COMMAND
ucd-snmp
SYSTEMS AFFECTED
Linux RedHat 5.2
PROBLEM
Rui Ribeiro found following. He found a feature in the vacm
ucd-snmp v3.52 when setting up snmp services under Linux RH 5.2.
By default, v3.5.2 always delivers the system mib subtree.
Request is made with the public community name. All the machines
capable of connecting to your snmp port, will have access to that
information. Quite contrary to what the documentation says, you
can't change this behaviour with the vacm configuration file
(/etc/snmp/snmpd.conf). You can try, but it's ignored.
SOLUTION
ucd-snmp v3.5.2 has indeed the described problem. v3.6 no longer
suffers from it, but the RH smnpd default directory is no longer
recognized under it (RH joys). The best way to check for
configuration errors is invoking snmpd with the -L -D options.
Fixes:
- upgrade to 3.6, since it also has a better support for snmp
traps
- swapping to another Linux dristribution(?)