strange snmpd.conf behaviour

2008-04-18 Thread Alejandro Islas
Hi, I'm installing snmpd on a Debian 4.0 server. I installed it, modify its snmpd.conf file,append my dlmods definitions and launched it using /usr/sbin/snmpd. I tried to read some private mibs I developed from a remote computer and everything seems to be working fine. However, when I launch snmpd

Re: SNMP-COMMUNITY-MIB security question

2008-04-18 Thread Dave Shield
On 18/04/2008, Emi Yanagi <[EMAIL PROTECTED]> wrote: > What data structure(s) or field(s) I should look into? > Or are you talking about snmpd.conf configuration? Yes - I'm talking about the snmpd.conf access control settings. Define a view that excludes the snmpCommunityTable. Then configure "

RE: SNMP-COMMUNITY-MIB security question

2008-04-18 Thread Emi Yanagi
Hi Dave, Please be nice;-) and give me more details on those two lines. I have no clue what I suppose to do. What data structure(s) or field(s) I should look into? Or are you talking about snmpd.conf configuration? Thank you very much for your support. Emi -Original Message- From: [EMAI

Re: SNMP-COMMUNITY-MIB security question

2008-04-18 Thread Dave Shield
On 18/04/2008, Emi Yanagi <[EMAIL PROTECTED]> wrote: > It seems there could be a security hole in snmpCommunityTable. What if a > user who only has access to read-only community name "public", used it to > walk through snmpCommunityName, which would also populate the read-write > community name "p

SNMP-COMMUNITY-MIB security question

2008-04-18 Thread Emi Yanagi
Dear net-snmp-coders, I have a question on SNMP-COMMUNITY-MIB security that I need you experts' advice. It seems there could be a security hole in snmpCommunityTable. What if a user who only has access to read-only community name "public", used it to walk through snmpCommunityName, which w

Re: 5.4.1 won't talk

2008-04-18 Thread Larry Dickson
Hi all, Thanks to your help I got it talking... The new NetSNMP::agent call was BEFORE the new NetSNMP::OID call(s) in pass.pm. When I adjusted the code to make this true in our subagent, it started talking. There are other problems, but they are minor in comparison... Thanks again, Larry On 4/

Re: 5.4.1 won't talk

2008-04-18 Thread Larry Dickson
PROGRESS! ... There is an error in your "pass.pm" file, line 56. Instead of @inputs = (); it should have @inputs = @ARGV; because the way it is it never sees anything. After fixing that error everything works. Now I just have to figure out why my subagent never triggers the connection - even w

Re: 5.4.1 won't talk

2008-04-18 Thread Larry Dickson
I'm assuming that being root means you have permissions for everything. But it does not seem to work. I ran your snmpd.conf with the following changes: (1) replaced your 10.11.0.0 with our 192.168.1.0 (2) commented out the perl do line. The snmpd version is standard version 5.4.1 from the tar.gz f

Re: 5.4.1 won't talk

2008-04-18 Thread Dirk-Willem van Gulik
On Apr 18, 2008, at 6:05 PM, Larry Dickson wrote: > Thank you, Dw. I will see if it works. I notice that embedded perl > and subagent are treated as mutually exclusive, so I will strip out > the embedded perl line from the snmpd.conf. Yes and no - as an instance - it is mutually exclusive -

Re: 5.4.1 won't talk

2008-04-18 Thread Larry Dickson
Thank you, Dw. I will see if it works. I notice that embedded perl and subagent are treated as mutually exclusive, so I will strip out the embedded perl line from the snmpd.conf. Also, there appears to be no "pass.conf" so I will omit that. I also notice that it talks about 5.3.1 and says /var/agen

Re: 5.4.1 won't talk

2008-04-18 Thread Dirk-Willem van Gulik
On Apr 18, 2008, at 4:25 PM, Larry Dickson wrote: > Thanks, Thomas. Our code (subagent) is 7860 lines long, so I think > it would be better going in the other direction - to post me a working .. > > Going on, I discovered man/snmpd.examples.5 suggested putting single Just in case this helps

Re: 5.4.1 won't talk

2008-04-18 Thread Larry Dickson
Thanks, Thomas. Our code (subagent) is 7860 lines long, so I think it would be better going in the other direction - to post me a working subagent, with config files, no matter how simple, because our problem is lack of communication. The critical stuff is in the 6th email of this thread (Apr 16 10

[ net-snmp-Bugs-1814048 ] snmpgetnext bug on "no instance" object

2008-04-18 Thread Emi Yanagi
Hi Dave, I saw you opened Bugs item #1814048. Is there any update on this one: https://sourceforge.net/tracker/?func=detail&atid=112694&aid=1814048&gro up_id=12694 Thanks Emi -Original Message- From: Emi Yanagi Sent: Tuesday, April 15, 2008 4:21 PM To: 'Magnus Fromreide' Cc: net-snmp-cod