RE: why does agentX default to using domain sockets?

2010-01-14 Thread Mike Ayers
> From: Fulko Hew [mailto:fulko@gmail.com]
> Sent: Thursday, January 14, 2010 5:59 AM

> Nope.  What it does is, make a domain socket called 'tcp:localhost:705'.
> The only way to do it via tcp seems to be the config file option:
> agentxsocket tcp:localhost:705

This is actually what I expected, and a Good Thing, as the TCP 
implementation of AgentX is, unfortunately, insecure, whereas the Unix domain 
sockets are highly securable.  Best to make the operator install any unlocked 
doors that may be needed...


HTH,

Mike

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


RE: why does agentX default to using domain sockets?

2010-01-14 Thread Mike Ayers
> From: dave.shi...@googlemail.com [mailto:dave.shi...@googlemail.com] On
> Behalf Of Dave Shield
> Sent: Thursday, January 14, 2010 12:10 AM

> Suck it and See.

I think I need to put that on a t-shirt...


Mike

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: why does agentX default to using domain sockets?

2010-01-14 Thread Fulko Hew
On Thu, Jan 14, 2010 at 3:09 AM, Dave Shield wrote:

> 2010/1/13 Mike Ayers :
> >
> > $ ./configure --with-agentx-socket=tcp:localhost:705
> >
> >That works?
>
> It should do, yes.
>

Nope.  What it does is, make a domain socket called 'tcp:localhost:705'.

The only way to do it via tcp seems to be the config file option:

agentxsocket tcp:localhost:705


The only reason I asked the original question was because on a RHEL 5 box,
I thought this was enabled by default.  Upon closer inspection I see that
someone
put the appropriate lines into its config file without me know it.  Hence my
thinking
it was on be default.

I'll just put it and the 'master agentx' option into the config file.

Sorry for the diversion
Fulko
--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: why does agentX default to using domain sockets?

2010-01-14 Thread Dave Shield
2010/1/13 Mike Ayers :
>
> $ ./configure --with-agentx-socket=tcp:localhost:705
>
>        That works?

It should do, yes.
Suck it and See.

Dave

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


RE: why does agentX default to using domain sockets?

2010-01-13 Thread Mike Ayers
> From: Dave Shield [mailto:d.t.shi...@liverpool.ac.uk]
> Sent: Wednesday, January 13, 2010 2:12 PM

> 2010/1/13 Fulko Hew :
> > I'm seeing that by default Net-SNMP is using a domain socket instead
> of TCP
> > port 705.
> >
> > I can force it to use the port by adding the following to the config
> file
> >
> > agentxsocket tcp:localhost:705
> >
> > but how can I make that the default at configure/make time?
> 
> 
> $ ./configure --help | grep agentx-socket
>   --with-agentx-socket=FILE AgentX socket (Default:
> /var/agentx/master as specified in RFC2741)

$ ./configure --with-agentx-socket=tcp:localhost:705

That works?


Thanks,

Mike

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: why does agentX default to using domain sockets?

2010-01-13 Thread Dave Shield
2010/1/13 Fulko Hew :
> I'm seeing that by default Net-SNMP is using a domain socket instead of TCP
> port 705.
>
> I can force it to use the port by adding the following to the config file
>
> agentxsocket tcp:localhost:705
>
> but how can I make that the default at configure/make time?


$ ./configure --help | grep agentx-socket
  --with-agentx-socket=FILE AgentX socket (Default:
/var/agentx/master as specified in RFC2741)


Dave

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


why does agentX default to using domain sockets?

2010-01-13 Thread Fulko Hew
Continuing on my quest to get Net-SNMP working well on this old AIX box,
I'm now trying to enable AgentX (master) support...

I'm seeing that by default Net-SNMP is using a domain socket instead of TCP
port 705.

I can force it to use the port by adding the following to the config file

agentxsocket tcp:localhost:705

but how can I make that the default at configure/make time?

TIA
Fulko
--
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev ___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users