Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1022716 > unrolled thread

Bug#968992: snmpd service file blocks loading of all MIBS

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#968992: snmpd service file blocks loading of all MIBS Paul Rensing   <agent@cimetrics.com> - 2020-08-25 16:10 +0200
    Bug#968992: snmpd service file blocks loading of all MIBS Salvatore Bonaccorso <carnil@debian.org> - 2020-08-25 16:20 +0200
    Bug#968992: [Pkg-net-snmp-devel] Bug#968992: snmpd service file blocks loading of all MIBS Craig Small <csmall@debian.org> - 2020-08-26 00:10 +0200

#1022716 — Bug#968992: snmpd service file blocks loading of all MIBS

Package: snmpd
Version: 5.7.3+dfsg-5+deb10u1
Severity: normal

Dear Maintainer,

The shipped systemd service file in /lib/systemd/system/snmpd.service *forces* the
environment variable MIBS to be blank. There appears to be no system in place to
override this and allow loading of MIBS.

In older versions, this was set in /etc/default/snmpd; however that file is now ignored.
If I edit /lib/systemd/system/snmpd.service, it gets wiped out during an upgrade (yes, correct behavior).
For now, I have copied it to the /etc/systemd directory, but this seems wrong because
I won't get any subsequent changes to the service file.

I tried using the method "systemd edit snmpd.service" but this did not work; don't know why.

snmpd needs to load MIBS, otherwise it is pretty useless (or at lease unfriendly). I have
never really understood why Debian ships with all MIBS blocked, but at least, it needs a
clear and approved method of undoing that.

-- System Information:
Debian Release: 10.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-10-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_CRAP
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages snmpd depends on:
ii  adduser                3.118
ii  debconf [debconf-2.0]  1.5.71
ii  libc6                  2.28-10
ii  libmariadb3            1:10.3.23-0+deb10u1
ii  libsnmp-base           5.7.3+dfsg-5+deb10u1
ii  libsnmp30              5.7.3+dfsg-5+deb10u1
ii  lsb-base               10.2019051400

snmpd recommends no packages.

Versions of packages snmpd suggests:
pn  snmptrapd  <none>

-- Configuration Files:
/etc/default/snmpd changed:

/etc/snmp/snmpd.conf [Errno 13] Permission denied: '/etc/snmp/snmpd.conf'

-- debconf information:
  snmpd/upgradefrom521:

[toc] | [next] | [standalone]

#1022719

hi

I' not the maintainer but I hope I can give a hint:

On Tue, Aug 25, 2020 at 09:50:04AM -0400, Paul Rensing wrote:
> Package: snmpd
> Version: 5.7.3+dfsg-5+deb10u1
> Severity: normal
> 
> Dear Maintainer,
> 
> The shipped systemd service file in /lib/systemd/system/snmpd.service *forces* the
> environment variable MIBS to be blank. There appears to be no system in place to
> override this and allow loading of MIBS.
> 
> In older versions, this was set in /etc/default/snmpd; however that file is now ignored.
> If I edit /lib/systemd/system/snmpd.service, it gets wiped out during an upgrade (yes, correct behavior).
> For now, I have copied it to the /etc/systemd directory, but this seems wrong because
> I won't get any subsequent changes to the service file.
> 
> I tried using the method "systemd edit snmpd.service" but this did not work; don't know why.
> 
> snmpd needs to load MIBS, otherwise it is pretty useless (or at lease unfriendly). I have
> never really understood why Debian ships with all MIBS blocked, but at least, it needs a
> clear and approved method of undoing that.

The idea here is not to edit the /lib/systemd/system/snmpd.service but
you can create a systemd drop-in file say named:

/etc/systemd/system/snmpd.service.d/overrides.conf

and set there:

[Service]
Environment="MIBS=ALL"

It should not be copied the whole unit file, but rather only this
specific setting you want to override.

For details see systemd.unit(5).

Regards,
Salvatore

[toc] | [prev] | [next] | [standalone]

#1022748 — Bug#968992: [Pkg-net-snmp-devel] Bug#968992: snmpd service file blocks loading of all MIBS

Hi,
  There are a few problems here.

> On Wed, 26 Aug 2020 at 00:00, Paul Rensing <agent@cimetrics.com> wrote:
> snmpd needs to load MIBS, otherwise it is pretty useless (or at lease unfriendly). I have
> never really understood why Debian ships with all MIBS blocked, but at least, it needs a
> clear and approved method of undoing that.
I'm not sure why you think snmpd needs the MIBS.  What feature is
missing without them?

For example here is stock snmpd response.
$ snmpwalk -v1 -c public localhost 1.3.6.1.2.1.1.6
iso.3.6.1.2.1.1.6.0 = STRING: "Sitting on the Dock of the Bay"
Now I agree, the snmp *client* output is pretty hard going. For one,
you need to know the OID and secondly, the response is an OID.

Here is the same snmpd daemon:
$ snmpwalk -m SNMPv2-MIB -v1 -c public localhost sysLocation
SNMPv2-MIB::sysLocation.0 = STRING: Sitting on the Dock of the Bay

You could use -m ALL too. This is much more friendlier.

There are instructions in the file /etc/snmp/snmp.conf and also
instructions in snmp-mibs-downloader on how to enable this for the
client.

 - Craig

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web