snmpd.conf error

[Nobody's Hero]

hate to have to ask this here, but I know there are some solaris users here. I support HPUX x 35. I have 1 Solaris system giving me a fit.

Security asked me to
comment out the fields which
were open to public and when we do that we are having a problem at reboot. Get the following errors :

/usr/lib/snmp/snmpdx: community_check() : bad community from localhost
Jan 30 10:48:09 s0b1296 /usr/lib/snmp/snmpdx: session_open() failed for a pdu received from localhost.32781
Jan 30 10:48:09 s0b1296 /usr/lib/snmp/snmpdx: community_check() : bad community from localhost


ANyone have this issue before. Its a security mandate, but I cant seem to get around the error.

[Steven E. Protter]

Shalom,

I remember vaguely something about certain community strings being no good because they are reserved words.

Security may not know what they are doing. Usually we change the string names and limit what the public can see or do.

In addition, snmp can be shielded with firewalls and tcp wrappers configuration to keep the public from exploiting snmp or even knowing the system has it running.

I'd tell security to please go back to the drawing board on this, or pull a configuration string from a working system.

It might be nice to see the conf file if permitted.

SEP

[Georg Tresselt]

Firstly, you don't need SNMP to survive, or do you have some network management like OpenView NNM?

Then, apart from setting/changing SNMP community strings, you can define views on Solaris AFAIK. The other question is if someone changed your SNMP port (usually UDP/161).