-Coders,

I'm (re-)designing an application that processes SNMPv3 INFORMS
from tens of thousands of devices, each of them associated with
a unique usmUser. The credentials get negotiated (by other means)
just before sending the INFORM.

Currently I'm using a stock 5.0.9 snmptrapd, let an external program
maintain the usmUsers in snmptrapd.conf and send a SIGHUP to
snmptrapd on every change. While this works-for-me, it obviously
doesn't scale since snmptrapd restarts way too often (and takes too
much time for it) while not being able to process INFORMs in the
meantime.

Rather, I'd like to add a secure, but simple interface to snmptrapd
that receives a single usmUser line "on-the-fly" and basically just
calls usm_parse_config_usmUser() on it.

What's the best interface for this job? I'd like to implement it
in a way that it can be useful to others, ideally ending up
(optionally) in stock 5.2 snmptrapd.

A snmpUsmMib implementation (like in snmpd) looks overkill for
snmptrapd. A designated admin interface or different backends don't
yet exist. Shall I (really?) use SNMPv3 INFORMs themselves to do
the job?

Your comments are highly appreciated.


+Thomas

--
Thomas Anders <thomas.anders at blue-cable.de>


------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Net-snmp-coders mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Reply via email to