ITL: Add securityLevel to snmpv3 CheckCommand

For example if using snmpv3 without encryption.
Defaults set to privAuth to stay compatible to older versions.

fixes #9416

Signed-off-by: Michael Friedrich <michael.friedrich@netways.de>

diff --git a/doc/7-icinga-template-library.md b/doc/7-icinga-template-library.md
index a188e8d071d605f1eceda7c39dcecd510284787e..b30eaf5b5b817c80149037ac934cf001849d3c5b 100644 (file)
--- a/doc/7-icinga-template-library.md
+++ b/doc/7-icinga-template-library.md
@@ -671,7 +671,8 @@ Name              | Description
 snmpv3_address    | **Optional.** The host's address. Defaults to "$address$" if the host's `address` attribute is set, "$address6$" otherwise.
 snmpv3_user       | **Required.** The username to log in with.
 snmpv3_auth_alg   | **Optional.** The authentication algorithm. Defaults to SHA.
-snmpv3_auth_key   | **Required.** The authentication key.
+snmpv3_seclevel   | **Optional.** The security level. Defaults to authPriv.
+snmpv3_auth_key   | **Required,** The authentication key. Required if `snmpv3_seclevel` is set to `authPriv` otherwise optional.
 snmpv3_priv_alg   | **Optional.** The encryption algorithm. Defaults to AES.
 snmpv3_priv_key   | **Required.** The encryption key.
 snmpv3_oid        | **Required.** The SNMP OID.

diff --git a/itl/command-plugins.conf b/itl/command-plugins.conf
index ea82d8535fdda8b26134a4dd9947de2e4203b2a0..461971c1c630d0fdba8e2d5f107a2358fce83e34 100644 (file)
--- a/itl/command-plugins.conf
+++ b/itl/command-plugins.conf
@@ -1003,7 +1003,7 @@ object CheckCommand "snmpv3" {
        arguments = {
                "-H" = "$snmpv3_address$"
                "-P" = 3
-               "--seclevel" = "authPriv"
+               "--seclevel" = "$snmpv3_seclevel$"
                "-U" = "$snmpv3_user$"
                "-a" = "$snmpv3_auth_alg$"
                "-A" = "$snmpv3_auth_key$"
@@ -1018,6 +1018,7 @@ object CheckCommand "snmpv3" {
        vars.snmpv3_address = "$check_address$"
        vars.snmpv3_auth_alg = "SHA"
        vars.snmpv3_priv_alg = "AES"
+       vars.snmpv3_seclevel = "authPriv"
 }
 
 object CheckCommand "snmp-uptime" {