Does SunMC agent need SNMP packages
I'm configuring JASS (Security Toolkit) to run on newly jumpstarted machines and wanted to run the finish script: disable-snmp, but wasn't sure if SunMC needed to have these packages installed in order to run. I currently am at 3.0 but will be upgrading to 3.5. I have not run JASS on our current SunMC agents yet, but they do have these installed? How can I find out what packages SunMC needs?
SUNWsacom
SUNWmibii
SUNWsasnm
SUNWsasnx
[467 byte] By [
KayZeeBee] at [2007-11-26 5:56:34]
# 1
> I'm configuring JASS (Security Toolkit) to run on
> newly jumpstarted machines and wanted to run the
> finish script: disable-snmp, but wasn't sure if SunMC
> needed to have these packages installed in order to
> run. I currently am at 3.0 but will be upgrading to
> 3.5. I have not run JASS on our current SunMC agents
> yet, but they do have these installed? How can I find
> out what packages SunMC needs?
SunMC 3.0 and 3.5 do not need any existing Solaris SNMP packages. SunMC comes with its own SNMP Agents (ps -ef | grep esd | grep agent). In fact most people disable the SNMP daemon that comes with current versions of Solaris ("snmpdx" process) and disable its start script (/etc/rc3.d/S76snmpdx) .. so that SunMC can take over the default SNMP port (161).
Are you removing packages for security reasons? Is your environment critical enough you cannot simply disable unused services (like snmpdx)?
Regards,
Aronek
Standard disclaimer: I am an employee of Halcyon (www.HalcyonInc.com)
# 2
Are you removing packages for security reasons? Is your environment critical enough you cannot simply disable unused services (like snmpdx)?
We are disabling it for security reasons and when we were using a freeware program called Titan it wouldn't signal a failure if the packages were still on the system. Just as long as they were disabled.
But with JASS, when we run the "SNMP disable" script - it signals a failure if the packages are there - even if they are not enabled. I wrote a script that emails us a list of "FAIL"s that JASS finds and unless I actually remove the packages, JASS will signal it as a failure thereby signaling the whole script as being "FAILED".
I'd rather just leave them there, but then I'd have to rewrite all those JASS finish scripts - which I don't want to do.
Karen
# 4
> Isn't Titan owned by Sun? How long has it been
> around and who owns it now?
suposidly no, ages, see http://www.fish.com/titan/
>
> Does anyone still support it?
you can buy commercial support if needed.
it's pretty cool software
i'm trying to re-enable snmp after titan stopped it.
