summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-12-27 19:22:46 +0100
committerChristian Poessinger <christian@poessinger.com>2021-12-27 19:22:54 +0100
commita70a4001fe0b3a91a7d86191ff32dcc7205d2eae (patch)
tree11267d936219dba6d6345ca7f37eb8eae59f7b95
parent3f05c880ba4b0edfc4238ce15e6508473d30b379 (diff)
downloadvyos-1x-a70a4001fe0b3a91a7d86191ff32dcc7205d2eae.tar.gz
vyos-1x-a70a4001fe0b3a91a7d86191ff32dcc7205d2eae.zip
snmp: T4093: add missing verify() step for required group per snmp v3 user
-rwxr-xr-xsrc/conf_mode/snmp.py4
1 files changed, 4 insertions, 0 deletions
diff --git a/src/conf_mode/snmp.py b/src/conf_mode/snmp.py
index e1852f2ce..8475e6808 100755
--- a/src/conf_mode/snmp.py
+++ b/src/conf_mode/snmp.py
@@ -489,6 +489,10 @@ def verify(snmp):
# Group must exist prior to mapping it into a group
# seclevel will be extracted from group
#
+ if 'group' not in user or user['group'] == '':
+ username = user['name']
+ raise ConfigError(f'Group membership required for user "{username}"!')
+
if user['group']:
error = True
if 'v3_groups' in snmp.keys():