blob: 860590f55019eef954f452a9fe927ddaa8d694bc [file] [log] [blame]
#include <net-snmp/net-snmp-config.h>
#include <net-snmp/net-snmp-features.h>
#include <net-snmp/net-snmp-includes.h>
#include <net-snmp/agent/net-snmp-agent-includes.h>
#include "utilities/iquery.h"
netsnmp_feature_child_of(iquery_all, libnetsnmpmibs)
netsnmp_feature_child_of(iquery, iquery_all)
netsnmp_feature_child_of(iquery_community_session, iquery_all)
netsnmp_feature_child_of(iquery_pdu_session, iquery_all)
netsnmp_feature_require(query_set_default_session)
#ifndef NETSNMP_FEATURE_REMOVE_IQUERY
void
netsnmp_parse_iquerySecLevel(const char *token, char *line)
{
int secLevel;
if ((secLevel = parse_secLevel_conf( token, line )) >= 0 ) {
netsnmp_ds_set_int(NETSNMP_DS_APPLICATION_ID,
NETSNMP_DS_AGENT_INTERNAL_SECLEVEL, secLevel);
} else {
netsnmp_config_error("Unknown security level: %s", line);
}
}
void
netsnmp_parse_iqueryVersion(const char *token, char *line)
{
#ifndef NETSNMP_DISABLE_SNMPV1
if (!strcmp( line, "1" ))
netsnmp_ds_set_int(NETSNMP_DS_APPLICATION_ID,
NETSNMP_DS_AGENT_INTERNAL_VERSION, SNMP_VERSION_1);
else
#endif
#ifndef NETSNMP_DISABLE_SNMPV2C
if (!strcmp( line, "2" ) || !strcasecmp( line, "2c" ))
netsnmp_ds_set_int(NETSNMP_DS_APPLICATION_ID,
NETSNMP_DS_AGENT_INTERNAL_VERSION, SNMP_VERSION_2c);
else
#endif
if (!strcmp( line, "3" ))
netsnmp_ds_set_int(NETSNMP_DS_APPLICATION_ID,
NETSNMP_DS_AGENT_INTERNAL_VERSION, SNMP_VERSION_3);
else {
netsnmp_config_error("Unknown version: %s", line);
}
}
/*
* Set up a default session for running internal queries.
* This needs to be done before the config files are read,
* so that it is available for "monitor" directives...
*/
int
_init_default_iquery_session( int majorID, int minorID,
void *serverargs, void *clientarg)
{
char *secName = netsnmp_ds_get_string(NETSNMP_DS_APPLICATION_ID,
NETSNMP_DS_AGENT_INTERNAL_SECNAME);
if (secName)
netsnmp_query_set_default_session(
netsnmp_iquery_user_session(secName));
return SNMPERR_SUCCESS;
}
/*
* ... Unfortunately, the internal engine ID is not set up
* until later, so this default session is incomplete.
* The resulting engineID probe runs into problems,
* causing the very first internal query to time out.
* Updating the default session with the internal engineID
* once it has been set, fixes this problem.
*/
int
_tweak_default_iquery_session( int majorID, int minorID,
void *serverargs, void *clientarg)
{
u_char eID[SNMP_MAXBUF_SMALL];
size_t elen;
netsnmp_session *s = netsnmp_query_get_default_session_unchecked();
if ( s && s->securityEngineIDLen == 0 ) {
elen = snmpv3_get_engineID(eID, sizeof(eID));
s->securityEngineID = netsnmp_memdup(eID, elen);
s->securityEngineIDLen = elen;
}
return SNMPERR_SUCCESS;
}
void init_iquery(void){
char *type = netsnmp_ds_get_string(NETSNMP_DS_LIBRARY_ID,
NETSNMP_DS_LIB_APPTYPE);
netsnmp_ds_register_premib(ASN_OCTET_STR, type, "agentSecName",
NETSNMP_DS_APPLICATION_ID,
NETSNMP_DS_AGENT_INTERNAL_SECNAME);
netsnmp_ds_register_premib(ASN_OCTET_STR, type, "iquerySecName",
NETSNMP_DS_APPLICATION_ID,
NETSNMP_DS_AGENT_INTERNAL_SECNAME);
snmpd_register_config_handler("iqueryVersion",
netsnmp_parse_iqueryVersion, NULL,
"1 | 2c | 3");
snmpd_register_config_handler("iquerySecLevel",
netsnmp_parse_iquerySecLevel, NULL,
"noAuthNoPriv | authNoPriv | authPriv");
/*
* Set defaults
*/
netsnmp_ds_set_int(NETSNMP_DS_APPLICATION_ID,
NETSNMP_DS_AGENT_INTERNAL_VERSION, SNMP_VERSION_3);
netsnmp_ds_set_int(NETSNMP_DS_APPLICATION_ID,
NETSNMP_DS_AGENT_INTERNAL_SECLEVEL, SNMP_SEC_LEVEL_AUTHNOPRIV);
snmp_register_callback(SNMP_CALLBACK_LIBRARY,
SNMP_CALLBACK_POST_PREMIB_READ_CONFIG,
_init_default_iquery_session, NULL);
snmp_register_callback(SNMP_CALLBACK_LIBRARY,
SNMP_CALLBACK_POST_READ_CONFIG,
_tweak_default_iquery_session, NULL);
}
/**************************
*
* APIs to construct an "internal query" session
*
**************************/
#ifndef NETSNMP_FEATURE_REMOVE_IQUERY_PDU_SESSION
netsnmp_session *netsnmp_iquery_pdu_session(netsnmp_pdu* pdu) {
if (!pdu)
return NULL;
if (pdu->version == SNMP_VERSION_3)
return netsnmp_iquery_session( pdu->securityName,
pdu->version,
pdu->securityModel,
pdu->securityLevel,
pdu->securityEngineID,
pdu->securityEngineIDLen);
else
return netsnmp_iquery_session((char *) pdu->community,
pdu->version,
pdu->version+1,
SNMP_SEC_LEVEL_NOAUTH,
pdu->securityEngineID,
pdu->securityEngineIDLen);
}
#endif /* NETSNMP_FEATURE_REMOVE_IQUERY_PDU_SESSION */
netsnmp_session *netsnmp_iquery_user_session(char* secName){
u_char eID[SNMP_MAXBUF_SMALL];
size_t elen = snmpv3_get_engineID(eID, sizeof(eID));
return netsnmp_iquery_session( secName,
SNMP_VERSION_3,
SNMP_SEC_MODEL_USM,
SNMP_SEC_LEVEL_AUTHNOPRIV, eID, elen);
}
#ifndef NETSNMP_FEATURE_REMOVE_IQUERY_COMMUNITY_SESSION
netsnmp_session *netsnmp_iquery_community_session( char* community, int version ) {
u_char eID[SNMP_MAXBUF_SMALL];
size_t elen = snmpv3_get_engineID(eID, sizeof(eID));
return netsnmp_iquery_session( community, version, version+1,
SNMP_SEC_LEVEL_NOAUTH, eID, elen);
}
#endif /* NETSNMP_FEATURE_REMOVE_IQUERY_COMMUNITY_SESSION */
netsnmp_session *netsnmp_iquery_session(char* secName, int version,
int secModel, int secLevel,
u_char* engineID, size_t engIDLen) {
/*
* This routine creates a completely new session every time.
* It might be worth keeping track of which 'secNames' already
* have iquery sessions created, and re-using the appropriate one.
*/
extern int callback_master_num;
netsnmp_session *ss = NULL;
#ifdef NETSNMP_TRANSPORT_CALLBACK_DOMAIN
ss = netsnmp_callback_open( callback_master_num, NULL, NULL, NULL);
if (ss) {
ss->version = version;
ss->securityModel = secModel;
ss->securityLevel = secLevel;
ss->securityEngineID = netsnmp_memdup(engineID, engIDLen);
ss->securityEngineIDLen = engIDLen;
if ( version == SNMP_VERSION_3 ) {
ss->securityNameLen = strlen(secName);
ss->securityName = netsnmp_memdup(secName, ss->securityNameLen);
} else {
ss->community = netsnmp_memdup(secName, strlen(secName));
ss->community_len = strlen(secName);
}
ss->myvoid = netsnmp_check_outstanding_agent_requests;
ss->flags |= SNMP_FLAGS_RESP_CALLBACK | SNMP_FLAGS_DONT_PROBE;
}
#endif
return ss;
}
#else /* NETSNMP_FEATURE_REMOVE_IQUERY */
netsnmp_feature_unused(iquery);
#endif /* NETSNMP_FEATURE_REMOVE_IQUERY */