Re: Querying extended MIB , Permission denied

Jatin Davey <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
On 5/25/2010 1:53 PM, Dave Shield wrote:
> On 25 May 2010 09:08, Jatin Davey<[email protected]>  wrote:
>    
>>> What are the permissions on the extend scripts on the remote machine?
>>>        
>> [Jatin] I have given all permissions to all types of users but still i am
>> getting the same error.
>>      
> So
>      ls -l /home/proc_threads/xxx_script
>            shows
>
> -rwxr-xr-x .....   /home/proc_threads/xxx_script
>
> Correct?
>    
[Jatin] correct.
>
>
>    
>>> What happens if you try to run this manually on that box?
>>>     (i.e. not via snmpd)
>>>        
>> [Jatin] When i run manually on the remote box i get the correct output.
>>      
> Good.
>
> Is this running as root, or as a non-privileged user?
>    
[Jatin] When i ran this command on the remote host i ran it by logging 
into the system as root.
> If as root, what happens if you run as a normal user?
> In particular, what happens if you run as the user that snmpd is running as?
>    
[Jatin] To both the above questions i have no clue , Could you tell me 
how to find out the user being used by the snmpd daemon and how do i run 
the same command by logging into the sytstem with that user.
>
>
>    
>>> What happens if you issue a "snmpwalk" command on the extend tables?
>>>    (from the Nagios server)
>>> Do you see the expected output or not?
>>>        
>> [Jatin] When i run from the nagios server i get the error message
>> "Permission denied"
>>      
>
> So
>       "snmpwalk -v 2c -c xxxx  XXXX NET-SNMP-EXTEND-MIB::nsExtendObjects"
>
> gives "Permission denied" - nothing else?
>    
[Jatin] Output from the nagios server when i use the check_snmp plugin 
to retrieve the extended MIB data is :
[root@pc-fedora-1 libexec]# ./check_snmp -H x.x.x.x -C xxxx -o extOutput.1
SNMP OK - /home/xxx_xxx/xxxx: Permission denied |

Output from the command mentioned above (snmpwalk command) when i 
execute from the Nagios server is :
[root@pc-fedora-1 libexec]# snmpwalk -v 2c -c public 171.69.37.175 
NET-SNMP-EXTEND-MIB::nsExtendObjects
NET-SNMP-EXTEND-MIB::nsExtendObjects = No more variables left in this 
MIB View (It is past the end of the MIB tree)


> What happens if you issue this command from the remote system itself?
>    
[Jatin] snmpwalk command is not found on the remote system. I have just 
installed the snmpd agent and nothing else on the remote box as it 
satisfies my monitoring requirments.
> What about from another system on the network?
>    
[Jatin] Getting same message as mentioned above (the second message) 
when executed from other systems in the network.
> What are the full access control settings in the snmpd.conf file on
> the offending system?
>
>
>
>    
>>> Can you see anything from the offending system?  (e.g. walking system)
>>>        
>> [Jatin] I have the snmpd daemon configured for ifMIb and HOST-RESOURCES-MIB
>> and the host returns correct values for them. I have also added the extended
>> MIB in the snmpd.conf file so that i can query it.
>>      
> It would definitely be worth seeing the snmpd.conf file,
> so we can confirm there's nothing wrong there.
>    
[Jatin] I dont think there would be anything wrong here as i follow the 
same set of steps on all the boxes to deploy the script. Anyways i will 
paste them here:
view    systemview    included   .1.3.6.1.2.1.1
view    systemview    included   .1.3.6.1.2.1.25
view    systemview    included   .1.3.6.1.2.1.2
view    systemview    included   .1.3.6.1.4.1.2021

I only use the view access control and no else configuration is done.
>
>
> Dave
>
>    

Thanks
Jatin

------------------------------------------------------------------------------

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.