topic Re: SNMP trap in case of root login on hpux managed system in Operating System - HP-UX

SNMP trap in case of root login on hpux managed system

LukaS_9 — Mon, 26 Mar 2007 11:09:03 GMT

I would like SIM to receive an SNMP trap in case of root login over hpux managed systems.
Is it possible setting a MIB? And How?
Consider that I'm not so familiar with MIBs.
Be detailed and patient please :)

Luca

Re: SNMP trap in case of root login on hpux managed system

Patrick Wallek — Mon, 26 Mar 2007 11:18:25 GMT

I don't think this is a standard SNMP function.

Something like this **might** be possible by writing your own custom PAM authentication module. PAM is configured through the /etc/pam.conf file. If you look at that file you can see what modules are used for various functions. More information on /etc/pam.conf if available from the man page (man pam.conf).

Re: SNMP trap in case of root login on hpux managed system

Emil Velez — Mon, 26 Mar 2007 21:33:37 GMT

I would take another approach.. Whenever somebody logs on /etc/profile is executed. You could put some logic in there to send email or a snmp trap when root logs on. Most snmp trap commands only require a trap number and a destination to send a trap. Unfortunately I do not think HP-UX shops with a snmp trap command unless you have a openview agent on the system. There are open source SNMP trap commands you can get and compile to accomplish this.

Re: SNMP trap in case of root login on hpux managed system

LukaS_9 — Tue, 27 Mar 2007 03:34:51 GMT

Thanks for your replyes!
Is there a way to send a trap in /etc/profile using the command below?
/etc/opt/resmon/lbin/send_test_event -a

The question is: is there a monitor able to send this specific trap?

luca

p.s. still be patient :)

Re: SNMP trap in case of root login on hpux managed system

Jens Keinath — Thu, 29 Mar 2007 15:56:58 GMT

You can use net-snmp to send SNMP Traps. The net-snmp is available for HP-UX as part of the HP-UX Internet Express components. We use it successfully on HP-UX 11i.

See
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111
and
http://www.net-snmp.org
for more information.

Re: SNMP trap in case of root login on hpux managed system

LukaS_9 — Fri, 30 Mar 2007 03:04:09 GMT

thank you,
I will take a look of these tools!!

regards
Luca