Re: state of the trapd auth speech

2005-10-21 Thread Wes Hardaker
> On Sat, 22 Oct 2005 00:02:06 +0100, Dave Shield <[EMAIL PROTECTED]> said: Dave> Personally, I'd probably go for a mandatory positional Dave> field - something like: Dave> ipv4authcommunity log,execute xyzzy ... Dave> A more natural (and flexible) approach would be to use the Dave> exi

Re: trapd authorization hacks (again)

2005-10-21 Thread Wes Hardaker
> On Sat, 22 Oct 2005 00:00:09 +0100, Dave Shield <[EMAIL PROTECTED]> said: Dave> - a new version of the Event MIB Dave> (same basic functionality as before, just Dave> different internals & extended slightly) Dave> - reworking of the Schedule MIB Dave> (the basic code has been present for s

Re: state of the trapd auth speech

2005-10-21 Thread Wes Hardaker
> On Sat, 22 Oct 2005 00:02:06 +0100, Dave Shield <[EMAIL PROTECTED]> said: Wes> redesigning the VACM tokens will be quite Wes> a bit of work both in design and in code (what you're Wes> proposing requires state between token parsers Dave> Does it *inherently* requires state between token par

Re: Endian - ness issue

2005-10-21 Thread Robert Story
[ First - *please* don't mail me directly. Keep discussions on the list, where others can both learn and offer advice. Thanks. ] On Fri, 21 Oct 2005 11:14:40 -0700 Srini wrote: SK> Please see Comments inline. We are doing more testing and will let know SK> the status. SK> SK> > Le

Re: Agent Extensibility

2005-10-21 Thread Robert Story
On Fri, 21 Oct 2005 17:13:40 -0300 Jordan wrote: JJLDS> Robert, I've executed both agents with root permission and they write JJLDS> in the file. Then I've added the line JJLDS> netsnmp_ds_set_string(NETSNMP_DS_APPLICATION_ID, JJLDS> NETSNMP_DS_AGENT_X_SOCKET, "localhost:16

Re: state of the trapd auth speech

2005-10-21 Thread Dave Shield
>> setaccess limitedgroup "" v2c noAuthNoPriv prefix log anything Dave> What is this access view being applied to? Wes> currently just the OID of the trap. Good - that feels more sensible than the VACM approach of shoehorning the notifyView to cover both trap OIDs *and* the payload varbinds. We

Re: trapd authorization hacks (again)

2005-10-21 Thread Dave Shield
Dave> I don't think it's fair to add this sort of new functionality, Dave> and then *immediately* go into pre-release mode. Wes> Which means your belief is that feature freeze should actually begin Wes> before the first pre-release No. It means that I believe that the idea of a feature freeze isn'

Re: Agent Extensibility

2005-10-21 Thread Jordan Janeiro Lopes da Silva
Robert, I've executed both agents with root permission and they write in the file. Then I've added the line netsnmp_ds_set_string(NETSNMP_DS_APPLICATION_ID, NETSNMP_DS_AGENT_X_SOCKET, "localhost:16100"); in the subagent and got the erro "Error: Failed to connect to the agen

Re: Problems with tables in the same agent

2005-10-21 Thread Jordan Janeiro Lopes da Silva
Thanks a lot for your explanation, now I can se the light :-) Best Regards, Jordan Janeiro Telemídia - PUC-Rio -- Original Message --- From: Dave Shield <[EMAIL PROTECTED]> To: Jordan Janeiro Lopes da Silva <[EMAIL PROTECTED]> Cc: [email protected] Sent: Tue,

Re: trapd authorization hacks (again)

2005-10-21 Thread Wes Hardaker
> On Fri, 21 Oct 2005 10:36:11 +0100, Dave Shield <[EMAIL PROTECTED]> said: Dave> I don't think it's fair to add this sort of new functionality, Dave> and then *immediately* go into pre-release mode. Which means your belief is that feature freeze should actually begin before the first pre-rel

Re: state of the trapd auth speech

2005-10-21 Thread Wes Hardaker
> On Fri, 21 Oct 2005 10:42:00 +0100, Dave Shield <[EMAIL PROTECTED]> said: >> setaccess limitedgroup "" v2c noAuthNoPriv prefix log anything Dave> What is this access view being applied to? Dave> The OID of the trap? Dave> The OIDs of the payload varbinds? Dave> Or both? Sorry. That would

Re: Endian - ness issue

2005-10-21 Thread Robert Story
On Fri, 21 Oct 2005 13:32:37 +0100 Dave wrote: DS> So bearing in mind that most of the building routines come in pairs DS> (and ignoring the debug output call), it's actually equally split DS> between integer and string-based interpretation of the value! I was afraid of that. DS> It would be quit

Re: I really hate double-negatives (getKstatInt)

2005-10-21 Thread Robert Story
On Fri, 21 Oct 2005 10:01:48 +0100 Dave wrote: DS> if (getKstatInt("unix", "system_misc", "nproc", &nproc) != 0) DS> DS> This doesn't rely on the particular semantics of mapping numeric DS> values to true/false. DS> DS> (There's also an good argument for putting the constant first, DS> though

Re: Endian - ness issue

2005-10-21 Thread Dave Shield
On Fri, 2005-10-21 at 11:41 -0400, Robert Story wrote: > We also have to decide here if the integer is host or network byte order. My > preference would be network, since that what most of the routines that work > with sockaddr_in, in_addr, etc expect and return. I agree. Dave --

Re: I really hate double-negatives (getKstatInt)

2005-10-21 Thread Dave Shield
On Fri, 2005-10-21 at 11:52 -0400, Robert Story wrote: > DS> It's your code, Bruce. > DS> As long as it works correctly, nobody is going to pull rank and > DS> override you. > > That's not true. The reason he's asking here is that he checked in new code > during the rc phase of a release. Everyone

Re: patch: Linux udpTable IP address byte order fix

2005-10-21 Thread Dave Shield
On Fri, 2005-10-21 at 15:54 +0200, Thomas Anders wrote: > I'd have no major problem leaving the (IMHO superfluous) > > pcb.inp_fport = htons(pcb.inp_fport); > > line in (and eliminate it *post* 5.2.2) if that addresses some concerns. No - that's fine. My concern was that I didn't unde

Re: patch: Linux udpTable IP address byte order fix

2005-10-21 Thread Thomas Anders
Dave Shield wrote: This patch isn't quite as trivial as some other "last minute" fixes. But it seems sensible enough, and given that we'll need another cycle at RC-status anyway, I'm happy to vote that it should go in. I'd have no major problem leaving the (IMHO superfluous) pcb.inp_

Re: patch: Linux udpTable IP address byte order fix

2005-10-21 Thread Dave Shield
On Thu, 2005-10-20 at 19:44 +0200, Thomas Anders wrote: > the attached patch finally fixes the infamous IP address byte order bug > for udpTable also (and cleans up what looks like a copy-n-paste leftover > from tcpTable that's not used anywhere else). The patch has already been > put into MAIN

Re: Endian - ness issue

2005-10-21 Thread Dave Shield
On Thu, 2005-10-20 at 08:20 -0700, Wes Hardaker wrote: > > On Thu, 20 Oct 2005 10:30:07 +0100, Dave Shield <[EMAIL PROTECTED]> > > said: > > Dave> So the "natural" representation of an IP address (on Linux, at least) > Dave> *is* an integer. Though that header file doesn't seem to indic

Re: rfc: new snmpusm flag to specify usmUserEngineID?

2005-10-21 Thread Dave Shield
On Fri, 2005-10-21 at 11:59 +0200, Thomas Anders wrote: > snmpusm currently uses the contextEngineID of the agent (either > probed or specified via -E) to build the index for the usmUserTable. > There IMHO should be a new (optional) flag/parameter to snmpusm to > specify this usmUserEngineID...

rfc: new snmpusm flag to specify usmUserEngineID?

2005-10-21 Thread Thomas Anders
-Coders, snmpusm currently uses the contextEngineID of the agent (either probed or specified via -E) to build the index for the usmUserTable. However, as outlined in Bug #1333655 (http://sf.net/support/tracker.php?aid=1333655), this isn't always appropriate, e.g. when manipulating snmptrapd's

Re: state of the trapd auth speech

2005-10-21 Thread Dave Shield
On Thu, 2005-10-20 at 22:56 -0700, Wes Hardaker wrote: > view anything included .1.3 > # exclude coldstart > view anything excluded .1.3.6.1.6.3.1.1.5.1 > setaccess limitedgroup "" v2c noAuthNoPriv prefix log anything What is this access view being applied to? The OID of the trap? The OIDs of

Re: trapd authorization hacks (again)

2005-10-21 Thread Dave Shield
> Dave> So I presume we're looking at 5.3.pre1 being next Friday, > Dave> rather than tomorrow then? Which suits me fine - I just > Dave> wasn't sure what had been decided. > > I think I can have it done by tomorrow. Yes - but the rest of us need some time to look at what you've done, and offer

Re: I really hate double-negatives (getKstatInt)

2005-10-21 Thread Thomas Anders
Bruce Shaw wrote: I propose to change it to: (OK, I'm lying. I already changed it and I'm trying to avoid getting it yanked) if (getKstatInt("unix", "system_misc", "nproc", &nproc)) ...which I've tested and works just fine for me. Could I have some votes please? If Niels' patch will make it

Re: encoding logic of Counter64 in ber format

2005-10-21 Thread Dave Shield
On Thu, 2005-10-20 at 19:21 -0700, mahua dutta wrote: > I am using one smux based sub-agent which connects to snmpd > (master agent) > If I change the data type to Counter64 , it does not work. No - it wouldn't. SMUX was defined in 1991, and was based on SNMPv1. Counter64 was introduced as par

Re: encoding logic of Counter64 in ber format

2005-10-21 Thread Dave Shield
On Thu, 2005-10-20 at 18:51 -0700, mahua dutta wrote: > In net-snmp source code , where can I find the encoding logics. snmplib/asn1.c > Specially how to encode Counter64 and Displaystring. Note that DisplayString is simply a particular type of OCTET STRING. There's no special encoding

Re: I really hate double-negatives (getKstatInt)

2005-10-21 Thread Dave Shield
On Thu, 2005-10-20 at 16:23 -0600, Bruce Shaw wrote: > The one > place where I did call it correctly in hindsight looks kind of > bass-ackwards: > > if (!getKstatInt("unix", "system_misc", "nproc", &nproc)) > > ...or in other words "if not kstat didn't work" with is a double-negative. This sty

Re: libnetsnmp 5.1.2 linking problems

2005-10-21 Thread Thomas Anders
Radek Vokál wrote: seems some libs need to add other shared libs at link time for a few things: [EMAIL PROTECTED] ~]$ ldd -r /usr/lib/libnetsnmp.so.5.1.2 ldd: warning: you do not have execution permission for `/usr/lib/libnetsnmp.so.5.1.2' undefined symbol: EVP_DigestInit(/usr/lib/libnet

libnetsnmp 5.1.2 linking problems

2005-10-21 Thread Radek Vokál
Hi, seems some libs need to add other shared libs at link time for a few things: [EMAIL PROTECTED] ~]$ ldd -r /usr/lib/libnetsnmp.so.5.1.2 ldd: warning: you do not have execution permission for `/usr/lib/libnetsnmp.so.5.1.2' undefined symbol: EVP_DigestInit(/usr/lib/libnetsnmp.so.5.1.2)