Initial version of snmp module.

snmp/files/snmptrapd.rc

@@ -0,0 +1,8 @@
+#!/bin/sh
+
+daemon="/usr/local/sbin/snmptrapd"
+daemon_flags="-n -u snmptrapd -g snmptrapd -c /etc/snmptrapd.conf"
+
+. /etc/rc.d/rc.subr
+
+rc_cmd $1

snmp/manifests/init.pp

@@ -0,0 +1,71 @@
+
+# Install net-snmp utilities
+#
+class snmp::utils {
+
+    package { "net-snmp":
+        name   => $::operatingsystem ? {
+            "openbsd" => "net-snmp",
+            default   => "net-snmp-utils",
+        },
+        ensure => installed,
+    }
+
+}
+
+# Install snmp trap daemon
+#
+# === Parameters
+#
+#   $acl:
+#       Array containing list of allowed SNMP community names.
+#       Defaults is to allow all trap messages.
+#
+# === Sample usage
+#
+# class { "snmp::trapd":
+#     acl => [ "public", ],
+# }
+#
+class snmp::trapd($acl=NONE) {
+
+    require snmp::utils
+    include user::system
+
+    realize([ User["snmptrapd"], Group["snmptrapd"], ])
+
+    case $::operatingsystem {
+        "openbsd": {
+            file { "/etc/rc.d/snmptrapd":
+                ensure => present,
+                source => "puppet:///modules/snmp/snmptrapd.rc",
+                mode   => "0755",
+                owner  => "root",
+                group  => "wheel",
+                notify => Service["snmptrapd"],
+            }
+        }
+        default: {
+            fail("snmp::trapd not supported in ${::operatingsystem}")
+        }
+    }
+
+    file { "/etc/snmptrapd.conf":
+        ensure  => present,
+        content => template("snmp/snmptrapd.conf.erb"),
+        mode    => "0644",
+        owner   => "root",
+        group   => $::operatingsystem ? {
+            "openbsd" => "wheel",
+            default   => "root",
+        },
+        notify  => Service["snmptrapd"],
+    }
+
+    service { "snmptrapd":
+        ensure  => running,
+        enable  => true,
+        require => User["snmptrapd"],
+    }
+
+}

snmp/templates/snmptrapd.conf.erb

@@ -0,0 +1,9 @@
+
+pidFile /var/run/snmptrapd.pid
+<% if acl == 'NONE' -%>
+disableAuthorization yes
+<% else -%>
+<%   acl.each do |rule| -%>
+authCommunity log <%= rule %>
+<%   end -%>
+<% end -%>