OBSOLETE Patch-ID# 106787-11
Keywords: acl security SNMP snmpdx mibiisa mib trap mibcodegen ifSpeed vge FDDI varbinds
Synopsis: Obsoleted by: 106787-12 Solstice Enterprise Agent 1.0.3: SNMP.
Date: Feb/15/2001

Solaris Release: 2.5.1 2.6

SunOS Release: 5.5.1 5.6

Unbundled Product: Solstice Enterprise Agent

Unbundled Release: 1.0.3

Xref: See patch 106874-xx for SEA DMI and patch 106956-xx for SEA SDK

Topic: 

Relevant Architectures: sparc

BugId's fixed with this patch: 4144431 4171108 4172607 4176076 4178419 4189025 4208419 4211850 4218931 4219323 4224859 4233051 4237139 4256473 4268600 4270182 4283090 4320436 4323926 4330039 4333417 4359519 4368330 4377219 4390382 4391717 4402954

Changes incorporated in this version: 4402954 4391717

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

   /usr/lib/libssagent.so.1
   /usr/lib/snmp/mibiisa
   /usr/lib/snmp/snmpdx
   /usr/sbin/snmp_trapsend
   /var/snmp/mib/sun.mib
/usr/lib/libssasnmp.so.1

Problem Description:

4402954 ifspeed of logical I/F is mistaken.
4391717 snmp_trapsend command returns ambiguous status when exit() is done
 
(from 106787-10)
4390382 snmp request from an unauthorized manager echos "End of MIB view"
4377219 fully qualified names choke when specified in acl lists
4368330 How to avoid the access of managers to agents?
 
(from 106787-09)
4359519 Authentication trap occur only 6 counts
4330039 snmp_trapsend: -c option does not work
 
(from 106787-08)
4333417 trap varbinds with type TimeTicks are skipped 
4283090 Subagent needs to start with a specific group id
 
(from 106797-07)
4323926 New fix for bug 4237139	get-next problem
 
(from 106797-06)
4320436 Support ifOperstatus as a link status so state will change when cable is disconnected.
 
(from 106797-05)
4270182 Send auth. trap from SEA agent queried with incorrect comm. string or from invalid manager. 
4256473 Send only one trap.
4268600 Make mibii accessible by localhost only.
4237139 Allows get-next for tabular values to work correctly for snmpdx mib
 
(from 106787-04)
4189025 Allows SEA SDK agents to have string table indices.
4218931 Allows SEA SDK agents to have trap variables that are tabular values.
4219323 Allows SEA SDK agents to report correct tag values in trap PDU.
4208419 Legacy agents like mibissa can have dots in community string names.
4233051 Mibiisa traps now contain correct source address in PDU.
4211850 Mibiisa correctly reports IfSpeed on vge (gigabyte) device.
4224859 Mibiisa correctly reports the MAC addr for FDDI devices.
 
(from 106787-03)
4171108 Unable to use more than 3 indexes in a table.
4178419 mibiisa consumes available swap space.
 
(from 106787-02)
4176076 snmpdx echos unnecessary messages to console
        Also: When manager read a non-existent variable, the error message
	will only be logged if snmpdx is started with the "-d" option.
 
 
(from 106787-01)
4172607 agent deleted from agent table when queried with incorrect 
        read string
4144431  mibissa consuming 50% plus of cpu.

Patch Installation Instructions:
-------------------------------- 
Refer to the Install.info file for instructions on using the
generic 'installpatch' and 'backoutpatch' scripts provided with
each patch.  Any other special or non-generic installation
instructions should be described below as special instructions.

Special Install Instructions:
----------------------------- 
IMPORTANT: This patch is not compatible with SDK agents built prior to
patch 106956-03. These agents must be recompiled using mibcodegen from
patch 106956-03 or greater. 
This patch is for SEA version 1.0.3
See SEA web page, if you need to add toolkit sdk (SUNWsasdk package)
http://www.sun.com/solstice/products/ent.agents
 
This patch modifies /etc/snmp/conf/snmpd.conf to include localhost
as a manager. This forces all queries to mib-2 to pass through snmpdx.
To specify a manager list for mibiisa you must create an mibiisa.acl
and specify the hostname. Mibiisa.rsrc must be modified to include
the location of the .acl file. If managers are specified,  snmpdx.acl
must include the hostname of the machine running snmpdx and subagents
built using micodegen must include localhost in the manager list of their
.acl.
 
eg: mibiisa.acl:
 
acl = {
        {
                communities = public, private
                access = read-write
                managers =<hostname> 
        }
}
 
eg: mibiisa.rsrc:
 
resource =
{
        {
                security = "/etc/snmp/conf/mibiisa.acl"
                registration_file = "/etc/snmp/conf/mibiisa.reg"
                policy = "spawn"
                type = "legacy"
                command = "/usr/lib/snmp/mibiisa -p $PORT"
 
        }
 
}
 
To enable the authentication traps, create a trap slot for trapnumber 0 in
snmpdx.acl and specify the hosts where traps should be sent:
 
eg: snmpdx.acl :
 
 
trap = {
{
       trap-community = SNMP-trap
       hosts = <hostname> 
      {
         enterprise = "sun"
         trap-num = 0
      }
}

README -- Last modified date:  Thursday, March 22, 2001

