Implements: blueprint security-hardening Change-Id: Ib53acd93061db7d29422e50c0400efe92edb7d96
		
			
				
	
	
	
		
			730 B
		
	
	
	
	
	
	
	
			
		
		
	
	
			730 B
		
	
	
	
	
	
	
	
Although neither Ubuntu 14.04 or openstack-ansible install or configure the SNMP daemon by default, the Ansible tasks will check to see if the SNMP configuration file is present. If the file is present, and the file contains configurations for insecure SNMP protocols, an error will be printed and the playbook will fail.
The task specifically looks for uncommented configuration lines containing:
v1v2ccom2seccommunity
Red Hat's guide to SNMP has some example configurations that deployers can use to enable SNMPv3.