Jan,
Just out of curiosity, what does a trace look like from snmpd.log that
isen't messed up?
Cheers
matt
mda@unb.ca
-----Original Message-----
From: Jan Green <greenjan@yahoo.com>
To: NV-L@ucsbvm.ucsb.edu <NV-L@ucsbvm.ucsb.edu>
Date: Wednesday, May 05, 1999 8:31 AM
Subject: Re: IBM Authentication failure trap???
>Matt -
>
>Indeed that is what it looks like. Be sure you have
>that address defined in your snmpd.conf file: Here is
>a copy of mine:
>
>community netview 198.151.1.200 255.255.255.255
>readOnly
>community netview 127.0.0.1 255.255.255.255
>readOnly
>community public 0.0.0.0 0.0.0.0
>readOnly
>community public 127.0.0.1 255.255.255.255
>readOnly
>community private 198.151.1.200 255.255.255.255
>readOnly
>community private 127.0.0.1 255.255.255.255
>readOnly
>community system 198.151.1.200 255.255.255.255
>readOnly
>community system 127.0.0.1 255.255.255.255
>readOnly 1.17.2
>
>trap public 127.0.0.1 1.2.3
> fe # loopback
>
>I am not sure all those entries are absolutely
>necessary but, I'm working fine. Also, be sure you
>have your loopback address configured in your SNMP
>Configuration.
>ie. "Options Pulldown".
>
>Hope this helps.
>
>
>
>
>--- Matt Ashfield <mda@UNB.CA> wrote:
>> Jan,
>>
>> I have turned on the trace. My problem I think is
>> that I am getting these
>> traps from the server itself...Why would this be? I
>> am a bit fuzzy as to how
>> to read the log file, but here is what it shows in
>> part of it:
>>
>> 05/04/99 15:33:37 EXCEPTIONS: authentication error:
>> invalid community name:
>> MyCommunityName
>> 05/04/99 15:33:37 TRACE:
>> {
>> version 0,
>> community "public",
>> data {
>> trap {
>> enterprise risc6000snmpd.3,
>> agent-addr 'xxxxxxxx'H,
>> generic-trap 4,
>> specific-trap 0,
>> time-stamp 64644,
>> variable-bindings {}
>> }
>> }
>> }
>> 05/04/99 15:33:37 DEBUG: sending 48 bytes to
>> 127.0.0.1
>> 05/04/99 15:33:37 PDUS:
>> 30 2e 02 01 00 04 06 70 75 62 6c 69 63 a4 21 06
>> 0c 2b 06 01 04 01 02 03 01 02 01 01 03 40 04 83
>> ca 03 18 02 01 04 02 01 00 43 03 00 fc 84 30 00
>> 05/04/99 15:33:37 DEBUG: sent trap
>> (authenticationFailure) to 127.0.0.1
>>
>> Now as I read this, I read that agent 'xxxxxxxx' is
>> generating this trap and
>> forwarding it 127.0.0.1. Agent xxxxxxxx is the hex
>> representation for the ip
>> address of the Netview server. So basically I'm
>> reading this as my server is
>> not able to authenticate itself with itself??
>>
>> Confused
>>
>> Matt
>> mda@unb.ca
>>
>> -----Original Message-----
>> From: Jan Green <greenjan@yahoo.com>
>> To: NV-L@ucsbvm.ucsb.edu <NV-L@ucsbvm.ucsb.edu>
>> Date: Tuesday, May 04, 1999 3:35 PM
>> Subject: Re: IBM Authentication failure trap???
>>
>>
>> >Matt -
>> >
>> >A machine with an incorrect community name(one not
>> >configured in your SNMP configuration file) is
>> doing a
>> >SNMP get or put to your box.
>> >
>> >You can find out what it is by:
>> >
>> >Editing your /etc/snmpd.conf file to enable logging
>> >logging size 30K or so and level 3.
>> >
>> >stopsrc -s snmpd.conf
>> >startsrc -s snmpd.conf
>> >
>> >When you see this message appear. Check the log
>> files
>> >in /usr/tmp called snmp*. you will see the
>> incorrect
>> >community name and the ip address of the machine
>> >sending the request.
>> >
>> >You can either change the community name on the box
>> >sending the requests or add that box to your SNMP
>> >configuration.
>> >
>> >That was my problem anyway.
>> >
>> >Hope this helps.
>> >
>> >
>> >Jan
>> >
>> >--- Matt Ashfield <mda@UNB.CA> wrote:
>> >> Hi all,
>> >>
>> >> I am running Netview 5.1.1 over Framework 3.6 on
>> AIX
>> >> 4.3.2. I keep receiving (at nearly 5 times a
>> minute)
>> >> an IBM Authentication Failure Trap from my
>> Netview
>> >> server machine. The enterprise that is specified
>> by
>> >> the trap in the control desk does not even show
>> up
>> >> in my Event Configuration Window!
>> >>
>> >> The card in the control desk has the following
>> info:
>> >> A IBM Incorrect Community Name (authentication
>> >> failure trap)
>> >> enterprise: 1.3.6.1.4.1.2.3.1.2.1.1.3
>> >> source: Agent (A)
>> >> hostname: my hostname for my server
>> >>
>> >> Any help would be greatly appreciated!
>> >>
>> >> Cheers
>> >>
>> >> Matt Ashfield
>> >> Computing Services
>> >> University of New Brunswick
>> >> 506-447-3033
>> >> mda@unb.ca
>> >>
>> ><HR>
>> ><!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">
>> ><HTML>
>> ><HEAD>
>> >
>> ><META content=text/html;charset=iso-8859-1
>> >http-equiv=Content-Type>
>> ><META content='"MSHTML 4.72.3110.7"'
>> name=GENERATOR>
>> ></HEAD>
>> ><BODY bgColor=#ffffff>
>> ><DIV><FONT color=#000000 size=2>Hi
>> all,</FONT></DIV>
>> ><DIV><FONT color=#000000 size=2></FONT> </DIV>
>> ><DIV><FONT color=#000000 size=2>I am running
>> Netview
>> >5.1.1 over Framework 3.6 on
>> >AIX 4.3.2. I keep receiving (at nearly 5 times a
>> >minute) an IBM Authentication
>> >Failure Trap from my Netview server machine. The
>> >enterprise that is specified by
>> >the trap in the control desk does not even show up
>> in
>> >my Event Configuration
>> >Window!</FONT></DIV>
>> ><DIV> </DIV>
>> ><DIV><FONT color=#000000 size=2>The card in the
>> >control desk has the following
>> >info:</FONT></DIV>
>> ><DIV><FONT color=#000000 size=2>A IBM Incorrect
>> >Community Name (authentication
>> >failure trap) </FONT></DIV>
>> ><DIV><FONT color=#000000 size=2>enterprise:
>> >1.3.6.1.4.1.2.3.1.2.1.1.3
>> ></FONT></DIV>
>> ><DIV><FONT color=#000000 size=2>source: Agent
>> >(A)</FONT></DIV>
>> ><DIV><FONT color=#000000 size=2>hostname: my
>> hostname
>> >for my server</FONT></DIV>
>> ><DIV><FONT color=#000000 size=2></FONT> </DIV>
>> ><DIV><FONT color=#000000 size=2>Any help would be
>> >greatly
>> >appreciated!</FONT></DIV>
>> ><DIV><FONT color=#000000 size=2></FONT> </DIV>
>> ><DIV><FONT color=#000000 size=2>Cheers</FONT></DIV>
>> ><DIV><FONT color=#000000 size=2></FONT> </DIV>
>> ><DIV><FONT color=#000000 size=2>Matt
>> >Ashfield<BR>Computing
>> >Services<BR>University of New
>> >Brunswick<BR>506-447-3033<BR><A
>>
>>href="mailto:mda@unb.ca";>mda@unb.ca</A></FONT></DIV></BODY></HTML>
>> >
>> >
>>
>>_________________________________________________________
>> >Do You Yahoo!?
>> >Get your free @yahoo.com address at
>> http://mail.yahoo.com
>> >
>>
>
>_________________________________________________________
>Do You Yahoo!?
>Get your free @yahoo.com address at http://mail.yahoo.com
>
|