Re: [Pkg-net-snmp-devel] Bug#498475: Lenny-Ignore tag request for SNMP related bugs

2008-09-15 Thread Wes Hardaker

The MIBs are not technically necessary for the SNMP protocol itself to
work.  In fact, most of the SNMP agent's functionality is just fine
without installed MIBs.  The command line clients, however, are far less
useful (still usable, but much more of a pain for the operator).

If you want to get really nasty about the legal issues, consider the
following snippit from RFC3414 (picking one at random, since they all
have this issue):

  usmStatsWrongDigests OBJECT-TYPE



  Blumenthal & Wijnen Standards Track[Page 38]
  ^L
  RFC 3414 USM for SNMPv3December 2002


  SYNTAX   Counter32
  MAX-ACCESS   read-only

Note how the RFC format inserts headings within the MIB itself.  It's
unclear to me, from a perfectly legal definition, if the copyright on
the "MIB" includes the page break markings.  I'll let a lawyer answer
that additional problem...


Anyway, there is one other solution:

Distribute the snmp packages without any MIBs in place but with a
auto-post-installation tool that could go grab all the RFCs, extract the
MIBs, modify them so they're not broken and then install them on the
system.  That only removes the "free" problem aspect from the
distribution itself and leaves it up to the user whether to run the
post-installation tool to make the tools significantly more usable but
reduce the "freeness" of the system (and you could even print a nice
friendly warning).


The crux of the problem is there is nothing you can do to fix it because
the problem stems from far upstream (the IETF Trust), which is beyond
the bounds of anything any of us control.  Maybe your lawyer should talk
to their lawyer and beg for a solution and explain the problem.

(it's actually been discussed in the past surrounding code-snippits in
various RFCs that are indented to be used by the author, but the IETF
stamps it with a less-usable license).

-- 
"In the bathtub of history the truth is harder to hold than the soap,
 and much more difficult to find."  -- Terry Pratchett


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: [Pkg-net-snmp-devel] Bug#498475: Lenny-Ignore tag request for SNMP related bugs

2008-09-15 Thread Jochen Friedrich
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Vincent,

> I have just opened two bugs against libsmi-common and libsnmp-base:
>  http://bugs.debian.org/498476
>  http://bugs.debian.org/498475
> 
> Those packages  ship MIB files that  are non-free (same  license as IETF
> RFC).  However, there is  no quick  fix: removing  those files  make the
> packages unusable,  moving to non-free  make a lot of  important package
> (snmpd) move to contrib, etc.
> 
> I think we should fix this issue after Lenny. Therefore, I would like to
> tag those bugs with lenny-ignore.

IMHO things are even worse.

Looking at the MIB License at http://www.ietf.org/copyrights/ianamib.html,
it appears to me that any modification of the MIBs is prohibited, including
fixing syntactic errors. On the other hand, net-snmp-5.4.1/mibs/Makefile.mib
which can be used to refresh the included MIB file applies a patch to the
dowloaded MIBs which fixes those errors. Wouldn't this even make distributing
libsnmp-base in non-free problematic?

Thanks,
Jochen
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEVAwUBSM6bBcP9a9GOLSE6AQJEKAf/b3vl6nMuFy3wd9DVKt3pn+bW+hxjcIZC
1nRYv5xQLStXkDd3IpP7CSMz3ANTzj5oqtmmxwtSWbZzmzAUedCkUES71gEpO49D
gAFl2BBlS+jFFyugPVet/13NTJm5xFR7A7CfGlLmnC0BS0BzPLu+XnYZ+DzUXLos
Tvb+Gh18+iUCNYZNkLy/7uitXDMzUAAYB9GmWa/26LSHEmkulepSrwfadd1Fep9T
8Wi9gToLs0XNMrqze8N9ZAuGur9O1xcz4OPBosTab1ppzSDecOBBP0/GtIfum/Sp
7lzbrjcDWP9OfIwCihZuD+LcPH1H+BIcu+N6qRA3zlwFqLQyIxPRaw==
=bq65
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]