Patch-ID# 111592-01
Keywords: acl security SNMP snmpdx mibiisa mib trap mibcodegen ifSpeed vge FDDI varbinds
Synopsis: Solstice Enterprise Agent 1.0.3: SNMP.
Date: Jun/29/2001

Solaris Release: 2.5.1

SunOS Release: 5.5.1

Unbundled Product: Solstice Enterprise Agent

Unbundled Release: 1.0.3
NOTE: 

SEA 1.0.3 had a common patch for both Solaris 2.5.1 and 2.6. To bifurcate 2.6 
from 2.5.1, patches 111592-01 and 111593-01 were created. This was respin from 
106787-08 and 106872-06 respectively. The patches for 2.5.1 will not be further 
updated as it is no longer supported.

Xref: See patch 106956-xx for SEA SDK

Topic: 

Relevant Architectures: sparc

BugId's fixed with this patch: 4144431 4166235 4171108 4172607 4176076 4178419 4189025 4208419 4211850 4218931 4219323 4224859 4233051 4237139 4256473 4268600 4270182 4320436 4323926 4333417 4345574

Changes incorporated in this version: 4333417 4345574 4166235 4176076

Patches accumulated and obsoleted by this patch: 106874-02

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

   /usr/lib/dmi/dmispd
   /usr/lib/dmi/snmpXdmid
   /usr/lib/libdmi.so.1
   /usr/lib/libdmici.so.1
   /usr/lib/libdmimi.so.1
   /usr/lib/libssagent.so.1
   /usr/lib/snmp/mibiisa
   /usr/lib/snmp/snmpdx
   /usr/sbin/dmi_cmd
   /usr/sbin/dmiget
   /var/snmp/mib/sun.mib
/usr/lib/libssasnmp.so.1

Problem Description:

4333417 trap varbinds with type TimeTicks are skipped 
 
(from 106787-07)
4323926 New fix for bug 4237139	get-next problem
 
(from 106787-06)
4320436 Support ifOperstatus as a link status so state will change when cable is disconnected.
 
(from 106787-05)
4270182 Send auth. trap from SEA agent queried with incorrect comm. string or from invalid manager. 
4256473 Send only one trap.
4268600 Make mibii accessible by localhost only.
4237139 Allows get-next for tabular values to work correctly for snmpdx mib
 
(from 106787-04)
4189025 Allows SEA SDK agents to have string table indices.
4218931 Allows SEA SDK agents to have trap variables that are tabular values.
4219323 Allows SEA SDK agents to report correct tag values in trap PDU.
4208419 Legacy agents like mibissa can have dots in community string names.
4233051 Mibiisa traps now contain correct source address in PDU.
4211850 Mibiisa correctly reports IfSpeed on vge (gigabyte) device.
4224859 Mibiisa correctly reports the MAC addr for FDDI devices.
 
(from 106787-03)
4171108 Unable to use more than 3 indexes in a table.
4178419 mibiisa consumes available swap space.
 
(from 106787-02)
4176076 snmpdx echos unnecessary messages to console
        Also: When manager read a non-existent variable, the error message
	will only be logged if snmpdx is started with the "-d" option.
 
 
(from 106787-01)
4172607 agent deleted from agent table when queried with incorrect 
        read string
4144431  mibissa consuming 50% plus of cpu.
 
(from 106874-02)
4345574 sea 1.0.3 w/patches gets 100% cpu when setting rlim_fd_cur=2048 rlim_fd_
max=4096
 
(from 106874-01)
4166235 Files /var/dmi/db/1l.comp, /var/dmi/db/1l.tbl and /var/snmp/snmpdx.st ar
e
        created 666 after install.
 
4176076 snmpdx echos unnecessary messages to console
 
        Also: When manager read a non-existent variable, the error message
        will only be logged if snmpdx is started with the "-d" option.

Patch Installation Instructions:
-------------------------------- 
Refer to the Install.info file for instructions on using the
generic 'installpatch' and 'backoutpatch' scripts provided with
each patch.  Any other special or non-generic installation
instructions should be described below as special instructions.

Special Install Instructions:
----------------------------- 
IMPORTANT: This patch is not compatible with SDK agents built prior to
patch 106956-03. These agents must be recompiled using mibcodegen from
patch 106956-03 or greater. 
This patch is for SEA version 1.0.3
See SEA web page, if you need to add toolkit sdk (SUNWsasdk package)
http://www.sun.com/solstice/products/ent.agents
 
This patch modifies /etc/snmp/conf/snmpd.conf to include localhost
as a manager. This forces all queries to mib-2 to pass through snmpdx.
To specify a manager list for mibiisa you must create an mibiisa.acl
and specify the hostname. Mibiisa.rsrc must be modified to include
the location of the .acl file. If managers are specified,  snmpdx.acl
must include the hostname of the machine running snmpdx and subagents
built using micodegen must include localhost in the manager list of their
.acl.
 
eg: mibiisa.acl:
 
acl = {
        {
                communities = public, private
                access = read-write
                managers =<hostname> 
        }
}
 
eg: mibiisa.rsrc:
 
resource =
{
        {
                security = "/etc/snmp/conf/mibiisa.acl"
                registration_file = "/etc/snmp/conf/mibiisa.reg"
                policy = "spawn"
                type = "legacy"
                command = "/usr/lib/snmp/mibiisa -p $PORT"
 
        }
 
}
 
To enable the authentication traps, create a trap slot for trapnumber 0 in
snmpdx.acl and specify the hosts where traps should be sent:
 
eg: snmpdx.acl :
 
 
trap = {
{
       trap-community = SNMP-trap
       hosts = <hostname> 
      {
         enterprise = "sun"
         trap-num = 0
      }
}

README -- Last modified date:  Monday, February 25, 2002