440 lines
15 KiB
PHP
440 lines
15 KiB
PHP
<?php
|
|
/**
|
|
* Observium
|
|
*
|
|
* This file is part of Observium.
|
|
*
|
|
* @package observium
|
|
* @subpackage web
|
|
* @copyright (C) Adam Armstrong
|
|
*
|
|
*/
|
|
|
|
$ok = FALSE;
|
|
if (get_var_true($vars['editing']) && request_token_valid($vars)) {
|
|
if ($readonly) {
|
|
print_error_permission('You have insufficient permissions to edit settings.');
|
|
} else {
|
|
$update = [];
|
|
switch ($vars['snmp_version']) {
|
|
case 'v3':
|
|
switch ($vars['snmp_authlevel']) {
|
|
case 'authPriv':
|
|
if (is_valid_param($vars['snmp_cryptoalgo'], 'snmp_cryptoalgo')) {
|
|
$ok = TRUE;
|
|
$update['snmp_cryptoalgo'] = strtoupper($vars['snmp_cryptoalgo']);
|
|
$update['snmp_cryptopass'] = $vars['snmp_cryptopass'];
|
|
} else {
|
|
$error = 'Incorrect SNMP Crypto Algorithm';
|
|
}
|
|
// no break here
|
|
case 'authNoPriv':
|
|
if (is_valid_param($vars['snmp_authalgo'], 'snmp_authalgo')) {
|
|
$ok = TRUE;
|
|
$update['snmp_authalgo'] = strtoupper($vars['snmp_authalgo']);
|
|
$update['snmp_authname'] = $vars['snmp_authname'];
|
|
$update['snmp_authpass'] = $vars['snmp_authpass'];
|
|
} else {
|
|
$error = 'Incorrect SNMP Auth parameters';
|
|
$ok = FALSE;
|
|
}
|
|
break;
|
|
case 'noAuthNoPriv':
|
|
$ok = TRUE;
|
|
break;
|
|
}
|
|
if ($ok) {
|
|
$update['snmp_authlevel'] = $vars['snmp_authlevel'];
|
|
}
|
|
break;
|
|
case 'v2c':
|
|
case 'v1':
|
|
if (is_valid_param($vars['snmp_community'], 'snmp_community')) {
|
|
$ok = TRUE;
|
|
$update['snmp_community'] = $vars['snmp_community'];
|
|
} else {
|
|
$error = 'Incorrect SNMP Community';
|
|
}
|
|
break;
|
|
}
|
|
|
|
if ($ok && $snmpable = trim($vars['snmpable'])) {
|
|
$snmp_oids = [];
|
|
foreach (explode(' ', $snmpable) as $oid) {
|
|
if (preg_match(OBS_PATTERN_SNMP_OID_NUM, $oid)) {
|
|
$snmp_oids[] = $oid;
|
|
$oid_num = $oid;
|
|
} elseif (str_contains($oid, '::') && $oid_num = snmp_translate($oid)) {
|
|
// Named MIB::Oid which we can translate
|
|
$snmp_oids[] = $oid_num;
|
|
} else {
|
|
print_warning("Invalid or unknown OID: " . $oid);
|
|
break;
|
|
}
|
|
$data = snmp_get_oid($device, $oid_num);
|
|
if (!snmp_status()) {
|
|
print_warning("Device currently not respond by OID $oid!");
|
|
}
|
|
}
|
|
if (empty($snmp_oids)) {
|
|
$ok = FALSE;
|
|
$error = 'Incorrect or not numeric OIDs passed for check device availability';
|
|
}
|
|
}
|
|
|
|
if ($ok) {
|
|
$update['snmp_version'] = $vars['snmp_version'];
|
|
if (in_array($vars['snmp_transport'], $config['snmp']['transports'], TRUE)) {
|
|
$update['snmp_transport'] = $vars['snmp_transport'];
|
|
} else {
|
|
$update['snmp_transport'] = 'udp';
|
|
}
|
|
if (is_valid_param($vars['snmp_port'], 'port')) {
|
|
$update['snmp_port'] = (int)$vars['snmp_port'];
|
|
} else {
|
|
if (strlen($vars['snmp_port'])) {
|
|
print_warning('Passed incorrect SNMP port (' . $vars['snmp_port'] . '). Should be between 1 and 65535.');
|
|
}
|
|
$update['snmp_port'] = 161;
|
|
}
|
|
if (is_valid_param($vars['snmp_timeout'], 'snmp_timeout')) {
|
|
$update['snmp_timeout'] = (int)$vars['snmp_timeout'];
|
|
} else {
|
|
if (strlen($vars['snmp_timeout'])) {
|
|
print_warning('Passed incorrect SNMP timeout (' . $vars['snmp_timeout'] . '). Should be between 1 and 120 sec.');
|
|
}
|
|
$update['snmp_timeout'] = ['NULL'];
|
|
}
|
|
if (is_valid_param($vars['snmp_retries'], 'snmp_retries')) {
|
|
$update['snmp_retries'] = (int)$vars['snmp_retries'];
|
|
} else {
|
|
if (strlen($vars['snmp_retries'])) {
|
|
print_warning('Passed incorrect SNMP retries (' . $vars['snmp_retries'] . '). Should be between 1 and 10.');
|
|
}
|
|
$update['snmp_retries'] = ['NULL'];
|
|
}
|
|
|
|
// SNMPbulk max repetitions, allow 0 for disable snmpbulk(walk|get)
|
|
if (is_intnum($vars['snmp_maxrep']) && $vars['snmp_maxrep'] >= 0 && $vars['snmp_maxrep'] <= 500) {
|
|
$update['snmp_maxrep'] = (int)$vars['snmp_maxrep'];
|
|
} else {
|
|
if (strlen($vars['snmp_maxrep'])) {
|
|
print_warning('Passed incorrect SNMPbulk max repetitions (' . $vars['snmp_maxrep'] . '). Should be between 0 and 500. When 0 - snmpbulk will disable.');
|
|
}
|
|
$update['snmp_maxrep'] = ['NULL'];
|
|
}
|
|
|
|
if ($snmpable) {
|
|
if ($device['snmpable'] !== $snmpable) {
|
|
$update['snmpable'] = $snmpable;
|
|
}
|
|
} elseif (!empty($device['snmpable'])) {
|
|
$update['snmpable'] = ['NULL'];
|
|
}
|
|
|
|
if (strlen(trim($vars['snmp_context']))) {
|
|
$update['snmp_context'] = trim($vars['snmp_context']);
|
|
} else {
|
|
$update['snmp_context'] = ['NULL'];
|
|
}
|
|
|
|
if (dbUpdate($update, 'devices', '`device_id` = ?', [$device['device_id']])) {
|
|
print_success("Device SNMP configuration updated");
|
|
log_event('Device SNMP configuration changed.', $device['device_id'], 'device', $device['device_id'], 5);
|
|
} else {
|
|
$ok = FALSE;
|
|
print_warning("Device SNMP configuration update is not required");
|
|
}
|
|
}
|
|
if (!$ok) {
|
|
if ($error) {
|
|
$error = "Device SNMP configuration not updated ($error)";
|
|
}
|
|
print_error($error);
|
|
}
|
|
|
|
unset($update);
|
|
}
|
|
}
|
|
|
|
$device = device_by_id_cache($device['device_id'], $ok);
|
|
$transports = [];
|
|
foreach ($config['snmp']['transports'] as $transport) {
|
|
$transports[$transport] = strtoupper($transport);
|
|
}
|
|
|
|
$snmp_version = get_versions('snmp');
|
|
if (version_compare($snmp_version, '5.8', '<')) {
|
|
$authclass = 'bg-warning';
|
|
$authtext = 'Poller required net-snmp >= 5.8';
|
|
} else {
|
|
$authclass = 'bg-success';
|
|
$authtext = '';
|
|
}
|
|
$authalgo = [
|
|
'MD5' => ['name' => 'MD5'],
|
|
'SHA' => ['name' => 'SHA'],
|
|
'SHA-224' => ['name' => 'SHA-224', 'class' => $authclass, 'subtext' => $authtext],
|
|
'SHA-256' => ['name' => 'SHA-256', 'class' => $authclass, 'subtext' => $authtext],
|
|
'SHA-384' => ['name' => 'SHA-384', 'class' => $authclass, 'subtext' => $authtext],
|
|
'SHA-512' => ['name' => 'SHA-512', 'class' => $authclass, 'subtext' => $authtext],
|
|
];
|
|
|
|
$cryptoalgo = [
|
|
'DES' => ['name' => 'DES'],
|
|
'AES' => ['name' => 'AES'],
|
|
'AES-192' => ['name' => 'AES-192', 'class' => 'bg-warning', 'subtext' => 'Poller required net-snmp >= 5.8 compiled with --enable-blumenthal-aes'],
|
|
'AES-192-C' => ['name' => 'AES-192 Cisco', 'class' => 'bg-warning', 'subtext' => 'Poller required net-snmp >= 5.8 compiled with --enable-blumenthal-aes'],
|
|
'AES-256' => ['name' => 'AES-256', 'class' => 'bg-warning', 'subtext' => 'Poller required net-snmp >= 5.8 compiled with --enable-blumenthal-aes'],
|
|
'AES-256-C' => ['name' => 'AES-256 Cisco', 'class' => 'bg-warning', 'subtext' => 'Poller required net-snmp >= 5.8 compiled with --enable-blumenthal-aes'],
|
|
];
|
|
|
|
$form = [
|
|
'type' => 'horizontal',
|
|
'id' => 'edit',
|
|
//'space' => '20px',
|
|
//'title' => 'General',
|
|
//'class' => 'box',
|
|
];
|
|
// top row div
|
|
$form['fieldset']['edit'] = [
|
|
'div' => 'top',
|
|
'title' => 'Basic Configuration',
|
|
'class' => 'col-md-6'
|
|
];
|
|
$form['fieldset']['snmpv2'] = [
|
|
'div' => 'top',
|
|
'title' => 'SNMP v1/v2c Authentication',
|
|
//'right' => TRUE,
|
|
'class' => 'col-md-6 col-md-pull-0'
|
|
];
|
|
$form['fieldset']['snmpv3'] = [
|
|
'div' => 'top',
|
|
'title' => 'SNMP v3 Authentication',
|
|
//'right' => TRUE,
|
|
'class' => 'col-md-6 col-md-pull-0'
|
|
];
|
|
$form['fieldset']['snmpextra'] = [
|
|
'div' => 'top',
|
|
'title' => 'Extra Configuration',
|
|
//'right' => TRUE,
|
|
'class' => 'col-sm-12 col-md-6 pull-right'
|
|
];
|
|
|
|
// bottom row div
|
|
$form['fieldset']['submit'] = [
|
|
'div' => 'bottom',
|
|
'style' => 'padding: 0px;',
|
|
'class' => 'col-md-12'
|
|
];
|
|
|
|
$form['row'][0]['editing'] = [
|
|
'type' => 'hidden',
|
|
'value' => 'yes'
|
|
];
|
|
// left fieldset
|
|
$form['row'][1]['snmp_version'] = [
|
|
'type' => 'select',
|
|
'fieldset' => 'edit',
|
|
'name' => 'Protocol Version',
|
|
'width' => '250px',
|
|
'readonly' => $readonly,
|
|
'values' => ['v1' => 'v1', 'v2c' => 'v2c', 'v3' => 'v3'],
|
|
'value' => $device['snmp_version']
|
|
];
|
|
$form['row'][2]['snmp_transport'] = [
|
|
'type' => 'select',
|
|
'fieldset' => 'edit',
|
|
'name' => 'Transport',
|
|
'width' => '250px',
|
|
'readonly' => $readonly,
|
|
'values' => $transports,
|
|
'value' => $device['snmp_transport']
|
|
];
|
|
$form['row'][3]['snmp_port'] = [
|
|
'type' => 'text',
|
|
'fieldset' => 'edit',
|
|
'name' => 'Port',
|
|
'width' => '250px',
|
|
'placeholder' => '1-65535. Default 161.',
|
|
'readonly' => $readonly,
|
|
'value' => $device['snmp_port']
|
|
];
|
|
$form['row'][4]['snmp_timeout'] = [
|
|
'type' => 'text',
|
|
'fieldset' => 'edit',
|
|
'name' => 'Timeout',
|
|
'width' => '250px',
|
|
'placeholder' => '1-120 sec. Default 1 sec.',
|
|
'readonly' => $readonly,
|
|
'value' => $device['snmp_timeout']
|
|
];
|
|
$form['row'][5]['snmp_retries'] = [
|
|
'type' => 'text',
|
|
'fieldset' => 'edit',
|
|
'name' => 'Retries',
|
|
'width' => '250px',
|
|
'placeholder' => '1-10. Default 5.',
|
|
'readonly' => $readonly,
|
|
'value' => $device['snmp_retries']
|
|
];
|
|
$form['row'][6]['snmp_maxrep'] = [
|
|
'type' => 'text',
|
|
'fieldset' => 'edit',
|
|
'name' => 'Max Repetitions',
|
|
'width' => '250px',
|
|
'placeholder' => '0-500. Default 10. 0 for disable snmpbulk.',
|
|
'readonly' => $readonly,
|
|
'value' => $device['snmp_maxrep']
|
|
];
|
|
|
|
// Snmp v1/2c fieldset
|
|
$form['row'][7]['snmp_community'] = [
|
|
'type' => 'password',
|
|
'fieldset' => 'snmpv2',
|
|
'name' => 'SNMP Community',
|
|
'width' => '250px',
|
|
'readonly' => $readonly,
|
|
'show_password' => !$readonly,
|
|
'value' => $device['snmp_community'] // FIXME. For passwords we should use filter instead escape!
|
|
];
|
|
|
|
// Snmp v3 fieldset
|
|
$form['row'][8]['snmp_authlevel'] = [
|
|
'type' => 'select',
|
|
'fieldset' => 'snmpv3',
|
|
'name' => 'Auth Level',
|
|
'width' => '250px',
|
|
'readonly' => $readonly,
|
|
'values' => [
|
|
'noAuthNoPriv' => 'noAuthNoPriv',
|
|
'authNoPriv' => 'authNoPriv',
|
|
'authPriv' => 'authPriv'
|
|
],
|
|
'value' => $device['snmp_authlevel']
|
|
];
|
|
$form['row'][9]['snmp_authname'] = [
|
|
'type' => 'password',
|
|
'fieldset' => 'snmpv3',
|
|
'name' => 'Auth Username',
|
|
'width' => '250px',
|
|
'readonly' => $readonly,
|
|
'show_password' => !$readonly,
|
|
'value' => $device['snmp_authname']
|
|
];
|
|
$form['row'][10]['snmp_authpass'] = [
|
|
'type' => 'password',
|
|
'fieldset' => 'snmpv3',
|
|
'name' => 'Auth Password',
|
|
'width' => '250px',
|
|
'readonly' => $readonly,
|
|
'show_password' => !$readonly,
|
|
'value' => $device['snmp_authpass'] // FIXME. For passwords we should use filter instead escape!
|
|
];
|
|
$form['row'][11]['snmp_authalgo'] = [
|
|
'type' => 'select',
|
|
'fieldset' => 'snmpv3',
|
|
'name' => 'Auth Algorithm',
|
|
'width' => '250px',
|
|
'readonly' => $readonly,
|
|
'values' => $authalgo,
|
|
'value' => $device['snmp_authalgo']
|
|
];
|
|
$form['row'][12]['snmp_cryptopass'] = [
|
|
'type' => 'password',
|
|
'fieldset' => 'snmpv3',
|
|
'name' => 'Crypto Password',
|
|
'width' => '250px',
|
|
'readonly' => $readonly,
|
|
'show_password' => !$readonly,
|
|
'value' => $device['snmp_cryptopass'] // FIXME. For passwords we should use filter instead escape!
|
|
];
|
|
$form['row'][13]['snmp_cryptoalgo'] = [
|
|
'type' => 'select',
|
|
'fieldset' => 'snmpv3',
|
|
'name' => 'Crypto Algorithm',
|
|
'width' => '250px',
|
|
'readonly' => $readonly,
|
|
'values' => $cryptoalgo,
|
|
'value' => $device['snmp_cryptoalgo']
|
|
];
|
|
|
|
// Extra fields
|
|
$form['row'][14]['snmpable'] = [
|
|
'type' => 'text',
|
|
'fieldset' => 'snmpextra',
|
|
'name' => 'SNMPable OIDs',
|
|
'width' => '250px',
|
|
'readonly' => $readonly,
|
|
'placeholder' => '(Optional) Numeric OIDs for check device availability',
|
|
'value' => $device['snmpable']
|
|
];
|
|
$form['row'][15]['snmp_context'] = [
|
|
'type' => 'password',
|
|
'fieldset' => 'snmpextra',
|
|
'name' => 'SNMP Context',
|
|
'width' => '250px',
|
|
'readonly' => $readonly,
|
|
'show_password' => !$readonly,
|
|
'placeholder' => '(Optional) Context',
|
|
'value' => $device['snmp_context'] // FIXME. For passwords we should use filter instead escape!
|
|
];
|
|
|
|
$form['row'][20]['submit'] = [
|
|
'type' => 'submit',
|
|
'fieldset' => 'submit',
|
|
'name' => 'Save Changes',
|
|
'icon' => 'icon-ok icon-white',
|
|
//'right' => TRUE,
|
|
'class' => 'btn-primary',
|
|
'readonly' => $readonly,
|
|
'value' => 'save'
|
|
];
|
|
|
|
print_form_box($form);
|
|
unset($form);
|
|
|
|
?>
|
|
|
|
<script type="text/javascript">
|
|
<!--
|
|
$("#snmp_version").change(function () {
|
|
var select = this.value;
|
|
if (select === 'v3') {
|
|
$('#snmpv3').show();
|
|
$("#snmpv2").hide();
|
|
} else {
|
|
$('#snmpv2').show();
|
|
$('#snmpv3').hide();
|
|
}
|
|
}).change();
|
|
|
|
$("#snmp_authlevel").change(function () {
|
|
var select = this.value;
|
|
if (select === 'authPriv') {
|
|
$('[id^="snmp_authname"]').show();
|
|
$('[id^="snmp_authpass"]').show();
|
|
$('[id^="snmp_authalgo"]').show();
|
|
$('[id^="snmp_cryptopass"]').show();
|
|
$('[id^="snmp_cryptoalgo"]').show();
|
|
} else if (select === 'authNoPriv') {
|
|
$('[id^="snmp_authname"]').show();
|
|
$('[id^="snmp_authpass"]').show();
|
|
$('[id^="snmp_authalgo"]').show();
|
|
$('[id^="snmp_cryptopass"]').hide();
|
|
$('[id^="snmp_cryptoalgo"]').hide();
|
|
} else {
|
|
$('[id^="snmp_authname"]').hide();
|
|
$('[id^="snmp_authpass"]').hide();
|
|
$('[id^="snmp_authalgo"]').hide();
|
|
$('[id^="snmp_cryptopass"]').hide();
|
|
$('[id^="snmp_cryptoalgo"]').hide();
|
|
}
|
|
}).change();
|
|
// -->
|
|
</script>
|
|
|
|
<?php
|
|
|
|
// EOF
|