Re: question on net-snmp privacy

2010-02-16 Thread Dave Shield
On 15 February 2010 23:48, Szudy Brett-CBS035 wrote: >  It looks > like in > the code that in a message received the sec level bits only matter for > validation when they are set --in other words, privacy & auth protocols > are only

RFC: dropping support for building Net-SNMP without Platform SDK

2010-02-16 Thread Bart Van Assche
Hello, Currently it is possible to build Net-SNMP with the following Microsoft Visual Studio compilers: * Visual Studio 6.0 without Platform SDK. * Visual Studio 6.0 with Platform SDK. * Visual Studio 2002. * Visual Studio 2003. * Visual Studio 2005 Express. * Visual Studio 2005. * Visual Studio 2

Re: question on net-snmp privacy

2010-02-16 Thread Dave Shield
On 16 February 2010 13:41, Bell, Adam wrote: > That is a huge security hole.  In fact knowing this, we will have to add some > kind of extension to explicitely disallow Any packet that is not > authenticated. Why? If you configure the agent using "rouser" then this will reject any unauthent

RE: question on net-snmp privacy

2010-02-16 Thread Bell, Adam
That is a huge security hole. In fact knowing this, we will have to add some kind of extension to explicitely disallow Any packet that is not authenticated. If we think about it, without this extension, anyone could set a mib when we were expecting to only accept authenticated packets. Vacm doe

RE: question on net-snmp privacy

2010-02-16 Thread Bell, Adam
OK - sounds good. So if vacm is enabled - it should reject unauthenticated read and writes? That's sounds reasonable Adam -Original Message- From: dave.shi...@googlemail.com [mailto:dave.shi...@googlemail.com] On Behalf Of Dave Shield Sent: Tuesday, February 16, 2010 9:01 AM To: Bell,

Re: question on net-snmp privacy

2010-02-16 Thread Dave Shield
On 16 February 2010 14:11, Bell, Adam wrote: > So if vacm is enabled - it should reject unauthenticated read and writes? The agent should accept/reject requests based on whatever the access control configuration specifies. If VACM is configured to allow unauthenticated requests, then the age

Re: SF.net SVN: net-snmp:[18151] trunk/net-snmp/include/net-snmp/library

2010-02-16 Thread Wes Hardaker
> On Sat, 13 Feb 2010 20:59:28 +, ma...@users.sourceforge.net (Magnus > Fromreide) said: MF> Adjust the placement of ;'s in order to MF> a) Avoid warnings about spurious semicolons MF> b) Not have unterminated declarations in headers Sigh... This is where macros and editors conflict

Re: question on net-snmp privacy

2010-02-16 Thread Wes Hardaker
> On Tue, 16 Feb 2010 14:45:50 +, Dave Shield > said: DS> This is a local policy decision - it's not inherent in the SNMP protocol. And to make sure you understand completely: You can also configure the VACM to only allow authenticated *and* encrypted packets. Note that the USM/VA

Re: RFC: dropping support for building Net-SNMP without Platform SDK

2010-02-16 Thread Wes Hardaker
> On Tue, 16 Feb 2010 12:54:42 +0100, Bart Van Assche > said: BVA> I'm proposing to drop support for building the Net-SNMP source code with BVA> Visual Studio 6.0 without Platform SDK in order to simplify maintenance, Being a looser when it comes to win32 compiling I personally don't un

Re: RFC: dropping support for building Net-SNMP without Platform SDK

2010-02-16 Thread Bart Van Assche
On Tue, Feb 16, 2010 at 10:22 PM, Wes Hardaker < harda...@users.sourceforge.net> wrote: > > On Tue, 16 Feb 2010 12:54:42 +0100, Bart Van Assche < > bvanass...@acm.org> said: > > BVA> I'm proposing to drop support for building the Net-SNMP source code > with > BVA> Visual Studio 6.0 without Pla

Re: SF.net SVN: net-snmp:[18146] trunk/net-snmp/include/net-snmp/types.h

2010-02-16 Thread Wes Hardaker
> On Sat, 13 Feb 2010 10:32:43 +0100, Bart Van Assche > said: >> freebsd needs time.h above timeb.h >> BVA> Thanks for fixing this. Have you also verified whether it is necessary BVA> to include on FreeBSD or whether that include directive BVA> can be omitted ? No, I haven't. I wond

Re: create SNMPv3 user with hashed password

2010-02-16 Thread Wes Hardaker
> On Fri, 12 Feb 2010 14:06:31 -0600, "EYRE Bernadette" > said: EB> Wes, if you are using snmpusm command and you have already created the EB> user and you want to change the password and provide the new password in EB> hashed format, not in clear passphrase format, EB> how would you do

net-SNMP: more information required...

2010-02-16 Thread Sylvain Dery
Hi, I'm currently evaluating the net-SNMP sdk and I must have the answers to the following questions in order to make a recommendation to my employer. Can you please provide the answers to them? Does the development tool run on Windows 7? If not, when will Windows 7 be supported? Will t

RE: create SNMPv3 user with hashed password

2010-02-16 Thread EYRE Bernadette
I'm running 5.4.2.1 version, would this patch be available for this version? Or should I update to 5.5? Thanks Bernadette Eyre -Original Message- From: Wes Hardaker [mailto:harda...@users.sourceforge.net] Sent: Tue 2/16/2010 2:10 PM To: EYRE Bernadette Cc: Wes Hardaker; Dave Shield; net-

trapsess -e option and OCTET STRING

2010-02-16 Thread lanas
Hi all, The engineID (trapsess -e option) is defined as an OCTET STRING. Does this mean that it can be an hexadecimal ASCII string such as: 0x85643A5B ... so on ? Will snmpd convert the hex string to hex binary ? I'm asking because this field is seemingly defined as 32 bytes (RFC 3411). If it

Re: SF.net SVN: net-snmp:[18105] trunk/net-snmp/include/net-snmp/library/ snmpDTLSUDPDomain.h

2010-02-16 Thread Wes Hardaker
> On Fri, 12 Feb 2010 22:16:51 +0100, Magnus Fromreide > said: MF> I want one of those - one that manages to replace a non-const MF> variable in a (shared) library with the proper constant value in the MF> final program after it have proved that the value really is const. Agreed. It sh