From: Joan L. <Joa...@ov...> - 2008-07-31 13:19:23
|
I do not want to deligate authentication to the sub agent. I want the master agent to do authentication. The problem is that by adding the -I option the master agent NO LONGER does authentication. My question is how do I get the master agent to do authentication and still use the -I option for the mib tables I specified? ./snmpd -f -Le -I snmpEngine,snmpMPDStats,at,ip,snmp_mib,tcp,icmp,udp,setSerialNo,ipCidrRo uteTable,tcpConnectionTable If I add any of the vacm tables I get: getaddrinfo: vacmContextTable Name or service not known Why should the -I option have an impact on the master agent doing authentication? According to the info from the documentation the -I option only specifies which modules should (or should not) be initialized when the agent starts up. It does not say it also shuts off authentication. Any help on this is greatly appreciated. -----Original Message----- From: dav...@go... [mailto:dav...@go...] On Behalf Of Dave Shield Sent: Thursday, July 31, 2008 8:18 AM To: Joan Landry Cc: net...@li... Subject: Re: Netsnmp Security issue 2008/7/31 Joan Landry <Joa...@ov...>: > I want netsnmp to handle certain parts of the mib tree so I start it > up with the following cmd line: [snip] > When I do this net-snmp ignores the authentication in the snmpd.conf > with respect to the users I allow access via the com2sec option. Authentication *must* be handled by the master agent - you can't delegate this to a subagent. Try adding the VACM module(s) to the list that you activate. Dave |