/usr/share/pacemaker/alerts/alert

#!/bin/sh
#
# Description:  Manages a SNMP trap, provided by NTT OSSC as an
#               script under Heartbeat/LinuxHA control
#
# Copyright (c) 2016 NIPPON TELEGRAPH AND TELEPHONE CORPORATION
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
#
##############################################################################
# This sample script assumes that only users who already have
# hacluster-equivalent access to the cluster nodes can edit the CIB. Otherwise,
# a malicious user could run commands as hacluster by inserting shell code into
# the trap_options or timestamp-format parameters.
#
# Sample configuration (cib fragment in xml notation)
# ================================
# <configuration>
#   <alerts>
#     <alert id="snmp_alert" path="/path/to/alert_snmp.sh">
#       <instance_attributes id="config_for_alert_snmp">
#         <nvpair id="trap_node_states" name="trap_node_states" value="all"/>
#       </instance_attributes>
#       <meta_attributes id="config_for_timestamp">
#         <nvpair id="ts_fmt" name="timestamp-format" value="%Y-%m-%d,%H:%M:%S.%01N"/>
#       </meta_attributes>
#       <recipient id="snmp_destination" value="192.168.1.2"/>
#     </alert>
#   </alerts>
# </configuration>
# ================================

if [ -z "$CRM_alert_version" ]; then
    echo "$0 must be run by Pacemaker version 1.1.15 or later"
    exit 0
fi

if [ -z "$CRM_alert_recipient" ]; then
    echo "$0 requires a recipient configured with the SNMP server IP address"
    exit 0
fi

#
trap_binary_default="/usr/bin/snmptrap"
trap_version_default="2c"
trap_options_default=""
trap_community_default="public"
trap_node_states_default="all"
trap_fencing_tasks_default="all"
trap_resource_tasks_default="all"
trap_monitor_success_default="false"
trap_add_hires_timestamp_oid_default="true"
trap_snmp_persistent_dir_default="/var/lib/pacemaker/snmp"

: ${trap_binary=${trap_binary_default}}
: ${trap_version=${trap_version_default}}
: ${trap_options=${trap_options_default}}
: ${trap_community=${trap_community_default}}
: ${trap_node_states=${trap_node_states_default}}
: ${trap_fencing_tasks=${trap_fencing_tasks_default}}
: ${trap_resource_tasks=${trap_resource_tasks_default}}
: ${trap_monitor_success=${trap_monitor_success_default}}
: ${trap_add_hires_timestamp_oid=${trap_add_hires_timestamp_oid_default}}
: ${trap_snmp_persistent_dir=${trap_snmp_persistent_dir_default}}

if [ "${trap_add_hires_timestamp_oid}" = "true" ]; then
    hires_timestamp="HOST-RESOURCES-MIB::hrSystemDate s ${CRM_alert_timestamp}"
fi

is_in_list() {
    item_list=`echo "$1" | tr ',' ' '`

    if [ "${item_list}" = "all" ]; then
        return 0
    else
        for act in $item_list
        do
            act=`echo "$act" | tr A-Z a-z`
            [ "$act" != "$2" ] && continue
            return 0
        done
    fi
    return 1
}

if [ -z ${SNMP_PERSISTENT_DIR} ]; then
    export SNMP_PERSISTENT_DIR="${trap_snmp_persistent_dir}"
    # mkdir for snmp trap tools.
    if [ ! -d ${SNMP_PERSISTENT_DIR} ]; then
        mkdir -p ${SNMP_PERSISTENT_DIR}
    fi
fi

rc=0
case "$CRM_alert_kind" in
    node)
        is_in_list "${trap_node_states}" "${CRM_alert_desc}"
        [ $? -ne 0 ] && exit 0

        output=`"${trap_binary}" -v "${trap_version}" ${trap_options} \
        -c "${trap_community}" "${CRM_alert_recipient}" "" \
        PACEMAKER-MIB::pacemakerNotificationTrap \
        PACEMAKER-MIB::pacemakerNotificationNode s "${CRM_alert_node}" \
        PACEMAKER-MIB::pacemakerNotificationDescription s "${CRM_alert_desc}" \
        ${hires_timestamp} 2>&1`
        rc=$?
        ;;
    fencing)
        is_in_list "${trap_fencing_tasks}" "${CRM_alert_task}"
        [ $? -ne 0 ] && exit 0

        output=`"${trap_binary}" -v "${trap_version}" ${trap_options} \
        -c "${trap_community}" "${CRM_alert_recipient}" "" \
        PACEMAKER-MIB::pacemakerNotificationTrap \
        PACEMAKER-MIB::pacemakerNotificationNode s "${CRM_alert_node}" \
        PACEMAKER-MIB::pacemakerNotificationOperation s "${CRM_alert_task}" \
        PACEMAKER-MIB::pacemakerNotificationDescription s "${CRM_alert_desc}" \
        PACEMAKER-MIB::pacemakerNotificationReturnCode i ${CRM_alert_rc} \
        ${hires_timestamp} 2>&1`
        rc=$?
        ;;
    resource)
        is_in_list "${trap_resource_tasks}" "${CRM_alert_task}"
        [ $? -ne 0 ] && exit 0

        case "${CRM_alert_desc}" in
        Cancelled) ;;
        *)
            if [ "${trap_monitor_success}" = "false" ] \
                && [ "${CRM_alert_rc}" = "${CRM_alert_target_rc}" ] \
                && [ "${CRM_alert_task}" = "monitor" ]; then
                    exit
            fi

            output=`"${trap_binary}" -v "${trap_version}" ${trap_options} \
            -c "${trap_community}" "${CRM_alert_recipient}" "" \
            PACEMAKER-MIB::pacemakerNotificationTrap \
            PACEMAKER-MIB::pacemakerNotificationNode s "${CRM_alert_node}" \
            PACEMAKER-MIB::pacemakerNotificationResource s "${CRM_alert_rsc}" \
            PACEMAKER-MIB::pacemakerNotificationOperation s "${CRM_alert_task}" \
            PACEMAKER-MIB::pacemakerNotificationDescription s "${CRM_alert_desc}" \
            PACEMAKER-MIB::pacemakerNotificationStatus i ${CRM_alert_status} \
            PACEMAKER-MIB::pacemakerNotificationReturnCode i ${CRM_alert_rc} \
            PACEMAKER-MIB::pacemakerNotificationTargetReturnCode i ${CRM_alert_target_rc} \
            ${hires_timestamp} 2>&1`
            rc=$?
            ;;
        esac
        ;;
    attribute)
        output=`"${trap_binary}" -v "${trap_version}" ${trap_options} \
        -c "${trap_community}" "${CRM_alert_recipient}" "" \
        PACEMAKER-MIB::pacemakerNotificationTrap \
        PACEMAKER-MIB::pacemakerNotificationNode s "${CRM_alert_node}" \
        PACEMAKER-MIB::pacemakerNotificationAttributeName s "${CRM_alert_attribute_name}" \
        PACEMAKER-MIB::pacemakerNotificationAttributeValue s "${CRM_alert_attribute_value}" \
        ${hires_timestamp} 2>&1`
        rc=$?
        ;;
    *)
        ;;
esac

if [ $rc -ne 0 ]; then
    echo "${trap_binary} returned error : rc=${rc} ${output}"
fi
pacemaker-common 1.1.18-0ubuntu1 / usr / share / pacemaker / alerts / alert_snmp.sh.sample
