RE: [tkined] SNMPv2c and security. Responder behavior.

From: Collard Joseph (Joseph.Collard@SAITRH.com)
Date: Thu May 10 2001 - 12:41:49 MET DST


Hello,
1. About HTML.
I already configured my e-mail agent to send "Plain test". I have to check
with the IT department responsible for the server.
2. Hereafter a short demo script, the reply from the agent, my comment and
question
Thanks (and sorry for HTML format, I am aware and I have to check with the
IT )

Joseph Collard

SAIT-STENTO Wireless Network Integration
R&D Software Engineer
Chaussée de Ruisbroek 66
B-1180 Brussels
Phone +32 2 370.54.83
Fax +32 2 376.62.20
E-mail joseph.collard@saitrh.com
===================

1. The short test case script

# The test case runs on Win 98 with Tcl 8.3 ( modified to adapt to tcltest
2.0 ) and Tnm 3.0.0
#
# The responder session within the agent is configured with -community
public
# Herafter a short manager script, as extracted from the test case
# (the effective test cases being implemented using tcltest 2.0 )
console show
set snmpGeneratorSessionParams [list -address 127.0.0.1 \
                                                -port 10161 \
                                                -version SNMPv2c \
                                                -community public \
                                                ]
set generatorSessionHandle [eval Tnm::snmp generator
$snmpGeneratorSessionParams ]
#
# Modify the used community name
#
$generatorSessionHandle configure -community "gtycr" ;# or any not "public"
#
set getResult [$generatorSessionHandle get SNMPv2-MIB!sysDescr.0 ]
#
vwait forever
#

2. The result at the console
The above script was "tested" within the used test file before submitting it
Here is the result

WARNING. ERROR SOURCING U:/Program Files/Tda/Agent/Test/Tagt_0.test:
noResponse 0 {}
    while executing
"$generatorSessionHandle get SNMPv2-MIB!sysDescr.0 "
    invoked from within
"set getResult [$generatorSessionHandle get SNMPv2-MIB!sysDescr.0 ]"
    (file "U:/Program Files/Tda/Agent/Test/Tagt_0.test" line 1127)
    invoked from within
"source $testFile "

3.My comment: The agent does not reply ( and watching at the agent, it does
not trigger the events "recv" or "begin" ). A priori, I expected an error,
such as authorizationError or ??

4. My question: Is it the normal behavior for a SNMPv2c agent ?.

============================
Joseph Collard

-----Original Message-----
From: Juergen Schoenwaelder [mailto:schoenw@ibr.cs.tu-bs.de]
Sent: jeudi 10 mai 2001 12:13
To: Joseph.Collard@SAITRH.com
Cc: tkined@ibr.cs.tu-bs.de
Subject: Re: [tkined] SNMPv2c and security. Responder behavior.

>>>>> Collard Joseph writes:

Collard> Hello, I am using Tnm 3.0.0 to develop an agent (currently to
Collard> test manager applications ). The responder session is
Collard> configured with -version SNMPv2c -community xyz To test the
Collard> behavior of the agent, a manager generator session is
Collard> configured with -community ABC The behavior is as follows:
Collard> 1. The agent does not reply, and the manager local
Collard> synchronous reply is "noResponse 0 {}" (after the configured
Collard> retries ) 2. The SNMP engine within the agent "blocks" the
Collard> request, as it can be perceived by configuring "Tnm::snmp
Collard> watch 1 " and "$session bind recv a_script " and "$session
Collard> bind begin another_script" . Indeed, the events are not
Collard> triggered. My comment: A priori, I expected an error, such
Collard> as authorizationError or ?? My question: Is it the normal
Collard> behavior for a SNMPv2c agent ?.

Please reduce the problem to a very short demo script which can send
out so that we know precisely what you are trying to do.

And please, turn off HTML. Thanks.

/js

-- 
Juergen Schoenwaelder      Technical University Braunschweig
<schoenw@ibr.cs.tu-bs.de>  Dept. Operating Systems & Computer Networks
Phone: +49 531 391 3289    Bueltenweg 74/75, 38106 Braunschweig, Germany
Fax:   +49 531 391 5936    <URL:http://www.ibr.cs.tu-bs.de/~schoenw/>

-- !! This message is brought to you via the `tkined & scotty' mailing list. !! Please do not reply to this message to unsubscribe. To subscribe or !! unsubscribe, send a mail message to <tkined-request@ibr.cs.tu-bs.de>. !! See http://wwwsnmp.cs.utwente.nl/~schoenw/scotty/ for more information.



This archive was generated by hypermail 2b29 : Thu Jan 03 2002 - 14:56:26 MET