Re: Unknown token: smux

2008-04-08 Thread Dave Shield
On 08/04/2008, lanas [EMAIL PROTECTED] wrote:
  One question: I noticed that without openSSL net-snmp links against a
  GNU libcrypt.  And quagga does the same.  Does this mean - or for that
  matter in a general sense - that it is possible to have both net-snmp
  and ospfd talking to each other without SSL being in the way ?

The *only* things that the Net-SNMP toolkit uses the OpenSSL libraries
for are SHA-based authentication, and DES/AES encryption.
I.e. SNMPv3 auth and authPriv requests.

As far as SMUX communication between the Net-SNMP and quagga are
concerned, OpenSSL is simply not relevant.

(Note also that OpenSSL provides the 'crypto' library.   This is not the
same as the relatively basic GNU 'libcrypt'.  Don't confuse the two).

Dave

-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


RE: Unknown token: smux

2008-04-08 Thread Mike Ayers

 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On 
 Behalf Of lanas
 Sent: Monday, April 07, 2008 4:28 PM

 Yes, it was, after installing openSSL.  But I'm still getting the same
 darn communication failure error with ospfd although I have the two
 smuxpeer and 'smux peer' lines in both snmpd.conf and ospfd.conf.  I

Perhaps I am reading this incorrectly.  You do *not* have an 'smux 
peer' line in snmpd.conf, correct?


Thanks,

Mike
-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Unknown token: smux

2008-04-08 Thread lanas
Le Mardi, 8 Avril 2008 12:00:33 -0700,
Mike Ayers [EMAIL PROTECTED] a écrit :

 
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On 
  Behalf Of lanas
  Sent: Monday, April 07, 2008 4:28 PM
 
  Yes, it was, after installing openSSL.  But I'm still getting the
  same darn communication failure error with ospfd although I have
  the two smuxpeer and 'smux peer' lines in both snmpd.conf and
  ospfd.conf.  I
 
   Perhaps I am reading this incorrectly.  You do *not* have an
 'smux peer' line in snmpd.conf, correct?

The sequence of the two group of items follow the same order i.e.
smuxpeer belongs to snmpd and 'smux peer' to opsf.

I haven't seen the smux token error since I've made an installation, in
a brand new system, in /usr instead of the default /usr/local.  When
I'll have snmpd and ospfd talking together - if it is possible
- I'll rig up another same clean system to re-install snmpd at the
default location to see if the token error will re-appear.


-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Unknown token: smux

2008-04-07 Thread Dave Shield
On 07/04/2008, lanas [EMAIL PROTECTED] wrote:
  I would like to do a simple connection test with OSPF, forgetting about
  the license issue with OpenSSL.  Now, in order to do that, do I simply
  have to install SSL and then perhaps given net-snmp a compile option to
  find it ?

If you install the OpenSSL libraries (e.g. via the 'openssl-devel' RPM),
then a simple

 configure
 make
 make install

should be sufficient.
If configure can't find the OpenSSL libraries, then you can use '--with-openssl'
to tell it where to look.  But that shouldn't normally be necessary.

Dave

-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Unknown token: smux

2008-04-07 Thread lanas
Le Lundi, 07 Avril 2008 07:26:08 +0200,
Thomas Anders [EMAIL PROTECTED] a écrit :

 lanas wrote:
 
 I'm still trying to make OSPF talk with net-snmp, though.

 Could you try it on the VM system, please?

It gives the following:

-bash-3.2# cd /usr/sbin
-bash-3.2# ldd snmpd
libnetsnmpagent.so.15 = /usr/lib/libnetsnmpagent.so.15 (0x4001e000)
libnetsnmphelpers.so.15 = /usr/lib/libnetsnmphelpers.so.15 (0x40064000)
libnetsnmpmibs.so.15 = /usr/lib/libnetsnmpmibs.so.15 (0x40085000)
libnetsnmp.so.15 = /usr/lib/libnetsnmp.so.15 (0x401b4000)
libnsl.so.1 = /lib/libnsl.so.1 (0x4025e000)
libdl.so.2 = /lib/libdl.so.2 (0x40274000)
libm.so.6 = /lib/libm.so.6 (0x40278000)
libcrypt.so.1 = /lib/libcrypt.so.1 (0x4029e000)
libutil.so.1 = /lib/libutil.so.1 (0x402cc000)
libc.so.6 = /lib/libc.so.6 (0x402d)
/lib/ld-linux.so.2 (0x4000)

I would like to do a simple connection test with OSPF, forgetting about
the license issue with OpenSSL.  Now, in order to do that, do I simply
have to install SSL and then perhaps given net-snmp a compile option to
find it ?

Thanks,

Al

-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Unknown token: smux

2008-04-07 Thread Dave Shield
On 04/04/2008, lanas [EMAIL PROTECTED] wrote:
  [M1 cat snmpd.conf
[snip]
 smuxpeer .1.3.6.1.4.1.3317.1.2.5 quagga_ospfd


  [M1 ./snmpd -Dsmux,smux_init,smux_conf
line 14: Warning: Unknown token: smux.

The thing that strikes me about this is that your snmpd.conf
file contains (or at least appears to contain)  smuxpeer,
but the agent is complaining about the token smux.

I wonder whether there might be a non-printing character
in your snmpd.conf file - something like

smux ^Hpeer  .1.3.6.1.4.1.

See what
 cat -vt  snmpd.conf
   reports


Either that, or it's looking at a different snmpd.conf file.
snmpd -Dread_config    would indicate which file(s)
are actually being read in.   (Just in case they're not what
you expected).

Dave

-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Unknown token: smux

2008-04-07 Thread lanas
Le Lundi, 7 Avril 2008 12:22:40 +0100,
Dave Shield [EMAIL PROTECTED] a écrit :

 On 07/04/2008, lanas [EMAIL PROTECTED] wrote:
   I would like to do a simple connection test with OSPF, forgetting
  about the license issue with OpenSSL.  Now, in order to do that, do
  I simply have to install SSL and then perhaps given net-snmp a
  compile option to find it ?
 
 If you install the OpenSSL libraries (e.g. via the 'openssl-devel'
 RPM), then a simple
 
  configure
  make
  make install
 
 should be sufficient.

Yes, it was, after installing openSSL.  But I'm still getting the same
darn communication failure error with ospfd although I have the two
smuxpeer and 'smux peer' lines in both snmpd.conf and ospfd.conf.  I
must be missing something.  At least I know that net-snmp reads the
proper config file:

read_config: Reading configuration /usr/share/snmp/snmpd.conf
read_config: /usr/share/snmp/snmpd.conf:1 examining: syslocationRight here
read_config: Found a parser.  Calling it: syslocation / Right here
read_config: /usr/share/snmp/snmpd.conf:2 examining: syscontact [EMAIL 
PROTECTED]
read_config: Found a parser.  Calling it: syscontact / [EMAIL PROTECTED]
read_config: /usr/share/snmp/snmpd.conf:3 examining: rwcommunityprivate
read_config: Found a parser.  Calling it: rwcommunity / private
read_config: /usr/share/snmp/snmpd.conf:4 examining: rocommunitypublic
read_config: Found a parser.  Calling it: rocommunity / public
read_config: /usr/share/snmp/snmpd.conf:5 examining: authtrapenable 0
read_config: Found a parser.  Calling it: authtrapenable / 0
/usr/share/snmp/snmpd.conf: line 5: Error: authtrapenable must be 1 or 2
read_config: /usr/share/snmp/snmpd.conf:6 examining: trapcommunity  trapcomm
read_config: Found a parser.  Calling it: trapcommunity / trapcomm
read_config: /usr/share/snmp/snmpd.conf:7 examining: trapsink   
192.168.1.200
read_config: Found a parser.  Calling it: trapsink / 192.168.1.200
read_config: /usr/share/snmp/snmpd.conf:8 examining: trap2sink  
192.168.1.200
read_config: Found a parser.  Calling it: trap2sink / 192.168.1.200
read_config: /usr/share/snmp/snmpd.conf:9 examining: smuxpeer 
.1.3.6.1.4.1.3317.1.2.5 quagga_ospfd
read_config: Found a parser.  Calling it: smuxpeer / .1.3.6.1.4.1.3317.1.2.5 
quagga_ospfd
smux_conf: parsing registration for: .1.3.6.1.4.1.3317.1.2.5 quagga_ospfd
smux_conf: password is: quagga_ospfd
[...]
read_config: storing: engineBoots 4
read_config: storing: oldEngineID 0x80001f88802f324525891df847
snmpd: send_trap: Failure in sendto (Sub-id not found: enterprises - 5 
quagga_ospfd) (Network is unreachable)
snmpd: send_trap: Failure in sendto (Network is unreachable)


I presume the failure to sendto comes from the funny email address.
ospfd password seems OK.  netstat reports a listen on port 199.

One question: I noticed that without openSSL net-snmp links against a
GNU libcrypt.  And quagga does the same.  Does this mean - or for that
matter in a general sense - that it is possible to have both net-snmp
and ospfd talking to each other without SSL being in the way ?  If this
is a yes, then we can go forward with the project no matter how much
time it takes to make it working. 

Thanks.


-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Unknown token: smux

2008-04-06 Thread lanas
Le Samedi, 05 Avril 2008 15:56:36 +0200,
Thomas Anders [EMAIL PROTECTED] a écrit :

 lanas wrote:
  And then I chdir to /usr/local/sbin/ and:

  ./snmpd -Dsmux,smux_init,smux_conf
  
  [M1 /usr/local/share/snmp/snmpd.conf: line 14: Warning: Unknown
  token: smux.
 
 I cannot reproduce this over here. Are you sure you don't have any
 other net-snmp installation on your system? What's the output of
 
   ldd /usr/local/sbin/snmpd

I don't have this system now.  But I've rebuild on a quite similar
system (Fedora 8 x86) this one running inside VmWare.  This time,
instead of using the defalt /usr/local/ prefix I've specified /usr.
And this time I do not see the warning as above.

I'm still trying to make OSPF talk with net-snmp, though.

Al

-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Unknown token: smux

2008-04-06 Thread Thomas Anders
lanas wrote:
 I don't have this system now.  But I've rebuild on a quite similar
 system (Fedora 8 x86) this one running inside VmWare.  This time,
 instead of using the defalt /usr/local/ prefix I've specified /usr.
 And this time I do not see the warning as above.
 
 I'm still trying to make OSPF talk with net-snmp, though.

Could you try it on the VM system, please?


+Thomas

-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Unknown token: smux

2008-04-05 Thread Thomas Anders
lanas wrote:
 And then I chdir to /usr/local/sbin/ and:
 
 ./snmpd -Dsmux,smux_init,smux_conf
 
 [M1 /usr/local/share/snmp/snmpd.conf: line 14: Warning: Unknown token: smux.

I cannot reproduce this over here. Are you sure you don't have any other
net-snmp installation on your system? What's the output of

  ldd /usr/local/sbin/snmpd

?


+Thomas

-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Unknown token: smux

2008-04-04 Thread Thomas Anders
lanas wrote:
 [M1 ./snmpd -H 21 | grep smux
 /usr/local/share/snmp/snmpd.conf: line 14: Warning: Unknown token: smux.

smux isn't a supported config token for SMUX, only smuxpeer and 
smuxsocket are. These don't appear in your output which suggests that you 
*don't* have SMUX support compiled in.

What's the output of 

grep -i smux /usr/local/share/snmp/snmpd.conf
net-snmp-config --snmpd-module-list | tr   \n | grep smux
 
?


+Thomas

-- 
Thomas Anders (thomas.anders at blue-cable.de)  

-
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Unknown token: smux

2008-04-04 Thread lanas
Le Vendredi, 04 Avril 2008 11:02:41 +0200,
Thomas Anders [EMAIL PROTECTED] a écrit :

 lanas wrote:
  [M1 ./snmpd -H 21 | grep smux
  /usr/local/share/snmp/snmpd.conf: line 14: Warning: Unknown token:
  smux.
 
 smux isn't a supported config token for SMUX, only smuxpeer and
 smuxsocket are. These don't appear in your output which suggests
 that you *don't* have SMUX support compiled in.

I started back from scratch.  Did a 'make uninstall', wiped the
sources, and extracted a fresh net-snmp-5.4.1.tar.gz.  Then:

./configure --with-mib-modules=smux

And the make, make install, ldconfig.

Then I made the following snmpd.conf file in /usr/local/share/snmp/:

[M1 cat snmpd.conf
syslocationRight here
syscontact [EMAIL PROTECTED]
rwcommunityprivate
rocommunitypublic
authtrapenable 1
trapcommunity  trapcomm
trapsink   196.0.100.1
trap2sink  196.0.100.1

com2sec readonly default public
group MyROGroup v1 readonly
view all included .1 80
access MyROGroup  any noauth exact all none none
smuxpeer .1.3.6.1.4.1.3317.1.2.5 quagga_ospfd

And then I chdir to /usr/local/sbin/ and:

./snmpd -Dsmux,smux_init,smux_conf

The funny thing is that the 'error' is still there:

[M1 ./snmpd -Dsmux,smux_init,smux_conf
No log handling enabled - turning on stderr logging
registered debug token smux, 1
registered debug token smux_init, 1
registered debug token smux_conf, 1
netsnmp_assert !registration != duplicate failed agent_registry.c:535 
netsnmp_subtree_load()
netsnmp_assert !registration != duplicate failed agent_registry.c:535 
netsnmp_subtree_load()
netsnmp_assert !registration != duplicate failed agent_registry.c:535 
netsnmp_subtree_load()
[M1 /usr/local/share/snmp/snmpd.conf: line 14: Warning: Unknown token: smux.
smux_init: [smux_init] done; smux listen sd is 6, smux port is 199
NET-SNMP version 5.4.1

[M1 cat /var/log/snmpd.log
netsnmp_assert !registration != duplicate failed agent_registry.c:535 
netsnmp_subtree_load()
netsnmp_assert !registration != duplicate failed agent_registry.c:535 
netsnmp_subtree_load()
netsnmp_assert !registration != duplicate failed agent_registry.c:535 
netsnmp_subtree_load()
/usr/local/share/snmp/snmpd.conf: line 14: Warning: Unknown token: smux.
smux_init: [smux_init] done; smux listen sd is 6, smux port is 199
NET-SNMP version 5.4.1

But now, because of the switches, we see that the port is really taken:

[M1 netstat -nap
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address   Foreign Address State   
PID/Program name
tcp0  0 0.0.0.0:199 0.0.0.0:*   LISTEN  
5430/snmpd
udp0  0 0.0.0.0:161 0.0.0.0:*   
5430/snmpd
udp0  0 0.0.0.0:34920   0.0.0.0:*   
5430/snmpd
udp0  0 0.0.0.0:52460   0.0.0.0:*   
5430/snmpd

So everything's more or less nice.  By this I mean now OSPF will not
connect, but that's the subject of another thread.

 What's the output of 
  grep -i smux /usr/local/share/snmp/snmpd.conf
 net-snmp-config --snmpd-module-list | tr   \n | grep smux

I preferred to redo the compilation instead.

All in all, without the 'special' switches given to snmpd or without
seeing the actual use of the ports on the machine, one could believe
that because of the warning it does not work.  It is but only a warnign
after all.

Now on to quagga...

Thanks,

Al

-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users