2009/2/5 Robert Story <[email protected]>:
> On Tue, 3 Feb 2009 13:13:50 +0530 Pranesh wrote:
> PK>      I am running my agent as the subagent under the root user. If I am
> PK> login as normal user , and do the snmpset operation , it is allowing to 
> set
> PK> the parameter.But my requirement says , it should only set the parameter 
> if
> PK> it is root user ???
>
> The snmp packet does not carry any user information, so this is impossible.

That's not strictly true.
SNMPv3/USM  _does_  involve the idea of "users".
(That's what the 'U' stands for!)


However SNMP users and system users are two completely separate things.
An SNMP user called "fred" is configured separately from a Unix account called
"fred".   They can (and probably should) have two different passwords,  and
could easily be used by two different people.

As Robert says:
> You should use SNMP access control, and not give read-write community/v3
> access to non-root users.

SNMP access control is distinct from Unix-style access control.
Don't confuse the two.

Dave

------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Reply via email to