> >>> authuser log,execute,net wesx
Dave> That could presumably default to 'authNoPriv'
> It does, in fact, because it's the same parsing code as the rouser etc.
Good - one down.
> >>> authcommunity log onlycold * .1.3.6.1.6.3.1.1.5.1
Dave> (or similar)
> We use the current mechanism. So whatever is allowed now ...
> .... "any" or something like that?
Fine - two down.
Dave> It might also be useful to specify a named view:
> >>> authcommunity -v someView log onlycold [localhost]
> If you want to do that use the regular forms of vacm tokens
That's certainly possible.
It's just that:
view system included .1.3.6.1.2.1
view system included .1.3.6.1.2.25.1
authcommunity -v system read public
feels simpler than having to faff about with the full 4-stage
access directives.
Wes> In my opinion, binding multiple calls together means
Wes> determining which existing views/etc need to be attached to
But that''s what the '-v' option would do.
I wasn't proposing that this should automatically set up the
named views - that's the role of "view".
More a case of:
If a named view is provided, then use it.
Otherwise, set up a dedicated (anonymous) view, and use that.
> quite a bit more work (which is why I didn't go that route for the
> original rocommunity lines).
Wes> ....my question left is do
Wes> you have any issues that you see needing fixed with the current ones?
Probably only one non-trivial one.
What is the relationship between "auth{user,community} and your previous
"setaccess" directive?
Wes> IE, everything else you're saying now is down to extensions to the
Wes> existing old or new ones right?
Right.
I'm *much* happier* with the latest proposals.
There are probably a couple of things that ciould usefully be
added, but I'll wait till Monday, when I can re-synch with
your latest code first.
Have a good weekend.
Dave
first
-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.
Get Certified Today * Register for a JBoss Training Course
Free Certification Exam for All Training Attendees Through End of 2005
Visit http://www.jboss.com/services/certification for more information
_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
