: default to NoAuth, or error/skip entry?
msg = ("No auth specified for user %s ?" % (userName))
authKey=None
authProtocol=config.usmNoAuthProtocol
ecomp_logger(tds.LOG_TYPE_DEBUG, tds.SEV_INFO, tds.CODE_GENERAL, msg)
# break
# privacy
# find options at -> site-packages/pysnmp/entity/config.py
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# print("Checking priv for %s" % (userName))
# usm3DESEDEPriv
try:
privKey=v3_user['usm3DESEDEPriv']
privProtocol=config.usm3DESEDEPrivProtocol
except Exception as e:
# usmAesCfb128
try:
privKey=v3_user['usmAesCfb128']
privProtocol=config.usmAesCfb128Protocol
except Exception as e:
# usmAesCfb192
try:
privKey=v3_user['usmAesCfb192']
privProtocol=config.usmAesCfb192Protocol
except Exception as e:
# usmAesCfb256
try:
privKey=v3_user['usmAesCfb256']
privProtocol=config.usmAesCfb256Protocol
except Exception as e:
# usmDESPriv
try:
privKey=v3_user['usmDESPriv']
privProtocol=config.usmDESPrivProtocol
except Exception as e:
# usmNoPriv
try:
privKey=v3_user['usmNoPriv']
privProtocol=config.usmNoPrivProtocol
except Exception as e:
# FMDL: default to NoPriv, or error/skip entry?
msg = ("No priv specified for user %s" % (userName))
ecomp_logger(tds.LOG_TYPE_DEBUG, tds.SEV_INFO, tds.CODE_GENERAL, msg)
privKey=None
privProtocol=config.usmNoPrivProtocol
# break
# msg = ("userName: %s authKey: %s authProtocol: %s privKey: %s privProtocol: %s engineId: %s % (userName, authKey, authProtocol, privKey, privProtocol, ctx_engine_id))
msg = ("userName: %s authKey: **** authProtocol: %s privKey: **** privProtocol: %s engineId: ****" % (userName, authProtocol, privProtocol))
ecomp_logger(tds.LOG_TYPE_DEBUG, tds.SEV_INFO, tds.CODE_GENERAL, msg)
# user: usr-md5-des, auth: MD5, priv DES, contextEngineId: 8000000001020304
# this USM entry is used for TRAP receiving purposes
# help(addV3User) returns ->
# addV3User(snmpEngine, userName, authProtocol=(1, 3, 6, 1, 6, 3, 10, 1, 1, 1), authKey=None, privProtocol=(1, 3, 6, 1, 6, 3, 10, 1, 2, 1), priv Key=None, securityEngineId=None, securityName=None, contextEngineId=None)
if ctx_engine_id is not None:
config.addV3User(
_snmp_engine, userName,
authProtocol, authKey,
privProtocol, privKey,
contextEngineId=v2c.OctetString(hexValue=ctx_engine_id)
)
else:
config.addV3User(
_snmp_engine, userName,
authProtocol, authKey,
privProtocol, privKey
)
return _py_config, _snmp_engine
|
