Is the "Community" string hardcoded somewhere in SEA?

Hi
I have a machine installed with SEA 1.0.3 and developed a Subagent by myself. I want to change the Community String for security reason but encountered some problem.
I updated the community string in snmpd.conf and myagent.acl at /etc/snmp/conf. Then I stop snmpdx and start it again with "-d 4". At another terminal, I start my subagent with "-d 4" too, there is some PDU print out on the screen as follows:
SSASubagent called with mysubagent
PDU:
version: 0
community: public
type: SET_REQ_MSG (0xa3)
request id: 0
error status: noError(0)
error index: 0
name: 1.3.6.1.4.1.42.2.15.5.0
type: OCTET STRING (0x4)
length: 9
value: mysubagent ( 73 6f 67 61 6c 61 72 6d 64 )
MANAGERS:
* 0
     COMMUNITIES(READ_WRITE): myprivate mypublic
#EFILTER:
TRAP RECIPIENTS:
Waiting for incoming SNMP requests on UDP port 7041
You can see from the beginning that the community print out is still "public". But at the bottom of the print out, the community has been changed.
I have 2 questions on this:
1. Since I have not any SNMP server running and I did not send any GET/SET request to my agent, I think this PDU is the registration PDU my subagent send to the master agent for register. Am I right?
2.If I update the community string in snmpdx.acl, my subagent can not start up successfully and there is some print out in the master agent site that "community_check() : bad community from myhost ". It seems that it is because the community string in the PDU is still "public" and which is different with what master agent set.
3.I'm using Solaris 5.9. Do I need some patch for this issue?
I have read the User Guide and Developer Guide of SEA but still can not resolve it , would you give some information on this?
thanks a lot
Wendy

> Is it possible in cs-mars to change the community string on multiple devices?
Yes, it's possible for some device types.  The SNMP community string(s) can be bulk updated using a seed file, but only for the following device types: PIX, PIX 7.x, ASA, IOS, and SWITCH-IOS.  Any other device types have to be updated manually.  The details are on page 1-46 of the Device Configuration Guide.  You will also need the details for using a seed file, from the same document.
> is this absoluteley necessary?
If you want to communicate with the devices via SNMP, then yes, you need to update the strings.  This is especially the case if you don't use any other communications protocols such as SSH, Telnet, or FTP.  Also, without the updated SNMP strings, MARS can't fully discover the Layer 2 topology from the device.
Unfortunately, the SNMP string bulk update is only available for SNMPv1 (or v2 with no encryption) credentials.  If you're using SNMPv3, each device has to be edited manually.

Similar Messages

  • Cs-mars changing the community string on multiple devices

    Hello,
    We've changed the snmp v2 community strings on all the network devices.
    Is it possible in cs-mars to change the community string on multiple devices?
    When I select edit in admin>security and monitor devices> and select several devices and click edit the message "please select only one device to edit"
    What's the best way to do this, and is this absoluteley nessecary?
    Many thanks for all the help......

    > Is it possible in cs-mars to change the community string on multiple devices?
    Yes, it's possible for some device types.  The SNMP community string(s) can be bulk updated using a seed file, but only for the following device types: PIX, PIX 7.x, ASA, IOS, and SWITCH-IOS.  Any other device types have to be updated manually.  The details are on page 1-46 of the Device Configuration Guide.  You will also need the details for using a seed file, from the same document.
    > is this absoluteley necessary?
    If you want to communicate with the devices via SNMP, then yes, you need to update the strings.  This is especially the case if you don't use any other communications protocols such as SSH, Telnet, or FTP.  Also, without the updated SNMP strings, MARS can't fully discover the Layer 2 topology from the device.
    Unfortunately, the SNMP string bulk update is only available for SNMPv1 (or v2 with no encryption) credentials.  If you're using SNMPv3, each device has to be edited manually.

  • Pass SNMP community string a scripted monitor parameter in SCOM 2012

    Hi,
    Following the advice given here http://social.technet.microsoft.com/Forums/systemcenter/en-US/606d793c-b559-40b5-865a-ae312ee483d7/snmp-monitor-compare-oid-to-current-date
    I created a scripted monitor to poll the value of a SNMP OID and compare it to the current system date.
    It works perfectly fine, but I can't find how to pass the community string to the script in order to avoid having to hardcode it in clear text in the script... It seems this was published as a Target's Property with SCOM 2007 (like described here : http://www.burkard.it/2011/10/create-a-calculated-snmp-monitor/
    ) but that it's not the case anymore with SCOM 2012 (likely because SCOM 2012 now uses RunAs accounts to store community strings, I guess).
    So, what is the correct way to achieve this?
    Thanks!

    Ok, I just found the solution myself, it was quite easy actually (but as often not really documented anywhere) :
    you just have to pass this as a parameter :
    $RunAs[Name="NetworkLibrary!System.NetworkManagement.Snmp.MonitoringAccount"]/CommunityString$
    instead of the scom2007 property which was :
    $Target/Property[Type="NetworkDeviceLibrary!Microsoft.SystemCenter.NetworkDevice"]/CommunityString$
    And that's it, you don't even need to decode the string in your script as it was the case with scom 2007.

  • Disable default read community string

    I would like to know the procedure to disable the default read community string which is "public" and change create a new read community string using SMC 3.0

    In your topology view, right click on a host, select "Attribute Editor". Then click the "Security" tab. There are sections here to control the user and group access control as well as the SNMP community string settings for the agent. You can make changes to the community string and hit "OK".
    Regards,
    Jeff Grabell
    www.cirba.com

  • StorCenter px6-300d SNMP Community String

    Dear Reader,
    We have a NAS (StorCenter px6-300d) and we want to monitor it with our monitoring system.
    On the Iomega website (http://iomega.com/resources/ui/px6-300d-313/help/help.html) i've found the configuration steps (see below) and configured our NAS.
    Configuring SNMP settings
    To enable SNMP, click the switch on.
    Enter a unique username and password to define the community.
    Confirm your password.
    Enter the IP address of the host in the Trap Receivers text box. To grant access to multiple receivers, list all of them in the text box, separating each entry with a space.
    Click Apply to save your settings
    In our monitoring system we get the following msg: SNMP agent down - no response received. I think this is because of the (wrong) community string. In our monitoring system, under configuration tab, I tried 'public', 'username', 'password' etc in the community string field but it is not working.
    I hope someone can help me with this... what is the community string? If i'm doing something else wrong then...
    Thanks in advance.
    With kind regards,
    From the Netherlands
    Solved!
    Go to Solution.

    Hi yunuz,
    The username and password that you set on the NAS device needs to match on the SNMP server that you are trying to connect to. So use the same username and password for the server. Do you know what SNMP version your client is using?
    What is an “SNMP Community String”?
    The “SNMP Community string” is like a user id or password that allows access to a router's or other device's statistics. PRTG sends the community string along with all SNMP requests. If the community string is correct, the device responds with the requested information. If the community string is incorrect, the device simply discards the request and does not respond.
    Note: SNMP Community strings are used only by devices which support SNMPv1 and SNMPv2c protocol. SNMPv3 uses username/password authentication, along with an encryption key.
    By convention, most SNMPv1-v2c equipment ships from the factory with a read-only community string set to "public". It is standard practice for network managers to change all the community strings to customized  values in the device setup.
    Source: http://www.paessler.com/manuals/prtg_traffic_grapher/whatisansnmpcommunitystring
    Have questions and need answers?
    Search the database for answers to FAQ's, software/driver downloads, tutorials, news, features and more!
    LenovoEMC Support & Downloads
    LenovoEMC North America Support Contact Page

  • How to get the number of community members from outside the community

    Hi everyone.
    I need to know if there is any way to get the number of community members from outside the community, I mean, not using the "What's happening" webpart. I want to build up a page with a Webpart that summarize my three most visited communities indicating
    number of members, three last messages in the newsfeed, and number of posts in blog, wikis, document libraries, etc.
    Do I need statistics to get this kind of information? Should I use Sharepoint Object model instead?
    Here is an example of what I need:
    - Community name
    - Number of members
    - Community activity (messages, docs uploaded to library, etc)
    - Number of posts in calendar, blog, wiki that belongs to community
    Thank you all!

    Hi Thuan.
    Thanks for your answer but it does not help me because these communities are Sharepoint Communities not external sites so I need to get that information using SP object model and BCS in this case is useless.
    EDIT
    I found the solution using the search objects but I was only able to get members, discussions and replies
    using (ClientContext clientContext = new ClientContext("URL_OF_ENTERPRISE_SEARCH_CENTER"))
    KeywordQuery keywordQuery = new KeywordQuery(clientContext);
    keywordQuery.QueryText = "The_Name_of_the_Community WebTemplate:COMMUNITY";
    SearchExecutor searchExecutor = new SearchExecutor(clientContext);
    ClientResult<ResultTableCollection> results = searchExecutor.ExecuteQuery(keywordQuery);
    clientContext.ExecuteQuery();
    System.Collections.Generic.IDictionary<string, object> ret = null;
    foreach (System.Collections.Generic.Dictionary<string, object> resultRow in results.Value[0].ResultRows)
    Console.WriteLine("{0}: {1} ({2})", resultRow["CommunityMembersCount"], resultRow["CommunityTopicsCount"], resultRow["CommunitiyRepliesCount"]);
    This is a Console Application.
    I hope someone helps

  • How do I program Instrument I/O Assistant to read a variable in the input string?

    How do I program the Instrument I/O Assistant to read a variable in the input string? I can manually type in the string using the Instrument I/O Assistant using the "Write" or "Query" tools but I do not know how to send a variable input to the Instrument I/O Assistant so that variable can be used inside the "Write" string. For example, I have a power supply whose current I want to set to X Amps. I can type the command "PC10" to program the current to 10 Amps, however I want to be able to program it at any arbitrary current. How do I feed the value X into the code for this purpose?

    You can't. The assistant was designed to be a quick and dirty way to do some basic communication with an instrument. You can turn it into a VI (right click and select Open Front Panel) and modify it so that your write string is an input to the VI or use it as a template and create your own code with VISA Read and Write primatives.

  • Getting Excel to interpret the return string of a WEBSERVICE() function using a WCF REST service.

    I am using the WEBSERVICE() function in Excel and a WCF REST service is called through this function.  
    The web service returns a string value of true or false when invoked.  E.g. <string xmlns="http://schemas.microsoft.com/2003/10/Serialization/">True</string>
    This has been confirmed through debugging and it seems to be working fine when invoked through a client application or browser.
    However, the result shown in the cell in the Excel sheet is #VALUE!. This particular cell has a custom format (set using the Format Cells ... option) that displays "Yes" or "No". (The
    custom format is "Yes" ; "Yes" ; "No".)  Is this the correct way of interpreting the results of a Web Service method called in Excel? Does a #VALUE! result actually imply a formatting issue or some other interpretation
    error? Is there anything missing? Can somebody suggest ideas?
    Any help would be appreciated.
    Many thanks,
    Keith
    R K Howard

    Hi Keith,
    Have you used the formula FILTERXML(xml, xpath) function to extract single pieces of data from the XML string?
    If not, please follow the blog below, the author will guide you to get data from Webservice.
    http://blogs.office.com/2013/03/21/use-webservice-functions-to-automatically-update-excel-2013-spreadsheets-with-online-data/
    Best Regards
    Lan 
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • How to determine the connection string to a SQLite database, in C# code

    Hello. I'm trying to figure out how to specify the connection string to a SQLite database, I would like to access using the following code:
    string connectionString = null;
    SqlConnection connection;
    SqlCommand command;
    SqlDataAdapter adapter = new SqlDataAdapter();
    DataSet ds1 = new DataSet();
    string sql = "SELECT DataName, Data, Id, UserId, DateLastUpdated FROM MainTable";
    connectionString = "Data Source=C:\\SQLITEDATABASES\\SQLITEDB1.sqlite;Version=3;";
    connection = new SqlConnection(connectionString);
    try
    connection.Open();
    command = new SqlCommand(sql, connection);
    catch
    The value I assigned to the variable connectionString, in the code above, I obtained somewhere from the Internet. It does not work. I'm using Visual Studio 2013, against the file sqlite-netFx451-setup-bundle-x86-2013-1.0.96.0.exe, which
    I installed, and got from
    here.
    My application's App.config file looks as follows:
    <?xml version="1.0" encoding="utf-8"?>
    <configuration>
    <configSections>
    </configSections>
    <connectionStrings>
    <add name="DC_Password_Saver.Properties.Settings.DC_Password_SaverConnectionString" connectionString="data source=&quot;C:\Users\patmo_000\Documents\Visual Studio 2013\Projects\DC Password Saver\DC Password Saver\DC Password Saver.db&quot;" providerName="System.Data.SQLite.EF6"/>
    </connectionStrings>
    <startup>
    <supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.5.1"/>
    </startup>
    </configuration>
    I tried to use the value assigned to connectionString in the XML settings above, replacing single backslash characters with double backslash characters, because the Visual Studio editor flagged them as unrecognizable, and wound up with the
    following.
    SqlDataAdapter adapter = new SqlDataAdapter();
    DataSet ds1 = new DataSet();
    string sql = "SELECT DataName, Data, Id, UserId, DateLastUpdated FROM MainTable";
    connectionString = "data source=&quot;C:\\Users\\patmo_000\\Documents\\Visual Studio 2013\\Projects\\DC Password Saver\\DC Password Saver\\DC Password Saver.db&quot;";
    connection = new SqlConnection(connectionString);
    The above code however does not work either. So again, does anyone know how I can specify in C# code, a connection string to access my SQLite database? Thanks in advance for your reply.

    What does SQLite connection strings has to do with WPF?
    You will find some valid connection strings here:
    https://www.connectionstrings.com/sqlite/
    But you cannot use the SqlConnection class to connect to a SQLite database. You will need to download and add a reference to the System.Data.SQLite library and then use the SQLiteConnection class:
    connection = new System.Data.SQLite.SQLiteConnection(connectionString);
    try
    connection.Open();
    command = new System.Data.SQLite.SQLiteCommand(sql, connection);
    catch
    Please refer to the following article for more information and an example of how to connect and read and write data from an SQLite database using C#:
    http://blog.tigrangasparian.com/2012/02/09/getting-started-with-sqlite-in-c-part-one/.
    There is contains a link where you can download the required assemblies.
    Hope that helps.
    Please remember to mark helpful posts as answer to close your threads and then start a new thread in an approproate forum if you have a new question.

  • Chnaging the query string

    Hi there guys!!!
    I am really in love with jasper report, but i need some information on how to change the query string of the .xml file in a java application using the prepared statement.
    your help is really needed...

    Hi,
    According to Correlation ID: 5ccdfddc-dee5-4713-be06-6b2f2cbd0ef3, please use ULS viewer to find more information in the ULS log.
    Where did the user profile photographs stored?
    Before you can upgrade user profile in your environment, you must first configure the User Profile service and Managed Metadata service and then upgrade the Shared
    Services Provider (SSP) database
    In addition to that, in order to upgrade the SharePoint 2007 to SharePoint 2010, we must update SharePoint 2007 to Service Package(SP) 2 at least. The requirement
    is mentioned in this article:
    http://technet.microsoft.com/en-us/library/cc263322.aspx
    For more information about migrating MOSS 2007 SSP to SharePoint 2010 in a database attach scenario, please refer to the following articles:
    http://spmike.com/2010/08/13/migrating-moss-2007-sspmysites-to-sharepoint-2010-in-a-database-attach-scenario
    http://technet.microsoft.com/en-us/library/ee731990.aspx
    Thanks,
    Rock Wang
    Regards, Rock Wang Microsoft Online Community Support

  • Workflow manager 1.0 : runtime error 400 running Add-WFHost "The api-version in the query string is not supported"

    Installing Workflow Manager 1.0 for SharePoint Server 2013 SP1 everything is fine until the last step of the configuration and last powershell command : 
    Add-WFHost -WFFarmDBConnectionString 'myconnectionstring' -RunAsPassword $WFRunAsPassword -EnableFirewallRules $true -SBClientConfiguration $SBClientConfiguration -CertificateAutoGenerationKey $WFCertAutoGenerationKey -Verbose;
    gives me the following error : 
    Add-WFHost : The remote server returned an error: (400) Bad Request. The api-version in the query string is not supported. Either remove it from the Uri or use one of '2012-03'..TrackingId:412684e3-3539-468e-91e6-17838c6eaa55_GS
    P,TimeStamp:04/04/2014 12:54:11
    At line:1 char:1
    Can't find anything about this subject except this
    thread which does not help me that much in SharePoint dev env ...
    Removing workflow manager 1.0 and service bus (leave the farm using wizzard, remove binaries and databases) does not help.
    Who already faces this issue and how can I try to resolve it ?
    Best regards !
    Alexandre DAVID

    The API version is hardcoded in Microsoft.ServiceBus.dll, which ships as part of the Service Bus. Each version of this lib has a different string.
    If you install workflow manager 1.0, here are the pre-requisites:
    .NET Framework 4 Platform Update 3 or .NET Framework 4.5
    Service Bus 1.0
    Workflow Client 1.0
    PowerShell 3.0
    The following are the pre-requisites to configure Workflow Manager 1.0
    Instance of SQL Server 2008 R2 SP1, SQL Server Express 2008 R2 SP1, or SQL Server 2012.
    TCP/IP connections or named pipes must be configured in SQL Server.
    Windows Firewall must be enabled. [Windows Firewall is Off on target server]
    Ports 12290 and 12291 must be available.
    Here are the reference for installing and configuring Workflow Manager 1.0:
    http://lennytech.wordpress.com/2013/06/02/installing-workflow-manager-1-0/
    http://lennytech.wordpress.com/2013/06/02/configuring-workflow-manager-1-0/
    http://social.technet.microsoft.com/Forums/en-US/c74507fb-ac2d-405f-b19c-2712b1055708/workflow-manager-10-configuration-service-bus-for-windows-server-the-api-version-is-not?forum=sharepointadmin

  • Regarding the Communication channel options

    Hi guys,
    In the Communication channel We have an option in the File processing parametrs that is File construction mode Here i gave Append, every time the output is appended to the current file, but my requirement is i want to append the data on the date wise, means today(29/08/08) i want only one file, tomorrow(30/08/08) ill get only one file,...
    How to achieve this, how we will give the date in the CC ?

    Hi,
    Rather than using the variable substution use this.
    1. Create a UDF with two input a,b with the following code.
    DynamicConfiguration conf = (DynamicConfiguration) container.getTransformationParameters().get(StreamTransformationConstants.DYNAMIC_CONFIGURATION);
    DynamicConfigurationKey key = DynamicConfigurationKey.create("http://sap.com/xi/XI/System/File","FileName");
    String fname = "file" + a + ".xml";
    conf.put(key, fname);
    return "b";
    2. Map the CurrentDate function with transformDate and with the UDF as input a and any other mandatory field as another input b map the out put of the UDF to the required filed.
    3. In the TransformDate function use the Source date format as yyyy/MM/dd and target date format as yyyyMMdd.
    note: mapping any source field with b input via UDF to the target field ensures that the UDF is always executed and sets the file name with the current date.
    Thanks
    SaNv...

  • BD Lookup Error _ Not using the COmmunication channel!

    Dear all,
    I Tried to  do DB Lookup as told in this blog by siva
    /people/siva.maranani/blog/2005/08/23/lookup146s-in-xi-made-simpler
    I used the below code.
    I am not Getting any error, the mapping is successfully ACTIVATED. But in the Receiver field i am Getting Null as output , the DB lookup which i have mentioned is not connecting to the Database and executing and fetching the query. Just inthe receiver field its througing the Null valuse. The Required Value is not fetched by using the communication channel.
    I am getting the above error when i try to TEST THE MAPPING in IR.
    Below is the code i used.
    SERVER:XI 3.0
    SP:18
    RECEIVER DATABSE: MSQL SERVER 2000
    CODE----
    //write your code here
    String Query = "";
    Channel channel = null;
    DataBaseAccessor accessor = null;
    DataBaseResult resultSet = null;
    Query = "Select cir_id from circle where cir_sap = 'IDBL'";
    try{
    channel = LookupService.getChannel("<Business Service/System Name>","JDBC_channel_receiver Communication channel");
    accessor = LookupService.getDataBaseAccessor(channel);
    resultSet = accessor.execute(Query);
    for(Iterator rows = resultSet.getRows();rows.hasNext();){
    Map rowMap = (Map)rows.next();
    result.addValue((String)rowMap.get("cir_id"));
    catch(Exception ex){
    result.addValue(ex.getMessage());
    finally{
    try{
    if (accessor!= null) accessor.close();
    catch(Exception ex){
    result.addValue(ex.getMessage());
    END CODE----
    Please help me out.
    I am getting output as null. But in database value is there for cir_id where cir_sap='IDBL'.
    Regards,
    Prakash

    As i told before i have tested the interface, its not showing any error, its Activated and throwing Null as output.
    Its not fetching the value from database. In CC Monitoring also the adapter is in Green Status. No error over there. Its throwing the output as Null (Default value in the code.)
    Below is the connection parameter i have used:
    DRIVER:com.microsoft.jdbc.sqlserver.SQLServerDriver
    CONNECTION : jdbc:microsoft:sqlserver://<IP>:1433;DatabaseName=test_db
    But in the blog
    /people/siva.maranani/blog/2005/08/23/lookup146s-in-xi-made-simpler
    If u can see properly, he has mentioed some extra parameters in the JDBC Connection Parameters.
    But the screenshot is not proper so i am not able to see the querry he has used in Connection parameters.
    Please help
    Could anyone tell how to write the Select statement in Connection Parameter for Adapter as given (Partialy in screenshot in BLOG)?
    Regards,
    Prakash
    Edited by: senthilprakash selvaraj on Jul 1, 2008 7:33 AM

  • Where to Hard Code the Connection String.....

    Hi,
    We just give the url to the user and when the user clik it.
    The Application form login will appear and user should login before they
    can use the system.
    When our DBA setup in the production they give us the url and
    when I click it the Database login screen appear before it goes to
    the Application form login.
    My problem is how to bypass that Database Login Screen and where to hardcode
    the connection string in which file in the server.
    Thanks.
    Regards,
    Jun

    We are hardcoding the userId (Connection) details in the formsweb.cfg, wil it create any issues to our security system.
    From the application link, i couldnt get the userid details, as all the other
    details like
    serverArgs="escapeParams=true module=frm_login.fmx userid= sso_userid=%20 sso_formsid=%25OID_FORMSID%25 sso_subDN= sso_usrDN= debug=no host= port= buffer_records=no debug_messages=no array=no obr=no query_only=no quiet=yes render=no record= tracegroup= log= term=D:\Applns\OracleForms\forms\fmrweb_.res"
    separateFrame="true"
    splashScreen="no"
    background="no"
    lookAndFeel="Oracle"
    colorScheme="blue"
    serverApp="default"
    logo="false"
    imageBase="codebase"
    formsMessageListener=""
    recordFileName=""
    EndUserMonitoringEnabled=""
    EndUserMonitoringURL=""
    heartBeat=""
    were visible (view Source) but userid= sso_userid=%20, i think this points to
    basejini.htm, which doesnt contain the userid details ..
    am i correct .. please render your thoughts over this.
    Many Thanks
    Deepa
    Message was edited by:
    Deepa.ibs

  • Changing public community string in snmpd.conf & snmpdx.acl fills /var 100%

    Hi,
    we have a security concern dealing with our SEA agent dealing with community names...
    We want to be able to change the comminity names in the config files so that public, private does not show up anywhere.
    The system is running Solaris 8. When we change the community setting we keep getting these errors:
    Nov 29 16:38:06 test01 /usr/lib/snmp/snmpdx: [ID 702911 daemon.error] community_check();bad community from localhost
    Nov 29 16:38:06 test01 /usr/lib/snmp/snmpdx: [ID 702911 daemon.error] session_open() failed for a pdu received from localhost.41927
    These are the changes made to the snmpd.conf file:
    system-group-read-community test01tes01
    read-community test01test01
    Changes made to snmpdx.acl
    acl = {
    communities = test01test01
    access = read-only
    managers = *
    Now, the only way to get rid of the error messages is to insert the public entry back under communities. Else /var gets 100% & causes issues.
    Has anybody been able to remove the public entry and get this working with Solaris 8

    N/m...found my answer...I needed to change my /System/Libary/LaunchDaemonds/org.net-snmp.snmpd.plist to not disabled.

Maybe you are looking for