)]}'
{"doc/source/developer-notes/V-38660.rst":[{"author":{"_account_id":7307,"name":"Matt Thompson","email":"mattt@defunct.ca","username":"mattt416"},"change_message_id":"7745b220304781acc4d4e5fbbc9a6f9703c9a45c","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Although neither Ubuntu 14.04 or openstack-ansible install or configure the"},{"line_number":2,"context_line":"SNMP daemon by default, the Ansible tasks will check to see if the samba"},{"line_number":3,"context_line":"configuration file is present. If the file is present, and the file contains"},{"line_number":4,"context_line":"configurations for insecure SNMP protocols (v1 or v2c), an error will be"},{"line_number":5,"context_line":"printed and the playbook will fail."}],"source_content_type":"text/x-rst","patch_set":3,"id":"5a2ca52d_2e6e8401","line":2,"updated":"2015-10-15 13:45:34.000000000","message":"samba?","commit_id":"9e260abbb1235f1540789cb5a556669c30ce52df"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"c83a67f30d41271505cfa279d435b84ed4b6954e","unresolved":false,"context_lines":[{"line_number":9,"context_line":"* ``v1``"},{"line_number":10,"context_line":"* ``v2c``"},{"line_number":11,"context_line":"* ``com2sec``"},{"line_number":12,"context_line":"* ``rocommunity``"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"`Red Hat\u0027s guide to SNMP`_ has some example configurations that deployers"},{"line_number":15,"context_line":"can use to enable SNMPv3."}],"source_content_type":"text/x-rst","patch_set":8,"id":"3a29b11f_0ce2c09f","line":12,"updated":"2015-10-20 15:46:08.000000000","message":"Based on the latest change, this needs to be updated","commit_id":"4c46f8fd4c0e58c8c5f1c8fdf24330bd9e9f1fc0"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"2ac719b0e91bed43a574c410d18e0558be908464","unresolved":false,"context_lines":[{"line_number":9,"context_line":"* ``v1``"},{"line_number":10,"context_line":"* ``v2c``"},{"line_number":11,"context_line":"* ``com2sec``"},{"line_number":12,"context_line":"* ``rocommunity``"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"`Red Hat\u0027s guide to SNMP`_ has some example configurations that deployers"},{"line_number":15,"context_line":"can use to enable SNMPv3."}],"source_content_type":"text/x-rst","patch_set":8,"id":"3a29b11f_e7475649","line":12,"in_reply_to":"3a29b11f_0ce2c09f","updated":"2015-10-20 18:00:23.000000000","message":"Done","commit_id":"4c46f8fd4c0e58c8c5f1c8fdf24330bd9e9f1fc0"}],"tasks/misc.yml":[{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"9466861da4244ea95fb929cf8e833c59cb27189d","unresolved":false,"context_lines":[{"line_number":121,"context_line":"# We shouldn\u0027t get any output from this grep since it looks for configuration"},{"line_number":122,"context_line":"# lines for the SNMP v1 and v2c protocols."},{"line_number":123,"context_line":"- name: Check for insecure SNMP protocols (for V-38660)"},{"line_number":124,"context_line":"  shell: \"grep \u0027v1\\\\|v2c\\\\|com2sec\u0027 /etc/snmp/snmpd.conf | grep -v \u0027^#\u0027\""},{"line_number":125,"context_line":"  register: v38660_result"},{"line_number":126,"context_line":"  changed_when: v38660_result.rc \u003d\u003d 0"},{"line_number":127,"context_line":"  when: v38660_snmpd_conf.stat.exists \u003d\u003d True"}],"source_content_type":"text/x-yaml","patch_set":6,"id":"5a2ca52d_07ec82f1","line":124,"updated":"2015-10-16 21:09:40.000000000","message":"- So this assumes Net-SNMP is being used, correct?  What about other SNMP servers?\n\n- What about \"rocommunity public  localhost\" - this tells snmpd to run with a community name (v1 or v2c) which is insecure.\n\n- Technically isn\u0027t also possible to run SNMPv3 with no authentication and no encryption.","commit_id":"801b07fe3803c362c7de27a9d912e0cbf5a251f0"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"e30922e62cef8a56297837a010d23d4817054cce","unresolved":false,"context_lines":[{"line_number":121,"context_line":"# We shouldn\u0027t get any output from this grep since it looks for configuration"},{"line_number":122,"context_line":"# lines for the SNMP v1 and v2c protocols."},{"line_number":123,"context_line":"- name: Check for insecure SNMP protocols (for V-38660)"},{"line_number":124,"context_line":"  shell: \"grep \u0027v1\\\\|v2c\\\\|com2sec\\\\|rocommunity\u0027 /etc/snmp/snmpd.conf | grep -v \u0027^#\u0027\""},{"line_number":125,"context_line":"  register: v38660_result"},{"line_number":126,"context_line":"  changed_when: v38660_result.rc \u003d\u003d 0"},{"line_number":127,"context_line":"  when: v38660_snmpd_conf.stat.exists \u003d\u003d True"}],"source_content_type":"text/x-yaml","patch_set":7,"id":"3a29b11f_d121e6b5","line":124,"updated":"2015-10-19 22:43:11.000000000","message":"Probably is better to scan for just community.  Because you can also have rwcommunity, rwcommunity6, rocommunity6, or authcommunity.  \u0027community\u0027 is short for community name which is only a v1 and v2c concept.\n\nhttp://net-snmp.sourceforge.net/docs/man/snmpd.conf.html\n\nThis would be so much easier if Net-SNMP just had a config option for the versions supported.","commit_id":"203cae31d49a4e1f10cdcc461fa5c227ae9127f9"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"e7bdd72b643d124859362ddde69aefa6871f23d9","unresolved":false,"context_lines":[{"line_number":121,"context_line":"# We shouldn\u0027t get any output from this grep since it looks for configuration"},{"line_number":122,"context_line":"# lines for the SNMP v1 and v2c protocols."},{"line_number":123,"context_line":"- name: Check for insecure SNMP protocols (for V-38660)"},{"line_number":124,"context_line":"  shell: \"grep \u0027v1\\\\|v2c\\\\|com2sec\\\\|rocommunity\u0027 /etc/snmp/snmpd.conf | grep -v \u0027^#\u0027\""},{"line_number":125,"context_line":"  register: v38660_result"},{"line_number":126,"context_line":"  changed_when: v38660_result.rc \u003d\u003d 0"},{"line_number":127,"context_line":"  when: v38660_snmpd_conf.stat.exists \u003d\u003d True"}],"source_content_type":"text/x-yaml","patch_set":7,"id":"3a29b11f_c92da547","line":124,"in_reply_to":"3a29b11f_d121e6b5","updated":"2015-10-20 12:29:30.000000000","message":"Good idea. I\u0027ll adjust.","commit_id":"203cae31d49a4e1f10cdcc461fa5c227ae9127f9"},{"author":{"_account_id":7217,"name":"Hugh Saunders","email":"hugh@wherenow.org","username":"hughsaunders"},"change_message_id":"2f3d761eb1bee90c25a96a462ae7b2783ee98c79","unresolved":false,"context_lines":[{"line_number":142,"context_line":"    - V-38656"},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"- name: Check if SNMP daemon is installed (for V-38660)"},{"line_number":145,"context_line":"  shell: dpkg --status snmpd | grep ^Status | grep \"ok installed\""},{"line_number":146,"context_line":"  register: v38660_result"},{"line_number":147,"context_line":"  changed_when: False"},{"line_number":148,"context_line":"  failed_when: False"}],"source_content_type":"text/x-yaml","patch_set":11,"id":"1a26ad4f_cba4100a","line":145,"updated":"2015-10-27 14:43:25.000000000","message":"^Status:.*ok installed","commit_id":"baac67d74831b607bd8b15d66ff433061bd81ed5"},{"author":{"_account_id":7307,"name":"Matt Thompson","email":"mattt@defunct.ca","username":"mattt416"},"change_message_id":"b56d0b9a1a11eb746cab788e01a8da72256a58f1","unresolved":false,"context_lines":[{"line_number":142,"context_line":"    - V-38656"},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"- name: Check if SNMP daemon is installed (for V-38660)"},{"line_number":145,"context_line":"  shell: \"dpkg --status snmpd | grep ^Status:.*ok installed\""},{"line_number":146,"context_line":"  register: v38660_snmpd_installed"},{"line_number":147,"context_line":"  changed_when: False"},{"line_number":148,"context_line":"  failed_when: False"}],"source_content_type":"text/x-yaml","patch_set":12,"id":"1a26ad4f_6b1dbcbc","line":145,"updated":"2015-10-27 14:54:53.000000000","message":"You\u0027ll need some quotes around ^Status:.*ok installed","commit_id":"75101a0ba90a3d922a1a7dcdde383e70a6b140d6"},{"author":{"_account_id":7307,"name":"Matt Thompson","email":"mattt@defunct.ca","username":"mattt416"},"change_message_id":"ae3fc08cb94e34ece6c5abc2d7a8a1d3d7a9174a","unresolved":false,"context_lines":[{"line_number":153,"context_line":"# We shouldn\u0027t get any output from this grep since it looks for configuration"},{"line_number":154,"context_line":"# lines for the SNMP v1 and v2c protocols."},{"line_number":155,"context_line":"- name: Check for insecure SNMP protocols (for V-38660)"},{"line_number":156,"context_line":"  shell: \"egrep \u0027v1|v2c|com2sec|community\u0027 /etc/snmp/snmpd.conf | grep -v \u0027^\\s*#\u0027\""},{"line_number":157,"context_line":"  register: v38660_result"},{"line_number":158,"context_line":"  when: v38660_snmpd_installed.rc \u003d\u003d 0"},{"line_number":159,"context_line":"  changed_when: False"}],"source_content_type":"text/x-yaml","patch_set":14,"id":"1a26ad4f_e19d6d5a","line":156,"updated":"2015-10-27 15:39:08.000000000","message":"This throws an ansible error, I think you\u0027ll need to escape the \\s.","commit_id":"cc121b17747f90707e989ffd5c160b6d5d9045a8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"e567e5b5901c36ae887e5e1da5a9a2216d451799","unresolved":false,"context_lines":[{"line_number":153,"context_line":"# We shouldn\u0027t get any output from this grep since it looks for configuration"},{"line_number":154,"context_line":"# lines for the SNMP v1 and v2c protocols."},{"line_number":155,"context_line":"- name: Check for insecure SNMP protocols (for V-38660)"},{"line_number":156,"context_line":"  shell: \"egrep \u0027v1|v2c|com2sec|community\u0027 /etc/snmp/snmpd.conf | grep -v \u0027^\\s*#\u0027\""},{"line_number":157,"context_line":"  register: v38660_result"},{"line_number":158,"context_line":"  when: v38660_snmpd_installed.rc \u003d\u003d 0"},{"line_number":159,"context_line":"  changed_when: False"}],"source_content_type":"text/x-yaml","patch_set":14,"id":"1a26ad4f_450a2cd4","line":156,"in_reply_to":"1a26ad4f_e19d6d5a","updated":"2015-10-27 16:04:58.000000000","message":"Done","commit_id":"cc121b17747f90707e989ffd5c160b6d5d9045a8"},{"author":{"_account_id":7217,"name":"Hugh Saunders","email":"hugh@wherenow.org","username":"hughsaunders"},"change_message_id":"1ec7e185d8a81cee2f1504d098bab0279e24ba9c","unresolved":false,"context_lines":[{"line_number":155,"context_line":"- name: Check for insecure SNMP protocols (for V-38660)"},{"line_number":156,"context_line":"  shell: \"egrep \u0027v1|v2c|com2sec|community\u0027 /etc/snmp/snmpd.conf | grep -v \u0027^\\\\s*#\u0027\""},{"line_number":157,"context_line":"  register: v38660_result"},{"line_number":158,"context_line":"  when: v38660_snmpd_installed.rc \u003d\u003d 0"},{"line_number":159,"context_line":"  changed_when: False"},{"line_number":160,"context_line":"  failed_when: False"},{"line_number":161,"context_line":"  tags:"}],"source_content_type":"text/x-yaml","patch_set":15,"id":"1a26ad4f_8c6ee42d","line":158,"updated":"2015-10-29 17:39:55.000000000","message":"I\u0027m not that keen on the register+when combo, but it should be ok assuming \u0027and\u0027 uses shortcut logic in the next task. The alternative is to use failed_when: false and remove the when, but I don\u0027t really like that either.","commit_id":"9e5866c50b03aae60ffe4f295d574936e4525f25"}]}