Graham McIntire
b4f8b40b7f
- Remove PVC volume mount from k8s/deployment.yaml - Delete k8s/mib-pvc.yaml (no longer needed) - Update .gitignore to commit MIB files to git - Add mix import_mibs task to copy MIBs from LibreNMS - Add all MIB files from priv/mibs/ to git This fixes the multi-attach volume error in Kubernetes where new pods couldn't start because the RWO (ReadWriteOnce) PVC was attached to the old pod. MIBs are now part of the Docker image and can be used by all pods simultaneously.
544 lines
20 KiB
Text
544 lines
20 KiB
Text
-- *****************************************************************
|
|
-- DLINKSW-SSH-MIB.mib : Secure Shell MIB
|
|
--
|
|
-- Copyright (c) 2013 D-Link Corporation, all rights reserved.
|
|
--
|
|
-- *****************************************************************
|
|
DLINKSW-SSH-MIB DEFINITIONS ::= BEGIN
|
|
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY,
|
|
OBJECT-TYPE,
|
|
Integer32,
|
|
Unsigned32
|
|
FROM SNMPv2-SMI
|
|
RowStatus, TimeStamp,TruthValue,DisplayString
|
|
FROM SNMPv2-TC
|
|
OBJECT-GROUP, MODULE-COMPLIANCE
|
|
FROM SNMPv2-CONF
|
|
InetAddressType,InetAddress
|
|
FROM INET-ADDRESS-MIB
|
|
InterfaceIndexOrZero
|
|
FROM IF-MIB
|
|
SnmpAdminString
|
|
FROM SNMP-FRAMEWORK-MIB
|
|
dlinkIndustrialCommon
|
|
FROM DLINK-ID-REC-MIB;
|
|
|
|
|
|
dlinkSwSshMIB MODULE-IDENTITY
|
|
LAST-UPDATED "201307180000Z"
|
|
ORGANIZATION "D-Link Corp."
|
|
CONTACT-INFO
|
|
" D-Link Corporation
|
|
|
|
Postal: No. 289, Sinhu 3rd Rd., Neihu District,
|
|
Taipei City 114, Taiwan, R.O.C
|
|
Tel: +886-2-66000123
|
|
E-mail: tsd@dlink.com.tw
|
|
"
|
|
DESCRIPTION
|
|
"This MIB module defines objects for Secure Shell (SSH)."
|
|
REVISION "201307180000Z"
|
|
DESCRIPTION
|
|
"This is the first version of the MIB file for 'SSH'
|
|
functionality.
|
|
"
|
|
::= { dlinkIndustrialCommon 17 }
|
|
|
|
-- -----------------------------------------------------------------------------
|
|
dSshNotifications OBJECT IDENTIFIER ::= { dlinkSwSshMIB 0 }
|
|
dSshObjects OBJECT IDENTIFIER ::= { dlinkSwSshMIB 1 }
|
|
dSshConformance OBJECT IDENTIFIER ::= { dlinkSwSshMIB 2 }
|
|
|
|
-- -----------------------------------------------------------------------------
|
|
dSshGeneral OBJECT IDENTIFIER ::= { dSshObjects 1 }
|
|
|
|
dSshEnabled OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object enables or disables Secure Shell (SSH) service."
|
|
DEFVAL { false }
|
|
::= { dSshGeneral 1 }
|
|
|
|
dSshVersion OBJECT-TYPE
|
|
SYNTAX INTEGER { v1(1), v2(2), v1v2(3) }
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The version of SSH is running on the switch.
|
|
The version that is currently supported is v2."
|
|
::= { dSshGeneral 2 }
|
|
|
|
dSshTimeout OBJECT-TYPE
|
|
SYNTAX Integer32 (30..600)
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The time interval that the switch waits for the SSH client to respond
|
|
during the SSH negotiation phase."
|
|
DEFVAL { 120 }
|
|
::= { dSshGeneral 3 }
|
|
|
|
dSshAuthenticationRetries OBJECT-TYPE
|
|
SYNTAX Integer32 (1..32)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of authentication attempts after the session
|
|
has reset or authentication failed."
|
|
DEFVAL { 3 }
|
|
::= { dSshGeneral 4 }
|
|
|
|
dSshServicePort OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the service port, such as 22, which Secure Shell (SSH)
|
|
needs to connect to."
|
|
DEFVAL { 22 }
|
|
::= { dSshGeneral 5 }
|
|
|
|
dSshSrcIfIndex OBJECT-TYPE
|
|
SYNTAX InterfaceIndexOrZero
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object specifies the ifIdex value of the source
|
|
source address of SSH packets that initiates a SSH connection.
|
|
The value of this object should be a valid 'ifIndex' value.
|
|
The value of this object being 'zero' implies that the IP address
|
|
of the closest interface will be used."
|
|
DEFVAL {0}
|
|
::= { dSshGeneral 6}
|
|
-- -----------------------------------------------------------------------------
|
|
dSshKeyConfiguration OBJECT IDENTIFIER ::= { dSshObjects 2 }
|
|
dSshCryptoKeyPairTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF DSshCryptoKeyPairEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"dSshCryptokeyTable is a table that lets the user configure
|
|
the SSH keys"
|
|
::= { dSshKeyConfiguration 1 }
|
|
|
|
dSshCryptoKeyPairEntry OBJECT-TYPE
|
|
SYNTAX DSshCryptoKeyPairEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A SSH key table entry. The index specifies which
|
|
protocol the user wants to generate the key for.
|
|
|
|
An entry is created/removed when a key pair for a specific
|
|
protocol is generated or deleted via CLI or by issuing appropriate
|
|
sets to this table using snmp.
|
|
|
|
To replace the existing key for a protocol
|
|
|
|
1. Specify the Protocol: dSshCryptoKeyPairIndex
|
|
2. Specify the modulus size of the key pair(s): dSshCryptoKeyPairNBits
|
|
3. Set dSshCryptoKeyPairReplace as true(1)."
|
|
INDEX { dSshCryptoKeyPairIndex }
|
|
::= { dSshCryptoKeyPairTable 1 }
|
|
|
|
DSshCryptoKeyPairEntry ::=
|
|
SEQUENCE {
|
|
dSshCryptoKeyPairIndex INTEGER,
|
|
dSshCryptoKeyPairNBits Integer32,
|
|
dSshCryptoKeyPairReplace TruthValue,
|
|
dSshCryptoKeyPairLastCreateTime TimeStamp,
|
|
dSshCryptoKeyPairString DisplayString,
|
|
dSshCryptoKeyPairRowStatus RowStatus
|
|
}
|
|
|
|
dSshCryptoKeyPairIndex OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
rsa(1),
|
|
dsa(2)
|
|
}
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The SSH Protocol Identifier for which this entry
|
|
pertains to.
|
|
|
|
rsa - A public-key cryptosystem defined by Rivest,
|
|
Shamir and Adleman.
|
|
|
|
dsa - Digital Signature Algorithm, a public key
|
|
cipher used to generate digital signatures."
|
|
::= { dSshCryptoKeyPairEntry 1 }
|
|
|
|
dSshCryptoKeyPairNBits OBJECT-TYPE
|
|
SYNTAX Integer32 (360|512|768|1024|2048)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specifies the modulus size of the key pair(s):
|
|
For RSA, the valid values are 360, 512, 768, 1024, and 2048.
|
|
For DSA, the valid value is fixed as 1024.
|
|
For SSH version 2, the minimum recommended key size is 768 bits.
|
|
|
|
A key size with a larger number provides higher security but
|
|
takes longer to generate.
|
|
|
|
This object cannot be modified while this row is
|
|
active, unless the associated dSshCryptoKeyPairReplace
|
|
object is set to True in the same Set PDU."
|
|
::= { dSshCryptoKeyPairEntry 2 }
|
|
|
|
dSshCryptoKeyPairReplace OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object specifies whether a new key should replace
|
|
an existing key for the protocol.
|
|
No action is taken if this object is set to 'false'.
|
|
The value of this object when read is always 'false'."
|
|
::= { dSshCryptoKeyPairEntry 3 }
|
|
|
|
dSshCryptoKeyPairLastCreateTime OBJECT-TYPE
|
|
SYNTAX TimeStamp
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The time of the last creation of the key."
|
|
::= { dSshCryptoKeyPairEntry 4 }
|
|
|
|
dSshCryptoKeyPairString OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE (0..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The generated SSH public key string."
|
|
::= { dSshCryptoKeyPairEntry 6 }
|
|
|
|
dSshCryptoKeyPairRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Status of this SSH key pair."
|
|
::= { dSshCryptoKeyPairEntry 99 }
|
|
|
|
dSshCryptoKeyGenerationStatus OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
inProgress(1),
|
|
successful(2),
|
|
failed(3)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates the status of the last key
|
|
generation request."
|
|
::= { dSshKeyConfiguration 2 }
|
|
|
|
-- -----------------------------------------------------------------------------
|
|
|
|
dSshConnectionTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF DSshConnectionEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table to display the status of Secure Shell (SSH) server connections."
|
|
::= { dSshObjects 3 }
|
|
|
|
dSshConnectionEntry OBJECT-TYPE
|
|
SYNTAX DSshConnectionEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) in the dSshConnectionTable object."
|
|
INDEX { dSshConnectionSID }
|
|
::= { dSshConnectionTable 1 }
|
|
|
|
DSshConnectionEntry ::=
|
|
SEQUENCE {
|
|
dSshConnectionSID Integer32,
|
|
dSshConnectionVersion INTEGER,
|
|
dSshConnectionCipher DisplayString,
|
|
dSshConnectionUserID DisplayString,
|
|
dSshConnectionHostAddrType InetAddressType,
|
|
dSshConnectionHostAddr InetAddress
|
|
}
|
|
|
|
dSshConnectionSID OBJECT-TYPE
|
|
SYNTAX Integer32 (0..65535)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A unique number that identifies the SSH session."
|
|
::= { dSshConnectionEntry 1 }
|
|
|
|
dSshConnectionVersion OBJECT-TYPE
|
|
SYNTAX INTEGER { v1(1), v2(2), v1v2(3) }
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The protocol version number that the SSH client supports."
|
|
::= { dSshConnectionEntry 2}
|
|
|
|
dSshConnectionCipher OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The crypto/Hashed Message Authentication Code (HMAC) algorithm that
|
|
the SSH client is using."
|
|
::= { dSshConnectionEntry 3}
|
|
|
|
dSshConnectionUserID OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The login username that has been authenticated for the session."
|
|
::= { dSshConnectionEntry 4 }
|
|
|
|
dSshConnectionHostAddrType OBJECT-TYPE
|
|
SYNTAX InetAddressType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of Internet address for client
|
|
establised this session."
|
|
::= { dSshConnectionEntry 5 }
|
|
|
|
|
|
dSshConnectionHostAddr OBJECT-TYPE
|
|
SYNTAX InetAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Internet address assigned for client
|
|
establised this session."
|
|
::= { dSshConnectionEntry 6 }
|
|
|
|
|
|
-- -----------------------------------------------------------------------------
|
|
dSshUserTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF DSshUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table lists all users and their corresponding authentication
|
|
methods through which SSH client can login."
|
|
::= { dSshObjects 4 }
|
|
|
|
dSshUserEntry OBJECT-TYPE
|
|
SYNTAX DSshUserEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) in the dSshUserTable."
|
|
INDEX { dSshUserName }
|
|
::= { dSshUserTable 1 }
|
|
|
|
DSshUserEntry ::=
|
|
SEQUENCE {
|
|
dSshUserName SnmpAdminString,
|
|
dSshUserAuthMethod INTEGER,
|
|
dSshUserKeyFilename SnmpAdminString,
|
|
dSshUserHostName DisplayString,
|
|
dSshUserHostAddrType InetAddressType,
|
|
dSshUserHostAddr InetAddress,
|
|
dSshUserRowStatus RowStatus
|
|
}
|
|
|
|
dSshUserName OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (1..32))
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates the name of SSH user."
|
|
::= { dSshUserEntry 1 }
|
|
|
|
dSshUserAuthMethod OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
password(1),
|
|
publickey(2),
|
|
hostbased(3)
|
|
}
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates the authentication method for this user account.
|
|
'password' - use password authentication method for this user account.
|
|
'publickey' - use public key authentication method for this user account.
|
|
'hostbased' - use host-based authentication method for this user account.
|
|
|
|
"
|
|
DEFVAL { password }
|
|
::= { dSshUserEntry 2 }
|
|
|
|
dSshUserKeyFilename OBJECT-TYPE
|
|
SYNTAX SnmpAdminString (SIZE (0..255))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object indicates the name of the file storing the SSH public key.
|
|
The SSH public key is used to authenticate the SSH
|
|
session for this user.
|
|
|
|
If dSshUserAuthMethod is 'publickey', this object refers to
|
|
user's public key.
|
|
|
|
If dSshUserAuthMethod is 'hostbased', this object refers to
|
|
client's host key.
|
|
|
|
If dSshUserAuthMethod is 'password', the value of this
|
|
object will be ignored and a zero-length string is
|
|
always returned when read."
|
|
::= { dSshUserEntry 3 }
|
|
|
|
|
|
dSshUserHostName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE (0..255))
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The host name of the SSH client.
|
|
This object is only valid for host-based authentication method.
|
|
|
|
For password and public key authentication method, a
|
|
zero-length string is always returned when read.
|
|
"
|
|
::= { dSshUserEntry 4 }
|
|
|
|
dSshUserHostAddrType OBJECT-TYPE
|
|
SYNTAX InetAddressType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The host address type of the SSH client.
|
|
This object is only valid for host-based authentication method.
|
|
|
|
For password and publickey authentication method, unknown(0)
|
|
is always returned when read.
|
|
"
|
|
::= { dSshUserEntry 5 }
|
|
|
|
dSshUserHostAddr OBJECT-TYPE
|
|
SYNTAX InetAddress
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The host address of the SSH client.
|
|
This object is only valid for host-based authentication method.
|
|
|
|
For password and public key authentication method, a
|
|
zero-length string is always returned when read.
|
|
"
|
|
::= { dSshUserEntry 6 }
|
|
|
|
dSshUserRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Status of this SSH user entry.
|
|
|
|
When read, active(1) is always returned.
|
|
|
|
If administrator wants to modify the authentication method for
|
|
a specific user account, setting createAndGo(4) for this node
|
|
after corresponding parameters are configured:
|
|
|
|
For password, there is no need to specify more parameters.
|
|
For publickey, dSshUserKeyFilename must be specified.
|
|
For hostbased, dSshUserKeyFilename and dSshUserHostName
|
|
must be specified, but parameters dSshUserHostAddrType and dSshUserHostAddr
|
|
are optional.
|
|
|
|
Other value of this node is not supported.
|
|
"
|
|
::= { dSshUserEntry 99 }
|
|
|
|
-- Conformance
|
|
|
|
|
|
dSshCompliances OBJECT IDENTIFIER ::= { dSshConformance 1 }
|
|
|
|
dSshGroups OBJECT IDENTIFIER ::= { dSshConformance 2 }
|
|
|
|
|
|
dSshCompliance MODULE-COMPLIANCE
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The compliance statement for entities which
|
|
implement the DLINKSW-SSH-MIB."
|
|
MODULE MANDATORY-GROUPS {
|
|
dSshConfigGroup
|
|
}
|
|
|
|
OBJECT dSshSrcIfIndex
|
|
MIN-ACCESS read-only
|
|
DESCRIPTION
|
|
"It is compliant to implement this object as read-only.
|
|
Support for configurable source interface is only
|
|
required on the platform which supports SSH client."
|
|
|
|
GROUP dSshUserGroup
|
|
DESCRIPTION
|
|
"This group is mandatory only for the platform which supports
|
|
configuring SSH authentication method for a user account."
|
|
::= { dSshCompliances 1 }
|
|
|
|
dSshConfigGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{ dSshEnabled,
|
|
dSshVersion,
|
|
dSshTimeout,
|
|
dSshAuthenticationRetries,
|
|
dSshServicePort,
|
|
dSshSrcIfIndex,
|
|
dSshCryptoKeyPairNBits,
|
|
dSshCryptoKeyPairReplace,
|
|
dSshCryptoKeyPairLastCreateTime,
|
|
dSshCryptoKeyPairRowStatus,
|
|
dSshCryptoKeyPairString,
|
|
dSshCryptoKeyGenerationStatus
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects for SSH configuration."
|
|
::= { dSshGroups 1 }
|
|
|
|
|
|
dSshConnectionGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{ dSshConnectionVersion,
|
|
dSshConnectionCipher,
|
|
dSshConnectionUserID,
|
|
dSshConnectionHostAddrType,
|
|
dSshConnectionHostAddr
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects to display SSH
|
|
connection related information."
|
|
::= { dSshGroups 2 }
|
|
|
|
dSshUserGroup OBJECT-GROUP
|
|
OBJECTS
|
|
{ dSshUserAuthMethod,
|
|
dSshUserKeyFilename,
|
|
dSshUserHostName,
|
|
dSshUserHostAddrType,
|
|
dSshUserHostAddr
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects related to SSH users."
|
|
::= { dSshGroups 3 }
|
|
|
|
END
|
|
|