Conference azur::mcc

2354.0. "Need BYPASS priv to display SNMP entities" by FOUR62::LICAUSE (Al Licause (338-5661)) Mon Feb 17 1992 12:12

I have a VAXstation 3100 running V1.1 of DECmcc and UCX V1.3.  I have installed
edited and successfully compiled the latest CISCO_MIBDEF.

Problem I have is that some file is not set correctly for the average user
to be able to display information.

When the user tries to display info from a Cisco router they get the following:

	$ mcc sho snmp cdcis1 all count
	DECmcc (V1.1.0)


	SNMP CDCIS1
	AT 17-FEB-1992 12:01:18 Counters

	No such entity: SNMP CDCIS1
	                         Unknown Entity = SNMP CDCIS1



But, if they are given BYPASS privelage all works just fine:

	MCC> sho snmp cdcis1 all count

	SNMP cdcis1
	AT 17-FEB-1992 12:00:09 Counters
	
	Examination of attributes shows:
	                              sysUpTime = 92740734


The user has the following privelages:

$ sho proc/priv

17-FEB-1992 12:00:36.88   User: DECMCC           Process ID:   0000005E
                          Node: DECMCC           Process name: "DECMCC"

Process privileges:
 LOG_IO               may do logical i/o
 TMPMBX               may create temporary mailbox
 NETMBX               may create network device
 PHY_IO               may do physical i/o

Process rights:
 INTERACTIVE
 REMOTE

System rights:
 SYS$NODE_DECMCC



I tried using the unsupported $ SET WATCH FILE/CLASS=ALL command and the
following files were touched when the above MCC command was issued:

Directory SYS$COMMON:[SYSEXE]  MCC_MAIN.EXE;1  (RWED,RWED,RWED,RE)

Directory SYS$COMMON:[SYSLIB]  MCC_FCL_PM.EXE;1  (RWED,RWED,RWED,RE)

Directory SYS$COMMON:[MCC]     MCC_PTB_PARSER.BPT;4 	(RWD,RWD,RWD,R)

Directory SYS$COMMON:[MCC]     MCC_MIR_DIRECTORY.DAT;1 (RWED,RWED,RWED,R)

Directory SYS$COMMON:[MCC]     MCC_MIR_ATTRIBUTE.DAT;1 (RWED,RWED,RWED,R)

Directory SYS$COMMON:[MCC]     MCC_META_DEFINITION.DAT;2 (RWED,RWED,RWED,RE)

Directory SYS$COMMON:[MCC]     MCC_DISPATCH_TABLE.DAT;1  (RWED,RWED,RWED,R)

Directory SYS$COMMON:[SYSLIB]  MCC_CONTROL_FM.EXE;1  (RWED,RWED,RWED,RE)

Directory SYS$COMMON:[SYSLIB]  MCC_TCPIP_AM.EXE;2   (RWED,RWED,RWED,RE)

Directory SYS$COMMON:[MCC]     MCC_DICTIONARY.DAT;1  (RWED,RWED,RWED,R)

Directory SYS$COMMON:[MCC]     MCC_DEFINITION.DAT;1  (RWED,RWED,RWED,R)

Directory SYS$COMMON:[SYSLIB]  UCX$IPC_SHR.EXE;1    (RWED,RWED,RWED,RE)

Directory SYS$COMMON:[SYSEXE]  UCX$HOST.DAT;1       (RWED,RWED,RWE,RWE)


Protection is also set as ((RWE,RWE,RE,RE) for all of the root directories
show above.

I can't see anything that should indicate a protection problem.....can anyone
suggest anything else that may be wrong?

Any help greatly appreciated.

Al







DECmcc (V1.1.0)


MCC> exit
$ set proc/priv=nobypass

	Check protection for UCX$ACCESS_SHR.EXE. After ensuring that it has
	W:RE protection, check if the following command works from a process
	with only TMPMBX and NETMBX privileges.

	UCX SHOW HOST CDCIS1

	Note that we use raw sockets for ping, so you need SYSPRV before you
	can issue the TEST directive. You also need SYSPRV if you want the 
	SNMP AM to start the event sink and handle snmp traps.

	Rahul

	

Thanks very much....

UCX$ACCESS_SHR.EXE did not have any privelage for WORLD.  

Once I changed this, all worked fine.

Al