On 31 December 2012 12:34, Dudi Bickel <du...@ceragon.com> wrote: > While trying to redirect the MIB-II system group to my subagent to handle > instead of SNMPD handle, the SNMPD ignore ANY check of the community string > on any request (meaning any string in the community will be answered). > > The redirection is done either by the –I-system flag or by using configure > flag --with-out-mib-modules="mibII” while compiling net-snmp.
The "mibII" grouping contains rather more than just the system group. In particular, it also pulls in the VACM code, which is what takes care of access control checks. If this is omitted, then yes - the agent is likely to accept any community string without any checks. I don't really understand why "-I-system" would turn off authentication, though - it shouldn't have any effect whatsoever! (It's not even the correct token for disabling the code that implements the system group, which is registered using "system_mib") What exactly are you trying to do? Dave ------------------------------------------------------------------------------ Master SQL Server Development, Administration, T-SQL, SSAS, SSIS, SSRS and more. Get SQL Server skills now (including 2012) with LearnDevNow - 200+ hours of step-by-step video tutorials by Microsoft MVPs and experts. SALE $99.99 this month only - learn more at: http://p.sf.net/sfu/learnmore_122512 _______________________________________________ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
