Hi All,
I'm trying to get v3 access control working.
First, I created a test user:

net-snmp-config --create-snmpv3-user -a "password" myuser

Then I created a config file (I followed the directions in the snmpd.conf
manpage, the FAQ, the tutorial and info found on the mailing lists):

com2sec local localhost community
com2sec mynet 192.168.0.0/24 community2
com2sec mynet 1192.168.1.0/24 community3

group all v2c local
group remote_v2 v2c mynet
group remote_v2 v1 mynet
group remote_v3 usm mynet

view all included .1 80

view remote included  system

#                 context sec.model sec.level match  read   write  notif
access all  ""      v2c       noauth    exact  all    none   none
access remote_v2     ""      any noauth    exact  remote none   none
access remote_v3     ""      usm authpriv    exact  remote none   none


After restarting snmpd, a v2 walk works fine:

mylan:/# snmpwalk -v2c -c community localhost
SNMPv2-MIB::sysDescr.0 = STRING: mylan
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
...

but a v3 does not:
mylan:/# snmpwalk -v3 -u myuser -l authPriv -a MD5 -A password -x DES -X\
password localhost
Error in packet.
Reason: authorizationError (access denied to that object)

What am I doing wrong? Can someone help me out?
Thanks
Rodolfo


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to