topic Re: SNMP Public Community string in Operating System - Linux

SNMP Public Community string

MikeL_4 — Thu, 10 Jan 2008 12:58:30 GMT

I received a note from our auditors stating that the: "public" (default) SNMP community string still works, on our servers... Can you tell me what I need to check and how to turn it off ???

Thanks

Re: SNMP Public Community string

MikeL_4 — Thu, 10 Jan 2008 13:03:18 GMT

ps: This is a Red Hat Linux server....

Re: SNMP Public Community string

Ivan Ferreira — Thu, 10 Jan 2008 13:55:12 GMT

Check the /etc/snmp/snmpd.conf file. If you don't use SNMP disable the service with:

chkconfig snmpd off
service snmpd stop

Re: SNMP Public Community string

MikeL_4 — Thu, 10 Jan 2008 14:27:06 GMT

I've attached a copy of the snmpd.conf file on our servers in case it helps...

I am not familiar with snmp at all and this is the first time I've looked at the config file for it...

I believe I would need to change the com2sec, group, view, and access lines some how but now sure where to even start...

Re: SNMP Public Community string

Jeeshan — Thu, 10 Jan 2008 14:46:21 GMT

simply # on the every line in your snmpd.conf file you attached.

Re: SNMP Public Community string

Alexander Chuzhoy — Thu, 10 Jan 2008 17:55:33 GMT

from the cli run the following command:

snmpwalk -v1 -c public

where is the address of the server to check.

If you get lots of lines with values - the snmpd server is up and it accepts "public" as community.