Thanks, Dave. I added "-I vacm_conf" to my command line and I now get the
community behavior that I expect! (I removed the reference to smux; we're an
AgentX shop now :-) )
I'll look into the minimal agent approach as well.
- Paul
> Date: Mon, 14 Apr 2008 15:44:06 +0100
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: Re: rwcommunity in snmpd.conf ignored by snmpd ("unknown token" in
> debug output)
> CC: [email protected]
>
> On 14/04/2008, Paul Cerqua <[EMAIL PROTECTED]> wrote:
> > I thought about the unprintable characters, too; does it make sense that I
> > would get similar messages (except that they reference "memory") when using
> > --rwcommunity="prince" on the command line?
>
> No :-(
>
>
> > > What does the command
> > >
> > > sed -n 126p /etc/snmp/master/snmpd.conf | cat -vte
> > >
> > > display?
> >
> > rwcommunity prince$
>
> That looks right.
>
>
> > [In the snmpd.conf file, that line looks like: rwcommunity prince <--
> > no $.]
>
> Yup - that's the effect of "cat -e" - it marks the end of the line.
> (So you can spot trailing whitespace)
>
>
>
> > > Also, how are you starting the agent?
> > > What's the exact command that you invoke?
> > >
> >
> > Including the debug info, it looks like:
> >
> > daemon /usr/sbin/snmpd -DALL -Lf /var/log/snmpdmaster.log $OPTIONS
> > $IPADDR:161
> >
> > where:
> >
> > OPTIONS="-LS 3 d -Lf /dev/null -p /var/run/snmpdmaster -a -I smux"
>
>
> > Hmmm.... You may have hit on something here. I'm suspicious of that "-I
> > smux";
>
> That would probably break things, yes.
> The "-I" flag says "initialise the specified modules (and no others)".
>
> So "-I smux" means "initialise SMUX support, but nothing else",
> and will therefore turn off *all* the access control settings.
>
> (This probably isn't sensible, and we may need to review how the
> "core" agent functionality is handled. But that's how it works)
>
> I added that months ago and I can't remember why. I think I was
> > trying to make it forget about all the MIBs it knows about (since I'm
> > servicing them another way).
>
> The safest approach would probably be to build a minimal agent
> (plus SMUX support) - i.e. turning off the unwanted MIBs at
> compile time, rather than run-time.
>
> Dave
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
> Don't miss this year's exciting event. There's still time to save $100.
> Use priority code J8TL2D2.
> http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
> _______________________________________________
> Net-snmp-users mailing list
> [email protected]
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>
_________________________________________________________________
Use video conversation to talk face-to-face with Windows Live Messenger.
http://www.windowslive.com/messenger/connect_your_way.html?ocid=TXT_TAGLM_WL_Refresh_messenger_video_042008-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
