Re: Agentx subagent registering

--===============1394202158==
Content-Type: multipart/alternative;
boundary="----=_Part_10876_9466854.1204128605806"

------=_Part_10876_9466854.1204128605806
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Isn't the fact that I'm getting a response from the agent, is indicating
that I have the required mapping ?

Anyway, following is the relevant mapping from my snmpd.conf:
rocommunity mas-public
rwcommunity mas-privae
rocommunity sub-public
rwcommunity sub-privae

com2sec mas-Sec-Ro default mas-public
com2sec mas-Sec-Rw default mas-private
com2sec sub-Sec-Ro default sub-public
com2sec sub-Sec-Rw default sub-private

####
# Second, map the security names into group names:
# sec.model sec.name
group mas-Ro-Group v1 mas-Sec-Ro
group mas-Rw-Group v1 mas-Sec-Rw
group sub-Ro-Group v1 sub-Sec-Ro
group sub-Rw-Group v1 sub-Sec-Rw^M

####
# Third, create a view for us to let the groups have rights to:
# incl/excl subtree mask
view all included .1

####
# Finally, grant the 2 groups access to the 1 view with different
# write permissions:
# context sec.model sec.level match read write notif
access mas-Ro-Group "" any noauth exact all none none
access mas-Rw-Group "" any noauth exact all all none^M
access sub-Ro-Group sub1 any noauth exact all none none^M
access sub-Rw-Group sub1 any noauth exact all all none^M

Omri


On Wed, Feb 27, 2008 at 5:58 PM, Dave Shield <D.T.Shield@liverpool.ac.uk>
wrote:

> On 27/02/2008, oknets10 <oknets10@gmail.com> wrote:
> > The command was:
> > snmpget -v 2c -c sub-public 192.168.1.1 sysDescr.0
>
> And have you got anything configured to map the
> community "sub-public" into the context "sub1" ?
>
> Dave
>
> PS: Note that I'm now away for a long weekend, so you'll
> have to rely on other members of the list for assistance
> until Monday.
>

------=_Part_10876_9466854.1204128605806
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

<div>&nbsp;</div>
<div>Isn't&nbsp;the fact that I'm getting a response from the agent, is indicating that I have the required mapping ?</div>
<div>&nbsp;</div>
<div>Anyway, following is the relevant mapping from my snmpd.conf:</div>
<div><font size="2">rocommunity mas-public</font></div>
<div><font size="2">rwcommunity mas-privae</font></div>
<div><font size="2">rocommunity sub-public</font></div>
<div><font size="2">rwcommunity sub-privae</font></div>
<div>&nbsp;</div>
<div><font size="2"><font size="2">com2sec mas-Sec-Ro default mas-public</font></font></div>
<div><font size="2"><font size="2">com2sec mas-Sec-Rw default mas-private</font></font></div>
<div><font size="2"><font size="2">com2sec sub-Sec-Ro default sub-public</font></font></div>
<div><font size="2"><font size="2">com2sec sub-Sec-Rw default sub-private</font></font></div>
<div><font size="2"><font size="2"></font></font>&nbsp;</div>
<div><font size="2"><font size="2">####</font></font></div>
<div><font size="2"><font size="2"># Second, map the security names into group names:</font></font></div>
<div><font size="2"><font size="2"># sec.model <a href="http://sec.name">sec.name</a></font></font></div>
<div><font size="2"><font size="2">group mas-Ro-Group v1 mas-Sec-Ro</font></font></div>
<div><font size="2"><font size="2">group mas-Rw-Group v1 mas-Sec-Rw</font></font></div>
<div><font size="2"><font size="2">group sub-Ro-Group v1 sub-Sec-Ro</font></font></div>
<div><font size="2"><font size="2">group sub-Rw-Group v1 sub-Sec-Rw^M</font></font></div>
<div><font size="2"><font size="2"></font></font>&nbsp;</div>
<div><font size="2"><font size="2">####</font></font></div>
<div><font size="2"><font size="2"># Third, create a view for us to let the groups have rights to:</font></font></div>
<div><font size="2"><font size="2"># incl/excl subtree mask</font></font></div>
<div><font size="2"><font size="2">view all included .1</font></font></div>
<div><font size="2"><font size="2"></font></font>&nbsp;</div>
<div><font size="2"><font size="2">####</font></font></div>
<div><font size="2"><font size="2"># Finally, grant the 2 groups access to the 1 view with different</font></font></div>
<div><font size="2"><font size="2"># write permissions:</font></font></div>
<div><font size="2"><font size="2"># context sec.model sec.level match read write notif</font></font></div>
<div><font size="2"><font size="2">access mas-Ro-Group &quot;&quot; any noauth exact all none none</font></font></div>
<div><font size="2"><font size="2">access mas-Rw-Group &quot;&quot; any noauth exact all all none^M</font></font></div>
<div><font size="2"><font size="2">access sub-Ro-Group sub1 any noauth exact all none none^M</font></font></div>
<div><font size="2"><font size="2">access sub-Rw-Group sub1 any noauth exact all all none^M</font></font></div>
<div><br>Omri</div>
<div><br>&nbsp;</div>
<div class="gmail_quote">On Wed, Feb 27, 2008 at 5:58 PM, Dave Shield &lt;<a href="mailto:D.T.Shield@liverpool.ac.uk">D.T.Shiel d@liverpool.ac.uk</a>&gt; wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div class="Ih2E3d">On 27/02/2008, oknets10 &lt;<a href="mailto:oknets10@gmail.com">oknets10@gmail.co m</a>&gt; wrote:<br></div>
<div class="Ih2E3d">&gt; The command was:<br>&gt; &nbsp;snmpget -v 2c -c sub-public <a href="http://192.168.1.1/" target="_blank">192.168.1.1</a> sysDescr.0<br><br></div>And have you got anything configured to map the<br>community &quot;sub-public&quot; into the context &quot;sub1&quot; ?<br>
<font color="#888888"><br>Dave<br></font><br>PS: Note that I'm now away for a long weekend, so you'll<br>&nbsp; &nbsp; &nbsp; have to rely on other members of the list for assistance<br>&nbsp; &nbsp; &nbsp; until Monday.<br></blockquote></div>
<br>

------=_Part_10876_9466854.1204128605806--


--===============1394202158==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
--===============1394202158==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/...net-snmp-users

--===============1394202158==--