Date: Fri, 6 Jan 2006 17:21:43 GMT From: john fleming <john.fleming-eds@eds.com> To: freebsd-gnats-submit@FreeBSD.org Subject: docs/91406: bsnmpd needs a config option to disable write ability. Message-ID: <200601061721.k06HLhdP091545@www.freebsd.org> Resent-Message-ID: <200601061730.k06HU3E9006514@freefall.freebsd.org>
index | next in thread | raw e-mail
>Number: 91406
>Category: docs
>Synopsis: bsnmpd needs a config option to disable write ability.
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-doc
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Fri Jan 06 17:30:02 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator: john fleming
>Release: 6.0-R
>Organization:
pfSense
>Environment:
FreeBSD 6.0-R
>Description:
There currently is no way to disabled read/write community in bsnmpd. The default for bsnmpd is a hard coded public for both read and write community strings. There needs to be a way to set the write (and possibly read ) string to NULL or something along those lines, to disabe snmp write support.
>How-To-Repeat:
N/A
>Fix:
two options, set write and read string to something and tell no on (NO ONE I SAY!). Option 2, disable snmp read/write strings via a code change. Edit contrib/bsnmp/snmpd/main.c, you should see something like..
(void)comm_define(1, "SNMP read", NULL, "public");
(void)comm_define(2, "SNMP write", NULL, "public");
change both "public"s to NULL. (no quote marks).
then rebuild bnmpd.
# stop bsnmpd first.
cd /usr/src/usr.sbin/bsnmpd
make obj
make depend
make
make install
# restart bsnmpd
>Release-Note:
>Audit-Trail:
>Unformatted:
help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200601061721.k06HLhdP091545>