RE: Windows authentication failure traps

Hi Dave,

Thanks for the clarification.

Glenn

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Dave Shield
Sent: 11 February 2010 14:07
To: Glenn Macgregor
Cc: [email protected]
Subject: Re: Windows authentication failure traps

On 11 February 2010 13:07, Glenn Macgregor <[email protected]> wrote:
> I am using net-snmp 5.1.2 to receive traps and forward them as emails using
> the traptoemail script. Everything is working great except it seems windows
> boxes send authentication failure traps as some kind of enterprise specific
> "specific" trap.

No - they seem to be sending them as normal SNMPv1 authentication
failure traps, complete with an (enterprise-specific) "enterprise OID".

Check the structure of an SNMPv1 trap packet.
This is perfectly normal.


> The problem is I have a default traphandle which is forwarding these traps
> to email by the thousands, I know I can turn that trap sending off in
> windows but I would like to have a failsafe as well. I can't seem to figure
> out how to define the OID in the traphandle statement to catch this specific
> trap.

Use the standard (SNMPv2) OID for this notification -
SNMPv2-MIB::authenticationFailure

Dave

------------------------------------------------------------------------------
SOLARIS 10 is the OS for Data Centers - provides features such as DTrace,
Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
http://p.sf.net/sfu/solaris-dev2dev
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users