Question

Protection of sensible macro values

  • 19 April 2023
  • 4 replies
  • 81 views

Hi,

I have a service with the HOSTSNMPEXTRAOPTIONS protected.

In the service details I get this :

 


I suspect this is a bug. We should be able to see a part of the executed command.

The command (which is a command definition provided in a plugin pack) is defined as :  $CENTREONPLUGINS$/centreon_generic_snmp.pl --plugin=apps::protocols::snmp::plugin --mode=numeric-value --hostname=$HOSTADDRESS$ --snmp-community='$_HOSTSNMPCOMMUNITY$' --snmp-version=$_HOSTSNMPVERSION$ $_HOSTSNMPEXTRAOPTIONS$ --oid='$_SERVICEOID$' --format='$_SERVICEFORMAT$' --warning=$_SERVICEWARNING$ --critical=$_SERVICECRITICAL$ $_SERVICEEXTRAOPTIONS$

This is a problem which is present since a lot of time (at least from 18.04). It would be nice to see it fixed.

In addition, I think that having macros for the options needed for SNMPv3 would be a good idea. Put all the options in HOSTEXTRAOPTIONS or SERVICEEXTRAOPTIONS is not ideal. I’d like to be able to protect the SNMPv3 authpassphrase and privpassphrase without protecting the whole shit.


4 replies

Userlevel 4
Badge +13

@Stéphane some changes have been implemented

 

https://docs.centreon.com/docs/21.10/releases/centreon-core/#21106

 

  • [Core] Passwords are now obfuscated in the page's HTML source

 

Set them with a password box checked?`

 

  • The Password box enables the value of the macro to be hidden.

 

Which version are you using to see that error?

 

As the “22.10” tag suggests, I’m using 22.10.7.

Yes, the “password box” is checked. Hence this is all the command which isn’t shown, as you can see in the image in my post.

 

Userlevel 4
Badge +13

Is the screenshot from the central or a remote?

Central

Reply