/*
* snmpvacm.c - send snmp SET requests to a network entity to change the
* vacm database
*
*/
#include <net-snmp/net-snmp-config.h>
#if HAVE_STDLIB_H
#include <stdlib.h>
#endif
#if HAVE_UNISTD_H
#include <unistd.h>
#endif
#if HAVE_STRING_H
#include <string.h>
#else
#include <strings.h>
#endif
#include <sys/types.h>
#if HAVE_NETINET_IN_H
#include <netinet/in.h>
#endif
#include <stdio.h>
#include <ctype.h>
#if TIME_WITH_SYS_TIME
# include <sys/time.h>
# include <time.h>
#else
# if HAVE_SYS_TIME_H
# include <sys/time.h>
# else
# include <time.h>
# endif
#endif
#if HAVE_SYS_SELECT_H
#include <sys/select.h>
#endif
#if HAVE_NETDB_H
#include <netdb.h>
#endif
#if HAVE_ARPA_INET_H
#include <arpa/inet.h>
#endif
#include <net-snmp/net-snmp-includes.h>
#define CMD_CREATESEC2GROUP_NAME "createSec2Group"
#define CMD_CREATESEC2GROUP 1
#define CMD_DELETESEC2GROUP_NAME "deleteSec2Group"
#define CMD_DELETESEC2GROUP 2
#define CMD_CREATEACCESS_NAME "createAccess"
#define CMD_CREATEACCESS 3
#define CMD_DELETEACCESS_NAME "deleteAccess"
#define CMD_DELETEACCESS 4
#define CMD_CREATEVIEW_NAME "createView"
#define CMD_CREATEVIEW 5
#define CMD_DELETEVIEW_NAME "deleteView"
#define CMD_DELETEVIEW 6
#define CMD_CREATEAUTH_NAME "createAuth"
#define CMD_CREATEAUTH 7
#define CMD_DELETEAUTH_NAME "deleteAuth"
#define CMD_DELETEAUTH 8
#define CMD_NUM 8
static const char *successNotes[CMD_NUM] = {
"Sec2group successfully created.",
"Sec2group successfully deleted.",
"Access successfully created.",
"Access successfully deleted.",
"View successfully created.",
"View successfully deleted.",
"AuthAccess successfully created.",
"AuthAccess successfully deleted."
};
#define SEC2GROUP_OID_LEN 11
#define ACCESS_OID_LEN 11
#define VIEW_OID_LEN 12
#define AUTH_OID_LEN 12
static oid vacmGroupName[MAX_OID_LEN] =
{ 1, 3, 6, 1, 6, 3, 16, 1, 2, 1, 3 },
vacmSec2GroupStatus[MAX_OID_LEN] = {
1, 3, 6, 1, 6, 3, 16, 1, 2, 1, 5}, vacmAccessContextMatch[MAX_OID_LEN] = {
1, 3, 6, 1, 6, 3, 16, 1, 4, 1, 4}, vacmAccessReadViewName[MAX_OID_LEN] = {
1, 3, 6, 1, 6, 3, 16, 1, 4, 1, 5}, vacmAccessWriteViewName[MAX_OID_LEN] = {
1, 3, 6, 1, 6, 3, 16, 1, 4, 1, 6}, vacmAccessNotifyViewName[MAX_OID_LEN] = {
1, 3, 6, 1, 6, 3, 16, 1, 4, 1, 7}, vacmAccessStatus[MAX_OID_LEN] = {
1, 3, 6, 1, 6, 3, 16, 1, 4, 1, 9}, vacmViewTreeFamilyMask[MAX_OID_LEN] = {
1, 3, 6, 1, 6, 3, 16, 1, 5, 2, 1, 3}, vacmViewTreeFamilyType[MAX_OID_LEN] = {
1, 3, 6, 1, 6, 3, 16, 1, 5, 2, 1, 4},
vacmViewTreeFamilyStatus[MAX_OID_LEN] = {
1, 3, 6, 1, 6, 3, 16, 1, 5, 2, 1, 6}
;
#define NSVACMACCESSTABLE 1, 3, 6, 1, 4, 1, 8072, 1, 9, 1
static oid nsVacmContextPfx[MAX_OID_LEN] = { NSVACMACCESSTABLE, 1, 2 };
static oid nsVacmViewName[MAX_OID_LEN] = { NSVACMACCESSTABLE, 1, 3 };
static oid nsVacmRowStatus[MAX_OID_LEN] = { NSVACMACCESSTABLE, 1, 5 };
int viewTreeFamilyType = 1;
void
usage(void)
{
fprintf(stderr, "Usage: snmpvacm ");
snmp_parse_args_usage(stderr);
fprintf(stderr, " COMMAND\n\n");
snmp_parse_args_descriptions(stderr);
fprintf(stderr, "\nsnmpvacm commands:\n");
fprintf(stderr, " createAccess GROUPNAME [CONTEXTPREFIX] SECURITYMODEL SECURITYLEVEL CONTEXTMATCH READVIEWNAME WRITEVIEWNAME NOTIFYVIEWNAME\n");
fprintf(stderr, " deleteAccess GROUPNAME [CONTEXTPREFIX] SECURITYMODEL SECURITYLEVEL\n");
fprintf(stderr, " createSec2Group MODEL SECURITYNAME GROUPNAME\n");
fprintf(stderr, " deleteSec2Group MODEL SECURITYNAME\n");
fprintf(stderr, " [-Ce] createView NAME SUBTREE [MASK]\n");
fprintf(stderr, " deleteView NAME SUBTREE\n");
fprintf(stderr, " createAuth GROUPNAME [CONTEXTPREFIX] SECURITYMODEL SECURITYLEVEL AUTHTYPE CONTEXTMATCH VIEWNAME\n");
fprintf(stderr, " deleteAuth GROUPNAME [CONTEXTPREFIX] SECURITYMODEL SECURITYLEVEL AUTHTYPE\n");
}
void
auth_oid(oid * it, size_t * len, const char *groupName,
const char *prefix, int model, int level, const char *authtype)
{
int i;
int itIndex = AUTH_OID_LEN;
it[itIndex++] = strlen(groupName);
for (i = 0; i < (int) strlen(groupName); i++)
it[itIndex++] = groupName[i];
if (prefix) {
*len += strlen(prefix);
it[itIndex++] = strlen(prefix);
for (i = 0; i < (int) strlen(prefix); i++)
it[itIndex++] = prefix[i];
} else
it[itIndex++] = 0;
it[itIndex++] = model;
it[itIndex++] = level;
it[itIndex++] = strlen(authtype);
for (i = 0; i < (int) strlen(authtype); i++)
it[itIndex++] = authtype[i];
*len = itIndex;
}
void
access_oid(oid * it, size_t * len, const char *groupName,
const char *prefix, int model, int level)
{
int i;
int itIndex = ACCESS_OID_LEN;
*len = itIndex + 4 + +strlen(groupName);
it[itIndex++] = strlen(groupName);
for (i = 0; i < (int) strlen(groupName); i++)
it[itIndex++] = groupName[i];
if (prefix) {
*len += strlen(prefix);
it[itIndex++] = strlen(prefix);
for (i = 0; i < (int) strlen(prefix); i++)
it[itIndex++] = prefix[i];
} else
it[itIndex++] = 0;
it[itIndex++] = model;
it[itIndex++] = level;
}
void
sec2group_oid(oid * it, size_t * len, int model, const char *name)
{
int i;
int itIndex = SEC2GROUP_OID_LEN;
*len = itIndex + 2 + strlen(name);
it[itIndex++] = model;
it[itIndex++] = strlen(name);
for (i = 0; i < (int) strlen(name); i++)
it[itIndex++] = name[i];
}
void
view_oid(oid * it, size_t * len, const char *viewName, char *viewSubtree)
{
int i;
oid c_oid[SPRINT_MAX_LEN];
size_t c_oid_length = SPRINT_MAX_LEN;
int itIndex = VIEW_OID_LEN;
if (!snmp_parse_oid(viewSubtree, c_oid, &c_oid_length)) {
printf("Error parsing subtree (%s)\n", viewSubtree);
exit(1);
}
*len = itIndex + 2 + strlen(viewName) + c_oid_length;
it[itIndex++] = strlen(viewName);
for (i = 0; i < (int) strlen(viewName); i++)
it[itIndex++] = viewName[i];
it[itIndex++] = c_oid_length;
for (i = 0; i < (int) c_oid_length; i++)
it[itIndex++] = c_oid[i];
/*
* sprint_objid(c_oid, it, *len);
*/
}
static void
optProc(int argc, char *const *argv, int opt)
{
switch (opt) {
case 'C':
while (*optarg) {
switch (*optarg++) {
case 'e':
viewTreeFamilyType = 2;
break;
default:
fprintf(stderr,
"Unknown flag passed to -C: %c\n", optarg[-1]);
exit(1);
}
}
break;
}
}
int
main(int argc, char *argv[])
{
netsnmp_session session, *ss;
netsnmp_pdu *pdu = NULL, *response = NULL;
#ifdef notused
netsnmp_variable_list *vars;
#endif
int arg;
#ifdef notused
int count;
int current_name = 0;
int current_type = 0;
int current_value = 0;
char *names[128];
char types[128];
char *values[128];
oid name[MAX_OID_LEN];
#endif
size_t name_length;
int status;
int exitval = 1;
int command = 0;
long longvar;
int secModel, secLevel, contextMatch;
unsigned int val, i = 0;
char *mask, *groupName, *prefix, *authtype;
u_char viewMask[VACMSTRINGLEN];
char *st;
SOCK_STARTUP;
/*
* get the common command line arguments
*/
switch (arg = snmp_parse_args(argc, argv, &session, "C:", optProc)) {
case NETSNMP_PARSE_ARGS_ERROR:
goto out;
case NETSNMP_PARSE_ARGS_SUCCESS_EXIT:
exitval = 0;
goto out;
case NETSNMP_PARSE_ARGS_ERROR_USAGE:
usage();
goto out;
default:
break;
}
/*
* open an SNMP session
*/
/*
* Note: this wil obtain the engineID needed below
*/
ss = snmp_open(&session);
if (ss == NULL) {
/*
* diagnose snmp_open errors with the input netsnmp_session pointer
*/
snmp_sess_perror("snmpvacm", &session);
goto out;
}
/*
* create PDU for SET request and add object names and values to request
*/
pdu = snmp_pdu_create(SNMP_MSG_SET);
if (arg >= argc) {
fprintf(stderr, "Please specify a operation to perform.\n");
usage();
goto close_session;
}
if (strcmp(argv[arg], CMD_DELETEVIEW_NAME) == 0)
/*
* deleteView: delete a view
*
* deleteView NAME SUBTREE
*
*/
{
if (++arg + 2 != argc) {
fprintf(stderr, "You must specify the view to delete\n");
usage();
goto close_session;
}
command = CMD_DELETEVIEW;
name_length = VIEW_OID_LEN;
view_oid(vacmViewTreeFamilyStatus, &name_length, argv[arg],
argv[arg + 1]);
longvar = RS_DESTROY;
snmp_pdu_add_variable(pdu, vacmViewTreeFamilyStatus, name_length,
ASN_INTEGER, (u_char *) & longvar,
sizeof(longvar));
} else if (strcmp(argv[arg], CMD_CREATEVIEW_NAME) == 0)
/*
* createView: create a view
*
* createView NAME SUBTREE MASK
*
*/
{
if (++arg + 2 > argc) {
fprintf(stderr, "You must specify name, subtree and mask\n");
usage();
goto close_session;
}
command = CMD_CREATEVIEW;
name_length = VIEW_OID_LEN;
view_oid(vacmViewTreeFamilyStatus, &name_length, argv[arg],
argv[arg + 1]);
longvar = RS_CREATEANDGO;
snmp_pdu_add_variable(pdu, vacmViewTreeFamilyStatus, name_length,
ASN_INTEGER, (u_char *) & longvar,
sizeof(longvar));
/*
* Mask
*/
if (arg + 3 == argc) {
mask = argv[arg + 2];
for (mask = strtok_r(mask, ".:", &st); mask; mask = strtok_r(NULL, ".:", &st)) {
if (i >= sizeof(viewMask)) {
printf("MASK too long\n");
goto close_session;
}
if (sscanf(mask, "%x", &val) == 0) {
printf("invalid MASK\n");
goto close_session;
}
viewMask[i] = val;
i++;
}
} else {
for (i=0 ; i < (name_length+7)/8; i++)
viewMask[i] = (u_char)0xff;
}
view_oid(vacmViewTreeFamilyMask, &name_length, argv[arg],
argv[arg + 1]);
snmp_pdu_add_variable(pdu, vacmViewTreeFamilyMask, name_length,
ASN_OCTET_STR, viewMask, i);
view_oid(vacmViewTreeFamilyType, &name_length, argv[arg],
argv[arg + 1]);
snmp_pdu_add_variable(pdu, vacmViewTreeFamilyType, name_length,
ASN_INTEGER, (u_char *) & viewTreeFamilyType,
sizeof(viewTreeFamilyType));
} else if (strcmp(argv[arg], CMD_DELETESEC2GROUP_NAME) == 0)
/*
* deleteSec2Group: delete security2group
*
* deleteSec2Group MODEL SECURITYNAME
*
*/
{
if (++arg + 2 != argc) {
fprintf(stderr, "You must specify the sec2group to delete\n");
usage();
goto close_session;
}
command = CMD_DELETESEC2GROUP;
name_length = SEC2GROUP_OID_LEN;
if (sscanf(argv[arg], "%d", &secModel) == 0) {
printf("invalid security model\n");
usage();
goto close_session;
}
sec2group_oid(vacmSec2GroupStatus, &name_length, secModel,
argv[arg + 1]);
longvar = RS_DESTROY;
snmp_pdu_add_variable(pdu, vacmSec2GroupStatus, name_length,
ASN_INTEGER, (u_char *) & longvar,
sizeof(longvar));
} else if (strcmp(argv[arg], CMD_CREATESEC2GROUP_NAME) == 0)
/*
* createSec2Group: create a security2group
*
* createSec2Group MODEL SECURITYNAME GROUPNAME
*
*/
{
if (++arg + 3 != argc) {
fprintf(stderr,
"You must specify model, security name and group name\n");
usage();
goto close_session;
}
command = CMD_CREATESEC2GROUP;
name_length = SEC2GROUP_OID_LEN;
if (sscanf(argv[arg], "%d", &secModel) == 0) {
printf("invalid security model\n");
usage();
goto close_session;
}
sec2group_oid(vacmSec2GroupStatus, &name_length, secModel,
argv[arg + 1]);
longvar = RS_CREATEANDGO;
snmp_pdu_add_variable(pdu, vacmSec2GroupStatus, name_length,
ASN_INTEGER, (u_char *) & longvar,
sizeof(longvar));
sec2group_oid(vacmGroupName, &name_length, secModel,
argv[arg + 1]);
snmp_pdu_add_variable(pdu, vacmGroupName, name_length,
ASN_OCTET_STR, (u_char *) argv[arg + 2],
strlen(argv[arg + 2]));
} else if (strcmp(argv[arg], CMD_DELETEACCESS_NAME) == 0)
/*
* deleteAccess: delete access entry
*
* deleteAccess GROUPNAME [CONTEXTPREFIX] SECURITYMODEL SECURITYLEVEL
*
*/
{
if (++arg + 3 > argc) {
fprintf(stderr,
"You must specify the access entry to delete\n");
usage();
goto close_session;
}
command = CMD_DELETEACCESS;
name_length = ACCESS_OID_LEN;
groupName = argv[arg];
if (arg + 4 == argc)
prefix = argv[++arg];
else
prefix = NULL;
if (sscanf(argv[arg + 1], "%d", &secModel) == 0) {
printf("invalid security model\n");
usage();
goto close_session;
}
if (sscanf(argv[arg + 2], "%d", &secLevel) == 0) {
printf("invalid security level\n");
usage();
goto close_session;
}
access_oid(vacmAccessStatus, &name_length, groupName, prefix,
secModel, secLevel);
longvar = RS_DESTROY;
snmp_pdu_add_variable(pdu, vacmAccessStatus, name_length,
ASN_INTEGER, (u_char *) & longvar,
sizeof(longvar));
} else if (strcmp(argv[arg], CMD_CREATEACCESS_NAME) == 0)
/*
* createAccess: create access entry
*
* createAccess GROUPNAME [CONTEXTPREFIX] SECURITYMODEL SECURITYLEVEL CONTEXTMATCH READVIEWNAME WRITEVIEWNAME NOTIFYVIEWNAME
*
*/
{
if (++arg + 7 > argc) {
fprintf(stderr,
"You must specify the access entry to create\n");
usage();
goto close_session;
}
command = CMD_CREATEACCESS;
name_length = ACCESS_OID_LEN;
groupName = argv[arg];
if (arg + 8 == argc)
prefix = argv[++arg];
else
prefix = NULL;
if (sscanf(argv[arg + 1], "%d", &secModel) == 0) {
printf("invalid security model\n");
usage();
goto close_session;
}
if (sscanf(argv[arg + 2], "%d", &secLevel) == 0) {
printf("invalid security level\n");
usage();
goto close_session;
}
access_oid(vacmAccessStatus, &name_length, groupName, prefix,
secModel, secLevel);
longvar = RS_CREATEANDGO;
snmp_pdu_add_variable(pdu, vacmAccessStatus, name_length,
ASN_INTEGER, (u_char *) & longvar,
sizeof(longvar));
access_oid(vacmAccessContextMatch, &name_length, groupName, prefix,
secModel, secLevel);
if (sscanf(argv[arg + 3], "%d", &contextMatch) == 0) {
printf("invalid contextMatch\n");
usage();
goto close_session;
}
snmp_pdu_add_variable(pdu, vacmAccessContextMatch, name_length,
ASN_INTEGER, (u_char *) & contextMatch,
sizeof(contextMatch));
access_oid(vacmAccessReadViewName, &name_length, groupName, prefix,
secModel, secLevel);
snmp_pdu_add_variable(pdu, vacmAccessReadViewName, name_length,
ASN_OCTET_STR, (u_char *) argv[arg + 4],
strlen(argv[arg + 4]));
access_oid(vacmAccessWriteViewName, &name_length, groupName,
prefix, secModel, secLevel);
snmp_pdu_add_variable(pdu, vacmAccessWriteViewName, name_length,
ASN_OCTET_STR, (u_char *) argv[arg + 5],
strlen(argv[arg + 5]));
access_oid(vacmAccessNotifyViewName, &name_length, groupName,
prefix, secModel, secLevel);
snmp_pdu_add_variable(pdu, vacmAccessNotifyViewName, name_length,
ASN_OCTET_STR, (u_char *) argv[arg + 6],
strlen(argv[arg + 6]));
} else if (strcmp(argv[arg], CMD_DELETEAUTH_NAME) == 0)
/*
* deleteAuth: delete authAccess entry
*
* deleteAuth GROUPNAME [CONTEXTPREFIX] SECURITYMODEL SECURITYLEVEL AUTHTYPE
*
*/
{
if (++arg + 4 > argc) {
fprintf(stderr,
"You must specify the authAccess entry to delete\n");
usage();
goto close_session;
}
command = CMD_DELETEAUTH;
name_length = AUTH_OID_LEN;
groupName = argv[arg];
if (arg + 5 == argc)
prefix = argv[++arg];
else
prefix = NULL;
if (sscanf(argv[arg + 1], "%d", &secModel) == 0) {
printf("invalid security model\n");
usage();
goto close_session;
}
if (sscanf(argv[arg + 2], "%d", &secLevel) == 0) {
printf("invalid security level\n");
usage();
goto close_session;
}
authtype = argv[arg+3];
auth_oid(nsVacmRowStatus, &name_length, groupName, prefix,
secModel, secLevel, authtype);
longvar = RS_DESTROY;
snmp_pdu_add_variable(pdu, nsVacmRowStatus, name_length,
ASN_INTEGER, (u_char *) & longvar,
sizeof(longvar));
} else if (strcmp(argv[arg], CMD_CREATEAUTH_NAME) == 0)
/*
* createAuth: create authAccess entry
*
* createAuth GROUPNAME [CONTEXTPREFIX] SECURITYMODEL SECURITYLEVEL AUTHTYPE CONTEXTMATCH VIEWNAME
*
*/
{
if (++arg + 6 > argc) {
fprintf(stderr,
"You must specify the authAccess entry to create\n");
usage();
goto close_session;
}
command = CMD_CREATEAUTH;
name_length = AUTH_OID_LEN;
groupName = argv[arg];
if (arg + 7 == argc)
prefix = argv[++arg];
else
prefix = NULL;
if (sscanf(argv[arg + 1], "%d", &secModel) == 0) {
printf("invalid security model\n");
usage();
goto close_session;
}
if (sscanf(argv[arg + 2], "%d", &secLevel) == 0) {
printf("invalid security level\n");
usage();
goto close_session;
}
authtype = argv[arg+3];
auth_oid(nsVacmRowStatus, &name_length, groupName, prefix,
secModel, secLevel, authtype);
longvar = RS_CREATEANDGO;
snmp_pdu_add_variable(pdu, nsVacmRowStatus, name_length,
ASN_INTEGER, (u_char *) & longvar,
sizeof(longvar));
auth_oid(nsVacmContextPfx, &name_length, groupName, prefix,
secModel, secLevel, authtype);
if (sscanf(argv[arg + 4], "%d", &contextMatch) == 0) {
printf("invalid contextMatch\n");
usage();
goto close_session;
}
snmp_pdu_add_variable(pdu, nsVacmContextPfx, name_length,
ASN_INTEGER, (u_char *) & contextMatch,
sizeof(contextMatch));
auth_oid(nsVacmViewName, &name_length, groupName, prefix,
secModel, secLevel, authtype);
snmp_pdu_add_variable(pdu, nsVacmViewName, name_length,
ASN_OCTET_STR, (u_char *) argv[arg + 5],
strlen(argv[arg + 5]));
} else {
printf("Unknown command\n");
usage();
goto close_session;
}
exitval = 0;
/*
* do the request
*/
status = snmp_synch_response(ss, pdu, &response);
if (status == STAT_SUCCESS) {
if (response) {
if (response->errstat == SNMP_ERR_NOERROR) {
fprintf(stderr, "%s\n", successNotes[command - 1]);
} else {
fprintf(stderr, "Error in packet.\nReason: %s\n",
snmp_errstring(response->errstat));
if (response->errindex != 0){
int count;
struct variable_list *vars = response->variables;
fprintf(stderr, "Failed object: ");
for(count = 1; vars && (count != response->errindex);
vars = vars->next_variable, count++)
;
if (vars)
fprint_objid(stderr, vars->name, vars->name_length);
fprintf(stderr, "\n");
}
exitval = 2;
}
}
} else if (status == STAT_TIMEOUT) {
fprintf(stderr, "Timeout: No Response from %s\n",
session.peername);
exitval = 1;
} else {
snmp_sess_perror("snmpset", ss);
exitval = 1;
}
if (response)
snmp_free_pdu(response);
close_session:
snmp_close(ss);
out:
SOCK_CLEANUP;
return exitval;
}