On Tue, 17 Aug 2004, Dave Shield wrote:
[ Sorry for the delay in responding to this ]
Snmp queries to subagent do not work unless I add 'snmpd:ALL' in hosts.allow. It looks like netsnmp_callback_open() sess is checked by tcpwrappers for some reason. Any ideas?
This seems like a bug to me. Is there any reason why subagent is doing tcpwrapper checks? I expected the master agent to this check.
Am I missing something?
Yes, and Yes.
It's reasonable for the AgentX connection to be filtered through the tcpwrappers checks, in order to be able to restrict which subagent(s) can communicate with the master agent.
But the tcpwrapper mechanism is basically designed for use with IP-based transports, so is inappropriate for Unix-socket connections (as typically used by AgentX).
I've just applied a patch to the main development code line, that should avoid trying to validate such local connections against the hosts.{allow,deny} files.
Is there going to be another release or a patch (for 5.1.2) soon?
-- Igor
------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 _______________________________________________ Net-snmp-coders mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
