Changing public community string in snmpd.conf & snmpdx.acl fills /var 100%

Hi,
we have a security concern dealing with our SEA agent dealing with community names...
We want to be able to change the comminity names in the config files so that public, private does not show up anywhere.
The system is running Solaris 8. When we change the community setting we keep getting these errors:
Nov 29 16:38:06 test01 /usr/lib/snmp/snmpdx: [ID 702911 daemon.error] community_check();bad community from localhost
Nov 29 16:38:06 test01 /usr/lib/snmp/snmpdx: [ID 702911 daemon.error] session_open() failed for a pdu received from localhost.41927
These are the changes made to the snmpd.conf file:
system-group-read-community test01tes01
read-community test01test01
Changes made to snmpdx.acl
acl = {
communities = test01test01
access = read-only
managers = *
Now, the only way to get rid of the error messages is to insert the public entry back under communities. Else /var gets 100% & causes issues.
Has anybody been able to remove the public entry and get this working with Solaris 8

N/m...found my answer...I needed to change my /System/Libary/LaunchDaemonds/org.net-snmp.snmpd.plist to not disabled.

Similar Messages

Cs-mars changing the community string on multiple devices

Hello,
We've changed the snmp v2 community strings on all the network devices.
Is it possible in cs-mars to change the community string on multiple devices?
When I select edit in admin>security and monitor devices> and select several devices and click edit the message "please select only one device to edit"
What's the best way to do this, and is this absoluteley nessecary?
Many thanks for all the help......

> Is it possible in cs-mars to change the community string on multiple devices?
Yes, it's possible for some device types. The SNMP community string(s) can be bulk updated using a seed file, but only for the following device types: PIX, PIX 7.x, ASA, IOS, and SWITCH-IOS. Any other device types have to be updated manually. The details are on page 1-46 of the Device Configuration Guide. You will also need the details for using a seed file, from the same document.
> is this absoluteley necessary?
If you want to communicate with the devices via SNMP, then yes, you need to update the strings. This is especially the case if you don't use any other communications protocols such as SSH, Telnet, or FTP. Also, without the updated SNMP strings, MARS can't fully discover the Layer 2 topology from the device.
Unfortunately, the SNMP string bulk update is only available for SNMPv1 (or v2 with no encryption) credentials. If you're using SNMPv3, each device has to be edited manually.

Is the "Community" string hardcoded somewhere in SEA?

Hi
I have a machine installed with SEA 1.0.3 and developed a Subagent by myself. I want to change the Community String for security reason but encountered some problem.
I updated the community string in snmpd.conf and myagent.acl at /etc/snmp/conf. Then I stop snmpdx and start it again with "-d 4". At another terminal, I start my subagent with "-d 4" too, there is some PDU print out on the screen as follows:
SSASubagent called with mysubagent
PDU:
version: 0
community: public
type: SET_REQ_MSG (0xa3)
request id: 0
error status: noError(0)
error index: 0
name: 1.3.6.1.4.1.42.2.15.5.0
type: OCTET STRING (0x4)
length: 9
value: mysubagent ( 73 6f 67 61 6c 61 72 6d 64 )
MANAGERS:
* 0
COMMUNITIES(READ_WRITE): myprivate mypublic
#EFILTER:
TRAP RECIPIENTS:
Waiting for incoming SNMP requests on UDP port 7041
You can see from the beginning that the community print out is still "public". But at the bottom of the print out, the community has been changed.
I have 2 questions on this:
1. Since I have not any SNMP server running and I did not send any GET/SET request to my agent, I think this PDU is the registration PDU my subagent send to the master agent for register. Am I right?
2.If I update the community string in snmpdx.acl, my subagent can not start up successfully and there is some print out in the master agent site that "community_check() : bad community from myhost ". It seems that it is because the community string in the PDU is still "public" and which is different with what master agent set.
3.I'm using Solaris 5.9. Do I need some patch for this issue?
I have read the User Guide and Developer Guide of SEA but still can not resolve it , would you give some information on this?
thanks a lot
Wendy

> Is it possible in cs-mars to change the community string on multiple devices?
Yes, it's possible for some device types. The SNMP community string(s) can be bulk updated using a seed file, but only for the following device types: PIX, PIX 7.x, ASA, IOS, and SWITCH-IOS. Any other device types have to be updated manually. The details are on page 1-46 of the Device Configuration Guide. You will also need the details for using a seed file, from the same document.
> is this absoluteley necessary?
If you want to communicate with the devices via SNMP, then yes, you need to update the strings. This is especially the case if you don't use any other communications protocols such as SSH, Telnet, or FTP. Also, without the updated SNMP strings, MARS can't fully discover the Layer 2 topology from the device.
Unfortunately, the SNMP string bulk update is only available for SNMPv1 (or v2 with no encryption) credentials. If you're using SNMPv3, each device has to be edited manually.

Snmp traps - snmpd.conf

I have seen notes on editing /etc/snmpd.conf but I dont get it.
Can anyoone please explain this process or direct me to a good URL ?
Cheers,

> I have seen notes on editing /etc/snmpd.conf but I dont get it.
>
> Can anyoone please explain this process or direct me to a good URL ?
>
> Cheers,
My snmpd.conf is as follows:
syslocation Server Room
syscontact Sysadmin (root@localhost)
rocommunity public 127.0.0.1 .1
rocommunity public 10.x.x.x .1
rwcommunity private 127.0.0.1
trapsink 10.x.x.x public
dlmod servinst /opt/novell/zenworks/lib/servinst.so
dlmod usrHistory /opt/novell/zenworks/lib/advtrend.so
view mmsWriteView included .1.3.6.1.4.1.23.2.102
view mmsWriteView included .1.3.6.1.2.1.16.18
com2sec mmsWriteUser 10.x.x.x private
group mmsWriteGroup v1 mmsWriteUser
goup mmsWriteGroup v2 mmsWriteUser
access mmsWriteGroup "" any noauthh exact none mmsWriteView none
....where 10.x.x.x is the IP address of my MMS Site Server
Don't forget also to change the community string in zfs-mms-advtrend.conf,
and the trapsink in zfs-mms-snmpd.conf and zfs-mms-log2trap.conf.
Also in zfs-mms-advtrend.conf a lot of the traps are disabled by default
and you need to turn them on.
Cheers,
Dennis.

Disable default read community string

I would like to know the procedure to disable the default read community string which is "public" and change create a new read community string using SMC 3.0

In your topology view, right click on a host, select "Attribute Editor". Then click the "Security" tab. There are sections here to control the user and group access control as well as the SNMP community string settings for the agent. You can make changes to the community string and hit "OK".
Regards,
Jeff Grabell
www.cirba.com

StorCenter px6-300d SNMP Community String

Dear Reader,
We have a NAS (StorCenter px6-300d) and we want to monitor it with our monitoring system.
On the Iomega website (http://iomega.com/resources/ui/px6-300d-313/help/help.html) i've found the configuration steps (see below) and configured our NAS.
Configuring SNMP settings
To enable SNMP, click the switch on.
Enter a unique username and password to define the community.
Confirm your password.
Enter the IP address of the host in the Trap Receivers text box. To grant access to multiple receivers, list all of them in the text box, separating each entry with a space.
Click Apply to save your settings
In our monitoring system we get the following msg: SNMP agent down - no response received. I think this is because of the (wrong) community string. In our monitoring system, under configuration tab, I tried 'public', 'username', 'password' etc in the community string field but it is not working.
I hope someone can help me with this... what is the community string? If i'm doing something else wrong then...
Thanks in advance.
With kind regards,
From the Netherlands
Solved!
Go to Solution.

Hi yunuz,
The username and password that you set on the NAS device needs to match on the SNMP server that you are trying to connect to. So use the same username and password for the server. Do you know what SNMP version your client is using?
What is an “SNMP Community String”?
The “SNMP Community string” is like a user id or password that allows access to a router's or other device's statistics. PRTG sends the community string along with all SNMP requests. If the community string is correct, the device responds with the requested information. If the community string is incorrect, the device simply discards the request and does not respond.
Note: SNMP Community strings are used only by devices which support SNMPv1 and SNMPv2c protocol. SNMPv3 uses username/password authentication, along with an encryption key.
By convention, most SNMPv1-v2c equipment ships from the factory with a read-only community string set to "public". It is standard practice for network managers to change all the community strings to customized values in the device setup.
Source: http://www.paessler.com/manuals/prtg_traffic_grapher/whatisansnmpcommunitystring
Have questions and need answers?
Search the database for answers to FAQ's, software/driver downloads, tutorials, news, features and more!
LenovoEMC Support & Downloads
LenovoEMC North America Support Contact Page

Can we change data in string object.

Can we change data in string object.

Saw this hack to access the char[]'s in a String in another thread. Beware that the effects of doing this is possible errors, like incorrect hashCode etc.
import java.lang.reflect.*;
public class SharedString {
        public static Constructor stringWrap = null;
        public static String wrap(char[] value, int offset, int length) {
                try {
                        if (stringWrap == null) {
                                stringWrap = String.class.getDeclaredConstructor(new Class[] { Integer.TYPE, Integer.TYPE, char[].class });
                                stringWrap.setAccessible(true);
                        return (String)stringWrap.newInstance(new Object[] { new Integer(offset), new Integer(length), value });
                catch (java.lang.NoSuchMethodException e) {
                        System.err.println ("NoMethod exception caught: " + e);
                catch (java.lang.IllegalAccessException e) {
                        System.err.println ("Access exception caught: " + e);
                catch (java.lang.InstantiationException e) {
                        System.err.println ("Instantiation exception caught: " + e);
                catch (java.lang.reflect.InvocationTargetException e) {
                        System.err.println ("Invocation exception caught: " + e);
                return null;
        public static void main(String[] args) {
                char[] chars = new char[] { 'l', 'e', 'v', 'i', '_', 'h' };
                String test = SharedString.wrap(chars, 0, chars.length);
                System.out.println("String test = " + test);
                chars[0] = 'k';
                chars[1] = 'a';
                chars[2] = 'l';
                chars[3] = 'l';
                chars[4] = 'a';
                chars[5] = 'n';
                System.out.println("String test = " + test);
} Gil

Can't change the connection string of SSIS package with derived columns?

We upgraded SQL server 2008 to 2012, copied and converted all SSIS packages from Visual Studio 2008 to 2010. When I opened a package in VS 2010 and tried to change the connection string, in the local connection managers, if the data source is another
SSIS package B(.dtsx file) with derived columns, I can't change the connection string of package B. When I opened the file connection manager editor for package B and tried to locate a dtsx file in another location, saved the change, reopened the project.
Package B still pointed to previous file. Other packages without derived columns work fine. Any thoughts?

We are using the package deployment model and refer to other packages in the same project. If
we changed the path of package B (with derived columns) to "D:\Visual Studio 2010\xxxx", and refer it in package A, in the A's connection manager, the connection string of package B is still its previous location "D:\Visual
Studio 2008\xxxx". When we ran the package A in the SQL server agent, the data source is still
"D:\Visual
Studio 2008\xxxx", so how can I change it to "D:\Visual
Studio 2010\xxxx"? Why has the package C (without derived columns) no such problem? thanks.

Changing the Host String in Oracle 10.2.0.4

Hi,
Can you please let me know how to change the Host String from ORCL to "production".
I login now using the details below,
UN: system
PWD: production
Host String: orcl
Any help would be highly appreciated.

Pravin wrote:
Hi,
I tried it but doesnt seem to work. Anyhow, i created a new database with my requirements and thus issue got resolved.
Maybe you should have provided a bit of detail to "doesn't seem to work".
I hope you didn't build a whole new house just because you couldn't get the key fit the front door . . .
Thanks for your response. Appreciate it.Edited by: EdStevens on Sep 27, 2010 3:43 PM

[Solvedish] Can color depth be changed in X with no xorg.conf file?

I have a laptop that's working perfectly with no xorg.conf file except for the color depth is at 16 and I want it at 24. Can color depth be changed in X with no xorg.conf file? (I already tried the amazing three line xorg.conf file to no avail.)
Last edited by skottish (2008-03-09 03:15:11)

Won't work on a running X session, and has the same effect as the aforementioned xorg.conf file if run before starting X.
I may just have to make a new xorg.conf file. The last one decided it hated some upgrade I made and started wreaking havoc all over my system. Crashes and lockups and flickers galore!
--EDIT--
It turns out that the xf86-video-intel driver was my problem all along. I reverted to the i810 driver and my xorg file works again (it has more than three lines).
Last edited by skottish (2008-03-09 03:16:45)

PRIF-33 and CRS-02307 while changing public network interface, RAC

Hi,
I'm working on an Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production With the Partitioning, Real Application Clusters, Automatic Storage Management. It's a 3 nodes RAC: mgvdb01/02/03
After the installation I had to change IP (different IP and Subnet) to the RAC:
From 172.17.1.0/24 to 10.19.201.0/24.
Node from 172.17.1.31/32/33 to 10.19.201.31/32/33.
The same for VIP(s): from 172.17.1.131/132/133 to 10.19.201.131/132/133.
The oifcfg iflist shows correct ips configuration:
[oracle@mgvdb01 bin]$ ./oifcfg iflist -p -n
eth0 10.19.201.0 PRIVATE 255.255.255.0
eth1 172.17.100.0 PRIVATE 255.255.255.0
I'm following doc 276434.1 from Metalink: How to Modify Public Network Information including VIP in Oracle Clusterware, starting from Case III "Changing public network interface, subnet or netmask".
But at the first operation I've a problem:
[oracle@mgvdb01 bin]$ ./oifcfg getif
eth0 172.17.1.0 global public **THIS HAS TO BE CHANGED**
eth1 172.17.100.0 global cluster_interconnect
[oracle@mgvdb01 bin]# ./oifcfg delif -global eth0/172.17.1.0
PRIF-33: Failed to set or delete interface because hosts could not be discovered
CRS-02307: No GPnP services on requested remote hosts.
PRIF-32: Error in checking for profile availability for host mgvdb02
CRS-02306: GPnP service on host "mgvdb02" not found.
PRIF-32: Error in checking for profile availability for host mgvdb03
CRS-02306: GPnP service on host "mgvdb03" not found.
[oracle@mgvdb01 bin]$ ./oifcfg delif -node mgvdb01 eth0/172.17.1.0
[oracle@mgvdb01 bin]$ ./oifcfg setif -node mgvdb01 eth0/10.19.201.0:public
PRIF-33: Failed to set or delete interface because hosts could not be discovered
CRS-02307: No GPnP services on requested remote hosts.
PRIF-32: Error in checking for profile availability for host mgvdb02
CRS-02306: GPnP service on host "mgvdb02" not found.
PRIF-32: Error in checking for profile availability for host mgvdb03
CRS-02306: GPnP service on host "mgvdb03" not found.Then I restart Clusterware service, but issuing
[oracle@mgvdb01 bin]$ ./oifcfg getif
eth0 172.17.1.0 global public
eth1 172.17.100.0 global cluster_interconnectnothing seems to be changed.
This is blocking following operations, the ones in Case IV.
Do you have any suggestion?
Thanks in advance,
Samuel

Hi,
I'm working on an Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production With the Partitioning, Real Application Clusters, Automatic Storage Management. It's a 3 nodes RAC: mgvdb01/02/03
After the installation I had to change IP (different IP and Subnet) to the RAC:
From 172.17.1.0/24 to 10.19.201.0/24.
Node from 172.17.1.31/32/33 to 10.19.201.31/32/33.
The same for VIP(s): from 172.17.1.131/132/133 to 10.19.201.131/132/133.
The oifcfg iflist shows correct ips configuration:
[oracle@mgvdb01 bin]$ ./oifcfg iflist -p -n
eth0 10.19.201.0 PRIVATE 255.255.255.0
eth1 172.17.100.0 PRIVATE 255.255.255.0
I'm following doc 276434.1 from Metalink: How to Modify Public Network Information including VIP in Oracle Clusterware, starting from Case III "Changing public network interface, subnet or netmask".
But at the first operation I've a problem:
[oracle@mgvdb01 bin]$ ./oifcfg getif
eth0 172.17.1.0 global public **THIS HAS TO BE CHANGED**
eth1 172.17.100.0 global cluster_interconnect
[oracle@mgvdb01 bin]# ./oifcfg delif -global eth0/172.17.1.0
PRIF-33: Failed to set or delete interface because hosts could not be discovered
CRS-02307: No GPnP services on requested remote hosts.
PRIF-32: Error in checking for profile availability for host mgvdb02
CRS-02306: GPnP service on host "mgvdb02" not found.
PRIF-32: Error in checking for profile availability for host mgvdb03
CRS-02306: GPnP service on host "mgvdb03" not found.
[oracle@mgvdb01 bin]$ ./oifcfg delif -node mgvdb01 eth0/172.17.1.0
[oracle@mgvdb01 bin]$ ./oifcfg setif -node mgvdb01 eth0/10.19.201.0:public
PRIF-33: Failed to set or delete interface because hosts could not be discovered
CRS-02307: No GPnP services on requested remote hosts.
PRIF-32: Error in checking for profile availability for host mgvdb02
CRS-02306: GPnP service on host "mgvdb02" not found.
PRIF-32: Error in checking for profile availability for host mgvdb03
CRS-02306: GPnP service on host "mgvdb03" not found.Then I restart Clusterware service, but issuing
[oracle@mgvdb01 bin]$ ./oifcfg getif
eth0 172.17.1.0 global public
eth1 172.17.100.0 global cluster_interconnectnothing seems to be changed.
This is blocking following operations, the ones in Case IV.
Do you have any suggestion?
Thanks in advance,
Samuel

I want to change my community name.how to change?p...

i want to change my community name.how to change?plz tell.actually my name's last alphabet is missing.

Hi, Tanveer.afza, and welcome to the Community,
Please see this topic for the information you seek:
http://community.skype.com/t5/Suggestions-for-this-Community/Skype-Community-Name/td-p/2863521
Regards,
Elaine
Was your question answered? Please click on the Accept as a Solution link so everyone can quickly find what works! Like a post or want to say, "Thank You" - ?? Click on the Kudos button!
Trustworthy information: Brian Krebs: 3 Basic Rules for Online Safety and Consumer Reports: Guide to Internet Security Online Safety Tip: Change your passwords often!

BAPI for changing BP communication data

Hi,
I am trying to change BP Communication data using FM BAPI_BUPA_ADDRESS_CHANGE but it is changing
"Address-Independent" data only and not the normal communications data.
Which FM should I use ? Or are there any specific parameters which I need to pass?
Please help
Regards
Yashodha

Hi Sandy,
Thanks for the quick response. Would also appreciate if you let me know what parameters to pass? I am sending following :
IV_PARTNER: <BP Number>
IV_X_SAVE : X (Already Defaulted)
IV_CHANGE_BAS :X (Already Defaulted)
IV_CHECK_ADDRESS : X ( Already Defaulted)
Table: IT_ADTEL
           Telephone: < New Telephone Number>
           Con         : 001
Table: IT_ADTEL_X
          T: X
          C: X
          U: U
But it is not updating the address dependent telephone number!!
Please let me know where am I missing out?
Regards,
Yashodhan

Purchaser not able to change public templates

When Purchaser is trying to change Public Templates in EB he gets an error "Error in System;Shopping cart cannot be processed further". When he press OK he is directed to EB home page.
Kindly advice.
Thanks and Regards
Manoj Upadhyay

Hi,
If you want to get the exact error message, try to connect with the purchaser in SAPGUI, and launch the transaction.
It can be either an authorization process,or an attribute problem (the purchaser hasn't got the attribute values that correspond to the document data).
Regards.
Vadim

ORA-31495 error in synchronous change table on "string"."string"

IN ORACLE 9I
TABLE COLUMN DATA TYPE VARCHAR2 16
WHEN UPDATE COLUMN VALUE WITH 11 CHARACTERS IT GIVES ERROR
ORA-31495 error in synchronous change table on "string"."string"
ORA-01401 value too large for column
IF I UPDATE COLUMN VALUE UPTO 10 CHARACTERS IT COMMITS AND GIVES NO ERROR

What is the characterset of your database base
how you create table as
create table table1 (col1 varchar2(16 char)) or
create table table1 (col1 varchar2(16 byte))Try to create table with create table table1 (col1 varchar2(16 char)) then try insert
Regards
Singh
Edited by: Singh on Sep 2, 2008 1:00 PM

Changing public community string in snmpd.conf & snmpdx.acl fills /var 100%

Similar Messages

Maybe you are looking for