RE: SNMPD ignores community string in set/get requests

Dudi Bickel <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
Hi Dave,
Thanks for your detailed answer, I see the point. I tried -I kuku,vacm_vars but I didn't work, still no authentication check.
But I'm using now -I -ifTable:ifXTable:system_mib and it works for me fine.

Thanks again,
Dudi.


-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Dave Shield
Sent: Wednesday, January 02, 2013 10:25 AM
To: Dudi Bickel
Cc: [email protected]
Subject: Re: SNMPD ignores community string in set/get requests

On 2 January 2013 07:20, Dudi Bickel <[email protected]> wrote:
>  I notice that when calling the SNMPD with -I flag with 'whatever' it
> causes the SNMPD to turn off authentication check. Meaning when
> running snmp like this /usr/sbin/snmpd -T 120 -Ln -I kuku ,
> Every community for get or set will work.
> Is it supposed to be like this?

If you give the option  -I{tokens}
then you are telling the agent to initialise these modules
  (and these modules only)

If you give the option  -I-{tokens}
then you are telling the agent to initialise everything *except* these modules

In the second case  (which is what you seemed you be using earlier),
anything that isn't explicitly mentioned will be left active.  In particular,
the access control code will be included unless you explicitly turn it off.

  But with the first approach,  the access control code will only be
activated if you explicitly include it in the list of modules to initialise.
Try
    /usr/sbin/snmpd -T 120 -Ln -I kuku,vacm_vars


Dave
This email message and any attachments are intended solely for the use of the addressees hereof. 
This message and any attachments may contain information that is confidential, privileged and exempt from disclosure under applicable law.
If you are not the intended recipient of this message, you are prohibited from reading, disclosing, reproducing, distributing, disseminating or otherwise using this transmission.
If you have received this message in error, please promptly notify the sender at Ceragon by reply E-mail and immediately delete this message from your system.


------------------------------------------------------------------------------
Master Java SE, Java EE, Eclipse, Spring, Hibernate, JavaScript, jQuery
and much more. Keep your Java skills current with LearnJavaNow -
200+ hours of step-by-step video tutorials by Java experts.
SALE $49.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122612 
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.