Re: Netsnmp Security issue

"Dave Shield" <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
2008/7/31 Joan Landry <[email protected]>:
> Why should the -I option have an impact on the master agent doing
> authentication?

Because the authentication and access control functions are
implemented as (optional) modules.   If you omit these module
from the master agent, then it won't do authentication/access control.

>  If I add any of the vacm tables I get:
> getaddrinfo: vacmContextTable Name or service not known

What were the exact module(s) that you added?

I *think* that you just need 'vacm_context' to have the agent
handle access control.   If you want to configure this via the
snmpd.conf file, then you need to activate 'vacm_conf'
If you want to query/configure this information via the MIB
tables, then you need to activate 'vacm_vars'.

You may/may not need to add some of the usm*  modules
as well.   I haven't tried playing with this myself, but try
adding all of these six, and then whittle down until you get
the minimal acceptable working set.

It might also be useful if you could feed back your discoveries
so that others can learn from your experiences.

Dave

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.