nv-l

Re: IBM Authentication failure trap???

1999-05-05 07:31:20
Subject: Re: IBM Authentication failure trap???
From: Jan Green <greenjan AT YAHOO DOT COM>
To: nv-l AT lists.tivoli DOT com
Date: Wed, 5 May 1999 04:31:20 -0700
Matt -

Indeed that is what it looks like. Be sure you have
that address defined in your snmpd.conf file: Here is
a copy of mine:

community       netview 198.151.1.200 255.255.255.255
readOnly
community       netview 127.0.0.1     255.255.255.255
readOnly
community       public  0.0.0.0       0.0.0.0
readOnly
community       public  127.0.0.1     255.255.255.255
readOnly
community       private 198.151.1.200 255.255.255.255
readOnly
community       private 127.0.0.1     255.255.255.255
readOnly
community       system  198.151.1.200 255.255.255.255
readOnly
community       system  127.0.0.1     255.255.255.255
readOnly 1.17.2

trap            public          127.0.0.1       1.2.3
 fe      # loopback

I am not sure all those entries are absolutely
necessary but, I'm working fine. Also, be sure you
have your loopback address configured in your SNMP
Configuration.
ie. "Options Pulldown".

Hope this helps.




--- Matt Ashfield <mda AT UNB DOT CA> wrote:
> Jan,
>
> I have turned on the trace. My problem I think is
> that I am getting these
> traps from the server itself...Why would this be? I
> am a bit fuzzy as to how
> to read the log file, but here is what it shows in
> part of it:
>
> 05/04/99 15:33:37 EXCEPTIONS: authentication error:
> invalid community name:
> MyCommunityName
> 05/04/99 15:33:37 TRACE:
> {
>    version 0,
>    community "public",
>    data {
>       trap {
>          enterprise risc6000snmpd.3,
>          agent-addr 'xxxxxxxx'H,
>          generic-trap 4,
>          specific-trap 0,
>          time-stamp 64644,
>          variable-bindings {}
>       }
>    }
> }
> 05/04/99 15:33:37 DEBUG: sending 48 bytes to
> 127.0.0.1
> 05/04/99 15:33:37 PDUS:
>  30 2e 02 01 00 04 06 70 75 62 6c 69 63 a4 21 06
>  0c 2b 06 01 04 01 02 03 01 02 01 01 03 40 04 83
>  ca 03 18 02 01 04 02 01 00 43 03 00 fc 84 30 00
> 05/04/99 15:33:37 DEBUG: sent trap
> (authenticationFailure) to 127.0.0.1
>
> Now as I read this, I read that agent 'xxxxxxxx' is
> generating this trap and
> forwarding it 127.0.0.1. Agent xxxxxxxx is the hex
> representation for the ip
> address of the Netview server. So basically I'm
> reading this as my server is
> not able to authenticate itself with itself??
>
> Confused
>
> Matt
> mda AT unb DOT ca
>
> -----Original Message-----
> From: Jan Green <greenjan AT yahoo DOT com>
> To: NV-L AT ucsbvm.ucsb DOT edu <NV-L AT ucsbvm.ucsb DOT edu>
> Date: Tuesday, May 04, 1999 3:35 PM
> Subject: Re: IBM Authentication failure trap???
>
>
> >Matt -
> >
> >A machine with an incorrect community name(one not
> >configured in your SNMP configuration file) is
> doing a
> >SNMP get or put to your box.
> >
> >You can find out what it is by:
> >
> >Editing your /etc/snmpd.conf file to enable logging
> >logging size 30K or so and level 3.
> >
> >stopsrc -s snmpd.conf
> >startsrc -s snmpd.conf
> >
> >When you see this message appear. Check the log
> files
> >in /usr/tmp called snmp*. you will see the
> incorrect
> >community name and the ip address of the machine
> >sending the request.
> >
> >You can either change the community name on the box
> >sending the requests or add that box to your SNMP
> >configuration.
> >
> >That was my problem anyway.
> >
> >Hope this helps.
> >
> >
> >Jan
> >
> >--- Matt Ashfield <mda AT UNB DOT CA> wrote:
> >> Hi all,
> >>
> >> I am running Netview 5.1.1 over Framework 3.6 on
> AIX
> >> 4.3.2. I keep receiving (at nearly 5 times a
> minute)
> >> an IBM Authentication Failure Trap from my
> Netview
> >> server machine. The enterprise that is specified
> by
> >> the trap in the control desk does not even show
> up
> >> in my Event Configuration Window!
> >>
> >> The card in the control desk has the following
> info:
> >> A IBM Incorrect Community Name (authentication
> >> failure trap)
> >> enterprise: 1.3.6.1.4.1.2.3.1.2.1.1.3
> >> source: Agent (A)
> >> hostname: my hostname for my server
> >>
> >> Any help would be greatly appreciated!
> >>
> >> Cheers
> >>
> >> Matt Ashfield
> >> Computing Services
> >> University of New Brunswick
> >> 506-447-3033
> >> mda AT unb DOT ca
> >>
> ><HR>
> ><!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">
> ><HTML>
> ><HEAD>
> >
> ><META content=text/html;charset=iso-8859-1
> >http-equiv=Content-Type>
> ><META content='"MSHTML 4.72.3110.7"'
> name=GENERATOR>
> ></HEAD>
> ><BODY bgColor=#ffffff>
> ><DIV><FONT color=#000000 size=2>Hi
> all,</FONT></DIV>
> ><DIV><FONT color=#000000 size=2></FONT>&nbsp;</DIV>
> ><DIV><FONT color=#000000 size=2>I am running
> Netview
> >5.1.1 over Framework 3.6 on
> >AIX 4.3.2. I keep receiving (at nearly 5 times a
> >minute) an IBM Authentication
> >Failure Trap from my Netview server machine. The
> >enterprise that is specified by
> >the trap in the control desk does not even show up
> in
> >my Event Configuration
> >Window!</FONT></DIV>
> ><DIV>&nbsp;</DIV>
> ><DIV><FONT color=#000000 size=2>The card in the
> >control desk has the following
> >info:</FONT></DIV>
> ><DIV><FONT color=#000000 size=2>A IBM Incorrect
> >Community Name (authentication
> >failure trap) </FONT></DIV>
> ><DIV><FONT color=#000000 size=2>enterprise:
> >1.3.6.1.4.1.2.3.1.2.1.1.3
> ></FONT></DIV>
> ><DIV><FONT color=#000000 size=2>source: Agent
> >(A)</FONT></DIV>
> ><DIV><FONT color=#000000 size=2>hostname: my
> hostname
> >for my server</FONT></DIV>
> ><DIV><FONT color=#000000 size=2></FONT>&nbsp;</DIV>
> ><DIV><FONT color=#000000 size=2>Any help would be
> >greatly
> >appreciated!</FONT></DIV>
> ><DIV><FONT color=#000000 size=2></FONT>&nbsp;</DIV>
> ><DIV><FONT color=#000000 size=2>Cheers</FONT></DIV>
> ><DIV><FONT color=#000000 size=2></FONT>&nbsp;</DIV>
> ><DIV><FONT color=#000000 size=2>Matt
> >Ashfield<BR>Computing
> >Services<BR>University of New
> >Brunswick<BR>506-447-3033<BR><A
>
>href="mailto:mda AT unb DOT ca">mda AT unb DOT 
>ca</A></FONT></DIV></BODY></HTML>
> >
> >
>
>_________________________________________________________
> >Do You Yahoo!?
> >Get your free @yahoo.com address at
> http://mail.yahoo.com
> >
>

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com