Hi,
Thanks for the prompt answer.

I'm probably missing something, I added the following test code in my
MIB:
        char *          Token= "rocommunity";
        char *          Line = "TryPrivate 127.0.0.1";
        vacm_parse_simple(Token,Line);

- I don't have "TryPrivate" community in any of my conf files.
- I'm using Net-SNMP v. 5.2.1

=========== The agent recognize the community "private" but not
"TryPrivate" ============
snmpget -v2c -c private 127.0.0.1 SNMPv2-MIB::sysLocation.0
----------------------------- > SNMPv2-MIB::sysLocation.0 = STRING:
unknown
snmpget -v2c -c TryPrivate 127.0.0.1 SNMPv2-MIB::sysLocation.0
----------------------------- > Timeout: No Response from 127.0.0.1.

=============== Now I activated my MIB changes with the
"vacm_parse_simple" ==========
snmpget -v2c -c private 127.0.0.1 1.3.6.1.4.1.161.4160.2.1.1.0

=============== And the agent is now responding to  "TryPrivate"
=====================
snmpget -v2c -c TryPrivate 127.0.0.1 SNMPv2-MIB::sysLocation.0
SNMPv2-MIB::sysLocation.0 = STRING: unknown


So, Isn't "TryPrivate" a new community string ? Its seems to work fine
(except "small" problem of forgetting this change upon agent restart).

Can you please tell me where am I wrong ?

Thanks,
Ofer



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave
Shield
Sent: Monday, June 20, 2005 12:08 PM
To: Koren Ofer-BOK016
Cc: [email protected]
Subject: Re: VACM and snmpv2c community string

On Mon, 2005-06-20 at 09:24, Koren Ofer-BOK016 wrote:

> I used the following lines (originally from the snmpvacm man page):
> 
> snmpvacm -v2c -c public 127.0.0.1 createSec2Group 2 dave RWGroup
> snmpvacm -v2c -c public 127.0.0.1 createView all .1 80
> snmpvacm -v2c -c public 127.0.0.1 createAccess RWGroup 2 1 1 all all
all


> Which of the above argument's is my new v2c community string ?

None of them.
The instructions in the snmpvacm man page are for setting up
SNMPv3 access.  You've correctly tweaked them for SNMPv2c, but
there's one extra step that's needed - mapping the community
string into a security name (see the FAQ entry on access control
for the gory details).

Unfortunately, from the 'snmpvacm(1)' man page:

LIMITATIONS
  This utility does not support the configuration of new community
  strings, so is only of use for setting up new access control for
  SNMPv3 requests. It can be used to amend the access settings for
  existing community strings, but not to set up new ones.




> snmpwalk -v2c -c __________ 127.0.0.1
>                                  ^
>                                 / \
>                          What should I 
>                           Write here ?

The name or IP address of the system you wish to query.


Dave



-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=click
_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Reply via email to