--===============1442376834==
Content-Type: multipart/alternative;
boundary="----=_Part_96885_29502472.1184705289595"

------=_Part_96885_29502472.1184705289595
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

I know that my problem is ACCESS CONTROL. I read this section, but I
dont understand very well.
I found out that snmptrap loads the mibs from
/usr/local/share/snmp/mibs not /usr/share/snmp/mibs/ where I thought.
When I changed my mib I obtained the line "No access configuration -
dropping trap":
condor:~ # snmptrapd -m all -Lo -f
Warning: no access control information configured.
This receiver will *NOT* accept any incoming notifications.
NET-SNMP version 5.4
No access configuration - dropping trap.

But the problem of ACCESS CONTROL is yet unresolved.
Whit the option -d I obtain:

condor:/etc/snmp # snmptrapd -m all -Le -f -d
Warning: no access control information configured.
This receiver will *NOT* accept any incoming notifications.
NET-SNMP version 5.4

Received 52 bytes from UDP: [192.168.1.168]:1096
0000: 30 32 02 01 00 04 0D 7A 77 65 69 63 6F 6D 5F 6E 02.....zweicom_n
0016: 6F 74 61 76 A4 1E 06 0A 2B 06 01 04 01 81 97 50 otav....+......P
0032: 02 01 40 04 7F 00 00 01 02 01 06 02 02 01 2F 43 ..@.........../C
0048: 01 00 30 00 ..0.

No access configuration - dropping trap.

I tried to configure ACCESS CONTROL with the follow lines in the
snmpd.conf file:
# sec.name source community
com2sec local localhost zweicom_notav
com2sec mynetwork 192.168.1.0/24 zweicom_notav

####
# Second, map the security names into group names:

# sec.model sec.name
group MyRWGroup v1 local
group MyRWGroup v2c local
group MyRWGroup usm local
group MyROGroup v1 mynetwork
group MyROGroup v2c mynetwork
group MyROGroup usm mynetwork

####
# Third, create a view for us to let the groups have rights to:

# incl/excl subtree mask
view all included .1 80

####
# Finally, grant the 2 groups access to the 1 view with different
# write permissions:

# context sec.model sec.level match read write notif
#access MyROGroup "" any noauth exact all none none
#access MyRWGroup "" any noauth exact all all none
access MyROGroup "" any auth exact all all all
access MyRWGroup "" any auth exact all all all

But Its doesnt work.

Thanks a lot.

------=_Part_96885_29502472.1184705289595
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

I know that my problem is ACCESS CONTROL. I read this section, but I
dont understand very well.
I found out that snmptrap loads the mibs from
/usr/local/share/snmp/mibs not /usr/share/snmp/mibs/ where I thought.

When I changed my mib I obtained the line "No access configuration -
dropping trap":
 condor:~ # snmptrapd -m all -Lo -f
Warning: no access control information configured.
This receiver will *NOT* accept any incoming notifications.

NET-SNMP version 5.4
No access configuration - dropping trap.

But the problem of ACCESS CONTROL is yet unresolved.
Whit the option -d I obtain:


condor:/etc/snmp # snmptrapd -m all -Le -f -d
Warning: no access control information configured.
This receiver will *NOT* accept any incoming notifications.

NET-SNMP version 5.4

Received 52 bytes from UDP: [192.168.1.168]:1096
0000: 30 32 02 01  00 04 0D 7A  77 65 69 63  6F 6D 5F 6E    02.....zweicom_n

0016: 6F 74 61 76  A4 1E 06 0A  2B 06 01 04  01 81 97 50    otav....+......P
0032: 02 01 40 04  7F 00 00 01  02 01 06 02  02 01 2F 43    ..@.........../C
0048: 01 00 30 00                                           ..0.


No access configuration - dropping trap.

I tried to configure ACCESS CONTROL with the follow lines in the
snmpd.conf file:
#      
sec.name
 source          community
com2sec local     localhost       zweicom_notav
com2sec mynetwork 192.168.1.0/24
 zweicom_notav

####
# Second, map the security names into group names:

#               sec.model  sec.name

group MyRWGroup v1         local
group MyRWGroup v2c        local
group MyRWGroup usm        local
group MyROGroup v1         mynetwork
group MyROGroup v2c        mynetwork
group MyROGroup usm        mynetwork


####
# Third, create a view for us to let the groups have rights to:

#           incl/excl subtree                          mask
view all    included  .1                               80

####

# Finally, grant the 2 groups access to the 1 view with different
# write permissions:

#                context sec.model sec.level match  read   write  notif
#access MyROGroup ""      any       noauth    exact  all    none   none

#access MyRWGroup ""      any       noauth    exact  all    all    none
access MyROGroup ""      any       auth    exact  all    all    all
access MyRWGroup ""      any       auth    exact  all    all    all


But Its doesnt work.

Thanks a lot.

------=_Part_96885_29502472.1184705289595--


--===============1442376834==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
--===============1442376834==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/...net-snmp-users

--===============1442376834==--