python-netgear-switch-library 0.0.post347__tar.gz → 0.0.post349__tar.gz

{python_netgear_switch_library-0.0.post347 → python_netgear_switch_library-0.0.post349}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-netgear-switch-library
-Version: 0.0.post347
+Version: 0.0.post349
 Summary: Python library and CLI to query and control Netgear switches over SNMP, NSDP and HTTP.
 Author-email: Tim Ansell <me@mith.ro>
 License-Expression: Apache-2.0

{python_netgear_switch_library-0.0.post347 → python_netgear_switch_library-0.0.post349}/docs/superpowers/specs/2026-08-02-snmp-surface-findings.md

@@ -215,3 +215,44 @@ cross-backend operation.
 Service protocols are NOT implementable yet: SSH state is readable, inbound
 telnet state is unlocated, and HTTP state is unlocated. Recording that as three
 separate unknowns rather than one blocked feature.
+
+
+## Service-protocol WRITE commands — attempted, not established
+
+Reading service state is done (`show ip http`, `show telnetcon`, `show ip ssh`;
+see `get_services`). The commands that CHANGE it are not, and this section
+records the attempt so the next person does not repeat it.
+
+Toggling a management service on a production switch can lock out the very
+session doing it — disabling SSH on 10.1.5.13 would end the connection issuing
+the command — so no toggle was performed. The safe substitute this project uses
+elsewhere is the device's own context-sensitive help (`<partial> ?`), which is
+read-only and abandons the line.
+
+That substitute did **not** work cleanly here. Asked in config mode on
+m4300-24x:
+
+| Query | Answer |
+|---|---|
+| `ip http ?` | lists only `accounting` and `authentication` |
+| `ip ssh ?` | `% Unrecognized command` |
+| `ip telnet ?` | `% Unrecognized command` |
+| `telnet ?` | `% Unrecognized command` |
+
+Two reasons to distrust the negative results rather than record them as limits:
+
+1. **`ip http secure-server` is demonstrably valid on this switch** — it appears
+   in its own `show running-config | include http` output. So the `ip http ?`
+   listing above is incomplete, not authoritative, and the help query is being
+   partly consumed by the shell driver rather than fully captured.
+2. `show running-config | include telnet` returns `line telnet`, which suggests
+   the inbound telnet server is configured inside a `line telnet` sub-mode
+   rather than at global-config level. That would explain the `ip telnet`
+   rejection without meaning the capability is absent.
+
+**Conclusion: unresolved, and deliberately not implemented.** What is needed is
+either a capture of the help output through a driver that does not swallow it,
+or a toggle performed on a switch that is safe to lose contact with. Writing
+`ip http server` / `no ip ssh server` on the strength of FASTPATH convention
+would be precisely the inference this project forbids — and the cost of being
+wrong is a switch that can no longer be reached.

{python_netgear_switch_library-0.0.post347 → python_netgear_switch_library-0.0.post349}/src/netgear_switch/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '0.0.post347'
-__version_tuple__ = version_tuple = (0, 0, 'post347')
+__version__ = version = '0.0.post349'
+__version_tuple__ = version_tuple = (0, 0, 'post349')
 
 __commit_id__ = commit_id = None

{python_netgear_switch_library-0.0.post347 → python_netgear_switch_library-0.0.post349}/src/netgear_switch/aio_api.py

@@ -661,6 +661,21 @@ class AsyncSwitch:
             lambda w: w.clear_poe_fault(port, force=force, timeouts=timeouts), backend
         )
 
+    async def set_syslog_enabled(
+        self,
+        enabled: bool,
+        *,
+        force: bool = False,
+        backend: Backend | None = None,
+    ) -> None:
+        """Turn remote syslog on or off.
+
+        Served over SNMP. Adding or removing a COLLECTOR is a separate,
+        unbuilt operation -- it needs a row-status write that has not
+        been driven against hardware.
+        """
+        await self._write(lambda w: w.set_syslog_enabled(enabled, force=force), backend)
+
     async def set_hostname(
         self, name: str, *, force: bool = False, backend: Backend | None = None
     ) -> None:

{python_netgear_switch_library-0.0.post347 → python_netgear_switch_library-0.0.post349}/src/netgear_switch/snmp_write.py

@@ -707,6 +707,46 @@ class SnmpWriter:
                 after=after,
             )
 
+    def set_syslog_enabled(self, enabled: bool, *, force: bool = False) -> None:
+        """Turn remote syslog on or off.
+
+        Writes the vendor logging admin-mode column (``<base>.14.1.4.1.0``),
+        whose enum is ``1 = enabled, 2 = disabled`` -- established from captured
+        CLI rather than assumed, see ``oids.VendorOids.syslog_admin_mode``.
+
+        WRITABILITY MEASURED 2026-08-02 by SETting each switch the value it
+        already held, which cannot change device state but still distinguishes a
+        writable column from a read-only one: m4300-24x (10.1.5.13), gsm7252ps
+        (10.1.5.22) and gsm7228ps (10.1.5.11) all accepted it.
+
+        Deliberately narrower than ``get_syslog`` reads. Adding or removing a
+        COLLECTOR means creating a row in the host table, which needs a
+        row-status write that has not been driven against hardware; offering it
+        here on the strength of the read alone would be the inference this
+        project refuses.
+
+        Not force-gated: toggling log delivery cannot strand a switch and is
+        reversible by writing the old value back.
+        """
+        del force  # accepted for a uniform writer signature; nothing to gate
+        if not oids.has_vendor_oids(self.model):
+            raise UnsupportedCapabilityError(
+                f"model {self.model.key!r} registers no Netgear vendor OID "
+                "subtree, and the logging columns are vendor-only"
+            )
+        vo = oids.vendor_oids(self.model)
+        before = self._reader.get_syslog()
+        self.client.set_many(
+            [SetVarbind(vo.syslog_admin_mode, 1 if enabled else 2, "i")]
+        )
+        after = self._reader.get_syslog()
+        if after.enabled != enabled:
+            raise WriteVerificationError(
+                f"syslog enabled is {after.enabled} after writing {enabled}",
+                before=before,
+                after=after,
+            )
+
     def set_hostname(self, name: str, *, force: bool = False) -> None:
         """Set the switch's host name via the standard MIB-II ``sysName``.
 
@@ -1112,6 +1152,27 @@ class AsyncSnmpWriter:
                 after=after,
             )
 
+    async def set_syslog_enabled(self, enabled: bool, *, force: bool = False) -> None:
+        """Async twin of ``SnmpWriter.set_syslog_enabled`` -- see there."""
+        del force  # accepted for a uniform writer signature; nothing to gate
+        if not oids.has_vendor_oids(self.model):
+            raise UnsupportedCapabilityError(
+                f"model {self.model.key!r} registers no Netgear vendor OID "
+                "subtree, and the logging columns are vendor-only"
+            )
+        vo = oids.vendor_oids(self.model)
+        before = await self._reader.get_syslog()
+        await self.client.set_many(
+            [SetVarbind(vo.syslog_admin_mode, 1 if enabled else 2, "i")]
+        )
+        after = await self._reader.get_syslog()
+        if after.enabled != enabled:
+            raise WriteVerificationError(
+                f"syslog enabled is {after.enabled} after writing {enabled}",
+                before=before,
+                after=after,
+            )
+
     async def set_hostname(self, name: str, *, force: bool = False) -> None:
         """Async twin of ``SnmpWriter.set_hostname`` -- see there."""
         del force  # accepted for a uniform writer signature; nothing to gate

{python_netgear_switch_library-0.0.post347 → python_netgear_switch_library-0.0.post349}/src/netgear_switch/sync_api.py

@@ -503,9 +503,7 @@ class SyncSwitch:
         has -- the actionable information the old silent fallback destroyed.
         """
         if requested is None:
-            others = sorted(
-                b.name for b in self.model.backends if b is not chosen
-            )
+            others = sorted(b.name for b in self.model.backends if b is not chosen)
             hint = (
                 f"; pass backend=Backend.<{'|'.join(others)}> to use another backend"
                 if others
@@ -814,6 +812,21 @@ class SyncSwitch:
             lambda w: w.clear_poe_fault(port, force=force, timeouts=timeouts), backend
         )
 
+    def set_syslog_enabled(
+        self,
+        enabled: bool,
+        *,
+        force: bool = False,
+        backend: Backend | None = None,
+    ) -> None:
+        """Turn remote syslog on or off.
+
+        Served over SNMP. Adding or removing a COLLECTOR is a separate,
+        unbuilt operation -- it needs a row-status write that has not
+        been driven against hardware.
+        """
+        self._write(lambda w: w.set_syslog_enabled(enabled, force=force), backend)
+
     def set_hostname(
         self, name: str, *, force: bool = False, backend: Backend | None = None
     ) -> None:

{python_netgear_switch_library-0.0.post347 → python_netgear_switch_library-0.0.post349}/tests/test_capabilities.py

@@ -97,6 +97,7 @@ _WRITE_ARGS: dict[str, tuple[tuple[Any, ...], dict[str, Any]]] = {
     # `hostname` with no argument is rejected by the device itself and clearing
     # a name is a different command (`no hostname`) that is not implemented.
     "set_hostname": (("capcheck",), {}),
+    "set_syslog_enabled": ((True,), {}),
 }
 
 #: Not driven. ``upload_certificate_scp`` runs a multi-command deploy sequence