[First- this was a mistake, using "reply" instead of "reply to all"]

My product has many GUIs, which all use the same users set.
When someone add user in one of the interfaces, I need to update all
relevant systems. One of them is the snmpd.
I wanted to make sure that I got my options correctly, and that there is
no other better way - and now I understand there is not.


When using the following usage, sending the request with un-encrypted
password, user was generated successfully
snmpusm  -v 3 -u initial -n "" -l authPriv -a MD5 -A nnnn1111 -x DES -X
nnnn1111 0.0.0.0 create new1 initial

when using the following usage, sending the request with encrypted
password (according to what shown in snmpd.conf file) - I get a
"Authentication failure (incorrect password, community or key)" error
snmpusm  -v 3 -u initial -n "" -l authPriv -a MD5 -A
0x23479cade453433f18ee7630f90fe5f1 -x DES -X
0x23479cade453433f18ee7630f90fe5f1 0.0.0.0 create new1 initial

Which means I need to hold the password not encrypted. Am I correct?



-----Original Message-----
From: dave.shi...@googlemail.com [mailto:dave.shi...@googlemail.com] On
Behalf Of Dave Shield
Sent: Tuesday, March 15, 2011 12:06 PM
To: Naama Bar Menachem
Cc: Net-SNMP users
Subject: Re: How to add user without showing non-encrypted password in
conf file

    [ First - *please* don't mail me privately, without copying
     any responses to the mailing list.  I don't have the time
     or inclination to offer private, unpaid, SNMP consultancy.
     Keep discussions to the list, where others can both learn
     and offer advice.  Thanks.   ]


On 15 March 2011 09:43, Naama Bar Menachem
<naama.barmenac...@novelsat.com> wrote:
> Thanks, however the snmpusm application must get a user+password of an
> executing user.
> Therefore I need to hold such user and password, which can be a
security
> problem for me....


Well, if you are looking for a remote solution, using "snmpset"
(or equivalent) then yes - you will need an existing user in order
to send the SET request.
  If you can't talk to the agent in the first place, then you can't
really do anything remotely!

Dave

------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to