Re: Proxy question

2007-05-01 Thread Byron Schlemmer
On 4/26/07, Dave Shield [EMAIL PROTECTED] wrote:
 On 26/04/07, Byron Schlemmer [EMAIL PROTECTED] wrote:
  I've got the following line in my proxy servers snmpd.conf file :
 
  proxy -Cn remoteserver1 -v 1 -c public remoteserver1 .1.3
 
  Should I be able to do :
 
  snmpwalk -v 1 -c public -n remoteserver1 proxyserver system

 No.
 The '-n' flag to specify a non-default context is only applicable to
 SNMPv3.   The community-based versions (v1  v2c) use the
 community string for this purpose.

 Try
 snmpwalk -v 1 -c remoteserver1 proxyserver system


 Note that the '-c {name}' value in the snmpwalk request
 should match the '-Cn {name}' value in the proxy directive.

 This does not have to be the same as the community name
 used for communicating between the proxy and remote
 servers  ('-n {name}' in the proxy directive).
   But the remote server must be configured to accept requests
 from the proxy server using this internal community name
 (public in the example above).

Hi Dave,

Thanks for clearing that up.

Should the proxy directive work with version 5.1?

Reason being I've got the following snmpd.conf on remoteserver 1 :

rocommunity public
rwcommunity private

Then on proxyserver :

rocommunity public
rwcommunity private

proxy -Cn remoteserver1 -v 1 -c public remoteserver1 .1.3

Then issuing snmpwalk -v 1 -c remoteserver1 proxyserver system from
a third host I see the following in the logs :

mibII/vacm_vars: vacm_in_view: ver=0, community=remoteserver1
mibII/vacm_vars: vacm_in_view: No security name found

Now upgrading to 5.4 and following the advice here :

http://www.freesnmp.com/net-snmp/faqs/index.html#v1proxy

Does work. However this means upgrading to 5.4, which I'd like to
avoid if possible. (It's a RHEL4 system - a few dependencies that I'd
have to fix as a result).

Unfortunately the advice at the URL above doesn't work on 5.1 as the
com2sec directive doesn't seem to understand -Cn

Is there anything you could recommend or am I SOL?

Many thanks,

-- 

- Byron

-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Proxy question

2007-05-01 Thread Les Mikesell
Byron Schlemmer wrote:
 
 Now upgrading to 5.4 and following the advice here :
 
 http://www.freesnmp.com/net-snmp/faqs/index.html#v1proxy
 
 Does work. However this means upgrading to 5.4, which I'd like to
 avoid if possible. (It's a RHEL4 system - a few dependencies that I'd
 have to fix as a result).
 

The RPM version on sourceforge dropped in OK on a CentOS4 box.  I'd 
expect it to work on RHEL unless something else isn't up to date.

-- 
   Les Mikesell
   [EMAIL PROTECTED]


-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Proxy question

2007-05-01 Thread Dave Shield
On 01/05/07, Byron Schlemmer [EMAIL PROTECTED] wrote:
 Should the proxy directive work with version 5.1?

The proxy directive will work with v5.1,
but the community/context selection stuff won't.

The facility to map from a particular community to a non-default
context was first added to the 5.2.x line.
  (See SVN revision 10797,  2004-July-30)

Dave

-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Proxy question

2007-05-01 Thread Byron Schlemmer
On 5/1/07, Dave Shield [EMAIL PROTECTED] wrote:
 On 01/05/07, Byron Schlemmer [EMAIL PROTECTED] wrote:
  Should the proxy directive work with version 5.1?

 The proxy directive will work with v5.1,
 but the community/context selection stuff won't.

 The facility to map from a particular community to a non-default
 context was first added to the 5.2.x line.
   (See SVN revision 10797,  2004-July-30)

What does this mean though? That proxy will only work in 5.1 for a single host?
-- 

- Byron

-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Proxy question

2007-05-01 Thread Dave Shield
On 01/05/07, Byron Schlemmer [EMAIL PROTECTED] wrote:
  The facility to map from a particular community to a non-default
  context was first added to the 5.2.x line.
(See SVN revision 10797,  2004-July-30)

 What does this mean though? That proxy will only work in 5.1 for a single 
 host?

No.

It means that if you want to proxy the same OID subtree from multiple hosts,
you must either:
   a)  Use SNMPv3 (which supports non-default contexts as standard)
or
   b)  Use the proxy directive to re-map them into separate locations
in the visible OID tree.


For example, you could use the proxy mechanism to re-map

 .1.3.6.1.2.1  on hostA  into  .1.3.6.1.4.1.9.65
and
 .1.3.6.1.2.1  on hostB  into  .1.3.6.1.4.1.9.66

You management application would need to be configured so that
it knew how to interpret these private OIDs, of course.  But it
would still work with v5.1

If this sort of re-mapping isn't an option, then you'd either need
to use SNMPv3, or upgrade.

Dave

-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Proxy question

2007-04-26 Thread Byron Schlemmer
Hi all,

I'm attempting to get SNMP proxying working and I've either got
something misconfigured or don't understand how the feature works.

I've got the following line in my proxy servers snmpd.conf file :

proxy -Cn remoteserver1 -v 1 -c public remoteserver1 .1.3

Should I be able to do :

snmpwalk -v 1 -c public -n remoteserver1 proxyserver system

and get the system snmp information from remoteserver1? Is this how
the proxy feature is intended to work? As the results I actually
receive are for proxyserver itself?

Thanks,

-- 

- Byron

-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Proxy question

2007-04-26 Thread Dave Shield
On 26/04/07, Byron Schlemmer [EMAIL PROTECTED] wrote:
 I've got the following line in my proxy servers snmpd.conf file :

 proxy -Cn remoteserver1 -v 1 -c public remoteserver1 .1.3

 Should I be able to do :

 snmpwalk -v 1 -c public -n remoteserver1 proxyserver system

No.
The '-n' flag to specify a non-default context is only applicable to
SNMPv3.   The community-based versions (v1  v2c) use the
community string for this purpose.

Try
snmpwalk -v 1 -c remoteserver1 proxyserver system


Note that the '-c {name}' value in the snmpwalk request
should match the '-Cn {name}' value in the proxy directive.

This does not have to be the same as the community name
used for communicating between the proxy and remote
servers  ('-n {name}' in the proxy directive).
  But the remote server must be configured to accept requests
from the proxy server using this internal community name
(public in the example above).


Dave

-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Proxy Question

2004-07-30 Thread Wes Hardaker
 On Thu, 29 Jul 2004 02:10:24 + (GMT),  [EMAIL PROTECTED] said:

hoil I wish to implement proxy supporting, using Community
hoil Field(SNMPv2).

This is not possible in the currently released Net-SNMP packages.

hoil Originally, SNMPv3 supports Proxy Agent using ContextName.
hoil Instead, I wish to using Community Name in SNMPv2.

hoil When this function will be supported?

I just implemented it for what will be Net-SNMP 5.2.  Please check out
the CVS sources if you want to play with it now.  The com2sec tokens
now support a -Cn flag which maps a community string to a SNMPv3
context, and thus you can use the same context in the proxy -Cn flag
and it should do what you want.

-- 
Wes Hardaker
Sparta


---
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
___
Net-snmp-users mailing list
[EMAIL PROTECTED]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Proxy Question

2004-07-28 Thread
Hi,

I wish to implement proxy supporting, using Community Field(SNMPv2).

At first, I tried to find Community Field parsing function in net-snmp-5.1.1.
As result, I found that function is located in snmp_auth.c(snmp_comstr_parse()).
Currently, I tried to mapping Community Name with Remote Agent Community Name.

  EMS Server
  |
  |
  proxy Agent(Front-End Proxy)
  |
  | 
 
 |  |  |
 |  |  | 
Agent1(Community Name)   Agent2 Agent3...


Originally, SNMPv3 supports Proxy Agent using ContextName.
Instead, I wish to using Community Name in SNMPv2.

When this function will be supported?

Or How can I codding the source?(Frist How TO)

I want to know various tips.


Best Regard,

Hoil - Oh.





---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721alloc_id=10040op=click
___
Net-snmp-users mailing list
[EMAIL PROTECTED]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users