diff options
Diffstat (limited to 'releasenotes/notes/irmc-add-snmpv3-security-fca05bfc30f50d1a.yaml')
| -rw-r--r-- | releasenotes/notes/irmc-add-snmpv3-security-fca05bfc30f50d1a.yaml | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/releasenotes/notes/irmc-add-snmpv3-security-fca05bfc30f50d1a.yaml b/releasenotes/notes/irmc-add-snmpv3-security-fca05bfc30f50d1a.yaml new file mode 100644 index 000000000..3035e5599 --- /dev/null +++ b/releasenotes/notes/irmc-add-snmpv3-security-fca05bfc30f50d1a.yaml @@ -0,0 +1,28 @@ +--- +fixes: + - | + Fixes SNMPv3 message authentication and encryption functionality of iRMC + driver. The SNMPv3 authentication between iRMC driver and iRMC was only + by the security name with no passwords and encryption. + To increase security, the following parameters are now added to the node's + ``driver_info``, and can be used for authentication: + + * ``irmc_snmp_user`` + * ``irmc_snmp_auth_password`` + * ``irmc_snmp_priv_password`` + * ``irmc_snmp_auth_proto`` (Optional, defaults to ``sha``) + * ``irmc_snmp_priv_proto`` (Optional, defaults to ``aes``) + + ``irmc_snmp_user`` replaces ``irmc_snmp_security``. ``irmc_snmp_security`` + will be ignored if ``irmc_snmp_user`` is set. + ``irmc_snmp_auth_proto`` and ``irmc_snmp_priv_proto`` can also be set + through the following options in the ``[irmc]`` section of + ``/etc/ironic/ironic.conf``: + + * ``snmp_auth_proto`` + * ``snmp_priv_proto`` + +other: + - | + Updates the minimum version of ``python-scciclient`` library to + ``0.12.2``. |