topic Re: snmpd.conf error in Operating System - HP-UX

snmpd.conf error

Nobody's Hero — Wed, 31 Jan 2007 13:02:57 GMT

hate to have to ask this here, but I know there are some solaris users here. I support HPUX x 35. I have 1 Solaris system giving me a fit.

Security asked me to
comment out the fields which
were open to public and when we do that we are having a problem at reboot. Get the following errors :

/usr/lib/snmp/snmpdx: community_check() : bad community from localhost
Jan 30 10:48:09 s0b1296 /usr/lib/snmp/snmpdx: session_open() failed for a pdu received from localhost.32781
Jan 30 10:48:09 s0b1296 /usr/lib/snmp/snmpdx: community_check() : bad community from localhost

ANyone have this issue before. Its a security mandate, but I cant seem to get around the error.

Re: snmpd.conf error

Steven E. Protter — Wed, 31 Jan 2007 15:07:04 GMT

Shalom,

I remember vaguely something about certain community strings being no good because they are reserved words.

Security may not know what they are doing. Usually we change the string names and limit what the public can see or do.

In addition, snmp can be shielded with firewalls and tcp wrappers configuration to keep the public from exploiting snmp or even knowing the system has it running.

I'd tell security to please go back to the drawing board on this, or pull a configuration string from a working system.

It might be nice to see the conf file if permitted.

SEP

Re: snmpd.conf error

Georg Tresselt — Fri, 02 Feb 2007 08:42:00 GMT

Firstly, you don't need SNMP to survive, or do you have some network management like OpenView NNM?

Then, apart from setting/changing SNMP community strings, you can define views on Solaris AFAIK. The other question is if someone changed your SNMP port (usually UDP/161).