RE: rwcommunity in snmpd.conf ignored by snmpd ("unknown token" in debug output)

Thanks, Dave.  I added "-I vacm_conf" to my command line and I now get the community behavior that I expect!  (I removed the reference to smux; we're an AgentX shop now  :-) )

I'll look into the minimal agent approach as well.

   - Paul



> Date: Mon, 14 Apr 2008 15:44:06 +0100
> From: [email protected]
> To: [email protected]
> Subject: Re: rwcommunity in snmpd.conf ignored by snmpd ("unknown token" in	debug output)
> CC: [email protected]
> 
> On 14/04/2008, Paul Cerqua <[email protected]> wrote:
> > I thought about the unprintable characters, too; does it make sense that I
> > would get similar messages (except that they reference "memory") when using
> > --rwcommunity="prince" on the command line?
> 
> No :-(
> 
> 
> > > What does the command
> > >
> > > sed -n 126p /etc/snmp/master/snmpd.conf | cat -vte
> > >
> > > display?
> >
> > rwcommunity  prince$
> 
> That looks right.
> 
> 
> > [In the snmpd.conf file, that line looks like:   rwcommunity  prince   <--
> > no $.]
> 
> Yup - that's the effect of "cat -e" - it marks the end of the line.
> (So you can spot trailing whitespace)
> 
> 
> 
> > > Also, how are you starting the agent?
> > > What's the exact command that you invoke?
> > >
> >
> > Including the debug info, it looks like:
> >
> > daemon /usr/sbin/snmpd -DALL -Lf /var/log/snmpdmaster.log $OPTIONS
> > $IPADDR:161
> >
> > where:
> >
> > OPTIONS="-LS 3 d -Lf /dev/null -p /var/run/snmpdmaster -a -I smux"
> 
> 
> > Hmmm....  You may have hit on something here.  I'm suspicious of that "-I
> > smux";
> 
> That would probably break things, yes.
> The "-I" flag says  "initialise the specified modules (and no others)".
> 
> So  "-I smux" means "initialise SMUX support, but nothing else",
> and will therefore turn off *all* the access control settings.
> 
> (This probably isn't sensible, and we may need to review how the
> "core" agent functionality is handled.   But that's how it works)
> 
>  I added that months ago and I can't remember why.  I think I was
> > trying to make it forget about all the MIBs it knows about (since I'm
> > servicing them another way).
> 
> The safest approach would probably be to build a minimal agent
> (plus SMUX support) - i.e. turning off the unwanted MIBs at
> compile time, rather than run-time.
> 
> Dave
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
> Don't miss this year's exciting event. There's still time to save $100. 
> Use priority code J8TL2D2. 
> http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
> _______________________________________________
> Net-snmp-users mailing list
> [email protected]
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
> 

_________________________________________________________________
Use video conversation to talk face-to-face with Windows Live Messenger.
http://www.windowslive.com/messenger/connect_your_way.html?ocid=TXT_TAGLM_WL_Refresh_messenger_video_042008

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users