Skip to main content
Question

Protection of sensible macro values

  • April 19, 2023
  • 4 replies
  • 163 views

Hi,

I have a service with the HOSTSNMPEXTRAOPTIONS protected.

In the service details I get this :

 


I suspect this is a bug. We should be able to see a part of the executed command.

The command (which is a command definition provided in a plugin pack) is defined as :  $CENTREONPLUGINS$/centreon_generic_snmp.pl --plugin=apps::protocols::snmp::plugin --mode=numeric-value --hostname=$HOSTADDRESS$ --snmp-community='$_HOSTSNMPCOMMUNITY$' --snmp-version=$_HOSTSNMPVERSION$ $_HOSTSNMPEXTRAOPTIONS$ --oid='$_SERVICEOID$' --format='$_SERVICEFORMAT$' --warning=$_SERVICEWARNING$ --critical=$_SERVICECRITICAL$ $_SERVICEEXTRAOPTIONS$

This is a problem which is present since a lot of time (at least from 18.04). It would be nice to see it fixed.

In addition, I think that having macros for the options needed for SNMPv3 would be a good idea. Put all the options in HOSTEXTRAOPTIONS or SERVICEEXTRAOPTIONS is not ideal. I’d like to be able to protect the SNMPv3 authpassphrase and privpassphrase without protecting the whole shit.

4 replies

ponchoh
Centreonian
Forum|alt.badge.img+14
  • Centreonian
  • April 19, 2023

@Stéphane some changes have been implemented

 

https://docs.centreon.com/docs/21.10/releases/centreon-core/#21106

 

  • [Core] Passwords are now obfuscated in the page's HTML source

 

Set them with a password box checked?`

 

  • The Password box enables the value of the macro to be hidden.

 

Which version are you using to see that error?

 


  • Author
  • April 20, 2023

As the “22.10” tag suggests, I’m using 22.10.7.

Yes, the “password box” is checked. Hence this is all the command which isn’t shown, as you can see in the image in my post.

 


ponchoh
Centreonian
Forum|alt.badge.img+14
  • Centreonian
  • April 20, 2023

Is the screenshot from the central or a remote?


  • Author
  • April 21, 2023

Central