>>>>> On Thu, 12 Jan 2006 15:16:40 -0500, [EMAIL PROTECTED] said:

Sorry for the delay.

sasson> Hi all, I have a question that relates to ease of use (ease of
sasson> management) of SNMPv3 passwords.  Every administrator would
sasson> like to change some of the passwords of the users accessing
sasson> the SNMPv3 agent.  Lets say that the situation is that there
sasson> 10 users configured for SNMPv3 all were done using createUser
sasson> commands in the persist file.  This means that all of them
sasson> were changed to the encrypted usmUser in the persist
sasson> snmpd.conf file.

sasson> Now he needs to change the password of only one of
sasson> them... Since one cannot know what entry belong to what user,
sasson> the admin would have to erase all the usmUser entries in
sasson> persist file and re enter the createUser l for all 10 users.

sasson> Is there any way around this besides snmpusm?

The usmUser line is actually fairly decipherable.  It is not
encrypted, it is only in hex.  The second hex string (0x...) in the
line is actually the user name.  It's fairly easy to convert any ascii
user name to hex and check/remove only lines that match that user name
from the file.

-- 
Wes Hardaker
Sparta, Inc.


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Reply via email to