default access list for device_auth should be ipv4 and ipv6

2020-02-12 16:55:16 +00:00
parent c5140e2061
commit ab6305b4cf
3 changed files with 9 additions and 2 deletions
--- a/6
+++ b/6
@@ -1,3 +1,9 @@
+2.044015 - 2020-02-12
+
+  [BUG FIXES]
+
+  * default access list for device_auth should be ipv4 and ipv6
+
 2.044014 - 2020-02-09

  [BUG FIXES]
--- a/lib/App/Netdisco/Util/DeviceAuth.pm
+++ b/lib/App/Netdisco/Util/DeviceAuth.pm
@@ -63,7 +63,7 @@ sub fixup_device_auth {
    $stanza->{tag} ||= $tag;
    $stanza->{read} = 1 if !exists $stanza->{read};
    $stanza->{no}   ||= [];
-    $stanza->{only} ||= ['any'];
+    $stanza->{only} ||= ['group:__ANY__'];

    die "error: config: snmpv2 community in device_auth must be single item, not list\n"
      if ref $stanza->{community};
--- a/share/config.yml
+++ b/share/config.yml
@@ -209,7 +209,8 @@ defanged_admin: 'admin'
 # mibdirs defaults to contents of mibhome
 host_groups:
  __ANY__:
-    - 'any'
+    - '0.0.0.0/0'
+    - '::/0'
  __LOCAL_ADDRESSES__:
    - '::1'
    - 'fe80::/10'