Re: rwcommunity in snmpd.conf ignored by snmpd ("unknown token" in debug output)

On 14/04/2008, Paul Cerqua <[email protected]> wrote:
> I thought about the unprintable characters, too; does it make sense that I
> would get similar messages (except that they reference "memory") when using
> --rwcommunity="prince" on the command line?

No :-(


> > What does the command
> >
> > sed -n 126p /etc/snmp/master/snmpd.conf | cat -vte
> >
> > display?
>
> rwcommunity  prince$

That looks right.


> [In the snmpd.conf file, that line looks like:   rwcommunity  prince   <--
> no $.]

Yup - that's the effect of "cat -e" - it marks the end of the line.
(So you can spot trailing whitespace)



> > Also, how are you starting the agent?
> > What's the exact command that you invoke?
> >
>
> Including the debug info, it looks like:
>
> daemon /usr/sbin/snmpd -DALL -Lf /var/log/snmpdmaster.log $OPTIONS
> $IPADDR:161
>
> where:
>
> OPTIONS="-LS 3 d -Lf /dev/null -p /var/run/snmpdmaster -a -I smux"


> Hmmm....  You may have hit on something here.  I'm suspicious of that "-I
> smux";

That would probably break things, yes.
The "-I" flag says  "initialise the specified modules (and no others)".

So  "-I smux" means "initialise SMUX support, but nothing else",
and will therefore turn off *all* the access control settings.

(This probably isn't sensible, and we may need to review how the
"core" agent functionality is handled.   But that's how it works)

 I added that months ago and I can't remember why.  I think I was
> trying to make it forget about all the MIBs it knows about (since I'm
> servicing them another way).

The safest approach would probably be to build a minimal agent
(plus SMUX support) - i.e. turning off the unwanted MIBs at
compile time, rather than run-time.

Dave

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users