Re: SNMP error code capture ??
"Dave Shield" <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <[email protected]> |
On 01/02/07, sarathy <[email protected]> wrote: > - If the isAccessAllowed ASI returns a noSuchView, noAccessEntry, > or noGroupName error > This states that when the agent tries to authorize the request, it returns > "authorizationError" code in case of failure .... I can confirm that when the agent receives a request where there is no relevant "group" or "access" line in the snmpd.conf file, then it does indeed return "authorizationError". I'm not sure about "noSuchView" - initial tests seems to indicate that listing a non-existent view in the access line results in a "noSuchObject" exception. I'd need to re-read the specs to check the exact meaning of "noSuchView". But the other two do seem to be being handled OK. I believe that the SNMPv3 example you mentioned earlier (wrong passphrase) isn't relevant here. That would result in the PDU not being decoded at all (since the digital signature wouldn't match). The agent should then return a Report PDU (rather than a Response) containing "authenticationFailure" (not "authorizationError"). See RFC 3414 section 3.2. Checking this situation, it's reported by the command-line tools as "snmpget: Authentication failure (incorrect password, community or key)" So that seems to be being handled sensibly too. Dave ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier. Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users