Squashed commit of the following:
commit 4081e22202693bd7c4ea00e95daad8e628c6fd5a
Author: Oliver Gorwits <oliver@cpan.org>
Date: Mon May 29 21:02:07 2023 +0100
large rename of check_acl* to acl_matches*
commit 3cfa284ddd24d68765c255578cc5c184afbdcd83
Author: Oliver Gorwits <oliver@cpan.org>
Date: Fri May 19 20:39:03 2023 +0100
update permission doc
commit 8c7bb93cc5e9fafb770f98f446e45cbd94b14894
Author: Oliver Gorwits <oliver@cpan.org>
Date: Wed May 17 21:50:07 2023 +0100
migrate most check_acl_only to acl_matches_only
commit c47f699f2a22f08f2f3e093ed0f24c891e6f9a82
Author: Oliver Gorwits <oliver@cpan.org>
Date: Wed May 17 21:39:19 2023 +0100
rename check_acl* to be acl_matches*
commit a884a22c3ab1f3262118c3a47ed8e25b0b0a7336
Author: Oliver Gorwits <oliver@cpan.org>
Date: Sun May 14 16:50:42 2023 +0100
update macsuck_no_deviceports to use acl_matches
commit 8c256af728721329b64d071fa529dfc844073ac6
Author: Oliver Gorwits <oliver@cpan.org>
Date: Sun May 7 22:54:33 2023 +0100
update hide_deviceports to use acl_matches multi @things
commit cd5d9978aba1da459be4fed4500f395df13f7784
Author: Oliver Gorwits <oliver@cpan.org>
Date: Sun May 7 22:53:38 2023 +0100
check_acl fix to allow all @things to offer a property before fallback to missing as empty string
commit 1a3ab9a7646e9f994f03126d45fc36e9e5a13ed5
Author: Oliver Gorwits <oliver@cpan.org>
Date: Tue May 2 15:31:17 2023 +0100
add ignore_deviceports to portproperties discover; improve comments
commit 51385ce89458dc939587dae902fda431719c22c9
Merge: b97c07d2 3f8ffe78
Author: Oliver Gorwits <oliver@cpan.org>
Date: Tue May 2 15:21:48 2023 +0100
Merge branch 'master' into og-acl_multidict
commit b97c07d237d750c1d9eb3095d8ff3908512eac2a
Author: Oliver Gorwits <oliver@cpan.org>
Date: Sat Mar 25 14:37:53 2023 +0000
add support for arrayref of items, and unblessed hash, to check_acl
193 lines
6.6 KiB
Perl
193 lines
6.6 KiB
Perl
package App::Netdisco::Worker::Plugin::Discover::PortProperties;
|
||
|
||
use Dancer ':syntax';
|
||
use App::Netdisco::Worker::Plugin;
|
||
use aliased 'App::Netdisco::Worker::Status';
|
||
|
||
use App::Netdisco::Transport::SNMP ();
|
||
use Dancer::Plugin::DBIC 'schema';
|
||
|
||
use Encode;
|
||
use App::Netdisco::Util::Web 'sort_port';
|
||
use App::Netdisco::Util::Permission 'acl_matches';
|
||
use App::Netdisco::Util::FastResolver 'hostnames_resolve_async';
|
||
use App::Netdisco::Util::Device qw/is_discoverable match_to_setting/;
|
||
|
||
register_worker({ phase => 'main', driver => 'snmp' }, sub {
|
||
my ($job, $workerconf) = @_;
|
||
|
||
my $device = $job->device;
|
||
return unless $device->in_storage;
|
||
my $snmp = App::Netdisco::Transport::SNMP->reader_for($device)
|
||
or return Status->defer("discover failed: could not SNMP connect to $device");
|
||
|
||
my $interfaces = $snmp->interfaces || {};
|
||
my %properties = ();
|
||
|
||
# cache the device ports to save hitting the database for many single rows
|
||
my $device_ports = vars->{'device_ports'}
|
||
|| { map {($_->port => $_)} $device->ports->all };
|
||
|
||
my @remote_ips = map {{ip => $_->remote_ip, port => $_->port}}
|
||
grep {$_->remote_ip}
|
||
values %$device_ports;
|
||
|
||
debug sprintf ' [%s] resolving %d remote_ips with max %d outstanding requests',
|
||
$device->ip, scalar @remote_ips, $ENV{'PERL_ANYEVENT_MAX_OUTSTANDING_DNS'};
|
||
|
||
my $resolved_remote_ips = hostnames_resolve_async(\@remote_ips);
|
||
$properties{ $_->{port} }->{remote_dns} = $_->{dns} for @$resolved_remote_ips;
|
||
|
||
my $raw_speed = $snmp->i_speed_raw || {};
|
||
|
||
foreach my $idx (keys %$raw_speed) {
|
||
my $port = $interfaces->{$idx} or next;
|
||
if (!defined $device_ports->{$port}) {
|
||
debug sprintf ' [%s] properties/speed - local port %s already skipped, ignoring',
|
||
$device->ip, $port;
|
||
next;
|
||
}
|
||
|
||
$properties{ $port }->{raw_speed} = $raw_speed->{$idx};
|
||
}
|
||
|
||
my $err_cause = $snmp->i_err_disable_cause || {};
|
||
|
||
foreach my $idx (keys %$err_cause) {
|
||
my $port = $interfaces->{$idx} or next;
|
||
if (!defined $device_ports->{$port}) {
|
||
debug sprintf ' [%s] properties/errdis - local port %s already skipped, ignoring',
|
||
$device->ip, $port;
|
||
next;
|
||
}
|
||
|
||
$properties{ $port }->{error_disable_cause} = $err_cause->{$idx};
|
||
}
|
||
|
||
my $faststart = $snmp->i_faststart_enabled || {};
|
||
|
||
foreach my $idx (keys %$faststart) {
|
||
my $port = $interfaces->{$idx} or next;
|
||
if (!defined $device_ports->{$port}) {
|
||
debug sprintf ' [%s] properties/faststart - local port %s already skipped, ignoring',
|
||
$device->ip, $port;
|
||
next;
|
||
}
|
||
|
||
$properties{ $port }->{faststart} = $faststart->{$idx};
|
||
}
|
||
|
||
my $c_if = $snmp->c_if || {};
|
||
my $c_cap = $snmp->c_cap || {};
|
||
my $c_platform = $snmp->c_platform || {};
|
||
|
||
my $rem_media_cap = $snmp->lldp_media_cap || {};
|
||
my $rem_vendor = $snmp->lldp_rem_vendor || {};
|
||
my $rem_model = $snmp->lldp_rem_model || {};
|
||
my $rem_os_ver = $snmp->lldp_rem_sw_rev || {};
|
||
my $rem_serial = $snmp->lldp_rem_serial || {};
|
||
|
||
foreach my $idx (keys %$c_if) {
|
||
my $port = $interfaces->{ $c_if->{$idx} } or next;
|
||
if (!defined $device_ports->{$port}) {
|
||
debug sprintf ' [%s] properties/lldpcap - local port %s already skipped, ignoring',
|
||
$device->ip, $port;
|
||
next;
|
||
}
|
||
|
||
my $remote_cap = $c_cap->{$idx} || [];
|
||
my $remote_type = Encode::decode('UTF-8', $c_platform->{$idx} || '');
|
||
|
||
$properties{ $port }->{remote_is_wap} = 'false';
|
||
$properties{ $port }->{remote_is_phone} = 'false';
|
||
$properties{ $port }->{remote_is_discoverable} = 'true';
|
||
|
||
if (scalar grep {match_to_setting($_, 'wap_capabilities')} @$remote_cap
|
||
or match_to_setting($remote_type, 'wap_platforms')) {
|
||
|
||
$properties{ $port }->{remote_is_wap} = 'true';
|
||
debug sprintf ' [%s] properties/lldpcap - remote on port %s is a WAP',
|
||
$device->ip, $port;
|
||
}
|
||
|
||
if (scalar grep {match_to_setting($_, 'phone_capabilities')} @$remote_cap
|
||
or match_to_setting($remote_type, 'phone_platforms')) {
|
||
|
||
$properties{ $port }->{remote_is_phone} = 'true';
|
||
debug sprintf ' [%s] properties/lldpcap - remote on port %s is a Phone',
|
||
$device->ip, $port;
|
||
}
|
||
|
||
if (! is_discoverable($device_ports->{$port}->remote_ip, $remote_type, $remote_cap)) {
|
||
|
||
$properties{ $port }->{remote_is_discoverable} = 'false';
|
||
debug sprintf ' [%s] properties/lldpcap - remote on port %s is denied discovery',
|
||
$device->ip, $port;
|
||
}
|
||
|
||
next unless scalar grep {defined && m/^inventory$/} @{ $rem_media_cap->{$idx} };
|
||
|
||
$properties{ $port }->{remote_vendor} = $rem_vendor->{ $idx };
|
||
$properties{ $port }->{remote_model} = $rem_model->{ $idx };
|
||
$properties{ $port }->{remote_os_ver} = $rem_os_ver->{ $idx };
|
||
$properties{ $port }->{remote_serial} = $rem_serial->{ $idx };
|
||
}
|
||
|
||
if (scalar @{ setting('ignore_deviceports') }) {
|
||
foreach my $map (@{ setting('ignore_deviceports')}) {
|
||
next unless ref {} eq ref $map;
|
||
|
||
foreach my $key (sort keys %$map) {
|
||
# lhs matches device, rhs matches port
|
||
next unless $key and $map->{$key};
|
||
next unless acl_matches($device, $key);
|
||
|
||
foreach my $port (sort { sort_port($a, $b) } keys %properties) {
|
||
next unless acl_matches([$properties{$port}, $device_ports->{$port}],
|
||
$map->{$key});
|
||
|
||
debug sprintf ' [%s] properties - removing %s (config:ignore_deviceports)',
|
||
$device->ip, $port;
|
||
$device_ports->{$port}->delete; # like, for real, in the DB
|
||
delete $properties{$port};
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
foreach my $idx (keys %$interfaces) {
|
||
next unless defined $idx;
|
||
my $port = $interfaces->{$idx} or next;
|
||
|
||
if (!defined $device_ports->{$port}) {
|
||
debug sprintf ' [%s] properties/ifindex - local port %s already skipped, ignoring',
|
||
$device->ip, $port;
|
||
next;
|
||
}
|
||
|
||
if ($idx !~ m/^[0-9]+$/) {
|
||
debug sprintf ' [%s] properties/ifindex - port %s ifindex %s is not an integer',
|
||
$device->ip, $port, $idx;
|
||
next;
|
||
}
|
||
|
||
$properties{ $port }->{ifindex} = $idx;
|
||
}
|
||
|
||
return Status->info(" [$device] no port properties to record")
|
||
unless scalar keys %properties;
|
||
|
||
schema('netdisco')->txn_do(sub {
|
||
my $gone = $device->properties_ports->delete;
|
||
debug sprintf ' [%s] properties - removed %d port properties',
|
||
$device->ip, $gone;
|
||
$device->properties_ports->populate(
|
||
[map {{ port => $_, %{ $properties{$_} } }} keys %properties] );
|
||
|
||
return Status->info(sprintf ' [%s] properties - added %d new port properties',
|
||
$device->ip, scalar keys %properties);
|
||
});
|
||
});
|
||
|
||
true;
|