RE: Netsnmp Security issue

 
I do not want to deligate authentication to the sub agent.
I want the master agent to do authentication.

The problem is that by adding the -I option the master agent NO LONGER
does authentication.

My question is how do I get the master agent to do authentication and
still use the -I option for the mib tables I specified?
./snmpd -f -Le -I
snmpEngine,snmpMPDStats,at,ip,snmp_mib,tcp,icmp,udp,setSerialNo,ipCidrRo
uteTable,tcpConnectionTable

If I add any of the vacm tables I get:
getaddrinfo: vacmContextTable Name or service not known

Why should the -I option have an impact on the master agent doing
authentication?
According to the info from the documentation the -I option only
specifies  which  modules should (or should not) be initialized when the
agent starts up. It does not say it also shuts off authentication.

Any help on this is greatly appreciated. 


-----Original Message-----
From: [email protected] [mailto:[email protected]] On
Behalf Of Dave Shield
Sent: Thursday, July 31, 2008 8:18 AM
To: Joan Landry
Cc: [email protected]
Subject: Re: Netsnmp Security issue

2008/7/31 Joan Landry <[email protected]>:
> I want netsnmp to handle certain parts of the mib tree so I start it 
> up with the following cmd line:
    [snip]

> When I do this net-snmp ignores the authentication in the snmpd.conf 
> with respect to the users I allow access via the com2sec option.

Authentication *must* be handled by the master agent - you can't
delegate this to a subagent.
Try adding the VACM module(s) to the list that you activate.

Dave

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users