On Mon, Jul 19, 2010 at 7:09 PM, Steve DeLaney <onramp...@yahoo.com> wrote:
>
> I'm new to net-snmp and apologize in advance if this topic is already
> covered.
>
> But, running some recent tests I ran into this issue
>
>
> http://www.mail-archive.com/net-snmp-us...@lists.sourceforge.net/msg08476.html
>
> and this aspect is present in 5.5 and 5.6.pre2
> what we are after for our application is modify ARGS on the fly It seems
> to me that having baked in
> args in snmpd.conf is far to restrictive and it would be better to exploit
> the power of
> extend by allowing on-the-fly updates to arguments and input just like it
> was suggested
>
> > extend PS /bin/ps
> > snmpset .... hostname nsExtendArgs."PS" s "-aux"
> >snmpget .... hostname nsExtendOutputFull."PS"
>
> and it seems this can be easily fixed by allowing on-the-fly changes to
> ARGS and INPUT
> so I made a patch to agent/mibgroup/agent/extend.c and would like to submit
> it for consideration
> to include in 5.6
>
> Perhaps there are other ways this could be accomplished by changing the
> attribute to
> remove the NS_EXTEND_FLAGS_CONFIG but having tested out our patch it seems
> to
> be working OK.
>
> comments invited
>
Allowing on-the-fly changes of nsExtendArgs would have severe security
implications. My proposal for making on-the-fly argument specification
possible is as follows:
* Add a column in the nsExtendConfigTable with the purpose to allow
on-the-fly argument specification, e.g. a column with type OCTET STRING and
that triggers command execution when set.
* Make it possible to let the extend directive in snmpd.conf accept that
string, e.g. via a percent (%) code. Do this in such a way that extend
directives using the current extend format ignore any on-the-fly arguments.
Bart.
------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
