Hi Dave,
Thanks for the explanation.
Is there a way to configure different users with different privileges( noauth,
auth & priv ) to be associated
with the same group "operator".
If the above could be done, kindly suggest the procedure.
Thanks & Regards,
Kapil.
________________________________
From: [email protected] on behalf of Dave Shield
Sent: Tue 3/2/2010 6:39 PM
To: Srikapilan Gandhi (WT01 - Telecom Equipment)
Cc: [email protected]
Subject: Re: MIB output given even if snmpv3 user configured with diff
privileges
On 2 March 2010 12:58, <[email protected]> wrote:
> I have configured snmp V3 users as shown below.
>
> snmpd.conf
> -----------------------------------------------------------
>
> access operator "" any noauth exact all none all
> access operator "" any auth exact all none all
> group operator usm user1
> createUser user1 MD5 password
Those four lines are the relevant ones here.
> But my snmpwalk query with "-l noAuthNoPriv" is yeilding output ,
Correct.
The 'group' line puts user "user1" into the group "operator".
The first 'access' line grants read access to the group "operator"
for all requests with security level noAuthNoPriv and above.
So the snmpwalk request matches this access line, and hence succeeds.
I note that you *also* have a second access line for the group "operator",
with access for nuthNoPriv and above. But this is masked by the first
(noauth) line, so doesn't get used.
Dave
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
