Surya Pratap Singh authored 1 year ago and Markus Gothe committed 7 months ago

Fixed snmpwalk error if sysObjectID is not present or
system interface in snmpd config not present

Change-Id: I42dad87b6f1fde6efb4a096fbe9960f7b459b65c

Lwithwma Brahma authored 1 year ago and Markus Gothe committed 7 months ago

OID 1.3.6.1.2.1.1.2.0  points to iso.3.6.1.4.1.25167.5.3.1.1.1.0

Test Result:
snmpget -v 2c -c public 172.25.115.100 iso.3.6.1.2.1.1.2.0
iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.25167.5.3.1.1.1.0

Related task:
https://gerrit.genexislocal.nl:8443/c/feed_genexis_config/+/12380

Change-Id: Idb5e3649e0e29237623a9ed241a1f5f3e08d3e44

Mohd Husaam Mehdi authored 3 years ago and Markus Gothe committed 7 months ago

Adds logic to support setting ifAdminStatus to control port via SNMP.

Change-Id: I2ebb89526c72f415147511d267db294c34dc2bfb

Lwithwma Brahma authored 2 years ago and Markus Gothe committed 7 months ago

Following system object types are implemented:
	-sysDescr
	-sysName
	-sysLocation
	-sysContact

Change-Id: I45435071a0276df636b174a194ebda4fd65e4e87

Lwithwma Brahma authored 3 years ago and Markus Gothe committed 7 months ago

Add new api to set option value of uci file.

Change-Id: I9adb5f3dd7512f9874454fa88a69ec50a2124bbf

Mohd Husaam Mehdi authored 2 years ago and Markus Gothe committed 7 months ago

Changes productInfo objects OID from 3 to 1, so that translation is correct.

Change-Id: I24918dbe61afb984eb17258e807177805687fb86

Pragati Pandey authored 3 years ago and Markus Gothe committed 7 months ago

New snmp extensions have been created for product name, product serial no,
firmware version and mac addressi

Testing results:

snmpwalk -v 2c -c public 172.25.115.102 1.3.6.1.4.1.25167.5.3
iso.3.6.1.4.1.25167.5.3.1.1.1.0 = STRING: "FT-P3410B"
iso.3.6.1.4.1.25167.5.3.1.1.2.0 = STRING: "W.4320270023"
iso.3.6.1.4.1.25167.5.3.1.1.3.0 = STRING: "GenXOS-panther-GNXL2-genxos-11.4.0-N211205"
iso.3.6.1.4.1.25167.5.3.1.1.4.0 = STRING: "34:e3:80:cb:84:90"
iso.3.6.1.4.1.25167.5.3.1.2.1.0 = INTEGER: 1
iso.3.6.1.4.1.25167.5.3.1.2.4.0 = INTEGER: 1
root@D_wan_115_1:~# snmpget -v 2c -c public 172.25.115.102 iso.3.6.1.4.1.25167.5.3.1.1.1.0
iso.3.6.1.4.1.25167.5.3.1.1.1.0 = STRING: "FT-P3410B"
root@D_wan_115_1:~# snmpget -v 2c -c public 172.25.115.102 iso.3.6.1.4.1.25167.5.3.1.1.2.0
iso.3.6.1.4.1.25167.5.3.1.1.2.0 = STRING: "W.4320270023"
root@D_wan_115_1:~# snmpget -v 2c -c public 172.25.115.102 iso.3.6.1.4.1.25167.5.3.1.1.3.0
iso.3.6.1.4.1.25167.5.3.1.1.3.0 = STRING: "GenXOS-panther-GNXL2-genxos-11.4.0-N211205"
root@D_wan_115_1:~# snmpget -v 2c -c public 172.25.115.102 iso.3.6.1.4.1.25167.5.3.1.1.4.0
iso.3.6.1.4.1.25167.5.3.1.1.4.0 = STRING: "34:e3:80:cb:84:90"

Change-Id: Ic7de2b5389929e2e1e539bb6bd615a4e4a7daf5c

Mohd Husaam Mehdi authored 2 years ago and Markus Gothe committed 7 months ago

Changes productInfo objects OID from 3 to 1, so that translation is correct.

Change-Id: I24918dbe61afb984eb17258e807177805687fb86

Pragati Pandey authored 3 years ago and Markus Gothe committed 7 months ago

New snmp extensions have been created for product name, product serial no,
firmware version and mac addressi

Testing results:

snmpwalk -v 2c -c public 172.25.115.102 1.3.6.1.4.1.25167.5.3
iso.3.6.1.4.1.25167.5.3.1.1.1.0 = STRING: "FT-P3410B"
iso.3.6.1.4.1.25167.5.3.1.1.2.0 = STRING: "W.4320270023"
iso.3.6.1.4.1.25167.5.3.1.1.3.0 = STRING: "GenXOS-panther-GNXL2-genxos-11.4.0-N211205"
iso.3.6.1.4.1.25167.5.3.1.1.4.0 = STRING: "34:e3:80:cb:84:90"
iso.3.6.1.4.1.25167.5.3.1.2.1.0 = INTEGER: 1
iso.3.6.1.4.1.25167.5.3.1.2.4.0 = INTEGER: 1
root@D_wan_115_1:~# snmpget -v 2c -c public 172.25.115.102 iso.3.6.1.4.1.25167.5.3.1.1.1.0
iso.3.6.1.4.1.25167.5.3.1.1.1.0 = STRING: "FT-P3410B"
root@D_wan_115_1:~# snmpget -v 2c -c public 172.25.115.102 iso.3.6.1.4.1.25167.5.3.1.1.2.0
iso.3.6.1.4.1.25167.5.3.1.1.2.0 = STRING: "W.4320270023"
root@D_wan_115_1:~# snmpget -v 2c -c public 172.25.115.102 iso.3.6.1.4.1.25167.5.3.1.1.3.0
iso.3.6.1.4.1.25167.5.3.1.1.3.0 = STRING: "GenXOS-panther-GNXL2-genxos-11.4.0-N211205"
root@D_wan_115_1:~# snmpget -v 2c -c public 172.25.115.102 iso.3.6.1.4.1.25167.5.3.1.1.4.0
iso.3.6.1.4.1.25167.5.3.1.1.4.0 = STRING: "34:e3:80:cb:84:90"

Change-Id: Ic7de2b5389929e2e1e539bb6bd615a4e4a7daf5c

Lwithwma Brahma authored 3 years ago and Markus Gothe committed 7 months ago

Added SNMP Extention of CATV module

Test:
>1. For catv102, when at catv uci, catv=1 and agc=1

root@D_wan_136_1:~# snmpwalk -v 2c -c public 192.168.1.1 1.3.6.1.4.1.25167.5.6.1
iso.3.6.1.4.1.25167.5.6.1.1.3.0 = INTEGER: 1
iso.3.6.1.4.1.25167.5.6.1.1.4.0 = INTEGER: 1
iso.3.6.1.4.1.25167.5.6.1.1.11.0 = INTEGER: 1
iso.3.6.1.4.1.25167.5.6.1.1.12.0 = INTEGER: 3
iso.3.6.1.4.1.25167.5.6.1.2.1.0 = INTEGER: 0
iso.3.6.1.4.1.25167.5.6.1.2.2.0 = INTEGER: 0

>2. For catv103, when at catv uci, catv=1 and agc=1

root@D_wan_136_1:~# snmpwalk -v 2c -c public 192.168.1.1 1.3.6.1.4.1.25167.5.6.1
iso.3.6.1.4.1.25167.5.6.1.1.3.0 = INTEGER: 1
iso.3.6.1.4.1.25167.5.6.1.1.4.0 = INTEGER: 1
iso.3.6.1.4.1.25167.5.6.1.1.11.0 = INTEGER: 1
iso.3.6.1.4.1.25167.5.6.1.1.12.0 = INTEGER: 1
iso.3.6.1.4.1.25167.5.6.1.2.1.0 = INTEGER: -124
iso.3.6.1.4.1.25167.5.6.1.2.2.0 = INTEGER: 730

>3. With invalid catv module name, when at catv uci, catv=0 and agc=1

root@D_wan_136_1:~# snmpwalk -v 2c -c public 192.168.1.1 1.3.6.1.4.1.25167.5.6.1
iso.3.6.1.4.1.25167.5.6.1.1.3.0 = INTEGER: 2
iso.3.6.1.4.1.25167.5.6.1.1.4.0 = INTEGER: 3
iso.3.6.1.4.1.25167.5.6.1.1.11.0 = INTEGER: 1
iso.3.6.1.4.1.25167.5.6.1.1.12.0 = INTEGER: 3
iso.3.6.1.4.1.25167.5.6.1.2.1.0 = INTEGER: 0
iso.3.6.1.4.1.25167.5.6.1.2.2.0 = INTEGER: 0

>4. snmpget and snmpset was also tested.

Change-Id: I6f79d2eb69639a51bce4e6d15dc0d554318e3fec

Lwithwma Brahma authored 2 years ago and Markus Gothe committed 7 months ago

Included the "agent" and "agent/extend" SNMP Mib modules to recognize
variable exec and extend respectively.

For system variables, since our implementation in "system_mib.c" doesn't read/write
variable from snmpd.conf and directly deals with only ubus call, the
copying of system section from snmpd uci to snmpd.conf is removed to
avoid the warning.

Change-Id: I2aee4817170c524ad7ba52a2d01c7b11f541f0b7

Mohd Husaam Mehdi authored 1 year ago and Markus Gothe committed 7 months ago

* Use db instead to determine if a port is EXT port.
* Move the logic to init function to reduce repeated calling.

Change-Id: Ie96eea7f3882d16c2b4df5a53edbe15e4f4a0b68

Surya Pratap Singh authored 1 year ago and Markus Gothe committed 7 months ago

Added support for ifHighSpeed and made changes in ifSpeeed
in case of overflow to set the max value of ifSpeed

Change-Id: I4cc5a4192823f48c410cb052b7c9bb5869444579

Lwithwma Brahma authored 2 years ago and Markus Gothe committed 7 months ago

Added following 64 bit counters:
        ifHCInOctets(6)
        ifHCInUcastPkts(7)
        ifHCInMulticastPkts(8)
        ifHCOutOctets(10)
        ifHCOutUcastPkts(11)
        ifHCOutMulticastPkts(12)

Related patch:
https://gerrit.genexislocal.nl:8443/c/feed_inteno_packages/+/9988

Change-Id: I8bd5390e5cd63a1b65a9b09eee471394b58b072c

George Yang authored 2 years ago and Markus Gothe committed 7 months ago

Change-Id: I7e1a7e3f80df98a5e6869ae8456dcf72d5a163e3

Lwithwma Brahma authored 2 years ago and Markus Gothe committed 7 months ago

Fix the issue of periodic snmp polling timeout.

Change-Id: I277866c6cb2cb9ec78f5aa837c1f34c39d2661f7

Mohd Husaam Mehdi authored 3 years ago and Markus Gothe committed 7 months ago

Merge commit : cd2778a4c9cb30210d1823ff90d2f50fbc8f3b28
to GNX-11.

Cherry-picked and tested on GNX-11.

Change-Id: I9693b06a2942c9920efcb8a52ef56d2a5846eb60

Mohd Husaam Mehdi authored 3 years ago and Markus Gothe committed 7 months ago

Merge from genexis-10 to genexis-11.
Added support for rx and tx multicast packet counters.
Extended ifXTable of IF-MIB for the same.

Change-Id: Ia5a790fc046d14f45f6a0b3a88073ff951d3325f

Rohit Topno authored 3 years ago and Markus Gothe committed 7 months ago

Fix: Admin status of all ports are now up by default and
the admin status is fetched correctly for all ports.

Test - Admin status of all ports are up by default.
root@D_wan_115_1:~# snmpwalk -v 2c -c public 172.25.115.100 .1.3.6.1.2.1.2.2.1.7
iso.3.6.1.2.1.2.2.1.7.1 = INTEGER: 1
iso.3.6.1.2.1.2.2.1.7.2 = INTEGER: 1
iso.3.6.1.2.1.2.2.1.7.3 = INTEGER: 1
iso.3.6.1.2.1.2.2.1.7.4 = INTEGER: 1
iso.3.6.1.2.1.2.2.1.7.5 = INTEGER: 1

After changing the status of eth1 to down, the admin status is as below
root@D_wan_115_1:~# snmpget -v 2c -c public 172.25.115.100 .1.3.6.1.2.1.2.2.1.7.2
iso.3.6.1.2.1.2.2.1.7.2 = INTEGER: 2

Similar testing is conducted on all ports.

(cherry picked from commit 95e8257bf4adf6bd96a666426c4b47083aa78e17)
Change-Id: I1145c8f513463f41179674bd7ac693d32fd0e99c

Rohit Topno authored 4 years ago and Markus Gothe committed 7 months ago

SNMP features have been cherry-picked from genexis-10 branch to genexis-11 branch

Fix : Makefile is modified to fix compilation error

(cherry picked from commit 62d19691f951f0ea4b7a0f39507952cb9300adbe)
(cherry picked from commit f505502c30b0e31b39c335835ba7bc2c5fa0715e)
(cherry picked from commit 991d0e3bbac3e74cc24a610e902f5fef8728ac05)
(cherry picked from commit 4146a86dc998d458e391883b6dae5252f7d55008)
(cherry picked from commit ecffcfa7beddcc63c0e45a0a5c5b2bf9e10bd12f)
(cherry picked from commit faaeb94f619ee5b981b0df80dca55b0154b84d49)
(cherry picked from commit 097add11715ba9a3276801083aa93ba81218c195)
(cherry picked from commit 3734410f22f40facbdf37ac007004cfae529e295)
(cherry picked from commit 54206a33df28bc1101a8aebfb9b4cbbff873b571)
(cherry picked from commit 32eb6af13736fb18a4afd1d0d37d59ed2668c176)
(cherry picked from commit 8e6a0911a46250d9fc77d0bd077c8aad30fd964a)
(cherry picked from commit 63fbe5e05288c3eb953212384d99f9b20fb3f15c)
(cherry picked from commit ab35e69d6e08d6c262b880129fb5a6013e0871cd)
Change-Id: I45e8be160a53ba6c97bdea6c426ca4b02d6d5849

Mohd Husaam Mehdi authored 1 year ago and Markus Gothe committed 7 months ago

Fallback to Radius authentication if local user is not present,
but in that case, the user will be logged in as root.

Change-Id: I0d9030f04bc0acfdf24d0403127c97935a5c7607

Mohd Husaam Mehdi authored 2 years ago and Markus Gothe committed 7 months ago

* Modifies openssh defaults to allow ssh for root.
* Adds commented pam_radius_auth.so to sshd.pam so that user does not have to manually copy it.

Change-Id: Ib5d78d2defb201f048cf04aee13adbb1e5c55c8e

Add logic for https-dns-proxy to not modify
dhcp-configuration unless DNS-over-HTTPS has
been configured.

Change-Id: I3578a917b4f748f31d8b6035f39f8c077c6e3986

George Yang authored 2 years ago and Markus Gothe committed 7 months ago

The patch addressed following 2 ddns-scripts issues:

 * procd_lock is not released by dynamic_dns_updater.sh daemons
   which caused later /etc/init.d/ddns always locked out.

   It caused hang of "ubus call luci.ddns get_ddns_state",
   and further hang of webgui Dynamic DNS.

 * /etc/init.d/ddns reload did not function

   Under current /bin/sh, "killall -1 dynamic_dns_updater.sh"
   does not send signal to the dynamic_dns_updater.sh daemon.

Change-Id: I9fa1d773dd8e4c4971f3c4cf053b13dbc99048c9

Erik Karlsson authored 4 years ago and Markus Gothe committed 7 months ago

There is a hack for building subdirectories before the parent
directory. There is a bug in this which causes the EXPORTS and
PRIVATE_EXPORTS targets to be built twice leading to a race condition.

Change-Id: I94230722671aa6c0c10afdfe376bbb3fa86d109f

Erik Karlsson authored 9 months ago and Vivek Dutta committed 9 months ago

Otherwise it is possible to write to the socket pair when there is no
consumer resulting in the buffer growing indefinitely. This issue
manifests itself when an external event loop is used together with
mosquitto_loop_read/mosquitto_loop_write/mosquitto_loop_misc instead
of using mosquitto_loop, mosquitto_loop_forever or threaded mode with
mosquitto_loop_start/mosquitto_loop_stop


(cherry picked from commit 3f96b060)

* add rsa-sha2-512 and rsa-sha2-256 to default list of HostKeyAlgorithms

this option is needed to announce http servers via mdns as DNS-SD
services

* since there are multiple ways in which port can be set in the
  server section, and the order can also be changed, the logic has
  been updated to handle these conditions while announcing the
  port number on which server is running
* nginx does not allow adding options to server section, so option
  mdns which controls whether services have to announced over
  mdns, has been moved to the global section
* add support for announcing service if non-standard ports are
  used

Add support and set defaults for following in default sshd config:

* Ciphers:		aes256-ctr, aes192-ctr, aes128-ctr

* HostKeyAlgorithms:	ssh-dss, ssh-rsa, ecdsa-sha2-nistp521,
			ecdsa-sha2-nistp384,ecdsa-sha2-nistp256

* HostKeyFiles:		default is empty

* KexAlgorithms:	diffie-hellman-group-exchange-sha256,
			diffie-hellman-group14-sha1,
			ecdh-sha2-nistp521,ecdh-sha2-nistp384,
			ecdh-sha2-nistp256

* add uci-default script that will generate an sshd config from
  dropbear config, if present (to preserve settings from previous
  image which had dropbear), or with default values if sshd config
  is also not present

* the script will also check for dropbear key file and if found,
  place them where sshd expects them

the values read from uci will now be written to a config file
which will be passed to sshd, instead of passing the values
as command line arguments to sshd

nginx-ubus-module version was not updated since past 4 years.
It had many security and memory related fixes along with optimizations

This reverts commit 8b2c130b.

While 743f0c5b (perl: Run make depend to fix build race condition,
2024-03-05) fixed 98% of all parallel build failures there is still some
flakiness left in the perl build process. For now, give up instead of
digging deep into the perl build process to debug this.

We may later revert this commit to see whether the issue is fixed in a
later perl version in a later OpenWrt release.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>