>>>>> On Wed, 26 Oct 2005 11:13:14 +0200, Thomas Anders <[EMAIL PROTECTED]> 
>>>>> said:

>> 2) you can use localized keys instead of a password.  This is only
>> marginally better, but can be better none the less depending on the
>> architecture of what you're doing (if you use the same localized
>> key everywhere you don't get anything; you have to have truly
>> different keys everywhere which means traps with the same user but
>> different engineIDs/keys or informs with the same engineID (of the
>> inform receiver) but different usernames/keys everywhere.  Whheeeeee

Thomas> Any recommendations on how to best *manage* (store/retrieve)
Thomas> those credentials in a central place? That's IMHO the biggest
Thomas> challenge involved here (once you're done with secure key
Thomas> derivation, that is).

Well, you have 2 options:  configuration files or some central manager
that can create, use and manage USM accounts.

/me feels tempted to plug net-policy's ability to manage USM accounts...

-- 
Wes Hardaker
Sparta, Inc.


-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.
Get Certified Today * Register for a JBoss Training Course
Free Certification Exam for All Training Attendees Through End of 2005
Visit http://www.jboss.com/services/certification for more information
_______________________________________________
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Reply via email to