Pre-release 1 of Net-SNMP 5.2 is now available. This file contains major changes in released revisions. Please read the ChangeLog file for a more detailed listing of changes/bug fixes.
*5.2* New: For the security parnoid (EG, like Wes): - Insecure versions of SNMP may be completely disable at compile time. (configure using one or both of --disable-snmpv1 --disable-snmpv2c) - Less secure versions of SNMPv3 authentication and encryption algorithms may be completely disable at compile time. (configure using one or both of --disable-des --disable-md5) (This requires you have OpenSSL to support SHA1 and AES instead) - Diffie-Helman key negotianion (perfect-forward-secrecy) (RFC2786) has been implemented in both the agent and in snmpusm. snmptrapd: - Embedded perl support for trap handlers (much faster). (configure --with-embedded-perl and run 'perldoc NetSNMP::TrapReceiver') - the snmptrapd usmUser table can be controlled through SNMP & AgentX (the snmptrapd MIBs are registered under the"snmptrapd" SNMPv3 context) agent: - community strings can be mapped to individual SNMPv3 contexts (see the snmpd.conf manual on "com2sec"). - AgentX should work properly with SNMPv3 contexts now. - experimental implementation of DisMan Remote Operations MIB groups mib2c: - new configuration file, mib2c.mfd.conf (aka MIBs for Dummies, or MFD) to reduce the SNMP knowledge needed do develop mib modules. - new configuratoin file, mib2c.iterate2.conf Ports: - new experimental tables/rewrites for Linux, including: ifTable, ifXTable, inetCidrRouteTable, ipCidrRouteTable, ipAddressTable, ipSystemStatsTable, usmDHParameters, usmDHUserKeyTable, ipNetToPhysicalTable Fixes: - AgentX memory leak on sets Testing on various platforms reveals: OpenBSD: Build fails agent/mibgroup/ucd-snmp/versioninfo.c:97: character constant too long MacOSX: Builds, tests (45 / 46 succeeded) 33:testing AgentX trap sending support...FAIL FreeBSD: Builds, tests (41 / 46 succeeded) 13:testing SNMPv3 get using MD5/AES of .1.3.6.1.2.1.1.3.0...FAIL 14:testing SNMPv3 get using MD5/DES of .1.3.6.1.2.1.1.3.0...FAIL 16:testing SNMPv3 get using SHA/DES of .1.3.6.1.2.1.1.3.0...FAIL 17:testing SNMPv3 get using SHA/AES of .1.3.6.1.2.1.1.3.0...FAIL 19:testing SNMPv3 user creation and usage using snmpusm....FAIL Solaris: Builds, test (29 / 46 succeeded) 9: testing SNMPv3 get using noAuthNoPriv of .1.3.6.1.2.1.1.3.0... FAIL 10: testing SNMPv3 getnext using initial of .1.3.6.1.2.1.1.3.0... FAIL 11: testing SNMPv3 bulkget of system... FAIL 12: testing SNMPv3 get using MD5/noPriv of .1.3.6.1.2.1.1.3.0... FAIL 15: testing SNMPv3 get using SHA/noPriv of .1.3.6.1.2.1.1.3.0... FAIL 19: testing SNMPv3 user creation and usage using snmpusm... FAIL 24: testing snmpv1 traps are sent by snmpd API... FAIL 25: testing snmpv2c traps are sent by snmpd API... FAIL 26: testing snmpv1 traps are sent by snmpd without notification mib support... FAIL 30: testing AgentX GET support... FAIL 31: testing AgentX SET support... FAIL 32: testing AgentX illegal SET handling support... FAIL 33: testing AgentX trap sending support... FAIL 34: testing Proxy GET support... FAIL 35: testing Proxy SET support... FAIL 36: testing Proxy illegal SET handling support... FAIL Linux amd64: Builds, test (29 / 46 succeeded) 9:testing SNMPv3 get using noAuthNoPriv of .1.3.6.1.2.1.1.3.0...FAIL 10:testing SNMPv3 getnext using initial of .1.3.6.1.2.1.1.3.0...FAIL 11:testing SNMPv3 bulkget of system...FAIL 12:testing SNMPv3 get using MD5/noPriv of .1.3.6.1.2.1.1.3.0...FAIL 15:testing SNMPv3 get using SHA/noPriv of .1.3.6.1.2.1.1.3.0...FAIL 19:testing SNMPv3 user creation and usage using snmpusm...FAIL 24:testing snmpv1 traps are sent by snmpd API...FAIL 25:testing snmpv2c traps are sent by snmpd API...FAIL 26:testing snmpv1 traps are sent by snmpd without notification mib support...FAIL 27:testing snmpv2c traps are sent by snmpd without notification mib support...FAIL 30:testing AgentX GET support...FAIL 31:testing AgentX SET support...FAIL 32:testing AgentX illegal SET handling support...FAIL 33:testing AgentX trap sending support...FAIL 34:testing Proxy GET support...FAIL 35:testing Proxy SET support...FAIL 36:testing Proxy illegal SET handling support...FAIL Linux alpha: Builds, tests(29 / 46 succeeded) 9:testing SNMPv3 get using noAuthNoPriv of .1.3.6.1.2.1.1.3.0... FAIL 10:testing SNMPv3 getnext using initial of .1.3.6.1.2.1.1.3.0... FAIL 11:testing SNMPv3 bulkget of system...FAIL 12:testing SNMPv3 get using MD5/noPriv of .1.3.6.1.2.1.1.3.0... FAIL 15:testing SNMPv3 get using SHA/noPriv of .1.3.6.1.2.1.1.3.0... FAIL 19:testing SNMPv3 user creation and usage using snmpusm... FAIL 24:testing snmpv1 traps are sent by snmpd API... FAIL 25:testing snmpv2c traps are sent by snmpd API...FAIL 26:testing snmpv1 traps are sent by snmpd without notification mib support... FAIL 27:testing snmpv2c traps are sent by snmpd without notification mib support... FAIL 30:testing AgentX GET support...FAIL 31:testing AgentX SET support...FAIL 32:testing AgentX illegal SET handling support...FAIL 33:testing AgentX trap sending support...FAIL 34:testing Proxy GET support...FAIL 35:testing Proxy SET support...FAIL 36:testing Proxy illegal SET handling support...FAIL -- Robert Story; NET-SNMP Junkie <http://www.net-snmp.org/> <irc://irc.freenode.net/#net-snmp> Archive: <http://sourceforge.net/mailarchive/forum.php?forum=net-snmp-coders> You are lost in a twisty maze of little standards, all different. ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Net-snmp-users mailing list [EMAIL PROTECTED] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users