Re: SNMPGET specifying the community name

Thanks Dave.

Fair enough.
> But be aware that by running with such an obsolete version
> of the software, you are missing out on a *lot* of fixes
> (including a number of security-related issues).
>
> You should think about planning an upgrade to something
> a little newer when you have the time.
>
>  We are considering an upgrade to a newer version, but for now, due to
risks, we can't do it in a short period of time.

The most likely change would be SVN revision 10694
> (from July 2004).  See
>
> http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/trunk/net-snmp/agent/mibgroup/mibII/vacm_conf.c?r1=10540&r2=10694&view=patch
>
> Unfortunately, the version we are using now does not have the
vacm_conf.[ch] files yet.
I have found the problem though, in snmpUDPDomain.c file,
netsnmp_udp_parse_security()

*void netsnmp_udp_parse_security(const char *token, char *param);*

the 'param' parameter contains the secName, source and community values in
one string. I noticed that secName and community usually have the same
values. Eventually, 'param' is tokenized(with space delimeter) to extract
the secName, source and community individually. When the community name
contains spaces, the string is not tokenized well thus wrong values
extracted. If only the params are passed with proper quoting of the the
three variables, there won't be any problem.
I am still digging on where this 'param' paremeter is created and passed to
this function.
Do any of you know where the 'param' string is set?

I am also looking at vacm_createGroupEntry() in vacm.c since I cannot get
the proper groupName.

Thanks a lot!
-Irvs

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users